last executing test programs:

1.523517163s ago: executing program 0 (id=6503):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x30, 0x61, 0x2e, 0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000180)=""/228, 0x3a, 0xe4, 0x1, 0x400080}, 0x28)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7f, 0xff, 0xfffffff8, 0x4400, r0, 0xfa03, '\x00', 0x0, r2, 0x4, 0x2, 0x2, 0x6}, 0x50)
accept4(r1, &(0x7f0000000340)=@generic, &(0x7f0000000080)=0x80, 0x80000) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r3, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000))

1.50951926s ago: executing program 0 (id=6506):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x11, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x90}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x95, 0x0, 0x8, 0x9, 0xff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x4, 0xccf9, 0x2}, 0x10, 0x2e2b5, 0xffffffffffffffff, 0x0, &(0x7f0000000a40)=[r2, r2, r2, r2], 0x0, 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1}, &(0x7f0000000880), &(0x7f0000000b40)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000008c00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x114dd56e, <r7=>0x0}, 0x8)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000000)=r9)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10001, 0x5, 0x8, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x8000}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x7a91ac1d, 0xf55b, 0xa8, 0x10000, 0x1, 0x8001, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='\x00', 0x0, 0x4000, r0}, 0x18)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r16 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r15, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r16, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x25, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b0000010000000000000000000000f134fcffffffffff186100000600000000000000be0a000018110000", @ANYRES32=r4, @ANYBLOB="000000000000ff00b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', r1, @fallback=0x1f, r6, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0xfff, 0x600000}, 0x10, r7, r9, 0x2, &(0x7f0000000740)=[r10, r11, r12, r13, 0x1, r14, r15], &(0x7f0000000780)=[{0x5, 0x5, 0xe}, {0x4, 0x1, 0xd, 0xc}], 0x10, 0x6}, 0x94)

1.421882015s ago: executing program 0 (id=6508):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtaction={0x7c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x68, 0x1, [@m_tunnel_key={0x38, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "1388"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x48c0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f0000001700))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r1, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x8c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0x6a, 0x8, "e0f1b31298c40cc2efda139fd725109558413d91ef20655c95ace1d3922c5dce9a63aa18a40243cc05caf939954f76a32a63f857e14328fff53072fd03aae5ac9c0ccf1e8e6437eb79e2ef1fc9fdd7f5d6cc53e94489e517ec959ad5d4e37b289b1e839463aa"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x11}, 0x20000010)
sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001800010029bd7000fddbdf251d01040015000400040000200600000051824aa7ccf28f7700000000087ec81c6db6c8e61d2d6d9dfdafa651d29f66cf5ff05c590b9150ae95eaf36aca543c14d1c1c5c364b00c7b508dd488869a6f27ed637e519130d1fd772333dea8b40797e3a3d13595bcea3e2c5b5d33fe9948a7c9ba48e8a1d738d9cd546f21b7fc84276df03adad5df6df8ca769bf5ecc04ac7774327a658b83a519bf0f7737e3878512bb7ba54bc25b05b1ea40d605552d74855747d6c1a1401e31cfd88a095a0f4df2348c73e"], 0x2c}}, 0x4c0c8)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.313384496s ago: executing program 0 (id=6511):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ff7f00e00bb200000000000d0000009500000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x9, 0x2, 0x1100}, 0x50)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x210000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x4004)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r7}, 0x20)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x6}, &(0x7f00000001c0)=0x8)
openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10)

873.931242ms ago: executing program 0 (id=6522):
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
preadv(r3, 0x0, 0x0, 0x1, 0x7)
listen(r1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x22020600)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84155900}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xd0, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffc00}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffffc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1c64}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x840}, 0x810)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r4, &(0x7f0000000180)=""/60, 0x3c, 0x4102, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000017c0)={0x0, &(0x7f0000001580)=""/176, &(0x7f0000001640)="9ac2038fa014083cc15d5d26224fc397c4e3b669619215e93ffe92c60c2551a9513ba8f207f75b7426cd90597736442a0f9378dbe872cd0ae8ccdc482e64cd224a13605394f28e42df02c409e2081148efe651fc4ca536badca9dacf04274e614a2f596d307e8748e709f69cff94d040bfd2d86465181e6779951c538ffeec", &(0x7f00000016c0), 0x6, r3}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x7c087000)
close(r4)

271.409594ms ago: executing program 2 (id=6546):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001140)=@delchain={0x20d8, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2}, {0x5, 0x2}, {0x1, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x12a}, @filter_kind_options=@f_basic={{0xa}, {0x206c, 0x2, [@TCA_BASIC_ACT={0x2068, 0x3, [@m_skbmod={0x118, 0x16, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d539e1fe0ab2"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}]}, {0xa0, 0x6, "1d37e6aec0945e9870c13e8e1c988f3799844b98ff25c193a9188266dfe68bfa36bcb930ea28c5928cd228d6e1eca14323cf9c317e0af711c09dc4a260cf5f28483191b4276d5f8a5ac68a69a6a3580f85cef8d3b9bcc0882d953759c5bcfa077faff0a141d6760a86b2d7264be944ee5811d04a20abda983fd5b23bf79a24fb71a764fad64d6ab71e77d5afe97e93b91010c457f76bd0dc799946ef"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ife={0xb8, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xfa97}]}]}, {0x64, 0x6, "a19fd49ed4366833443dfcead2a4bf1ba35ba30df6452f1e126499b2628d49b94c82c5fb9711db8687c9a4699d10055c5213dac411b3a489b2e3443baf894e555d1bcc4303434d8b38d3ad6e285003d6bc3aae7a5ccec8b0c73a61228ca26298"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x1cfc, 0x2, 0x0, 0x0, {{0xb}, {0x1cd0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3, 0x98, 0x0, 0x9, 0x3, 0x7, 0x6, 0x4, 0x5, 0x2, 0x1000, 0x7f, 0x8, 0x8001, 0x2, 0x5, 0x6, 0x10000, 0xa664, 0x80000000, 0xfffffffd, 0x2, 0x5, 0xd44, 0x8, 0x0, 0x9, 0x2, 0x4, 0xff, 0xfff, 0x4, 0xfffffffd, 0x5, 0xf7, 0x6, 0x5, 0x10001, 0x4, 0x1, 0xfffff800, 0x7, 0x7, 0x7fed, 0x40, 0x800, 0x1, 0x7, 0x2, 0xa, 0x3ff80000, 0x1, 0xc00, 0x5, 0xffffffff, 0x3, 0x3, 0x1, 0x5, 0x6, 0x3, 0x44, 0x9e, 0xffffffff, 0x4, 0x0, 0x0, 0x3, 0xffff8001, 0x3, 0x24, 0x8, 0x6, 0x8, 0x8, 0x3c, 0xe, 0x8, 0x6, 0x80000000, 0xd3, 0x101, 0x0, 0xa9a, 0x2, 0x7f, 0xfffffff9, 0x0, 0x1ff, 0xfffffff7, 0x1, 0xfc, 0x1, 0x6, 0x8, 0x3ff, 0x81, 0x4, 0x9, 0xfffffffc, 0x2, 0x4, 0x6, 0x1ff, 0x12000000, 0x3, 0x6, 0x5, 0x9, 0x400, 0x7, 0x0, 0x7, 0xa, 0x8, 0x134a, 0xb0000, 0x7fffffff, 0x8, 0x0, 0x880, 0x5, 0x9, 0x6, 0x8, 0x2a5, 0x0, 0x8, 0xfffffffd, 0x5, 0x0, 0x1e, 0x8, 0xc000, 0x430, 0x6908, 0xaaf, 0x1, 0x1, 0x3, 0x8, 0x1, 0x8, 0x1ff, 0x1, 0x7fff, 0xe, 0x1b, 0x3, 0x3b9, 0x4, 0xb2, 0x27, 0xffffff78, 0xd5, 0x6, 0x4, 0x8, 0x1000, 0x6, 0x7fffffff, 0x2, 0x0, 0x4, 0x400, 0x7fff, 0xac3a, 0x1000, 0x9, 0x6, 0x9, 0x100, 0x1, 0x71, 0xffffffff, 0x3, 0x27b68d2d, 0x8, 0x80000001, 0x7, 0xb76e, 0x10, 0x6, 0x7fffffff, 0x40, 0x2, 0x7f, 0x6, 0x4, 0xf09, 0x7, 0x0, 0x6, 0x0, 0x7, 0xfffffff9, 0x24, 0x3, 0x7, 0x81, 0x9, 0xfffffc00, 0x8, 0x0, 0x3, 0x401, 0x5, 0x4, 0x8, 0x9, 0x0, 0x8, 0x8, 0x2, 0x401, 0x9, 0x7, 0x6, 0x2, 0x1, 0x1b6e4e84, 0x9, 0x7, 0xa, 0x3ff, 0x3, 0x9, 0xe9f, 0x7fff, 0xb, 0x0, 0x69f, 0x6, 0xd, 0x6, 0x3, 0xceb7, 0x1, 0xbb0, 0xffff, 0x8, 0x5, 0xff0, 0x1, 0x8, 0x9, 0x10, 0xc1f, 0x8000, 0x81, 0x7, 0x9, 0x3, 0xc, 0xd]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0xc0000000, 0x3, 0x5, 0x5, 0x4, 0x5, 0xc, 0x2, 0x0, 0x6, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0xffffffff, 0x2, 0x6, 0xfffffffd, 0x9, 0x54a, 0x10000, 0x0, 0x5, 0x5, 0x800, 0x8, 0xfffffffb, 0xe5, 0x3, 0xfffeffff, 0x7, 0x7, 0xff, 0x9, 0xded2, 0x8000, 0x4, 0x81, 0x1, 0x7, 0x8, 0x227, 0x0, 0x81, 0xfffffffa, 0x81, 0x4, 0x6, 0x2a, 0x8000, 0x647, 0x4, 0x2, 0x0, 0x10000, 0x80000001, 0x649, 0x7, 0x6, 0xcb0, 0x8, 0x3, 0x9, 0x3, 0x9, 0x4, 0xf, 0x7fff, 0x80000000, 0x4, 0x7, 0x8000, 0x3, 0x0, 0xe076, 0x3, 0x5, 0xfffff800, 0x7, 0x8, 0x1, 0x6, 0x9, 0x1000, 0x1, 0x1, 0x2, 0x2, 0xf, 0x9f54, 0x0, 0x9, 0x3, 0x4, 0x7fff, 0x6f58, 0x51ae, 0x5, 0x7ff, 0x2, 0xb, 0x80000001, 0x3, 0x9, 0x7ccc, 0x8, 0x2, 0x5, 0x9, 0xfffffffa, 0x0, 0xfffffffb, 0xcef, 0xf0c, 0x7, 0x3, 0x6, 0x1, 0xc5, 0xfd7, 0xf, 0x7f, 0x9, 0x2, 0x1, 0x3, 0x4, 0x4, 0xfffffff9, 0x8, 0xffffffff, 0x8, 0x0, 0x1ff, 0x1, 0x1, 0x4, 0x0, 0x32e, 0x0, 0xee, 0xf, 0xa, 0x1, 0x6, 0x2, 0xfffffffc, 0x81, 0xaa9, 0x1c4e, 0xb4c5, 0x8, 0xf0, 0x2, 0x7, 0x7f, 0x4, 0x40, 0x7, 0x1, 0x9, 0x93, 0x4, 0x4aa, 0x1, 0x665, 0x1, 0x0, 0xab, 0x8, 0x91d, 0x6, 0x0, 0x81, 0x0, 0x4, 0x8, 0xfffffffc, 0x9, 0x0, 0x9, 0x2, 0x2, 0xcbae, 0x9, 0x2, 0x2, 0x5, 0x3, 0x6, 0x4, 0xe, 0x4, 0x7ff, 0xff, 0x80000000, 0x7, 0x3, 0x5, 0x3, 0xf, 0x6d1bc7ac, 0x27e, 0x1, 0x1, 0x6e, 0x2, 0x8, 0xbe, 0x10001, 0xfffff58c, 0x7ff, 0x2, 0x4, 0x5cf, 0x2a367838, 0x2, 0x2, 0x7, 0x4, 0x7, 0x1000, 0x1, 0x8, 0x96d0, 0x101, 0x3, 0x101, 0x0, 0x9, 0x7450f7a8, 0x8, 0x7fff, 0x4, 0x8b, 0x80000000, 0x6c, 0x2, 0x7fffffff, 0x7898, 0x4, 0x9, 0xffffff81, 0x101, 0x4, 0xa, 0x10000, 0x7, 0x81, 0x7, 0x401, 0x6c, 0xb3, 0x31ae]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xec}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x8, 0x9, 0x1ff, 0x5, 0x0, 0x6, 0x0, 0x8, 0x5, 0x2, 0x101, 0x81, 0x5, 0xfd, 0x9, 0x0, 0x74499c0d, 0x2, 0xc4, 0x3, 0x6, 0xa, 0x7, 0x7, 0xb4, 0x0, 0x100, 0x7, 0xfff, 0xb, 0x2, 0x7, 0x2, 0xffffffff, 0x5c, 0x0, 0x8, 0x80000000, 0x0, 0xf55, 0x40, 0xf, 0x6, 0x6, 0x7fffffff, 0x149, 0xf, 0x8, 0x100, 0x7, 0x9, 0xb, 0x7, 0x6, 0x7, 0x7, 0xf82, 0x2, 0x8, 0x2, 0x3, 0x7, 0x6, 0x40, 0x1, 0x5, 0xfffff8ec, 0xa, 0x4, 0x1, 0x3, 0x29, 0x3, 0x5, 0x7, 0x7, 0x2, 0x10, 0x5, 0x1, 0x80000000, 0x40, 0x80, 0x1, 0x9, 0x0, 0x3ff, 0x10000, 0x7, 0x8, 0x6, 0x6, 0x200, 0x1e, 0x3, 0x36f, 0x2, 0x3ff, 0x3, 0xfffffffe, 0x3, 0x0, 0x713cd8b9, 0x7, 0x5, 0x2, 0x3, 0x6, 0xc0, 0xd6f9, 0xb, 0x75, 0xf8, 0x3e, 0x1, 0x401, 0x7, 0x3, 0x400, 0x3, 0x0, 0x2, 0x1b, 0xffffffff, 0x2, 0xe5d, 0x7ff, 0x3, 0x1, 0x9, 0x7ff, 0xea, 0x401, 0x4, 0xbbf, 0x9, 0x5, 0x3, 0x6, 0x7, 0x7, 0x3, 0x4, 0x2, 0x7000, 0x4, 0x853, 0x1ff, 0xebf, 0x1, 0x2, 0xffffffff, 0xa3, 0x4, 0x2, 0x1ff, 0x752, 0x4, 0x0, 0xfffffff9, 0xe2, 0x1, 0x9, 0x5, 0x5, 0x6, 0x10000, 0x0, 0x3, 0x5, 0x8, 0xfc6e, 0x3, 0xff, 0x3ff, 0x80000001, 0x3, 0x9, 0x5, 0x3, 0x4, 0xfff, 0x9, 0xffffff1e, 0x10000, 0x9, 0x1, 0x3, 0x0, 0x1000, 0x5, 0x1, 0x1ff, 0x7fff, 0x63e4, 0x2, 0x380d, 0x3, 0x8, 0x2, 0x7f, 0xf, 0x8600, 0x800, 0x7, 0xfffffff8, 0x5, 0x0, 0x3e, 0x4, 0x80000001, 0x2, 0x2, 0x8, 0x0, 0x9, 0x4, 0xde62, 0x4, 0x3, 0x3, 0x8, 0x0, 0x1, 0x7d1e, 0xffffffff, 0xdeb6, 0x10000, 0x80000001, 0x6, 0x8, 0x5, 0x5, 0x3, 0x423a2131, 0x7, 0x3, 0xa18, 0x1, 0x5, 0x0, 0x0, 0x8, 0x100, 0xc2, 0xa, 0xbe3, 0x57, 0xce, 0x9, 0x9, 0x81, 0x0, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x12}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x800, 0x1, 0x3, {0x0, 0x0, 0x1, 0x4, 0x5, 0x7}, {0x0, 0x2, 0xd, 0x820a, 0x7ff, 0xffffffff}, 0xaaef, 0xa, 0x1}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0x9, 0x8, 0x3, 0x8, 0xffff, 0xa8, 0x8, 0x1, 0xffffffff, 0x3342, 0x2, 0x0, 0x6, 0x6, 0xfffffffa, 0x4b5, 0x91, 0xa91, 0xe, 0x100, 0x0, 0x1, 0x9, 0x9, 0x2, 0x5, 0x2, 0x0, 0x66, 0x81, 0x6, 0x6, 0xba8, 0x1, 0x86e, 0x8f96, 0x9, 0x3f, 0x0, 0x6, 0x5, 0x48e0, 0x5, 0x1f, 0x4, 0x9, 0x5, 0x6, 0x4, 0xfffffff9, 0x4, 0x10000, 0x5, 0x9, 0x8000, 0x0, 0x8, 0x10000, 0x1, 0xff, 0x2, 0x10000, 0x3, 0x8636, 0x9, 0xe, 0x5, 0xba, 0x3, 0xdc9, 0x6b2, 0x7, 0x3, 0x4, 0xdf, 0x9, 0x4, 0x0, 0x8000, 0x4, 0x9, 0x81, 0x6, 0x9, 0x1, 0x3, 0xa907, 0xfff, 0x1eee, 0x4, 0x3, 0x4, 0x2, 0x0, 0x5, 0x8, 0xffffffff, 0x80000001, 0x7fff, 0x2, 0x8, 0x5, 0xd167, 0x3, 0x0, 0x11, 0xa7e, 0x6, 0x7, 0xcd5b, 0x3, 0x5800, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x81, 0x200, 0x3, 0x6, 0x200, 0x7, 0x4, 0x4, 0x6, 0x9, 0x6, 0x0, 0xcd8, 0x6, 0xe9, 0x10001, 0x4, 0x9b, 0x69, 0xffffff80, 0xab9, 0xfffffff8, 0x19a, 0x2, 0xc, 0xfb0, 0x100, 0x9, 0xfffffff7, 0x8, 0x2084, 0x8, 0xd, 0xb9, 0x0, 0x30, 0x763, 0x7, 0x10, 0x8001, 0x5fc, 0x52, 0x200, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x4, 0xf9b, 0x66, 0x2, 0x5, 0x0, 0x3e, 0x1, 0x6, 0x5, 0xa, 0x3, 0x6e, 0x2, 0x2, 0x5, 0x3, 0xfffffff7, 0x3, 0x7fff, 0x3, 0x100, 0x9, 0x40, 0x4, 0x7, 0x40, 0x6, 0x6, 0x40, 0xfffeffff, 0xfff, 0xdc8, 0x2, 0xa, 0x7, 0x9, 0xfffffffa, 0x61, 0x6, 0x0, 0x7, 0x7, 0x400, 0x81, 0x8, 0x7, 0x3, 0x9, 0x5, 0x4, 0x57, 0x8, 0x0, 0x3, 0x3, 0x741, 0x1, 0x8, 0xfffff09b, 0x1, 0x3, 0x198, 0x81, 0xf04, 0x5, 0x8, 0xe00, 0x6, 0x1, 0xef, 0x5, 0xe, 0x5, 0x9, 0xcdc9, 0x7, 0x8, 0x1, 0x5, 0xc, 0x400, 0x4150da0c, 0xd, 0x6, 0x80000001, 0x3, 0x1cc8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe5, 0x7, 0x2, 0xfffffffb, 0x1, 0x7fffffff, 0x7, 0x8, 0x5, 0x6, 0x6, 0x1, 0x3c65, 0xd9d, 0x5, 0x8001, 0x0, 0x100, 0x10, 0x2, 0x4, 0x0, 0x5, 0x90d, 0x0, 0x2, 0x800, 0x80, 0x4, 0x9, 0xb80a, 0x8, 0xb, 0xffff, 0x1, 0x9946, 0xc0, 0x7, 0x3ff, 0x1, 0x9, 0x10001, 0xa, 0x0, 0x8, 0x7fff, 0x2, 0x0, 0x1, 0x4, 0x5, 0x1, 0xc75, 0xfffffffa, 0x0, 0x6, 0x7, 0x40, 0xe, 0x7, 0x3, 0x7, 0x55, 0x8001, 0x6253, 0x5a37, 0x816, 0x0, 0x8, 0x48ac, 0x1, 0x401, 0x56d, 0x7, 0x8, 0x5, 0xfffffffd, 0x5, 0x8ca, 0x3, 0x0, 0xf438, 0x6, 0x1, 0x7, 0xf, 0x7, 0x6, 0xdd, 0x1, 0xffffff7f, 0x0, 0x7f, 0x0, 0x9, 0x4, 0x1, 0x10001, 0x10, 0x18, 0x5, 0x7f, 0x2, 0x4, 0x6, 0x5, 0x2, 0x9, 0x9, 0xf5, 0xff, 0x6a, 0xa3e4, 0xba5b, 0x0, 0x10, 0x501, 0x7fffffff, 0x0, 0x6, 0x8, 0xccf, 0x8, 0x5, 0x3, 0x1, 0x9, 0x9, 0x9, 0x7, 0x5, 0x101, 0x2, 0x3, 0x4, 0x1, 0x0, 0x8, 0x5, 0x7, 0x1, 0x7fffffff, 0x566, 0x8, 0x7, 0x0, 0x7, 0x2, 0x0, 0x10001, 0x3, 0xffffffff, 0x0, 0x6, 0x2, 0x3, 0x400, 0x5382, 0x6, 0x9, 0x1, 0x7, 0x48000, 0x1f, 0xc, 0x8, 0x7, 0x7, 0x1ff, 0x65833598, 0xc236, 0xf1c0, 0x401, 0xf, 0x1, 0xffffffff, 0xd, 0x1, 0x10, 0x1, 0x2, 0x34c3, 0xa000, 0x1, 0x8, 0x56b1, 0xc8, 0xcd, 0x80000000, 0xc, 0x5408, 0x1, 0x3ff, 0x10001, 0x8, 0x10001, 0x5, 0xe2, 0x9, 0x950, 0x2, 0x7, 0xe, 0x4, 0x65, 0x6, 0xb, 0x5, 0x1, 0x1, 0x1, 0x7, 0x2, 0x8, 0x7fff, 0x10000, 0x1ff, 0x2c, 0x7fff, 0xa34, 0x3a96, 0x4d37, 0x2, 0x8, 0x200, 0xce6, 0x200, 0xfffff8d1, 0x6, 0x1d2, 0x0, 0x4, 0xfffeffff, 0x3, 0x7ac9, 0x4, 0x170, 0x2, 0xc8c, 0x3, 0x8, 0x2, 0x4, 0x5, 0x15d0, 0x8001, 0x4, 0x0, 0x9, 0x7, 0x400, 0xa76, 0x6, 0x7, 0x200000, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xe, 0x7, 0x8, 0x8, 0x1ff, 0xf2, 0x4e, 0x8, 0x6, 0x2, 0x6, 0x8000, 0x40, 0x6, 0xdab6, 0xf861, 0xa9, 0x0, 0x0, 0x8, 0x401, 0x4, 0x7, 0x1, 0x5, 0x671d, 0x3, 0x9, 0x4, 0x10001, 0x1, 0x64, 0x4, 0x8, 0x81, 0x2, 0x6, 0x2, 0x8, 0x10, 0xfffffff7, 0x1, 0xffff78cb, 0x8, 0x38, 0x42, 0x0, 0xaa, 0x9, 0x2, 0xb, 0x1, 0x3, 0x692331e2, 0x800, 0x8fc, 0x7, 0x0, 0x437, 0x401, 0x4, 0x9e, 0x9, 0x0, 0x7f, 0x7, 0xc, 0x7, 0x5, 0x3, 0x3, 0x400, 0xffff0de8, 0x8, 0x7, 0x101, 0x5, 0xfff, 0x1, 0x3b3d, 0x3, 0x6, 0x6, 0x8, 0x5, 0x7, 0x7f, 0x8e, 0x1, 0xa7f1, 0x4, 0x5, 0x4, 0x6, 0x0, 0x2, 0x0, 0x9, 0x0, 0x7ff, 0x7fff, 0x1, 0x7, 0x80000000, 0x7e, 0x6, 0x10000, 0xfffffff9, 0x400, 0x8, 0x7b, 0x4, 0xf, 0x98, 0x1a, 0x1, 0x94, 0xd, 0x278000, 0x8, 0x2, 0x2, 0x72, 0x6, 0x6, 0x2, 0x6, 0x63, 0x2, 0xf11, 0x8, 0x0, 0x800, 0x5, 0x80000000, 0xc240, 0x5, 0x7, 0x4, 0x7, 0x6, 0x5, 0x9, 0x4, 0x5d, 0x7d, 0xd, 0x91, 0x4, 0xd6f, 0x2, 0x0, 0x5, 0x1, 0x6, 0x9, 0xf53d, 0x9, 0x4, 0x0, 0x8, 0x5, 0x100, 0x8001, 0x5cc9, 0x1, 0x7, 0x3544, 0x1000, 0x4, 0x2, 0x10, 0x10001, 0x5031ae70, 0x3, 0x10000, 0x0, 0x100, 0x1, 0x3, 0x116d, 0x7fffffff, 0x8, 0xffffffff, 0x6fa6, 0x4, 0x3, 0x1, 0x4, 0x20200, 0xff, 0x1, 0x1, 0xc000000, 0x3, 0x2, 0x4, 0x3, 0x6a, 0x400, 0x1, 0xf, 0x1, 0x8001, 0xfffffff7, 0x7, 0x8, 0x0, 0x1, 0x1, 0x6, 0x4, 0x8, 0x8, 0x7, 0x6, 0x10, 0x5ba, 0x6, 0x4, 0x4, 0x4, 0x100, 0x383, 0x400000, 0x2, 0x5, 0x0, 0x7, 0x4, 0x4, 0x400, 0x0, 0xffffff80, 0x9, 0xfffffff7, 0x7aa, 0xd4, 0x8, 0x977f, 0x4, 0x0, 0x7fff, 0x3, 0x508e, 0x100, 0x400, 0x1, 0x6, 0x40, 0xb44a, 0x7, 0x5, 0x714, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x47, 0x6, 0x1ff, 0x401, 0xe540, 0x6, 0xd35c, 0x7, 0x9, 0x8, 0x0, 0x30fe, 0x4a6, 0x9, 0x7, 0x7, 0x7fff, 0x5, 0x5, 0x6, 0x1, 0xc6b9, 0xffffff01, 0x3, 0x1, 0xc, 0x7ff, 0x2, 0x1, 0x3, 0x8, 0x8, 0x3, 0xc, 0x2, 0x4, 0x1, 0x3, 0x3, 0x5, 0x245a, 0x100, 0x3, 0x2, 0x7, 0xffff, 0x180, 0x5, 0xd, 0x10, 0x6, 0x5, 0x592, 0x4, 0x1ad4, 0x7, 0x200, 0x4100, 0x9, 0xc0000, 0x0, 0x120000, 0x4b0b860e, 0x4, 0x7, 0xfff, 0x80000000, 0x7, 0x9931, 0x0, 0x24b, 0x600, 0x5, 0x1ff, 0x7, 0x8000, 0xa7, 0x7ff, 0x40, 0x200, 0x4, 0x40, 0x9, 0x553, 0x3, 0x9, 0x4, 0x67, 0x0, 0x5b, 0x1, 0x3, 0x3, 0x1, 0x4, 0x3, 0x200, 0x958, 0xdc, 0x9, 0xa6c, 0x9, 0x6, 0xffffffff, 0x81, 0x80000000, 0xdedb, 0x7ff, 0x1ff, 0xe, 0x38b, 0x5, 0x800000, 0x2, 0x2, 0x5a62, 0xff, 0x81, 0x6, 0x4, 0x1000, 0x7, 0x8, 0x9, 0x5, 0x80, 0x2, 0xc00000, 0x5856, 0x8, 0x792, 0x1, 0x8, 0x7, 0x8, 0x3, 0xc2c1, 0x8, 0xc82, 0x7f, 0x800, 0x10001, 0x8001, 0x188, 0xfffffff9, 0x3, 0x3, 0x6, 0x1, 0x9, 0x3, 0x7, 0xffff, 0x4, 0x3e, 0x40d1, 0x80, 0x8, 0x1, 0xd96, 0xe686, 0x6, 0x720, 0x81, 0x5, 0x7f, 0x4, 0x4830, 0x99, 0x9, 0x0, 0x4, 0x2, 0x9, 0x10, 0x4, 0x7, 0x9, 0xfffffffb, 0x40000, 0x200, 0x0, 0x4, 0x3, 0x4eca, 0x9, 0x1, 0x4, 0x4, 0x1, 0x4e90, 0x2, 0x790c, 0x7fffffff, 0x7, 0xd, 0x6, 0x74, 0x4, 0xb8, 0x10001, 0xaa6cfcc, 0x1, 0x0, 0x1, 0x2, 0x3, 0x2, 0xffffffff, 0x9e3, 0x527, 0x9, 0x6, 0xfc, 0x8, 0xb23c, 0x3ff, 0x5, 0x516, 0x4, 0x1c, 0x7, 0x3, 0x8, 0x0, 0x2, 0x2, 0x3, 0x4, 0x80, 0x8, 0x80000000, 0x10, 0x5, 0xffffff7f, 0x3, 0x10000, 0x9, 0xc, 0x4, 0x4, 0x800e, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x9, 0x4, 0x7, 0x9, 0x100, 0xe, 0xa, 0x0, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_csum={0xd0, 0x3, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x80000001, 0x0, 0x9, 0x5}, 0x1a}}]}, {0x86, 0x6, "1e79e793ab89699836bed6e709c72ea29b5bc5bf97f62d427d469d2fcc28854e752a938c038b3deec4e2042fa04285e4b6bcbf3e08bd7622a2908b8082eb8303486fe0480d06bb88de35a38fc18cbdf5351c8980a457530fd31adacdcd2a226e512f3f45f655f5adc1129f4094949575f9e400f8d7aec5860ccfcd9486460ce4d166"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xc8, 0x1, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xdc7c, 0x0, 0x3, 0x6, 0xffffff7e}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_PRIO={0x8, 0x3, @val=0x1ff}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x683}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xb787}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xdff, 0x4, 0x1, 0x9, 0x2}, 0x1}}]}, {0x11, 0x6, "9488066c75c06d8cfed97f16c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x6, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0xf1, 0xf8}}, @TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x20d8}}, 0x8040)

211.539794ms ago: executing program 2 (id=6548):
r0 = socket(0x2, 0x80805, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)

209.395228ms ago: executing program 1 (id=6549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4800)

207.865621ms ago: executing program 1 (id=6550):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}}, 0x4840)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

199.743981ms ago: executing program 2 (id=6551):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008007b00b70300000000000085000000b200000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94)

198.263454ms ago: executing program 2 (id=6552):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000040)=0x7, 0x4)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0xfffffcb3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xffffffffffffff0d}]}, 0x2000000}, {{&(0x7f0000000380)=@alg, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/85}], 0x0, &(0x7f0000000680)=""/233}, 0x5}], 0x2, 0x101, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df2500000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000)
read$alg(r2, &(0x7f00000009c0)=""/75, 0x4b)

198.013548ms ago: executing program 1 (id=6553):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x100fd}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2400}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x4)

133.160946ms ago: executing program 1 (id=6554):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$l2tp(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x804, 0x8, 0x0, 0xffffffffffffffff, 0x659}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000e800"/28], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000002061cbd76401d543de83a3b030000000004000002000200000809000f32b45f4c43352e6555bd7802e5214f96001403ae361b3e1952ba388d77d0f32bc2f759feb55dda6cb42b317f896c7fbf3a319d6cc479c4b6b3e836636c9f07e1d60ef77fe34ba15615a8a1c21fd46114bcf1619ea9be96069cc1b2166cccb55396ee26"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x74, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x5}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair(0x1a, 0xa, 0x0, &(0x7f0000000340)={<r8=>0x0, <r9=>0x0})
close(r8)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})

132.349075ms ago: executing program 2 (id=6555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x7, [@remote, @multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1cad113a65d6", @local, @random="743e263015a9"]}) (async)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x7, [@remote, @multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1cad113a65d6", @local, @random="743e263015a9"]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
unshare(0x6020400) (async)
unshare(0x6020400)
r5 = gettid()
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') (async)
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00')
unshare(0x2020000)
close(0x3)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6) (async)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4008000) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

131.319792ms ago: executing program 1 (id=6556):
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f000100000005003000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbac5}], 0x38)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000380)={{r0}, "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"})
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="43a6f69e1556a700aa56f22b0461e10bad2744052cd89b8f9a544302cca035e38ebb292dfd29dd10168fb53295452cee70d1fbc5465b2cec59c5ce3d9c72e213f64b1c73d8af57f4cc758dfc91d5aea26f6caf19f53b5d", 0x57}, {&(0x7f0000000340)="f0cd84e04e5e209e41b318fdbfdbbabb0ac0a2f7effc09f7685d9ace", 0x1c}, {&(0x7f0000000380)="024ee1d9ff58fd9888d226d10d95ae58c827198579e6240b1312d28a2278f963706b35705332d4bba8637cd2601cad192b9fa7d841ef1c75dc625fb5abb4c29491caa9ebf481c031f9ebcc55103c2fd138010fcd97d70c865296fd1a53db4b519d18af440b102ee1", 0x68}], 0x3)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={<r4=>r3, 0x8b}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={r3, 0x3, 0x7f}, 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000280)={0x1, 0xbd5})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001380)='syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r6, &(0x7f00000013c0)='memory.pressure\x00', 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xd3, 0xa0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r8=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r6, @ANYRES32=r8, @ANYRESDEC=r4], 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x24000001)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@broadcast, @in=@empty, 0x4e21, 0x4, 0x4e20, 0x0, 0x2}, {0x40, 0xae, 0xffffffff, 0x9, 0x9, 0x9, 0x9, 0x5}, {0x10000, 0x7, 0x8}, 0x2, 0x6e6bbf, 0x1, 0x2a515e8a9e1e315e, 0x1}, {{@in6=@loopback, 0x4d2, 0x3c}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x0, 0x48, 0x54, 0x1ff, 0x1}}, 0xe8)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

4.119384ms ago: executing program 2 (id=6557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020100907800000402fe0af989f16d73c0e7984f616baff63cfe3ab47d9b4f7a8167fe11f52b1a9c0a24913587444ceac2c5b9001615e424af5252136412c30b457100f2b9cdcf41592cdf4b1cda4a0401d8c0c676302443a279"], 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007112707f2300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

2.488186ms ago: executing program 0 (id=6558):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ff8500b70300000000000085000000b200000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94)

0s ago: executing program 1 (id=6559):
r0 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400000053dbdf25003791f889c48d7abd06bd74f100fbca854f44000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040)

kernel console output (not intermixed with test programs):

 2*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 107*4096kB (UM) = 446624kB
[  277.940149][T18597] Node 1 Normal: 403*4kB (ME) 578*8kB (UME) 841*16kB (UME) 350*32kB (UME) 343*64kB (UME) 240*128kB (UME) 179*256kB (UM) 64*512kB (UME) 73*1024kB (UM) 21*2048kB (UME) 1*4096kB (U) = 284012kB
[  277.946872][T18597] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  277.951642][T18597] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  277.955107][T18597] 42225 total pagecache pages
[  277.956850][T18597] 0 pages in swap cache
[  277.958307][T18597] Free swap  = 124996kB
[  277.960019][T18604] bond0: (slave rose0): Enslaving as an active interface with an up link
[  277.962999][T18597] Total swap = 124996kB
[  277.964694][T18597] 786301 pages RAM
[  277.966187][T18597] 0 pages HighMem/MovableOnly
[  277.968085][T18597] 241339 pages reserved
[  277.970429][T18597] 0 pages cma reserved
[  278.263553][T18626] netlink: 'syz.1.3825': attribute type 4 has an invalid length.
[  278.677865][T18669] : renamed from pim6reg1
[  278.809830][T18688] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  278.830889][T18692] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.830924][T18693] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.987910][T18716] netlink: 'syz.2.3850': attribute type 1 has an invalid length.
[  279.260500][T18743] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  279.464075][T18751] netlink: 'syz.2.3860': attribute type 1 has an invalid length.
[  279.469485][T18751] netlink: 'syz.2.3860': attribute type 2 has an invalid length.
[  279.506143][T18756] netlink: 'syz.2.3861': attribute type 4 has an invalid length.
[  279.745418][T18758] netlink: 'syz.2.3862': attribute type 5 has an invalid length.
[  279.776180][T18768] team0: Mode changed to "loadbalance"
[  279.791949][T18759] netlink: 'syz.2.3862': attribute type 32 has an invalid length.
[  279.848841][T18773] bond27: (slave geneve0): Releasing active interface
[  279.853666][ T8703] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  279.856494][ T8703] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  279.865759][ T8703] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  279.868706][ T8703] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  279.942878][T18783] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  280.405908][T18727] Set syz1 is full, maxelem 65536 reached
[  280.693591][T18869] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  280.757081][T18879] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.762140][T18879] syzkaller0: entered promiscuous mode
[  280.764128][T18879] syzkaller0: entered allmulticast mode
[  280.770797][T18879] tipc: Resetting bearer <eth:syzkaller0>
[  280.774189][T18878] tipc: Resetting bearer <eth:syzkaller0>
[  280.778073][T18878] tipc: Disabling bearer <eth:syzkaller0>
[  281.378116][T18902] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  281.384913][T18902] syzkaller0: left promiscuous mode
[  281.387158][T18902] syzkaller0: left allmulticast mode
[  281.470515][T18907] __nla_validate_parse: 30 callbacks suppressed
[  281.470526][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3912'.
[  281.640843][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'.
[  281.645135][T18920] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3917'.
[  281.687615][ T5848] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  281.707896][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  281.707914][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  281.707920][ T5848] Call Trace:
[  281.707924][ T5848]  <TASK>
[  281.707928][ T5848]  dump_stack_lvl+0x189/0x250
[  281.707946][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.707955][ T5848]  ? __pfx__printk+0x10/0x10
[  281.707967][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.707977][ T5848]  dump_header+0xd3/0x480
[  281.707988][ T5848]  oom_kill_process+0x387/0x920
[  281.707998][ T5848]  out_of_memory+0xf09/0x12a0
[  281.708006][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708014][ T5848]  ? __pfx_out_of_memory+0x10/0x10
[  281.708020][ T5848]  ? percpu_ref_put+0x19/0x180
[  281.708032][ T5848]  ? lock_release+0x4b/0x3e0
[  281.708045][ T5848]  mem_cgroup_out_of_memory+0x145/0x240
[  281.708052][ T5848]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  281.708061][ T5848]  ? _raw_spin_unlock+0x28/0x50
[  281.708072][ T5848]  ? memcg1_oom_prepare+0x37f/0x450
[  281.708086][ T5848]  try_charge_memcg+0xdff/0x1290
[  281.708100][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708115][ T5848]  ? __pfx_try_charge_memcg+0x10/0x10
[  281.708130][ T5848]  ? rcu_needs_cpu+0xa1/0xb0
[  281.708140][ T5848]  ? xa_load+0x60/0x210
[  281.708154][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708166][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708179][ T5848]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  281.708223][ T5848]  charge_memcg+0x9f/0x180
[  281.708240][ T5848]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  281.708254][ T5848]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  281.708265][ T5848]  __read_swap_cache_async+0x28c/0x510
[  281.708277][ T5848]  swap_cluster_readahead+0x4cf/0x5f0
[  281.708286][ T5848]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  281.708295][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708302][ T5848]  ? filemap_get_entry+0xad/0x2f0
[  281.708310][ T5848]  ? get_vma_policy+0x27c/0x3c0
[  281.708322][ T5848]  swapin_readahead+0x17d/0xb50
[  281.708347][ T5848]  ? __pfx_filemap_get_entry+0x10/0x10
[  281.708355][ T5848]  ? get_swap_device_info+0x1c/0x2b0
[  281.708363][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708370][ T5848]  ? __pfx_swapin_readahead+0x10/0x10
[  281.708378][ T5848]  ? __filemap_get_folio+0x9a6/0xaf0
[  281.708387][ T5848]  ? swap_cache_get_folio+0xae/0x3b0
[  281.708395][ T5848]  do_swap_page+0x525/0x5ac0
[  281.708408][ T5848]  ? ___pte_offset_map+0x29/0x250
[  281.708419][ T5848]  ? lock_acquire+0x5f/0x360
[  281.708430][ T5848]  ? do_swap_page+0x184/0x5ac0
[  281.708438][ T5848]  ? __pfx_do_swap_page+0x10/0x10
[  281.708446][ T5848]  ? __pfx_filemap_map_pages+0x10/0x10
[  281.708454][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708460][ T5848]  ? __pfx_default_wake_function+0x10/0x10
[  281.708472][ T5848]  ? ___pte_offset_map+0x45/0x250
[  281.708481][ T5848]  ? ___pte_offset_map+0x1cf/0x250
[  281.708490][ T5848]  ? pte_offset_map_rw_nolock+0xea/0x160
[  281.708500][ T5848]  __handle_mm_fault+0xe55/0x5440
[  281.708512][ T5848]  ? __pfx___handle_mm_fault+0x10/0x10
[  281.708528][ T5848]  ? lock_release+0x4b/0x3e0
[  281.708540][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708546][ T5848]  ? lock_vma_under_rcu+0xdf/0x3d0
[  281.708558][ T5848]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  281.708569][ T5848]  handle_mm_fault+0x40a/0x8e0
[  281.708581][ T5848]  do_user_addr_fault+0xa81/0x1390
[  281.708595][ T5848]  ? rcu_is_watching+0x15/0xb0
[  281.708602][ T5848]  ? trace_page_fault_user+0x84/0x1e0
[  281.708613][ T5848]  exc_page_fault+0x76/0xf0
[  281.708625][ T5848]  asm_exc_page_fault+0x26/0x30
[  281.708634][ T5848] RIP: 0033:0x7fd3cfb8eb46
[  281.708646][ T5848] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83
[  281.708653][ T5848] RSP: 002b:00007ffde5f1d070 EFLAGS: 00010246
[  281.708662][ T5848] RAX: 0000000000000bb8 RBX: 0000000000000d77 RCX: 0000000000044bb3
[  281.708668][ T5848] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710
[  281.708673][ T5848] RBP: 00007ffde5f1d0dc R08: 000000001f326aa7 R09: 0000000000000000
[  281.708678][ T5848] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[  281.708684][ T5848] R13: 00000000000927c0 R14: 00000000000448f1 R15: 00007ffde5f1d130
[  281.708692][ T5848]  </TASK>
[  281.959868][ T5848] memory: usage 265340kB, limit 307200kB, failcnt 464
[  281.965552][ T5848] memory+swap: usage 262896kB, limit 9007199254740988kB, failcnt 0
[  281.968316][ T5848] kmem: usage 262528kB, limit 9007199254740988kB, failcnt 0
[  282.004864][ T5848] Memory cgroup stats for /syz0:
[  282.004970][ T5848] cache 0
[  282.008009][ T5848] rss 0
[  282.010915][ T5848] rss_huge 0
[  282.011995][ T5848] shmem 0
[  282.012910][ T5848] mapped_file 0
[  282.014040][ T5848] dirty 0
[  282.015049][ T5848] writeback 0
[  282.016139][ T5848] workingset_refault_anon 24
[  282.017629][ T5848] workingset_refault_file 13
[  282.019304][ T5848] swap 159744
[  282.020482][ T5848] swapcached 40960
[  282.021741][ T5848] pgpgin 103735
[  282.023054][ T5848] pgpgout 103725
[  282.025269][ T5848] pgfault 237750
[  282.026769][ T5848] pgmajfault 22
[  282.028155][ T5848] inactive_anon 0
[  282.034614][ T5848] active_anon 40960
[  282.036226][ T5848] inactive_file 0
[  282.037672][ T5848] active_file 0
[  282.042034][ T5848] unevictable 0
[  282.043789][ T5848] hierarchical_memory_limit 314572800
[  282.045771][ T5848] hierarchical_memsw_limit 9223372036854771712
[  282.047919][ T5848] total_cache 0
[  282.050657][ T5848] total_rss 0
[  282.051977][ T5848] total_rss_huge 0
[  282.053249][ T5848] total_shmem 0
[  282.054492][ T5848] total_mapped_file 0
[  282.055860][ T5848] total_dirty 0
[  282.057114][ T5848] total_writeback 0
[  282.062025][ T5848] total_workingset_refault_anon 24
[  282.064510][ T5848] total_workingset_refault_file 13
[  282.066415][ T5848] total_swap 159744
[  282.066483][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3924'.
[  282.067756][ T5848] total_swapcached 40960
[  282.072210][ T5848] total_pgpgin 103737
[  282.073665][ T5848] total_pgpgout 103727
[  282.075163][ T5848] total_pgfault 237804
[  282.076450][ T5848] total_pgmajfault 22
[  282.077893][ T5848] total_inactive_anon 0
[  282.080690][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3924'.
[  282.090266][ T5848] total_active_anon 40960
[  282.091895][ T5848] total_inactive_file 0
[  282.093406][ T5848] total_active_file 0
[  282.094834][ T5848] total_unevictable 0
[  282.096273][ T5848] anon_cost 0
[  282.099330][ T5848] file_cost 0
[  282.100398][ T5848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3904,pid=18883,uid=0
[  282.105424][ T5848] Memory cgroup out of memory: Killed process 18883 (syz.0.3904) total-vm:101888kB, anon-rss:1076kB, file-rss:22628kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  282.122450][T18949] bridge: RTM_NEWNEIGH with invalid ether address
[  282.196888][T18952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3926'.
[  282.371647][T18962] validate_nla: 5 callbacks suppressed
[  282.371668][T18962] netlink: 'syz.1.3930': attribute type 11 has an invalid length.
[  282.376810][T18962] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3930'.
[  282.561998][T18978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3935'.
[  282.565920][T18978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3935'.
[  282.863009][T18991] vcan0: tx drop: invalid da for name 0x0000000000000003
[  282.896559][T18994] netlink: 'syz.2.3941': attribute type 4 has an invalid length.
[  283.000342][T19000] lo speed is unknown, defaulting to 1000
[  283.006293][T19000] lo speed is unknown, defaulting to 1000
[  283.013569][T19002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3945'.
[  283.089556][T19009] netlink: 'syz.0.3948': attribute type 7 has an invalid length.
[  283.909650][T19053] netlink: 'syz.2.3951': attribute type 4 has an invalid length.
[  284.001185][T19058] netlink: 'syz.0.3952': attribute type 1 has an invalid length.
[  284.399869][T19102] netlink: 'syz.2.3968': attribute type 10 has an invalid length.
[  284.485778][T19125] syzkaller0: entered promiscuous mode
[  284.495394][T19125] syzkaller0: entered allmulticast mode
[  284.519005][T19127] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  284.564862][T19132] netlink: 'syz.1.3976': attribute type 1 has an invalid length.
[  284.638836][T19136] netlink: 'syz.1.3978': attribute type 21 has an invalid length.
[  284.702354][T19142] bridge0: port 1(ipvlan2) entered blocking state
[  284.705450][T19142] bridge0: port 1(ipvlan2) entered disabled state
[  284.707944][T19142] ipvlan2: entered allmulticast mode
[  284.710287][T19142] bridge0: entered allmulticast mode
[  284.713671][T19142] ipvlan2: left allmulticast mode
[  284.715726][T19142] bridge0: left allmulticast mode
[  284.903193][T19170] netlink: 'syz.1.3987': attribute type 1 has an invalid length.
[  284.907350][T19167] erspan0: Device is already in use.
[  284.947895][T19176] ksmbd: Unknown IPC event: 3, ignore.
[  285.862377][T19195] netlink: 'syz.2.3995': attribute type 4 has an invalid length.
[  285.954843][T19200] : entered promiscuous mode
[  286.105114][T19226] syzkaller1: entered promiscuous mode
[  286.107215][T19226] syzkaller1: entered allmulticast mode
[  286.214835][T19242] lo speed is unknown, defaulting to 1000
[  286.217525][T19242] lo speed is unknown, defaulting to 1000
[  286.252477][T19247] bond0: entered promiscuous mode
[  286.254320][T19247] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.258040][T19247] bond0 (unregistering): Released all slaves
[  286.322715][T19255] IPVS: persistence engine module ip_vs_pe_ not found
[  286.405901][T19270] macvlan0: left promiscuous mode
[  286.488781][T19280] __nla_validate_parse: 23 callbacks suppressed
[  286.488795][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4021'.
[  286.604402][T19288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4024'.
[  286.705340][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4028'.
[  286.821381][T19307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.902956][T19315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4031'.
[  286.936879][T19320] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4032'.
[  286.944658][T19320] pim6reg: entered allmulticast mode
[  286.947637][T19320] pim6reg: left allmulticast mode
[  287.212362][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'.
[  287.312547][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4043'.
[  287.439843][T19356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4044'.
[  287.462087][T19362] validate_nla: 11 callbacks suppressed
[  287.462102][T19362] netlink: 'syz.0.4046': attribute type 2 has an invalid length.
[  287.472623][T19362] : entered promiscuous mode
[  287.496899][T19364] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4047'.
[  287.500630][T19364] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4047'.
[  287.514946][T19366] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  287.636125][T19386] dvmrp0: entered allmulticast mode
[  287.701207][T19392] netlink: 'syz.1.4058': attribute type 21 has an invalid length.
[  287.911345][T19416] lo speed is unknown, defaulting to 1000
[  287.913942][T19416] lo speed is unknown, defaulting to 1000
[  287.980842][T19416] lo speed is unknown, defaulting to 1000
[  287.984557][T19416] lo speed is unknown, defaulting to 1000
[  288.105605][T19443] bridge0: port 1(erspan0) entered blocking state
[  288.109859][T19443] bridge0: port 1(erspan0) entered disabled state
[  288.112452][T19443] erspan0: entered allmulticast mode
[  288.115442][T19443] erspan0: entered promiscuous mode
[  288.581596][T19496] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  288.656027][T19506] syzkaller1: entered promiscuous mode
[  288.658242][T19506] syzkaller1: entered allmulticast mode
[  289.130932][T19544] netlink: 'syz.1.4107': attribute type 8 has an invalid length.
[  289.174828][T19551] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  289.229807][T19557] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  289.290753][T19563] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  289.559665][T19579] netlink: 'syz.1.4118': attribute type 1 has an invalid length.
[  289.630858][T19586] netlink: 'syz.1.4121': attribute type 1 has an invalid length.
[  289.667975][T19593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.759794][T19613] syzkaller1: entered allmulticast mode
[  289.810424][T19608] sctp: [Deprecated]: syz.1.4128 (pid 19608) Use of int in max_burst socket option.
[  289.810424][T19608] Use struct sctp_assoc_value instead
[  289.959710][T19629] team0: Port device hsr_slave_0 removed
[  289.966366][T19629] bond14: (slave gretap1): Releasing active interface
[  289.990494][T19629] bond15: (slave bond16): Releasing backup interface
[  290.000150][T19629] bond22: (slave geneve3): Releasing active interface
[  290.017633][ T5873] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.028906][ T5873] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.032236][ T5873] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.042634][ T5873] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  290.151100][T19652] batadv_slave_1: entered promiscuous mode
[  290.156466][T19651] batadv_slave_1: left promiscuous mode
[  290.207708][T19658] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  290.249414][T19668] netlink: 'syz.1.4147': attribute type 2 has an invalid length.
[  290.254228][T19668] : entered promiscuous mode
[  290.263176][T19671] netlink: 'syz.1.4147': attribute type 2 has an invalid length.
[  290.302198][T19677] nbd: nbd1 already in use
[  290.305683][T19670] lo speed is unknown, defaulting to 1000
[  290.307686][T19678] nbd: nbd1 already in use
[  290.311861][T19677] block nbd1: NBD_DISCONNECT
[  290.312533][T19670] lo speed is unknown, defaulting to 1000
[  290.313766][T19677] block nbd1: Send disconnect failed -32
[  290.317562][T19677] block nbd1: shutting down sockets
[  290.543883][T19693] netlink: 'syz.1.4152': attribute type 4 has an invalid length.
[  290.684273][T19699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  290.685196][T19700] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  290.871832][T19726] dvmrp8: entered allmulticast mode
[  290.924314][T19730] openvswitch: netlink: Flow actions attr not present in new flow.
[  290.930257][T19731] dvmrp8: left allmulticast mode
[  291.046833][T19739] tipc: Enabled bearer <udp:syz0>, priority 3
[  291.133381][T19747] ip6tnl0: entered promiscuous mode
[  291.138713][T19747] ip6tnl0: entered allmulticast mode
[  291.389447][T19794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.431433][T19800] netlink: 'syz.1.4187': attribute type 7 has an invalid length.
[  291.434276][T19800] netlink: 'syz.1.4187': attribute type 8 has an invalid length.
[  291.540584][T19822] __nla_validate_parse: 45 callbacks suppressed
[  291.540602][T19822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4193'.
[  291.684519][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'.
[  291.729635][T19834] xt_socket: unknown flags 0xd0
[  292.048309][ T5882] lo speed is unknown, defaulting to 1000
[  292.051548][ T5882] syz1: Port: 1 Link ACTIVE
[  292.104317][T19864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4207'.
[  292.107171][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4207'.
[  292.223187][T19879] : entered promiscuous mode
[  292.297379][T19887] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4216'.
[  292.415641][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4220'.
[  292.448585][T19906] syz_tun: entered allmulticast mode
[  292.453834][T19906] dvmrp8: entered allmulticast mode
[  292.477354][T19906] lo speed is unknown, defaulting to 1000
[  292.480310][T19906] lo speed is unknown, defaulting to 1000
[  292.508978][T19906] validate_nla: 8 callbacks suppressed
[  292.508990][T19906] netlink: 'syz.0.4221': attribute type 23 has an invalid length.
[  292.523091][T19905] syz_tun: left allmulticast mode
[  292.524849][T19905] dvmrp8: left allmulticast mode
[  292.593341][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4222'.
[  292.597281][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4222'.
[  292.707124][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4229'.
[  292.745300][T19929] syzkaller1: entered promiscuous mode
[  292.747785][T19929] syzkaller1: entered allmulticast mode
[  292.752030][T19929] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  292.825760][T19939] netlink: 'syz.0.4235': attribute type 13 has an invalid length.
[  292.833100][T19939] netlink: 'syz.0.4235': attribute type 17 has an invalid length.
[  292.835638][T19941] delete_channel: no stack
[  292.857318][T19939] erspan0: left allmulticast mode
[  292.891777][T19939] 8021q: adding VLAN 0 to HW filter on device 
[  292.978078][T19939] 0X: left allmulticast mode
[  292.980095][T19939] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  292.985030][ T5908] lo speed is unknown, defaulting to 1000
[  292.986765][ T5908] syz2: Port: 1 Link ACTIVE
[  293.003273][T19946] lo speed is unknown, defaulting to 1000
[  293.006022][T19946] lo speed is unknown, defaulting to 1000
[  293.076211][T19960] netlink: 'syz.0.4242': attribute type 2 has an invalid length.
[  293.081655][T19960] : entered promiscuous mode
[  293.166727][T19976] netlink: 'syz.0.4249': attribute type 1 has an invalid length.
[  293.175656][T19975] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4248'.
[  293.184193][T19976] 8021q: adding VLAN 0 to HW filter on device bond24
[  293.198827][T19976] bond24: (slave veth13): Enslaving as an active interface with a down link
[  293.214409][T19976] macvlan0: entered promiscuous mode
[  293.216404][T19976] macvlan0: entered allmulticast mode
[  293.218711][T19976] bond24: entered promiscuous mode
[  293.220609][T19976] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  293.223378][T19976] bond24: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  293.229739][T19976] bond24: left promiscuous mode
[  293.474756][T20007] syzkaller1: entered promiscuous mode
[  293.479001][T20007] syzkaller1: entered allmulticast mode
[  293.507433][T20014] tipc: Enabling of bearer <et:g> rejected, media not registered
[  293.608152][T20018] lo speed is unknown, defaulting to 1000
[  293.612502][T20018] lo speed is unknown, defaulting to 1000
[  293.804560][T20045] openvswitch: netlink: IP tunnel TTL not specified.
[  294.067184][T20066] syzkaller0: left promiscuous mode
[  294.071585][T20066] syzkaller0: left allmulticast mode
[  294.085848][T20066] bond28 (unregistering): Released all slaves
[  295.369312][T20116] lo speed is unknown, defaulting to 1000
[  295.372742][T20116] lo speed is unknown, defaulting to 1000
[  295.893105][T20189] netlink: 'syz.0.4316': attribute type 4 has an invalid length.
[  296.153337][T20219] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20002
[  296.214898][T20225] netlink: 'syz.2.4329': attribute type 2 has an invalid length.
[  296.226078][T20225] : entered promiscuous mode
[  296.348842][T20245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  296.353151][T20242] IPVS: stopping backup sync thread 20245 ...
[  296.425670][T20255] netlink: 'syz.0.4336': attribute type 5 has an invalid length.
[  296.438041][T20255] geneve4: entered promiscuous mode
[  296.443682][T20255] geneve4: entered allmulticast mode
[  296.447642][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  296.451347][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  296.454553][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  296.458051][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  296.558589][T20266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.561235][T20266] syzkaller0: entered promiscuous mode
[  296.563004][T20266] syzkaller0: entered allmulticast mode
[  296.574927][T20266] tipc: Resetting bearer <eth:syzkaller0>
[  296.580313][T20265] tipc: Resetting bearer <eth:syzkaller0>
[  296.586206][T20265] tipc: Disabling bearer <eth:syzkaller0>
[  296.727966][T20272] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  296.832695][T20279] xfrm0: entered allmulticast mode
[  297.027988][T20300] __nla_validate_parse: 22 callbacks suppressed
[  297.028004][T20300] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4350'.
[  297.065760][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'.
[  297.354338][T20318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.443783][T20331] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4364'.
[  297.471345][T20335] IPv6: sit5: Disabled Multicast RS
[  297.474175][T20335] sit5: entered allmulticast mode
[  297.489756][T20337] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4367'.
[  297.495712][T20339] netlink: 'syz.2.4368': attribute type 4 has an invalid length.
[  297.527608][T20346] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4369'.
[  297.588298][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4369'.
[  297.698856][T20367] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.4378'.
[  297.704888][T20367] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.4378'.
[  297.712187][T20365] syzkaller0: entered promiscuous mode
[  297.714421][T20365] syzkaller0: entered allmulticast mode
[  297.716644][T20371] syzkaller1: entered promiscuous mode
[  297.720457][T20371] syzkaller1: entered allmulticast mode
[  297.731616][T20370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4379'.
[  297.744646][T20370] bond25: entered promiscuous mode
[  297.747214][T20370] 8021q: adding VLAN 0 to HW filter on device bond25
[  297.761512][T20370] bond25 (unregistering): Released all slaves
[  297.920633][T20397] netlink: 'syz.2.4389': attribute type 7 has an invalid length.
[  297.929492][T20397] IPVS: Unknown mcast interface: batadv0
[  298.021117][T20409] netlink: 'syz.2.4391': attribute type 9 has an invalid length.
[  298.153018][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'.
[  298.549071][   T24] lo speed is unknown, defaulting to 1000
[  298.551888][ T5873] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.558604][ T5873] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.559183][   T24] syz2: Port: 1 Link DOWN
[  298.562401][ T5873] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  298.565493][ T5873] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.568256][ T5873] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.571314][ T5873] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  298.579219][ T5873] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.581937][ T5873] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.584929][ T5873] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  298.587726][ T5873] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  298.591034][T20448] netlink: 'syz.2.4403': attribute type 4 has an invalid length.
[  298.593591][ T5873] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.596409][ T5873] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  298.599312][T20442] lo speed is unknown, defaulting to 1000
[  298.601824][T20442] lo speed is unknown, defaulting to 1000
[  298.687010][T20451] netlink: 'syz.1.4404': attribute type 1 has an invalid length.
[  298.702748][T20451] gretap4: entered allmulticast mode
[  298.705854][T20451] bond0: (slave gretap4): making interface the new active one
[  298.708689][T20451] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  298.780106][T20459] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  298.832817][T20465] netlink: 'syz.2.4407': attribute type 1 has an invalid length.
[  298.959817][T20469] netlink: 'syz.1.4408': attribute type 83 has an invalid length.
[  299.990144][T20521] netlink: 'syz.2.4426': attribute type 1 has an invalid length.
[  299.996585][T20526] netlink: 'syz.1.4427': attribute type 4 has an invalid length.
[  300.160930][T20541] netlink: 'syz.2.4433': attribute type 4 has an invalid length.
[  300.302830][T20562] netlink: 'syz.2.4437': attribute type 4 has an invalid length.
[  300.362366][T20564] bond25 (unregistering): Released all slaves
[  300.562377][   T33] audit: type=1800 audit(1756405343.344:7): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4445" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=8129 res=0 errno=0
[  300.586707][   T33] audit: type=1804 audit(1756405343.354:8): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4445" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=8129 res=1 errno=0
[  300.752134][T20612] nbd: couldn't find a device at index 0
[  300.820802][T20618] 8021q: adding VLAN 0 to HW filter on device bond28
[  300.828588][T20619] bond28: (slave bridge0): making interface the new active one
[  300.831717][T20619] bond28: (slave bridge0): Enslaving as an active interface with an up link
[  300.987150][T20630] raw_sendmsg: syz.0.4462 forgot to set AF_INET. Fix it!
[  301.059138][T20655] sctp: [Deprecated]: syz.0.4468 (pid 20655) Use of int in max_burst socket option deprecated.
[  301.059138][T20655] Use struct sctp_assoc_value instead
[  301.064334][T20656] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.108104][T20661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.123988][T20661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.137889][T20668] syzkaller1: entered promiscuous mode
[  301.140201][T20668] syzkaller1: entered allmulticast mode
[  301.344799][T20700] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.644132][T20753] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  301.647465][T20753] openvswitch: netlink: Message has 8454 unknown bytes.
[  301.702496][T20761] 8021q: adding VLAN 0 to HW filter on device bond29
[  301.759905][T20778] veth0_to_bond: entered allmulticast mode
[  301.767065][T20770] sctp: [Deprecated]: syz.1.4499 (pid 20770) Use of int in maxseg socket option.
[  301.767065][T20770] Use struct sctp_assoc_value instead
[  301.778295][T20778] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  301.855092][T20785] IPVS: persistence engine module ip_vs_pe_ not found
[  302.029204][T20822] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.157078][T20844] __nla_validate_parse: 36 callbacks suppressed
[  302.157099][T20844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4519'.
[  302.166068][T20844] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.4519'.
[  302.184607][T20849] syzkaller1: entered promiscuous mode
[  302.190110][T20849] syzkaller1: entered allmulticast mode
[  302.194361][T20851] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.4521'.
[  302.197382][T20849] veth0_virt_wifi: renamed from veth0_macvtap
[  302.280876][T20864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4525'.
[  302.399463][T20887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.402459][T20887] syzkaller0: entered promiscuous mode
[  302.404948][T20887] syzkaller0: entered allmulticast mode
[  302.416557][T20890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4534'.
[  302.427081][T20887] tipc: Resetting bearer <eth:syzkaller0>
[  302.436727][T20886] tipc: Resetting bearer <eth:syzkaller0>
[  302.449067][T20886] tipc: Disabling bearer <eth:syzkaller0>
[  302.457680][T20895] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4536'.
[  302.561310][T20915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4542'.
[  302.627850][T20924] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  302.632927][T20924] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  302.650708][T20928] IPVS: set_ctl: invalid protocol: 92 172.20.20.67:20000
[  302.653195][T20928] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20004
[  302.685851][T20935] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.4550'.
[  302.724106][T20942] openvswitch: netlink: IP tunnel TTL not specified.
[  302.816983][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4558'.
[  302.820480][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4558'.
[  302.879900][T20966] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  302.946160][T20983] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  303.033931][T20990] sctp: [Deprecated]: syz.2.4566 (pid 20990) Use of int in maxseg socket option.
[  303.033931][T20990] Use struct sctp_assoc_value instead
[  303.244675][T21017] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  303.248985][T21017] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  303.252370][T21017] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  304.063307][T21129] xt_socket: unknown flags 0xd0
[  304.379686][T21168] validate_nla: 16 callbacks suppressed
[  304.379701][T21168] netlink: 'syz.0.4620': attribute type 1 has an invalid length.
[  304.548158][T21186] mac80211_hwsim hwsim103 wlan1: entered allmulticast mode
[  304.557078][T21188] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  304.564120][T21188] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  304.574623][T21186] netlink: 'syz.2.4627': attribute type 10 has an invalid length.
[  304.579928][T21186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.584384][T21186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.601276][T21191] syzkaller1: entered promiscuous mode
[  304.603234][T21191] syzkaller1: entered allmulticast mode
[  305.073571][T21197] netlink: 'syz.1.4630': attribute type 1 has an invalid length.
[  305.087926][T21197] 8021q: adding VLAN 0 to HW filter on device bond17
[  305.102865][T21197] bond17: (slave veth25): Enslaving as an active interface with a down link
[  305.115654][T21197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.118319][T21197] bond17: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  305.163541][T21199] netlink: 'syz.1.4630': attribute type 16 has an invalid length.
[  305.166351][T21199] netlink: 'syz.1.4630': attribute type 17 has an invalid length.
[  305.176984][T21199] tipc: Resetting bearer <eth:syzkaller0>
[  305.213978][   T24] lo speed is unknown, defaulting to 1000
[  305.214033][ T5873] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.215921][   T24] syz1: Port: 1 Link DOWN
[  305.223672][ T5873] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  305.226474][ T5873] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.229331][ T5873] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  305.232237][ T5873] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.234994][ T5873] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  305.238795][ T5873] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  305.242228][ T5873] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  305.309593][T21206] lo speed is unknown, defaulting to 1000
[  305.312952][T21206] lo speed is unknown, defaulting to 1000
[  305.691911][T21247] netlink: 'syz.2.4646': attribute type 11 has an invalid length.
[  305.794090][T21266] tap0: tun_chr_ioctl cmd 2148553947
[  305.924122][T21288] netlink: 'syz.2.4657': attribute type 3 has an invalid length.
[  306.014118][T21305] netem: change failed
[  306.131985][T21313] IPVS: length: 49 != 24
[  306.151463][T21315] netlink: 'syz.2.4659': attribute type 1 has an invalid length.
[  306.153890][T21315] netlink: 'syz.2.4659': attribute type 1 has an invalid length.
[  307.003384][T21335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.007159][T21335] syzkaller0: entered promiscuous mode
[  307.011290][T21335] syzkaller0: entered allmulticast mode
[  307.177425][T21357] __nla_validate_parse: 24 callbacks suppressed
[  307.177438][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'.
[  307.212888][T21373] netlink: 'syz.1.4683': attribute type 4 has an invalid length.
[  307.246104][T21375] syzkaller1: entered promiscuous mode
[  307.247954][T21375] syzkaller1: entered allmulticast mode
[  307.377188][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4686'.
[  307.505986][T21395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4691'.
[  307.681504][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4700'.
[  307.684760][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4700'.
[  307.715878][T21431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4703'.
[  307.836603][T21335] tipc: Resetting bearer <eth:syzkaller0>
[  307.848230][T21335] tipc: Disabling bearer <eth:syzkaller0>
[  307.916288][T21447] ipvlan0: entered promiscuous mode
[  307.918741][T21447] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  308.033551][T21456] xt_policy: too many policy elements
[  308.707743][T21463] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  308.924807][T21488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'.
[  308.928071][T21488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'.
[  308.954888][T21494] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4722'.
[  312.009562][T21519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4729'.
[  312.052174][T21524] validate_nla: 2 callbacks suppressed
[  312.052191][T21524] netlink: 'syz.1.4732': attribute type 10 has an invalid length.
[  312.184851][T21542] netlink: 'syz.1.4738': attribute type 32 has an invalid length.
[  312.191277][T21534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4735'.
[  312.203198][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'.
[  312.207360][T21542] (unnamed net_device) (uninitialized): option coupled_control: invalid value (30)
[  312.215207][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'.
[  312.241753][T21553] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4742'.
[  312.342778][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'.
[  312.351933][T21576] netlink: 'syz.2.4749': attribute type 1 has an invalid length.
[  312.366088][T21585] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4750'.
[  312.412071][T21585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4750'.
[  312.435672][T21591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4753'.
[  312.681908][T21615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4760'.
[  312.734377][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4761'.
[  312.987487][T21633] netlink: 'syz.0.4765': attribute type 1 has an invalid length.
[  313.171096][T21639] netlink: 'syz.0.4767': attribute type 10 has an invalid length.
[  313.557572][T21657] veth15: entered promiscuous mode
[  313.637290][T21672] netlink: 'syz.1.4779': attribute type 1 has an invalid length.
[  313.675798][T21680] netlink: 'syz.0.4781': attribute type 1 has an invalid length.
[  313.678249][T21680] NCSI netlink: No device for ifindex 813332851
[  313.856587][T21704] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  314.271393][T21739] netlink: 'syz.0.4802': attribute type 5 has an invalid length.
[  314.386854][T21754] netlink: 'syz.1.4807': attribute type 4 has an invalid length.
[  314.413565][T21750] lo speed is unknown, defaulting to 1000
[  314.417249][T21750] lo speed is unknown, defaulting to 1000
[  314.646718][T21772] netlink: 'syz.1.4813': attribute type 30 has an invalid length.
[  314.738237][T21783] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.984365][T21822] erspan0: left allmulticast mode
[  314.986009][T21822] erspan0: left promiscuous mode
[  314.987844][T21822] bridge0: port 1(erspan0) entered disabled state
[  314.992935][T21822] veth0_to_bond: left allmulticast mode
[  314.995221][T21822] veth0_to_bond: left promiscuous mode
[  314.997131][T21822] bridge8: port 2(veth0_to_bond) entered disabled state
[  315.003742][T21822] bond4: (slave ip6gretap1): Removing an active aggregator
[  315.006457][T21822] bond4: (slave ip6gretap1): Releasing backup interface
[  315.008996][T21822] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 1a:d5:31:c2:07:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  315.017730][T21822] bond4: (slave veth3): Releasing backup interface
[  315.024539][T21822] bond6: (slave gretap1): Releasing active interface
[  315.027859][T21822] veth9: left allmulticast mode
[  315.029893][T21822] veth9: left promiscuous mode
[  315.032456][T21822] bridge8: port 1(veth9) entered disabled state
[  315.036592][T21822] bond13: (slave geneve2): Releasing active interface
[  315.041179][T21822] bond0: (slave gretap4): Releasing active interface
[  315.045325][T21822] bond17: (slave veth25): Releasing active interface
[  315.055256][T21823] lo speed is unknown, defaulting to 1000
[  315.057971][T21823] lo speed is unknown, defaulting to 1000
[  315.886358][T21863] syzkaller1: entered promiscuous mode
[  315.888820][T21863] syzkaller1: entered allmulticast mode
[  315.917488][T21867] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  316.271038][T21893] geneve5: entered promiscuous mode
[  316.587606][T21917] : renamed from vlan1
[  316.652661][T21924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.657702][ T2325] lo speed is unknown, defaulting to 1000
[  316.659965][ T2325] syz2: Port: 1 Link ACTIVE
[  317.382521][T21965] validate_nla: 6 callbacks suppressed
[  317.382539][T21965] netlink: 'syz.1.4875': attribute type 4 has an invalid length.
[  317.551063][T21973] __nla_validate_parse: 45 callbacks suppressed
[  317.551085][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4878'.
[  317.604071][T21975] netlink: 'syz.1.4879': attribute type 21 has an invalid length.
[  317.976821][T21975] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4879'.
[  317.998711][ T5844] Bluetooth: hci0: command tx timeout
[  318.003011][T21982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4880'.
[  318.117929][T21986] syzkaller1: entered promiscuous mode
[  318.120681][T21986] syzkaller1: entered allmulticast mode
[  318.363514][T22014] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  318.367885][T22016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4892'.
[  318.374320][T22016] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  318.466894][T22032] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  318.489595][T22033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4897'.
[  318.492408][T22033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4897'.
[  318.495414][T22033] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4897'.
[  318.504490][T22033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.507651][T22033] syzkaller0: entered promiscuous mode
[  318.511077][T22033] syzkaller0: entered allmulticast mode
[  318.513088][T22033] tipc: Resetting bearer <eth:syzkaller0>
[  318.518544][T22033] tipc: Resetting bearer <eth:syzkaller0>
[  318.553816][T22039] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4901'.
[  318.605541][T22040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4900'.
[  318.609473][T22040] netlink: 'syz.1.4900': attribute type 7 has an invalid length.
[  318.612662][T22040] netlink: 'syz.1.4900': attribute type 8 has an invalid length.
[  318.615610][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4900'.
[  318.622486][T22040] gretap0: entered promiscuous mode
[  318.626491][T22040] gretap0: left promiscuous mode
[  318.849127][T22064] veth1: entered promiscuous mode
[  318.851404][T22064] netlink: 'syz.1.4906': attribute type 1 has an invalid length.
[  318.853824][T22064] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  319.040900][T22076] netlink: 'syz.1.4910': attribute type 1 has an invalid length.
[  319.379417][   T56] block nbd1: Receive control failed (result -32)
[  319.593427][T22104] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  319.695139][T22112] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:21
[  320.124786][T22131] lo speed is unknown, defaulting to 1000
[  320.127426][T22131] lo speed is unknown, defaulting to 1000
[  320.201344][T22144] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  320.581671][T22186] mac80211_hwsim hwsim4 ;: renamed from wlan0
[  320.587120][T22188] netlink: 'syz.1.4940': attribute type 1 has an invalid length.
[  320.824896][T22211] bridge0: port 1(vlan3) entered blocking state
[  320.827394][T22211] bridge0: port 1(vlan3) entered disabled state
[  320.830152][T22211] vlan3: entered allmulticast mode
[  320.831750][T22211] bridge0: entered allmulticast mode
[  320.835963][T22211] vlan3: left allmulticast mode
[  320.837988][T22211] bridge0: left allmulticast mode
[  322.173318][T22274] netlink: 'syz.1.4969': attribute type 4 has an invalid length.
[  322.456847][T22322] netlink: 'syz.2.4983': attribute type 4 has an invalid length.
[  322.489724][T22325] netlink: 'syz.1.4982': attribute type 1 has an invalid length.
[  322.591057][T22333] __nla_validate_parse: 20 callbacks suppressed
[  322.591112][T22333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4985'.
[  322.655031][T22336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4988'.
[  322.726484][T22344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4991'.
[  322.776251][T22348] netlink: 'syz.2.4992': attribute type 10 has an invalid length.
[  322.779460][T22348] : Device hsr_slave_0 failed to register rx_handler
[  322.841227][T22353] tipc: Resetting bearer <eth:syzkaller0>
[  322.864167][T22354] tipc: Resetting bearer <eth:syzkaller0>
[  322.917842][T22363] netlink: 'syz.0.4996': attribute type 1 has an invalid length.
[  322.933418][T22363] 8021q: adding VLAN 0 to HW filter on device bond26
[  323.130765][T22390] xt_socket: unknown flags 0xd0
[  323.152356][ T3914] tipc: Resetting bearer <eth:syzkaller0>
[  323.175704][T22398] nbd: must specify at least one socket
[  323.370763][T22426] lo speed is unknown, defaulting to 1000
[  323.374323][T22426] lo speed is unknown, defaulting to 1000
[  323.552103][T22454] openvswitch: netlink: IPv4 tun info is not correct
[  323.594552][T22458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5025'.
[  323.639345][T22466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5024'.
[  323.735054][T22468] netlink: 'syz.2.5027': attribute type 30 has an invalid length.
[  323.738674][T22468] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  323.742435][T22468] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  323.961766][T22507] netlink: 'syz.1.5040': attribute type 1 has an invalid length.
[  323.966143][T22507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5040'.
[  323.984281][T22507] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5040'.
[  324.061235][T22516] netlink: 'syz.1.5044': attribute type 4 has an invalid length.
[  325.498174][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'.
[  325.502607][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'.
[  325.507390][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5049'.
[  325.607819][T22559] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  325.608287][T22557] netlink: 'syz.2.5053': attribute type 32 has an invalid length.
[  325.617039][T22560] netlink: 'syz.2.5053': attribute type 32 has an invalid length.
[  325.652426][T22562] macsec0: entered promiscuous mode
[  325.654635][T22562] macsec0: entered allmulticast mode
[  325.783321][T22577] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  325.787429][T22577] CPU: 0 UID: 0 PID: 22577 Comm: syz.2.5061 Not tainted syzkaller #0 PREEMPT(full) 
[  325.787446][T22577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.787453][T22577] Call Trace:
[  325.787457][T22577]  <TASK>
[  325.787463][T22577]  dump_stack_lvl+0x189/0x250
[  325.787481][T22577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.787491][T22577]  ? __pfx__printk+0x10/0x10
[  325.787503][T22577]  ? kernfs_root+0x1c/0x230
[  325.787515][T22577]  ? kernfs_path_from_node+0x2f/0x290
[  325.787525][T22577]  ? kernfs_path_from_node+0x250/0x290
[  325.787534][T22577]  ? kernfs_path_from_node+0x2f/0x290
[  325.787545][T22577]  sysfs_warn_dup+0x8e/0xa0
[  325.787554][T22577]  sysfs_do_create_link_sd+0xc0/0x110
[  325.787563][T22577]  device_add_class_symlinks+0x1cf/0x240
[  325.787573][T22577]  device_add+0x475/0xb50
[  325.787581][T22577]  wiphy_register+0x1ba6/0x28d0
[  325.787598][T22577]  ? __pfx_wiphy_register+0x10/0x10
[  325.787610][T22577]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  325.787622][T22577]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  325.787632][T22577]  ieee80211_register_hw+0x3425/0x4080
[  325.787645][T22577]  ? ieee80211_register_hw+0x14d1/0x4080
[  325.787655][T22577]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  325.787665][T22577]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  325.787677][T22577]  ? __hrtimer_setup+0x187/0x210
[  325.787685][T22577]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  325.787698][T22577]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  325.787715][T22577]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  325.787725][T22577]  ? trace_kmalloc+0x1f/0xd0
[  325.787736][T22577]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  325.787746][T22577]  ? kstrndup+0xbf/0x160
[  325.787756][T22577]  hwsim_new_radio_nl+0xea4/0x1b10
[  325.787767][T22577]  ? __pfx___nla_validate_parse+0x10/0x10
[  325.787782][T22577]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  325.787794][T22577]  ? __nla_parse+0x40/0x60
[  325.787805][T22577]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  325.787843][T22577]  genl_family_rcv_msg_doit+0x215/0x300
[  325.787856][T22577]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  325.787869][T22577]  ? bpf_lsm_capable+0x9/0x20
[  325.787883][T22577]  ? security_capable+0x7e/0x2e0
[  325.787896][T22577]  genl_rcv_msg+0x60e/0x790
[  325.787906][T22577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.787914][T22577]  ? __kasan_slab_alloc+0x6c/0x80
[  325.787924][T22577]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  325.787935][T22577]  ? __netlink_lookup+0xbd/0x810
[  325.787941][T22577]  ? rcu_is_watching+0x15/0xb0
[  325.787951][T22577]  netlink_rcv_skb+0x208/0x470
[  325.787963][T22577]  ? __pfx_genl_rcv_msg+0x10/0x10
[  325.787971][T22577]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  325.787984][T22577]  ? lock_release+0x4b/0x3e0
[  325.787997][T22577]  ? down_read+0x1ad/0x2e0
[  325.788005][T22577]  genl_rcv+0x28/0x40
[  325.788013][T22577]  netlink_unicast+0x82f/0x9e0
[  325.788024][T22577]  ? __pfx_netlink_unicast+0x10/0x10
[  325.788034][T22577]  ? netlink_sendmsg+0x642/0xb30
[  325.788041][T22577]  ? skb_put+0x11b/0x210
[  325.788049][T22577]  netlink_sendmsg+0x805/0xb30
[  325.788057][T22577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.788064][T22577]  ? futex_unqueue+0x22/0x240
[  325.788073][T22577]  ? aa_sock_msg_perm+0xf1/0x1d0
[  325.788081][T22577]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  325.788096][T22577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  325.788104][T22577]  __sock_sendmsg+0x21c/0x270
[  325.788118][T22577]  ____sys_sendmsg+0x505/0x830
[  325.788129][T22577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  325.788141][T22577]  ? import_iovec+0x74/0xa0
[  325.788154][T22577]  ___sys_sendmsg+0x21f/0x2a0
[  325.788165][T22577]  ? __pfx____sys_sendmsg+0x10/0x10
[  325.788175][T22577]  ? futex_wait+0x285/0x360
[  325.788191][T22577]  ? __fget_files+0x2a/0x420
[  325.788198][T22577]  ? __fget_files+0x3a0/0x420
[  325.788206][T22577]  __x64_sys_sendmsg+0x19b/0x260
[  325.788215][T22577]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  325.788225][T22577]  ? rcu_is_watching+0x15/0xb0
[  325.788233][T22577]  ? rcu_is_watching+0x15/0xb0
[  325.788241][T22577]  do_syscall_64+0xfa/0x3b0
[  325.788249][T22577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.788256][T22577]  ? exc_page_fault+0x9f/0xf0
[  325.788267][T22577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.788276][T22577] RIP: 0033:0x7f96b458ebe9
[  325.788286][T22577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.788293][T22577] RSP: 002b:00007f96b5412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.788305][T22577] RAX: ffffffffffffffda RBX: 00007f96b47b6090 RCX: 00007f96b458ebe9
[  325.788311][T22577] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  325.788318][T22577] RBP: 00007f96b4611e19 R08: 0000000000000000 R09: 0000000000000000
[  325.788340][T22577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.788347][T22577] R13: 00007f96b47b6128 R14: 00007f96b47b6090 R15: 00007fff17bec038
[  325.788357][T22577]  </TASK>
[  326.341921][T22642] tipc: Resetting bearer <eth:syzkaller0>
[  326.462900][T22637] tipc: Resetting bearer <eth:syzkaller0>
[  326.510207][T22670] ip6tnl7: entered promiscuous mode
[  326.579282][T22670] nbd: device at index 2 is going down
[  327.055296][T22718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.083072][T22722] warn_alloc: 1 callbacks suppressed
[  327.083084][T22722] syz.2.5103: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  327.091855][T22722] CPU: 0 UID: 0 PID: 22722 Comm: syz.2.5103 Not tainted syzkaller #0 PREEMPT(full) 
[  327.091873][T22722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.091880][T22722] Call Trace:
[  327.091884][T22722]  <TASK>
[  327.091889][T22722]  dump_stack_lvl+0x189/0x250
[  327.091908][T22722]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.091918][T22722]  ? __pfx__printk+0x10/0x10
[  327.091930][T22722]  ? lock_release+0x4b/0x3e0
[  327.091943][T22722]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  327.091954][T22722]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  327.091964][T22722]  warn_alloc+0x214/0x310
[  327.091976][T22722]  ? stack_depot_save_flags+0x40/0x860
[  327.091993][T22722]  ? __pfx_warn_alloc+0x10/0x10
[  327.092006][T22722]  ? kasan_save_track+0x4f/0x80
[  327.092018][T22722]  ? xskq_create+0x56/0x170
[  327.092031][T22722]  ? xsk_init_queue+0xb0/0x110
[  327.092040][T22722]  ? xsk_setsockopt+0x4dc/0x8d0
[  327.092050][T22722]  ? do_sock_setsockopt+0x17c/0x1b0
[  327.092058][T22722]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  327.092066][T22722]  ? do_syscall_64+0xfa/0x3b0
[  327.092073][T22722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.092083][T22722]  __vmalloc_node_range_noprof+0x125/0x12f0
[  327.092118][T22722]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  327.092131][T22722]  ? xsk_setsockopt+0x462/0x8d0
[  327.092141][T22722]  ? __kasan_kmalloc+0x93/0xb0
[  327.092154][T22722]  vmalloc_user_noprof+0xad/0xf0
[  327.092166][T22722]  ? xskq_create+0xbf/0x170
[  327.092178][T22722]  xskq_create+0xbf/0x170
[  327.092189][T22722]  xsk_init_queue+0xb0/0x110
[  327.092199][T22722]  xsk_setsockopt+0x4dc/0x8d0
[  327.092210][T22722]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.092219][T22722]  ? __pfx_aa_sk_perm+0x10/0x10
[  327.092231][T22722]  ? lock_release+0x4b/0x3e0
[  327.092244][T22722]  ? aa_sock_opt_perm+0xff/0x1b0
[  327.092252][T22722]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  327.092261][T22722]  ? __pfx_xsk_setsockopt+0x10/0x10
[  327.092270][T22722]  do_sock_setsockopt+0x17c/0x1b0
[  327.092279][T22722]  __x64_sys_setsockopt+0x13f/0x1b0
[  327.092287][T22722]  do_syscall_64+0xfa/0x3b0
[  327.092294][T22722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.092302][T22722]  ? exc_page_fault+0x9f/0xf0
[  327.092312][T22722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.092320][T22722] RIP: 0033:0x7f96b458ebe9
[  327.092328][T22722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.092336][T22722] RSP: 002b:00007f96b5433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  327.092346][T22722] RAX: ffffffffffffffda RBX: 00007f96b47b5fa0 RCX: 00007f96b458ebe9
[  327.092352][T22722] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  327.092357][T22722] RBP: 00007f96b4611e19 R08: 0000000000000004 R09: 0000000000000000
[  327.092361][T22722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.092366][T22722] R13: 00007f96b47b6038 R14: 00007f96b47b5fa0 R15: 00007fff17bec038
[  327.092375][T22722]  </TASK>
[  327.092442][T22722] Mem-Info:
[  327.198911][T22722] active_anon:5571 inactive_anon:0 isolated_anon:0
[  327.198911][T22722]  active_file:1421 inactive_file:38263 isolated_file:0
[  327.198911][T22722]  unevictable:1768 dirty:103 writeback:0
[  327.198911][T22722]  slab_reclaimable:11250 slab_unreclaimable:131889
[  327.198911][T22722]  mapped:18036 shmem:2558 pagetables:1060
[  327.198911][T22722]  sec_pagetables:0 bounce:0
[  327.198911][T22722]  kernel_misc_reclaimable:0
[  327.198911][T22722]  free:148147 free_pcp:25712 free_cma:0
[  327.213392][T22722] Node 0 active_anon:12196kB inactive_anon:0kB active_file:2968kB inactive_file:3792kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36504kB dirty:224kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7984kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.223413][T22722] Node 1 active_anon:10088kB inactive_anon:0kB active_file:2716kB inactive_file:149260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35640kB dirty:188kB writeback:0kB shmem:5420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6832kB pagetables:1876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  327.233788][T22722] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:124kB free_cma:0kB
[  327.253186][T22722] lowmem_reserve[]: 0 811 811 811 811
[  327.255862][T22722] Node 0 DMA32 free:183320kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12060kB inactive_anon:0kB active_file:2968kB inactive_file:3792kB unevictable:3536kB writepending:224kB present:1556484kB managed:830920kB mlocked:0kB bounce:0kB free_pcp:42652kB local_pcp:34648kB free_cma:0kB
[  327.268312][T22722] lowmem_reserve[]: 0 0 0 0 0
[  327.271268][T22722] Node 1 DMA32 free:214404kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21148kB local_pcp:20476kB free_cma:0kB
[  327.283235][T22722] lowmem_reserve[]: 0 0 854 854 854
[  327.286460][T22722] Node 1 Normal free:157120kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10088kB inactive_anon:0kB active_file:2716kB inactive_file:149260kB unevictable:3536kB writepending:188kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36732kB local_pcp:20024kB free_cma:0kB
[  327.301204][T14716] tipc: Resetting bearer <eth:syzkaller0>
[  327.304171][T22722] lowmem_reserve[]: 0 0 0 0 0
[  327.306284][T22722] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  327.311050][T22722] Node 0 DMA32: 321*4kB (UME) 55*8kB (UME) 61*16kB (M) 64*32kB (UME) 18*64kB (ME) 4*128kB (UE) 1*256kB (E) 55*512kB (UME) 39*1024kB (U) 11*2048kB (U) 20*4096kB (UM) = 179212kB
[  327.318143][T22722] Node 1 DMA32: 45*4kB (UM) 24*8kB (U) 21*16kB (U) 24*32kB (U) 27*64kB (U) 22*128kB (U) 16*256kB (UM) 17*512kB (UM) 11*1024kB (UM) 8*2048kB (UM) 41*4096kB (UM) = 214404kB
[  327.325377][T22722] Node 1 Normal: 3*4kB (ME) 292*8kB (ME) 161*16kB (UME) 23*32kB (M) 13*64kB (M) 189*128kB (UME) 142*256kB (UM) 37*512kB (UME) 40*1024kB (UM) 11*2048kB (UME) 0*4096kB = 149468kB
[  327.332048][T22722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.335084][T22722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  327.338494][T22722] 42247 total pagecache pages
[  327.340211][T22722] 5 pages in swap cache
[  327.341586][T22722] Free swap  = 124976kB
[  327.342977][T22722] Total swap = 124996kB
[  327.344388][T22722] 786301 pages RAM
[  327.345647][T22722] 0 pages HighMem/MovableOnly
[  327.347202][T22722] 241339 pages reserved
[  327.348763][T22722] 0 pages cma reserved
[  327.667337][T22728] vlan3: entered allmulticast mode
[  327.669753][T22728] bond0: entered allmulticast mode
[  328.631032][T22754] __nla_validate_parse: 47 callbacks suppressed
[  328.631050][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5113'.
[  328.640719][T22752] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  328.642717][T22759] tipc: Resetting bearer <eth:syzkaller0>
[  328.677972][T22759] tipc: Resetting bearer <eth:syzkaller0>
[  328.701570][T22770] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5116'.
[  328.734306][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5119'.
[  328.775155][T22774] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5119'.
[  328.779209][T22774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5119'.
[  328.862238][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5121'.
[  328.865321][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5121'.
[  328.869158][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5121'.
[  328.872073][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5121'.
[  328.875014][T22784] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5121'.
[  329.184332][T22817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.275289][T22824] validate_nla: 64 callbacks suppressed
[  329.275307][T22824] netlink: 'syz.1.5132': attribute type 1 has an invalid length.
[  329.288898][T14717] tipc: Resetting bearer <eth:syzkaller0>
[  329.690220][T22841] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  329.693370][T22841] syzkaller1: entered promiscuous mode
[  329.695188][T22841] syzkaller1: entered allmulticast mode
[  329.790180][T22847] tipc: Resetting bearer <eth:syzkaller0>
[  329.793932][T22847] 8021q: VLANs not supported on xfrm0
[  329.810687][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  329.852989][T22853] tipc: Resetting bearer <eth:syzkaller0>
[  329.864336][T22856] netlink: 'syz.2.5143': attribute type 4 has an invalid length.
[  329.891582][T22852] tipc: Resetting bearer <eth:syzkaller0>
[  330.009217][T22870] can: request_module (can-proto-4) failed.
[  330.216848][T22901] netlink: 'syz.2.5158': attribute type 10 has an invalid length.
[  330.223716][T22901] netlink: 'syz.2.5158': attribute type 1 has an invalid length.
[  330.299134][ T3914] tipc: Resetting bearer <eth:syzkaller0>
[  330.796647][T22947] netlink: 'syz.2.5169': attribute type 3 has an invalid length.
[  330.858191][T22953] lo speed is unknown, defaulting to 1000
[  330.864114][T22953] lo speed is unknown, defaulting to 1000
[  331.053090][T22966] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  331.141634][T22970] ip6gretap2: entered promiscuous mode
[  331.483237][T23010] netlink: 'syz.1.5185': attribute type 33 has an invalid length.
[  331.597463][T23018] IPVS: Error joining to the multicast group
[  331.685738][T23032] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  331.690992][T23032] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  331.726918][T23035] tipc: Resetting bearer <eth:syzkaller0>
[  331.734760][T23034] tipc: Resetting bearer <eth:syzkaller0>
[  332.226244][T23067] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  332.308933][T23081] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  332.421493][T23091] sctp: [Deprecated]: syz.0.5211 (pid 23091) Use of struct sctp_assoc_value in delayed_ack socket option.
[  332.421493][T23091] Use struct sctp_sack_info instead
[  332.439640][T23088] netlink: 'syz.2.5210': attribute type 1 has an invalid length.
[  332.517685][T23103] tipc: Resetting bearer <eth:syzkaller0>
[  332.528030][ T5908] lo speed is unknown, defaulting to 1000
[  332.530001][ T5908] syz2: Port: 1 Link DOWN
[  332.603777][T23124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.612866][T23117] syzkaller1: entered promiscuous mode
[  332.614900][T23117] syzkaller1: entered allmulticast mode
[  332.765104][T23141] netlink: 'syz.1.5225': attribute type 17 has an invalid length.
[  332.781510][T23141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.796870][ T2325] lo speed is unknown, defaulting to 1000
[  332.801434][ T2325] syz1: Port: 1 Link ACTIVE
[  332.830706][T23163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.832961][T23163] IPv6: NLM_F_CREATE should be set when creating new route
[  332.835134][T23163] IPv6: NLM_F_CREATE should be set when creating new route
[  332.837425][T23163] IPv6: NLM_F_CREATE should be set when creating new route
[  332.841449][T23163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  332.926886][T23182] lo speed is unknown, defaulting to 1000
[  332.933875][T23182] lo speed is unknown, defaulting to 1000
[  332.935520][T23187] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  333.049468][T23192] netlink: 'syz.1.5241': attribute type 1 has an invalid length.
[  333.051908][T23192] netlink: 'syz.1.5241': attribute type 4 has an invalid length.
[  333.138663][T23205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.176136][T23201] : renamed from pim6reg1 (while UP)
[  333.252627][T23223] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20000
[  333.587022][T23246] batadv_slave_1: entered promiscuous mode
[  333.591625][T23246] batadv_slave_1: left promiscuous mode
[  333.635276][T23248] syzkaller1: entered promiscuous mode
[  333.637623][T23248] syzkaller1: entered allmulticast mode
[  333.716121][T23248] __nla_validate_parse: 95 callbacks suppressed
[  333.716140][T23248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5259'.
[  333.854042][T23257] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.934223][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5263'.
[  334.104499][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5265'.
[  334.301853][T23287] tap0: tun_chr_ioctl cmd 1074025676
[  334.303892][T23287] tap0: owner set to 0
[  334.362002][T23292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.729677][T23310] validate_nla: 6 callbacks suppressed
[  334.729690][T23310] netlink: 'syz.1.5280': attribute type 12 has an invalid length.
[  334.734220][T23310] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5280'.
[  334.787592][T23312] netlink: 'syz.1.5281': attribute type 4 has an invalid length.
[  334.871937][T23314] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.932503][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5286'.
[  335.023995][T23334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'.
[  335.026900][T23334] netlink: 'syz.1.5291': attribute type 7 has an invalid length.
[  335.030061][T23334] netlink: 'syz.1.5291': attribute type 8 has an invalid length.
[  335.033043][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5291'.
[  335.039004][T23334] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5291'.
[  335.042666][T23334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5291'.
[  335.090667][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5295'.
[  335.347809][T23375] netlink: 'syz.1.5305': attribute type 1 has an invalid length.
[  335.385197][T23380] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  335.604580][T23422] netlink: 'syz.0.5320': attribute type 16 has an invalid length.
[  335.611853][T23422] netlink: 'syz.0.5320': attribute type 17 has an invalid length.
[  335.680682][T23430] netlink: 'syz.0.5322': attribute type 12 has an invalid length.
[  335.706938][T23432] netlink: 'syz.2.5323': attribute type 20 has an invalid length.
[  335.709743][T23432] netlink: 'syz.2.5323': attribute type 20 has an invalid length.
[  336.037928][T23463] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  336.210145][T23477] erspan0: entered promiscuous mode
[  336.211831][T23477] macvtap1: entered promiscuous mode
[  336.213573][T23477] macvtap1: entered allmulticast mode
[  336.215343][T23477] erspan0: entered allmulticast mode
[  337.025443][T23537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.108311][T23551] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  337.252603][T23568] tipc: Resetting bearer <eth:syzkaller0>
[  337.267182][  T792] lo speed is unknown, defaulting to 1000
[  337.270327][  T792] syz1: Port: 1 Link DOWN
[  337.958182][T23613] tipc: Resetting bearer <eth:syzkaller0>
[  337.961060][T23613] tipc: Resetting bearer <eth:syzkaller0>
[  337.964079][T23612] tipc: Resetting bearer <eth:syzkaller0>
[  337.966406][T23612] tipc: Resetting bearer <eth:syzkaller0>
[  337.970734][T14718] tipc: Resetting bearer <eth:syzkaller0>
[  338.015231][T23618] pim6reg1: entered promiscuous mode
[  338.017390][T23618] pim6reg1: entered allmulticast mode
[  338.027648][T23608] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  338.557198][T23673] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.604978][T23679] 0: renamed from hsr0 (while UP)
[  338.607995][T23679] 0: entered allmulticast mode
[  338.610201][T23679] hsr_slave_0: entered allmulticast mode
[  338.612063][T23679] hsr_slave_1: entered allmulticast mode
[  338.614599][T23679] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  338.784476][T23701] __nla_validate_parse: 52 callbacks suppressed
[  338.784492][T23701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5409'.
[  338.815072][T23703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5410'.
[  338.902664][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'.
[  338.904948][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'.
[  338.945210][T23719] tipc: Resetting bearer <eth:syzkaller0>
[  338.958096][T23718] tipc: Resetting bearer <eth:syzkaller0>
[  338.978497][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5416'.
[  338.982255][ T6741] tipc: Resetting bearer <eth:syzkaller0>
[  339.012949][T23726] tipc: Resetting bearer <eth:syzkaller0>
[  339.038166][T23728] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.5418'.
[  339.213016][T23750] pim6reg1: entered allmulticast mode
[  339.286028][T23754] pim6reg: entered allmulticast mode
[  339.289548][T23754] pim6reg: left allmulticast mode
[  339.355849][T23756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5426'.
[  339.364470][T23756] _Z`Ԁ@: entered promiscuous mode
[  339.501274][T23771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5432'.
[  339.701395][T23796] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5438'.
[  339.705035][T23796] netlink: 59 bytes leftover after parsing attributes in process `syz.2.5438'.
[  339.734371][T23802] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  339.739992][T23802] validate_nla: 14 callbacks suppressed
[  339.740002][T23802] netlink: 'syz.2.5439': attribute type 83 has an invalid length.
[  339.992785][T23829] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.996436][T23829] tipc: Resetting bearer <eth:syzkaller0>
[  339.999957][T14720] tipc: Resetting bearer <eth:syzkaller0>
[  340.040468][T23837] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  340.044504][T23837] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  340.130952][T23843] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  340.215552][T23845] netlink: 'syz.0.5454': attribute type 4 has an invalid length.
[  340.219230][T23845] netlink: 'syz.0.5454': attribute type 4 has an invalid length.
[  340.224747][ T5882] lo speed is unknown, defaulting to 1000
[  340.227035][ T5882] syz2: Port: 1 Link ACTIVE
[  340.250229][T23849] netlink: 'syz.0.5455': attribute type 4 has an invalid length.
[  340.702100][T23877] tap0: tun_chr_ioctl cmd 2148553947
[  340.803717][T23888] bond24: (slave veth13): Releasing active interface
[  340.806463][T23888] tipc: Resetting bearer <eth:syzkaller0>
[  340.813432][T23888] team0: Mode changed to "loadbalance"
[  341.080847][T23926] netlink: 'syz.2.5478': attribute type 4 has an invalid length.
[  341.357212][T23961] bridge0: entered allmulticast mode
[  341.379621][T23967] netlink: 'syz.0.5488': attribute type 4 has an invalid length.
[  341.668793][T23996] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  341.718972][T24001] openvswitch: netlink: Flow key attribute not present in set flow.
[  341.739635][T24001] openvswitch: netlink: Flow key attribute not present in set flow.
[  341.891148][T24013] netlink: 'syz.1.5501': attribute type 3 has an invalid length.
[  342.044444][T24020] vlan0: entered promiscuous mode
[  342.113712][T24022] netlink: 'syz.0.5505': attribute type 1 has an invalid length.
[  342.205824][T24033] tipc: Resetting bearer <eth:syzkaller0>
[  342.212068][T24032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  342.217099][T23667] lo speed is unknown, defaulting to 1000
[  342.220681][T23667] syz1: Port: 1 Link ACTIVE
[  342.237982][T24031] tipc: Resetting bearer <eth:syzkaller0>
[  342.395166][T24059]  (unregistering): Released all slaves
[  342.442509][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  342.445233][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  342.448021][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  342.452890][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  342.540130][T24075] tipc: Resetting bearer <eth:syzkaller0>
[  342.545450][T24075] Unsupported ieee802154 address type: 0
[  342.551631][T24074] tipc: Resetting bearer <eth:syzkaller0>
[  342.584383][T24080] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  342.626765][T24086] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  342.676728][T24094] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  342.681736][T24094] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  342.707620][T24099] netlink: 'syz.2.5534': attribute type 4 has an invalid length.
[  342.756315][T24106] netlink: 'syz.0.5536': attribute type 1 has an invalid length.
[  342.803135][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  342.805893][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  342.817962][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  342.822305][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  343.063939][T24141] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  343.078875][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  343.151297][T24156] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  343.325553][T24182] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  343.721790][T24221] veth26: entered allmulticast mode
[  343.929300][T24230] __nla_validate_parse: 34 callbacks suppressed
[  343.929313][T24230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5578'.
[  344.092958][T24240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5580'.
[  344.114115][T24243] sctp: [Deprecated]: syz.1.5581 (pid 24243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.114115][T24243] Use struct sctp_sack_info instead
[  344.119845][T24243] sctp: [Deprecated]: syz.1.5581 (pid 24243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.119845][T24243] Use struct sctp_sack_info instead
[  344.125604][T24243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.310737][T24264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'.
[  344.324518][T24266] openvswitch: netlink: IP tunnel dst address not specified
[  344.346589][T24268] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5589'.
[  344.366219][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'.
[  344.372953][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5590'.
[  344.374755][T24272] vti0: entered promiscuous mode
[  344.376595][T24270] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5590'.
[  344.378314][T24272] vti0: entered allmulticast mode
[  344.423483][T24278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5593'.
[  344.441775][T24278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5593'.
[  344.503874][T24290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5598'.
[  344.510966][T24292] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  344.592990][T24300] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  344.887955][T24337] validate_nla: 8 callbacks suppressed
[  344.887968][T24337] netlink: 'syz.2.5618': attribute type 3 has an invalid length.
[  344.941285][T24344] netlink: 'syz.0.5621': attribute type 1 has an invalid length.
[  344.949627][T24346] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001
[  344.993276][T24355] netlink: 'syz.2.5626': attribute type 1 has an invalid length.
[  345.005618][T24355] 8021q: adding VLAN 0 to HW filter on device bond31
[  345.022117][T24355] 8021q: adding VLAN 0 to HW filter on device bond31
[  345.025205][T24355] bond31: (slave vxcan1): The slave device specified does not support setting the MAC address
[  345.030091][T24355] bond31: (slave vxcan1): Error -95 calling set_mac_address
[  345.040461][T24358] lo speed is unknown, defaulting to 1000
[  345.043833][T24358] lo speed is unknown, defaulting to 1000
[  345.074793][T24367] veth25: entered promiscuous mode
[  345.077982][T24367] bond31: (slave veth25): Enslaving as an active interface with a down link
[  345.267403][T24392] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  345.332748][T24402] netlink: 'syz.1.5641': attribute type 1 has an invalid length.
[  345.370057][T24402] veth27: entered promiscuous mode
[  345.960564][T24423] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  345.994265][T24425] tipc: Resetting bearer <eth:syzkaller0>
[  345.998700][T24424] tipc: Resetting bearer <eth:syzkaller0>
[  346.041309][T24429] syzkaller0: left promiscuous mode
[  346.043467][T24429] syzkaller0: left allmulticast mode
[  346.045749][T24429] tipc: Resetting bearer <eth:syzkaller0>
[  346.053571][T24429] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.058144][T24429] syzkaller0: entered promiscuous mode
[  346.060526][T24429] syzkaller0: entered allmulticast mode
[  346.063061][T24429] tipc: Resetting bearer <eth:syzkaller0>
[  346.066156][T24429] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.205490][ T3914] tipc: Resetting bearer <eth:syzkaller0>
[  346.784762][T24455] netlink: 'syz.0.5659': attribute type 4 has an invalid length.
[  346.827993][T24457] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  346.833547][T24457] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  346.942104][T24467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.027704][T24481] netlink: 'syz.2.5668': attribute type 4 has an invalid length.
[  347.055997][T24476] sctp: [Deprecated]: syz.0.5666 (pid 24476) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.055997][T24476] Use struct sctp_sack_info instead
[  347.307355][T24512] netlink: 'syz.0.5678': attribute type 3 has an invalid length.
[  347.397078][T24521] tipc: Resetting bearer <eth:syzkaller0>
[  347.424142][T24521] tipc: Resetting bearer <eth:syzkaller0>
[  347.573026][T24532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  348.008696][T24570] netlink: 'syz.2.5698': attribute type 6 has an invalid length.
[  348.093748][T24576] bond24: (slave bridge20): Releasing active interface
[  348.099105][T24576] bond25: (slave bond26): Releasing backup interface
[  348.107373][T24576] bond28: (slave bridge0): Releasing active interface
[  348.111802][T23667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.125008][T24576] bond31: (slave veth25): Releasing active interface
[  348.231752][T14717] tipc: Resetting bearer <eth:syzkaller0>
[  348.361287][T24597] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  348.363976][T24597] bond0: option active_slave: invalid value (veth0_to_hsr)
[  348.430715][T24604] syzkaller0: left promiscuous mode
[  348.432391][T24604] syzkaller0: left allmulticast mode
[  348.435221][T24604] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.618764][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.224662][T24689] netlink: 'syz.0.5736': attribute type 1 has an invalid length.
[  349.245346][T24689] bond28: (slave vxcan1): The slave device specified does not support setting the MAC address
[  349.258678][T24689] bond28: (slave vxcan1): Error -95 calling set_mac_address
[  349.643984][T24715] atomic_op ffff88812bdc7198 conn xmit_atomic 0000000000000000
[  350.297229][T24724] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.313405][T24723] tipc: Resetting bearer <eth:syzkaller0>
[  350.315475][T24726] __nla_validate_parse: 134 callbacks suppressed
[  350.315489][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5747'.
[  350.315767][T24723] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5746'.
[  350.333617][T24721] tipc: Resetting bearer <eth:syzkaller0>
[  350.373557][T24735] netlink: 'syz.1.5750': attribute type 16 has an invalid length.
[  350.376805][T24735] netlink: 'syz.1.5750': attribute type 17 has an invalid length.
[  350.410714][ T2325] lo speed is unknown, defaulting to 1000
[  350.412654][ T2325] syz1: Port: 1 Link DOWN
[  350.414166][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  350.416840][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  350.420512][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  350.423671][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  350.450922][T24740] lo speed is unknown, defaulting to 1000
[  350.454634][T24740] lo speed is unknown, defaulting to 1000
[  350.457479][T24738] lo speed is unknown, defaulting to 1000
[  350.465130][T24738] lo speed is unknown, defaulting to 1000
[  350.637162][T24762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5759'.
[  350.646352][T24762] delete_channel: no stack
[  350.669605][T24765] netlink: 'syz.2.5760': attribute type 4 has an invalid length.
[  350.868674][T24774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5763'.
[  350.874109][T24774] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  350.996154][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5765'.
[  350.999739][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5765'.
[  351.036083][T24784] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5765'.
[  351.059516][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5767'.
[  351.131749][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'.
[  351.136159][T24795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5768'.
[  351.147362][T24791] syzkaller1: entered promiscuous mode
[  351.151076][T24791] syzkaller1: entered allmulticast mode
[  351.315527][T24803] lo speed is unknown, defaulting to 1000
[  351.333260][T24803] lo speed is unknown, defaulting to 1000
[  351.357504][T14716] tipc: Resetting bearer <eth:syzkaller0>
[  351.408199][T24811] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  351.439968][T24811] pim6reg: entered allmulticast mode
[  351.447219][T24811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.496008][T24811] pim6reg: left allmulticast mode
[  351.769276][T24839] netlink: 'syz.0.5780': attribute type 4 has an invalid length.
[  351.787288][T24841] netlink: 'syz.1.5782': attribute type 1 has an invalid length.
[  351.790537][T24841] netlink: 'syz.1.5782': attribute type 3 has an invalid length.
[  352.973964][T24880] netlink: 'syz.0.5794': attribute type 10 has an invalid length.
[  352.977396][T24880] !: entered promiscuous mode
[  352.982971][T24880] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  353.230108][T24903] syzkaller0: Caught tx_queue_len zero misconfig
[  353.237940][T24903] netlink: 'syz.2.5802': attribute type 74 has an invalid length.
[  353.728283][T24924] openvswitch: netlink: IP tunnel dst address not specified
[  354.357076][T24937] netlink: 'syz.0.5814': attribute type 4 has an invalid length.
[  354.385527][T24939] lo speed is unknown, defaulting to 1000
[  354.395161][T24939] lo speed is unknown, defaulting to 1000
[  354.446206][T24946] tipc: Resetting bearer <eth:syzkaller0>
[  354.479972][T24946] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  354.484992][T24945] tipc: Resetting bearer <eth:syzkaller0>
[  354.662402][T24959] netlink: zone id is out of range
[  354.664581][T24959] netlink: zone id is out of range
[  354.666760][T24959] netlink: zone id is out of range
[  354.669709][T24959] netlink: zone id is out of range
[  354.671987][T24959] netlink: zone id is out of range
[  354.674312][T24959] netlink: zone id is out of range
[  354.676463][T24959] netlink: zone id is out of range
[  354.678874][T24959] netlink: zone id is out of range
[  355.048270][T24980] netlink: 'syz.2.5829': attribute type 4 has an invalid length.
[  355.298576][T24985] block nbd6: server does not support multiple connections per device.
[  355.301289][T24985] block nbd6: shutting down sockets
[  355.448533][T24984] block nbd6: server does not support multiple connections per device.
[  355.457654][T24984] block nbd6: shutting down sockets
[  355.510787][T14720] tipc: Resetting bearer <eth:syzkaller0>
[  355.865680][T24997] __nla_validate_parse: 13 callbacks suppressed
[  355.865696][T24997] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5835'.
[  355.900866][T25007] netlink: 'syz.0.5839': attribute type 4 has an invalid length.
[  355.955763][T25005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5838'.
[  356.078083][T25012] tipc: Resetting bearer <eth:syzkaller0>
[  356.099731][T25011] tipc: Resetting bearer <eth:syzkaller0>
[  356.177646][T25024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5842'.
[  356.302275][T25035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5846'.
[  356.307260][T25037] netlink: 'syz.2.5843': attribute type 1 has an invalid length.
[  356.311788][T25037] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5843'.
[  356.317731][T25039] _Z`Ԁ@: entered promiscuous mode
[  356.521934][ T3936] tipc: Resetting bearer <eth:syzkaller0>
[  356.574139][T25054] lo speed is unknown, defaulting to 1000
[  356.578010][T25054] lo speed is unknown, defaulting to 1000
[  356.780299][T25057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5852'.
[  356.886681][T25061] ip6gre1: entered promiscuous mode
[  357.296037][T25083] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.375982][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'.
[  358.009999][T25105] netlink: 'syz.0.5869': attribute type 32 has an invalid length.
[  358.012671][T25105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5869'.
[  358.037637][T25109] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5870'.
[  358.070019][T25113] lo speed is unknown, defaulting to 1000
[  358.072969][T25113] lo speed is unknown, defaulting to 1000
[  358.109750][T25113] netlink: 'syz.0.5871': attribute type 1 has an invalid length.
[  358.112245][T25113] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5871'.
[  358.177793][T25134] netlink: 'syz.2.5877': attribute type 12 has an invalid length.
[  358.213639][T25142] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.219122][T25142] syzkaller0: entered promiscuous mode
[  358.221129][T25142] syzkaller0: entered allmulticast mode
[  358.394537][T25172] syzkaller1: entered promiscuous mode
[  358.396557][T25172] syzkaller1: entered allmulticast mode
[  358.464300][T25182] lo speed is unknown, defaulting to 1000
[  358.467909][T25182] lo speed is unknown, defaulting to 1000
[  358.548727][T25187] netlink: 'syz.0.5888': attribute type 1 has an invalid length.
[  358.552029][T25187] netlink: 'syz.0.5888': attribute type 2 has an invalid length.
[  358.697658][T25186] infiniband syz!: set down
[  358.699578][T25186] infiniband syz!: added team_slave_0
[  358.722080][T25186] RDS/IB: syz!: added
[  358.724685][T25186] smc: adding ib device syz! with port count 1
[  358.726898][T25186] smc:    ib device syz! port 1 has pnetid 
[  358.729914][T25201] netlink: 'syz.1.5895': attribute type 15 has an invalid length.
[  358.763867][T25203] : renamed from caif0
[  358.958054][T25214] netlink: 'syz.1.5901': attribute type 4 has an invalid length.
[  358.963619][T25212] netlink: 'syz.2.5900': attribute type 13 has an invalid length.
[  359.410959][T25267] tc_dump_action: action bad kind
[  359.415745][ T2325] lo speed is unknown, defaulting to 1000
[  359.418391][ T2325] syz2: Port: 1 Link DOWN
[  359.422040][ T2325] lo speed is unknown, defaulting to 1000
[  359.423896][ T2325] syz2: Port: 1 Link ACTIVE
[  359.433202][T25269] vlan1: entered allmulticast mode
[  359.434918][T25269] bridge_slave_0: entered allmulticast mode
[  359.592328][T25290] tipc: Resetting bearer <eth:syzkaller0>
[  359.596736][T25289] tipc: Resetting bearer <eth:syzkaller0>
[  359.599070][T25291] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  359.610051][T14719] tipc: Resetting bearer <eth:syzkaller0>
[  359.635532][T25298] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.639293][T25298] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.656000][T25302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.671561][T25298] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.674835][T25298] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.682389][T25302] syzkaller1: entered promiscuous mode
[  359.684166][T25302] syzkaller1: entered allmulticast mode
[  359.721555][T25298] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.724823][T25298] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.822471][T25298] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  359.826111][T25298] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.903894][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.906673][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.915820][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.918982][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.928968][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.931868][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.940816][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.943490][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.353575][T25343] geneve4: entered promiscuous mode
[  360.356407][ T8703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  360.360020][ T8703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  360.364284][ T8703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  360.367801][ T8703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  360.434939][T25350] lo speed is unknown, defaulting to 1000
[  360.438609][T25350] lo speed is unknown, defaulting to 1000
[  360.735690][T25367] x9: renamed from bridge_slave_0
[  360.897823][T25389] __nla_validate_parse: 18 callbacks suppressed
[  360.897836][T25389] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5953'.
[  360.907047][T25391] IPVS: persistence engine module ip_vs_pe_ not found
[  360.952514][T25399] validate_nla: 3 callbacks suppressed
[  360.952530][T25399] netlink: 'syz.0.5956': attribute type 1 has an invalid length.
[  360.957933][T25399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5956'.
[  360.966322][T25399] tipc: Resetting bearer <eth:syzkaller0>
[  360.972747][T25398] tipc: Resetting bearer <eth:syzkaller0>
[  361.202083][T25418] tipc: Resetting bearer <eth:syzkaller0>
[  362.007308][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5964'.
[  362.038664][T25418] tipc: Resetting bearer <eth:syzkaller0>
[  362.083431][T25432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5966'.
[  362.119445][T25435] netlink: 'syz.0.5967': attribute type 13 has an invalid length.
[  362.171411][T25439] tipc: Resetting bearer <eth:syzkaller0>
[  362.183866][ T2325] lo speed is unknown, defaulting to 1000
[  362.184116][ T5872] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.186211][ T2325] syz2: Port: 1 Link DOWN
[  362.191301][T25439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5968'.
[  362.192315][ T5872] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.197345][ T5872] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.200376][ T5872] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  362.397610][T25446] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5970'.
[  362.820846][T25458] netlink: 'syz.1.5974': attribute type 7 has an invalid length.
[  362.823871][T25458] netlink: 'syz.1.5974': attribute type 3 has an invalid length.
[  362.826768][T25458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5974'.
[  362.832176][T25460] netlink: 'syz.1.5974': attribute type 7 has an invalid length.
[  362.835013][T25460] netlink: 'syz.1.5974': attribute type 3 has an invalid length.
[  362.837867][T25460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5974'.
[  363.346654][T25491] lo speed is unknown, defaulting to 1000
[  363.350574][T25491] lo speed is unknown, defaulting to 1000
[  363.923245][T25505] netlink: 'syz.2.5989': attribute type 4 has an invalid length.
[  363.957946][T25507] syzkaller1: entered allmulticast mode
[  363.964345][T25507] syzkaller1: left allmulticast mode
[  364.217795][T25519] net_ratelimit: 3 callbacks suppressed
[  364.217811][T25519] netlink: zone id is out of range
[  364.222551][T25519] netlink: zone id is out of range
[  364.234771][T25523] team0: Mode changed to "broadcast"
[  364.240045][T25523] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  364.242837][T25519] netlink: set zone limit has 4 unknown bytes
[  364.287183][T25519] netlink: del zone limit has 4 unknown bytes
[  364.331458][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5999'.
[  364.421797][T25533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5999'.
[  364.487021][T25544] netlink: 'syz.0.6002': attribute type 1 has an invalid length.
[  364.677881][T25563] lo speed is unknown, defaulting to 1000
[  364.681533][T25563] lo speed is unknown, defaulting to 1000
[  364.904119][T25571] macsec3: entered promiscuous mode
[  364.906393][T25571] bond0: entered promiscuous mode
[  364.910104][T25571] bond0: left promiscuous mode
[  365.047466][T25585] batadv_slave_1: entered promiscuous mode
[  365.058597][T25582] batadv_slave_1: left promiscuous mode
[  365.085648][T25589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.344136][T25616] lo speed is unknown, defaulting to 1000
[  365.346910][T25616] lo speed is unknown, defaulting to 1000
[  365.597843][T25635] vlan0: entered allmulticast mode
[  365.600289][T25635] bond0: entered allmulticast mode
[  365.844653][T25666] macvtap0: entered promiscuous mode
[  365.846396][T25666] erspan0: entered promiscuous mode
[  365.848156][T25666] macvtap0: entered allmulticast mode
[  365.851391][T25666] erspan0: entered allmulticast mode
[  365.855024][T25666] erspan0: left allmulticast mode
[  365.856705][T25666] erspan0: left promiscuous mode
[  365.916387][T25678] 8021q: adding VLAN 0 to HW filter on device bond30
[  365.921649][T25666] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  366.084355][T25698] __nla_validate_parse: 7 callbacks suppressed
[  366.084371][T25698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6046'.
[  366.094906][T25698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'.
[  366.176140][T25710] netlink: 'syz.0.6049': attribute type 10 has an invalid length.
[  366.255144][T25732] netlink: 'syz.0.6057': attribute type 62 has an invalid length.
[  366.275509][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6059'.
[  366.280104][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6060'.
[  366.645631][T25768] lo speed is unknown, defaulting to 1000
[  366.650577][T25768] lo speed is unknown, defaulting to 1000
[  366.784442][T25773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6071'.
[  366.897957][T25775] syzkaller0: Caught tx_queue_len zero misconfig
[  367.059972][T25791] netlink: 'syz.1.6076': attribute type 1 has an invalid length.
[  367.065436][T25789] tap0: tun_chr_ioctl cmd 1074025680
[  367.073987][T25789] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.082644][T25789] D: renamed from syzkaller0 (while UP)
[  367.089299][T25789] tipc: Disabling bearer <eth:syzkaller0>
[  367.267346][T25808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6082'.
[  367.785775][T25821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6084'.
[  367.807539][T25817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6083'.
[  367.960707][T25841] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  368.022280][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6094'.
[  368.025629][T25849] veth0_to_bond: entered allmulticast mode
[  368.061054][T25853] netlink: 'syz.0.6095': attribute type 1 has an invalid length.
[  368.064033][T25853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6095'.
[  368.099475][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.128765][T25847] 8021q: adding VLAN 0 to HW filter on device 
[  368.136675][T25847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.413290][T25905] syzkaller1: entered promiscuous mode
[  368.416822][T25905] syzkaller1: entered allmulticast mode
[  368.502517][T25920] netlink: 'syz.0.6118': attribute type 12 has an invalid length.
[  368.591565][T25926] netlink: 'syz.0.6120': attribute type 11 has an invalid length.
[  368.886829][T25944] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  369.400442][T25958] macsec0: entered allmulticast mode
[  369.402774][T25958] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  369.480688][T25968] syz.1.6137: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  369.486693][T25968] CPU: 1 UID: 0 PID: 25968 Comm: syz.1.6137 Not tainted syzkaller #0 PREEMPT(full) 
[  369.486720][T25968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.486730][T25968] Call Trace:
[  369.486738][T25968]  <TASK>
[  369.486748][T25968]  dump_stack_lvl+0x189/0x250
[  369.486776][T25968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.486802][T25968]  ? __pfx__printk+0x10/0x10
[  369.486823][T25968]  ? lock_release+0x4b/0x3e0
[  369.486847][T25968]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  369.486866][T25968]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  369.486882][T25968]  warn_alloc+0x214/0x310
[  369.486905][T25968]  ? stack_depot_save_flags+0x40/0x860
[  369.486928][T25968]  ? __pfx_warn_alloc+0x10/0x10
[  369.486950][T25968]  ? kasan_save_track+0x4f/0x80
[  369.486969][T25968]  ? xskq_create+0x56/0x170
[  369.486988][T25968]  ? xsk_init_queue+0xb0/0x110
[  369.487005][T25968]  ? xsk_setsockopt+0x4dc/0x8d0
[  369.487021][T25968]  ? do_sock_setsockopt+0x17c/0x1b0
[  369.487035][T25968]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  369.487047][T25968]  ? do_syscall_64+0xfa/0x3b0
[  369.487060][T25968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.487077][T25968]  __vmalloc_node_range_noprof+0x125/0x12f0
[  369.487108][T25968]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  369.487127][T25968]  ? xsk_setsockopt+0x462/0x8d0
[  369.487144][T25968]  ? __kasan_kmalloc+0x93/0xb0
[  369.487163][T25968]  vmalloc_user_noprof+0xad/0xf0
[  369.487182][T25968]  ? xskq_create+0xbf/0x170
[  369.487201][T25968]  xskq_create+0xbf/0x170
[  369.487222][T25968]  xsk_init_queue+0xb0/0x110
[  369.487241][T25968]  xsk_setsockopt+0x4dc/0x8d0
[  369.487258][T25968]  ? __pfx_xsk_setsockopt+0x10/0x10
[  369.487275][T25968]  ? __pfx_aa_sk_perm+0x10/0x10
[  369.487294][T25968]  ? lock_release+0x4b/0x3e0
[  369.487313][T25968]  ? aa_sock_opt_perm+0xff/0x1b0
[  369.487325][T25968]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  369.487339][T25968]  ? __pfx_xsk_setsockopt+0x10/0x10
[  369.487356][T25968]  do_sock_setsockopt+0x17c/0x1b0
[  369.487372][T25968]  __x64_sys_setsockopt+0x13f/0x1b0
[  369.487387][T25968]  do_syscall_64+0xfa/0x3b0
[  369.487401][T25968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.487413][T25968]  ? exc_page_fault+0x9f/0xf0
[  369.487434][T25968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.487448][T25968] RIP: 0033:0x7f888a78ebe9
[  369.487465][T25968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.487516][T25968] RSP: 002b:00007f88889ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  369.487534][T25968] RAX: ffffffffffffffda RBX: 00007f888a9b5fa0 RCX: 00007f888a78ebe9
[  369.487546][T25968] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  369.487556][T25968] RBP: 00007f888a811e19 R08: 0000000000000004 R09: 0000000000000000
[  369.487566][T25968] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  369.487576][T25968] R13: 00007f888a9b6038 R14: 00007f888a9b5fa0 R15: 00007ffff94dc1b8
[  369.487594][T25968]  </TASK>
[  369.487600][T25968] Mem-Info:
[  369.605362][T25968] active_anon:5548 inactive_anon:0 isolated_anon:0
[  369.605362][T25968]  active_file:1455 inactive_file:38281 isolated_file:0
[  369.605362][T25968]  unevictable:1768 dirty:206 writeback:0
[  369.605362][T25968]  slab_reclaimable:11415 slab_unreclaimable:84878
[  369.605362][T25968]  mapped:18091 shmem:2558 pagetables:1164
[  369.605362][T25968]  sec_pagetables:0 bounce:0
[  369.605362][T25968]  kernel_misc_reclaimable:0
[  369.605362][T25968]  free:245931 free_pcp:28787 free_cma:0
[  369.621421][T25968] Node 0 active_anon:12172kB inactive_anon:0kB active_file:2964kB inactive_file:3808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36628kB dirty:492kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8188kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  369.636524][T25968] Node 1 active_anon:9884kB inactive_anon:0kB active_file:2856kB inactive_file:149316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35736kB dirty:332kB writeback:0kB shmem:5420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6692kB pagetables:1784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  369.647003][T25968] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:384kB free_cma:0kB
[  369.660114][T25968] lowmem_reserve[]: 0 811 811 811 811
[  369.662384][T25968] Node 0 DMA32 free:322280kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12308kB inactive_anon:0kB active_file:2964kB inactive_file:3808kB unevictable:3536kB writepending:492kB present:1556484kB managed:830920kB mlocked:0kB bounce:0kB free_pcp:36008kB local_pcp:20160kB free_cma:0kB
[  369.676047][T25968] lowmem_reserve[]: 0 0 0 0 0
[  369.678115][T25968] Node 1 DMA32 free:420796kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:13212kB local_pcp:3664kB free_cma:0kB
[  369.711660][T25968] lowmem_reserve[]: 0 0 854 854 854
[  369.713752][T25968] Node 1 Normal free:226068kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9952kB inactive_anon:0kB active_file:2856kB inactive_file:149316kB unevictable:3536kB writepending:332kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:65768kB local_pcp:39936kB free_cma:0kB
[  369.726908][T25968] lowmem_reserve[]: 0 0 0 0 0
[  369.729178][T25968] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  369.744135][T25968] Node 0 DMA32: 1052*4kB (UME) 981*8kB (UME) 474*16kB (UME) 1186*32kB (UM) 745*64kB (UM) 223*128kB (UM) 54*256kB (UME) 87*512kB (UME) 31*1024kB (UM) 16*2048kB (UM) 16*4096kB (U) = 322232kB
[  369.757770][T25968] Node 1 DMA32: 35*4kB (UM) 34*8kB (U) 30*16kB (U) 40*32kB (U) 31*64kB (U) 25*128kB (U) 19*256kB (UM) 24*512kB (UM) 19*1024kB (UM) 10*2048kB (UM) 87*4096kB (UM) = 420796kB
[  369.767902][T25968] Node 1 Normal: 951*4kB (UE) 1095*8kB (UME) 388*16kB (UM) 629*32kB (UME) 499*64kB (UME) 259*128kB (UM) 184*256kB (UME) 56*512kB (UM) 35*1024kB (UM) 5*2048kB (U) 0*4096kB = 225844kB
[  369.775907][T25968] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  369.779155][T25968] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  369.782756][T25968] 42299 total pagecache pages
[  369.784337][T25968] 5 pages in swap cache
[  369.785705][T25968] Free swap  = 124976kB
[  369.787029][T25968] Total swap = 124996kB
[  369.788376][T25968] 786301 pages RAM
[  369.801670][T25968] 0 pages HighMem/MovableOnly
[  369.803385][T25968] 241339 pages reserved
[  369.804934][T25968] 0 pages cma reserved
[  369.817710][T26008] openvswitch: netlink: Key type 251 is out of range max 32
[  370.942608][T26055] syzkaller1: entered promiscuous mode
[  370.948715][T26055] syzkaller1: entered allmulticast mode
[  371.005310][T26067] netlink: 'syz.2.6167': attribute type 4 has an invalid length.
[  371.047649][T26071] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  371.052623][T26071] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  371.060015][T26071] netlink: 'syz.1.6168': attribute type 7 has an invalid length.
[  371.062509][T26071] netlink: 'syz.1.6168': attribute type 8 has an invalid length.
[  371.127054][T26085] __nla_validate_parse: 11 callbacks suppressed
[  371.127078][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.132568][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.135723][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.139600][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.142560][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.145563][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.149461][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.152408][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.155325][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.158243][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6174'.
[  371.209524][T26090] netlink: 'syz.1.6175': attribute type 13 has an invalid length.
[  371.212010][T26090] netlink: 'syz.1.6175': attribute type 17 has an invalid length.
[  371.236277][T26090] ip6tnl0: left promiscuous mode
[  371.237921][T26090] ip6tnl0: left allmulticast mode
[  371.260298][T26090] ip6gretap0: left promiscuous mode
[  371.264287][T26093] netlink: 'syz.2.6176': attribute type 3 has an invalid length.
[  371.267135][T26093] netlink: 'syz.2.6176': attribute type 1 has an invalid length.
[  371.271980][T26090] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  371.281805][ T5882] lo speed is unknown, defaulting to 1000
[  371.283104][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  371.284056][ T5882] syz1: Port: 1 Link ACTIVE
[  371.298078][T26096] dvmrp0: left allmulticast mode
[  371.316406][T26090] lo speed is unknown, defaulting to 1000
[  371.320426][T26090] lo speed is unknown, defaulting to 1000
[  371.369546][T26103] netlink: 'syz.2.6180': attribute type 4 has an invalid length.
[  372.014594][T26152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  372.025163][T26152] netlink: 'syz.1.6195': attribute type 2 has an invalid length.
[  372.056413][T26154] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  372.139645][T26163] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  372.140016][T26161] netlink: 'syz.2.6199': attribute type 12 has an invalid length.
[  372.147536][T26161] netlink: 'syz.2.6199': attribute type 11 has an invalid length.
[  372.242047][T26170] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  372.347704][T26193] 8021q: adding VLAN 0 to HW filter on device bond31
[  372.357532][T26193] bond0: (slave bond31): Enslaving as an active interface with a down link
[  373.001794][T26224] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.001920][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  373.006282][T26224] netem: change failed
[  373.097885][T26231] netlink: 'syz.2.6219': attribute type 1 has an invalid length.
[  373.775007][T26262] syzkaller1: entered promiscuous mode
[  373.777264][T26262] syzkaller1: entered allmulticast mode
[  373.960762][T26270] netlink: 'syz.0.6232': attribute type 1 has an invalid length.
[  373.977629][T26270] 8021q: adding VLAN 0 to HW filter on device bond32
[  374.057533][T26284] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  374.331538][T26325] bridge0: the hash_elasticity option has been deprecated and is always 16
[  374.470081][T26343] pimreg3: entered allmulticast mode
[  374.720645][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  374.735950][T26383] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  374.751558][T26383] syzkaller1: entered promiscuous mode
[  374.753781][T26383] syzkaller1: entered allmulticast mode
[  374.970343][T26411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.094732][T26435] tipc: Invalid UDP bearer configuration
[  375.094754][T26435] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  375.174282][T26445] "syz.0.6291" (26445) uses obsolete ecb(arc4) skcipher
[  375.177740][T26447] C: renamed from lo (while UP)
[  375.183163][T26447] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  375.453917][T26462] vlan1: entered allmulticast mode
[  375.471251][T26478] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.883035][T26511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.896820][T26511] veth0_to_team: entered promiscuous mode
[  375.900296][T26511] veth0_to_team: entered allmulticast mode
[  375.908662][ T5908] syz0: Port: 1 Link DOWN
[  376.160756][T26538] __nla_validate_parse: 207 callbacks suppressed
[  376.160772][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6317'.
[  376.167829][T26538] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.216510][T26537] bond33: entered promiscuous mode
[  376.439545][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  376.455835][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6323'.
[  376.460897][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6323'.
[  376.681519][T26573] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6330'.
[  376.686055][T26573] validate_nla: 6 callbacks suppressed
[  376.686072][T26573] netlink: 'syz.2.6330': attribute type 3 has an invalid length.
[  376.741904][T26579] syzkaller1: entered promiscuous mode
[  376.746732][T26579] syzkaller1: entered allmulticast mode
[  376.986342][T26608] netlink: 'syz.1.6341': attribute type 4 has an invalid length.
[  377.453691][T26650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6354'.
[  377.456540][T26650] netlink: 'syz.0.6354': attribute type 1 has an invalid length.
[  377.488220][T26654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6354'.
[  377.492988][T26651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6354'.
[  377.533181][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  377.636272][T26663] bond33: entered promiscuous mode
[  377.638716][T26663] 8021q: adding VLAN 0 to HW filter on device bond33
[  378.152726][T26679] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6361'.
[  378.466247][T26692] syzkaller0: left promiscuous mode
[  378.474512][T26692] syzkaller0: left allmulticast mode
[  378.477053][T26692] tipc: Resetting bearer <eth:syzkaller0>
[  378.514313][T26694] lo speed is unknown, defaulting to 1000
[  378.517540][T26694] C speed is unknown, defaulting to 1000
[  378.626896][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  378.766803][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6368'.
[  379.017938][T26720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6374'.
[  379.815643][T26723] syzkaller1: entered promiscuous mode
[  379.819065][T26723] syzkaller1: entered allmulticast mode
[  379.907797][T26738] netlink: 'syz.0.6381': attribute type 2 has an invalid length.
[  379.917493][T26738] k*]: entered promiscuous mode
[  379.934407][T26738] veth0_to_team: entered promiscuous mode
[  379.937455][T26738] veth0_to_team: entered allmulticast mode
[  379.973220][T26752] netlink: 'syz.2.6386': attribute type 4 has an invalid length.
[  380.225707][T26784] netlink: 'syz.0.6396': attribute type 4 has an invalid length.
[  380.247820][T26786] sctp: [Deprecated]: syz.1.6398 (pid 26786) Use of struct sctp_assoc_value in delayed_ack socket option.
[  380.247820][T26786] Use struct sctp_sack_info instead
[  380.317100][T26799] syzkaller0: left promiscuous mode
[  380.318998][T26799] syzkaller0: left allmulticast mode
[  380.327277][T26799] xfrm1: entered promiscuous mode
[  380.329544][T26799] xfrm1: entered allmulticast mode
[  380.430599][T26811] netlink: 'syz.2.6406': attribute type 9 has an invalid length.
[  380.433905][T26811] netlink: 'syz.2.6406': attribute type 9 has an invalid length.
[  380.471071][T26811] syzkaller1: entered allmulticast mode
[  380.581055][T26830] netlink: 'syz.2.6411': attribute type 4 has an invalid length.
[  380.596387][T26829] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  380.618859][ T2325] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  381.201021][T26860] __nla_validate_parse: 10 callbacks suppressed
[  381.201041][T26860] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6421'.
[  381.250516][T26867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6423'.
[  381.481432][T26875] pim6reg1: entered promiscuous mode
[  381.483579][T26875] pim6reg1: entered allmulticast mode
[  381.619824][T26894] netlink: 'syz.1.6432': attribute type 1 has an invalid length.
[  381.691783][T26894] validate_nla: 1 callbacks suppressed
[  381.691800][T26894] netlink: 'syz.1.6432': attribute type 1 has an invalid length.
[  381.697747][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6433'.
[  381.703010][T26894] 8021q: adding VLAN 0 to HW filter on device bond19
[  381.707364][T26894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6432'.
[  381.711499][T26894] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6432'.
[  381.716112][T26894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6432'.
[  381.734366][T26906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6434'.
[  381.786979][T26912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.809736][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.337636][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  382.337779][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6444'.
[  382.440906][T26943] netlink: 'syz.0.6447': attribute type 4 has an invalid length.
[  382.446393][T26943] netlink: 'syz.0.6447': attribute type 4 has an invalid length.
[  382.451162][ T5908] lo speed is unknown, defaulting to 1000
[  382.455288][ T5882] lo speed is unknown, defaulting to 1000
[  382.469608][T26943] lo speed is unknown, defaulting to 1000
[  382.473221][T26943] C speed is unknown, defaulting to 1000
[  382.513241][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6447'.
[  382.549588][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.640673][T26949] tipc: Resetting bearer <eth:syzkaller0>
[  382.750031][T26964] netlink: 'syz.0.6451': attribute type 30 has an invalid length.
[  382.796519][T26970] netlink: 'syz.1.6454': attribute type 1 has an invalid length.
[  382.817066][T26976] syzkaller0: entered promiscuous mode
[  382.821674][T26976] syzkaller0: entered allmulticast mode
[  383.017498][T26988] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  383.022946][T26988] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6459'.
[  383.431714][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  383.767356][T27020] netlink: 'syz.1.6469': attribute type 1 has an invalid length.
[  383.771254][T27020] netlink: 'syz.1.6469': attribute type 1 has an invalid length.
[  383.830473][T27024] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  384.043719][T27044] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  384.473216][T27067] pim6reg: entered allmulticast mode
[  384.686668][T27066] pim6reg: left allmulticast mode
[  385.150177][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.244645][T27138] netlink: 'syz.0.6508': attribute type 7 has an invalid length.
[  385.247920][T27138] netlink: 'syz.0.6508': attribute type 8 has an invalid length.
[  385.253432][T27138] netlink: 'syz.0.6508': attribute type 15 has an invalid length.
[  385.346845][T27149] lo speed is unknown, defaulting to 1000
[  385.365733][T27149] C speed is unknown, defaulting to 1000
[  385.509098][T27165] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  385.976127][T27210] sctp: [Deprecated]: syz.2.6530 (pid 27210) Use of int in max_burst socket option deprecated.
[  385.976127][T27210] Use struct sctp_assoc_value instead
[  386.105769][T27234] sctp: [Deprecated]: syz.1.6538 (pid 27234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  386.105769][T27234] Use struct sctp_sack_info instead
[  386.214596][T27244] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  386.294394][T27250] __nla_validate_parse: 17 callbacks suppressed
[  386.294412][T27250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6544'.
[  386.367489][T27257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6547'.
[  386.395454][T27261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6548'.
[  386.422661][T27263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.426006][T27263] syzkaller0: entered promiscuous mode
[  386.428010][T27263] syzkaller0: entered allmulticast mode
[  386.486595][T27273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.496065][T27273] syzkaller0: entered promiscuous mode
[  386.498244][T27273] syzkaller0: entered allmulticast mode
[  386.503517][T27274] tipc: Resetting bearer <eth:syzkaller0>
[  386.514038][T27274] tipc: Disabling bearer <eth:syzkaller0>
[  386.620146][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6557'.
[  386.670665][T27286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.672359][T27288] ==================================================================
[  386.676808][T27288] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  386.679319][T27288] Read of size 1 at addr ffff88803043d0b0 by task syz.2.6557/27288
[  386.682278][T27288] 
[  386.683763][T27288] CPU: 0 UID: 0 PID: 27288 Comm: syz.2.6557 Not tainted syzkaller #0 PREEMPT(full) 
[  386.683782][T27288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.683793][T27288] Call Trace:
[  386.683802][T27288]  <TASK>
[  386.683820][T27288]  dump_stack_lvl+0x189/0x250
[  386.683841][T27288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.683854][T27288]  ? lock_release+0x4b/0x3e0
[  386.683870][T27288]  ? __virt_addr_valid+0x4a5/0x5c0
[  386.683885][T27288]  print_report+0xca/0x240
[  386.683894][T27288]  ? xfrm_state_find+0x2cf2/0x5400
[  386.683903][T27288]  kasan_report+0x118/0x150
[  386.683917][T27288]  ? xfrm_state_find+0x2cf2/0x5400
[  386.683927][T27288]  xfrm_state_find+0x2cf2/0x5400
[  386.683938][T27288]  ? rcu_is_watching+0x15/0xb0
[  386.683949][T27288]  ? xfrm_state_find+0x1da/0x5400
[  386.683958][T27288]  ? __pfx_xfrm_state_find+0x10/0x10
[  386.683965][T27288]  ? lock_release+0x4b/0x3e0
[  386.683975][T27288]  ? lock_release+0x4b/0x3e0
[  386.683987][T27288]  ? is_bpf_text_address+0x292/0x2b0
[  386.683999][T27288]  ? is_bpf_text_address+0x26/0x2b0
[  386.684012][T27288]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  386.684030][T27288]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  386.684040][T27288]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  386.684051][T27288]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  386.684061][T27288]  ? lock_release+0x4b/0x3e0
[  386.684073][T27288]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  386.684086][T27288]  ? rt_set_nexthop+0x693/0xa80
[  386.684099][T27288]  ? rcu_is_watching+0x15/0xb0
[  386.684106][T27288]  ? xfrm_expand_policies+0x41f/0x6a0
[  386.684116][T27288]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  386.684127][T27288]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  386.684137][T27288]  ? __pfx___might_resched+0x10/0x10
[  386.684147][T27288]  xfrm_lookup_route+0x3c/0x1c0
[  386.684188][T27288]  __ip4_datagram_connect+0x9a5/0x1270
[  386.684204][T27288]  udp_connect+0x33/0x1f0
[  386.684213][T27288]  __sys_connect+0x316/0x440
[  386.684229][T27288]  ? __pfx___sys_connect+0x10/0x10
[  386.684243][T27288]  ? rcu_is_watching+0x15/0xb0
[  386.684253][T27288]  __x64_sys_connect+0x7a/0x90
[  386.684265][T27288]  do_syscall_64+0xfa/0x3b0
[  386.684274][T27288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.684283][T27288]  ? exc_page_fault+0x9f/0xf0
[  386.684296][T27288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.684305][T27288] RIP: 0033:0x7f96b458ebe9
[  386.684315][T27288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.684323][T27288] RSP: 002b:00007f96b5412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  386.684335][T27288] RAX: ffffffffffffffda RBX: 00007f96b47b6090 RCX: 00007f96b458ebe9
[  386.684341][T27288] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  386.684348][T27288] RBP: 00007f96b4611e19 R08: 0000000000000000 R09: 0000000000000000
[  386.684353][T27288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.684358][T27288] R13: 00007f96b47b6128 R14: 00007f96b47b6090 R15: 00007fff17bec038
[  386.684369][T27288]  </TASK>
[  386.684373][T27288] 
[  386.785844][T27288] Allocated by task 21633:
[  386.787316][T27288]  kasan_save_track+0x3e/0x80
[  386.788844][T27288]  __kasan_slab_alloc+0x6c/0x80
[  386.790754][T27288]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  386.792796][T27288]  xfrm_state_alloc+0x24/0x2f0
[  386.794395][T27288]  xfrm_add_sa+0x17d1/0x4070
[  386.795986][T27288]  xfrm_user_rcv_msg+0x7a3/0xab0
[  386.797763][T27288]  netlink_rcv_skb+0x208/0x470
[  386.799339][T27288]  xfrm_netlink_rcv+0x79/0x90
[  386.801137][T27288]  netlink_unicast+0x82f/0x9e0
[  386.803209][T27288]  netlink_sendmsg+0x805/0xb30
[  386.804993][T27288]  __sock_sendmsg+0x21c/0x270
[  386.806649][T27288]  ____sys_sendmsg+0x505/0x830
[  386.808387][T27288]  ___sys_sendmsg+0x21f/0x2a0
[  386.810259][T27288]  __x64_sys_sendmsg+0x19b/0x260
[  386.811910][T27288]  do_syscall_64+0xfa/0x3b0
[  386.813451][T27288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.815748][T27288] 
[  386.816719][T27288] Freed by task 5907:
[  386.818334][T27288]  kasan_save_track+0x3e/0x80
[  386.820179][T27288]  kasan_save_free_info+0x46/0x50
[  386.822176][T27288]  __kasan_slab_free+0x5b/0x80
[  386.824001][T27288]  kmem_cache_free+0x18f/0x400
[  386.825854][T27288]  xfrm_state_gc_task+0x52d/0x6b0
[  386.827792][T27288]  process_scheduled_works+0xae1/0x17b0
[  386.829975][T27288]  worker_thread+0x8a0/0xda0
[  386.831804][T27288]  kthread+0x711/0x8a0
[  386.833488][T27288]  ret_from_fork+0x3fc/0x770
[  386.835339][T27288]  ret_from_fork_asm+0x1a/0x30
[  386.837223][T27288] 
[  386.838193][T27288] The buggy address belongs to the object at ffff88803043cd80
[  386.838193][T27288]  which belongs to the cache xfrm_state of size 928
[  386.843533][T27288] The buggy address is located 816 bytes inside of
[  386.843533][T27288]  freed 928-byte region [ffff88803043cd80, ffff88803043d120)
[  386.848861][T27288] 
[  386.849869][T27288] The buggy address belongs to the physical page:
[  386.852408][T27288] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803043fa80 pfn:0x3043c
[  386.856659][T27288] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  386.859871][T27288] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  386.862755][T27288] page_type: f5(slab)
[  386.864312][T27288] raw: 00fff00000000040 ffff88801bb92c80 dead000000000122 0000000000000000
[  386.867437][T27288] raw: ffff88803043fa80 00000000800e000c 00000000f5000000 0000000000000000
[  386.870398][T27288] head: 00fff00000000040 ffff88801bb92c80 dead000000000122 0000000000000000
[  386.873216][T27288] head: ffff88803043fa80 00000000800e000c 00000000f5000000 0000000000000000
[  386.875727][T27288] head: 00fff00000000002 ffffea0000c10f01 00000000ffffffff 00000000ffffffff
[  386.878290][T27288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  386.880884][T27288] page dumped because: kasan: bad access detected
[  386.882882][T27288] page_owner tracks the page as allocated
[  386.884628][T27288] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6762, tgid 6759 (syz.0.200), ts 62285710111, free_ts 62175316105
[  386.890216][T27288]  post_alloc_hook+0x240/0x2a0
[  386.891670][T27288]  get_page_from_freelist+0x21e4/0x22c0
[  386.893457][T27288]  __alloc_frozen_pages_noprof+0x181/0x370
[  386.895466][T27288]  alloc_pages_mpol+0x232/0x4a0
[  386.897013][T27288]  allocate_slab+0x8a/0x370
[  386.898537][T27288]  ___slab_alloc+0xbeb/0x1410
[  386.900071][T27288]  kmem_cache_alloc_noprof+0x283/0x3c0
[  386.902161][T27288]  xfrm_state_alloc+0x24/0x2f0
[  386.903752][T27288]  xfrm_add_sa+0x17d1/0x4070
[  386.905303][T27288]  xfrm_user_rcv_msg+0x7a3/0xab0
[  386.906932][T27288]  netlink_rcv_skb+0x208/0x470
[  386.908400][T27288]  xfrm_netlink_rcv+0x79/0x90
[  386.909854][T27288]  netlink_unicast+0x82f/0x9e0
[  386.911343][T27288]  netlink_sendmsg+0x805/0xb30
[  386.912777][T27288]  __sock_sendmsg+0x21c/0x270
[  386.914506][T27288]  ____sys_sendmsg+0x505/0x830
[  386.916081][T27288] page last free pid 12 tgid 12 stack trace:
[  386.918057][T27288]  __free_frozen_pages+0xbc4/0xd30
[  386.919754][T27288]  free_large_kmalloc+0x13a/0x1f0
[  386.921372][T27288]  ops_undo_list+0x856/0x990
[  386.922839][T27288]  cleanup_net+0x4c5/0x800
[  386.924234][T27288]  process_scheduled_works+0xae1/0x17b0
[  386.925928][T27288]  worker_thread+0x8a0/0xda0
[  386.927669][T27288]  kthread+0x711/0x8a0
[  386.929212][T27288]  ret_from_fork+0x3fc/0x770
[  386.930700][T27288]  ret_from_fork_asm+0x1a/0x30
[  386.932316][T27288] 
[  386.933152][T27288] Memory state around the buggy address:
[  386.935267][T27288]  ffff88803043cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  386.938267][T27288]  ffff88803043d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  386.941220][T27288] >ffff88803043d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  386.944242][T27288]                                      ^
[  386.946376][T27288]  ffff88803043d100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  386.949478][T27288]  ffff88803043d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  386.952051][T27288] ==================================================================
[  386.955613][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.962644][T27288] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  386.965395][T27288] CPU: 0 UID: 0 PID: 27288 Comm: syz.2.6557 Not tainted syzkaller #0 PREEMPT(full) 
[  386.968640][T27288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.972449][T27288] Call Trace:
[  386.973771][T27288]  <TASK>
[  386.974949][T27288]  dump_stack_lvl+0x99/0x250
[  386.976796][T27288]  ? __asan_memcpy+0x40/0x70
[  386.978632][T27288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.980661][T27288]  ? __pfx__printk+0x10/0x10
[  386.982549][T27288]  vpanic+0x281/0x750
[  386.984095][T27288]  ? preempt_schedule+0xae/0xc0
[  386.985975][T27288]  ? __pfx_vpanic+0x10/0x10
[  386.987748][T27288]  ? preempt_schedule_common+0x83/0xd0
[  386.989873][T27288]  ? preempt_schedule+0xae/0xc0
[  386.991744][T27288]  ? __pfx_preempt_schedule+0x10/0x10
[  386.993690][T27288]  panic+0xb9/0xc0
[  386.995024][T27288]  ? __pfx_panic+0x10/0x10
[  386.996690][T27288]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  386.998916][T27288]  ? xfrm_state_find+0x2cf2/0x5400
[  387.000924][T27288]  check_panic_on_warn+0x89/0xb0
[  387.002866][T27288]  ? xfrm_state_find+0x2cf2/0x5400
[  387.004911][T27288]  end_report+0x78/0x160
[  387.006382][T27288]  kasan_report+0x129/0x150
[  387.007892][T27288]  ? xfrm_state_find+0x2cf2/0x5400
[  387.009451][T27288]  xfrm_state_find+0x2cf2/0x5400
[  387.010933][T27288]  ? rcu_is_watching+0x15/0xb0
[  387.012412][T27288]  ? xfrm_state_find+0x1da/0x5400
[  387.014035][T27288]  ? __pfx_xfrm_state_find+0x10/0x10
[  387.015864][T27288]  ? lock_release+0x4b/0x3e0
[  387.017587][T27288]  ? lock_release+0x4b/0x3e0
[  387.019393][T27288]  ? is_bpf_text_address+0x292/0x2b0
[  387.021514][T27288]  ? is_bpf_text_address+0x26/0x2b0
[  387.023602][T27288]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  387.025939][T27288]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  387.028237][T27288]  ? seqcount_lockdep_reader_access+0x174/0x1c0
[  387.030636][T27288]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  387.032726][T27288]  ? lock_release+0x4b/0x3e0
[  387.034469][T27288]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  387.036780][T27288]  ? rt_set_nexthop+0x693/0xa80
[  387.038708][T27288]  ? rcu_is_watching+0x15/0xb0
[  387.040574][T27288]  ? xfrm_expand_policies+0x41f/0x6a0
[  387.042685][T27288]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  387.044796][T27288]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  387.047038][T27288]  ? __pfx___might_resched+0x10/0x10
[  387.049092][T27288]  xfrm_lookup_route+0x3c/0x1c0
[  387.050994][T27288]  __ip4_datagram_connect+0x9a5/0x1270
[  387.053015][T27288]  udp_connect+0x33/0x1f0
[  387.054445][T27288]  __sys_connect+0x316/0x440
[  387.055837][T27288]  ? __pfx___sys_connect+0x10/0x10
[  387.057727][T27288]  ? rcu_is_watching+0x15/0xb0
[  387.059165][T27288]  __x64_sys_connect+0x7a/0x90
[  387.060889][T27288]  do_syscall_64+0xfa/0x3b0
[  387.062375][T27288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.064444][T27288]  ? exc_page_fault+0x9f/0xf0
[  387.066333][T27288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.068568][T27288] RIP: 0033:0x7f96b458ebe9
[  387.070175][T27288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.076904][T27288] RSP: 002b:00007f96b5412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  387.079619][T27288] RAX: ffffffffffffffda RBX: 00007f96b47b6090 RCX: 00007f96b458ebe9
[  387.082391][T27288] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000008
[  387.084985][T27288] RBP: 00007f96b4611e19 R08: 0000000000000000 R09: 0000000000000000
[  387.087768][T27288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.090501][T27288] R13: 00007f96b47b6128 R14: 00007f96b47b6090 R15: 00007fff17bec038
[  387.093608][T27288]  </TASK>
[  387.095628][T27288] Kernel Offset: disabled
[  387.097362][T27288] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:23:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001630a RDI=000000000001630b RBP=00000000000003f8 RSP=ffffc900046fee10
R8 =ffff888020680237 R9 =1ffff110040d0046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8d1 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f96b54126c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3528d1 CR3=000000001f948000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f96b4787498 00007f96b4787470 XMM03=00007f96b47874a8 00007f96b47874a0
XMM04=00007f96b52ed100 00007f96b4787460 XMM05=00007f96b4787478 00007f96b47874c0
XMM06=00007f96b47874b8 00007f96b47874b0 XMM07=00007f96b47874a8 00007f96b47874a0
XMM08=0470ce6a21e078d2 6fcf07fcf9dbbc13 XMM09=0000000000000000 00007f96b4612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44ceb RBX=1ffff11009608341 RCX=ffff888031250000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000474f720 RSP=ffffc9000474f5a0
R8 =ffffffff8fa38437 R9 =1ffffffff1f47086 R10=dffffc0000000000 R11=fffffbfff1f47087
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44cd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd3d09846c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd3d0962fc8 CR3=0000000129ca6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd3cfd87498 00007fd3cfd87470 XMM03=00007fd3cfd874a8 00007fd3cfd874a0
XMM04=00007fd3d08ed100 00007fd3cfd87460 XMM05=00007fd3cfd87478 00007fd3cfd874c0
XMM06=00007fd3cfd874b8 00007fd3cfd874b0 XMM07=00007fd3cfd874a8 00007fd3cfd874a0
XMM08=0000000000000000 00007fd3cfc12ee7 XMM09=0000000000000000 00007fd3cfc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
