last executing test programs:

1.031257119s ago: executing program 1 (id=2086):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc)
getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
r8 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be14152f3ec6a9c0208000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)

1.030556474s ago: executing program 0 (id=2087):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x6, 0x200, 0x7fffffff, 0x4080, 0xffffffffffffffff, 0xb5f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r4=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000440)={'erspan0\x00', <r5=>0x0, 0x758, 0x40, 0x23, 0x2, {{0x35, 0x4, 0x1, 0x1b, 0xd4, 0x64, 0x0, 0xd7, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x25}, {[@lsrr={0x83, 0x13, 0x68, [@remote, @dev={0xac, 0x14, 0x14, 0x1c}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0x7c, 0x0, 0xc, [0x42, 0x319, 0xef]}, @cipso={0x86, 0x27, 0x3c9025443b9315ea, [{0x0, 0x4, "cf10"}, {0x2, 0xc, "aeb958ca60d77a118c15"}, {0x5, 0x11, "72b043fb5df5c9af70f7e80aa369c3"}]}, @generic={0x83, 0xe, "f909c032f6ae981df33cf995"}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x3, "aa"}, {0x1, 0x7, "97117671da"}, {0x6, 0x6, "1a9d4b3d"}, {0x6, 0x2}]}, @ssrr={0x89, 0xf, 0x7f, [@dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x55, 0x0, 0xa, [0xfffff291, 0xb601, 0x9e, 0x200, 0x400000, 0x8, 0x9]}, @rr={0x7, 0x17, 0xf, [@private=0xa010101, @remote, @multicast1, @empty, @rand_addr=0x64010101]}, @generic={0x88, 0x3, 'q'}]}}}}})
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1, <r7=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x10, 0x0, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xb}, 0x50)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r11, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xa0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x9, 0xc, "ae29e7f38b"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d178a1b}, @NFTA_HOOK_DEV={0x14, 0x3, 'rose0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x570cefcd}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000054}, 0x8800)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r12)
r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r14, @ANYRES32=r13, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r14}, &(0x7f0000000000), &(0x7f00000002c0)=r12}, 0x20)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000940)='./file0\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x24, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4c}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x921}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xad, &(0x7f0000000380)=""/173, 0x41000, 0x3, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xf, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e00)=[r6, r7, r8, r9, 0xffffffffffffffff, r11, r14, r15, r16, r17], &(0x7f0000000e40)=[{0x4, 0x4, 0x9}, {0x3, 0x1, 0xc, 0x9}, {0x4, 0x4, 0xf, 0x8}], 0x10, 0x7}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x468, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x43c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "116dc9611895234599d9b7808ac770cd4f3c763befa2cb1da8934ae025bf8290ffe4d087f911eed1f18ee63392442208044261045530611e38cfc83a413a1ef1fc49563dba72dbec1f5a63f2077fa849e571157b09b1f89848f1d406068970cb245c47f46e9a77b9d5bd3aa75390d5ff281a1ecc0aeb7ec6437106f4675c99d313804b769e0a8cefaff00cd3d554f66830f33723abe6e0b97842e4402c"}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "260ed8ddf7438b9f5d85e3048a71c18c56d228f300000000"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "04a361a29fa4a177092873e599095b5a04c0c373626825c69b039f2d5121d73b767c533cbcc0eb7d2d72ca3accdc9134843d9cbe96a2dcedce7b58652e233a11a2e4241b04f9437fec0a06dc34d71eeca97b5b44b2b7c2b56005ceb549ac513873"}, @NFTA_SET_ELEM_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "722b2fe68f00a7e3851cc8ad8b35abc2818111201fff9e9392d57ed7962d55724b643b8e389b316306dd561520a7a3d221b10268c6f7af11742fa98c04d3b64f0424bc2e0733008f3b2954b45df3abf29e9b478e928526ec98339aca7f60406b8f7396b720cc527cd8c2305edd121f7a8e4f44aa3ec75d5f24d941745df6ccbb56ee13d92a56a22bad2d2d2bf5b29941cf7ad20a884001be6f9211feff91af6118201dd19212fabe69939685fa07eabdad9af7eedfe1a1ceb0bdb16b4ab0"}, @NFTA_DATA_VALUE={0xa9, 0x1, "a836630dc39a2d0380ad357b5977907e1cac1e65c07c440259617a9842bac01c62261a37e68d618dd62e01cca6b4e10562097eddf0306070f203be1c32be07910710bf755cb7a717b3f91de0785d2718ec52f5aec25f921dbef9fe0cdb16a456b9f9b71f1e59464c27d3a39161ee305936cce51189c65fe61505782bcb339fd35a54dde3a4b951b1914734bba43586db67d7fc3ad0754845b0a64ae8ac117733adede919f4"}, @NFTA_DATA_VALUE={0x9a, 0x1, "bb74416c2e0012a058836233fb823a5a13e929c6fd80fb0204b3b5ae409c771599c6416cd91d9b5c979309c7003f76fd10e0da06c1b9794cd494c3887a2ef2c9d20dfe00d749d5f73aeb7fdef8363c0f8fe3b2105802edba7ec5f34950c8d093e672361746fb7a5e56a4ae4bd0ffa411b8a4156bb267"}, @NFTA_DATA_VERDICT={0x50}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @reject={{}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4ec}}, 0x40000)

900.818519ms ago: executing program 0 (id=2088):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="db79bb9e", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)="948d2ed2253c", 0x6}, {0x0}], 0x2}}], 0x2, 0xc00c480)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="45dd402bac7108b8cb8fa3eec709c6df58fd72fa5f541dceafae8059d20aedbe59a216ba48dc1c9656f24e48928687a88e01ec6f45623e92c49f680b9dd95923222901f9dbeda528276b55d6e37388372c045e12dd41629245240cd52b7e05967030ee05e6a0e381d7a2aa412f5d167f8522dd2f59a2e0e30e0a1094ceb27b510f16e9ef52fa1177cbe6ac9aacb4341563d3431e07225c4e52", @ANYRES64=r3, @ANYBLOB="b24d750031ea55f2d25df816d6235c0500000000000000e3a4685e0db99c31bb0ec38b524f6fe567ff64fb83e618b9910a70dbeb0cc87132a79353c3f9f6b0d0f3e9ae572f4ef518ca52eac12cbdd4ecd94e3b8c1697e6d1bc7c2f15e64a456e64597806e749ef25bf4aecd02ba99bfb8b509343ffe2592f823b71b8462fd63841fc1496fa4b", @ANYRESDEC=0x0, @ANYBLOB], 0x50}}, 0x48000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000040)={0x80000000})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}}, 0x20}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r11 = socket(0x8000000010, 0x2, 0xc)
write(r11, &(0x7f00000002c0)="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", 0xfc)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r12, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x41040, 0x0)

899.564345ms ago: executing program 1 (id=2089):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000140)=0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0xfffffffffffffe67, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0x1, 0x70bd2e, 0xffffffff}, 0x14}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x4, 0x0, {{@in6=@mcast2, @in6=@remote}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x2, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x1, 0x3}, 0x10, 0x4000, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4}, 0x2000040)

896.334349ms ago: executing program 1 (id=2090):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x9, 0x4, 0x5, r0, 0x49d, '\x00', 0x0, r1, 0x3, 0x4, 0x4}, 0x50) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r3=>0x0}) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x80000000}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000380)=""/192, 0x3c, 0xc0, 0x1, 0x8}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @generic={0x2, 0x5, 0x3, 0x76, 0xffff4115}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x0, 0x2, 0x1, 0x4, 0x50, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x9c, &(0x7f0000000240)=""/156, 0x40f00, 0x10, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0xff, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r2, r2, r2, r0], &(0x7f0000000540)=[{0x2, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x8, 0x3}, {0x5, 0x3, 0x4, 0x7}, {0x4, 0x4, 0x9}, {0x2, 0x4, 0x0, 0x6}, {0x1, 0x5, 0xd, 0x4}, {0x5, 0x2, 0x8, 0x8}]}, 0x94) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, r6, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008010}, 0x200488c1) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2, <r7=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pB    \x00'}, 0x20) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r9, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x140f, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4840) (async)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000b80)={<r11=>r5, 0xfff, 0xc61c, 0x40})
ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000000bc0)={0x3, r11}) (async)
getsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f0000000c00)={@mcast2, <r12=>0x0}, &(0x7f0000000c40)=0x14)
setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000c80)={0xffffffffffffffff, 0x0, 0x8, r12, 0x8}, 0xc) (async)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000cc0)={@multicast2, @multicast1, 0x1, 0xa, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, @local, @empty, @multicast2, @rand_addr=0x64010102, @rand_addr=0x64010100]}, 0x38) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d00), r8) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d80)={'wpan4\x00', <r13=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008d4}, 0x800) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r8)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x124, r14, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14a30c1b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0xe}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7317b118}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1048dfba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36e1a92b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66f6552c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2341164e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2985b64e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r15, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r14, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000014)
r16 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r16, 0x0, 0x80, &(0x7f00000012c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100000000, 0x286, 0x200, 0x9, 0xfffffffffffffffa, 0x2]}, &(0x7f0000001340)=0x78)

811.879072ms ago: executing program 1 (id=2091):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', <r5=>0x0})
sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'macsec0\x00', {0x2}, 0x6})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@getqdisc={0x24, 0x26, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xa, 0xa}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000805}, 0x4c000)

731.526607ms ago: executing program 0 (id=2092):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1000000007140100000000000000000038841ec60c9fa6fee67921cb5dc36b8059f2b3aec70383b6371c91986a23b346db405022c2621eb247377a45e04f1acc3cdf74184c337b6aabb3fcb51698eceb362712e1219704e71094a5dddab92669175af5217c09e431"], 0x10}}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

729.982408ms ago: executing program 1 (id=2093):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000500)={0x5, 0x6, 0x8, 0x8, 0x0, 0x80000000000002, 0x0, 0x8}, &(0x7f0000000200)={0x9, 0x6, 0x7fff, 0x22c, 0x5, 0x0, 0x411, 0x7}, &(0x7f00000001c0)={0x7ffffffc, 0x9, 0x81, 0xa1, 0x3, 0x2, 0x1, 0x7}, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc8]}, 0x8})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

729.095692ms ago: executing program 0 (id=2094):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
accept4(r1, &(0x7f00000003c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x80, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

541.32004ms ago: executing program 1 (id=2095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000ac0)=""/62, 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x4, 0x400122e0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x9}}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf4, 0x400, 0x8001, 0x0, 0xffffffff, 0x401, 0x3}}, {0xa, 0x2, [0x2, 0x6, 0xffff]}}, {{0x1c, 0x1, {0x3, 0x8, 0xb, 0xa, 0x1, 0x10001, 0xfffffffd, 0x7}}, {0x12, 0x2, [0xfffc, 0x4, 0xfff9, 0x8, 0x1, 0x7, 0xfffc]}}, {{0x1c, 0x1, {0x3, 0xa, 0x5, 0x7, 0x1, 0x9, 0x7f, 0x2}}, {0x8, 0x2, [0xd8, 0xfff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xc0}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_SEL={0x74, 0x5, {0x6, 0x1, 0x6, 0x5, 0xc9f0, 0x5, 0x2, 0xb4, [{0x6140ba75, 0x1, 0x0, 0x8}, {0x7, 0x2, 0x1, 0x10001}, {0xde, 0xffffffff, 0x2, 0x20b}, {0x4, 0x3, 0x0, 0xfffffff9}, {0x40, 0x7, 0x28, 0x9}, {0x9, 0x1f, 0x3ff, 0x200}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000014000100020000000000000000000078174ee4e16d47f7782e29f530e00a48000000090a010400000000000000011a1abb0008000a40000000000900020073797a3200000000090001000000003000000000080001c0000006000400098008000340000000a4140000001000"], 0x70}}, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000000400858000000000000000000000000000d900fb2e6b36b5bd4700563e629c0800000000000080511a1e3fbeacce4e7043e4dd415078de8a089ed2e3550c5120a504c259c6a9ee687222ad5aa1393a32d654506f0e8c618a8e4c031432c3750823edc4863f4a9ec41a4722c4f4b7287e4ce8c75843f86570190e"], 0x18}}, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r12, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="04000dbd7000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x4000080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r13 = socket(0x15, 0x5, 0x0)
getsockopt(r13, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

540.557416ms ago: executing program 0 (id=2096):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async)
socket(0x10, 0x80003, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x9)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) (async)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff299bf3179b9d80a2ffb702000008000000b703001e5a00000085000000060000004794b95ae8"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x290}, 0x0, 0x0) (async)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x60, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) (async)
socket$inet_sctp(0x2, 0x5, 0x84)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

481.270891ms ago: executing program 0 (id=2097):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0xc, r1})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r2=>r0, 0x7, 0x1, 0x7})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10)
r4 = socket(0x15, 0x4, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000200)={'syztnl1\x00', <r5=>r1, 0x7, 0x1, 0x0, 0xffffffff, {{0x7, 0x4, 0x1, 0x30, 0x1c, 0x67, 0x0, 0x80, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6, 0x1}]}}}}})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"463183e421c79bbcdc2230234fcba8a7", <r6=>0x0, 0x0, {0x7, 0x40}, {0x0, 0xffff137b}, 0xd3, [0x4de, 0x5, 0x5, 0x3, 0x9, 0x6, 0x8a24, 0x1000, 0x4, 0x2, 0x3, 0x100000000, 0xffffffff, 0x8, 0x2b6, 0x4]})
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000380)={<r7=>0x0, 0x8, 0x2})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000780)={{}, r6, 0x4, @unused=[0x0, 0x803, 0x3c5a, 0x721], @devid=r7})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001940)={r2, &(0x7f0000001780)="b2d0e3ac32f26dc1a9073b1d826304b7f0945f0f3fd5c46932c0e3528fa529881e4f28f5288250c599a353490d49c29205a2a23c8fd6cbeb7cd8269198bace41701640622aec73a07414550434a63b5d60683cceb61dbaeca05f6bef0f225138915f02d10fc6e9ddce950abc0bbf7c34ee27755da3e143187ee81adf6ea2b8039b841825aeb8fb10e8418f2453d3e6743527aa14499ea393e51f1decc09c61045b45880bd9dcf9b25564d0b25eee255d89cb3f58d17f5d6d1a5bdefe26091d66fd16d77809115c4a92d6c7cce3469754fa0e6f2a4b35012d71e6ee7e6e0568d27adc3d3802cb25147dcc4e0b459436c6f94e125acc", &(0x7f0000001880)=@buf="d72e456cbe59f572ee65c760b501ec9368d921ed70f7c602c5e85bc250ba9de47ef89e5c6aa63a8c83fd1c2d7cb2253329ad9eafbcba31b1e042045e040731bcfeb35426ee263f609fc72f18ae4b392cb7197a816d64c1e4119e30bf5622df393f9f0f74b23543785a57143388974d22387d341d9d3215aa86a53454f4e8b1798a722dec2e0e47dc958b8ee578de24954a0b2b219075b00b5e76", 0x4}, 0x20)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000001980))
ioctl(r4, 0x10001, &(0x7f00000019c0)="070f895a9c3fac1716499b3df3bb6e8111807ee9ed73428c50a4641714ead7fc7a5c120ebe430fe1e36814907fd51c986dcf9573ce537d211ccd50ef8bec6a2d9ea485d85a724cb35542396ca66d722d308f7355451ccb1e699a4c8bc51a284e5ac93881a23c882a4550a1af5840ca79345e0a01b74b8c1cc571326574c00fb5323696ee27f51865847a8273dc27bd80e0826ac4810edf8ae6eccba05cb41d1bffec9e1165e59c")
recvfrom$unix(r2, &(0x7f0000001a80)=""/4096, 0x1000, 0x10003, &(0x7f0000002a80)=@file={0x0, './file0\x00'}, 0x6e)
r8 = accept$inet6(r0, &(0x7f0000002b00)={0xa, 0x0, 0x0, @private2}, &(0x7f0000002b40)=0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000002b80)=0x2, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002c40)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002d80)={&(0x7f0000002bc0), 0xc, &(0x7f0000002d40)={&(0x7f0000002c80)={0xb8, r9, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x290}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd6a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x14d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x118}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x40040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002dc0)='./cgroup/syz0\x00', 0x1ff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000004200)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000002e40)={0x137c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x410000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x571e5de6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, './cgroup/syz0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "3d8ae77c251615df4440bdac5f0114e470ab7c700e30e4a4eddd22fa87fbc1c74915cf903f137980a5ad6ce4104e84d0b234ce11ef74c0b832bd38a210206a4779726f8b65235c15e7ba8815e5e6ca3329db1152feeb3b195dd611655ea5f656fa84c5655a5987d8f6876bff0ec05500b3794ac71ca7c5bf41bada621a7decefc109c55ca6a19420b3ce93ca63f7671e15f865b591644172b1a78a8740a846171650d8bbe84ffdb416e95abd162ec18510fe97487e2280a50bb8e973ea4c34db8e716b8ebd09848fbcba2294a37da2e7d63556e67ccabfaf0adb3dbea033587d750ca0b4ff9e9a"}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "08e589255a268dd7fccd201ad2b92db9eeeb0c2b89549f4b3780a6e45d41"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc5, 0x5, "9a7ae1059f95fddbc912b80de2687948dc7110c35ba21528ecef1d283e255c899d6155cbf09041e62f0d6dd264b16f7bc2d2276c4e7093d3b7d3ca4da2edbcc023dff7c216ed3e3c43589a582de21d8872995a043ce7d96440bf36202f1d9804208368d6c8d22fbd31a60e61e1bd11380686119211a83f35c680e286f718db0f73dba9451f76e8a3cec496b02bd39ec0d478eb5aca8c09f4a7d117763e3d0f630069562dea9e745e5dab0dcace3be23a279659d0c916b9a9ab3bd870ad2a29c857"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x4044011}, 0x2000)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000004240)={<r11=>r8, 0x5, 0x5485a292, 0x2})
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000042c0), r4)
sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f00000044c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004480)={&(0x7f0000004300)={0x168, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5955}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdc2d}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x919}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2fe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0xa850}, 0x880)
syz_genetlink_get_family_id$batadv(&(0x7f0000004500), r4)
accept4$unix(r4, &(0x7f0000004540), &(0x7f00000045c0)=0x6e, 0x400)
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
ppoll(&(0x7f0000004600)=[{r13, 0x60b0}, {r4, 0x1400}], 0x2, &(0x7f0000004640)={0x77359400}, &(0x7f0000004680)={[0x8]}, 0x8)

231.155721ms ago: executing program 2 (id=2098):
r0 = socket(0x10, 0x80002, 0x2)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendto(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xcd, 0x41, &(0x7f0000000180)="dc178ff47b16efcc00fee4f6111294fcab3acb351835ae3917ef0d6b4d9f34faee76e9843310b14fd526fecbf05241ab29d2053dde329d8de9d80fd08217eae61e8dc444bd47d1e0cf2a9eb1b8cf4a8894523077397d11f4d3e629bd3c8765367c4689fdcb24a99b3c57da352855c9c566f8e7421678bf098a18ab65c8526b45729fba1833b0230f11ef47e5a7a5960fc0e8bf393d1a3b04c1d653bfcedab21f1107b35d4c15743ef7a31037b1afe452a8556d4dbd8679fb342d7990e4018fc2a6eeb4cd1e49994978a6c0516b", &(0x7f0000000000)=""/65, 0xdc9, 0x0, 0xb9, 0xdc, &(0x7f0000000280)="c911b64b43c0d37f419d224becbec1d41107a6895c51ada970656b09952c8ab8882434f0b5f37e134c27746dc845e348e09e118dd8364a5207ad982d50016b37aefaae86a99ca619120031d44f7495d6540d10405134a49309630bb2dc25b95b089d4a2d9361947869dcdcf6071d8d57556780356a53e4c01fb292d8b11c7a28264775858074d47f8558f386c57fe197cc380994be1100a3d24f0e5e6cb8c0a2847f14af2efa84d0e8d5ebdea7b2514af5cb06c9822d0fa4c0", &(0x7f0000000340)="45377dc862838e1207b010e61cba25f62018d2f0f5a457bf05441f3cf3efb299603f8381afe452f097db873b057aafd0e97d4f261b9a14f5598266959dcb57c2c96510bc846d3a9b8f609fa1c9645621d31e5e156282b1ca8f10f10b036e6216aec27c17231daef42bbfa2a5768827021c96bec4e7f28337174604acb0b1efacd589bc4b807badbfc47d77deea901abb9d34d0d2795ef9bc3f8b4cb07a11302bd0ef1d7ecf4d802ef366df5361a52578b15f482d9fd0f5fbfd304b0cd41c36ea5271bde6a118afa802466b74b49bc882a4b11b5f1e385a0a822caf9f", 0x3, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0)

182.04215ms ago: executing program 2 (id=2099):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async, rerun: 32)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x3c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_FILTER={0xfffffffffffffccf, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x59}}, 0x0)

181.006962ms ago: executing program 2 (id=2100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="4e35afdc086c", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "1a0604", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x12}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4000005, {{0x3, 0x2, 0x4, 0x3, 0x0, 0x0, 0x1, 0x6}, 0x2, {0x6, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x7c, &(0x7f0000000000)={@random="4e35afdc086c", @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "1a0604", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x5]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x12}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4000005, {{0x3, 0x2, 0x4, 0x3, 0x0, 0x0, 0x1, 0x6}, 0x2, {0x6, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0)

111.956939ms ago: executing program 2 (id=2101):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e80"], 0x2c}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
unshare(0x22020600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
recvfrom$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r5, 0x0, 0x4004)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)

52.13597ms ago: executing program 2 (id=2102):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x32, 0x4, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4008840}, 0x44000)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES64=r3, @ANYBLOB="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"], 0x50}}, 0x4)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

0s ago: executing program 2 (id=2103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xffd, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000400000000000100181100000caddbb94c180a8cd93d66f2566b3150d858e2cbd3b7f8a474bb90fec84f0d3cba1cc11b20abd25f1b217ff3d4b69397f56f5b4bab1183e7ca94c94d51caf4c534d916896bdf9e9a06f95ac186dcd4df5c7ffba7c221f4c1191c057ffc129a22ebc33a31e53fc5aa49f00685344d6e4e2aa7d7a2", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000400000000000100181100000caddbb94c180a8cd93d66f2566b3150d858e2cbd3b7f8a474bb90fec84f0d3cba1cc11b20abd25f1b217ff3d4b69397f56f5b4bab1183e7ca94c94d51caf4c534d916896bdf9e9a06f95ac186dcd4df5c7ffba7c221f4c1191c057ffc129a22ebc33a31e53fc5aa49f00685344d6e4e2aa7d7a2", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10) (async)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000017000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000017000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x8c4)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x20, @local}, 0x2, {0x2, 0x4e23, @multicast1}, 'wg1\x00'})
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000180)={0x1, 0xa, [@empty, @random="711fe152e567", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @multicast, @empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="76061125c72d", @random="e7086f647aa5", @multicast]}) (async)
ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000180)={0x1, 0xa, [@empty, @random="711fe152e567", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @multicast, @empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="76061125c72d", @random="e7086f647aa5", @multicast]})
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x20, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r11, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x1, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc045}, 0x8004)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

cuous mode
[  143.120790][ T8307] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  143.169597][ T8312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.598'.
[  143.390131][ T8331] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  143.466714][ T8336] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[  143.503224][ T8336] veth5: entered promiscuous mode
[  143.609030][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'.
[  143.864257][ T8362] ipvlan0: entered promiscuous mode
[  143.867138][ T8362] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  143.870356][ T8362] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  143.937687][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'.
[  144.181784][ T8392] netlink: 'syz.1.621': attribute type 13 has an invalid length.
[  144.184768][ T8392] netlink: 'syz.1.621': attribute type 17 has an invalid length.
[  144.188868][ T8392] erspan0: left allmulticast mode
[  144.201680][ T8392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.293817][ T8403] netlink: 'syz.0.623': attribute type 6 has an invalid length.
[  144.301704][ T8403] netlink: 'syz.0.623': attribute type 12 has an invalid length.
[  144.437226][ T8415] netlink: 'syz.2.626': attribute type 2 has an invalid length.
[  144.513041][ T8418] netlink: 'syz.0.629': attribute type 7 has an invalid length.
[  144.515917][ T8418] netlink: 'syz.0.629': attribute type 8 has an invalid length.
[  144.623077][ T8422] netlink: 'syz.0.631': attribute type 13 has an invalid length.
[  144.626185][ T8422] netlink: 'syz.0.631': attribute type 17 has an invalid length.
[  144.733474][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.742230][ T8422] 8021q: adding VLAN 0 to HW filter on device team0
[  144.749040][ T8422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.958398][ T8436] syzkaller0: entered promiscuous mode
[  144.960270][ T8436] syzkaller0: entered allmulticast mode
[  146.265964][ T8448] IPv6: sit2: Disabled Multicast RS
[  146.417472][ T8458] netlink: ct family unspecified
[  146.419125][ T8458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.433337][ T8456] tipc: Resetting bearer <ib:ip6gre0>
[  146.493173][ T8456] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  146.496826][ T8456] bond1: left promiscuous mode
[  146.498740][ T8456] bond1: left allmulticast mode
[  146.501451][ T8456] gtp0: left promiscuous mode
[  146.511865][ T8456] veth3: left promiscuous mode
[  146.514678][ T8456] tipc: Resetting bearer <eth:syzkaller0>
[  146.518989][ T8456] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  146.521898][ T8456] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  147.507069][ T8503] __nla_validate_parse: 18 callbacks suppressed
[  147.507089][ T8503] netlink: 60 bytes leftover after parsing attributes in process `syz.2.654'.
[  147.759949][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[  147.814798][ T8514] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.657'.
[  147.821812][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[  148.054147][ T8529] vlan2: entered promiscuous mode
[  148.056922][ T8529] bond0: entered promiscuous mode
[  148.058775][ T8529] bond_slave_0: entered promiscuous mode
[  148.065067][ T8529] bond_slave_1: entered promiscuous mode
[  148.067376][ T8528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.071315][ T8529] dummy0: entered promiscuous mode
[  148.075374][ T8529] vlan2: entered allmulticast mode
[  148.077744][ T8529] bond0: entered allmulticast mode
[  148.081157][ T8529] bond_slave_0: entered allmulticast mode
[  148.083852][ T8529] bond_slave_1: entered allmulticast mode
[  148.087186][ T8529] dummy0: entered allmulticast mode
[  148.125434][ T8536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'.
[  148.192738][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'.
[  148.195920][ T8544] vlan0: entered promiscuous mode
[  148.199337][ T8544] syzkaller1: entered promiscuous mode
[  148.201656][ T8544] syzkaller1: entered allmulticast mode
[  148.347347][ T8551] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.669'.
[  148.374406][ T8554] netlink: 124 bytes leftover after parsing attributes in process `syz.1.670'.
[  148.423880][ T8563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.427925][ T8563] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  148.432596][ T8563] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  148.435819][ T8563] tipc: Resetting bearer <eth:syzkaller0>
[  148.474819][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[  148.485017][ T8570] xt_socket: unknown flags 0xd0
[  148.528158][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[  148.538690][ T8575] validate_nla: 6 callbacks suppressed
[  148.538706][ T8575] netlink: 'syz.2.673': attribute type 6 has an invalid length.
[  148.555416][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.559841][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.563981][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.567302][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.604500][ T8579] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.650301][ T8582] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  148.662621][ T8582] tipc: Enabled bearer <udp:syz0>, priority 10
[  148.672580][ T8585] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.728317][ T8591] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[  148.923810][ T8607] ip6gretap0: Device is already in use.
[  148.947424][ T8609] bond4: entered promiscuous mode
[  148.949319][ T8609] bond4: entered allmulticast mode
[  148.952938][ T8609] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.045605][ T8617] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  149.402541][ T8653] syzkaller0: entered promiscuous mode
[  149.404479][ T8653] syzkaller0: entered allmulticast mode
[  149.670772][ T5908] tipc: Node number set to 143549989
[  150.158181][ T8664] team0: No ports can be present during mode change
[  150.174730][ T8673] netlink: 'syz.2.702': attribute type 16 has an invalid length.
[  150.346529][ T8682] netlink: 'syz.1.707': attribute type 10 has an invalid length.
[  150.356224][ T8682] bond0: (slave dummy0): Releasing backup interface
[  150.359648][ T8682] dummy0: left promiscuous mode
[  150.365181][ T8682] dummy0: left allmulticast mode
[  150.369877][ T8682] team0: Port device dummy0 added
[  150.573099][ T8690] tipc: Resetting bearer <eth:syzkaller0>
[  151.042131][ T8745] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[  151.043866][ T8748] netlink: zone id is out of range
[  151.044556][ T8745] netlink: 'syz.1.720': attribute type 2 has an invalid length.
[  151.044566][ T8745] netlink: 'syz.1.720': attribute type 8 has an invalid length.
[  151.066265][ T8748] netlink: zone id is out of range
[  151.074569][ T8748] netlink: zone id is out of range
[  151.076768][ T8748] netlink: zone id is out of range
[  151.084458][ T8748] netlink: zone id is out of range
[  151.086259][ T8748] netlink: zone id is out of range
[  151.088003][ T8748] netlink: zone id is out of range
[  151.089694][ T8748] netlink: zone id is out of range
[  151.093356][ T8748] netlink: zone id is out of range
[  151.313015][ T8768] netlink: 'syz.2.726': attribute type 13 has an invalid length.
[  151.315705][ T8768] netlink: 'syz.2.726': attribute type 17 has an invalid length.
[  151.549683][ T8791] veth9: entered promiscuous mode
[  151.575192][ T8792] veth9: entered promiscuous mode
[  151.893686][ T8817] netlink: 'syz.0.734': attribute type 9 has an invalid length.
[  151.992637][ T8836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.001999][ T8836] vxcan0: entered promiscuous mode
[  152.142697][ T8851] tun0: tun_chr_ioctl cmd 2147767521
[  152.321352][ T8870] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  152.382779][ T8866] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.402233][ T8879] 8021q: adding VLAN 0 to HW filter on device bond6
[  152.413601][ T8866] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  152.418433][ T8866] bond4: (slave macvlan0): Enslaving as a backup interface with a down link
[  152.444532][ T8879] bond6: (slave veth5): Enslaving as an active interface with a down link
[  152.452378][ T8866] bond2: (slave erspan0): Releasing active interface
[  152.460483][ T8866] ip6gretap1: entered promiscuous mode
[  152.475474][ T8879] macvlan2: entered promiscuous mode
[  152.477495][ T8879] macvlan2: entered allmulticast mode
[  152.479998][ T8879] bond6: entered promiscuous mode
[  152.482958][ T8879] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  152.486274][ T8879] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  152.501049][ T8879] bond6: left promiscuous mode
[  152.541504][ T8883] 8021q: adding VLAN 0 to HW filter on device bond7
[  152.546636][ T8883] bond0: (slave bond7): Enslaving as a backup interface with a down link
[  152.675864][ T8888] syzkaller0: entered promiscuous mode
[  152.677949][ T8888] syzkaller0: entered allmulticast mode
[  153.162722][ T5237] Bluetooth: hci2: command 0x0419 tx timeout
[  153.939428][ T8914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  154.058382][ T8924] batadv_slave_1: entered promiscuous mode
[  154.062520][ T8927] __nla_validate_parse: 98 callbacks suppressed
[  154.062534][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'.
[  154.073481][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[  154.101844][ T8927] batadv_slave_1 (unregistering): left promiscuous mode
[  154.104218][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.263469][   T33] audit: type=1804 audit(1758644649.797:2): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.771" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1265 res=1 errno=0
[  154.274205][   T33] audit: type=1800 audit(1758644649.797:3): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.771" name="cgroup.controllers" dev="tmpfs" ino=1265 res=0 errno=0
[  154.314598][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'.
[  154.317301][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.771'.
[  154.395489][ T8942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'.
[  154.466245][ T8945] validate_nla: 69 callbacks suppressed
[  154.466258][ T8945] netlink: 'syz.1.774': attribute type 3 has an invalid length.
[  154.472985][ T8945] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.774'.
[  154.589213][ T8949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.776'.
[  154.648836][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  154.904084][ T8956] netlink: 165 bytes leftover after parsing attributes in process `syz.1.779'.
[  154.963752][ T8959] bond2: (slave erspan0): Releasing active interface
[  154.966125][ T8959] ip6gretap1: entered promiscuous mode
[  154.976603][ T8959] team0: Port device dummy0 removed
[  154.980246][ T8959] bond0: (slave bond_slave_0): Releasing backup interface
[  154.983715][ T8959] bond_slave_0: left promiscuous mode
[  154.986203][ T8959] bond_slave_0: left allmulticast mode
[  154.989938][ T8959] bond0: (slave bond_slave_1): Releasing backup interface
[  154.997768][ T8959] bond_slave_1: left promiscuous mode
[  155.000866][ T8959] bond_slave_1: left allmulticast mode
[  155.006899][ T8959] team0: Port device team_slave_0 removed
[  155.017203][ T8959] team0: Port device team_slave_1 removed
[  155.019745][ T8959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.025244][ T8959] bond2: (slave ip6gretap1): Releasing active interface
[  155.027919][ T8959] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 4e:b3:80:84:1d:93 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  155.034665][ T8959] ip6gretap1: left promiscuous mode
[  155.039603][ T8959] bond2: (slave veth3): Releasing active interface
[  155.044833][ T8959] bond6: (slave veth5): Releasing active interface
[  155.072453][ T8959] netlink: 'syz.1.780': attribute type 10 has an invalid length.
[  155.075831][ T8959] bond0: (slave wlan1): Opening slave failed
[  155.083279][ T8959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.086430][ T8959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.143794][ T8965] syzkaller0: entered promiscuous mode
[  155.146227][ T8965] syzkaller0: entered allmulticast mode
[  155.265605][ T8969] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  155.268137][ T8969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.784'.
[  155.819830][ T9010] netlink: 'syz.1.796': attribute type 9 has an invalid length.
[  156.445563][ T9022] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.449323][ T9021] IPVS: stopping backup sync thread 9022 ...
[  156.730925][ T9037] netlink: 'syz.0.805': attribute type 10 has an invalid length.
[  156.778438][ T9042] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[  156.790183][ T9042] team0: Port device geneve0 added
[  156.792796][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.795749][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.802338][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.807132][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.975702][ T9083] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  158.170778][ T9086] nbd2: detected capacity change from 0 to 63
[  158.183616][ T9088] bond8: entered promiscuous mode
[  158.185307][ T9088] bond8: entered allmulticast mode
[  158.187419][ T9088] 8021q: adding VLAN 0 to HW filter on device bond8
[  158.192828][   T55] block nbd2: Receive control failed (result -104)
[  158.313152][ T9093] netlink: 'syz.2.823': attribute type 10 has an invalid length.
[  158.487706][ T9100] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  158.492741][ T9100] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  158.671144][ T9109] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.676291][ T9111] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  158.681347][ T9111] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  158.746799][ T9124] netlink: 'syz.0.833': attribute type 9 has an invalid length.
[  159.178239][ T9165] __nla_validate_parse: 15 callbacks suppressed
[  159.178255][ T9165] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.844'.
[  159.185659][ T9165] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  159.192683][ T9165] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.844'.
[  159.202740][ T9168] geneve2: entered promiscuous mode
[  159.209690][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.221462][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'.
[  159.225263][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.229076][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.243342][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.284959][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'.
[  159.291263][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'.
[  159.329921][ T9175] macsec1: entered promiscuous mode
[  159.333263][ T9175] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  159.335599][ T9175] macsec1: entered allmulticast mode
[  159.337295][ T9175] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  159.416384][ T9183] trusted_key: syz.2.853 sent an empty control message without MSG_MORE.
[  159.531337][ T9196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  159.572873][ T9200] validate_nla: 1 callbacks suppressed
[  159.572886][ T9200] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  159.577525][ T9200] netlink: 244 bytes leftover after parsing attributes in process `syz.0.859'.
[  159.638170][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'.
[  160.395924][ T9209] netlink: 'syz.2.861': attribute type 13 has an invalid length.
[  160.399028][ T9209] netlink: 'syz.2.861': attribute type 17 has an invalid length.
[  160.410975][ T9209] net_ratelimit: 356 callbacks suppressed
[  160.410983][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.448872][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  160.453491][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  160.456571][ T9218] netlink: 'syz.1.863': attribute type 13 has an invalid length.
[  160.464389][ T9218] netlink: 'syz.1.863': attribute type 11 has an invalid length.
[  160.485791][ T9220] netlink: 'syz.2.864': attribute type 10 has an invalid length.
[  160.491382][ T9220] : (slave dummy0): Releasing backup interface
[  160.494204][ T9220] dummy0: left promiscuous mode
[  160.499787][ T9220] team0: Port device dummy0 added
[  160.505321][ T9220] batadv_slave_1: entered promiscuous mode
[  160.508167][ T9220] xt_HMARK: spi-set and port-set can't be combined
[  160.513398][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'.
[  160.549756][ T9220] batadv_slave_1 (unregistering): left promiscuous mode
[  160.575501][ T9218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.593218][ T9225] bond0: (slave dummy0): Releasing backup interface
[  160.600170][ T9225] batman_adv: batadv0: Adding interface: dummy0
[  160.604020][ T9225] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  160.617928][ T9225] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  160.722647][ T9239] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  160.819474][ T9248] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  160.825145][ T9248] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  160.828251][ T9248] team0: Port device dummy0 removed
[  160.832722][ T9248] dummy0: entered promiscuous mode
[  160.835117][ T9248] : (slave dummy0): Enslaving as an active interface with an up link
[  160.984709][ T9262] netlink: 'syz.2.875': attribute type 1 has an invalid length.
[  160.987065][ T9262] netlink: 'syz.2.875': attribute type 3 has an invalid length.
[  161.088762][ T9271] netlink: 'syz.1.877': attribute type 21 has an invalid length.
[  161.230813][ T9280] rdma_op ffff888105efe9f0 conn xmit_rdma 0000000000000000
[  161.639476][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.782619][ T9312] netlink: 'syz.2.892': attribute type 11 has an invalid length.
[  161.842602][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.516375][ T9356] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  162.608921][ T9363] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  162.752037][ T9372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.755222][ T9372] syzkaller0: entered promiscuous mode
[  162.756921][ T9372] syzkaller0: entered allmulticast mode
[  162.768106][ T9372] tipc: Resetting bearer <eth:syzkaller0>
[  162.772371][ T9371] tipc: Resetting bearer <eth:syzkaller0>
[  162.785257][ T9371] tipc: Disabling bearer <eth:syzkaller0>
[  163.432571][ T9379] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[  163.436032][ T9379] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  163.442788][ T9379] bond7: (slave vti0): making interface the new active one
[  163.447673][ T9379] bond7: (slave vti0): Enslaving as an active interface with an up link
[  163.598526][ T9396] gretap0: entered promiscuous mode
[  164.085791][ T9445] vlan0: entered promiscuous mode
[  164.087550][ T9445] macvtap0: entered promiscuous mode
[  165.025275][ T9472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  165.117917][ T9477] __nla_validate_parse: 20 callbacks suppressed
[  165.117933][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'.
[  165.152457][ T9477] bridge2: entered promiscuous mode
[  165.155161][ T9477] bridge2: entered allmulticast mode
[  165.160322][ T9477] team0: Port device bridge2 added
[  165.237659][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'.
[  165.242920][ T9485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.247022][ T9485] batman_adv: batadv0: Removing interface: dummy0
[  165.452677][ T9501] validate_nla: 3 callbacks suppressed
[  165.452692][ T9501] netlink: 'syz.0.951': attribute type 4 has an invalid length.
[  165.589334][ T9508] 8021q: adding VLAN 0 to HW filter on device bond9
[  165.609929][ T9508] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  165.615862][ T9508] bond9: (slave macvlan2): Enslaving as a backup interface with a down link
[  165.622046][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'.
[  165.724314][ T9516] netlink: 'syz.1.954': attribute type 21 has an invalid length.
[  165.751361][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  165.754367][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'.
[  165.757910][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  165.765139][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'.
[  165.783999][ T9523] netlink: 168 bytes leftover after parsing attributes in process `syz.0.957'.
[  165.908684][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'.
[  166.151797][ T9551] netlink: 128 bytes leftover after parsing attributes in process `syz.0.962'.
[  166.168146][ T9551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.173243][ T9551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.742380][ T9558] netlink: 'syz.1.964': attribute type 10 has an invalid length.
[  166.904367][ T9569] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (320769)
[  166.908266][ T9569] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  166.994435][ T9578] netlink: 'syz.1.971': attribute type 13 has an invalid length.
[  166.997567][ T9578] netlink: 'syz.1.971': attribute type 17 has an invalid length.
[  167.026997][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.037161][ T9578] 8021q: adding VLAN 0 to HW filter on device team0
[  167.054834][ T9578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.100891][ T9578] syz.1.971 (9578) used greatest stack depth: 18464 bytes left
[  167.180200][ T9594] netlink: 'syz.2.975': attribute type 1 has an invalid length.
[  167.213581][ T9594] 8021q: adding VLAN 0 to HW filter on device bond10
[  167.457652][ T9619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.001970][ T9647] netlink: 'syz.1.987': attribute type 1 has an invalid length.
[  168.221506][ T9660] netlink: 'syz.0.991': attribute type 9 has an invalid length.
[  168.225657][ T9660] netlink: 'syz.0.991': attribute type 7 has an invalid length.
[  168.229087][ T9660] netlink: 'syz.0.991': attribute type 8 has an invalid length.
[  169.028708][ T9688] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  169.105614][ T9692] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  169.119660][ T9692] bridge2: entered promiscuous mode
[  169.123232][ T9692] bridge2: entered allmulticast mode
[  169.308989][ T9701] team0: Port device geneve0 added
[  169.319881][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.332699][ T9703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.339630][ T9703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.343638][ T9703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.453541][ T9707] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  169.561569][ T5237] Bluetooth: hci2: command 0x0419 tx timeout
[  170.138481][ T9723] __nla_validate_parse: 29 callbacks suppressed
[  170.138499][ T9723] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1012'.
[  170.308613][ T9728] xt_l2tp: missing protocol rule (udp|l2tpip)
[  170.426492][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'.
[  170.455586][ T9735] bridge3: entered promiscuous mode
[  170.459601][ T9735] bridge3: entered allmulticast mode
[  170.503104][ T9738] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0
[  170.614332][ T9755] validate_nla: 8 callbacks suppressed
[  170.614352][ T9755] netlink: 'syz.2.1016': attribute type 6 has an invalid length.
[  170.679986][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1022'.
[  170.728299][ T9758] netlink: 'syz.0.1022': attribute type 7 has an invalid length.
[  170.732937][ T9758] netlink: 'syz.0.1022': attribute type 8 has an invalid length.
[  170.735737][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'.
[  170.830255][ T9773] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 512, id = 0
[  170.834657][ T9769] IPVS: stopping backup sync thread 9773 ...
[  170.863240][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'.
[  170.974291][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1028'.
[  171.117619][ T9788] netlink: 'syz.0.1029': attribute type 13 has an invalid length.
[  171.120758][ T9788] netlink: 'syz.0.1029': attribute type 17 has an invalid length.
[  171.207897][ T9788] 8021q: adding VLAN 0 to HW filter on device team0
[  171.222111][ T9788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.246077][ T9788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1029'.
[  171.304788][ T9788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.336526][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'.
[  171.342085][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'.
[  171.347418][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1031'.
[  171.359680][ T9783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.422834][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.426164][ T9797] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.485161][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.488082][ T9797] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.538998][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.542977][ T9797] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.551271][ T9807] : (slave dummy0): Releasing backup interface
[  171.554472][ T9807] dummy0: left promiscuous mode
[  171.558841][ T9807] batman_adv: batadv0: Adding interface: dummy0
[  171.561752][ T9807] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  171.571672][ T9807] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  171.585665][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.588879][ T9797] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.656848][ T9703] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.659987][ T9703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.670369][ T7459] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.674374][ T7459] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.699801][ T7459] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.704405][ T7459] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.716693][ T7459] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.719821][ T7459] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.739796][ T9798] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.745224][ T9798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.785939][ T9798] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.789894][ T9798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.837461][ T9798] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.841515][ T9798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.884550][ T9816] netlink: 'syz.2.1038': attribute type 10 has an invalid length.
[  171.897768][ T9798] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  171.902187][ T9798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.997202][ T9819] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  172.002839][ T9819] netlink: 'syz.0.1039': attribute type 6 has an invalid length.
[  172.056028][ T9821] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.106057][ T9821] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.112054][ T9822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.115038][ T9822] IPv6: NLM_F_CREATE should be set when creating new route
[  172.117686][ T9822] IPv6: NLM_F_CREATE should be set when creating new route
[  172.165946][ T9821] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.210225][ T9821] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.286568][ T9703] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.301710][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.311633][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.321543][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.733406][ T9852] netlink: 'syz.2.1048': attribute type 6 has an invalid length.
[  173.744025][ T9862] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  173.966616][ T7459] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.969091][ T7459] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.993044][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.996070][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.027206][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.030200][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.037725][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.057726][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.119255][ T9871] syzkaller1: entered promiscuous mode
[  174.121615][ T9871] syzkaller1: entered allmulticast mode
[  174.359352][ T9873] sctp: [Deprecated]: syz.2.1055 (pid 9873) Use of int in max_burst socket option deprecated.
[  174.359352][ T9873] Use struct sctp_assoc_value instead
[  174.371930][ T9873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  175.189536][ T9885] __nla_validate_parse: 70 callbacks suppressed
[  175.189562][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'.
[  175.202029][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[  175.213857][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.221310][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.224394][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.227098][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.332719][ T9896] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1061'.
[  175.446820][ T9908] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1064'.
[  175.478088][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'.
[  175.483156][ T9912] sch_fq: defrate 0 ignored.
[  175.486846][ T9912] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  175.491242][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'.
[  175.560966][ T9917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.568028][ T9917] tipc: Resetting bearer <eth:syzkaller0>
[  175.587917][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'.
[  175.594052][ T9916] tipc: Disabling bearer <eth:syzkaller0>
[  175.706208][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[  175.709282][ T9927] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  175.712793][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[  175.716035][ T9703] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.716155][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[  175.719271][ T9703] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.727287][ T9927] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  175.728704][ T9928] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  175.733646][ T9703] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.736656][ T9703] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.742702][ T9928] netlink: 'syz.2.1072': attribute type 7 has an invalid length.
[  176.133637][ T9948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.138809][ T9948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.231864][ T9948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.236130][ T9948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.257170][ T9951] openvswitch: netlink: Multiple metadata blocks provided
[  176.304396][ T9948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.308512][ T9948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.368633][ T9948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.372954][ T9948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.444923][ T9956] ip6gre0: mtu less than device minimum
[  176.446796][ T7459] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.449944][ T7459] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.465434][ T9703] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.468233][ T9703] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.479454][ T9703] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.482786][ T9703] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.501482][ T9703] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.504256][ T9703] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.546975][ T9960] netlink: 'syz.1.1080': attribute type 2 has an invalid length.
[  176.700880][ T9981] openvswitch: netlink: IP tunnel dst address not specified
[  176.845586][ T9993] netlink: 'syz.2.1090': attribute type 10 has an invalid length.
[  176.970750][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.025222][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.081800][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.234253][T10013] netlink: 'syz.2.1096': attribute type 10 has an invalid length.
[  177.236889][T10013] batman_adv: batadv0: Removing interface: dummy0
[  177.242860][T10013] dummy0: entered promiscuous mode
[  177.245203][T10013] : (slave dummy0): Enslaving as an active interface with an up link
[  177.346939][T10015] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  177.414326][T10016] netlink: 'syz.2.1097': attribute type 2 has an invalid length.
[  177.673692][T10027] veth9: entered promiscuous mode
[  177.908543][T10043] macvlan1: entered promiscuous mode
[  177.911067][T10043] vlan0: entered promiscuous mode
[  177.913192][T10043] geneve1: entered promiscuous mode
[  177.977468][T10048] bond11 (unregistering): Released all slaves
[  178.160838][T10060] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  178.301983][T10072] syz.1.1117: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  178.307457][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.1.1117 Not tainted syzkaller #0 PREEMPT(full) 
[  178.307470][T10072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.307479][T10072] Call Trace:
[  178.307487][T10072]  <TASK>
[  178.307495][T10072]  dump_stack_lvl+0x189/0x250
[  178.307518][T10072]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.307528][T10072]  ? __pfx__printk+0x10/0x10
[  178.307541][T10072]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  178.307551][T10072]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  178.307566][T10072]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  178.307576][T10072]  warn_alloc+0x214/0x310
[  178.307592][T10072]  ? stack_depot_save_flags+0x40/0x860
[  178.307607][T10072]  ? __pfx_warn_alloc+0x10/0x10
[  178.307619][T10072]  ? kasan_save_track+0x4f/0x80
[  178.307631][T10072]  ? xskq_create+0x56/0x170
[  178.307641][T10072]  ? xsk_init_queue+0xb0/0x110
[  178.307648][T10072]  ? xsk_setsockopt+0x4dc/0x8d0
[  178.307655][T10072]  ? do_sock_setsockopt+0x17c/0x1b0
[  178.307666][T10072]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  178.307676][T10072]  ? do_syscall_64+0xfa/0x3b0
[  178.307686][T10072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.307699][T10072]  __vmalloc_node_range_noprof+0x125/0x12f0
[  178.307724][T10072]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  178.307738][T10072]  ? __kasan_kmalloc+0x93/0xb0
[  178.307749][T10072]  vmalloc_user_noprof+0xad/0xf0
[  178.307760][T10072]  ? xskq_create+0xbf/0x170
[  178.307768][T10072]  xskq_create+0xbf/0x170
[  178.307778][T10072]  xsk_init_queue+0xb0/0x110
[  178.307787][T10072]  xsk_setsockopt+0x4dc/0x8d0
[  178.307796][T10072]  ? __pfx_xsk_setsockopt+0x10/0x10
[  178.307803][T10072]  ? __pfx_aa_sk_perm+0x10/0x10
[  178.307819][T10072]  ? aa_sock_opt_perm+0xff/0x1b0
[  178.307828][T10072]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  178.307837][T10072]  ? __pfx_xsk_setsockopt+0x10/0x10
[  178.307845][T10072]  do_sock_setsockopt+0x17c/0x1b0
[  178.307858][T10072]  __x64_sys_setsockopt+0x13f/0x1b0
[  178.307871][T10072]  do_syscall_64+0xfa/0x3b0
[  178.307879][T10072]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.307888][T10072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.307895][T10072]  ? exc_page_fault+0x9f/0xf0
[  178.307905][T10072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.307912][T10072] RIP: 0033:0x7f7449f8ec29
[  178.307920][T10072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.307927][T10072] RSP: 002b:00007f744ae78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  178.307935][T10072] RAX: ffffffffffffffda RBX: 00007f744a1d5fa0 RCX: 00007f7449f8ec29
[  178.307940][T10072] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  178.307945][T10072] RBP: 00007f744a011e41 R08: 0000000000000004 R09: 0000000000000000
[  178.307949][T10072] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.307955][T10072] R13: 00007f744a1d6038 R14: 00007f744a1d5fa0 R15: 00007fff432b68e8
[  178.307968][T10072]  </TASK>
[  178.307972][T10072] Mem-Info:
[  178.349407][T10072] active_anon:5995 inactive_anon:0 isolated_anon:0
[  178.349407][T10072]  active_file:1359 inactive_file:38279 isolated_file:0
[  178.349407][T10072]  unevictable:1768 dirty:97 writeback:0
[  178.349407][T10072]  slab_reclaimable:10495 slab_unreclaimable:96409
[  178.349407][T10072]  mapped:18299 shmem:2424 pagetables:1056
[  178.349407][T10072]  sec_pagetables:0 bounce:0
[  178.349407][T10072]  kernel_misc_reclaimable:0
[  178.349407][T10072]  free:248085 free_pcp:26773 free_cma:0
[  178.391177][T10074] netlink: 'syz.2.1118': attribute type 10 has an invalid length.
[  178.396706][T10072] Node 0 active_anon:16116kB inactive_anon:0kB active_file:3668kB inactive_file:124680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32804kB dirty:128kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6060kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  178.445819][T10072] Node 1 active_anon:7864kB inactive_anon:0kB active_file:1768kB inactive_file:28436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40460kB dirty:260kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6688kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  178.458322][T10072] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  178.467681][T10072] lowmem_reserve[]: 0 811 811 811 811
[  178.469569][T10072] Node 0 DMA32 free:267740kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16116kB inactive_anon:0kB active_file:3668kB inactive_file:124680kB unevictable:3536kB writepending:128kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:43456kB local_pcp:21812kB free_cma:0kB
[  178.482156][T10072] lowmem_reserve[]: 0 0 0 0 0
[  178.484155][T10072] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  178.494038][T10072] lowmem_reserve[]: 0 0 854 854 854
[  178.495653][T10072] Node 1 Normal free:251388kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7864kB inactive_anon:0kB active_file:1768kB inactive_file:28436kB unevictable:3536kB writepending:260kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:63552kB local_pcp:21352kB free_cma:0kB
[  178.506974][T10072] lowmem_reserve[]: 0 0 0 0 0
[  178.508973][T10072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  178.513530][T10072] Node 0 DMA32: 1297*4kB (UME) 862*8kB (UME) 357*16kB (UME) 225*32kB (UME) 125*64kB (UME) 88*128kB (UME) 53*256kB (UME) 38*512kB (UM) 38*1024kB (UME) 14*2048kB (UM) 30*4096kB (UM) = 267748kB
[  178.521022][T10072] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  178.528724][T10072] Node 1 Normal: 603*4kB (UME) 100*8kB (UME) 45*16kB (UME) 41*32kB (ME) 20*64kB (ME) 95*128kB (UME) 29*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 8*2048kB (UME) 49*4096kB (UM) = 251388kB
[  178.535041][T10072] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  178.540513][T10072] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  178.543371][T10072] 42062 total pagecache pages
[  178.545334][T10072] 0 pages in swap cache
[  178.546769][T10072] Free swap  = 124996kB
[  178.548413][T10072] Total swap = 124996kB
[  178.550106][T10072] 786301 pages RAM
[  178.552057][T10072] 0 pages HighMem/MovableOnly
[  178.553988][T10072] 241367 pages reserved
[  178.555722][T10072] 0 pages cma reserved
[  178.604972][T10077] smc: net device bond0 erased user defined pnetid SYZ
[  178.822930][T10105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.872869][T10112] sctp: [Deprecated]: syz.1.1128 (pid 10112) Use of int in max_burst socket option.
[  178.872869][T10112] Use struct sctp_assoc_value instead
[  178.917331][T10121] bond11: entered promiscuous mode
[  178.919354][T10121] 8021q: adding VLAN 0 to HW filter on device bond11
[  178.949587][T10120] 8021q: adding VLAN 0 to HW filter on device bond12
[  178.957691][T10120] bond11: (slave bond12): making interface the new active one
[  178.960602][T10120] bond12: entered promiscuous mode
[  178.963236][T10120] bond11: (slave bond12): Enslaving as an active interface with an up link
[  178.994825][T10125] bond6: entered promiscuous mode
[  178.997121][T10125] 8021q: adding VLAN 0 to HW filter on device bond6
[  179.007491][T10120] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  179.157304][T10143] lo: entered allmulticast mode
[  179.162985][T10143] tunl0: entered allmulticast mode
[  179.168677][T10143] gre0: entered allmulticast mode
[  179.177809][T10143] gretap0: entered allmulticast mode
[  179.181560][T10143] erspan0: entered allmulticast mode
[  179.184045][T10143] ip_vti0: entered allmulticast mode
[  179.189005][T10143] ip6_vti0: entered allmulticast mode
[  179.199835][T10143] sit0: entered allmulticast mode
[  179.208452][T10143] ip6tnl0: entered allmulticast mode
[  179.221558][T10143] ip6gre0: entered allmulticast mode
[  179.226117][T10143] ip6gretap0: entered allmulticast mode
[  179.229100][T10143] bond0: entered allmulticast mode
[  179.232537][T10143] bond_slave_0: entered allmulticast mode
[  179.234976][T10143] bond_slave_1: entered allmulticast mode
[  179.237526][T10143] bond3: entered allmulticast mode
[  179.239768][T10143] dummy0: entered allmulticast mode
[  179.243851][T10143] team0: entered allmulticast mode
[  179.246123][T10143] team_slave_0: entered allmulticast mode
[  179.248624][T10143] team_slave_1: entered allmulticast mode
[  179.253566][T10143] geneve0: entered allmulticast mode
[  179.257332][T10143] nlmon0: entered allmulticast mode
[  179.260964][T10143] caif0: entered allmulticast mode
[  179.263079][T10143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.762334][T10173] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  179.960740][T10187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.438979][T10220] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.609869][T10230] tipc: Resetting bearer <eth:syzkaller0>
[  180.761912][T10093] Bluetooth: hci1: command 0x0406 tx timeout
[  180.764410][T10093] Bluetooth: hci0: command 0x0406 tx timeout
[  181.086705][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.201825][T10258] vlan1: entered allmulticast mode
[  181.203548][T10258] bridge_slave_0: entered allmulticast mode
[  181.606281][T10268] __nla_validate_parse: 31 callbacks suppressed
[  181.606295][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'.
[  181.611264][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'.
[  181.619147][T10268] geneve2: entered promiscuous mode
[  181.625265][T10268] geneve2: entered allmulticast mode
[  181.871152][T10283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1166'.
[  181.871991][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  181.886217][T10282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1167'.
[  182.053737][T10290] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.057546][T10290] syzkaller0: entered promiscuous mode
[  182.060136][T10290] syzkaller0: entered allmulticast mode
[  182.075478][T10290] syzkaller1: entered promiscuous mode
[  182.078071][T10290] syzkaller1: entered allmulticast mode
[  182.097248][T10290] tipc: Resetting bearer <eth:syzkaller0>
[  182.208094][T10289] tipc: Resetting bearer <eth:syzkaller0>
[  182.222657][T10289] tipc: Disabling bearer <eth:syzkaller0>
[  182.323525][T10307] validate_nla: 5 callbacks suppressed
[  182.323538][T10307] netlink: 'syz.0.1174': attribute type 4 has an invalid length.
[  182.404149][T10311] netlink: 'syz.2.1175': attribute type 12 has an invalid length.
[  182.531648][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'.
[  182.535003][T10309] chnl_net:caif_netlink_parms(): no params data found
[  182.681448][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  183.279057][T10327] netlink: 'syz.0.1178': attribute type 10 has an invalid length.
[  183.289046][T10327] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.1178'.
[  183.414742][T10334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'.
[  183.418961][T10334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1181'.
[  183.486787][T10339] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744072501592066)
[  183.491894][T10339] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  183.624068][T10339] netlink: 'syz.2.1182': attribute type 19 has an invalid length.
[  183.974955][T10366] netlink: 'syz.2.1188': attribute type 30 has an invalid length.
[  184.021188][T10366] netlink: 'syz.2.1188': attribute type 30 has an invalid length.
[  184.104823][T10368] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  184.112623][T10368] netlink: 'syz.2.1189': attribute type 322 has an invalid length.
[  184.313543][   T55] block nbd0: Receive control failed (result -107)
[  184.340642][T10377] nbd0: detected capacity change from 0 to 32
[  184.355073][ T9663] block nbd0: Dead connection, failed to find a fallback
[  184.365388][ T9663] block nbd0: shutting down sockets
[  184.368494][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.374053][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.377572][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.390058][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.394256][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.398588][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.407769][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.418038][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.428722][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.437612][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.456743][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.460813][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.464375][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.469130][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.473468][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.477412][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.484448][ T9663] ldm_validate_partition_table(): Disk read failed.
[  184.488443][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.493670][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.497069][ T9663] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.503134][ T9663] Buffer I/O error on dev nbd0, logical block 0, async page read
[  184.508135][ T9663] Dev nbd0: unable to read RDB block 0
[  184.512340][ T9663]  nbd0: unable to read partition table
[  184.525761][ T9663] ldm_validate_partition_table(): Disk read failed.
[  184.533261][ T9663] Dev nbd0: unable to read RDB block 0
[  184.536218][ T9663]  nbd0: unable to read partition table
[  184.552112][T10397] veth0_to_bond: entered allmulticast mode
[  184.651790][T10406] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  184.706031][T10410] tipc: Can't bind to reserved service type 2
[  184.807921][T10418] netlink: 'syz.0.1204': attribute type 1 has an invalid length.
[  184.836439][T10418] 8021q: adding VLAN 0 to HW filter on device bond7
[  184.846432][T10418] ipvlan0: entered allmulticast mode
[  184.848676][T10418] bond7: entered allmulticast mode
[  184.862765][T10418] bond7: (slave gretap3): making interface the new active one
[  184.865418][T10418] gretap3: entered allmulticast mode
[  184.868690][T10418] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  184.947089][T10427] netlink: 'syz.2.1207': attribute type 1 has an invalid length.
[  184.971323][T10427] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  184.975446][T10427] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  185.025920][T10435] bond13: (slave bridge7): Enslaving as an active interface with a down link
[  185.033615][T10427] macvlan2: entered promiscuous mode
[  185.035831][T10427] macvlan2: entered allmulticast mode
[  185.038603][T10427] bond13: entered promiscuous mode
[  185.041630][T10427] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  185.045525][T10427] bond13: left promiscuous mode
[  185.087186][T10438] sit0: left allmulticast mode
[  185.176547][T10438] team0: Device macvtap1 is already an upper device of the team interface
[  185.677474][T10460] 8021q: adding VLAN 0 to HW filter on device bond14
[  185.704178][T10460] bond14: (slave veth11): Enslaving as an active interface with a down link
[  185.775658][T10465] gretap2: entered promiscuous mode
[  185.783213][T10465] bond14: (slave gretap2): making interface the new active one
[  185.788152][T10465] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  185.928635][T10473] pimreg3: entered allmulticast mode
[  186.021877][T10481] NCSI netlink: No device for ifindex 0
[  186.088104][T10491] syzkaller0: entered promiscuous mode
[  186.093958][T10491] syzkaller0: entered allmulticast mode
[  186.210696][ T5881] page_pool_release_retry() stalled pool shutdown: id 18, 1 inflight 60 sec
[  186.418394][T10501] geneve3: entered promiscuous mode
[  186.421890][ T7459] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  186.425418][ T7459] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  186.428834][ T7459] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  186.434084][ T7459] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  186.613794][T10522] __nla_validate_parse: 27 callbacks suppressed
[  186.613814][T10522] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1232'.
[  186.626575][T10522] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1232'.
[  186.636749][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'.
[  186.724786][T10526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.159065][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'.
[  187.167822][T10562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  187.318393][T10565] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  187.322064][T10565] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  187.378008][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.384561][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.388699][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.394843][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.399377][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.403964][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.409154][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.414640][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.420287][T10580] validate_nla: 9 callbacks suppressed
[  187.420304][T10580] netlink: 'syz.1.1245': attribute type 7 has an invalid length.
[  187.427703][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.433483][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.434254][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'.
[  187.437324][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.444233][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.765165][T10596] netlink: 'syz.1.1250': attribute type 11 has an invalid length.
[  187.768222][T10596] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1250'.
[  187.869422][T10602] netlink: 'syz.1.1252': attribute type 1 has an invalid length.
[  188.021318][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'.
[  188.283266][   T61] block nbd2: Possible stuck request ffff8880223b8000: control (read@0,1024B). Runtime 30 seconds
[  188.287994][   T61] block nbd2: Possible stuck request ffff8880223b8200: control (read@1024,1024B). Runtime 30 seconds
[  188.291881][   T61] block nbd2: Possible stuck request ffff8880223b8400: control (read@2048,1024B). Runtime 30 seconds
[  188.295543][   T61] block nbd2: Possible stuck request ffff8880223b0000: control (read@3072,1024B). Runtime 30 seconds
[  188.311891][T10637] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  188.320882][T10637] netlink: 'syz.1.1258': attribute type 4 has an invalid length.
[  188.648273][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'.
[  188.719105][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'.
[  188.819062][T10681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1268'.
[  188.936544][T10695] tipc: Cannot configure node identity twice
[  189.228971][T10714] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  189.292018][T10720] xt_HMARK: proto mask must be zero with L3 mode
[  189.380281][T10728] tipc: New replicast peer: 255.255.255.255
[  189.392345][T10728] tipc: Enabled bearer <udp:syz2>, priority 10
[  189.499127][T10742] netlink: 'syz.2.1282': attribute type 13 has an invalid length.
[  189.504587][T10742] netlink: 'syz.2.1282': attribute type 17 has an invalid length.
[  189.516053][T10742] 8021q: adding VLAN 0 to HW filter on device team0
[  189.524011][T10742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.749652][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.763451][T10751] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  189.816789][T10737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.877602][T10757] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  189.880549][T10757] netlink: 'syz.1.1286': attribute type 3 has an invalid length.
[  189.945440][T10762] ieee802154 phy0 wpan0: encryption failed: -22
[  190.142745][T10774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.151604][T10774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  190.511304][   T60] tipc: Node number set to 1740899590
[  190.856009][T10789] pim6reg: entered allmulticast mode
[  190.921931][T10789] pim6reg: left allmulticast mode
[  191.398792][T10817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.410084][T10817] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  191.473194][T10819] 8021q: adding VLAN 0 to HW filter on device bond10
[  191.490218][T10819] bond10: (slave macsec1): Error -34 calling dev_set_mtu
[  191.628726][T10824] ieee802154 phy0 wpan0: encryption failed: -22
[  191.722915][T10826] tipc: Resetting bearer <ib:ip6gre0>
[  191.785606][T10826] tipc: Resetting bearer <eth:syzkaller0>
[  191.851746][T10838] __nla_validate_parse: 19 callbacks suppressed
[  191.851777][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1309'.
[  191.874488][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.878151][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.883742][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.886557][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.889697][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.893061][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.896044][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.899017][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.056199][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'.
[  194.043089][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.975651][T10861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1317'.
[  195.000166][T10867] validate_nla: 4 callbacks suppressed
[  195.000203][T10867] netlink: 'syz.1.1319': attribute type 33 has an invalid length.
[  195.010705][T10866] netlink: 'syz.1.1319': attribute type 33 has an invalid length.
[  195.015927][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'.
[  195.022960][T10866] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1319'.
[  195.029640][T10867] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1319'.
[  195.045231][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'.
[  195.051683][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'.
[  195.065708][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'.
[  195.073700][T10865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1318'.
[  195.280142][T10889] wg1 speed is unknown, defaulting to 1000
[  195.284535][T10889] wg1 speed is unknown, defaulting to 1000
[  195.290081][T10889] wg1 speed is unknown, defaulting to 1000
[  195.301691][T10889] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  195.317184][T10889] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  195.355630][T10889] wg1 speed is unknown, defaulting to 1000
[  195.358911][T10889] wg1 speed is unknown, defaulting to 1000
[  195.363366][T10889] wg1 speed is unknown, defaulting to 1000
[  195.424934][T10898] ip6gre1: entered allmulticast mode
[  195.800350][T10917] netlink: 'syz.0.1336': attribute type 10 has an invalid length.
[  195.867601][T10917] 8021q: VLANs not supported on ip6tnl0
[  195.906192][T10942] netlink: 'syz.0.1341': attribute type 1 has an invalid length.
[  196.530329][T10997] IPVS: nq: FWM 3 0x00000003 - no destination available
[  196.657467][T11009] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  196.676794][T11009] bond15: entered promiscuous mode
[  196.678409][T11009] bond15: entered allmulticast mode
[  196.681585][T11009] 8021q: adding VLAN 0 to HW filter on device bond15
[  196.739370][T11009] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  196.750986][T11009] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  196.805191][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.846836][T11017] wg1 speed is unknown, defaulting to 1000
[  196.911366][T11023] __nla_validate_parse: 119 callbacks suppressed
[  196.911387][T11023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1365'.
[  197.250843][T11049] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1370'.
[  197.354291][T11057] netlink: 'syz.2.1375': attribute type 1 has an invalid length.
[  197.369703][T11057] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1375'.
[  197.484783][T11070] wg1 speed is unknown, defaulting to 1000
[  197.602895][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'.
[  197.627304][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1378'.
[  197.679577][T11085] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1379'.
[  197.697199][T11085] vlan1: entered allmulticast mode
[  197.700770][T11085] gretap0: entered allmulticast mode
[  197.745936][T11089] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  197.785147][T11089] bond16: (slave bridge10): making interface the new active one
[  197.788901][T11089] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  198.069981][T11100] wg1 speed is unknown, defaulting to 1000
[  198.350071][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'.
[  198.354454][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1387'.
[  198.362883][T11133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'.
[  198.374050][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1387'.
[  198.429613][T11135] openvswitch: netlink: nsh attr 7 is out of range max 3
[  198.433202][T11135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.442789][T11137] bond0: left allmulticast mode
[  198.444820][T11137] bond_slave_0: left allmulticast mode
[  198.447027][T11137] bond_slave_1: left allmulticast mode
[  198.449236][T11137] bond3: left allmulticast mode
[  198.934006][T11165] netlink: 'syz.2.1398': attribute type 10 has an invalid length.
[  198.950876][T11165] team0: Port device geneve0 added
[  199.032994][T11170] netlink: 'syz.2.1399': attribute type 1 has an invalid length.
[  199.089066][T11174] netlink: 'syz.2.1399': attribute type 10 has an invalid length.
[  199.119891][ T9703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.126875][ T9703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.130074][ T9703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.136094][ T9703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.796996][T11221] C: renamed from lo
[  199.813016][T11221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  199.853399][T11227] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  199.858006][T11227] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  199.870815][T11227] tipc: Resetting bearer <eth:syzkaller0>
[  199.881578][T11227] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.928612][T11232] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  200.003756][T11223] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  200.165421][T11249] veth0: entered promiscuous mode
[  200.171006][T11250] veth0 (unregistering): left promiscuous mode
[  200.314078][T11263] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  200.389403][T11270] validate_nla: 1 callbacks suppressed
[  200.389414][T11270] netlink: 'syz.2.1428': attribute type 1 has an invalid length.
[  200.397126][T11270] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  200.430679][T11267] netlink: 'syz.1.1427': attribute type 13 has an invalid length.
[  200.434160][T11267] netlink: 'syz.1.1427': attribute type 17 has an invalid length.
[  200.523931][T11281] netlink: 'syz.2.1430': attribute type 1 has an invalid length.
[  200.545536][T11281] 8021q: adding VLAN 0 to HW filter on device bond17
[  200.563380][T11275] bond17: (slave batadv1): Opening slave failed
[  200.610038][T11287] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  200.791957][T11310] netlink: 'syz.1.1441': attribute type 12 has an invalid length.
[  201.024580][T11324] pim6reg99999999: entered allmulticast mode
[  201.028023][T11324] netlink: 'syz.1.1446': attribute type 2 has an invalid length.
[  201.031855][T11324] netlink: 'syz.1.1446': attribute type 8 has an invalid length.
[  201.062981][T11326] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  201.066831][T11326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.308741][T11353] netlink: 'syz.1.1457': attribute type 1 has an invalid length.
[  201.355971][T11353] bond11: (slave bridge7): making interface the new active one
[  201.359620][T11353] bond11: (slave bridge7): Enslaving as an active interface with an up link
[  201.446388][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.448751][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.455645][T11360] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.458747][T11360] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.595280][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.909714][T11389] netlink: 'syz.2.1466': attribute type 10 has an invalid length.
[  202.505065][T11392] __nla_validate_parse: 45 callbacks suppressed
[  202.505080][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'.
[  202.655495][T11397] openvswitch: netlink: Message has 8 unknown bytes.
[  202.683641][T11400] openvswitch: netlink: IP tunnel TTL not specified.
[  202.745148][T11408] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  202.800984][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'.
[  202.808593][T11408] 8021q: adding VLAN 0 to HW filter on device bond18
[  202.834173][T11412] bond18: (slave veth13): Enslaving as an active interface with a down link
[  202.899671][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'.
[  202.915875][T11420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.918613][T11420] syzkaller0: entered promiscuous mode
[  202.921261][T11420] syzkaller0: entered allmulticast mode
[  202.945257][T11420] tipc: Resetting bearer <eth:syzkaller0>
[  202.949973][T11419] tipc: Resetting bearer <eth:syzkaller0>
[  202.964445][T11419] tipc: Disabling bearer <eth:syzkaller0>
[  202.979191][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'.
[  202.983022][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1471'.
[  203.076198][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'.
[  203.080176][T11429] 8021q: VLANs not supported on ip6tnl0
[  203.113117][T11425] batadv_slave_1: entered promiscuous mode
[  203.117944][T11424] batadv_slave_1: left promiscuous mode
[  203.123942][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'.
[  203.278937][T11440] wg1 speed is unknown, defaulting to 1000
[  203.353833][T11440] lo: left allmulticast mode
[  203.359488][T11440] tunl0: left allmulticast mode
[  203.365519][T11440] gre0: left allmulticast mode
[  203.369014][T11440] gretap0: left allmulticast mode
[  203.371887][T11440] erspan0: left allmulticast mode
[  203.374418][T11440] ip_vti0: left allmulticast mode
[  203.376741][T11440] ip6_vti0: left allmulticast mode
[  203.382248][T11440] ip6tnl0: left allmulticast mode
[  203.385102][T11440] ip6gre0: left allmulticast mode
[  203.387653][T11440] ip6gretap0: left allmulticast mode
[  203.392437][T11440] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.395124][T11440] team0: left allmulticast mode
[  203.396914][T11440] team_slave_0: left allmulticast mode
[  203.398859][T11440] team_slave_1: left allmulticast mode
[  203.402356][T11440] geneve0: left allmulticast mode
[  203.405365][T11440] 8021q: adding VLAN 0 to HW filter on device team0
[  203.408370][T11440] dummy0: left allmulticast mode
[  203.412153][T11440] nlmon0: left allmulticast mode
[  203.415731][T11440] caif0: left allmulticast mode
[  203.417836][T11440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  203.662479][T11447] : renamed from bond_slave_0
[  203.851103][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'.
[  204.088969][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'.
[  204.219183][T11463] : (slave dummy0): Releasing backup interface
[  204.224138][T11463] dummy0: left promiscuous mode
[  204.243425][T11463] team0: Port device dummy0 added
[  204.406535][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  204.413037][T11476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.658417][T11489] wg1 speed is unknown, defaulting to 1000
[  205.509667][T11512] ip6tnl3: entered promiscuous mode
[  205.738068][T11527] delete_channel: no stack
[  206.226868][T11543] openvswitch: netlink: Flow actions attr not present in new flow.
[  207.488688][T11570] delete_channel: no stack
[  207.567325][T11581] __nla_validate_parse: 11 callbacks suppressed
[  207.567337][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  207.622719][T11586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.626232][T11586] syzkaller0: entered promiscuous mode
[  207.628438][T11586] syzkaller0: entered allmulticast mode
[  207.636861][T11586] tipc: Resetting bearer <eth:syzkaller0>
[  207.654512][T11583] tipc: Resetting bearer <eth:syzkaller0>
[  207.672491][T11583] tipc: Disabling bearer <eth:syzkaller0>
[  207.698079][T11589] validate_nla: 6 callbacks suppressed
[  207.698096][T11589] netlink: 'syz.2.1521': attribute type 4 has an invalid length.
[  207.720352][T11582] netlink: 'syz.2.1521': attribute type 4 has an invalid length.
[  207.723437][T11591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.727771][T11592] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  207.730217][T11592] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  207.733503][T11592] tipc: Resetting bearer <eth:syzkaller0>
[  207.808759][T11596] wg1 speed is unknown, defaulting to 1000
[  207.861048][T11601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1527'.
[  207.971435][T11607] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.119750][T11618] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1533'.
[  208.403650][T11655] netlink: 'syz.2.1541': attribute type 10 has an invalid length.
[  208.407248][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1541'.
[  208.415440][T11658] sctp: [Deprecated]: syz.0.1542 (pid 11658) Use of int in max_burst socket option deprecated.
[  208.415440][T11658] Use struct sctp_assoc_value instead
[  208.431577][T11655] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  208.545658][T11663] wg1 speed is unknown, defaulting to 1000
[  208.575634][T11667] netlink: 'syz.1.1544': attribute type 13 has an invalid length.
[  208.578193][T11667] netlink: 'syz.1.1544': attribute type 17 has an invalid length.
[  208.654419][T11667] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.670277][T11667] 8021q: adding VLAN 0 to HW filter on device team0
[  208.693189][T11667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.779020][T11678] bond4: (slave macvlan0): Releasing backup interface
[  208.799847][T11667] wg1 speed is unknown, defaulting to 1000
[  208.819551][T11680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1546'.
[  208.852784][T11671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.024266][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  209.087524][T11687] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1547'.
[  209.439068][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  209.444362][T11689] IPv6: Can't replace route, no match found
[  209.538299][T11697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1550'.
[  209.542027][T11697] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1550'.
[  209.636527][T11707] netlink: 'syz.0.1553': attribute type 32 has an invalid length.
[  209.743812][T11721] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  209.852825][T11718] netlink: 'syz.0.1553': attribute type 32 has an invalid length.
[  210.247931][T11766] netlink: 'syz.2.1563': attribute type 13 has an invalid length.
[  210.257151][T11766] netlink: 'syz.2.1563': attribute type 17 has an invalid length.
[  210.271482][T11766] 8021q: adding VLAN 0 to HW filter on device 
[  210.285742][T11766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.333521][T11766] wg1 speed is unknown, defaulting to 1000
[  210.375768][T11770] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  210.381253][T11770] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  210.387950][T11771] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  210.423345][T11773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.461740][T11775] netlink: 'syz.0.1566': attribute type 5 has an invalid length.
[  210.472363][T11775] 8021q: adding VLAN 0 to HW filter on device team0
[  210.477425][T11775] bond0: (slave team0): Enslaving as an active interface with an up link
[  211.384932][T11797] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  211.752829][T11824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.815779][T11828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.856790][T11829] syzkaller0: entered promiscuous mode
[  211.858798][T11829] syzkaller0: entered allmulticast mode
[  211.863034][T11829] tipc: Resetting bearer <eth:syzkaller0>
[  211.901433][T11829] tipc: Resetting bearer <eth:syzkaller0>
[  211.955091][T11835] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  211.958343][T11835] openvswitch: netlink: Message has 1 unknown bytes.
[  213.148495][T11829] tipc: Disabling bearer <eth:syzkaller0>
[  213.203107][T11842] __nla_validate_parse: 17 callbacks suppressed
[  213.203120][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1588'.
[  213.242001][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'.
[  213.252364][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'.
[  213.298300][T11850] validate_nla: 2 callbacks suppressed
[  213.298312][T11850] netlink: 'syz.1.1591': attribute type 1 has an invalid length.
[  213.334772][T11850] 8021q: adding VLAN 0 to HW filter on device bond12
[  213.399740][T11850] veth9: entered promiscuous mode
[  213.406718][T11850] bond12: (slave veth9): Enslaving as an active interface with a down link
[  213.522227][T11859] syzkaller1: entered promiscuous mode
[  213.524443][T11859] syzkaller1: entered allmulticast mode
[  213.675145][T11874] 8021q: adding VLAN 0 to HW filter on device bond13
[  213.873133][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'.
[  213.878398][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'.
[  214.056594][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1606'.
[  214.062230][T11908] tipc: Invalid UDP bearer configuration
[  214.062298][T11908] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  214.423553][T11930] netlink: 'syz.0.1611': attribute type 83 has an invalid length.
[  214.451698][T11930] wg1 speed is unknown, defaulting to 1000
[  215.094702][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1614'.
[  215.504696][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'.
[  215.817989][T11971] netlink: 'syz.2.1622': attribute type 2 has an invalid length.
[  215.912510][T11975] nbd: nbd0 already in use
[  216.023012][T11979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.026538][T11979] syzkaller0: entered promiscuous mode
[  216.028937][T11979] syzkaller0: entered allmulticast mode
[  216.048115][T11979] tipc: Resetting bearer <eth:syzkaller0>
[  216.052196][T11978] tipc: Resetting bearer <eth:syzkaller0>
[  216.066562][T11978] tipc: Disabling bearer <eth:syzkaller0>
[  216.180855][T11981] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  216.185844][T11981] netlink: 'syz.0.1627': attribute type 11 has an invalid length.
[  216.231094][T11984] !: renamed from dummy0 (while UP)
[  216.374941][T11995] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1631'.
[  216.478583][T12000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1633'.
[  216.684300][T12004] tipc: Resetting bearer <ib:ip6gre0>
[  217.664446][T12014] wg1 speed is unknown, defaulting to 1000
[  217.803308][   T33] audit: type=1800 audit(1758644713.367:4): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1640" name="memory.events" dev="tmpfs" ino=2771 res=0 errno=0
[  217.825654][   T33] audit: type=1804 audit(1758644713.377:5): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1640" name="memory.events" dev="tmpfs" ino=2771 res=1 errno=0
[  217.998021][T12027] wg1 speed is unknown, defaulting to 1000
[  218.313564][T12061] netlink: 'syz.1.1650': attribute type 5 has an invalid length.
[  218.321341][T12061] bond0: (slave rose0): Error: Device can not be enslaved while up
[  218.329866][T12061] pim6reg: left allmulticast mode
[  218.362468][   T61] block nbd2: Possible stuck request ffff8880223b8000: control (read@0,1024B). Runtime 60 seconds
[  218.365741][   T61] block nbd2: Possible stuck request ffff8880223b8200: control (read@1024,1024B). Runtime 60 seconds
[  218.372134][   T61] block nbd2: Possible stuck request ffff8880223b8400: control (read@2048,1024B). Runtime 60 seconds
[  218.376291][   T61] block nbd2: Possible stuck request ffff8880223b0000: control (read@3072,1024B). Runtime 60 seconds
[  218.811640][T12083] __nla_validate_parse: 36 callbacks suppressed
[  218.811662][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'.
[  218.924378][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'.
[  218.927989][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'.
[  218.934220][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'.
[  218.937927][T12088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'.
[  218.980283][T12090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'.
[  219.013110][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'.
[  219.045910][T12094] netlink: 'syz.1.1662': attribute type 1 has an invalid length.
[  219.105772][T12102] netlink: zone id is out of range
[  219.107822][T12102] netlink: zone id is out of range
[  219.111907][T12102] netlink: zone id is out of range
[  219.116482][T12102] netlink: zone id is out of range
[  219.118249][T12102] netlink: zone id is out of range
[  219.119928][T12102] netlink: zone id is out of range
[  219.122112][T12102] netlink: zone id is out of range
[  219.125853][T12102] netlink: zone id is out of range
[  219.129523][T12102] netlink: zone id is out of range
[  219.149318][T12102] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1664'.
[  219.156991][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1664'.
[  219.271727][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'.
[  219.275140][T12110] tipc: Invalid UDP bearer configuration
[  219.275168][T12110] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.671504][T12139] netlink: 'syz.1.1677': attribute type 1 has an invalid length.
[  219.693605][T12139] 8021q: adding VLAN 0 to HW filter on device bond14
[  219.710980][T12139] veth11: entered promiscuous mode
[  219.716798][T12139] bond14: (slave veth11): Enslaving as an active interface with a down link
[  219.735088][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.738834][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.894383][T12154] netlink: 'syz.1.1682': attribute type 4 has an invalid length.
[  219.899582][T12154] netlink: 'syz.1.1682': attribute type 4 has an invalid length.
[  220.179573][T12182] netlink: 'syz.0.1691': attribute type 1 has an invalid length.
[  220.226292][T12182] 8021q: adding VLAN 0 to HW filter on device bond8
[  220.247786][T12182] veth5: entered promiscuous mode
[  220.258442][T12182] bond8: (slave veth5): Enslaving as an active interface with a down link
[  220.264182][T12182] erspan0: entered allmulticast mode
[  220.271483][T12182] bond8: (slave erspan0): making interface the new active one
[  220.275856][T12182] erspan0: entered promiscuous mode
[  220.278301][T12182] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  220.295596][T12187] tipc: Resetting bearer <eth:syzkaller0>
[  220.352224][T12191] netlink: 'syz.0.1695': attribute type 3 has an invalid length.
[  220.362769][T12191] netlink: 'syz.0.1695': attribute type 1 has an invalid length.
[  220.364073][T12195] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  220.372823][T12195] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  220.403751][T12195] delete_channel: no stack
[  220.449624][T12190] netlink: 'syz.2.1694': attribute type 10 has an invalid length.
[  220.457571][T12190] dummy0: entered promiscuous mode
[  220.468281][T12190] team0: Port device dummy0 removed
[  220.700221][T12233] bond8: (slave erspan0): Releasing active interface
[  220.706083][T12233] erspan0: left promiscuous mode
[  220.713671][T12233] bond0: (slave team0): Releasing backup interface
[  220.726124][T12233] bond0: (slave 0!): Releasing backup interface
[  220.738365][T12233] bond0: (slave 30): Releasing backup interface
[  220.743940][T12233] bond0: (slave bond_slave_1): Releasing backup interface
[  220.751669][T12233] team0: Port device team_slave_0 removed
[  220.757916][T12233] team0: Port device team_slave_1 removed
[  220.773250][T12238] ip6gre2: entered allmulticast mode
[  221.085856][T12275] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.088822][T12275] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.095828][T12278] ..0: renamed from hsr0
[  221.099410][T12278] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.104384][T12278] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.108524][T12278] ..0: entered allmulticast mode
[  221.110133][T12278] hsr_slave_0: entered allmulticast mode
[  221.112373][T12278] hsr_slave_1: entered allmulticast mode
[  222.070131][T12314] team0: Port device geneve0 removed
[  222.077777][T12314] tipc: Resetting bearer <eth:syzkaller0>
[  222.085126][T12314] bond7: (slave vti0): Releasing backup interface
[  222.090314][T12314] team0: Port device bridge2 removed
[  222.099735][T12314] bond9: (slave macvlan2): Releasing backup interface
[  222.107597][T12314] bond11: (slave bridge7): Releasing active interface
[  222.118725][T12314] bond12: (slave veth9): Releasing active interface
[  222.128841][T12314] bond14: (slave veth11): Releasing active interface
[  222.172298][T12314] bond0: (slave wlan1): refused to change device type
[  222.178283][T12314] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.182907][T12314] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.544993][T12337] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  222.691933][T12345] net_ratelimit: 9 callbacks suppressed
[  222.691948][T12345] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  222.703929][T12345] warn_alloc: 1 callbacks suppressed
[  222.703941][T12345] syz.0.1737: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  222.710790][T12345] CPU: 1 UID: 0 PID: 12345 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(full) 
[  222.710806][T12345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.710813][T12345] Call Trace:
[  222.710817][T12345]  <TASK>
[  222.710822][T12345]  dump_stack_lvl+0x189/0x250
[  222.710841][T12345]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.710852][T12345]  ? __pfx__printk+0x10/0x10
[  222.710866][T12345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  222.710877][T12345]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  222.710887][T12345]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  222.710899][T12345]  warn_alloc+0x214/0x310
[  222.710913][T12345]  ? stack_depot_save_flags+0x40/0x860
[  222.710929][T12345]  ? __pfx_warn_alloc+0x10/0x10
[  222.710943][T12345]  ? kasan_save_track+0x4f/0x80
[  222.710954][T12345]  ? xskq_create+0x56/0x170
[  222.710964][T12345]  ? xsk_init_queue+0xb0/0x110
[  222.710971][T12345]  ? xsk_setsockopt+0x4dc/0x8d0
[  222.710978][T12345]  ? do_sock_setsockopt+0x17c/0x1b0
[  222.710988][T12345]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  222.710997][T12345]  ? do_syscall_64+0xfa/0x3b0
[  222.711006][T12345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.711018][T12345]  __vmalloc_node_range_noprof+0x125/0x12f0
[  222.711048][T12345]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  222.711064][T12345]  ? __kasan_kmalloc+0x93/0xb0
[  222.711076][T12345]  vmalloc_user_noprof+0xad/0xf0
[  222.711106][T12345]  ? xskq_create+0xbf/0x170
[  222.711115][T12345]  xskq_create+0xbf/0x170
[  222.711126][T12345]  xsk_init_queue+0xb0/0x110
[  222.711136][T12345]  xsk_setsockopt+0x4dc/0x8d0
[  222.711145][T12345]  ? __pfx_xsk_setsockopt+0x10/0x10
[  222.711153][T12345]  ? __pfx_aa_sk_perm+0x10/0x10
[  222.711168][T12345]  ? aa_sock_opt_perm+0xff/0x1b0
[  222.711177][T12345]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  222.711186][T12345]  ? __pfx_xsk_setsockopt+0x10/0x10
[  222.711194][T12345]  do_sock_setsockopt+0x17c/0x1b0
[  222.711207][T12345]  __x64_sys_setsockopt+0x13f/0x1b0
[  222.711220][T12345]  do_syscall_64+0xfa/0x3b0
[  222.711230][T12345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.711237][T12345]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.711246][T12345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.711258][T12345] RIP: 0033:0x7f1d53f8ec29
[  222.711272][T12345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.711285][T12345] RSP: 002b:00007f1d54d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  222.711300][T12345] RAX: ffffffffffffffda RBX: 00007f1d541d5fa0 RCX: 00007f1d53f8ec29
[  222.711310][T12345] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  222.711319][T12345] RBP: 00007f1d54011e41 R08: 0000000000000004 R09: 0000000000000000
[  222.711329][T12345] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.711337][T12345] R13: 00007f1d541d6038 R14: 00007f1d541d5fa0 R15: 00007ffcc8b1ba68
[  222.711359][T12345]  </TASK>
[  222.712201][T12345] Mem-Info:
[  222.817614][T12345] active_anon:6122 inactive_anon:0 isolated_anon:0
[  222.817614][T12345]  active_file:1425 inactive_file:38299 isolated_file:0
[  222.817614][T12345]  unevictable:1768 dirty:96 writeback:0
[  222.817614][T12345]  slab_reclaimable:10659 slab_unreclaimable:85705
[  222.817614][T12345]  mapped:18337 shmem:2447 pagetables:1039
[  222.817614][T12345]  sec_pagetables:0 bounce:0
[  222.817614][T12345]  kernel_misc_reclaimable:0
[  222.817614][T12345]  free:264506 free_pcp:19288 free_cma:0
[  222.832887][T12345] Node 0 active_anon:16628kB inactive_anon:0kB active_file:3800kB inactive_file:124704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32824kB dirty:260kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6456kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  222.844223][T12345] Node 1 active_anon:7860kB inactive_anon:0kB active_file:1900kB inactive_file:28492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40524kB dirty:124kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6936kB pagetables:1988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  222.854108][T12345] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  222.863799][T12345] lowmem_reserve[]: 0 811 811 811 811
[  222.865556][T12345] Node 0 DMA32 free:271992kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16628kB inactive_anon:0kB active_file:3800kB inactive_file:124704kB unevictable:3536kB writepending:260kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:40488kB local_pcp:16784kB free_cma:0kB
[  222.875236][T12345] lowmem_reserve[]: 0 0 0 0 0
[  222.876828][T12345] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  222.886204][T12345] lowmem_reserve[]: 0 0 854 854 854
[  222.888075][T12345] Node 1 Normal free:312180kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7860kB inactive_anon:0kB active_file:1900kB inactive_file:28492kB unevictable:3536kB writepending:124kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36836kB local_pcp:20944kB free_cma:0kB
[  222.897708][T12345] lowmem_reserve[]: 0 0 0 0 0
[  222.899259][T12345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  222.903622][T12345] Node 0 DMA32: 1834*4kB (UME) 738*8kB (UME) 394*16kB (UME) 251*32kB (UME) 53*64kB (UME) 45*128kB (UME) 39*256kB (UM) 26*512kB (UM) 41*1024kB (UME) 15*2048kB (UM) 34*4096kB (UM) = 271992kB
[  222.910934][T12345] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  222.916504][T12345] Node 1 Normal: 747*4kB (UME) 633*8kB (UME) 250*16kB (UME) 72*32kB (UM) 81*64kB (UM) 70*128kB (UME) 22*256kB (UME) 19*512kB (UME) 12*1024kB (UM) 5*2048kB (UME) 60*4096kB (UM) = 312148kB
[  222.922489][T12345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.925526][T12345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.929252][T12345] 42171 total pagecache pages
[  222.930910][T12345] 0 pages in swap cache
[  222.932227][T12345] Free swap  = 124996kB
[  222.933687][T12345] Total swap = 124996kB
[  222.935053][T12345] 786301 pages RAM
[  222.936320][T12345] 0 pages HighMem/MovableOnly
[  222.937762][T12345] 241367 pages reserved
[  222.939147][T12345] 0 pages cma reserved
[  223.146381][T12372] sctp: [Deprecated]: syz.0.1744 (pid 12372) Use of int in max_burst socket option.
[  223.146381][T12372] Use struct sctp_assoc_value instead
[  223.627525][T12383] tipc: Resetting bearer <eth:syzkaller0>
[  223.694949][T12394] sch_tbf: burst 125 is lower than device syzkaller0 mtu (313) !
[  223.714375][T12393] validate_nla: 12 callbacks suppressed
[  223.715148][T12393] netlink: 'syz.2.1751': attribute type 1 has an invalid length.
[  223.723424][T12393] netlink: 'syz.2.1751': attribute type 1 has an invalid length.
[  223.861092][T12409] __nla_validate_parse: 26 callbacks suppressed
[  223.861111][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  224.004194][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'.
[  224.077840][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.081930][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.104345][T12426] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1761'.
[  224.336206][T12440] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  224.410189][T12447] wg1 speed is unknown, defaulting to 1000
[  224.417592][ T5874] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  224.517836][T12456] netlink: 'syz.1.1768': attribute type 7 has an invalid length.
[  224.524574][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'.
[  225.354479][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.357895][T12483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.361792][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.366009][T12483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.428524][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.437028][T12489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1775'.
[  225.453381][T12486] syzkaller1: entered allmulticast mode
[  226.257933][T12492] netlink: 'syz.1.1777': attribute type 1 has an invalid length.
[  226.287271][T12492] 8021q: adding VLAN 0 to HW filter on device bond15
[  226.425692][T12502] geneve4: entered promiscuous mode
[  226.429200][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.441027][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.449785][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.455580][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.486189][T12511] netlink: 'syz.1.1782': attribute type 10 has an invalid length.
[  226.491976][T12511] bond0: (slave wlan1): Opening slave failed
[  226.582057][T12517] netlink: 'syz.1.1784': attribute type 1 has an invalid length.
[  226.629647][T12525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.632351][T12524] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.635480][T12524] syzkaller0: entered promiscuous mode
[  226.637262][T12524] syzkaller0: entered allmulticast mode
[  226.647443][T12524] tipc: Resetting bearer <eth:syzkaller0>
[  226.665969][T12530] syzkaller0: entered promiscuous mode
[  226.668096][T12530] syzkaller0: entered allmulticast mode
[  226.727846][T12524] tipc: Resetting bearer <eth:syzkaller0>
[  226.751043][T12524] tipc: Disabling bearer <eth:syzkaller0>
[  227.066589][T12559] ip6gretap0: Device is already in use.
[  227.129986][T12570] tun0: tun_chr_ioctl cmd 1074025675
[  227.133531][T12570] tun0: persist enabled
[  227.136138][T12570] tun0: tun_chr_ioctl cmd 1074025675
[  227.138261][T12570] tun0: persist disabled
[  227.146672][T12570] netlink: 'syz.1.1798': attribute type 32 has an invalid length.
[  227.229745][T12580] netlink: 'syz.2.1800': attribute type 13 has an invalid length.
[  227.251024][T12580] netlink: 'syz.2.1800': attribute type 17 has an invalid length.
[  227.326658][T12568] wg1 speed is unknown, defaulting to 1000
[  227.394381][T12588] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  227.588601][T12607] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20004
[  227.744706][T12612] syzkaller0: entered promiscuous mode
[  227.747000][T12612] syzkaller0: entered allmulticast mode
[  227.784581][T12610] netlink: 'syz.2.1806': attribute type 10 has an invalid length.
[  227.838824][T12610] dummy0: left promiscuous mode
[  227.854564][T12610] dummy0: entered promiscuous mode
[  227.861487][T12610] : (slave dummy0): Enslaving as an active interface with an up link
[  229.446974][T12623] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.452319][T12623] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  229.588579][T12631] __nla_validate_parse: 21 callbacks suppressed
[  229.588599][T12631] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1812'.
[  229.648479][T12639] lo speed is unknown, defaulting to 1000
[  229.651246][T12639] lo speed is unknown, defaulting to 1000
[  229.654455][T12639] lo speed is unknown, defaulting to 1000
[  229.672654][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'.
[  229.681356][T12639] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  229.747530][T12641] netlink: 'syz.2.1815': attribute type 4 has an invalid length.
[  229.801256][T12639] lo speed is unknown, defaulting to 1000
[  229.806433][T12639] lo speed is unknown, defaulting to 1000
[  229.811801][T12639] lo speed is unknown, defaulting to 1000
[  229.930340][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1819'.
[  229.930375][T12656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1819'.
[  230.077337][T12664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'.
[  230.081834][T12664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1818'.
[  230.465526][T12672] openvswitch: netlink: Key type 251 is out of range max 32
[  230.492095][T12674] openvswitch: netlink: Key type 251 is out of range max 32
[  230.669106][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  230.677012][T12680] netlink: 'syz.1.1824': attribute type 1 has an invalid length.
[  230.680095][T12680] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1824'.
[  230.788860][T12686] netlink: 'syz.1.1827': attribute type 1 has an invalid length.
[  230.793672][T12688] netlink: 'syz.1.1827': attribute type 1 has an invalid length.
[  230.814308][T12688] 8021q: adding VLAN 0 to HW filter on device bond16
[  230.831905][T12686] veth13: entered promiscuous mode
[  230.882286][T12688] erspan0: entered allmulticast mode
[  230.911721][T12700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1829'.
[  230.914708][T12700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1829'.
[  230.978098][T12705] netlink: 'syz.2.1830': attribute type 21 has an invalid length.
[  230.982865][T12705] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  231.057856][T12710] IPVS: Error connecting to the multicast addr
[  231.093108][T12713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.176477][T12717] syzkaller1: entered promiscuous mode
[  231.178852][T12717] syzkaller1: entered allmulticast mode
[  231.673679][T12748] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  232.077940][T12764] netlink: 'syz.0.1848': attribute type 1 has an invalid length.
[  232.081566][T12764] netlink: 'syz.0.1848': attribute type 2 has an invalid length.
[  232.264242][T12768] wg1 speed is unknown, defaulting to 1000
[  232.267269][T12768] lo speed is unknown, defaulting to 1000
[  232.547833][T12788] : (slave dummy0): Releasing backup interface
[  232.552636][T12788] dummy0 (unregistering): left promiscuous mode
[  232.566829][T12790] wg1 speed is unknown, defaulting to 1000
[  232.572921][T12790] lo speed is unknown, defaulting to 1000
[  232.598531][T12791] ieee802154 phy0 wpan0: encryption failed: -22
[  232.921963][T12806] bpq0: entered promiscuous mode
[  233.300884][T12833] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  233.306010][T12834] netlink: 'syz.0.1869': attribute type 4 has an invalid length.
[  233.831955][T12868] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.901972][T12868] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.969780][T12868] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.045456][T12868] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.123603][ T5854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.150205][ T5854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.165094][ T9703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.182113][ T9703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.269330][T12877] netlink: 'syz.0.1881': attribute type 13 has an invalid length.
[  234.681652][T12897] bond18: entered promiscuous mode
[  234.738099][T12905] __nla_validate_parse: 21 callbacks suppressed
[  234.738116][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'.
[  234.890881][T12913] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1889'.
[  234.968324][T12906] tipc: Enabling of bearer <eth:pimreg0> rejected, failed to enable media
[  235.008662][T12919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1894'.
[  235.014524][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'.
[  235.018852][T12919] tipc: Enabled bearer <eth:team0>, priority 0
[  237.650807][ T5296] udevd[5296]: worker [7653] /devices/virtual/block/nbd2 is taking a long time
[  248.441754][   T61] block nbd2: Possible stuck request ffff8880223b8000: control (read@0,1024B). Runtime 90 seconds
[  248.445910][   T61] block nbd2: Possible stuck request ffff8880223b8200: control (read@1024,1024B). Runtime 90 seconds
[  248.450162][   T61] block nbd2: Possible stuck request ffff8880223b8400: control (read@2048,1024B). Runtime 90 seconds
[  248.454919][   T61] block nbd2: Possible stuck request ffff8880223b0000: control (read@3072,1024B). Runtime 90 seconds
[  255.484282][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  270.253403][T12925] syzkaller1: entered promiscuous mode
[  270.255968][T12925] syzkaller1: entered allmulticast mode
[  270.263131][T12925] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  270.407461][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'.
[  270.458989][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'.
[  270.560202][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  270.628129][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1906'.
[  270.673876][T12961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.680167][T12961] syzkaller0: entered promiscuous mode
[  270.682619][T12961] syzkaller0: entered allmulticast mode
[  270.698447][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1905'.
[  270.704217][T12959] IPVS: Error connecting to the multicast addr
[  270.785946][T12961] tipc: Resetting bearer <eth:syzkaller0>
[  270.812087][T12961] tipc: Disabling bearer <eth:syzkaller0>
[  270.814531][T12975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1909'.
[  270.942806][T12984] ksmbd: Unknown IPC event: 3, ignore.
[  270.946364][T12985] ksmbd: Unknown IPC event: 3, ignore.
[  271.053756][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'.
[  271.123137][T13001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'.
[  271.148955][T13001] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  271.163085][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1918'.
[  271.198184][T13009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'.
[  271.253704][T13012] validate_nla: 1 callbacks suppressed
[  271.253731][T13012] netlink: 'syz.2.1920': attribute type 12 has an invalid length.
[  271.344316][T13020] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  272.157339][T13073] wg1 speed is unknown, defaulting to 1000
[  272.164670][T13073] lo speed is unknown, defaulting to 1000
[  272.385570][ T5909] IPVS: starting estimator thread 0...
[  272.483867][T13090] IPVS: using max 61 ests per chain, 146400 per kthread
[  272.654282][T13105] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  272.663900][T13105] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  272.770153][T13122] netlink: 'syz.1.1936': attribute type 11 has an invalid length.
[  273.528247][T13135] team0: Caught tx_queue_len zero misconfig
[  273.537147][T13135] nbd: must specify a size in bytes for the device
[  273.574923][T13140] unsupported nlmsg_type 40
[  274.001992][T13173] netlink: 'syz.2.1951': attribute type 13 has an invalid length.
[  274.151732][T13200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  274.155985][T13193] IPVS: stopping backup sync thread 13200 ...
[  274.201241][T13197] netlink: 'syz.1.1959': attribute type 11 has an invalid length.
[  274.747723][T13231] netlink: 'syz.0.1967': attribute type 21 has an invalid length.
[  274.751559][T13231] netlink: 'syz.0.1967': attribute type 5 has an invalid length.
[  274.754776][T13231] netlink: 'syz.0.1967': attribute type 6 has an invalid length.
[  274.884095][T13235] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  275.247160][T13257] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20004
[  275.522745][T13273] wg1 speed is unknown, defaulting to 1000
[  275.526560][T13273] lo speed is unknown, defaulting to 1000
[  275.916419][T13279] __nla_validate_parse: 20 callbacks suppressed
[  275.916438][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'.
[  275.933166][T13279] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  275.938407][ T5909] lo speed is unknown, defaulting to 1000
[  275.951986][T13279] netlink: 'syz.2.1982': attribute type 10 has an invalid length.
[  276.048466][T13281] pim6reg99999999: entered allmulticast mode
[  276.115495][T13285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1985'.
[  276.403376][T13302] netlink: 'syz.1.1991': attribute type 1 has an invalid length.
[  276.435062][T13299] : renamed from wg2
[  276.535056][T13307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1992'.
[  276.569138][T13312] netlink: 'syz.0.1994': attribute type 11 has an invalid length.
[  276.725292][T13315] tipc: Resetting bearer <eth:team0>
[  276.743391][T13315] vlan0: left promiscuous mode
[  276.764927][T13315] tipc: Resetting bearer <eth:syzkaller0>
[  276.776282][T13315] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  276.787496][T13315] vlan2: left promiscuous mode
[  276.790242][T13315] bond0: left promiscuous mode
[  276.793208][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'.
[  276.793271][T13315] bridge2: left promiscuous mode
[  276.798367][T13315] bridge3: left promiscuous mode
[  276.833380][T13315] veth9: left promiscuous mode
[  276.854049][T13315] veth11: left promiscuous mode
[  276.879707][T13315] bond18: left promiscuous mode
[  276.979122][ T5874] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.982750][ T5874] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.986264][ T5874] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  276.994392][ T5874] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.391839][T13355] ip6gretap3: entered promiscuous mode
[  277.537989][T13362] netlink: 'syz.0.2007': attribute type 2 has an invalid length.
[  277.543082][T13362] netlink: 'syz.0.2007': attribute type 2 has an invalid length.
[  277.546559][T13362] netlink: 'syz.0.2007': attribute type 2 has an invalid length.
[  277.549555][T13362] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2007'.
[  277.554878][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2007'.
[  277.568202][T13364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2006'.
[  277.618900][T13371] netlink: 'syz.1.2009': attribute type 1 has an invalid length.
[  277.653276][T13371] 8021q: adding VLAN 0 to HW filter on device bond19
[  277.657963][T13371] syz_tun: entered allmulticast mode
[  277.661979][T13370] syz_tun: left allmulticast mode
[  277.703142][T13377] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  277.708795][T13377] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  277.731815][T13377] netlink: 'syz.0.2011': attribute type 4 has an invalid length.
[  277.753124][T13380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2013'.
[  277.837447][T13388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2015'.
[  277.846524][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  278.109763][T13407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  278.137829][T13407] netlink: 'syz.0.2019': attribute type 10 has an invalid length.
[  278.144575][T13407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  278.148048][T13407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  278.180836][T13414] 8021q: VLANs not supported on ip6_vti0
[  278.184492][T13415] 8021q: VLANs not supported on ip6_vti0
[  278.189311][T13414] netlink: 'syz.2.2021': attribute type 12 has an invalid length.
[  278.194153][T13414] netlink: 'syz.2.2021': attribute type 12 has an invalid length.
[  278.246531][T13419] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  278.340300][T13426] netlink: 'syz.1.2024': attribute type 13 has an invalid length.
[  278.354442][T13426] erspan0: left allmulticast mode
[  278.376217][T13426] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.381614][T13426] 8021q: adding VLAN 0 to HW filter on device team0
[  278.384128][T13426] tipc: Resetting bearer <eth:team0>
[  278.388840][T13426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.398835][ T7459] syz_tun: tun_net_xmit 90
[  278.403256][T13426] xfrm0: entered promiscuous mode
[  278.405549][T13426] xfrm0: entered allmulticast mode
[  278.411800][   T60] syz_tun: tun_net_xmit 90
[  278.435657][T13426] wg1 speed is unknown, defaulting to 1000
[  278.439789][T13426] lo speed is unknown, defaulting to 1000
[  278.512346][   T60] syz_tun: tun_net_xmit 90
[  278.569005][   T61] block nbd2: Possible stuck request ffff8880223b8000: control (read@0,1024B). Runtime 120 seconds
[  278.573611][   T61] block nbd2: Possible stuck request ffff8880223b8200: control (read@1024,1024B). Runtime 120 seconds
[  278.578166][   T61] block nbd2: Possible stuck request ffff8880223b8400: control (read@2048,1024B). Runtime 120 seconds
[  278.585772][   T61] block nbd2: Possible stuck request ffff8880223b0000: control (read@3072,1024B). Runtime 120 seconds
[  278.600862][    C1] syz_tun: tun_net_xmit 54
[  278.822445][T12923] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.825993][T12923] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.829671][T12923] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.838493][T12923] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  278.937887][T13464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.321120][ T5909] syz_tun: tun_net_xmit 90
[  279.652514][T13496] 8021q: adding VLAN 0 to HW filter on device bond11
[  279.866315][T13508] lo: Caught tx_queue_len zero misconfig
[  279.869319][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.877973][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.883569][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.887717][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.888051][T13506] IPv6: NLM_F_REPLACE set, but no existing node found!
[  280.577781][T13521] bond0: Caught tx_queue_len zero misconfig
[  280.785172][T13535] erspan0: left allmulticast mode
[  280.788820][T13535] wg1: left promiscuous mode
[  280.791060][T13535] wg1: left allmulticast mode
[  280.796636][T13535] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  280.800248][T13535] batadv1: left promiscuous mode
[  280.802757][T13535] batadv1: left allmulticast mode
[  280.805124][T13535] vti0: left promiscuous mode
[  280.807213][T13535] bond4: left promiscuous mode
[  280.809028][T13535] bond4: left allmulticast mode
[  280.812125][T13535] macsec1: left promiscuous mode
[  280.814250][T13535] macsec1: left allmulticast mode
[  280.816445][T13535] bridge2: left promiscuous mode
[  280.818444][T13535] bridge2: left allmulticast mode
[  280.822087][T13535] bond6: left promiscuous mode
[  280.824610][T13535] geneve2: left promiscuous mode
[  280.826630][T13535] geneve2: left allmulticast mode
[  280.829038][T13535] ipvlan0: left allmulticast mode
[  280.831470][T13535] bond7: left allmulticast mode
[  280.833401][T13535] gretap3: left allmulticast mode
[  280.836793][T13535] geneve3: left promiscuous mode
[  280.841596][T13535] ip6tnl3: left promiscuous mode
[  280.844552][T13535] veth5: left promiscuous mode
[  280.851375][T13535] geneve4: left promiscuous mode
[  280.977699][T13548] __nla_validate_parse: 16 callbacks suppressed
[  280.977720][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  281.011293][T13548] bridge0: entered promiscuous mode
[  281.014305][T13548] bridge0: entered allmulticast mode
[  281.044281][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2058'.
[  281.967349][T13571] validate_nla: 5 callbacks suppressed
[  281.967368][T13571] netlink: 'syz.2.2064': attribute type 4 has an invalid length.
[  281.980014][T13572] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2063'.
[  281.984285][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2064'.
[  282.737010][T13595] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:21
[  282.743331][T13596] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:21
[  282.798591][T13599] netlink: 'syz.1.2071': attribute type 1 has an invalid length.
[  282.802191][T13600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2071'.
[  283.035569][T13623] netlink: 211288 bytes leftover after parsing attributes in process `syz.0.2077'.
[  283.044624][T13623] netlink: 'syz.0.2077': attribute type 3 has an invalid length.
[  283.047776][T13623] netlink: 'syz.0.2077': attribute type 3 has an invalid length.
[  283.055351][T13623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2077'.
[  283.403165][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2082'.
[  283.436394][T13651] tipc: Resetting bearer <eth:team0>
[  283.472104][   T60] syz_tun: tun_net_xmit 90
[  283.487829][T13655] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2087'.
[  283.490653][T13655] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2087'.
[  283.498630][T13651] netlink: 'syz.1.2086': attribute type 10 has an invalid length.
[  283.504539][T13651] bond0: (slave wlan1): refused to change device type
[  283.546879][T13659] 8021q: adding VLAN 0 to HW filter on device bond12
[  283.568562][T13659] macvlan1: entered promiscuous mode
[  283.570750][T13659] macvlan1: entered allmulticast mode
[  283.573416][T13659] bond12: entered promiscuous mode
[  283.575520][T13659] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  283.579752][T13659] bond12: left promiscuous mode
[  283.615043][T13669] netlink: 'syz.1.2091': attribute type 58 has an invalid length.
[  283.749409][T13678] netlink: 'syz.0.2094': attribute type 1 has an invalid length.
[  283.775834][T13676] tipc: Resetting bearer <ib:ip6gre0>
[  283.805413][T13676] tipc: Resetting bearer <eth:team0>
[  283.814614][T13676] xfrm0: left promiscuous mode
[  283.816361][T13676] xfrm0: left allmulticast mode
[  283.822066][T13676] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  283.825348][T13676] vlan2: left allmulticast mode
[  283.827232][T13676] bond0: left allmulticast mode
[  283.829804][T13676] bridge2: left allmulticast mode
[  283.832597][T13676] bridge3: left allmulticast mode
[  283.839568][T13676] ip6gretap3: left promiscuous mode
[  283.865010][ T7459] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.869963][ T7459] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.878303][ T7459] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.881774][ T7459] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.327560][T13704] netlink: 'syz.2.2101': attribute type 1 has an invalid length.
[  284.332454][T13704] syz_tun: entered allmulticast mode
[  284.353571][T13704] syz_tun: left allmulticast mode
[  284.435221][T13709] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.438982][T13709] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.498735][T13709] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.502687][T13709] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.546712][T13709] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.550845][T13709] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.598442][T13709] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.602400][T13709] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.681976][ T7459] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.685326][ T7459] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.699964][ T7459] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.703342][ T7459] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.717408][ T7459] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.720686][ T7459] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.733564][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.736690][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.745424][T13708] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  284.749707][T13708] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.759026][   T12] ==================================================================
[  284.761878][   T12] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  284.764742][   T12] Read of size 8 at addr ffff8880287508b0 by task kworker/u8:0/12
[  284.767979][   T12] 
[  284.770069][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  284.770088][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.770098][   T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  284.770124][   T12] Call Trace:
[  284.770131][   T12]  <TASK>
[  284.770138][   T12]  dump_stack_lvl+0x189/0x250
[  284.770156][   T12]  ? __kasan_check_byte+0x12/0x40
[  284.770182][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.770197][   T12]  ? lock_release+0x4b/0x3e0
[  284.770218][   T12]  ? __virt_addr_valid+0x4a5/0x5c0
[  284.770236][   T12]  print_report+0xca/0x240
[  284.770250][   T12]  ? __mutex_lock+0x147/0x1350
[  284.770266][   T12]  kasan_report+0x118/0x150
[  284.770283][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  284.770297][   T12]  ? __mutex_lock+0x147/0x1350
[  284.770315][   T12]  __mutex_lock+0x147/0x1350
[  284.770331][   T12]  ? __mutex_lock+0x5bb/0x1350
[  284.770348][   T12]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  284.770365][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  284.770382][   T12]  ? __lock_acquire+0xab9/0xd20
[  284.770404][   T12]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  284.770424][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  284.770438][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  284.770451][   T12]  process_scheduled_works+0xae1/0x17b0
[  284.770474][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.770492][   T12]  worker_thread+0x8a0/0xda0
[  284.770515][   T12]  kthread+0x711/0x8a0
[  284.770533][   T12]  ? __pfx_worker_thread+0x10/0x10
[  284.770545][   T12]  ? __pfx_kthread+0x10/0x10
[  284.770561][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  284.770574][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.770613][   T12]  ? __pfx_kthread+0x10/0x10
[  284.770630][   T12]  ret_from_fork+0x439/0x7d0
[  284.770645][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  284.770659][   T12]  ? __switch_to_asm+0x39/0x70
[  284.770675][   T12]  ? __switch_to_asm+0x33/0x70
[  284.770690][   T12]  ? __pfx_kthread+0x10/0x10
[  284.770705][   T12]  ret_from_fork_asm+0x1a/0x30
[  284.770728][   T12]  </TASK>
[  284.770733][   T12] 
[  284.844093][   T12] Allocated by task 13709:
[  284.846243][   T12]  kasan_save_track+0x3e/0x80
[  284.848284][   T12]  __kasan_kmalloc+0x93/0xb0
[  284.850022][   T12]  __kmalloc_noprof+0x27a/0x4f0
[  284.851881][   T12]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  284.854258][   T12]  notifier_call_chain+0x1b6/0x3e0
[  284.856188][   T12]  register_netdevice+0x1608/0x1ae0
[  284.858204][   T12]  nsim_create+0xae8/0xf10
[  284.859881][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  284.861862][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  284.863770][   T12]  nsim_dev_reload_up+0x451/0x780
[  284.865637][   T12]  devlink_reload+0x4ec/0x8d0
[  284.867401][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  284.869448][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  284.871549][   T12]  genl_rcv_msg+0x60e/0x790
[  284.873348][   T12]  netlink_rcv_skb+0x208/0x470
[  284.875149][   T12]  genl_rcv+0x28/0x40
[  284.876741][   T12]  netlink_unicast+0x82f/0x9e0
[  284.878478][   T12]  netlink_sendmsg+0x805/0xb30
[  284.880302][   T12]  __sock_sendmsg+0x21c/0x270
[  284.882091][   T12]  ____sys_sendmsg+0x505/0x830
[  284.883924][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  284.885632][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  284.887500][   T12]  do_syscall_64+0xfa/0x3b0
[  284.889136][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.891108][   T12] 
[  284.891979][   T12] Freed by task 13708:
[  284.893479][   T12]  kasan_save_track+0x3e/0x80
[  284.895272][   T12]  kasan_save_free_info+0x46/0x50
[  284.897193][   T12]  __kasan_slab_free+0x5b/0x80
[  284.898977][   T12]  kfree+0x18e/0x440
[  284.900491][   T12]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  284.902930][   T12]  notifier_call_chain+0x1b6/0x3e0
[  284.904907][   T12]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  284.907357][   T12]  unregister_netdevice_queue+0x33c/0x380
[  284.909517][   T12]  nsim_destroy+0x1dd/0x670
[  284.911283][   T12]  __nsim_dev_port_del+0x14d/0x1b0
[  284.913255][   T12]  nsim_dev_reload_destroy+0x288/0x490
[  284.915268][   T12]  nsim_dev_reload_down+0x8a/0xc0
[  284.917233][   T12]  devlink_reload+0x1b6/0x8d0
[  284.918998][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  284.920980][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  284.923032][   T12]  genl_rcv_msg+0x60e/0x790
[  284.924678][   T12]  netlink_rcv_skb+0x208/0x470
[  284.926415][   T12]  genl_rcv+0x28/0x40
[  284.927929][   T12]  netlink_unicast+0x82f/0x9e0
[  284.929726][   T12]  netlink_sendmsg+0x805/0xb30
[  284.931482][   T12]  __sock_sendmsg+0x21c/0x270
[  284.933236][   T12]  ____sys_sendmsg+0x505/0x830
[  284.935109][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  284.936905][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  284.938773][   T12]  do_syscall_64+0xfa/0x3b0
[  284.940450][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.942762][   T12] 
[  284.943682][   T12] Last potentially related work creation:
[  284.945792][   T12]  kasan_save_stack+0x3e/0x60
[  284.947557][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  284.949518][   T12]  insert_work+0x3d/0x330
[  284.951186][   T12]  __queue_work+0xbaf/0xfb0
[  284.952921][   T12]  queue_work_on+0x181/0x270
[  284.954694][   T12]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  284.956755][   T12]  udp_tunnel_push_rx_port+0x180/0x200
[  284.958866][   T12]  geneve_offload_rx_ports+0xd7/0x160
[  284.960895][   T12]  geneve_netdevice_event+0x6a/0x80
[  284.962869][   T12]  notifier_call_chain+0x1b6/0x3e0
[  284.964762][   T12]  call_netdevice_notifiers+0x88/0xc0
[  284.966764][   T12]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  284.969046][   T12]  notifier_call_chain+0x1b6/0x3e0
[  284.970901][   T12]  register_netdevice+0x1608/0x1ae0
[  284.972883][   T12]  nsim_create+0xae8/0xf10
[  284.974498][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  284.976440][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  284.978406][   T12]  nsim_dev_reload_up+0x451/0x780
[  284.980380][   T12]  devlink_reload+0x4ec/0x8d0
[  284.982169][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  284.984229][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  284.986231][   T12]  genl_rcv_msg+0x60e/0x790
[  284.987992][   T12]  netlink_rcv_skb+0x208/0x470
[  284.989843][   T12]  genl_rcv+0x28/0x40
[  284.991352][   T12]  netlink_unicast+0x82f/0x9e0
[  284.993053][   T12]  netlink_sendmsg+0x805/0xb30
[  284.994812][   T12]  __sock_sendmsg+0x21c/0x270
[  284.996463][   T12]  ____sys_sendmsg+0x505/0x830
[  284.998275][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  285.000282][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  285.002141][   T12]  do_syscall_64+0xfa/0x3b0
[  285.003871][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.006054][   T12] 
[  285.006985][   T12] Second to last potentially related work creation:
[  285.009492][   T12]  kasan_save_stack+0x3e/0x60
[  285.011345][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  285.013317][   T12]  insert_work+0x3d/0x330
[  285.015099][   T12]  __queue_work+0xcd2/0xfb0
[  285.016803][   T12]  queue_work_on+0x181/0x270
[  285.018536][   T12]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  285.020745][   T12]  udp_tunnel_push_rx_port+0x180/0x200
[  285.022747][   T12]  vxlan_offload_rx_ports+0x139/0x200
[  285.024562][   T12]  vxlan_netdevice_event+0x111/0x470
[  285.026288][   T12]  notifier_call_chain+0x1b6/0x3e0
[  285.028031][   T12]  call_netdevice_notifiers+0x88/0xc0
[  285.029692][   T12]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  285.031683][   T12]  notifier_call_chain+0x1b6/0x3e0
[  285.033238][   T12]  register_netdevice+0x1608/0x1ae0
[  285.035377][   T12]  nsim_create+0xae8/0xf10
[  285.036995][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  285.038470][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  285.039921][   T12]  nsim_dev_reload_up+0x451/0x780
[  285.041359][   T12]  devlink_reload+0x4ec/0x8d0
[  285.042710][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  285.044251][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  285.045886][   T12]  genl_rcv_msg+0x60e/0x790
[  285.047621][   T12]  netlink_rcv_skb+0x208/0x470
[  285.049363][   T12]  genl_rcv+0x28/0x40
[  285.050795][   T12]  netlink_unicast+0x82f/0x9e0
[  285.052255][   T12]  netlink_sendmsg+0x805/0xb30
[  285.053877][   T12]  __sock_sendmsg+0x21c/0x270
[  285.055286][   T12]  ____sys_sendmsg+0x505/0x830
[  285.056892][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  285.058440][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  285.059937][   T12]  do_syscall_64+0xfa/0x3b0
[  285.061333][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.063168][   T12] 
[  285.063962][   T12] The buggy address belongs to the object at ffff888028750800
[  285.063962][   T12]  which belongs to the cache kmalloc-256 of size 256
[  285.068683][   T12] The buggy address is located 176 bytes inside of
[  285.068683][   T12]  freed 256-byte region [ffff888028750800, ffff888028750900)
[  285.072676][   T12] 
[  285.073383][   T12] The buggy address belongs to the physical page:
[  285.075378][   T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28750
[  285.078012][   T12] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  285.080425][   T12] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  285.082876][   T12] page_type: f5(slab)
[  285.084479][   T12] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122
[  285.087845][   T12] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  285.091103][   T12] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122
[  285.094445][   T12] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  285.097533][   T12] head: 00fff00000000001 ffffea0000a1d401 00000000ffffffff 00000000ffffffff
[  285.100145][   T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  285.102930][   T12] page dumped because: kasan: bad access detected
[  285.104926][   T12] page_owner tracks the page as allocated
[  285.106558][   T12] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11783, tgid 11782 (syz.0.1569), ts 211226646718, free_ts 200037719690
[  285.112836][   T12]  post_alloc_hook+0x240/0x2a0
[  285.115560][   T12]  get_page_from_freelist+0x21e4/0x22c0
[  285.117438][   T12]  __alloc_frozen_pages_noprof+0x181/0x370
[  285.119273][   T12]  alloc_pages_mpol+0x232/0x4a0
[  285.120708][   T12]  allocate_slab+0x8a/0x370
[  285.122022][   T12]  ___slab_alloc+0xbeb/0x1420
[  285.123472][   T12]  __kmalloc_noprof+0x305/0x4f0
[  285.125417][   T12]  iter_file_splice_write+0x1c6/0x10e0
[  285.127591][   T12]  direct_splice_actor+0x101/0x160
[  285.129455][   T12]  splice_direct_to_actor+0x5a8/0xcc0
[  285.131492][   T12]  do_splice_direct+0x181/0x270
[  285.133334][   T12]  do_sendfile+0x4da/0x7e0
[  285.135016][   T12]  __se_sys_sendfile64+0x13e/0x190
[  285.136949][   T12]  do_syscall_64+0xfa/0x3b0
[  285.138684][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.140770][   T12] page last free pid 69 tgid 69 stack trace:
[  285.143144][   T12]  __free_frozen_pages+0xbc4/0xd30
[  285.145043][   T12]  vfree+0x25a/0x400
[  285.146436][   T12]  bpf_map_free_deferred+0x113/0x140
[  285.148815][   T12]  process_scheduled_works+0xae1/0x17b0
[  285.150949][   T12]  worker_thread+0x8a0/0xda0
[  285.152662][   T12]  kthread+0x711/0x8a0
[  285.154118][   T12]  ret_from_fork+0x439/0x7d0
[  285.155784][   T12]  ret_from_fork_asm+0x1a/0x30
[  285.157548][   T12] 
[  285.158405][   T12] Memory state around the buggy address:
[  285.160520][   T12]  ffff888028750780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  285.163512][   T12]  ffff888028750800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.166502][   T12] >ffff888028750880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  285.169448][   T12]                                      ^
[  285.171582][   T12]  ffff888028750900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  285.174431][   T12]  ffff888028750980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  285.177294][   T12] ==================================================================
[  285.184403][   T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  285.187105][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  285.190443][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.194248][   T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  285.196999][   T12] Call Trace:
[  285.198280][   T12]  <TASK>
[  285.199369][   T12]  dump_stack_lvl+0x99/0x250
[  285.201010][   T12]  ? __asan_memcpy+0x40/0x70
[  285.202663][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.204472][   T12]  ? __pfx__printk+0x10/0x10
[  285.206228][   T12]  vpanic+0x281/0x750
[  285.207744][   T12]  ? preempt_schedule+0xae/0xc0
[  285.209585][   T12]  ? __pfx_vpanic+0x10/0x10
[  285.211249][   T12]  ? preempt_schedule_common+0x83/0xd0
[  285.213298][   T12]  ? preempt_schedule+0xae/0xc0
[  285.214911][   T12]  ? __pfx_preempt_schedule+0x10/0x10
[  285.216492][   T12]  panic+0xb9/0xc0
[  285.217717][   T12]  ? __pfx_panic+0x10/0x10
[  285.219032][   T12]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  285.220855][   T12]  ? __mutex_lock+0x147/0x1350
[  285.222268][   T12]  check_panic_on_warn+0x89/0xb0
[  285.223827][   T12]  ? __mutex_lock+0x147/0x1350
[  285.225660][   T12]  end_report+0x78/0x160
[  285.227119][   T12]  kasan_report+0x129/0x150
[  285.228944][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  285.231207][   T12]  ? __mutex_lock+0x147/0x1350
[  285.233124][   T12]  __mutex_lock+0x147/0x1350
[  285.234957][   T12]  ? __mutex_lock+0x5bb/0x1350
[  285.236809][   T12]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  285.239309][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  285.241158][   T12]  ? __lock_acquire+0xab9/0xd20
[  285.243041][   T12]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  285.245191][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  285.246935][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  285.249168][   T12]  process_scheduled_works+0xae1/0x17b0
[  285.250814][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  285.252945][   T12]  worker_thread+0x8a0/0xda0
[  285.254603][   T12]  kthread+0x711/0x8a0
[  285.256008][   T12]  ? __pfx_worker_thread+0x10/0x10
[  285.257613][   T12]  ? __pfx_kthread+0x10/0x10
[  285.259344][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  285.261376][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.263038][   T12]  ? __pfx_kthread+0x10/0x10
[  285.264657][   T12]  ret_from_fork+0x439/0x7d0
[  285.266026][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  285.267710][   T12]  ? __switch_to_asm+0x39/0x70
[  285.269178][   T12]  ? __switch_to_asm+0x33/0x70
[  285.270730][   T12]  ? __pfx_kthread+0x10/0x10
[  285.272145][   T12]  ret_from_fork_asm+0x1a/0x30
[  285.273579][   T12]  </TASK>
[  285.275035][   T12] Kernel Offset: disabled
[  285.276469][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:26:20  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7130
R8 =ffff888106430237 R9 =1ffff11020c86046 R10=dffffc0000000000 R11=ffffffff854fb640
R12=dffffc0000000000 R13=ffffffff99b048c1 R14=ffffffff99df9480 R15=0000000000000000
RIP=ffffffff854fb6bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f28a89b9fc8 CR3=0000000033e9e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000316e61637876
XMM02=30f1a0961cf82ba0 a6eff34fac300b3c XMM03=813ba9fb4786fb88 b07ce4ea1a62d172
XMM04=80d7782cae5c8b67 3205dcc2305e37f1 XMM05=8d83251fe2f1f123 716ac461932cac1c
XMM06=512aeb151fd6eb0e 822ef26d02a19786 XMM07=1f966a2298dffab8 11919c3f4e593687
XMM08=058c26e880d7782c ae5c8b673205dcc2 XMM09=0000000000000000 00007f1d54012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=1b9eeb9193cba300 RDX=ffff888107ced640
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=0000000000000001 RSP=ffffc90008637330
R8 =0000000000000000 R9 =ffffffff822e5c37 R10=dffffc0000000000 R11=fffff940008a3e11
R12=0000000000000000 R13=ffffea000451f080 R14=ffffffff8dbe2d18 R15=dffffc0000000000
RIP=ffffffff81a6601e RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f744ae786c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a6897 CR3=0000000110c4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f744a012e7b
XMM06=0000000000000000 00007f744a012e75 XMM07=0000000000000000 00007f744a012e89
XMM08=0000000000000000 00007f744a012f0f XMM09=0000000000000000 00007f744a012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
