last executing test programs:

1.555648429s ago: executing program 0 (id=1587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4)

1.545892256s ago: executing program 0 (id=1588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3)
close(r2)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
sendto$inet6(r4, &(0x7f0000000180)='\x00\x00', 0x2, 0x20000040, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10)
r6 = socket(0x22, 0x2, 0x23)
recvmsg(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0xffffffffffffff93, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYBLOB="498d9a8bff953cebcb56680180000000000000bebca08de8b8d9692114fcef44d7b8dd0fe71c3a86012c346573ddaa6c466c603ed4f1672f75d884a820a1dbc31635fc02d4e7727786eb39f5206402b8acad146acf550d5781d00b03b15e28f0e0466427c23d1332dc0544ceb434c0e2418300f89864f055d239e3b8a12b92effe08420c04ff3296e05dadc49a2a921aa9975b8007174d4afdcacb3fd8e978a5524ce007bbf4a465bfc914ea42e3895e4716a75f79cbcd885d47ee4f84d3dcd3575b3c4defa9de3619d72116568b77a536ee0a3e5c9d5d19fd993aff01de37b160e0666fa57c2e0000000000000000", @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000000000010"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x8811)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
syz_emit_ethernet(0x46, &(0x7f0000000380)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000000)={'wg1\x00'})

951.057783ms ago: executing program 1 (id=1598):
r0 = socket$inet6(0x10, 0xa, 0x7)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x2, 0xffeffffe}, {0x16}]}, 0x10)
r1 = epoll_create(0x1e02)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xe, 'virt_wifi0\x00'})

903.968767ms ago: executing program 2 (id=1599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0x28, &(0x7f0000000300)={&(0x7f0000000a80)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0xff}, 0x7, 0x8, 0xa5, 0x7ff, 0x24, 'syz1\x00', "59d9387cf0044f5980ab25c4fe303563479fa20a24339b1b4ba41db6b55ec7cd", "454a93b47613671955f6b4b51c2ae062513086ce3ffe8f6283e5dd4caa9686b4", [{0x2, 0x81, {0x0, 0x2}}, {0x8e6, 0x5, {0x0, 0x6}}, {0x5, 0x5, {0x2, 0xfff}}, {0x7, 0xffff, {0x0, 0x2}}, {0xff, 0x4, {0x1, 0x9}}, {0x1ff, 0x0, {0x1, 0x7}}, {0x7, 0x7, {0x3, 0x400}}, {0x8, 0xb, {0x2, 0x7f}}, {0x101, 0x4699, {0x3, 0x3}}, {0xfff6, 0xfff3, {0x2, 0x3ff}}, {0x59e, 0x1200, {0x1, 0x8}}, {0xb445, 0x0, {0x0, 0x40}}, {0x9, 0xfffe, {0x1, 0x3}}, {0x9, 0x2, {0x1, 0x1}}, {0x80}, {0x6, 0x0, {0x1, 0x6}}, {0x6, 0x9, {0x2, 0x6}}, {0x9, 0xa96a, {0x1, 0x9}}, {0xff80, 0x9, {0x0, 0x5}}, {0x4, 0x3ff, {0x0, 0x8}}, {0x969, 0x2}, {0x1, 0x5, {0x0, 0xe17}}, {0x3, 0x36ee, {0x2, 0x7ec}}, {0x0, 0x8001, {0x0, 0x8}}, {0x6, 0x1, {0x3, 0xd}}, {0x61af, 0x101, {0x2, 0xc90}}, {0x400, 0x8000, {0x0, 0x4}}, {0x0, 0x7c8, {0x2, 0x9}}, {0x9, 0x0, {0x1, 0x1}}, {0x6, 0x6, {0x2, 0x5}}, {0x8, 0xd4b, {0x2, 0x3ac9a3f}}, {0x1, 0x81, {0x0, 0x2}}, {0x9, 0x0, {0x0, 0x1}}, {0x9e3, 0x1ff, {0x1, 0x7}}, {0x67, 0x400}, {0x4, 0x3, {0x1}}, {0x800, 0x800, {0x0, 0x1e}}, {0x8, 0x3, {0x0, 0xa18}}, {0x1, 0x0, {0x3, 0x3}}, {0x8000, 0x8d00, {0x2, 0x5122}}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0x1, 0x0, 0x7, 0xfffa, 0x1d, 'syz1\x00', "8958e682e0ed73ce63e3263225b0a08e8ac9a2f84ef5e988e8e335e4639ccd10", "66db617b094d7a0730012fb151d7c8b9168ced7c61f75b028510b0cb73201002", [{0x94, 0x6, {0x3, 0x7fffffff}}, {0x0, 0xbb}, {0x80, 0x2, {0x2, 0xffff8000}}, {0x7, 0xb, {0x1, 0x869}}, {0x9f5, 0xb, {0x1, 0xffffffff}}, {0x9, 0x4, {0x2}}, {0x7fff, 0x0, {0x2, 0x3}}, {0x3, 0xc, {0x2, 0x3ff}}, {0x7, 0x4, {0x3, 0x136d}}, {0x1000, 0x5, {0x1, 0x5}}, {0xccf, 0x1, {0x2, 0x5}}, {0x1a, 0x666e, {0x1, 0x2}}, {0x1ff, 0x100}, {0x0, 0x9, {0x1, 0x1}}, {0x2c62, 0xa, {0x1, 0x1}}, {0x8001, 0x5, {0x0, 0x4}}, {0x9d, 0x1, {0x0, 0x94}}, {0x2, 0x80, {0x2, 0x3ff}}, {0xfff7, 0xb, {0x0, 0xfffffff7}}, {0x37, 0x7, {0x1, 0x3000000}}, {0x0, 0xaff3, {0x0, 0x9}}, {0x8001, 0xff, {0x1, 0x2}}, {0x1, 0x8, {0x2, 0x100}}, {0x401, 0x1, {0x3, 0x80000001}}, {0xe000, 0x5, {0x0, 0x5}}, {0x80, 0x40, {0x1, 0x5}}, {0x3, 0xc, {0x1, 0x5dc34a35}}, {0x892, 0x8000, {0x2, 0x1}}, {0x4def, 0x5, {0x0, 0x3}}, {0x37e, 0xc, {0x0, 0x6}}, {0x2, 0xd, {0x2}}, {0xa7, 0xfffc, {0x2, 0x8}}, {0xfff7, 0xfff, {0x3, 0x8}}, {0x8000, 0xfffc, {0x0, 0xf}}, {0x7, 0x9, {0x0, 0xd8c8}}, {0x401, 0x6, {0x3, 0x1d1}}, {0x3, 0xff, {0x1, 0x10001}}, {0x4, 0x7f, {0x3, 0x1}}, {0x1, 0xffff, {0x3, 0x96}}, {0x9df4, 0x5, {0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x90}, 0x4040800)

903.30638ms ago: executing program 2 (id=1600):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4c23, @local}, 0x10)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4080000000000006106650000000000060000000000000095000000000000009252a04f06397c0f947cfe287d5e09e509e1ae9cea2c2761e53b462d475eee75"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4080000000000006106650000000000060000000000000095000000000000009252a04f06397c0f947cfe287d5e09e509e1ae9cea2c2761e53b462d475eee75"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x80108906, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x80108906, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x80ff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x200002}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x94}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0eab070004000523"], 0xfe33)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) (async)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d", 0x7a}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d1", 0x1d}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x2}}], 0x2, 0xc0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001240)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001240)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="3504000030000511d25a80648c63940d0324fc60040035400c0002000200002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767309099f86f8e9e71fa51bde29f19b06fb9b3ba96da0e93d5a4024c1747fff68092705b44bb48dd2db4f3127aab13b4af0554957da6c0e03db227b65d459fa5c1232d7b62f12b65354b7e7fd32998da02ae0dc28942ec82d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85ccd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee048c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b96d27f7fb1e098954", 0x160}, {&(0x7f0000000a40)="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", 0x2d5}], 0x2}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000001000900010073797a30200000004c000000060a010400009692000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e7c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xd4}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000001000900010073797a30200000004c000000060a010400009692000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e7c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xd4}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000007cbbbafa53a11811e3576270720408010200000000000000000000000006000240000000000500030088000000"], 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

855.016118ms ago: executing program 1 (id=1601):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4a, &(0x7f00000002c0)={0x0, 0x0}, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x158, 0x10, 0x801, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8010}, [@IFLA_MASTER={0x8}, @IFLA_VF_PORTS={0x130, 0x18, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1b705e24f9e11d0f16cb5dcba343b9d6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b31f7f2046726cd56123eafafcf461d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70788d63b947f1eca3b437429e27a92b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "92fc75e3c7e8d7a3fbb1f4b3f02140f9"}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ee49391994c069d51afaea9e94cc7d93"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "595cd4a5e82bbae2ebefba616cfbe471"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a71e110a11366ecf24052de10a37f8b6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "758cf89b48a9808ba289044d8182def6"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ac7906f28ae13cb811cb57623dd8724"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7fbaceb3262b1728169ccdfb1aabe715"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0009364275aab28fd2bdefb212e047ff"}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xa885}, 0x80) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newlink={0x158, 0x10, 0x801, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8010}, [@IFLA_MASTER={0x8}, @IFLA_VF_PORTS={0x130, 0x18, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1b705e24f9e11d0f16cb5dcba343b9d6"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2b31f7f2046726cd56123eafafcf461d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70788d63b947f1eca3b437429e27a92b"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "92fc75e3c7e8d7a3fbb1f4b3f02140f9"}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "ee49391994c069d51afaea9e94cc7d93"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "595cd4a5e82bbae2ebefba616cfbe471"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a71e110a11366ecf24052de10a37f8b6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "758cf89b48a9808ba289044d8182def6"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3ac7906f28ae13cb811cb57623dd8724"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7fbaceb3262b1728169ccdfb1aabe715"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0009364275aab28fd2bdefb212e047ff"}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xa885}, 0x80)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x336)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "37c891", 0x7b}) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "37c891", 0x7b})
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000002040)=0x80000000, 0x4) (async)
setsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000002040)=0x80000000, 0x4)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)

704.55537ms ago: executing program 2 (id=1602):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0), 0x0, 0x7)
close(r1)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0xfffffffb, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r4=>0x0})
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg(r5, &(0x7f0000000200)={&(0x7f00000005c0)=@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/40, 0x28, 0x1, &(0x7f0000000240)=""/162, 0xa2}, &(0x7f0000000140)=0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
splice(r0, 0x0, r3, 0x0, 0x10d00, 0x0)

585.177519ms ago: executing program 2 (id=1603):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'macsec0\x00', 0x8000})
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x882}, 0x20000000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getqdisc={0x34, 0x26, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x8, 0xb}, {0xb, 0x4}, {0x7, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

584.511071ms ago: executing program 0 (id=1604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00'}, 0x94)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0xff}, 0x7, 0x8, 0xa5, 0x7ff, 0x24, 'syz1\x00', "59d9387cf0044f5980ab25c4fe303563479fa20a24339b1b4ba41db6b55ec7cd", "454a93b47613671955f6b4b51c2ae062513086ce3ffe8f6283e5dd4caa9686b4", [{0x2, 0x81, {0x0, 0x2}}, {0x8e6, 0x5, {0x0, 0x6}}, {0x5, 0x5, {0x2, 0xfff}}, {0x7, 0xffff, {0x0, 0x2}}, {0xff, 0x4, {0x1, 0x9}}, {0x1ff, 0x0, {0x1, 0x7}}, {0x7, 0x7, {0x3, 0x400}}, {0x8, 0xb, {0x2, 0x7f}}, {0x101, 0x4699, {0x3, 0x3}}, {0xfff6, 0xfff3, {0x2, 0x3ff}}, {0x59e, 0x1200, {0x1, 0x8}}, {0xb445, 0x0, {0x0, 0x40}}, {0x9, 0xfffe, {0x1, 0x3}}, {0x9, 0x2, {0x1, 0x1}}, {0x80}, {0x6, 0x0, {0x1, 0x6}}, {0x6, 0x9, {0x2, 0x6}}, {0x9, 0xa96a, {0x1, 0x9}}, {0xff80, 0x9, {0x0, 0x5}}, {0x4, 0x3ff, {0x0, 0x8}}, {0x969, 0x2}, {0x1, 0x5, {0x0, 0xe17}}, {0x3, 0x36ee, {0x2, 0x7ec}}, {0x0, 0x8001, {0x0, 0x8}}, {0x6, 0x1, {0x3, 0xd}}, {0x61af, 0x101, {0x2, 0xc90}}, {0x400, 0x8000, {0x0, 0x4}}, {0x0, 0x7c8, {0x2, 0x9}}, {0x9, 0x0, {0x1, 0x1}}, {0x6, 0x6, {0x2, 0x5}}, {0x8, 0xd4b, {0x2, 0x3ac9a3f}}, {0x1, 0x81, {0x0, 0x2}}, {0x9, 0x0, {0x0, 0x1}}, {0x9e3, 0x1ff, {0x1, 0x7}}, {0x67, 0x400}, {0x4, 0x3, {0x1}}, {0x800, 0x800, {0x0, 0x1e}}, {0x8, 0x3, {0x0, 0xa18}}, {0x1, 0x0, {0x3, 0x3}}, {0x8000, 0x8d00, {0x2, 0x5122}}]}}}, {{0x254, 0x1, {{0x3, 0x101}, 0x1, 0x0, 0x7, 0xfffa, 0x1d, 'syz1\x00', "8958e682e0ed73ce63e3263225b0a08e8ac9a2f84ef5e988e8e335e4639ccd10", "66db617b094d7a0730012fb151d7c8b9168ced7c61f75b028510b0cb73201002", [{0x94, 0x6, {0x3, 0x7fffffff}}, {0x0, 0xbb}, {0x80, 0x2, {0x3, 0xffff8000}}, {0x7, 0xb, {0x1, 0x869}}, {0x9f5, 0xb, {0x1, 0xffffffff}}, {0x9, 0x4, {0x2}}, {0x7fff, 0x0, {0x2, 0x3}}, {0x3, 0xa, {0x2, 0x3ff}}, {0x7, 0x4, {0x3, 0x136d}}, {0x1000, 0x5, {0x1, 0x5}}, {0xccf, 0x1, {0x2, 0x5}}, {0x1a, 0x666e, {0x1, 0x2}}, {0x1ff, 0x100}, {0x0, 0x9, {0x1, 0x1}}, {0x2c62, 0xa, {0x1, 0x1}}, {0x8001, 0x5, {0x0, 0x4}}, {0x9d, 0x1, {0x0, 0x94}}, {0x2, 0x80, {0x2, 0x3ff}}, {0xfff7, 0xb, {0x0, 0xfffffff7}}, {0x37, 0x7, {0x1, 0x3000000}}, {0x0, 0xaff3, {0x0, 0x9}}, {0x8001, 0xff, {0x1, 0x2}}, {0x1, 0x8, {0x2, 0x100}}, {0x401, 0x1, {0x3, 0x80000001}}, {0xe000, 0x3, {0x0, 0x5}}, {0x80, 0x40, {0x1, 0x5}}, {0x3, 0xc, {0x1, 0x5dc34a35}}, {0x892, 0x8000, {0x2, 0x1}}, {0x4def, 0x5, {0x0, 0x3}}, {0x37e, 0xc, {0x0, 0x6}}, {0x2, 0xd, {0x2}}, {0xa7, 0xfffc, {0x2, 0x8}}, {0xfff7, 0xfff, {0x3, 0x8}}, {0x8000, 0xfffc, {0x3, 0xf}}, {0x7, 0x9, {0x0, 0xd8c8}}, {0x401, 0x6, {0x3, 0x1d1}}, {0x3, 0xff, {0x1, 0x10001}}, {0x4, 0x7f, {0x3, 0x1}}, {0x1, 0xffff, {0x3, 0x96}}, {0x9df4, 0x5, {0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x90}, 0x4040800)

510.832697ms ago: executing program 0 (id=1605):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5805}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x6a, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x1}}, 0x9, 0x2}, 0x90)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x22, "070068c28248e90c7262208cd2a2f4e731947dc0ac388837f01cd314b000816bb789"}, &(0x7f0000000040)=0x2a)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x8, 0x4)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000f5000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a01080000000000000000010000000900010073797a30"], 0x9c}}, 0x0)

455.286398ms ago: executing program 1 (id=1606):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = socket(0x10, 0x803, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001500010086f700000000000002100000", @ANYRES32, @ANYBLOB="14000300730000000000000000000000001a1c1f"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004000}, 0x0)
recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)

454.65601ms ago: executing program 0 (id=1607):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="2e0000003a000511d25a80698c63940d0124fc602f6e35400c782c6fc41ec00037153e37a366000025581d00d160", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000030000000000000000957f000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0xb6d075f6b628c925, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

405.456612ms ago: executing program 0 (id=1608):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}], 0x7, 0x20, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x2}}], 0x2, 0xc0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000030a01080000000000000000000000000900030073797a320000000014000480080003400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe140000001100010000000000000000000000000a"], 0xb4}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0)
bind$inet(r3, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580))
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x4748, 0x4)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000240)=0x42000000, 0x4)
recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4bbbfe, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

404.563454ms ago: executing program 2 (id=1609):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900643200fe8000000000000000000005000000aaff020000000000000000000000000001"], 0x9a)

295.34205ms ago: executing program 1 (id=1610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async)
recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x88a0403}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd700001010000020000000800060001000000080005000900000052c9cf31b3d6d78f5473f8e5c3acb885844d3c83a6e77d"], 0x24}, 0x1, 0x0, 0x0, 0x20028800}, 0x4011)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

290.650618ms ago: executing program 1 (id=1611):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffff, 0x1000000000, 0x53e5, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x5, @local, 0xfffffffc}, 0x1c)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x9}}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x4800)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'netpci0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

55.296834ms ago: executing program 2 (id=1612):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x6000000000000001, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000064}, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', <r7=>0x0, 0x29, 0x0, 0x3, 0x3ff, 0x2, @empty, @private0, 0x8, 0x8000, 0x718}})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000380)=""/146, 0x2c, 0x92, 0x1, 0x0, 0xc071691778324d00}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x9, 0xfffffff8, 0x2000, 0x180, 0xffffffffffffffff, 0x2, '\x00', r7, r8, 0x3, 0x1, 0x3, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRESOCT=r11, @ANYBLOB="04005b00ff01000040000000"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="c02cedea1a55a3efeeb90fc57761cbaa72dba756675dcc58a9a6eb50955dad03d52998892f50c8be13349021f9497027687514aead4566fbef9c6bff587e10a0ef7419e2f0e44845213e0f4dee0e4624dc26bc116f27befdd8a0cf9fe65f947717d86b8cb900634f257a546b26bde7a405c3"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000000000000200fffe0900020073797a320000000034000480300001800d00010073796e240ec70bc55da670726f7879000000001c00028008000340a4b9672f0500020002000000050002000902000014000480100001801a000100736f636b6574000004000740140000001100010000000000008fe530c224e99a50522d663c"], 0x94}}, 0x0)

0s ago: executing program 1 (id=1613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000340)={0xb06b, 0x1, 0x1ff, 0x9, 0x7, 0x2, 0x12, "9cd7ad19f9d30c255f0112be4e03c16df14b7ab0", "14b2a2d9f89740fa55223b8209ddfcf98ddcdaa2"})

kernel console output (not intermixed with test programs):

:50:50:50:50
[   67.565166][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.736416][ T5933] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.739913][ T5933] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.743613][ T5933] netlink: 'syz.2.5': attribute type 2 has an invalid length.
[   67.753535][ T5933] netlink: 'syz.2.5': attribute type 1 has an invalid length.
[   67.765248][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'.
[   67.805390][ T5939] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.820597][ T5939] netlink: 'syz.0.6': attribute type 5 has an invalid length.
[   67.856554][ T5939] netlink: 'syz.0.6': attribute type 10 has an invalid length.
[   67.901328][ T5946] netlink: 'syz.2.8': attribute type 5 has an invalid length.
[   67.904263][ T5939] 8021q: adding VLAN 0 to HW filter on device team0
[   67.916028][ T5939] bond0: (slave team0): Enslaving as an active interface with an up link
[   68.011141][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   68.316664][ T5975] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.15'.
[   68.324589][ T5975] netlink: 'syz.1.15': attribute type 10 has an invalid length.
[   68.522142][   T56] block nbd0: Receive control failed (result -32)
[   68.618228][ T5996] netlink: 'syz.2.21': attribute type 14 has an invalid length.
[   68.708535][ T6005] netlink: 'syz.2.23': attribute type 30 has an invalid length.
[   68.718725][ T6005] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   68.722538][ T6005] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   68.756163][   T54] Bluetooth: hci0: command tx timeout
[   68.758381][   T54] Bluetooth: hci1: command tx timeout
[   68.811199][ T6008] netlink: 'syz.1.24': attribute type 10 has an invalid length.
[   68.815667][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.819556][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.832640][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.835672][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.839044][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.842372][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.849309][ T5857] Bluetooth: hci2: command tx timeout
[   68.854372][ T6008] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   68.860717][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   68.864471][ T6008] bridge_slave_1: left allmulticast mode
[   68.867199][ T6008] bridge_slave_1: left promiscuous mode
[   68.868029][ T6010] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET)
[   68.869591][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.877752][ T6008] bridge_slave_0: left allmulticast mode
[   68.880090][ T6008] bridge_slave_0: left promiscuous mode
[   68.882482][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.899931][ T6008] bond0: (slave bridge0): Releasing backup interface
[   68.949280][ T6010] syzkaller1: entered promiscuous mode
[   68.954618][ T6010] syzkaller1: entered allmulticast mode
[   69.100405][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.111424][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.228951][ T5882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.232474][ T5882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.249935][ T5882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.253190][ T5882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.522748][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'.
[   69.548205][ T6023] hsr_slave_1 (unregistering): left promiscuous mode
[   70.156102][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   70.163033][ T6033] gtp0: entered promiscuous mode
[   70.164707][ T6033] gtp0: entered allmulticast mode
[   70.528024][ T6038] Bluetooth: MGMT ver 1.23
[   70.630647][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.755895][ T6050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.37'.
[   70.835291][ T5857] Bluetooth: hci1: command tx timeout
[   70.838008][   T54] Bluetooth: hci0: command tx timeout
[   70.891980][ T6060] netlink: 284 bytes leftover after parsing attributes in process `syz.0.41'.
[   70.925430][   T54] Bluetooth: hci2: command tx timeout
[   71.402501][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.407146][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.490617][ T5918] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[   71.493842][ T5918] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[   71.499057][ T5918] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe
[   71.526377][ T5918] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   71.948560][ T6100] vti0: entered promiscuous mode
[   72.659796][ T6136] tipc: Started in network mode
[   72.662000][ T6136] tipc: Node identity 06c28d2273df, cluster identity 4711
[   72.665626][ T6136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.678563][ T6136] syzkaller0: entered promiscuous mode
[   72.680527][ T6136] syzkaller0: entered allmulticast mode
[   72.725827][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   72.731840][ T6135] tipc: Resetting bearer <eth:syzkaller0>
[   72.750131][ T6135] tipc: Disabling bearer <eth:syzkaller0>
[   72.758459][ T6141] warning: `syz.0.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.834428][ T6147] validate_nla: 2 callbacks suppressed
[   72.834453][ T6147] netlink: 'syz.2.61': attribute type 1 has an invalid length.
[   72.925356][   T54] Bluetooth: hci1: command tx timeout
[   72.945596][ T6162] __nla_validate_parse: 2 callbacks suppressed
[   72.945609][ T6162] netlink: 84 bytes leftover after parsing attributes in process `syz.0.66'.
[   72.950958][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'.
[   72.995301][   T54] Bluetooth: hci2: command tx timeout
[   73.038871][ T6169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.67'.
[   73.077200][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'.
[   73.082075][ T6169] netlink: 34 bytes leftover after parsing attributes in process `syz.0.67'.
[   73.109227][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.138791][ T6176] netlink: 'syz.2.69': attribute type 5 has an invalid length.
[   73.248192][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   73.524269][ T6205] netlink: 'syz.1.75': attribute type 5 has an invalid length.
[   73.593945][ T6208] pimreg: entered allmulticast mode
[   73.597562][ T6207] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.76'.
[   73.824598][ T6218] macvlan2: entered promiscuous mode
[   73.826884][ T6218] syz_tun: entered promiscuous mode
[   73.831676][ T6218] team0: Port device macvlan2 added
[   74.136650][ T6235] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   74.139300][ T6235] netlink: 228 bytes leftover after parsing attributes in process `syz.2.86'.
[   74.189937][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   74.355320][ T6204] pimreg: left allmulticast mode
[   74.475248][ T6242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.576742][ T6248] netlink: 'syz.1.88': attribute type 25 has an invalid length.
[   74.592964][ T6250] netlink: 'syz.1.88': attribute type 10 has an invalid length.
[   74.597409][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'.
[   74.604508][ T6250] team0: Port device geneve0 added
[   74.608647][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613493][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.617039][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.620302][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.054078][ T6274] team0: Port device macvlan2 removed
[   75.092593][ T6276] gtp0: left promiscuous mode
[   75.094333][ T6276] gtp0: left allmulticast mode
[   75.100869][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.106984][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.111298][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.116471][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.272562][ T6291] netlink: 'syz.1.102': attribute type 4 has an invalid length.
[   75.413295][ T6311] netlink: 'syz.1.106': attribute type 30 has an invalid length.
[   75.431469][ T6311] netlink: 'syz.1.106': attribute type 30 has an invalid length.
[   75.432376][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.442466][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.454931][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.459217][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.965830][ T6344] xt_l2tp: missing protocol rule (udp|l2tpip)
[   75.999674][ T6344] netlink: 'syz.1.117': attribute type 13 has an invalid length.
[   76.220903][ T6359] bridge_slave_0: left allmulticast mode
[   76.223137][ T6359] bridge_slave_0: left promiscuous mode
[   76.225717][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.231115][ T6359] bridge_slave_1: left allmulticast mode
[   76.233452][ T6359] bridge_slave_1: left promiscuous mode
[   76.237072][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.244216][ T6359] bond0: (slave bond_slave_0): Releasing backup interface
[   76.254060][ T6359] bond0: (slave bond_slave_1): Releasing backup interface
[   76.269141][ T6359] team0: Port device team_slave_0 removed
[   76.283993][ T6359] team0: Port device team_slave_1 removed
[   76.290622][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.293595][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.299905][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.303184][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.309183][ T6359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   76.812977][ T6379] veth3: entered promiscuous mode
[   76.827853][ T6379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.929732][ T6385] veth1_macvtap: left promiscuous mode
[   76.931588][ T6385] macsec0: entered promiscuous mode
[   76.933288][ T6385] macsec0: entered allmulticast mode
[   76.961188][ T6381] veth1_macvtap: entered promiscuous mode
[   76.963213][ T6381] veth1_macvtap: entered allmulticast mode
[   76.966710][ T6381] macsec0: left promiscuous mode
[   76.968474][ T6381] macsec0: left allmulticast mode
[   76.970287][ T6381] veth1_macvtap: left allmulticast mode
[   77.315231][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[   77.626143][   T10] cfg80211: failed to load regulatory.db
[   77.976233][ T6435] __nla_validate_parse: 20 callbacks suppressed
[   77.976250][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'.
[   77.983090][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'.
[   77.987172][ T6435] validate_nla: 7 callbacks suppressed
[   77.987186][ T6435] netlink: 'syz.0.147': attribute type 4 has an invalid length.
[   78.033472][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.148'.
[   78.044906][ T6437] vlan2: entered promiscuous mode
[   78.048601][ T6437] macvtap0: entered promiscuous mode
[   78.371820][ T6459] netlink: 'syz.0.155': attribute type 2 has an invalid length.
[   78.375882][ T6459] netlink: 360 bytes leftover after parsing attributes in process `syz.0.155'.
[   78.393264][ T6462] atomic_op ffff8881249de198 conn xmit_atomic 0000000000000000
[   78.458022][ T6470] netlink: 84 bytes leftover after parsing attributes in process `syz.1.159'.
[   78.484730][ T6466] netlink: 'syz.0.157': attribute type 1 has an invalid length.
[   78.606957][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'.
[   78.781060][ T6480] trusted_key: syz.0.162 sent an empty control message without MSG_MORE.
[   78.812602][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[   78.861001][ T6485] netlink: 'syz.0.164': attribute type 2 has an invalid length.
[   78.863585][ T6485] netlink: 360 bytes leftover after parsing attributes in process `syz.0.164'.
[   78.977364][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.150119][ T6494] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.168'.
[   79.201578][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'.
[   79.215405][ T6500] netlink: 'syz.0.170': attribute type 2 has an invalid length.
[   79.268194][ T6499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.428937][ T6504] bond1: entered promiscuous mode
[   79.430663][ T6504] bond1: entered allmulticast mode
[   79.432652][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.470317][ T6507] syzkaller1: entered promiscuous mode
[   79.472707][ T6507] syzkaller1: entered allmulticast mode
[   80.049942][ T6518] ipvlan2: entered promiscuous mode
[   80.065393][ T6520] lo speed is unknown, defaulting to 1000
[   80.078352][ T6520] lo speed is unknown, defaulting to 1000
[   80.099430][ T6520] lo speed is unknown, defaulting to 1000
[   80.136665][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.138976][ T6520] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.184398][ T6520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   80.385784][ T6520] lo speed is unknown, defaulting to 1000
[   80.405829][ T6520] lo speed is unknown, defaulting to 1000
[   80.421678][ T6520] lo speed is unknown, defaulting to 1000
[   80.796498][ T6533] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   80.872820][ T6533] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.921675][ T6536] ipvlan3: entered allmulticast mode
[   80.925945][ T6536] bond2: entered allmulticast mode
[   81.036744][ T6533] bond2: (slave gretap2): making interface the new active one
[   81.073205][ T6533] gretap2: entered allmulticast mode
[   81.107645][ T6533] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   81.317403][ T6548] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   81.373616][ T6548] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.596382][ T6564] netlink: 'syz.1.188': attribute type 12 has an invalid length.
[   81.941132][ T6569] netlink: 'syz.1.189': attribute type 4 has an invalid length.
[   82.034182][ T6571] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.446339][ T6588] ip_vti0: entered promiscuous mode
[   82.817474][ T6611] Illegal XDP return value 4294967289 on prog  (id 40) dev N/A, expect packet loss!
[   82.967327][ T6632] sock: sock_timestamping_bind_phc: sock not bind to device
[   82.988158][ T6635] sock: sock_timestamping_bind_phc: sock not bind to device
[   83.006349][ T6634] veth3: left promiscuous mode
[   83.014639][ T6634] ipvlan2: left promiscuous mode
[   83.037373][ T6634] ipvlan3: left allmulticast mode
[   83.039459][ T6634] bond2: left allmulticast mode
[   83.041745][ T6634] gretap2: left allmulticast mode
[   83.049751][ T6017] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.055191][ T6017] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.057975][ T6017] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.060911][ T6017] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.109772][ T6639] __nla_validate_parse: 15 callbacks suppressed
[   83.109864][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'.
[   83.284239][ T6651] netlink: 'syz.2.211': attribute type 1 has an invalid length.
[   83.353868][ T6651] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.380514][ T6653] bond2: (slave geneve2): making interface the new active one
[   83.393449][ T6653] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   83.410804][ T6651] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   83.417455][ T6651] bond2: entered promiscuous mode
[   83.419219][ T6651] geneve2: entered promiscuous mode
[   83.566276][ T6659] netlink: 284 bytes leftover after parsing attributes in process `syz.2.213'.
[   83.607148][ T6662] netlink: 'syz.2.214': attribute type 2 has an invalid length.
[   83.610202][ T6662] netlink: 360 bytes leftover after parsing attributes in process `syz.2.214'.
[   83.664849][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[   83.889685][ T6673] tipc: Started in network mode
[   83.894843][ T6673] tipc: Node identity 860a5fed0b67, cluster identity 4711
[   83.898885][ T6673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.902473][ T6673] syzkaller0: entered promiscuous mode
[   83.904816][ T6673] syzkaller0: entered allmulticast mode
[   83.950597][ T6673] tipc: Resetting bearer <eth:syzkaller0>
[   83.954989][ T6672] tipc: Resetting bearer <eth:syzkaller0>
[   83.967512][ T6672] tipc: Disabling bearer <eth:syzkaller0>
[   84.415776][ T6687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.221'.
[   84.420478][ T6687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.221'.
[   84.444170][ T6687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.221'.
[   84.497710][ T6690] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20000
[   84.779432][ T6695] veth4: entered allmulticast mode
[   85.218252][ T6709] netlink: 'syz.2.230': attribute type 4 has an invalid length.
[   85.220842][ T6709] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.230'.
[   85.338821][ T6642] Set syz1 is full, maxelem 65536 reached
[   85.438748][ T6727] netlink: 'syz.2.235': attribute type 1 has an invalid length.
[   85.510022][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'.
[   85.513160][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'.
[   85.611490][ T6738] Set syz0 is full, maxelem 0 reached
[   85.671659][ T6744] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.706884][ T6748] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   85.792387][ T6756] netlink: 'syz.0.248': attribute type 23 has an invalid length.
[   85.817943][ T6760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.931368][ T6772] tipc: Failed to remove unknown binding: 66,1,1/0:2641737754/2641737756
[   85.934967][ T6772] netlink: 'syz.1.254': attribute type 5 has an invalid length.
[   86.028094][ T6776] netlink: 'syz.2.256': attribute type 13 has an invalid length.
[   86.031420][ T6776] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   86.172749][ T6787] lo speed is unknown, defaulting to 1000
[   86.670063][ T6799] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   86.702714][ T6799] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.707840][ T6802] tipc: Started in network mode
[   86.710106][ T6802] tipc: Node identity ba7673602e34, cluster identity 4711
[   86.722593][ T6802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.727294][ T6802] syzkaller0: entered promiscuous mode
[   86.732931][ T6802] syzkaller0: entered allmulticast mode
[   86.780688][ T6802] tipc: Resetting bearer <eth:syzkaller0>
[   86.789671][ T6800] tipc: Resetting bearer <eth:syzkaller0>
[   86.811198][ T6800] tipc: Disabling bearer <eth:syzkaller0>
[   86.882499][ T6808] lo speed is unknown, defaulting to 1000
[   87.041274][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.310295][ T6847] lo speed is unknown, defaulting to 1000
[   87.469583][ T6863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.587078][ T6863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.681259][ T6863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.786003][ T6863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.884008][ T6017] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.900211][ T6017] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.918136][ T6017] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.929333][ T6017] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.962895][ T6892] netlink: 'syz.1.284': attribute type 2 has an invalid length.
[   87.998253][ T6892] k*: entered promiscuous mode
[   88.166345][ T6904] __nla_validate_parse: 18 callbacks suppressed
[   88.166357][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'.
[   88.207622][ T6907] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[   88.294994][ T6912] bond0: (slave vlan2): Opening slave failed
[   88.486231][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.489731][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.490151][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   88.499776][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.293'.
[   88.601799][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[   88.605944][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'.
[   88.609974][ T6922] netlink: 'syz.1.294': attribute type 15 has an invalid length.
[   88.660231][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   88.718198][ T6924] lo speed is unknown, defaulting to 1000
[   88.990558][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'.
[   89.128139][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.298'.
[   89.131911][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.298'.
[   89.135718][ T6934] netlink: 'syz.1.298': attribute type 4 has an invalid length.
[   89.879650][ T6942] netlink: 'syz.2.301': attribute type 4 has an invalid length.
[   89.882617][ T6942] netlink: 360 bytes leftover after parsing attributes in process `syz.2.301'.
[   89.919503][ T6944] batadv_slave_1: entered promiscuous mode
[   89.962222][ T6943] batadv_slave_1: left promiscuous mode
[   90.065019][ T6954] ieee802154 phy0 wpan0: encryption failed: -22
[   90.079990][ T6948] team0: Mode changed to "loadbalance"
[   90.146462][ T6961] netlink: 'syz.2.307': attribute type 10 has an invalid length.
[   90.170518][ T6961] veth0_vlan: left promiscuous mode
[   90.174443][ T6961] veth0_vlan: entered promiscuous mode
[   90.180177][ T6961] team0: Device veth0_vlan failed to register rx_handler
[   90.274869][ T6967] dvmrp0: entered allmulticast mode
[   90.370221][ T6969] bond0: entered promiscuous mode
[   90.371995][ T6969] bond_slave_0: entered promiscuous mode
[   90.373939][ T6969] bond_slave_1: entered promiscuous mode
[   90.377315][ T6969] batadv0: entered promiscuous mode
[   90.380395][ T6969] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   90.383659][ T6969] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   90.389314][ T6969] 8021q: adding VLAN 0 to HW filter on device hsr1
[   90.536795][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.570733][ T6975] syzkaller0: entered promiscuous mode
[   90.573112][ T6975] syzkaller0: entered allmulticast mode
[   90.585885][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[   90.602639][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[   90.721106][ T6980] vlan2: entered promiscuous mode
[   90.723331][ T6980] vlan2: entered allmulticast mode
[   90.725785][ T6980] hsr_slave_1: entered allmulticast mode
[   90.843109][ T6984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.127000][ T6991] netlink: 'syz.1.317': attribute type 2 has an invalid length.
[   91.184858][ T6993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.192745][ T6993] syzkaller0: entered promiscuous mode
[   91.195579][ T6993] syzkaller0: entered allmulticast mode
[   91.213856][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   91.216878][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.219926][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.223916][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[   91.234718][ T6992] tipc: Disabling bearer <eth:syzkaller0>
[   91.393126][ T7003] IPVS: Error connecting to the multicast addr
[   91.528010][ T7010] netlink: 'syz.1.325': attribute type 10 has an invalid length.
[   91.758036][ T7024] Bluetooth: MGMT ver 1.23
[   92.453010][ T5918] IPVS: starting estimator thread 0...
[   92.555186][ T7035] IPVS: using max 63 ests per chain, 151200 per kthread
[   92.643751][ T7047] netlink: 'syz.2.334': attribute type 4 has an invalid length.
[   93.152288][ T7084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.164155][  T793] lo speed is unknown, defaulting to 1000
[   93.175794][  T793] syz1: Port: 1 Link DOWN
[   93.258108][ T7086] __nla_validate_parse: 15 callbacks suppressed
[   93.258127][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'.
[   93.264823][ T7086] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   93.410709][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'.
[   93.425525][ T7093] netlink: 4832 bytes leftover after parsing attributes in process `syz.1.345'.
[   93.559865][ T7104] netlink: 'syz.0.348': attribute type 8 has an invalid length.
[   93.841159][ T7112] lo speed is unknown, defaulting to 1000
[   93.873282][ T7113] netlink: 'syz.0.351': attribute type 39 has an invalid length.
[   93.886138][ T7113] veth0_macvtap: left promiscuous mode
[   93.947657][ T7115] netlink: 'syz.0.351': attribute type 39 has an invalid length.
[   93.997651][ T7112] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   94.004009][ T7112] netlink: 72 bytes leftover after parsing attributes in process `syz.1.352'.
[   94.008180][ T7112] netlink: 72 bytes leftover after parsing attributes in process `syz.1.352'.
[   94.751893][ T7129] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[   94.760993][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'.
[   94.768726][ T7129] Bluetooth: MGMT ver 1.23
[   94.812860][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.357'.
[   94.845620][ T7133] netlink: zone id is out of range
[   94.847863][ T7133] netlink: zone id is out of range
[   94.850947][ T7135] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   94.851614][ T7133] netlink: zone id is out of range
[   94.860150][ T7135] netlink: 80 bytes leftover after parsing attributes in process `syz.2.358'.
[   94.923456][ T7133] netlink: set zone limit has 4 unknown bytes
[   94.968197][ T7143] netlink: 360 bytes leftover after parsing attributes in process `syz.1.361'.
[   95.134016][ T7153] macvlan1: entered allmulticast mode
[   95.136034][ T7153] veth1_vlan: entered allmulticast mode
[   95.141386][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   95.164305][ T7153] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   95.270048][ T7161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.274248][ T7161] syzkaller0: entered promiscuous mode
[   95.277407][ T7161] syzkaller0: entered allmulticast mode
[   95.283571][ T7161] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   95.328812][ T7160] tipc: Resetting bearer <eth:syzkaller0>
[   95.344102][ T7160] tipc: Disabling bearer <eth:syzkaller0>
[   96.037319][ T7195] lo speed is unknown, defaulting to 1000
[   96.164329][ T7207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.167939][ T7207] syzkaller0: entered promiscuous mode
[   96.170241][ T7207] syzkaller0: entered allmulticast mode
[   96.178669][ T7207] hsr_slave_0: left promiscuous mode
[   96.181719][ T7207] hsr_slave_1: left promiscuous mode
[   96.235411][ T7208] tipc: Resetting bearer <eth:syzkaller0>
[   96.258991][ T7206] tipc: Resetting bearer <eth:syzkaller0>
[   96.273550][ T7206] tipc: Disabling bearer <eth:syzkaller0>
[   96.484842][ T7216] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[   96.517378][ T7216] bond6: entered promiscuous mode
[   96.519565][ T7216] bond6: entered allmulticast mode
[   96.522103][ T7216] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.541112][ T7216] bridge0: entered promiscuous mode
[   96.542996][ T7216] bridge0: entered allmulticast mode
[   96.545384][ T7216] bond6: (slave bridge0): Enslaving as a backup interface with an up link
[   96.635548][   T13] net_ratelimit: 1 callbacks suppressed
[   96.635585][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   96.755832][ T7231] netlink: 'syz.2.388': attribute type 13 has an invalid length.
[   96.758980][ T7231] netlink: 'syz.2.388': attribute type 17 has an invalid length.
[   96.775541][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   96.988096][ T7231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.002800][ T7233] xfrm0: entered promiscuous mode
[   97.004986][ T7233] xfrm0: entered allmulticast mode
[   97.104839][ T7236] lo speed is unknown, defaulting to 1000
[   97.294912][   T10] IPVS: starting estimator thread 0...
[   97.295462][ T7257] IPVS: nq: FWM 3 0x00000003 - no destination available
[   97.301006][ T7255] bpq0: entered promiscuous mode
[   97.315247][ T7257] netlink: 'syz.1.395': attribute type 3 has an invalid length.
[   97.318802][ T7257] netlink: 'syz.1.395': attribute type 3 has an invalid length.
[   97.396083][ T7258] IPVS: using max 49 ests per chain, 117600 per kthread
[   97.516214][ T7270] syzkaller0: entered promiscuous mode
[   97.523292][ T7270] syzkaller0: entered allmulticast mode
[   97.594830][ T7278] netlink: 'syz.2.401': attribute type 4 has an invalid length.
[   97.622272][ T7278] netlink: 'syz.2.401': attribute type 4 has an invalid length.
[   97.685891][ T7279] bond3: entered promiscuous mode
[   97.689778][ T7279] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.798672][ T7279] bond3 (unregistering): Released all slaves
[   97.954263][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.957493][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.032462][ T7289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.040389][ T7289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.125659][ T5882] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.129331][ T5882] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.144308][ T5882] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.147914][ T5882] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.304434][ T7304] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   98.469998][ T7319] __nla_validate_parse: 24 callbacks suppressed
[   98.470019][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'.
[   98.503801][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'.
[   98.581314][ T7332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.584831][ T7332] syzkaller0: entered promiscuous mode
[   98.586848][ T7332] syzkaller0: entered allmulticast mode
[   98.641932][ T7332] tipc: Resetting bearer <eth:syzkaller0>
[   98.650177][ T7341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.419'.
[   98.654509][ T7331] tipc: Resetting bearer <eth:syzkaller0>
[   98.667681][ T7331] tipc: Disabling bearer <eth:syzkaller0>
[   98.704190][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[   98.877840][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'.
[   99.025660][ T7362] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   99.092603][ T7370] validate_nla: 1 callbacks suppressed
[   99.092620][ T7370] netlink: 'syz.1.428': attribute type 1 has an invalid length.
[   99.264367][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'.
[   99.319075][ T7391] netlink: 60 bytes leftover after parsing attributes in process `syz.1.431'.
[   99.431325][ T7398] netlink: 88 bytes leftover after parsing attributes in process `syz.1.432'.
[   99.540628][ T7407] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[   99.592379][ T7412] netlink: 'syz.1.435': attribute type 11 has an invalid length.
[   99.597644][ T7413] netlink: 'syz.1.435': attribute type 11 has an invalid length.
[  100.079122][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'.
[  100.082838][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'.
[  100.086822][ T7430] netlink: 'syz.2.437': attribute type 4 has an invalid length.
[  100.199207][ T7436] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  100.202519][ T7435] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  100.314861][ T7448] veth3: entered promiscuous mode
[  100.317696][ T7446] bridge_slave_1: left allmulticast mode
[  100.319643][ T7446] bridge_slave_1: left promiscuous mode
[  100.320567][ T7448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.322075][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.332817][ T7446] bridge_slave_0: left allmulticast mode
[  100.335522][ T7446] bridge_slave_0: left promiscuous mode
[  100.338062][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.446540][ T7451] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  100.517703][ T7454] netlink: 'syz.1.445': attribute type 1 has an invalid length.
[  100.520668][ T7454] netlink: 'syz.1.445': attribute type 1 has an invalid length.
[  100.690813][ T7460] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  100.859511][ T7481] netlink: 'syz.2.453': attribute type 5 has an invalid length.
[  100.899099][ T7479] pimreg3: entered allmulticast mode
[  101.276117][ T7487] xfrm0: left promiscuous mode
[  101.321767][ T7487] veth1_vlan: left allmulticast mode
[  101.423126][ T7487] vti0: left promiscuous mode
[  101.431262][ T7487] bond2: left promiscuous mode
[  101.433969][ T7487] geneve2: left promiscuous mode
[  101.504123][ T7487] veth3: left promiscuous mode
[  101.656820][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.660316][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.663607][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.671328][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.743033][ T7513] netlink: 'syz.1.460': attribute type 10 has an invalid length.
[  101.759712][ T7513] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  101.762683][ T7513] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.771287][ T7515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.816818][ T7519] bridge0: Device is already in use.
[  102.007499][   T13] bond6: (slave bridge0): link status definitely down, disabling slave
[  102.031625][ T7532] netlink: 'syz.1.465': attribute type 1 has an invalid length.
[  102.043926][ T7532] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  102.195185][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  102.494403][ T7565] netlink: 'syz.1.471': attribute type 4 has an invalid length.
[  102.535184][ T7510] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  102.859493][ T7590] netlink: 'syz.2.475': attribute type 7 has an invalid length.
[  102.903105][ T7593] sctp: [Deprecated]: syz.1.476 (pid 7593) Use of int in maxseg socket option.
[  102.903105][ T7593] Use struct sctp_assoc_value instead
[  102.928264][ T7593] nbd: must specify a size in bytes for the device
[  102.931442][ T7595] ieee802154 phy1 wpan1: encryption failed: -22
[  103.354587][ T7624] ip_vti0: left promiscuous mode
[  103.380371][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.390306][ T7624] 8021q: adding VLAN 0 to HW filter on device team0
[  103.406391][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.506471][ T7624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.585751][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.597858][ T7638] __nla_validate_parse: 16 callbacks suppressed
[  103.597869][ T7638] netlink: 228 bytes leftover after parsing attributes in process `syz.1.490'.
[  103.602983][ T7639] netlink: 228 bytes leftover after parsing attributes in process `syz.1.490'.
[  103.638829][ T7638] bond8: entered promiscuous mode
[  103.641156][ T7638] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.653468][ T7624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.993653][ T7659] netlink: 22 bytes leftover after parsing attributes in process `syz.1.495'.
[  104.275302][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  104.316433][ T7665] syzkaller1: entered allmulticast mode
[  105.209570][ T7694] netlink: 6 bytes leftover after parsing attributes in process `syz.1.502'.
[  105.212603][ T7694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.292992][ T7697] netlink: 220 bytes leftover after parsing attributes in process `syz.1.503'.
[  105.297548][ T7697] netlink: 220 bytes leftover after parsing attributes in process `syz.1.503'.
[  105.460250][ T7702] : entered promiscuous mode
[  105.588771][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  105.832707][ T7733] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.515'.
[  105.848523][ T7733] validate_nla: 4 callbacks suppressed
[  105.848542][ T7733] netlink: 'syz.0.515': attribute type 10 has an invalid length.
[  105.864702][ T7733] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  105.988183][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[  106.034364][ T7745] geneve2: entered promiscuous mode
[  106.038050][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.041768][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.046041][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.049484][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.139707][ T7757] bond2: (slave geneve2): Releasing active interface
[  106.144411][ T7757] netlink: 'syz.2.522': attribute type 10 has an invalid length.
[  106.151595][ T7757] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.159231][ T7757] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.162537][ T7757] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.186799][ T7760] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  106.497727][ T7771] netlink: 360 bytes leftover after parsing attributes in process `syz.1.526'.
[  106.972228][ T7789] netlink: 'syz.1.530': attribute type 5 has an invalid length.
[  107.144357][ T7804] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  107.318967][ T7817] pim6reg1: entered promiscuous mode
[  107.320881][ T7817] pim6reg1: entered allmulticast mode
[  107.402391][ T7822] bond6: left promiscuous mode
[  107.406194][ T7822] bridge0: left promiscuous mode
[  107.410372][ T7822] bond6: left allmulticast mode
[  107.412940][ T7822] bridge0: left allmulticast mode
[  107.418228][ T7824] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[  107.430056][ T7822] bond8: left promiscuous mode
[  107.440187][ T7822] pim6reg1: left promiscuous mode
[  107.442393][ T7822] pim6reg1: left allmulticast mode
[  107.650457][ T7841] syzkaller0: entered promiscuous mode
[  107.652330][ T7841] syzkaller0: entered allmulticast mode
[  108.111640][ T7814] delete_channel: no stack
[  108.902439][ T7849] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[  108.921245][ T7849] 8021q: adding VLAN 0 to HW filter on device bond4
[  108.924892][ T7848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.929502][ T7848] syzkaller0: entered promiscuous mode
[  108.933184][ T7848] syzkaller0: entered allmulticast mode
[  108.964580][ T7846] tipc: Resetting bearer <eth:syzkaller0>
[  108.979196][ T7846] tipc: Disabling bearer <eth:syzkaller0>
[  108.998784][ T7852] __nla_validate_parse: 3 callbacks suppressed
[  108.998796][ T7852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'.
[  109.020451][ T7852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.546'.
[  109.084375][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'.
[  109.103217][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'.
[  109.107293][ T7867] netlink: 'syz.2.550': attribute type 5 has an invalid length.
[  109.110324][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.550'.
[  109.120647][ T7867] geneve3: entered promiscuous mode
[  109.122831][ T7867] geneve3: entered allmulticast mode
[  109.128596][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  109.131523][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  109.145448][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  109.148956][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  109.235102][ T7881] netlink: 27 bytes leftover after parsing attributes in process `syz.1.554'.
[  109.251864][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'.
[  109.307088][ T7885] netlink: 'syz.1.555': attribute type 10 has an invalid length.
[  109.309573][ T7885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.555'.
[  109.322329][ T7885] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  109.398508][ T7894] netlink: 'syz.0.558': attribute type 10 has an invalid length.
[  109.400956][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.558'.
[  109.413019][ T7894] team0: Port device geneve0 added
[  109.422897][ T7894] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  109.432775][ T7900] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  109.438489][ T7898] netlink: 'syz.1.559': attribute type 4 has an invalid length.
[  109.441868][ T7898] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.559'.
[  109.810752][ T7921] sch_fq: defrate 0 ignored.
[  109.823244][ T7925] netlink: 'syz.2.569': attribute type 2 has an invalid length.
[  109.970193][ T7937] wlan1: mtu greater than device maximum
[  110.131156][ T7956] bridge0: entered allmulticast mode
[  110.138775][ T7956] pim6reg: entered allmulticast mode
[  110.153222][ T7956] bridge0 (unregistering): left allmulticast mode
[  110.640629][ T7992] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.681835][ T7992] bond3: (slave veth5): Enslaving as an active interface with a down link
[  110.693688][ T7992] gretap1: entered promiscuous mode
[  110.699907][ T7992] bond3: (slave gretap1): making interface the new active one
[  110.704078][ T7992] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  110.718692][ T7992] macvlan3: entered promiscuous mode
[  110.720569][ T7992] macvlan3: entered allmulticast mode
[  110.722816][ T7992] bond3: entered promiscuous mode
[  110.725749][ T7992] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  110.728688][ T7992] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  110.734368][ T7992] bond3: left promiscuous mode
[  110.776632][ T7995] bond5: (slave bridge0): making interface the new active one
[  110.779740][ T7995] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  110.926905][ T8004] validate_nla: 5 callbacks suppressed
[  110.926925][ T8004] netlink: 'syz.2.590': attribute type 13 has an invalid length.
[  110.932697][ T8004] netlink: 'syz.2.590': attribute type 17 has an invalid length.
[  110.960234][ T8003] bond1: left promiscuous mode
[  110.964594][ T8003] bond1: left allmulticast mode
[  110.973737][ T8003] geneve2: left promiscuous mode
[  111.011018][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.014432][ T8004] 8021q: adding VLAN 0 to HW filter on device team0
[  111.018961][ T8004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.025717][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.030654][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.035004][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.038472][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.062167][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.140419][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.842815][ T8016] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  111.847810][ T8016] netlink: 'syz.0.594': attribute type 4 has an invalid length.
[  112.627565][ T8050] netlink: 'syz.0.601': attribute type 9 has an invalid length.
[  112.890576][ T8067] ip6gretap0: entered promiscuous mode
[  112.892943][ T8067] macsec2: entered promiscuous mode
[  112.894922][ T8067] macsec2: entered allmulticast mode
[  112.899364][ T8067] ip6gretap0: entered allmulticast mode
[  112.927664][ T8067] netlink: 'syz.2.605': attribute type 4 has an invalid length.
[  113.376572][ T8078] netlink: 'syz.0.609': attribute type 12 has an invalid length.
[  113.919610][ T8102] veth7: entered promiscuous mode
[  113.956843][ T8108] erspan0: entered allmulticast mode
[  114.086180][ T8116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.089567][ T8116] syzkaller0: entered promiscuous mode
[  114.091918][ T8116] syzkaller0: entered allmulticast mode
[  114.123200][ T8115] tipc: Resetting bearer <eth:syzkaller0>
[  114.141682][ T8115] tipc: Disabling bearer <eth:syzkaller0>
[  114.246553][ T8127] __nla_validate_parse: 19 callbacks suppressed
[  114.246570][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'.
[  114.268649][ T8127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.621'.
[  114.390377][ T8147] netlink: 'syz.0.626': attribute type 1 has an invalid length.
[  114.413397][ T8147] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.417917][ T8147] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  114.483087][ T8152] bond4: (slave bridge0): Enslaving as an active interface with a down link
[  114.559093][ T8152] netlink: 'syz.0.626': attribute type 4 has an invalid length.
[  114.680154][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  114.693060][ T8163] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[  114.744104][ T8163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.631'.
[  114.798997][ T8166] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  114.879625][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.633'.
[  117.436588][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[  117.445361][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'.
[  117.836578][ T8204] netlink: 'syz.1.643': attribute type 1 has an invalid length.
[  117.839208][ T8204] netlink: 184 bytes leftover after parsing attributes in process `syz.1.643'.
[  117.883540][ T8212] bond0: (slave wlan1): Releasing backup interface
[  117.907794][ T8212] bond5: (slave bridge0): Releasing active interface
[  117.986471][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  118.021727][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  118.270072][ T8245] openvswitch: netlink: IP tunnel TTL not specified.
[  118.559787][ T8278] netlink: 'syz.0.659': attribute type 9 has an invalid length.
[  118.622760][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.718388][ T8287] netlink: 'syz.0.662': attribute type 1 has an invalid length.
[  118.740895][ T8287] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.757389][ T8287] ipvlan2: entered allmulticast mode
[  118.759412][ T8287] bond5: entered allmulticast mode
[  118.771714][ T8287] bond5: (slave gretap2): making interface the new active one
[  118.774299][ T8287] gretap2: entered allmulticast mode
[  118.777245][ T8287] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  118.837983][ T8290] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004
[  118.841850][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.842204][ T8291] syz_tun: entered allmulticast mode
[  119.048444][ T8303] pim6reg99999999: entered allmulticast mode
[  119.053954][ T8303] IPVS: length: 142 != 24
[  119.642454][ T8290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.806984][ T8336] __nla_validate_parse: 6 callbacks suppressed
[  119.806995][ T8336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.675'.
[  119.936159][ T8344] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  120.147014][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  120.208008][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'.
[  120.411794][ T8381] netlink: 'syz.2.690': attribute type 2 has an invalid length.
[  120.415202][ T8382] netlink: 'syz.2.690': attribute type 2 has an invalid length.
[  120.562908][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'.
[  120.706217][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'.
[  120.709512][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'.
[  120.857598][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  120.878505][ T8404] macvtap1: entered promiscuous mode
[  120.880747][ T8404] erspan0: entered promiscuous mode
[  120.882949][ T8404] macvtap1: entered allmulticast mode
[  120.896944][ T8404] erspan0: left promiscuous mode
[  121.153204][ T8422] ipvlan4: entered promiscuous mode
[  121.268599][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'.
[  121.294094][ T8428] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.313021][ T8428] macvlan4: entered promiscuous mode
[  121.315547][ T8428] macvlan4: entered allmulticast mode
[  121.319205][ T8428] bond6: entered promiscuous mode
[  121.321846][ T8428] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  121.327938][ T8428] bond6: left promiscuous mode
[  121.583239][ T8449] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.709'.
[  121.638828][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'.
[  122.126183][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  122.439598][ T8466] ipvlan4: entered promiscuous mode
[  122.441875][ T8466] team0: Device ipvlan4 is up. Set it down before adding it as a team port
[  122.638783][ T8482] syzkaller1: entered promiscuous mode
[  122.640793][ T8482] syzkaller1: entered allmulticast mode
[  122.774048][ T8495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.954052][ T8508] lo speed is unknown, defaulting to 1000
[  122.959165][ T8508] lo speed is unknown, defaulting to 1000
[  122.962489][ T8508] lo speed is unknown, defaulting to 1000
[  122.978932][ T8508] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  123.012339][ T8508] lo speed is unknown, defaulting to 1000
[  123.017920][ T8508] lo speed is unknown, defaulting to 1000
[  123.021810][ T8508] lo speed is unknown, defaulting to 1000
[  123.068307][ T8508] netlink: 'syz.1.726': attribute type 4 has an invalid length.
[  123.120871][ T8523] netlink: 'syz.2.729': attribute type 2 has an invalid length.
[  123.550118][ T8557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.557208][ T8557] syzkaller0: entered promiscuous mode
[  123.559066][ T8557] syzkaller0: entered allmulticast mode
[  123.583201][ T8557] tipc: Resetting bearer <eth:syzkaller0>
[  123.589358][ T8556] tipc: Resetting bearer <eth:syzkaller0>
[  123.602534][ T8556] tipc: Disabling bearer <eth:syzkaller0>
[  123.798368][ T8566] netlink: 'syz.1.745': attribute type 10 has an invalid length.
[  123.801828][ T8566] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  123.818269][ T8566] bridge3: entered promiscuous mode
[  123.820399][ T8566] bridge3: entered allmulticast mode
[  123.993726][ T8570] pim6reg1: entered promiscuous mode
[  124.001190][ T8570] pim6reg1: entered allmulticast mode
[  124.181671][ T8590] bridge5: port 1(veth9) entered blocking state
[  124.183987][ T8590] bridge5: port 1(veth9) entered disabled state
[  124.187019][ T8590] veth9: entered allmulticast mode
[  124.190058][ T8590] veth9: entered promiscuous mode
[  124.208408][ T8590] bridge5: port 2(veth0_to_bond) entered blocking state
[  124.215833][ T8590] bridge5: port 2(veth0_to_bond) entered disabled state
[  124.218718][ T8590] veth0_to_bond: entered allmulticast mode
[  124.222589][ T8590] veth0_to_bond: entered promiscuous mode
[  124.294218][ T8591] lo speed is unknown, defaulting to 1000
[  124.425519][ T8598] nbd2: detected capacity change from 0 to 63
[  124.429967][ T8602] block nbd2: NBD_DISCONNECT
[  124.434179][ T8602] block nbd2: Disconnected due to user request.
[  124.438519][ T8602] block nbd2: shutting down sockets
[  124.439479][ T8177] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.444846][ T8177] Buffer I/O error on dev nbd2, logical block 0, async page read
[  124.449103][ T8177] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.453316][ T8177] Buffer I/O error on dev nbd2, logical block 1, async page read
[  124.456824][ T8177] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.460547][ T8177] Buffer I/O error on dev nbd2, logical block 2, async page read
[  124.463933][ T8177] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.468275][ T8177] Buffer I/O error on dev nbd2, logical block 3, async page read
[  124.471697][ T8177] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.473978][ T8598] bond6: entered promiscuous mode
[  124.475577][ T8177] Buffer I/O error on dev nbd2, logical block 0, async page read
[  124.477287][ T8177] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.478182][ T8598] bond6: entered allmulticast mode
[  124.481094][ T8177] Buffer I/O error on dev nbd2, logical block 1, async page read
[  124.485030][ T8598] 8021q: adding VLAN 0 to HW filter on device bond6
[  124.487660][ T8177] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.501306][ T8177] Buffer I/O error on dev nbd2, logical block 2, async page read
[  124.504924][ T8177] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.509838][ T8177] Buffer I/O error on dev nbd2, logical block 3, async page read
[  124.514629][ T8177] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.519273][ T8177] Buffer I/O error on dev nbd2, logical block 0, async page read
[  124.522014][ T8177] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.526221][ T8177] Buffer I/O error on dev nbd2, logical block 1, async page read
[  124.530865][ T8177] ldm_validate_partition_table(): Disk read failed.
[  124.538477][ T8177] Dev nbd2: unable to read RDB block 0
[  124.542100][ T8177]  nbd2: unable to read partition table
[  124.551796][ T8177] ldm_validate_partition_table(): Disk read failed.
[  124.557194][ T8177] Dev nbd2: unable to read RDB block 0
[  124.560534][ T8177]  nbd2: unable to read partition table
[  124.843457][ T8623] lo speed is unknown, defaulting to 1000
[  125.074382][ T8631] __nla_validate_parse: 12 callbacks suppressed
[  125.074435][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'.
[  125.099233][ T8630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.104593][ T8631] syzkaller0: entered promiscuous mode
[  125.107220][ T8631] syzkaller0: entered allmulticast mode
[  125.143713][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[  125.156789][ T8631] tipc: Disabling bearer <eth:syzkaller0>
[  125.720475][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'.
[  125.874849][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[  126.054043][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'.
[  126.057745][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.773'.
[  126.190183][ T8673] ip6gretap1: entered promiscuous mode
[  126.246379][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'.
[  126.298877][ T8686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.781'.
[  126.354867][ T8695] netlink: 'syz.0.784': attribute type 12 has an invalid length.
[  126.364000][ T8695] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.784'.
[  126.429711][ T8696] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  126.455862][ T8696] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.473128][ T8696] bond7: (slave geneve4): making interface the new active one
[  126.478367][ T8696] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  126.481964][ T6017] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  126.486183][ T6017] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  126.490043][ T6017] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  126.505225][ T6017] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  126.541478][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  126.543441][ T8709] syzkaller1: entered promiscuous mode
[  126.547871][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'.
[  126.555843][ T8709] syzkaller1: entered allmulticast mode
[  126.611369][ T8714] netlink: 'syz.2.788': attribute type 21 has an invalid length.
[  126.621421][ T6017] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.625519][ T6017] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.629119][ T8714] netlink: 'syz.2.788': attribute type 21 has an invalid length.
[  126.632036][ T6017] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.636051][ T6017] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.926609][ T8733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.930149][ T8733] syzkaller0: entered promiscuous mode
[  126.932548][ T8733] syzkaller0: entered allmulticast mode
[  126.942797][ T8733] tipc: Resetting bearer <eth:syzkaller0>
[  126.947390][ T8731] tipc: Resetting bearer <eth:syzkaller0>
[  126.962769][ T8731] tipc: Disabling bearer <eth:syzkaller0>
[  126.996545][ T8735] netlink: 'syz.0.796': attribute type 10 has an invalid length.
[  127.070730][ T8737] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  127.092396][ T8737] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.137131][ T8740] lo speed is unknown, defaulting to 1000
[  127.211469][ T8751] netlink: 'syz.1.801': attribute type 13 has an invalid length.
[  127.759947][ T8799] siw: device registration error -23
[  127.766431][ T8797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.127534][ T8834] validate_nla: 4 callbacks suppressed
[  128.127550][ T8834] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  128.297001][ T8841] netlink: 'syz.2.826': attribute type 2 has an invalid length.
[  128.465508][ T8849] netlink: 'syz.0.828': attribute type 4 has an invalid length.
[  128.474676][ T8849] netlink: 'syz.0.828': attribute type 4 has an invalid length.
[  128.770766][ T8854] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  128.903729][ T8861] bond0: (slave team0): Releasing backup interface
[  128.908818][ T8861] bond0: (slave dummy0): Releasing backup interface
[  128.912678][ T8861] veth0_to_bond: left allmulticast mode
[  128.921784][ T8861] veth0_to_bond: left promiscuous mode
[  128.924229][ T8861] bridge5: port 2(veth0_to_bond) entered disabled state
[  128.936081][ T8861] bond0: (slave bond_slave_0): Releasing backup interface
[  128.941442][ T8861] bond0: (slave bond_slave_1): Releasing backup interface
[  128.948791][ T8861] team0: Port device team_slave_0 removed
[  128.953951][ T8861] team0: Port device team_slave_1 removed
[  128.961836][ T8861] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.972785][ T8861] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.979694][ T8861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.189936][ T8867] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  130.075996][ T8916] __nla_validate_parse: 23 callbacks suppressed
[  130.076013][ T8916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  130.196191][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'.
[  130.289830][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'.
[  130.327382][ T8922] bond6: (slave bridge0): Releasing backup interface
[  130.381868][ T8924] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  130.384750][ T8926] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  130.393725][ T8926] netlink: 'syz.2.850': attribute type 4 has an invalid length.
[  130.627741][ T8949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.631644][ T8949] syzkaller0: entered promiscuous mode
[  130.633801][ T8949] syzkaller0: entered allmulticast mode
[  130.654077][ T8948] tipc: Resetting bearer <eth:syzkaller0>
[  130.671543][ T8948] tipc: Disabling bearer <eth:syzkaller0>
[  130.796606][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'.
[  130.941113][ T8968] syzkaller1: tun_chr_ioctl cmd 1074025677
[  130.943616][ T8968] syzkaller1: linktype set to 769
[  131.687008][ T8987] netlink: 72 bytes leftover after parsing attributes in process `syz.0.868'.
[  131.947210][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  131.951697][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'.
[  132.043540][ T9005] netlink: 'syz.2.873': attribute type 2 has an invalid length.
[  132.056377][ T9005] k*]: entered promiscuous mode
[  132.069832][ T9008] netlink: 'syz.0.874': attribute type 1 has an invalid length.
[  132.072869][ T9008] netlink: 224 bytes leftover after parsing attributes in process `syz.0.874'.
[  132.082595][ T9008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.874'.
[  132.215941][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.219002][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.416652][ T9027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.821337][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.2.892'.
[  133.004990][ T9074] bond7: entered promiscuous mode
[  133.007606][ T9074] 8021q: adding VLAN 0 to HW filter on device bond7
[  133.504325][ T9103] bond4: (slave bridge0): Releasing active interface
[  133.710603][ T9112] Set syz1 is full, maxelem 65536 reached
[  134.227411][ T9155] lo speed is unknown, defaulting to 1000
[  134.890365][ T9198] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  134.894060][ T9198] netlink: 'syz.2.934': attribute type 9 has an invalid length.
[  134.915233][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  135.037102][ T9209] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[  135.040050][ T9209] netlink: 'syz.2.938': attribute type 2 has an invalid length.
[  135.047358][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.161456][ T9216] __nla_validate_parse: 14 callbacks suppressed
[  135.161472][ T9216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.941'.
[  135.210833][ T9218] netlink: 'syz.2.942': attribute type 8 has an invalid length.
[  135.391630][ T9229] netlink: 'syz.2.945': attribute type 1 has an invalid length.
[  135.429154][ T9229] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  135.434672][ T9229] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  135.549447][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'.
[  135.591907][ T9233] lo speed is unknown, defaulting to 1000
[  135.760181][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[  136.099216][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'.
[  136.245918][ T9262] lo speed is unknown, defaulting to 1000
[  136.548913][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'.
[  136.552956][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.958'.
[  136.648976][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'.
[  136.652253][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'.
[  136.660454][ T9280] netlink: 'syz.1.960': attribute type 13 has an invalid length.
[  136.663786][ T9280] netlink: 'syz.1.960': attribute type 11 has an invalid length.
[  136.681323][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  136.734371][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  137.001565][ T9311] netlink: 'syz.1.969': attribute type 21 has an invalid length.
[  137.118499][ T9320] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  137.298932][ T9328] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20002
[  137.343412][ T9330] erspan0: left allmulticast mode
[  137.364380][ T9330] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.369547][ T9330] 8021q: adding VLAN 0 to HW filter on device team0
[  137.376359][ T9330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.386076][ T5918] lo speed is unknown, defaulting to 1000
[  137.388811][ T5918] syz2: Port: 1 Link ACTIVE
[  137.397375][ T9336] netlink: 'syz.2.978': attribute type 1 has an invalid length.
[  137.545366][ T9350] wg1: entered promiscuous mode
[  137.547515][ T9350] wg1: entered allmulticast mode
[  137.764921][ T9357] lo speed is unknown, defaulting to 1000
[  139.411272][ T9409] Set syz0 is full, maxelem 0 reached
[  139.450434][ T9413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.453192][ T9413] syzkaller0: entered promiscuous mode
[  139.455773][ T9413] syzkaller0: entered allmulticast mode
[  139.461189][ T9413] tipc: Resetting bearer <eth:syzkaller0>
[  139.471893][ T9412] tipc: Resetting bearer <eth:syzkaller0>
[  139.482893][ T9412] tipc: Disabling bearer <eth:syzkaller0>
[  139.700618][ T9422] lo speed is unknown, defaulting to 1000
[  140.178325][ T9453] validate_nla: 3 callbacks suppressed
[  140.178339][ T9453] netlink: 'syz.1.1008': attribute type 1 has an invalid length.
[  140.228496][ T9450] bond11 (unregistering): Released all slaves
[  140.336571][ T9457] geneve3: entered promiscuous mode
[  140.342354][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.351168][ T9457] __nla_validate_parse: 19 callbacks suppressed
[  140.351187][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  140.359060][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.364123][ T5882] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.367711][ T5882] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.426880][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'.
[  140.509480][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'.
[  140.727339][ T9464] ip6gre1: entered allmulticast mode
[  140.851787][ T9471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.860629][ T9471] syzkaller0: entered promiscuous mode
[  140.864918][ T9471] syzkaller0: entered allmulticast mode
[  140.871771][ T9471] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.947363][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  140.950906][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  140.954992][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  140.968818][ T9482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  141.031041][ T9470] tipc: Resetting bearer <eth:syzkaller0>
[  141.047301][ T9470] tipc: Disabling bearer <eth:syzkaller0>
[  141.101780][ T9489] lo speed is unknown, defaulting to 1000
[  141.241558][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1022'.
[  141.434225][ T9507] lo speed is unknown, defaulting to 1000
[  141.659944][ T9537] netlink: 'syz.0.1028': attribute type 3 has an invalid length.
[  141.804434][ T9544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1031'.
[  141.839902][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'.
[  141.946985][ T9550] netlink: 'syz.0.1032': attribute type 13 has an invalid length.
[  141.950228][ T9550] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  142.093202][ T9566] netlink: 'syz.1.1039': attribute type 2 has an invalid length.
[  142.371986][ T9601] netlink: 'syz.2.1047': attribute type 10 has an invalid length.
[  142.427492][ T9601] syz.2.1047: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  142.434373][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.2.1047 Not tainted syzkaller #0 PREEMPT(full) 
[  142.434386][ T9601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.434393][ T9601] Call Trace:
[  142.434397][ T9601]  <TASK>
[  142.434402][ T9601]  dump_stack_lvl+0x189/0x250
[  142.434430][ T9601]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.434440][ T9601]  ? __pfx__printk+0x10/0x10
[  142.434453][ T9601]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.434464][ T9601]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  142.434473][ T9601]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  142.434483][ T9601]  warn_alloc+0x214/0x310
[  142.434499][ T9601]  ? __pfx_warn_alloc+0x10/0x10
[  142.434515][ T9601]  ? __get_vm_area_node+0x28f/0x300
[  142.434527][ T9601]  ? xskq_create+0xbf/0x170
[  142.434539][ T9601]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  142.434564][ T9601]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  142.434575][ T9601]  ? xskq_create+0x56/0x170
[  142.434585][ T9601]  ? __kasan_kmalloc+0x93/0xb0
[  142.434598][ T9601]  vmalloc_user_noprof+0xad/0xf0
[  142.434609][ T9601]  ? xskq_create+0xbf/0x170
[  142.434623][ T9601]  xskq_create+0xbf/0x170
[  142.434633][ T9601]  xsk_init_queue+0xb0/0x110
[  142.434642][ T9601]  xsk_setsockopt+0x57b/0x8d0
[  142.434651][ T9601]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.434659][ T9601]  ? __pfx_aa_sk_perm+0x10/0x10
[  142.434674][ T9601]  ? __fget_files+0x2a/0x420
[  142.434681][ T9601]  ? aa_sock_opt_perm+0xff/0x1b0
[  142.434690][ T9601]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  142.434699][ T9601]  ? __pfx_xsk_setsockopt+0x10/0x10
[  142.434708][ T9601]  do_sock_setsockopt+0x17c/0x1b0
[  142.434722][ T9601]  __x64_sys_setsockopt+0x13f/0x1b0
[  142.434735][ T9601]  do_syscall_64+0xfa/0x3b0
[  142.434745][ T9601]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.434754][ T9601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.434762][ T9601]  ? exc_page_fault+0x9f/0xf0
[  142.434771][ T9601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.434778][ T9601] RIP: 0033:0x7f52cb18ec29
[  142.434787][ T9601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.434794][ T9601] RSP: 002b:00007f52cc039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  142.434803][ T9601] RAX: ffffffffffffffda RBX: 00007f52cb3d5fa0 RCX: 00007f52cb18ec29
[  142.434808][ T9601] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[  142.434813][ T9601] RBP: 00007f52cb211e41 R08: 0000000000000004 R09: 0000000000000000
[  142.434817][ T9601] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000
[  142.434822][ T9601] R13: 00007f52cb3d6038 R14: 00007f52cb3d5fa0 R15: 00007ffe0825b5b8
[  142.434834][ T9601]  </TASK>
[  142.434838][ T9601] Mem-Info:
[  142.472513][ T9611] netlink: 'syz.1.1051': attribute type 1 has an invalid length.
[  142.532856][ T9601] active_anon:14057 inactive_anon:0 isolated_anon:0
[  142.532856][ T9601]  active_file:1505 inactive_file:38274 isolated_file:0
[  142.532856][ T9601]  unevictable:1768 dirty:208 writeback:0
[  142.532856][ T9601]  slab_reclaimable:10328 slab_unreclaimable:171365
[  142.532856][ T9601]  mapped:18315 shmem:2431 pagetables:969
[  142.532856][ T9601]  sec_pagetables:0 bounce:0
[  142.532856][ T9601]  kernel_misc_reclaimable:0
[  142.532856][ T9601]  free:169016 free_pcp:21449 free_cma:0
[  142.547339][ T9601] Node 0 active_anon:34796kB inactive_anon:0kB active_file:3828kB inactive_file:23416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41004kB dirty:512kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6808kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.558214][ T9601] Node 1 active_anon:21500kB inactive_anon:0kB active_file:2192kB inactive_file:129680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32256kB dirty:320kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5436kB pagetables:1840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  142.574503][ T9601] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  142.606494][ T9601] lowmem_reserve[]: 0 811 811 811 811
[  142.608261][ T9601] Node 0 DMA32 free:169024kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34864kB inactive_anon:0kB active_file:3828kB inactive_file:23416kB unevictable:3536kB writepending:512kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:32112kB local_pcp:15800kB free_cma:0kB
[  142.618897][ T9601] lowmem_reserve[]: 0 0 0 0 0
[  142.620470][ T9601] Node 1 DMA32 free:436188kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:20676kB local_pcp:11176kB free_cma:0kB
[  142.630128][ T9601] lowmem_reserve[]: 0 0 854 854 854
[  142.631761][ T9601] Node 1 Normal free:53952kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21500kB inactive_anon:0kB active_file:2192kB inactive_file:129680kB unevictable:3536kB writepending:320kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33672kB local_pcp:17472kB free_cma:0kB
[  142.642265][ T9601] lowmem_reserve[]: 0 0 0 0 0
[  142.644012][ T9601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  142.648228][ T9601] Node 0 DMA32: 312*4kB (UM) 489*8kB (UME) 299*16kB (UME) 253*32kB (UME) 273*64kB (UME) 105*128kB (UME) 37*256kB (UME) 34*512kB (UME) 11*1024kB (UME) 6*2048kB (UME) 17*4096kB (UM) = 169016kB
[  142.655668][ T9601] Node 1 DMA32: 45*4kB (UM) 25*8kB (UM) 30*16kB (UM) 26*32kB (UM) 21*64kB (UM) 16*128kB (UME) 12*256kB (UME) 6*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 100*4096kB (UM) = 436188kB
[  142.661726][ T9601] Node 1 Normal: 212*4kB (UME) 140*8kB (ME) 37*16kB (ME) 150*32kB (UME) 140*64kB (UME) 62*128kB (UME) 24*256kB (UME) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 4*4096kB (UM) = 53952kB
[  142.668049][ T9601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.670947][ T9601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  142.674329][ T9601] 42210 total pagecache pages
[  142.676825][ T9601] 0 pages in swap cache
[  142.678312][ T9601] Free swap  = 124996kB
[  142.679737][ T9601] Total swap = 124996kB
[  142.681085][ T9601] 786301 pages RAM
[  142.682410][ T9601] 0 pages HighMem/MovableOnly
[  142.683979][ T9601] 241367 pages reserved
[  142.687554][ T9601] 0 pages cma reserved
[  142.762508][ T9622] netlink: 'syz.2.1055': attribute type 11 has an invalid length.
[  142.953317][ T9630] IPVS: length: 246 != 24
[  143.106551][ T9636] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  143.115506][ T9636] netlink: 'syz.2.1060': attribute type 2 has an invalid length.
[  143.118018][ T9636] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  143.458782][ T9652] netlink: 'syz.0.1065': attribute type 64 has an invalid length.
[  143.594744][ T9658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.517943][ T9699] can: request_module (can-proto-0) failed.
[  144.803733][ T9717] bond8: (slave geneve3): making interface the new active one
[  144.816119][ T9717] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  144.827037][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  144.842809][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  144.852751][ T9717] 8021q: adding VLAN 0 to HW filter on device bond8
[  144.864868][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  144.870849][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  145.012357][ T9736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.025962][ T9743] gtp0: entered promiscuous mode
[  145.032625][ T9736] tipc: Resetting bearer <eth:syzkaller0>
[  145.048548][ T9735] tipc: Disabling bearer <eth:syzkaller0>
[  145.071030][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.516942][ T9780] macvtap1: left promiscuous mode
[  145.519728][ T9780] macvtap1: left allmulticast mode
[  145.522199][ T9780] bridge3: left promiscuous mode
[  145.524261][ T9780] bridge3: left allmulticast mode
[  145.529276][ T9780] geneve3: left promiscuous mode
[  145.536381][ T9780] ip6gre1: left allmulticast mode
[  145.551855][ T5903] lo speed is unknown, defaulting to 1000
[  145.554860][ T6017] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.562727][ T5903] syz2: Port: 1 Link DOWN
[  145.564949][ T6017] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.569451][ T6017] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.576578][ T6017] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.597707][ T9776] __nla_validate_parse: 24 callbacks suppressed
[  145.597731][ T9776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1101'.
[  145.640359][ T9791] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1103'.
[  145.704563][ T9793] validate_nla: 5 callbacks suppressed
[  145.704582][ T9793] netlink: 'syz.1.1105': attribute type 4 has an invalid length.
[  145.786364][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[  145.789892][ T9803] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  145.792872][ T9803] netlink: 'syz.1.1109': attribute type 2 has an invalid length.
[  145.797330][ T9803] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1109'.
[  146.116985][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'.
[  146.379512][ T9839] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  146.410127][ T9839] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  146.415587][ T9839] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  146.420529][ T9839] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  146.457238][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'.
[  146.634901][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'.
[  146.639082][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'.
[  146.641379][ T9843] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  146.649458][ T9850] netlink: 'syz.0.1121': attribute type 4 has an invalid length.
[  146.696893][ T9852] openvswitch: netlink: Flow key attr not present in new flow.
[  146.759718][ T6017] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.762975][ T6017] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.803891][ T6017] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.808985][ T6017] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  146.857699][ T9857] veth5: entered promiscuous mode
[  146.889672][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'.
[  146.893947][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'.
[  146.909646][ T9864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.966420][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.969783][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.979017][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.993444][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.040641][ T9870] 8021q: adding VLAN 0 to HW filter on device bond11
[  147.050306][ T9870] bond0: (slave bond11): Enslaving as an active interface with an up link
[  147.104375][ T9879] netlink: 'syz.0.1134': attribute type 30 has an invalid length.
[  147.159772][ T9879] netlink: 'syz.0.1134': attribute type 30 has an invalid length.
[  147.163904][ T9884] netlink: 'syz.0.1134': attribute type 42 has an invalid length.
[  147.858713][ T9906] syz_tun (unregistering): left allmulticast mode
[  147.949197][ T9913] netlink: 'syz.1.1144': attribute type 4 has an invalid length.
[  148.246536][ T9926] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  148.372751][ T9930] ip6tnl2: entered promiscuous mode
[  148.374913][ T9930] ip6tnl2: entered allmulticast mode
[  148.621249][ T9958] netlink: 'syz.2.1156': attribute type 1 has an invalid length.
[  148.657611][ T9958] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  148.663079][ T9958] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  148.706845][ T9960] gretap3: entered promiscuous mode
[  148.713308][ T9960] bond12: (slave gretap3): making interface the new active one
[  148.718327][ T9960] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  148.731021][ T9958] macvlan4: entered promiscuous mode
[  148.733025][ T9958] macvlan4: entered allmulticast mode
[  148.735585][ T9958] bond12: entered promiscuous mode
[  148.738206][ T9958] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  148.743545][ T9958] bond12: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  148.749140][ T9958] bond12: left promiscuous mode
[  148.988181][ T9966] lo speed is unknown, defaulting to 1000
[  149.138419][ T9971] 8021q: adding VLAN 0 to HW filter on device bond11
[  149.149557][ T9971] bond11: (slave macsec1): Error -34 calling dev_set_mtu
[  149.222698][ T9974] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  149.283111][ T9983] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  149.287348][ T9983] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  149.290950][ T9983] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  149.657901][T10014] syzkaller0: entered promiscuous mode
[  149.660414][T10014] syzkaller0: entered allmulticast mode
[  149.678333][T10014] tc_dump_action: action bad kind
[  149.844613][T10017] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  151.058262][T10019] validate_nla: 4 callbacks suppressed
[  151.058285][T10019] netlink: 'syz.2.1172': attribute type 4 has an invalid length.
[  151.501068][T10047] netlink: 'syz.0.1181': attribute type 4 has an invalid length.
[  151.506929][T10047] netlink: 'syz.0.1181': attribute type 4 has an invalid length.
[  151.544234][T10059] __nla_validate_parse: 27 callbacks suppressed
[  151.544247][T10059] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1183'.
[  151.641205][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[  151.653214][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[  151.656962][T10070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1189'.
[  151.804017][T10077] lo speed is unknown, defaulting to 1000
[  152.118775][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  152.194205][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'.
[  152.476431][T10171] netlink: 'syz.1.1201': attribute type 6 has an invalid length.
[  152.484059][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'.
[  152.522822][T10176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  152.525794][T10176] IPv6: NLM_F_CREATE should be set when creating new route
[  152.528732][T10176] IPv6: NLM_F_CREATE should be set when creating new route
[  152.538993][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'.
[  152.543707][T10177] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1202'.
[  152.547160][T10177] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1202'.
[  152.550262][T10177] netlink: 'syz.1.1202': attribute type 6 has an invalid length.
[  152.553067][T10177] netlink: 'syz.1.1202': attribute type 4 has an invalid length.
[  152.584668][T10179] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  152.616982][T10185] netlink: 'syz.1.1204': attribute type 7 has an invalid length.
[  152.621603][T10185] netlink: 'syz.1.1204': attribute type 13 has an invalid length.
[  153.362521][T10258] netlink: 'syz.2.1224': attribute type 1 has an invalid length.
[  153.422312][T10260] ip6gre0: Master is either lo or non-ether device
[  153.478561][T10264] syzkaller1: entered promiscuous mode
[  153.480747][T10264] syzkaller1: entered allmulticast mode
[  153.817265][T10289] dummy0: entered promiscuous mode
[  153.821576][T10289] batadv_slave_0: entered promiscuous mode
[  153.823740][T10289] batadv_slave_0: left promiscuous mode
[  153.829288][T10289] dummy0: left promiscuous mode
[  153.845344][T10291] team0: Port device geneve0 removed
[  154.151313][T10306] vti0: entered promiscuous mode
[  154.610464][T10310] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  154.721917][T10314] bridge0: the hash_elasticity option has been deprecated and is always 16
[  154.726079][T10314] bridge0: entered allmulticast mode
[  155.082919][T10350] netlink: 'syz.2.1253': attribute type 6 has an invalid length.
[  155.103059][T10351] ip6tnl3: entered promiscuous mode
[  155.105857][T10351] ip6tnl3: entered allmulticast mode
[  155.109093][T10351] team0: Device ip6tnl3 is of different type
[  155.238799][T10362] nftables ruleset with unbound set
[  155.373345][T10374] syzkaller0: entered promiscuous mode
[  155.375862][T10374] syzkaller0: entered allmulticast mode
[  156.633280][T10401] __nla_validate_parse: 15 callbacks suppressed
[  156.633298][T10401] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1264'.
[  156.944615][T10405] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  157.037206][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'.
[  157.143114][T10431] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1270'.
[  157.169331][T10434] validate_nla: 1 callbacks suppressed
[  157.169347][T10434] netlink: 'syz.2.1274': attribute type 1 has an invalid length.
[  157.215974][T10434] 8021q: adding VLAN 0 to HW filter on device bond13
[  157.228057][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'.
[  157.257437][T10442] xt_time: invalid argument - start or stop time greater than 23:59:59
[  157.390728][T10445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.396695][T10445] syzkaller0: entered promiscuous mode
[  157.398847][T10445] syzkaller0: entered allmulticast mode
[  157.409088][T10445] tipc: Resetting bearer <eth:syzkaller0>
[  157.421609][T10443] tipc: Resetting bearer <eth:syzkaller0>
[  157.445267][T10443] tipc: Disabling bearer <eth:syzkaller0>
[  157.546762][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'.
[  157.550135][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'.
[  157.687299][T10473] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  157.788977][T10485] IPv6: NLM_F_REPLACE set, but no existing node found!
[  157.789799][T10489] sch_tbf: burst 0 is lower than device ip6gre0 mtu (2560) !
[  157.880888][T10489] geneve3: left promiscuous mode
[  157.894590][T10489] ip6gretap0: left allmulticast mode
[  157.898429][T10489] macsec2: left promiscuous mode
[  157.907320][T10489] bond6: left promiscuous mode
[  157.911224][T10489] ip6gretap1: left promiscuous mode
[  157.943071][T10489] gretap3: left promiscuous mode
[  157.949409][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1285'.
[  157.968856][ T5882] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.974173][ T5882] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  157.983285][ T5882] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  157.987922][ T5882] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.991763][ T5882] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  157.999447][ T5882] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.007673][ T5882] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.011537][ T5882] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  158.014900][ T5882] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.022766][ T5882] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.031995][ T5882] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  158.041385][ T5882] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.106424][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'.
[  158.124060][T10509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1291'.
[  158.189631][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1292'.
[  158.271006][T10515] netlink: 'syz.0.1294': attribute type 4 has an invalid length.
[  158.290594][T10515] netlink: 'syz.0.1294': attribute type 4 has an invalid length.
[  158.750937][T10521] sctp: [Deprecated]: syz.1.1296 (pid 10521) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.750937][T10521] Use struct sctp_sack_info instead
[  158.920544][T10526] lo speed is unknown, defaulting to 1000
[  159.285916][T10537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.289544][T10537] syzkaller0: entered promiscuous mode
[  159.291748][T10537] syzkaller0: entered allmulticast mode
[  159.299904][T10537] tipc: Resetting bearer <eth:syzkaller0>
[  159.302508][T10539] netlink: 'syz.0.1301': attribute type 1 has an invalid length.
[  159.306585][T10536] tipc: Resetting bearer <eth:syzkaller0>
[  159.319716][T10536] tipc: Disabling bearer <eth:syzkaller0>
[  159.484666][T10542] lo speed is unknown, defaulting to 1000
[  159.517209][T10545] openvswitch: netlink: Message has 4 unknown bytes.
[  159.870465][T10564] lo speed is unknown, defaulting to 1000
[  159.967561][T10573] netlink: 'syz.0.1311': attribute type 1 has an invalid length.
[  160.006176][T10573] 8021q: adding VLAN 0 to HW filter on device bond11
[  160.182529][T10588] bond0: Error: Cannot enslave bond to itself.
[  160.199783][T10580] syz.0.1313: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  160.210517][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT(full) 
[  160.210532][T10580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.210539][T10580] Call Trace:
[  160.210543][T10580]  <TASK>
[  160.210549][T10580]  dump_stack_lvl+0x189/0x250
[  160.210568][T10580]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  160.210586][T10580]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.210608][T10580]  ? __pfx__printk+0x10/0x10
[  160.210625][T10580]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.210638][T10580]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  160.210653][T10580]  warn_alloc+0x214/0x310
[  160.210673][T10580]  ? __pfx_warn_alloc+0x10/0x10
[  160.210692][T10580]  ? __get_vm_area_node+0x28f/0x300
[  160.210706][T10580]  ? xskq_create+0xbf/0x170
[  160.210721][T10580]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  160.210754][T10580]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  160.210772][T10580]  ? __kasan_kmalloc+0x93/0xb0
[  160.210789][T10580]  vmalloc_user_noprof+0xad/0xf0
[  160.210803][T10580]  ? xskq_create+0xbf/0x170
[  160.210814][T10580]  xskq_create+0xbf/0x170
[  160.210826][T10580]  xsk_init_queue+0xb0/0x110
[  160.210838][T10580]  xsk_setsockopt+0x57b/0x8d0
[  160.210850][T10580]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.210861][T10580]  ? __pfx_aa_sk_perm+0x10/0x10
[  160.210880][T10580]  ? __fget_files+0x2a/0x420
[  160.210889][T10580]  ? aa_sock_opt_perm+0xff/0x1b0
[  160.210901][T10580]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  160.210912][T10580]  ? __pfx_xsk_setsockopt+0x10/0x10
[  160.210923][T10580]  do_sock_setsockopt+0x17c/0x1b0
[  160.210943][T10580]  __x64_sys_setsockopt+0x13f/0x1b0
[  160.210959][T10580]  do_syscall_64+0xfa/0x3b0
[  160.210971][T10580]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.210983][T10580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.210994][T10580]  ? exc_page_fault+0x9f/0xf0
[  160.211005][T10580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.211014][T10580] RIP: 0033:0x7f865b78ec29
[  160.211025][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.211033][T10580] RSP: 002b:00007f86599ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  160.211045][T10580] RAX: ffffffffffffffda RBX: 00007f865b9d5fa0 RCX: 00007f865b78ec29
[  160.211052][T10580] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000024
[  160.211058][T10580] RBP: 00007f865b811e41 R08: 0000000000000004 R09: 0000000000000000
[  160.211063][T10580] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  160.211069][T10580] R13: 00007f865b9d6038 R14: 00007f865b9d5fa0 R15: 00007ffedc6e73e8
[  160.211086][T10580]  </TASK>
[  160.211091][T10580] Mem-Info:
[  160.324829][T10580] active_anon:13350 inactive_anon:0 isolated_anon:0
[  160.324829][T10580]  active_file:1505 inactive_file:38282 isolated_file:0
[  160.324829][T10580]  unevictable:1768 dirty:197 writeback:0
[  160.324829][T10580]  slab_reclaimable:10244 slab_unreclaimable:173848
[  160.324829][T10580]  mapped:18262 shmem:2435 pagetables:993
[  160.324829][T10580]  sec_pagetables:0 bounce:0
[  160.324829][T10580]  kernel_misc_reclaimable:0
[  160.324829][T10580]  free:161769 free_pcp:26118 free_cma:0
[  160.363925][T10580] Node 0 active_anon:34876kB inactive_anon:0kB active_file:3828kB inactive_file:23448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40816kB dirty:452kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6968kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.405295][T10580] Node 1 active_anon:18388kB inactive_anon:0kB active_file:2192kB inactive_file:129680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32232kB dirty:336kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5656kB pagetables:1788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.422277][T10580] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.435588][T10580] lowmem_reserve[]: 0 811 811 811 811
[  160.438892][T10580] Node 0 DMA32 free:154512kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34944kB inactive_anon:0kB active_file:3828kB inactive_file:23448kB unevictable:3536kB writepending:452kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:41548kB local_pcp:17808kB free_cma:0kB
[  160.444309][T10600] dvmrp8: entered allmulticast mode
[  160.454151][T10580] lowmem_reserve[]: 0 0 0 0 0
[  160.457017][T10580] Node 1 DMA32 free:430052kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:22000kB local_pcp:10504kB free_cma:0kB
[  160.471048][T10580] lowmem_reserve[]: 0 0 854 854 854
[  160.473439][T10580] Node 1 Normal free:47152kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18388kB inactive_anon:0kB active_file:2192kB inactive_file:129680kB unevictable:3536kB writepending:336kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40660kB local_pcp:22248kB free_cma:0kB
[  160.487811][T10580] lowmem_reserve[]: 0 0 0 0 0
[  160.489561][T10580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.501222][T10580] Node 0 DMA32: 1*4kB (U) 4*8kB (ME) 220*16kB (UME) 328*32kB (UME) 208*64kB (UME) 79*128kB (UME) 21*256kB (UME) 22*512kB (UME) 16*1024kB (UME) 5*2048kB (UME) 18*4096kB (UM) = 154468kB
[  160.509820][T10600] lo speed is unknown, defaulting to 1000
[  160.524453][T10580] Node 1 DMA32: 14*4kB (UM) 6*8kB (UM) 3*16kB (UM) 1*32kB (U) 1*64kB (M) 2*128kB (ME) 8*256kB (UME) 3*512kB (UE) 4*1024kB (UME) 6*2048kB (UME) 100*4096kB (UM) = 430072kB
[  160.533387][T10580] Node 1 Normal: 2*4kB (UE) 38*8kB (UME) 81*16kB (UME) 329*32kB (UME) 52*64kB (UME) 25*128kB (UME) 31*256kB (UME) 15*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 2*4096kB (M) = 47592kB
[  160.542735][T10580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.550741][T10580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.554554][T10580] 42222 total pagecache pages
[  160.558284][T10580] 0 pages in swap cache
[  160.560330][T10580] Free swap  = 124996kB
[  160.562427][T10580] Total swap = 124996kB
[  160.564584][T10580] 786301 pages RAM
[  160.566328][T10580] 0 pages HighMem/MovableOnly
[  160.568323][T10580] 241367 pages reserved
[  160.570020][T10580] 0 pages cma reserved
[  160.719572][T10599] dvmrp8: left allmulticast mode
[  160.814284][T10617] netlink: 'syz.0.1322': attribute type 3 has an invalid length.
[  160.841481][T10617] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  160.942749][T10620] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.947238][T10620] 8021q: adding VLAN 0 to HW filter on device team0
[  160.951582][T10620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.964359][T10626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.976016][T10624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.990027][T10624] syzkaller0: entered promiscuous mode
[  160.992334][T10624] syzkaller0: entered allmulticast mode
[  161.072917][T10624] tipc: Resetting bearer <eth:syzkaller0>
[  161.087551][T10622] tipc: Resetting bearer <eth:syzkaller0>
[  161.106539][T10622] tipc: Disabling bearer <eth:syzkaller0>
[  161.541812][T10662] lo speed is unknown, defaulting to 1000
[  161.862258][T10683] __nla_validate_parse: 9 callbacks suppressed
[  161.862272][T10683] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1340'.
[  162.000688][T10689] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1342'.
[  162.116543][T10705] netlink: 'syz.0.1346': attribute type 2 has an invalid length.
[  162.129263][T10705] k*: entered promiscuous mode
[  162.209407][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'.
[  162.231932][T10709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.234944][T10709] IPv6: NLM_F_CREATE should be set when creating new route
[  162.239923][T10709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.242477][T10709] IPv6: NLM_F_CREATE should be set when creating new route
[  162.328874][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'.
[  162.336052][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1349'.
[  162.369259][T10727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1352'.
[  162.372581][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'.
[  162.461622][T10742] netlink: 'syz.2.1355': attribute type 13 has an invalid length.
[  162.464173][T10742] netlink: 'syz.2.1355': attribute type 17 has an invalid length.
[  162.483889][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'.
[  162.484173][T10742] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.492321][T10742] 8021q: adding VLAN 0 to HW filter on device team0
[  162.499440][T10742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.544912][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.549593][T10740] lo speed is unknown, defaulting to 1000
[  162.597622][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.692767][T10761] syzkaller1: entered promiscuous mode
[  162.694710][T10761] syzkaller1: entered allmulticast mode
[  162.843926][T10763] xt_l2tp: wrong L2TP version: 1
[  162.848765][T10763] xt_l2tp: wrong L2TP version: 1
[  163.218257][T10784] netlink: 'syz.2.1369': attribute type 10 has an invalid length.
[  163.226864][T10784] bridge5: entered promiscuous mode
[  163.228833][T10784] bridge5: entered allmulticast mode
[  163.264084][T10784] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.313824][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'.
[  163.327822][T10786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'.
[  163.367837][T10786] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  163.747377][T10800] xt_HMARK: spi-set and port-set can't be combined
[  163.788894][T10803] bridge_slave_0: default FDB implementation only supports local addresses
[  164.405861][ T5882] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.422652][ T5882] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.432602][ T5882] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.440887][ T5882] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.621183][T10855] lo speed is unknown, defaulting to 1000
[  164.874336][T10867] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  165.088794][T10887] netlink: 'syz.2.1403': attribute type 11 has an invalid length.
[  165.094608][T10887] netlink: 'syz.2.1403': attribute type 4 has an invalid length.
[  165.369977][T10909] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  165.373008][T10909] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  165.458382][T10918] vlan0: entered promiscuous mode
[  165.462103][T10918] tipc: Enabled bearer <eth:team0>, priority 0
[  165.466216][T10917] netlink: 'syz.2.1414': attribute type 1 has an invalid length.
[  165.498072][T10914] lo speed is unknown, defaulting to 1000
[  165.542401][T10919] macsec0: entered promiscuous mode
[  165.544811][T10919] macsec0: entered allmulticast mode
[  165.547946][T10919] veth1_macvtap: entered allmulticast mode
[  165.550545][T10919] macsec0: left promiscuous mode
[  165.552779][T10919] macsec0: left allmulticast mode
[  165.555185][T10919] veth1_macvtap: left allmulticast mode
[  165.577088][T10914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  165.585444][T10914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  165.959635][T10939] netlink: 'syz.2.1422': attribute type 12 has an invalid length.
[  166.508885][T10959] netlink: 'syz.0.1428': attribute type 7 has an invalid length.
[  166.586045][   T10] tipc: Node number set to 2487382880
[  166.667873][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.704700][T10970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.708027][T10970] syzkaller0: entered promiscuous mode
[  166.709851][T10970] syzkaller0: entered allmulticast mode
[  166.716733][T10970] tipc: Resetting bearer <eth:syzkaller0>
[  166.720341][T10969] tipc: Resetting bearer <eth:syzkaller0>
[  166.731633][T10969] tipc: Disabling bearer <eth:syzkaller0>
[  166.813106][T10976] netlink: 'syz.2.1435': attribute type 1 has an invalid length.
[  166.867058][T10984] __nla_validate_parse: 27 callbacks suppressed
[  166.867076][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'.
[  166.870267][T10985] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.1438'.
[  166.962346][T10996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.970571][T10993] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1440'.
[  167.240232][T11016] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1446'.
[  167.299596][T11020] netlink: 'syz.2.1447': attribute type 10 has an invalid length.
[  167.302886][T11019] netlink: 'syz.1.1448': attribute type 13 has an invalid length.
[  167.311015][T11020] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.350651][T11019] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.358649][T11019] 8021q: adding VLAN 0 to HW filter on device team0
[  167.368218][T11019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.382864][   T10] lo speed is unknown, defaulting to 1000
[  167.384722][   T10] syz2: Port: 1 Link ACTIVE
[  167.474985][T11035] bond0: (slave wlan1): Releasing backup interface
[  167.487263][T11035] bond7: (slave geneve4): Releasing active interface
[  167.491604][T11035] bond0: (slave bond11): Releasing backup interface
[  167.497488][T11029] block nbd1: shutting down sockets
[  167.500389][T11035] bond12: (slave gretap3): Releasing active interface
[  167.530305][T11035] validate_nla: 1 callbacks suppressed
[  167.530316][T11035] netlink: 'syz.2.1452': attribute type 10 has an invalid length.
[  167.540495][T11035] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.546947][T11035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.550150][T11035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.710005][T11041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1455'.
[  167.711275][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'.
[  167.751786][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'.
[  168.573630][T11089] netlink: 'syz.0.1468': attribute type 4 has an invalid length.
[  168.646970][T11091] netlink: 'syz.0.1469': attribute type 1 has an invalid length.
[  168.683646][T11091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1469'.
[  168.847713][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'.
[  169.352693][T11109] netlink: 7968 bytes leftover after parsing attributes in process `syz.1.1475'.
[  191.235315][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  197.555366][ T5312] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec
[  201.483998][T11126] netlink: 'syz.2.1480': attribute type 1 has an invalid length.
[  201.522180][T11126] 8021q: adding VLAN 0 to HW filter on device bond15
[  201.543611][T11126] bond15: (slave ip6gretap2): making interface the new active one
[  201.549439][T11126] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link
[  201.552495][T11129] lo speed is unknown, defaulting to 1000
[  201.574450][T11126] veth1: entered promiscuous mode
[  201.580011][T11126] bond15: (slave veth1): Enslaving as an active interface with a down link
[  201.591497][T11126] erspan0: entered allmulticast mode
[  201.596270][T11126] bond15: (slave erspan0): Enslaving as an active interface with an up link
[  201.609866][T11135] netlink: 'syz.1.1482': attribute type 10 has an invalid length.
[  201.615595][T11135] __nla_validate_parse: 1 callbacks suppressed
[  201.615604][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'.
[  201.744948][ T5312] lo speed is unknown, defaulting to 1000
[  201.747375][ T5312] syz2: Port: 1 Link DOWN
[  201.759408][T11144] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1483'.
[  202.024986][T11152] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1485'.
[  202.072734][T11154] netlink: 'syz.0.1486': attribute type 46 has an invalid length.
[  202.115669][T11156] openvswitch: netlink: Unknown key attributes 2
[  202.192378][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'.
[  202.272856][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1490'.
[  202.404609][T11175] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1492'.
[  202.704644][T11197] netlink: 'syz.2.1499': attribute type 10 has an invalid length.
[  202.710144][T11197] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  202.763811][T11202] openvswitch: netlink: Key type 29 is not supported
[  202.819227][T11213] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  202.821188][T11212] IPVS: stopping backup sync thread 11213 ...
[  202.934897][T11221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.941291][T11221] syzkaller0: entered promiscuous mode
[  202.943589][T11221] syzkaller0: entered allmulticast mode
[  202.951904][T11222] tipc: Resetting bearer <eth:syzkaller0>
[  202.966884][T11222] tipc: Resetting bearer <eth:syzkaller0>
[  202.981613][T11222] tipc: Disabling bearer <eth:syzkaller0>
[  202.991288][T11226] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.1506'.
[  203.120879][T11230] vlan2: entered allmulticast mode
[  203.123292][T11230] bridge_slave_0: entered allmulticast mode
[  203.135262][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  203.313239][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1513'.
[  203.320027][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1513'.
[  203.363161][T11242] lo speed is unknown, defaulting to 1000
[  204.074665][T11309] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  204.144529][T11322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.223037][T11326] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  204.444958][T11334] batadv1: entered promiscuous mode
[  204.503215][ T5903] IPVS: starting estimator thread 0...
[  204.596223][T11338] IPVS: using max 46 ests per chain, 110400 per kthread
[  204.731606][T11354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  204.774599][T11354] netlink: 'syz.2.1548': attribute type 4 has an invalid length.
[  204.862181][T11364] wg1: left promiscuous mode
[  204.864119][T11364] wg1: left allmulticast mode
[  204.870594][T11364] vlan0: left promiscuous mode
[  204.882862][T11364] ipvlan2: left allmulticast mode
[  204.884995][T11364] bond5: left allmulticast mode
[  204.888080][T11364] gretap2: left allmulticast mode
[  204.891502][T11364] bond7: left promiscuous mode
[  204.893473][T11364] gtp0: left promiscuous mode
[  204.899533][T11364] ip6tnl2: left promiscuous mode
[  204.901193][T11364] ip6tnl2: left allmulticast mode
[  206.670487][T11406] __nla_validate_parse: 18 callbacks suppressed
[  206.670505][T11406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'.
[  206.734958][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1568'.
[  206.759533][T11414] veth5: entered promiscuous mode
[  206.801868][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.804906][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.890809][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  206.895702][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'.
[  206.969749][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'.
[  207.001034][T11436] netlink: 'syz.2.1571': attribute type 4 has an invalid length.
[  207.168856][T11444] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1576'.
[  207.179032][T11444] syzkaller0: entered promiscuous mode
[  207.181380][T11444] syzkaller0: entered allmulticast mode
[  207.192684][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'.
[  207.192696][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'.
[  207.202466][T11444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1576'.
[  207.823322][T11457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1580'.
[  207.924390][T11463] vlan0: entered promiscuous mode
[  208.072414][T11472] siw: device registration error -23
[  208.212096][T11480] xt_limit: Overflow, try lower: 604147548/4200216962
[  208.512849][T11492] raw_sendmsg: syz.2.1591 forgot to set AF_INET. Fix it!
[  208.912492][T11527] syz.1.1601: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  208.919679][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) 
[  208.919699][T11527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.919709][T11527] Call Trace:
[  208.919715][T11527]  <TASK>
[  208.919722][T11527]  dump_stack_lvl+0x189/0x250
[  208.919746][T11527]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  208.919765][T11527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.919780][T11527]  ? __pfx__printk+0x10/0x10
[  208.919799][T11527]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  208.919816][T11527]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  208.919838][T11527]  warn_alloc+0x214/0x310
[  208.919860][T11527]  ? stack_depot_save_flags+0x40/0x860
[  208.919883][T11527]  ? __pfx_warn_alloc+0x10/0x10
[  208.919904][T11527]  ? kasan_save_track+0x4f/0x80
[  208.919919][T11527]  ? xskq_create+0x56/0x170
[  208.919932][T11527]  ? xsk_init_queue+0xb0/0x110
[  208.919944][T11527]  ? xsk_setsockopt+0x4dc/0x8d0
[  208.919955][T11527]  ? do_sock_setsockopt+0x17c/0x1b0
[  208.919971][T11527]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  208.919986][T11527]  ? do_syscall_64+0xfa/0x3b0
[  208.920000][T11527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.920018][T11527]  __vmalloc_node_range_noprof+0x125/0x12f0
[  208.920058][T11527]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  208.920079][T11527]  ? __kasan_kmalloc+0x93/0xb0
[  208.920097][T11527]  vmalloc_user_noprof+0xad/0xf0
[  208.920115][T11527]  ? xskq_create+0xbf/0x170
[  208.920127][T11527]  xskq_create+0xbf/0x170
[  208.920141][T11527]  xsk_init_queue+0xb0/0x110
[  208.920156][T11527]  xsk_setsockopt+0x4dc/0x8d0
[  208.920171][T11527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  208.920214][T11527]  ? __pfx_aa_sk_perm+0x10/0x10
[  208.920236][T11527]  ? aa_sock_opt_perm+0xff/0x1b0
[  208.920252][T11527]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  208.920267][T11527]  ? __pfx_xsk_setsockopt+0x10/0x10
[  208.920281][T11527]  do_sock_setsockopt+0x17c/0x1b0
[  208.920302][T11527]  __x64_sys_setsockopt+0x13f/0x1b0
[  208.920324][T11527]  do_syscall_64+0xfa/0x3b0
[  208.920339][T11527]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.920353][T11527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.920366][T11527]  ? exc_page_fault+0x9f/0xf0
[  208.920380][T11527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.920392][T11527] RIP: 0033:0x7fc9b878ec29
[  208.920404][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.920415][T11527] RSP: 002b:00007fc9b95a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  208.920429][T11527] RAX: ffffffffffffffda RBX: 00007fc9b89d5fa0 RCX: 00007fc9b878ec29
[  208.920438][T11527] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  208.920445][T11527] RBP: 00007fc9b8811e41 R08: 0000000000000004 R09: 0000000000000000
[  208.920453][T11527] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.920461][T11527] R13: 00007fc9b89d6038 R14: 00007fc9b89d5fa0 R15: 00007fff451c5eb8
[  208.920482][T11527]  </TASK>
[  208.920492][T11527] Mem-Info:
[  208.967907][T11529] netlink: 'syz.1.1601': attribute type 4 has an invalid length.
[  208.968374][T11527] active_anon:13282 inactive_anon:0 isolated_anon:0
[  208.968374][T11527]  active_file:1505 inactive_file:38298 isolated_file:0
[  208.968374][T11527]  unevictable:1768 dirty:98 writeback:0
[  208.968374][T11527]  slab_reclaimable:10510 slab_unreclaimable:183847
[  208.968374][T11527]  mapped:18293 shmem:2435 pagetables:936
[  208.968374][T11527]  sec_pagetables:0 bounce:0
[  208.968374][T11527]  kernel_misc_reclaimable:0
[  208.968374][T11527]  free:156022 free_pcp:21298 free_cma:0
[  208.977533][T11529] netlink: 'syz.1.1601': attribute type 4 has an invalid length.
[  208.983014][T11527] Node 0 active_anon:34804kB inactive_anon:0kB active_file:3828kB inactive_file:23488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40924kB dirty:280kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7208kB pagetables:1980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.029772][  T793] lo speed is unknown, defaulting to 1000
[  209.040823][T11527] Node 1 active_anon:18324kB inactive_anon:0kB active_file:2192kB inactive_file:129704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32248kB dirty:112kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5656kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.067065][  T793] syz2: Port: 1 Link ACTIVE
[  209.069187][T11527] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.111146][T11480] delete_channel: no stack
[  209.125177][T11527] lowmem_reserve[]: 0 811 811 811 811
[  209.127298][T11527] Node 0 DMA32 free:113704kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34736kB inactive_anon:0kB active_file:3828kB inactive_file:23488kB unevictable:3536kB writepending:280kB present:1556484kB managed:830808kB mlocked:0kB bounce:0kB free_pcp:34344kB local_pcp:19872kB free_cma:0kB
[  209.155839][T11527] lowmem_reserve[]: 0 0 0 0 0
[  209.157685][T11527] Node 1 DMA32 free:438596kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18428kB local_pcp:9636kB free_cma:0kB
[  209.170411][T11527] lowmem_reserve[]: 0 0 854 854 854
[  209.172300][T11527] Node 1 Normal free:55772kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18316kB inactive_anon:0kB active_file:2192kB inactive_file:129704kB unevictable:3536kB writepending:112kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:33300kB local_pcp:15180kB free_cma:0kB
[  209.183430][T11527] lowmem_reserve[]: 0 0 0 0 0
[  209.185453][T11527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.190458][T11527] Node 0 DMA32: 11*4kB (UM) 324*8kB (UME) 367*16kB (UME) 73*32kB (UM) 216*64kB (UME) 92*128kB (UME) 21*256kB (UE) 20*512kB (UE) 14*1024kB (UME) 5*2048kB (UME) 9*4096kB (M) = 113500kB
[  209.197362][T11527] Node 1 DMA32: 38*4kB (UM) 16*8kB (UM) 8*16kB (UM) 62*32kB (UME) 50*64kB (UME) 37*128kB (UM) 19*256kB (UME) 17*512kB (UE) 5*1024kB (UME) 4*2048kB (ME) 98*4096kB (M) = 438616kB
[  209.203893][T11527] Node 1 Normal: 171*4kB (UME) 492*8kB (UME) 359*16kB (UME) 36*32kB (UM) 41*64kB (UME) 39*128kB (UM) 35*256kB (UME) 16*512kB (UM) 5*1024kB (UM) 3*2048kB (UM) 2*4096kB (M) = 55740kB
[  209.210840][T11527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.213968][T11527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.217899][T11527] 42238 total pagecache pages
[  209.219884][T11527] 0 pages in swap cache
[  209.220398][T11537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.221505][T11527] Free swap  = 124996kB
[  209.226484][T11527] Total swap = 124996kB
[  209.227892][T11527] 786301 pages RAM
[  209.229133][T11537] syzkaller0: entered promiscuous mode
[  209.231373][T11537] syzkaller0: entered allmulticast mode
[  209.232468][T11527] 0 pages HighMem/MovableOnly
[  209.236449][T11527] 241367 pages reserved
[  209.237896][T11527] 0 pages cma reserved
[  209.270810][T11537] tipc: Resetting bearer <eth:syzkaller0>
[  209.277290][T11536] tipc: Resetting bearer <eth:syzkaller0>
[  209.300701][T11536] tipc: Disabling bearer <eth:syzkaller0>
[  209.341059][T11545] lo speed is unknown, defaulting to 1000
[  209.690026][T11567] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  209.692972][T11567] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  209.777245][T11567] bond0: (slave wlan1): Releasing backup interface
[  209.790279][T11567] ------------[ cut here ]------------
[  209.792434][T11567] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  209.796033][T11567] WARNING: CPU: 0 PID: 11567 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  209.799915][T11567] Modules linked in:
[  209.801803][T11567] CPU: 0 UID: 0 PID: 11567 Comm: syz.2.1612 Not tainted syzkaller #0 PREEMPT(full) 
[  209.806408][T11567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.810472][T11567] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  209.813099][T11567] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 80 47 b0 8c e8 b6 dc 98 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 d7 3f d5 f6 90 0f 0b 90 42 80 7c 3d
[  209.820961][T11567] RSP: 0018:ffffc9000333ef80 EFLAGS: 00010246
[  209.823305][T11567] RAX: 7f74f9d87e894f00 RBX: 0000000000000000 RCX: 0000000000080000
[  209.826445][T11567] RDX: ffffc90009799000 RSI: 0000000000020724 RDI: 0000000000020725
[  209.829483][T11567] RBP: ffff888120f91728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  209.832645][T11567] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888120f929d8
[  209.835968][T11567] R13: ffff888120f90d80 R14: 1ffff110241f22e5 R15: dffffc0000000000
[  209.839099][T11567] FS:  00007f52cc0396c0(0000) GS:ffff8880b8611000(0000) knlGS:0000000000000000
[  209.842735][T11567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.845768][T11567] CR2: 0000001b32b10ff8 CR3: 000000010fd76000 CR4: 00000000000006f0
[  209.848933][T11567] Call Trace:
[  209.850316][T11567]  <TASK>
[  209.851493][T11567]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  209.853941][T11567]  __ieee80211_link_release_channel+0x33b/0x4a0
[  209.856140][T11567]  ? __pfx_ieee80211_uninit+0x10/0x10
[  209.857897][T11567]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  209.860411][T11567]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  209.863003][T11567]  ? __pfx_call_rcu+0x10/0x10
[  209.864894][T11567]  unregister_netdevice_queue+0x33c/0x380
[  209.867345][T11567]  ? kernfs_remove_by_name_ns+0xee/0x130
[  209.869453][T11567]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  209.871676][T11567]  _cfg80211_unregister_wdev+0x165/0x590
[  209.873533][T11567]  ieee80211_if_remove+0x256/0x310
[  209.875401][T11567]  ieee80211_del_iface+0x19/0x30
[  209.877205][T11567]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  209.879515][T11567]  genl_family_rcv_msg_doit+0x215/0x300
[  209.881715][T11567]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  209.884136][T11567]  ? bpf_lsm_capable+0x9/0x20
[  209.886270][T11567]  ? security_capable+0x7e/0x2e0
[  209.888310][T11567]  genl_rcv_msg+0x60e/0x790
[  209.890200][T11567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.892304][T11567]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  209.894456][T11567]  ? __pfx_nl80211_del_interface+0x10/0x10
[  209.896872][T11567]  ? __pfx_nl80211_post_doit+0x10/0x10
[  209.899013][T11567]  ? __asan_memcpy+0x40/0x70
[  209.900857][T11567]  ? __pfx_ref_tracker_free+0x10/0x10
[  209.902985][T11567]  netlink_rcv_skb+0x208/0x470
[  209.904867][T11567]  ? __lock_acquire+0xab9/0xd20
[  209.907011][T11567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.908989][T11567]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.911084][T11567]  ? down_read+0x1ad/0x2e0
[  209.912849][T11567]  genl_rcv+0x28/0x40
[  209.914455][T11567]  netlink_unicast+0x82f/0x9e0
[  209.916540][T11567]  ? __pfx_netlink_unicast+0x10/0x10
[  209.918668][T11567]  ? netlink_sendmsg+0x642/0xb30
[  209.920650][T11567]  ? skb_put+0x11b/0x210
[  209.922372][T11567]  netlink_sendmsg+0x805/0xb30
[  209.924321][T11567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.926600][T11567]  ? aa_sock_msg_perm+0xf1/0x1d0
[  209.928631][T11567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.930786][T11567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.932918][T11567]  __sock_sendmsg+0x21c/0x270
[  209.934935][T11567]  ____sys_sendmsg+0x505/0x830
[  209.937070][T11567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.939241][T11567]  ? import_iovec+0x74/0xa0
[  209.941161][T11567]  ___sys_sendmsg+0x21f/0x2a0
[  209.943025][T11567]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.944990][T11567]  ? __fget_files+0x2a/0x420
[  209.946799][T11567]  ? __fget_files+0x3a0/0x420
[  209.948367][T11567]  __x64_sys_sendmsg+0x19b/0x260
[  209.950057][T11567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.952075][T11567]  ? rcu_is_watching+0x15/0xb0
[  209.953982][T11567]  ? do_syscall_64+0xbe/0x3b0
[  209.955663][T11567]  do_syscall_64+0xfa/0x3b0
[  209.957113][T11567]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.958733][T11567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.960868][T11567]  ? exc_page_fault+0x9f/0xf0
[  209.962499][T11567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.964495][T11567] RIP: 0033:0x7f52cb18ec29
[  209.966265][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.973326][T11567] RSP: 002b:00007f52cc039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.976540][T11567] RAX: ffffffffffffffda RBX: 00007f52cb3d5fa0 RCX: 00007f52cb18ec29
[  209.979292][T11567] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  209.982004][T11567] RBP: 00007f52cb211e41 R08: 0000000000000000 R09: 0000000000000000
[  209.984619][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.987407][T11567] R13: 00007f52cb3d6038 R14: 00007f52cb3d5fa0 R15: 00007ffe0825b5b8
[  209.990384][T11567]  </TASK>
[  209.991478][T11567] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  209.993838][T11567] CPU: 0 UID: 0 PID: 11567 Comm: syz.2.1612 Not tainted syzkaller #0 PREEMPT(full) 
[  209.996930][T11567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.000134][T11567] Call Trace:
[  210.001368][T11567]  <TASK>
[  210.002543][T11567]  dump_stack_lvl+0x99/0x250
[  210.004379][T11567]  ? __asan_memcpy+0x40/0x70
[  210.006259][T11567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.008150][T11567]  ? __pfx__printk+0x10/0x10
[  210.009737][T11567]  vpanic+0x281/0x750
[  210.011073][T11567]  ? __pfx__printk+0x10/0x10
[  210.012657][T11567]  ? __pfx_vpanic+0x10/0x10
[  210.014184][T11567]  ? is_bpf_text_address+0x26/0x2b0
[  210.015912][T11567]  panic+0xb9/0xc0
[  210.017137][T11567]  ? __pfx_panic+0x10/0x10
[  210.018550][T11567]  __warn+0x31b/0x4b0
[  210.019770][T11567]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  210.021501][T11567]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  210.023274][T11567]  report_bug+0x2be/0x4f0
[  210.024857][T11567]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  210.026764][T11567]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  210.028804][T11567]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  210.030744][T11567]  handle_bug+0x84/0x160
[  210.032374][T11567]  exc_invalid_op+0x1a/0x50
[  210.034305][T11567]  asm_exc_invalid_op+0x1a/0x20
[  210.035972][T11567] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  210.038146][T11567] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 80 47 b0 8c e8 b6 dc 98 f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 d7 3f d5 f6 90 0f 0b 90 42 80 7c 3d
[  210.044381][T11567] RSP: 0018:ffffc9000333ef80 EFLAGS: 00010246
[  210.046397][T11567] RAX: 7f74f9d87e894f00 RBX: 0000000000000000 RCX: 0000000000080000
[  210.048946][T11567] RDX: ffffc90009799000 RSI: 0000000000020724 RDI: 0000000000020725
[  210.051557][T11567] RBP: ffff888120f91728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  210.054376][T11567] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888120f929d8
[  210.057658][T11567] R13: ffff888120f90d80 R14: 1ffff110241f22e5 R15: dffffc0000000000
[  210.060914][T11567]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  210.063460][T11567]  __ieee80211_link_release_channel+0x33b/0x4a0
[  210.066013][T11567]  ? __pfx_ieee80211_uninit+0x10/0x10
[  210.068219][T11567]  unregister_netdevice_many_notify+0x1953/0x1ff0
[  210.070910][T11567]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  210.073685][T11567]  ? __pfx_call_rcu+0x10/0x10
[  210.075630][T11567]  unregister_netdevice_queue+0x33c/0x380
[  210.077943][T11567]  ? kernfs_remove_by_name_ns+0xee/0x130
[  210.080230][T11567]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  210.082773][T11567]  _cfg80211_unregister_wdev+0x165/0x590
[  210.085125][T11567]  ieee80211_if_remove+0x256/0x310
[  210.086999][T11567]  ieee80211_del_iface+0x19/0x30
[  210.088815][T11567]  cfg80211_remove_virtual_intf+0x231/0x3f0
[  210.090880][T11567]  genl_family_rcv_msg_doit+0x215/0x300
[  210.092798][T11567]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  210.095030][T11567]  ? bpf_lsm_capable+0x9/0x20
[  210.096705][T11567]  ? security_capable+0x7e/0x2e0
[  210.098275][T11567]  genl_rcv_msg+0x60e/0x790
[  210.099863][T11567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.101684][T11567]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  210.103620][T11567]  ? __pfx_nl80211_del_interface+0x10/0x10
[  210.105564][T11567]  ? __pfx_nl80211_post_doit+0x10/0x10
[  210.107349][T11567]  ? __asan_memcpy+0x40/0x70
[  210.108857][T11567]  ? __pfx_ref_tracker_free+0x10/0x10
[  210.110607][T11567]  netlink_rcv_skb+0x208/0x470
[  210.112178][T11567]  ? __lock_acquire+0xab9/0xd20
[  210.113785][T11567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  210.115414][T11567]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.117042][T11567]  ? down_read+0x1ad/0x2e0
[  210.118458][T11567]  genl_rcv+0x28/0x40
[  210.119749][T11567]  netlink_unicast+0x82f/0x9e0
[  210.121241][T11567]  ? __pfx_netlink_unicast+0x10/0x10
[  210.122857][T11567]  ? netlink_sendmsg+0x642/0xb30
[  210.124406][T11567]  ? skb_put+0x11b/0x210
[  210.125728][T11567]  netlink_sendmsg+0x805/0xb30
[  210.127298][T11567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.129151][T11567]  ? aa_sock_msg_perm+0xf1/0x1d0
[  210.130769][T11567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  210.132430][T11567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.134219][T11567]  __sock_sendmsg+0x21c/0x270
[  210.135716][T11567]  ____sys_sendmsg+0x505/0x830
[  210.137276][T11567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.139014][T11567]  ? import_iovec+0x74/0xa0
[  210.140485][T11567]  ___sys_sendmsg+0x21f/0x2a0
[  210.142045][T11567]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.143879][T11567]  ? __fget_files+0x2a/0x420
[  210.145497][T11567]  ? __fget_files+0x3a0/0x420
[  210.147083][T11567]  __x64_sys_sendmsg+0x19b/0x260
[  210.148823][T11567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.150599][T11567]  ? rcu_is_watching+0x15/0xb0
[  210.152057][T11567]  ? do_syscall_64+0xbe/0x3b0
[  210.153508][T11567]  do_syscall_64+0xfa/0x3b0
[  210.154896][T11567]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.156480][T11567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.158382][T11567]  ? exc_page_fault+0x9f/0xf0
[  210.159893][T11567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.161739][T11567] RIP: 0033:0x7f52cb18ec29
[  210.163166][T11567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.169392][T11567] RSP: 002b:00007f52cc039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.172128][T11567] RAX: ffffffffffffffda RBX: 00007f52cb3d5fa0 RCX: 00007f52cb18ec29
[  210.174738][T11567] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[  210.177197][T11567] RBP: 00007f52cb211e41 R08: 0000000000000000 R09: 0000000000000000
[  210.179693][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.182459][T11567] R13: 00007f52cb3d6038 R14: 00007f52cb3d5fa0 R15: 00007ffe0825b5b8
[  210.185524][T11567]  </TASK>
[  210.187397][T11567] Kernel Offset: disabled
[  210.188864][T11567] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:59:26  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000304f4 RDI=00000000000304f5 RBP=00000000000003f8 RSP=ffffc9000333e730
R8 =ffff888020cb0237 R9 =1ffff11004196046 R10=dffffc0000000000 R11=ffffffff854fb640
R12=dffffc0000000000 R13=ffffffff99b048f9 R14=ffffffff99df9480 R15=0000000000000000
RIP=ffffffff854fb6bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52cc0396c0 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32b10ff8 CR3=000000010fd76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f52cb212e7b
XMM06=0000000000000000 00007f52cb212e75 XMM07=0000000000000000 00007f52cb212e89
XMM08=0000000000000000 00007f52cb212f0f XMM09=0000000000000000 00007f52cb212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=875c6408cb2d3c00 RBX=0000000000000a06 RCX=875c6408cb2d3c00 RDX=0000000000000000
RSI=ffffffff8d9ba64d RDI=0000000000000001 RBP=ffffc900017cfa10 RSP=ffffc900017cf980
R8 =ffffffff8fa39237 R9 =1ffffffff1f47246 R10=dffffc0000000000 R11=fffffbfff1f47247
R12=dffffc0000000000 R13=0000000000000000 R14=ffff888136627a80 R15=1ffff920002f9f30
RIP=ffffffff8b7e4eb8 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580e9c500 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c29b989 CR3=00000000275a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006567646972625f 6f745f3168746576
XMM02=0200000040020008 0700000a00000000 XMM03=0000002c00000000 317a797300010009
XMM04=0100110000001400 000000327a797300 XMM05=0300090000000031 7a79730001000907
XMM06=00000a0000000000 00000001010a0300 XMM07=00002c0000000031 7a79730001000902
XMM08=0000000000000000 00007fc9b8812f0f XMM09=0000000000000000 00007fc9b8812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
