last executing test programs:

1.195214688s ago: executing program 2 (id=3061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.104132512s ago: executing program 2 (id=3064):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x841) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x6, [{0x9, 0x9}, {0xffff, 0xfffffff0}, {0x3, 0x6}, {0x8, 0x560}, {0x80000000, 0x4}, {0x0, 0x3}]}}) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1028010e}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x301001, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x0, 0x6, 0xc31, 0x9, 0x5})
syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) (async)
write$tun(r1, &(0x7f00000003c0)={@void, @void, @ipv4=@generic={{0x31, 0x4, 0x3, 0x9, 0x195, 0x66, 0x0, 0x9, 0xff, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, {[@lsrr={0x83, 0x1b, 0x69, [@loopback, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}, @lsrr={0x83, 0x17, 0x5, [@empty, @multicast2, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0x5, 0xc, "2d96513866e58dda3349"}, {0x2, 0x5, "1e997b"}, {0x7, 0xf, "cd59571ceffefc907c6a079e98"}, {0x6, 0xe, "28324e83f3e4b1efa5b48b64"}, {0x7, 0x11, "6441d266d9890506b6fa0387dea62a"}]}, @timestamp={0x44, 0x24, 0x8b, 0x0, 0xb, [0x6, 0x1, 0x38, 0x9, 0x40, 0x800, 0x2c, 0xfffffffe]}, @timestamp={0x44, 0x10, 0x14, 0x0, 0x7, [0x1, 0x298, 0x3]}]}}, "19aede1627b03928dd31d45a86df55b16f1e1b70d77fdae7386020595a823733d97f277323892b9a30f8fb8b84a4fbf039860e5b188816cbf49e714174c2b6972494600597bf50b90a16311eb09d800f5e2e20c86ca01c40844d7f2e76e6d1c0f7f2327b3c4988d7ec6a3cd1bf5f3c7a4158a3250017b7369f3457092e4b09fed157238c53446627486b45fb93d6c185c8f391c229f84fa91d7d16d2a89e50e03aa374179358a42e290fc104512294809e9f0e8ba13e33f39fe6276dc954019a8907d8fff6629ee54724eca97178443469"}}, 0x195)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3c7, 0xb}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x24000854) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=<r5=>r1, 0x4, 0x0, 0xd, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000880)={0x1000, <r7=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, r1, 0x21, 0x21, 0xffffffffffffffff, @void, @void, @void, @value=r7, r6}, 0x20)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000008c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
getpeername$tipc(r8, &(0x7f0000000900), &(0x7f0000000940)=0x10) (async, rerun: 32)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000980)=0x7fff, 0x4) (async, rerun: 32)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000001a00)={@phonet={0x23, 0x0, 0x6, 0x9d}, {&(0x7f00000009c0)=""/4096, 0x1000}, &(0x7f00000019c0), 0x20}, 0xa0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001ac0), r5)
accept4(r8, &(0x7f0000001b00)=@ax25={{0x3, @rose}, [@rose, @rose, @remote, @null, @bcast, @rose, @default, @rose]}, &(0x7f0000001b80)=0x80, 0x800) (async, rerun: 64)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000001bc0)={<r11=>0x0, 0xb}, &(0x7f0000001c00)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001c40)={0x2, 0xb, 0x8000, 0x7, 0x2, 0x10001, 0x1, 0x2, r11}, &(0x7f0000001c80)=0x20) (async, rerun: 64)
ioctl$FICLONE(r9, 0x40049409, r2) (rerun: 64)
r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r12, &(0x7f0000001cc0)={0x2, 0x4e23, @empty}, 0x10) (async)
ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000001d00)=0x3)
r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40)={r1}, 0x8)
ioctl$TUNSETVNETBE(r13, 0x400454de, &(0x7f0000001d80))

1.040981264s ago: executing program 0 (id=3066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x148c0}, 0x8801)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r1, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40)

1.038264222s ago: executing program 0 (id=3067):
syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="b12a73e9dc0faaaaaaaaaa2a86dd6000000000283afffe040000000000000000000000000001ff0200000000000400000000000000018900907800000000fc00000000000000000000000000000000e7ff00000000000000000000000001"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42890}, 0x4080)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r3, 0x0, 0x17, 0x0, &(0x7f00000000c0)=0x3)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="b12a73e9dc0faaaaaaaaaa2a86dd6000000000283afffe040000000000000000000000000001ff0200000000000400000000000000018900907800000000fc00000000000000000000000000000000e7ff00000000000000000000000001"], 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42890}, 0x4080) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_int(r3, 0x0, 0x17, 0x0, &(0x7f00000000c0)=0x3) (async)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x5, 0xa8, @random='\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async)

984.010762ms ago: executing program 2 (id=3068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES64=r0], 0x0, 0x26, 0x0, 0x1, 0x6}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000080), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x3f}, 0x28)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)

983.49425ms ago: executing program 0 (id=3069):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf254d00fbff0d0001006e657464657673696d0000000f0002008e6ce1cbaa4bdfac6e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4)

979.770347ms ago: executing program 2 (id=3071):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x17}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x8c1}, 0x4004805)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "6ef09869329d81d97ccf8899759463b25b6143252a763dcc3f036fbd5145a71e7f7b1379ef1166e1bc181724ed8de0d0a2fc54cdd54b7e2751032b1a78158f2c366c6a632f5f9cde1e311fc09cbfcbe0c7bc56a37822f07ba3359745d2209f4c7933422819163900e0a599adc72b19ef8ecab65e08d00ee544784d39017dc950ce53a25cfd3dc7aceb4cb94573b47664dca68122cc5167044f9dbe16834a3ae989047628830344060d9fe69f156ce526101fb781bc9aa470f3f76b2e60340d00c495a2b36f3c6f1e19a0878a23c3c3373cd79f399a3ac0afccff84f4579bd44de7468099b9814a9b0f638e557a2fb125f2dbe8"}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x90}, 0x20040050)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x1401, 0x108, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r3)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000640)={0x6, 'pimreg0\x00', {0x24000}, 0x6552})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'sit0\x00', <r8=>0x0, 0x10, 0x6b6642b5b7514201, 0x1, 0x6, {{0x20, 0x4, 0x2, 0x28, 0x80, 0x64, 0x0, 0x7f, 0x29, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0x76, 0x3, 0x0, [{@rand_addr=0x64010101, 0x2}, {@private=0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x45}, {@multicast2, 0x500}, {@multicast1, 0x6}, {@remote, 0x8683}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x81}, {@broadcast, 0x68}]}, @timestamp_prespec={0x44, 0x1c, 0x42, 0x3, 0xc, [{@multicast2, 0x21}, {@private=0x4, 0x7fff}, {@broadcast, 0xfffffffa}]}, @noop]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'sit0\x00', <r9=>r8, 0x8, 0x1, 0x6, 0xfffffff9, {{0x17, 0x4, 0x3, 0xb, 0x5c, 0x67, 0x0, 0xe, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, {[@cipso={0x86, 0x18, 0x2, [{0x0, 0x4, "b61a"}, {0x7, 0xc, "ae3a2151c99f2a608d7a"}, {0x1, 0x2}]}, @lsrr={0x83, 0x1f, 0xc8, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @empty, @loopback]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80)
recvfrom(r7, &(0x7f0000000940), 0x0, 0x10103, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000001980)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001940)={&(0x7f00000009c0)={0xf50, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0xd}}}}, [@NL80211_ATTR_CSA_IES={0xea4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1ff, 0x6, 0x5941, 0x2, 0x2]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x28c, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x360, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x94, 0x3, "25d2e25dbec2dcc08cf58c1df09315b1c43f28c2ad2e5476d8b47866497adb63b82c417e7a313b103c02da5c1079cdb9af1950ce9febf90ca38aedb86751c8580a816ca9f840a1cebb8706a843909c2e71f5aa457f14b25369aaf558c8b884d0970484947622200078d959600846a8d0dcda141c489b3d151c4c89bea1f3c453674cc7bc22fb609b3422543ec8b1fb4d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8c, 0x3, "343af2c7bcbe09653ef7f0f77409a55d73920e58953565d7322958f8d0a0c9184b07524caafbc5311d90f097c25a0bfab08d77682a98fbd1ecff4f380d4b966b0307f7ac6cd58c5ea1511b6bc8d268898daf823971fbab1543d1e1010e8e0ee8ef7539fc887667f570a326884d4f3ebb70eb375dccdbb05340a9acfc79bd688992be7251992aa2a2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe8, 0x3, "31a18e164b286544d7a3082b9b0cbae8263704ee4addf25158501220956b646a88beab83d91fc437562508e660ee60fbfb0b72b7afce5cd053aa8b20cea1e03b69be0d06279d9928aa802397916342ee3d852674694065018e319288671693f9ea7a99690b39a61d07b7014edade5a2269b174ad127598d131f49975cfde01b3bdee906bf71e5409063907a3f73d29d75c617ab1388f9ac8ec82c129f77ba4caa26aaaf0143b0471fc797da51a752e91bdde4187f85f73c7962b3dfe10c0f3e09bfe511842a97694e4d37995f4c4f198b27a67d364f1c61631ed519b6bfa9026c5c17ead"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6c, 0x3, "91cf8cfaa096c54987ce9baba33137f29a55300960cac6158de34364c29c5d8effdc49213cc0e3dacc6eb83337f0aee8186b0ae98daef6d062a59e7fe7323f11564595da93479546c58322cdd7273413b62db8424b1ebed7cbfeac3beb4d64695b505ff7638d6abd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe7, 0x3, "a285e4dbc4d3e1bd2078966276439d757b5beb41a2b8e532e4e3863cf3f8f20e6ecf100ccf468852630b802f34191ddc61ce220b6b7a2481c76f41f915ec771dc28a0a9ea87bd29ff97d62f38b91efa30f95539e040b97ed66e07fc73c9dfaa664c0cce4f1e132518c1e7975a94c9e3c789178647f2102e869d03944e0fe6880fa22cb698c68ce97f5250d752cfa272bee6316a9933b9a593f10c9d1f945dd1522c8f982664e55ab9176d6fe36c5449e0223f2e98e3e55f735ca1d858faf3a4efaffe01b4812f4a44a70894ea7292fe305f1b9fa6d19789b96e5469ba226f64e27b0b5"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x41, 0x80, [@peer_mgmt={0x75, 0x18, {0x0, 0x40, @val=0x1, @val=0x7, @val="1fe4db86abb080e87ebb08f42566e140"}}, @ssid={0x0, 0x2, @random="7c81"}, @peer_mgmt={0x75, 0x4, {0x0, 0x1, @void, @void, @void}}, @random={0x8, 0x17, "4cb68e40d5756997af15219ee5229c02ea690f2420f1cb"}]}, @NL80211_ATTR_FTM_RESPONDER={0x204, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xbe, 0x3, "b497048268ff498b01e3ba015e660ea6c34b049c0200cb8cea421ed0301207484381d5bfd6fa3c306335086eba01c6c2a7b6402bf970d74504c6c313adaf8d0e2538063dc3e900dd0dfeb6d98e9f6d13f894df128ad2fdce5eaa8cdbca3f2102aa811ff0f687e35f2e06431e227394d4e03aaaa61fb144ee406e3f60d0578c24f4fd403d5d1593e17df117a1b6b97f41776d79f01a8ad4cda88420e07a15caed6c8bfcc7ca3534d8a312e2c31defa816ebbce6c070fb668cb446"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbf, 0x3, "69752cb1d956ca0560279bd4071cd3125b404db7b4b713892d34e0645deaa46eb4464dff5b2ad46f6be9de4edae23e4ee811d9204b75bc2f099a93b7a683c1e770e4a88a88ba83670fd1660fd9c0e2c0739ac9e966ee3c3d84f3f129d16f72dded4c9e67a7833000a5081e809e531d73c367029d2e18f4521dda52caf9c5a06e3e79553aa85b6463d7f469d2a8004d9119bc256d1d43b03d7b07a51b9a5b845ff52be56c300348a71bfde6046c43a4a024ac6a89c130cbc35e9686"}, @NL80211_FTM_RESP_ATTR_LCI={0x41, 0x2, "aed1a0cc2c2670e9679a2ec4e7001f608e567f4e26e68d265a063a69b03ce690cc190b66f0890a92ec2323046dff592cc1833191e7bac488dd61ddc2fd"}, @NL80211_FTM_RESP_ATTR_LCI={0x34, 0x2, "30f94a0eb5e32916847c9984d4e211c3971ff16c2b5675c384bc99a1f5851151bde6b3f478d7bc5bd91a4dcfa0b4faf5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@ht={0x2d, 0x1a, {0x8, 0x0, 0x4, 0x0, {0xfffffffffffffff9, 0xec, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x400, 0x7, 0x7f}}, @rann={0x7e, 0x15, {{0x1}, 0x1, 0x80, @device_a, 0x94, 0xffff7fff, 0x81}}, @ibss={0x6, 0x2, 0x8}, @mesh_chsw={0x76, 0x6, {0x0, 0x7f, 0x16, 0xfc}}]}, @NL80211_ATTR_BEACON_HEAD={0x401, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac, {0x6}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x10001, @default, 0x6120, @void, @val={0x1, 0x1, [{0x48}]}, @val={0x3, 0x1, 0xa5}, @val={0x4, 0x6, {0x9, 0x10, 0xa000, 0x6106}}, @void, @void, @val={0x25, 0x3, {0x1, 0x24, 0x80}}, @void, @val={0x3c, 0x4, {0x1, 0x99, 0x7c, 0x7}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x5, 0x8}}, @void, [{0xdd, 0xa9, "6a34e84f4f24969b59774f7f094b31fe06df76effe2db783257506491ea17e24482ae40fe37dd4ea5e198c7ffb31f9ceef5e36ba6060dd0fa6260bdae59c24343107c6945745d473ab8437a680510a3d722e78109afc7352ac07e6d2f2172309e06e30021dd9936e95bfb727c9637c61ddb9ea8edc277adb1d649c46489bbcbba471fe347adece0dace54952e999765792c9b4e778da8ab6104f8e618c3a7504b653ffe74f305574e5"}, {0xdd, 0xe1, "53602ffe8ae2125f22e1650ba12680d0538932f2b45d149649ae507f1b903690ee8d3df8fb34694ef383a2b360adf923789caf4efa771b69fd739ee201d1a1d3db30e618a241e54dc5a3ae8072cb419a07e338fe625461931d64469ed91eca8dc5b4ad27f8afffa7c94467093fda0351b1053ce11a6881cf9787a7111d4d0e5ab490e0f1eb042d0d2d220a40512dcbacb405357b76f1a7e2b428494a0c375af414b2b33aa8bdeee88ec38658710cb3300d8592494524b24f8d74c685f61e321d7e6d5f015bd6948769e9f3fcbd99b34304fdf85739a1ee65ffbbcb5940dc4c5165"}, {0xdd, 0x7f, "e1151bd9802d598782f4cf131ee61dc8ae65b4dfbafe5a6b2bf9da0b57d133e31558e181fb6fa02e9fe55443624a8cac0388f320ce970e419d5581f8690bc1a397bc166f33c5737b04e59c6e298322fbbbb9cce2a8789aa7330c560a82f9d568c90de43afbdb39915cf5ce8b3f55fe2f890bdeb562135f210cca470e70207d"}, {0xdd, 0xf7, "e915ee4c8f6db0b33ce1fca30835d2d3dddb4064851f38126529e79ca8b0531d3a08d0ca99ddef208478152edcdf477233c90134c787e9f68071be13dfa96ffde03b2b1597b5e8086d95fccd1e1e6f910d3d0d255edfcfc18bbd7b3e839829bb14b07c45f7ecfafd6751bffd91a72c40e577053ed352164919ae75fecbe7b5705b4fc6dccb727f4bb731ed8943ba26a8a9731e55a1040bb99b4f65282390f627754fdb2e51077312cbcc237ada1451455aff5a8fdd35ed570c1da7dfac6966ed17cf4849732ba5399bca9426c7661595f1914e01d220614d3786089fdbb5c46fa044bd332eaaf7c26ee344f8fd8bbcc8f5336b51501e76"}, {0xdd, 0x3b, "ec6f5488129b6a0196c71f01478d9a9b98a31332a557ee32c43fccaafde7442b6f3a9b036a3b21d05ee318e6cd3235ddc596eaa3286e86377b6eac"}, {0xdd, 0x6c, "f360a8fb467e212dc0f86dafb43a522a908754f71242fed191fe9f72b471d4b396334aaaf417ce6e38d782752e9db9d2133dc2b8209e01aa8bab382457153908581be19fef7dac594e129a107f257fe2f6cdb4ab7942d85d520f771027d7a9d940cbe4a1c4ec7815913836a4"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x1fc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xfb, 0x3, "7169b5a97702c3a2b34825a62f4a3a827c36eae6cdc4e84e8c9acfa09b111b9f36e50b5553168b13a2b308f28b00d91e45a87b316f71bea78854153061556c2667891a794f5b43179f5aa4d1cec5b478dc13e49e4af1a30b7fef04ca86776c791c571105bc3999a509bc56c98603a65947abefbcc721f738bbd0909a556daf913557bd361eca49f98b4cf3233cb8d79bffb3b00da88213b500088f7d1c32b5a72bcf8a00e2220ccdd0c104993801a8d23f5699e7e7804b2ee06425119493d653e0c7eaac49793c089467b01ffcfada6b6973bb3bb35c76d1014635be806d4abe7f36efdf224f476297681b0053b4e19355e93fb9987e25"}, @NL80211_FTM_RESP_ATTR_LCI={0x73, 0x2, "3d9903c0337d86539e5d94847dd49d7c66e658909b24c95af448bb8eae458df7ef47cb29a877d05ed202bca0a2e4e84f1110e786ec5566a41af2568522ffc023798a1dd96c5125a48dc760ac940eb080c67e8fb75eb18fc82b8a951f126c709ef1408f8c2d583e9da48080416d4710"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x86, 0x3, "4528d505830dd1aef6f2931a2a6dc05c40e04e1522ca581d1ec8205e0d8a46fac75e7bdbfd77a3830e620781b1d427bb7ba64014d463d3764aa59e08a10a2f3e6bf50279ea2bce184e9f34d1a4bb04e5ad8819acbf17d9de4b693c03cd72574a030b7ca85d54ef6199e6fdc191c40e91e142732fcb226cb0d7281e2969913ca063af"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x18, 0x7f, [@ssid={0x0, 0xf, @random="53bad0b738f0da809ac37749bae88d"}, @challenge={0x10, 0x1, 0xf1}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}], @NL80211_ATTR_CSA_IES={0x28, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7fff, 0x854]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x3, 0xfff8, 0x4, 0xa9e, 0x7ff, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x1, 0x7, 0xfffb, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x9a}]}, 0xf50}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x60, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x269c0c59}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r12 = accept(r3, 0x0, &(0x7f0000001b00))
r13 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001b40), &(0x7f0000001b80)=0x10)
ioctl$sock_bt_bnep_BNEPCONNADD(r12, 0x400442c8, &(0x7f0000001bc0)={r13, 0x8001, 0x4a0b, "8d5650a9834bf365df9e99e9b74176a1cbfcfdde00d3ccbba3bebc102be80c40b89c52ec7fd1f8f8544d101a41af8b0ee85bd89364125810b7948deecd0a8cc95b0e7479b9"})
ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000001c40)={0x80, 0xa9, "813b8c6d652c39d01b1677ac8ced858f2565b32569233d35aa9446a2f54230350f7d46a5dfd1ceaaf434791825a3c27b8b1939ed7366032b6adb8624b434dab060b0bc15b3c3fccc99df4be4ce450026cc16cb94645f49be0d708ee02793267722048c15a7dbed82c80f82325868da73cb422512fecf664b7d5e257f71ce7c0b2dcb0021531840a87946d869c942600ae1293d5f27d65726fd4776faabe586502584588a3d71a92cbb"})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000001f00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x14c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x11d809da}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x34f}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xab0}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x62a362bd}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x4085)
recvmsg(r11, &(0x7f0000003040)={&(0x7f0000001f40)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003000)=""/35, 0x23}, 0x0)
setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000003080)={r8, 0x1, 0x6, @link_local}, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r12, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x60, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x60}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d565285bb79bc039e0715c6379a3d7e2"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "7632e80287313ed629911218a6a57eaf"}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x20004000)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000003600)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003480)={0x104, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40002}, 0x10)

905.425558ms ago: executing program 0 (id=3072):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0})
syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c00000008005800000000000e000100"], 0x3c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x44080)

903.67321ms ago: executing program 0 (id=3074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c895}, 0x40044)
getsockopt$inet6_tcp_int(r2, 0x6, 0x2b, 0xffffffffffffffff, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @local, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0x804)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2007f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c)
r7 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004c0000000e0001006e657464657608783773696d0000000f0002006e657464657673696d3000000f10b200"/62], 0x44}}, 0x0)

414.154027ms ago: executing program 1 (id=3084):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, 0x28, 0x2, 0x70bd29, 0x25dfdbfc, {0x2}, [@typed={0x8, 0xc8, 0x0, 0x0, @uid=r3}, @generic, @nested={0xdf, 0x4b, 0x0, 0x1, [@generic="0d08ba3d78b591d96dac8c7dfb1bd95a4d7abfd971ae1be7c349596a85544e0412e8b606443318234661c5a9de58f5cf04df5d24b534c7a485607f1461aaa7f1218bf1bd06d3e41ae3b6c133cd2b211b156e04d06b2fd1c0637bd9b1c1b0dbffc782144e171b30f0981b2b5c12561f72735293b7291f8d465befb174c220be0393edd11b2bbeeac4efd3acf1cfe3bcd6d5db57bcf3d00a51d34b52dcff50fd315326252af782281556e297c2ff667a40fbac48b63a03f91e8a0f8202a0c73f6fa01a6eab98229a01de77e1ddcdff4ad80d7c6066e3dd84faf7e6f9"]}, @typed={0x4, 0xa6}]}, 0x100}, 0x1, 0x0, 0x0, 0x40015}, 0x44000)
socket$inet(0x2, 0x2, 0x7)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={<r4=>0x0, 0x2}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x1, 0x9, 0x5, 0x7, 0x80200000, 0x80000000, 0x4, 0x8, r4}, 0x20)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r1, &(0x7f0000000400)="17426071d4f07a8e6f6b13dfb9bf3bf7f0dd6458874594dd6a835081e8c67043ac1b239396a9f252d11e60d47fd15d99c06abf00c2c1830d41138f00bc06f7055272582c8cb12441e6a7e7015f3d3f001beb2305a72888a3a7fd1cfbfba76992040a11e94ff193cc338e18116bd01d6ad7442ebafe718d2ee0295e987ae194349039dfcedab97933698f377b632c0f6ec4ff6ce45e857a3241fbbdf42c949afe853749434081e12603f8caafb6724132f362cae7aaedba", 0xb7, 0x881, &(0x7f00000004c0)={0xa, 0x4e23, 0xc, @mcast2, 0x5}, 0x1c)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x6)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x404005c)
syz_emit_ethernet(0xc4, &(0x7f00000006c0)={@random="ebce545b62e8", @link_local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0xab, "cb", "50bce2", 0x8808, "9d6cec5b56a0624cba841549cb30bba779f39b328a643dbc7f79ffdda9201460f137a3922340ed7570753c322dc71f466399aa423da1f0b2d2805ca7fe4aa9ce7430a3b2b3b3b31d80ad0cdc448cdd9a80a4ff132dc28f58dad736d6ea1dbac0eedc84b2bbd74966e5ea63f68f5fef1b33a2d61bd4c364ffce479462af2cd4ae6cf246ae6d4da875082bf68b8d18bb10f62117706a8e283f9b99877e631b271b518f4996791a"}}}}}, &(0x7f00000007c0)={0x0, 0x2, [0x309, 0x29a, 0xae4, 0x3bf]})
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000800)='erspan0\x00')
recvmsg$unix(r0, &(0x7f0000000d40)={&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/230, 0xe6}, {&(0x7f00000009c0)=""/28, 0x1c}, {&(0x7f0000000a00)=""/231, 0xe7}, {&(0x7f0000000b00)=""/101, 0x65}, {&(0x7f0000000b80)=""/123, 0x7b}], 0x5, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0xb8}, 0x40000102)
sendmsg$NFT_BATCH(r10, &(0x7f0000001f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_DELSET={0x2f8, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x2d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_DESC_CONCAT={0x154, 0x2, 0x0, 0x1, [{0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfd31}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a7}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcbec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27f1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x284}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x329}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1507081c}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1584}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff4d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0xc10, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5e8, 0x3, 0x0, 0x1, [{0x5d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "f4ff5fffc4973241242aee208d6d3687da86e9cb2820ab918fda76af77484a21f9b1ca19805afe65b0d27d5e9346a3d1199f915c4cd78b365faf0c1600a1e417c3e2151c9cd97ea4f6e820ba415837566b478feea69fa79504ed0ba17c0e381c5c304712b5394994369dcf7abb6193b9aa63271a1707f66bae56e812fc224836f224311d46824dcc01e32a31bdd9c120d9ceb148aaf4c8e6b4bd16c659b2f8b2fe70279d6a154ae9e62fa53f0c5ce298eeb3c1f2e2b17695d9b13c7f65b6e2ba25aa9de727d268cc11abcedd7f4985b406c33650e439c62a839eaa2b1e899e53"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff274a}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "794e23b4e613c6314dda846b49df1ccba5e4d5bb8b26d365f34866b14b08a9ac96517f0b84d9eadf55607b259da93a06e77d0e239f5f9018cf21c28b18192a9e38fb00e55053fda5f21cd58d57e6f59adbb2ac1dc4ad3bacef176b292ebac258198d5866883447e17168e840e1715b11519a6e69ff9e92b49ac9d445919b9a6d0c58aae19e"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "409cf82436253710b4770f6b4accc472e1728ec6d01b4e6b99b7537ad90a9e563029808f61eeeb1717dbba2fe1313d8d8a738668aa8bd4f5a2b3b0fc905be7e83989be2eeae1102d9a29983f861e37e2678661f9b1876fd4b13594c5d127c61959931a1e4067f8d6"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x478d}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xfa}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}]}}}, @NFTA_SET_ELEM_KEY_END={0x174, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "805b3970694a7ea63bea1b91c63ecfb6de26d8300955a3d0aecb3e1607aa9144ec8814caba118c607a3dbe405b"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3a}]}}}, {0x4c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2b66}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x38}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xda59}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5d8, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc233}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x1e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf5}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xab, 0x1, "e3d9b45077b783f8eff6b05e19997605b149839a0bdcea14375b1104f1f154efaeeb970ab45b42a26267955c2bf47f04adcfe45520a36ab00f3c64e51d5bc00e3a41feec587aee1b868a96523ffc426dfe63043fb43454fb09d4235489b3922cf4cb2d2aa57d563ddb2f04e8f1c0946ae920032d11110b3b4b415b61715075c5639d30440c03bddab5705a8cea4e9749a540de27b2b838b8f1dc06d51d991f6d1ffe4d842cfd82"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc, 0x1, "7b104ec2ebd2606f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "36ab82cf30b01cc59a7c7ce2d6e2f48312e8f5e3a24da9d68b9865205b25c48d6fc05564fc973d2aa96eab5d30917adaf9bdf9434c6d0173cac634c310efc7095e887c926c83334a6f8e4509e65e87812af7ad5d64426c72587b79d28a61b4793c6f2ef8db15d39386e7af2b6846661a74f516eb03cac114dc724d985f2950b0bf38f13d7e8c550d06ff58f81940aaf4666fdb172fa31cc7996431ee5317e627034865ba5e1aea4710a03bf2697605e53675e67bbe593fe5efd03cb4927a95aea024c21355448c8cbb4036039903b3b8db342316"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "6e92bf9f4968f05d8de475443d07f58af7a5e7bd3a3934985889f0ab1c6ac88dc39f4ead8d1626708210beecd4e035592c2cb9d10858873778be8fae62221442a0358e85a04540788b"}]}, @NFTA_SET_ELEM_KEY_END={0x16c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x38, 0x1, "7812a679000ff28c7b30e4367abc13801468657655cc3d84c393546a44c5a35cd35bf218d96ba53eb6e429a56b2e148e69fc6d75"}, @NFTA_DATA_VALUE={0x21, 0x1, "9a9bd3db84aa72f623b9f45bb4ddfc1e81753073244d34b4f67017287b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "35dac4b05f22613c6e816f873230842b311554301a130f9ff6cca2dd2f2e8f71d6bb1565a03cea645acc63174038b30bbffa0d022d1a4b62a4a29733d4953c418eb7e82a33e1eacb3824ed41954356f0e660c96f4fe7536092cef5439484f83d5ab936cc043b9c6e7515f6f3e21bc0f9c2fb5de0afaa463b3d590ce49c454f0fd9a1838d17611bf4d000b8e5fec3c930c35ecc295c384327bdaa02e2887dbac72c571efda0d880ea9b696df87023c7d94c5f560d2b5c5d097e"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x134, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xe9, 0x7, 0x1, 0x0, "9c5eb595abff1397e98bf956ba96a8b0d24f172466d2f982624c94698b1055f3242938811520810bae16a4a991600ab88285d8d5f7caa0ffe5e77a83acee3b3da6ac9d3d9e9b1782002e25ef817d3b170f409b8098c43fe5259e7b759300015b903b329338a947ce309a848c641c4c922c03fe394c8d5791fe657b7d0c1b54015b709dce258d958dfd7455cb3e2f7b0a0b3126651afdb32d1b4f59524bec08fc1a73d3fedda8ba71b26bbf91ea607061f7977520fdb98aee564a00a881ee7b8b7f4d85c8f3398882cebd335304f5eabef71ef2c4c6b224877c92ab51050cb7eeac3b9d2b1b"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c8}, 0x1, 0x0, 0x0, 0x40013}, 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{r7, <r11=>0xffffffffffffffff}, &(0x7f0000001f40), &(0x7f0000001f80)=r0}, 0x20)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x7f, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={r8, <r13=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x11, 0x2b, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x1, 0x2, 0x9, 0x5, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x8, 0x1, 0x0, r12}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x537}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f0000002200)='GPL\x00', 0x80000001, 0xf2, &(0x7f0000002240)=""/242, 0x41000, 0x40, '\x00', r2, 0x0, r10, 0x8, &(0x7f0000002340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002380)={0x1, 0x4, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002400)=[r7, r0, r0, r8, r1, r13, r8, r0, r7], &(0x7f0000002440)=[{0x5, 0x1, 0x1, 0x9}, {0x3, 0x4, 0x3, 0x12}, {0x1, 0x5, 0x3, 0x3}, {0x4, 0x1, 0x10, 0x6}], 0x10, 0xfffffff8}, 0x94)
r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000002580), r8)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x34, r14, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x24000000)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000002680)=0x28404, 0x4)
r15 = gettid()
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000026c0)=r15)
r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a00)=@bpf_tracing={0x1a, 0x18, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000027c0)='syzkaller\x00', 0xb, 0xb0, &(0x7f0000002800)=""/176, 0x41100, 0x2, '\x00', 0x0, 0x1a, r10, 0x8, &(0x7f00000028c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002900)={0x0, 0x6, 0x4, 0x7f}, 0x10, 0xcacb, r9, 0x5, &(0x7f0000002940)=[r0, r7, 0xffffffffffffffff, r0, r11, 0xffffffffffffffff, r8, r10, r13], &(0x7f0000002980)=[{0x3, 0x3, 0xc, 0x4}, {0x5, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x9, 0x5}, {0x5, 0x5, 0x0, 0x9}, {0x3, 0x2, 0x1, 0xa}], 0x10, 0x1ff}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002bc0)={@fallback=r9, 0xb, 0x1, 0xfffffff8, &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b80)=[0x0, 0x0, 0x0], <r17=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c00)={@ifindex=r2, r16, 0x9, 0x4, 0x0, @void, @value=r9, @void, @void, r17}, 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000002c40)={0x29, @rand_addr=0x64010102, 0x4e21, 0x1, 'sh\x00', 0x14, 0x5, 0x2d}, 0x2c)

324.973551ms ago: executing program 1 (id=3085):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000))
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f00000004c0), 0x32}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r2, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x68, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x216}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44090)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001600)={0x0, 0x8, 0x2000, 0xffff, 0x0, 0x400005}, 0x14)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf254c0000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

255.224214ms ago: executing program 1 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) (async)
unshare(0x20000400)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="a4000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000680012800b00010067656e65766500005800028014000700fe80000000000000000000000000000d050003000e00000008000b400000020005000900010000000800010003000000050008000100000008000b400000000908000b400000000c05000400990000000a000100aa"], 0xa4}}, 0x8004) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async)
r5 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000040)={0x0, 0x4, [@random="328c0718b3d9", @random="023735f2204c", @multicast, @empty]}) (async)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x30, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x40)

254.483013ms ago: executing program 1 (id=3087):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={0x3c, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc7", 0x6}, {0x0}, {&(0x7f0000004480)="d21e96", 0x3}], 0x3)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900020003002500002a82264c008009000008009f0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x420, 0x38}}}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040014)

121.815393ms ago: executing program 1 (id=3088):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
recvmmsg(r8, &(0x7f0000000480)=[{{&(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000900)=""/198, 0xc6}], 0x4, &(0x7f0000000a00)=""/252, 0xfc}, 0x80}], 0x1, 0x2020, &(0x7f0000000780)={0x0, 0x3938700})
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r9, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0)

65.095231ms ago: executing program 2 (id=3089):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async)
recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/48, 0x30}, 0x85ae}], 0x1, 0x60010062, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000bc0)={'ip6gretap0\x00'}) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="b40002803800010024000100"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000c00)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}}, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.361925ms ago: executing program 2 (id=3090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x28080)

2.96606ms ago: executing program 0 (id=3091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x30, r1, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x40)

0s ago: executing program 1 (id=3092):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x2f, 0xa9, @random="a0be56190a1973b9a082fe35468118f44c2f4424cd1191aaec0a3aba93d2d53a5956dd88d34f1c42da00e6"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x40080) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x5, @empty, 0xfffffffe}}}, 0x88)

kernel console output (not intermixed with test programs):

: renamed from dummy0 (while UP)
[   80.511757][ T7319] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   80.549449][ T7309] netlink: 'syz.2.421': attribute type 13 has an invalid length.
[   80.634697][ T7319] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   80.637762][ T7319] netlink: 'syz.1.422': attribute type 1 has an invalid length.
[   81.129290][ T7377] __nla_validate_parse: 14 callbacks suppressed
[   81.129301][ T7377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.429'.
[   81.164112][ T7383] netlink: 'syz.2.430': attribute type 21 has an invalid length.
[   81.167456][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.430'.
[   81.201302][ T7390] netlink: 'syz.2.431': attribute type 13 has an invalid length.
[   81.207032][ T7390] netlink: 'syz.2.431': attribute type 17 has an invalid length.
[   81.260847][ T7390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.386795][ T7411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.739483][ T7444] netlink: 'syz.1.436': attribute type 16 has an invalid length.
[   82.007974][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   82.012851][ T6422] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.017334][ T6422] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.020360][ T6422] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.030453][ T6422] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.066919][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'.
[   82.067397][ T7457] netlink: 4332 bytes leftover after parsing attributes in process `syz.2.439'.
[   82.081017][ T7457] openvswitch: netlink: Flow key attr not present in new flow.
[   83.109944][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'.
[   83.142258][ T7489] netlink: 116 bytes leftover after parsing attributes in process `syz.1.450'.
[   83.648292][ T7505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'.
[   83.652419][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'.
[   83.837466][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'.
[   86.567517][   T95] cfg80211: failed to load regulatory.db
[  110.525755][ T7550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.465'.
[  110.850768][ T7583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.473'.
[  110.866076][ T7584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.878479][ T7584] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  110.913189][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'.
[  111.083030][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.480'.
[  111.120869][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[  111.127698][ T7599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.481'.
[  111.216689][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[  111.219905][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[  111.281544][ T7620] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  111.287510][ T7620] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  111.289964][ T7620] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  111.502557][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'.
[  111.539656][ T7633] syzkaller1: entered promiscuous mode
[  111.541821][ T7633] syzkaller1: entered allmulticast mode
[  111.546959][ T7633] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  111.550937][ T7633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.494'.
[  111.624058][ T7579] tipc: Disabling bearer <eth:syzkaller0>
[  111.658054][ T7638] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  111.669801][ T7640] openvswitch: netlink: Message has 4 unknown bytes.
[  111.782427][ T7651] validate_nla: 2 callbacks suppressed
[  111.782438][ T7651] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[  111.808738][ T7651] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[  111.817602][ T7652] pimreg: entered allmulticast mode
[  111.826802][ T7652] dvmrp8: entered allmulticast mode
[  111.830039][ T7652] netlink: 'syz.0.502': attribute type 21 has an invalid length.
[  111.836127][ T7649] pimreg: left allmulticast mode
[  111.838028][ T7649] dvmrp8: left allmulticast mode
[  112.080829][ T7678] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  112.382528][ T7702] tap0: tun_chr_ioctl cmd 1074025677
[  112.384984][ T7702] tap0: linktype set to 776
[  112.401836][ T7702] tap0: tun_chr_ioctl cmd 35108
[  112.406016][ T7702] netlink: 'syz.1.520': attribute type 178 has an invalid length.
[  112.499528][ T7706] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  112.502543][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.772352][ T7728] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  113.181984][   T47] IPVS: starting estimator thread 0...
[  113.243738][ T7774] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  113.293012][ T7778] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.297026][ T7767] IPVS: using max 64 ests per chain, 153600 per kthread
[  113.430011][ T7802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.576140][ T7812] delete_channel: no stack
[  113.809061][ T7834] netlink: 'syz.1.564': attribute type 178 has an invalid length.
[  113.852234][ T7837] netlink: 'syz.0.565': attribute type 178 has an invalid length.
[  113.964728][ T7841] netlink: 'syz.0.567': attribute type 178 has an invalid length.
[  114.241302][ T7870] Bluetooth: MGMT ver 1.23
[  114.317514][ T7877] unsupported nla_type 52263
[  114.343032][ T7877] netlink: 'syz.1.578': attribute type 21 has an invalid length.
[  114.346337][ T7877] netlink: 'syz.1.578': attribute type 5 has an invalid length.
[  115.146194][   T33] audit: type=1107 audit(1758203010.574:3): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3r&/Įt4$sȄ:/8- Hq-Ѻu3YJ³|Eq;=!^dϸ^Fe"AR9J\O򔇫K~|<]a.M:_81ɂI	2Y1EӤ?նZם}Z7-c{Qv`^+TEB_rSxh)a}'
[  115.908708][ T8018] __nla_validate_parse: 17 callbacks suppressed
[  115.908726][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.625'.
[  115.914585][ T8019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.623'.
[  116.103028][ T8033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.629'.
[  116.610632][ T1271] IPVS: starting estimator thread 0...
[  116.703428][ T8067] IPVS: using max 64 ests per chain, 153600 per kthread
[  116.752296][ T8081] bridge1: entered promiscuous mode
[  116.843566][ T8086] geneve2: entered promiscuous mode
[  117.107855][ T8105] validate_nla: 4 callbacks suppressed
[  117.107870][ T8105] netlink: 'syz.1.652': attribute type 4 has an invalid length.
[  117.445392][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'.
[  117.599680][ T8161] netlink: 100 bytes leftover after parsing attributes in process `syz.0.673'.
[  117.604950][ T8161] netlink: 100 bytes leftover after parsing attributes in process `syz.0.673'.
[  117.673055][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  117.819010][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  117.900206][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'.
[  118.132052][ T8194] geneve2: entered promiscuous mode
[  118.273058][ T8206] netlink: 'syz.0.688': attribute type 178 has an invalid length.
[  118.428868][ T8218] tipc: Can't bind to reserved service type 3
[  118.726020][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.757017][ T8241] netlink: 'syz.1.701': attribute type 167 has an invalid length.
[  118.790081][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'.
[  118.967359][ T8252] tipc: Enabled bearer <udp:syz2>, priority 10
[  119.239794][ T8266] syzkaller1: entered promiscuous mode
[  119.253976][ T8266] syzkaller1: entered allmulticast mode
[  119.322836][ T8276] trusted_key: syz.0.711 sent an empty control message without MSG_MORE.
[  119.370870][   T33] audit: type=1107 audit(1758203014.794:4): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  119.579788][ T8295] : entered promiscuous mode
[  119.637793][ T8292] block nbd1: not configured, cannot reconfigure
[  119.830316][ T8303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  120.084170][   T95] tipc: Node number set to 2709546586
[  120.162800][ T8347] netlink: 'syz.0.732': attribute type 8 has an invalid length.
[  120.520238][ T8374] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  120.832114][ T8405] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  120.838129][ T8405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.264673][ T8432] block nbd0: server does not support multiple connections per device.
[  121.275586][ T8432] block nbd0: shutting down sockets
[  121.378104][ T8449] netlink: 'syz.1.756': attribute type 178 has an invalid length.
[  121.384848][ T8452] netlink: 'syz.1.756': attribute type 178 has an invalid length.
[  121.550022][ T8467] macvtap1: entered allmulticast mode
[  121.552193][ T8467] veth0_macvtap: entered allmulticast mode
[  121.658988][ T8480] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  121.671931][ T8480] __nla_validate_parse: 11 callbacks suppressed
[  121.671946][ T8480] netlink: 277 bytes leftover after parsing attributes in process `syz.0.765'.
[  121.742126][ T8489] netlink: 'syz.2.769': attribute type 178 has an invalid length.
[  121.780165][ T8491] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  121.874784][ T8503] vcan0: tx drop: invalid da for name 0x0000000000000004
[  122.098723][ T8519] bridge_slave_0: invalid flags given to default FDB implementation
[  122.102247][ T8520] bridge_slave_0: invalid flags given to default FDB implementation
[  122.123014][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032deac00: rx timeout, send abort
[  122.417110][ T8541] netlink: 'syz.0.784': attribute type 16 has an invalid length.
[  122.420976][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'.
[  122.457112][ T8546] netlink: 'syz.1.786': attribute type 178 has an invalid length.
[  122.549933][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.0.789'.
[  122.555729][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'.
[  122.597649][ T8555] hsr_slave_1 (unregistering): left promiscuous mode
[  122.623249][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032deb800: rx timeout, send abort
[  122.626725][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032deac00: abort rx timeout. Force session deactivation
[  122.721253][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[  122.738966][ T8570] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.793'.
[  122.791535][ T8580] macvtap2: entered promiscuous mode
[  122.793214][ T8580] macvtap2: entered allmulticast mode
[  122.798770][ T8580] bond_slave_0: entered promiscuous mode
[  122.800683][ T8580] bond_slave_1: entered promiscuous mode
[  122.802594][ T8580] bond0: entered allmulticast mode
[  122.809090][ T8580] bond_slave_0: entered allmulticast mode
[  122.810901][ T8580] bond_slave_1: entered allmulticast mode
[  122.813001][ T8580] bond0: entered promiscuous mode
[  122.825041][ T8580] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  122.827391][ T8580] team0: Device macvtap2 failed to register rx_handler
[  122.835552][ T8580] bond0: left allmulticast mode
[  122.837130][ T8580] bond_slave_0: left allmulticast mode
[  122.843902][ T8580] bond_slave_1: left allmulticast mode
[  122.851074][ T8580] bond0: left promiscuous mode
[  122.857703][ T8580] bond_slave_0: left promiscuous mode
[  122.859996][ T8580] bond_slave_1: left promiscuous mode
[  123.006709][ T8597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.802'.
[  123.126284][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032deb800: abort rx timeout. Force session deactivation
[  123.252720][ T8625] netlink: 'syz.2.808': attribute type 178 has an invalid length.
[  123.304338][   T47] IPVS: starting estimator thread 0...
[  123.394604][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.813'.
[  123.405979][ T8631] IPVS: using max 64 ests per chain, 153600 per kthread
[  123.417248][ T8638] syzkaller1: entered promiscuous mode
[  123.419611][ T8638] syzkaller1: entered allmulticast mode
[  123.633133][ T8652] netlink: 'syz.0.817': attribute type 1 has an invalid length.
[  123.770183][ T8661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.823'.
[  123.899920][ T8674] netlink: 'syz.1.827': attribute type 178 has an invalid length.
[  124.001859][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.829'.
[  124.201075][ T8686] Illegal XDP return value 256 on prog  (id 112) dev syz_tun, expect packet loss!
[  124.658369][ T8719] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  124.757806][ T8726] IPVS: Error connecting to the multicast addr
[  126.162365][ T8776] gretap0: entered allmulticast mode
[  126.249393][ T8783] Bluetooth: MGMT ver 1.23
[  126.388820][ T8791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  126.518622][ T8811] blkio.reset_stats is deprecated
[  126.786724][ T8839] __nla_validate_parse: 8 callbacks suppressed
[  126.786739][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'.
[  127.067765][ T8852] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  127.070965][ T8852] netlink: 'syz.1.880': attribute type 11 has an invalid length.
[  127.074346][ T8852] netlink: 220 bytes leftover after parsing attributes in process `syz.1.880'.
[  127.137491][ T8858] netlink: 32 bytes leftover after parsing attributes in process `syz.1.883'.
[  127.180258][ T8864] netlink: 124 bytes leftover after parsing attributes in process `syz.1.886'.
[  127.267442][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'.
[  127.271299][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'.
[  127.589471][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.896'.
[  127.592912][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'.
[  128.048711][ T8917] openvswitch: netlink: IPv6 tunnel dst address is zero
[  128.330815][ T8968] netlink: 'syz.1.902': attribute type 178 has an invalid length.
[  128.481424][ T8972] netlink: 'syz.0.904': attribute type 178 has an invalid length.
[  128.606992][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.895849][ T9000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.914'.
[  129.173148][ T9030] netlink: 'syz.1.923': attribute type 178 has an invalid length.
[  129.240035][ T9033] netlink: 'syz.2.924': attribute type 178 has an invalid length.
[  129.346027][ T9050] raw_sendmsg: syz.0.930 forgot to set AF_INET. Fix it!
[  129.396159][ T9051] Can't find ip_set type bitmap:ip,mac
[  129.797594][ T9083] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  129.807603][ T9083] netlink: 'syz.0.938': attribute type 5 has an invalid length.
[  129.890499][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'.
[  131.701599][ T9144] syz_tun: entered allmulticast mode
[  131.703837][ T9144] syz_tun: left allmulticast mode
[  131.709160][ T9147] pimreg: entered allmulticast mode
[  131.852052][ T9161] netlink: 'syz.0.961': attribute type 4 has an invalid length.
[  131.904460][ T9165] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  132.085546][ T6197] IPVS: ip_vs_send_async error -101
[  132.197626][ T9206] __nla_validate_parse: 3 callbacks suppressed
[  132.197639][ T9206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'.
[  132.323221][ T9216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'.
[  132.354778][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.972'.
[  132.381357][ T9219] netlink: 'syz.0.976': attribute type 10 has an invalid length.
[  132.386350][ T9219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.976'.
[  132.390650][ T9219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.497796][ T9224] lo: entered allmulticast mode
[  132.510913][ T9224] lo: left allmulticast mode
[  132.648345][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.118570][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  133.214478][ T9255] syzkaller0: entered promiscuous mode
[  133.216700][ T9255] syzkaller0: entered allmulticast mode
[  133.266989][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'.
[  133.271200][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'.
[  133.322848][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'.
[  133.435944][ T9278] netlink: 'syz.2.993': attribute type 178 has an invalid length.
[  134.727260][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'.
[  134.934972][ T9318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1004'.
[  135.327183][ T9360] netlink: 'syz.0.1016': attribute type 1 has an invalid length.
[  135.351998][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.362629][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.371550][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.378216][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.689737][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.701009][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.706229][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.711181][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.717057][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.722018][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.727241][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.731392][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.740423][ T9390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.136015][ T9429] block nbd2: not configured, cannot reconfigure
[  136.365496][ T9442] netlink: 'syz.2.1045': attribute type 178 has an invalid length.
[  136.447307][ T9456] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  136.505985][   T33] audit: type=1107 audit(1758203031.934:5): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u0Ǹ<Cqv z2NRw{iӛr+j,.zeIۤ1^bY;\>SƬN*V%`eK:1m1M3h_QJ:-xɆ)RfpxY'
[  136.599434][ T9464] syzkaller0: entered promiscuous mode
[  136.602403][ T9464] syzkaller0: entered allmulticast mode
[  137.685265][ T9473] sctp: [Deprecated]: syz.2.1055 (pid 9473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.685265][ T9473] Use struct sctp_sack_info instead
[  137.781089][ T9483] netlink: 'syz.2.1059': attribute type 1 has an invalid length.
[  137.786012][ T9483] netlink: 'syz.2.1059': attribute type 1 has an invalid length.
[  137.802398][ T9483] netlink: 'syz.2.1059': attribute type 178 has an invalid length.
[  137.861543][ T9492] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  137.928372][ T9502] __nla_validate_parse: 10 callbacks suppressed
[  137.928388][ T9502] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1066'.
[  137.981728][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'.
[  138.006873][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'.
[  138.010080][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'.
[  138.242407][ T9539] netlink: 'syz.0.1074': attribute type 178 has an invalid length.
[  138.251694][ T9539] netlink: 'syz.0.1074': attribute type 178 has an invalid length.
[  138.327312][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'.
[  138.441670][ T9549] team0 (unregistering): Port device team_slave_0 removed
[  138.452655][ T9549] team0 (unregistering): Port device team_slave_1 removed
[  138.926816][ T9576] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1078'.
[  138.931961][ T9580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1080'.
[  139.062783][ T9591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1084'.
[  139.197748][ T9602] validate_nla: 1 callbacks suppressed
[  139.197766][ T9602] netlink: 'syz.2.1087': attribute type 178 has an invalid length.
[  139.301795][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'.
[  139.354349][ T9612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1091'.
[  140.757331][ T9687] netlink: 'syz.0.1108': attribute type 178 has an invalid length.
[  141.008906][ T9712] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  141.111672][ T9712] bond0: (slave bond_slave_1): Releasing backup interface
[  141.243058][ T9735] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  141.254400][ T9734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.258164][ T9734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.522133][ T9753] netlink: zone id is out of range
[  141.529109][ T9753] netlink: zone id is out of range
[  141.531894][ T9753] netlink: zone id is out of range
[  141.535866][ T9753] netlink: zone id is out of range
[  141.537973][ T9753] netlink: zone id is out of range
[  141.539949][ T9753] netlink: zone id is out of range
[  141.544040][ T9753] netlink: zone id is out of range
[  141.547911][ T9753] netlink: zone id is out of range
[  141.551577][ T9753] netlink: zone id is out of range
[  141.556580][ T9753] netlink: zone id is out of range
[  141.609530][ T9759] netlink: 'syz.0.1134': attribute type 178 has an invalid length.
[  141.911959][ T9769] syz_tun: entered allmulticast mode
[  141.932082][ T9766] dvmrp1: entered allmulticast mode
[  141.939287][ T9765] syz_tun: left allmulticast mode
[  142.017104][ T9777] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  142.076474][ T9778] netlink: 'syz.1.1138': attribute type 12 has an invalid length.
[  142.236381][ T9797] xt_limit: Overflow, try lower: 271964/0
[  142.379789][ T9809] netlink: 'syz.0.1153': attribute type 1 has an invalid length.
[  142.766918][ T9840] unknown channel width for channel at 909000KHz?
[  143.332986][ T9877] __nla_validate_parse: 12 callbacks suppressed
[  143.333003][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'.
[  143.420932][ T9877] nbd: socks must be embedded in a SOCK_ITEM attr
[  143.535785][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.547493][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.556905][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.572017][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.587483][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.601527][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.613752][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.625830][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  143.632952][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'.
[  144.123854][ T9924] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  144.127946][ T9924] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  144.268206][ T9933] netlink: 'syz.0.1175': attribute type 6 has an invalid length.
[  144.412033][ T9941] syzkaller1: entered promiscuous mode
[  144.415581][ T9941] syzkaller1: entered allmulticast mode
[  144.774978][ T9978] IPv6: Can't replace route, no match found
[  144.815504][ T9988] netlink: 'syz.1.1196': attribute type 6 has an invalid length.
[  144.821494][ T9989] netlink: 'syz.1.1196': attribute type 6 has an invalid length.
[  144.847311][ T9992] geneve2: entered promiscuous mode
[  144.868010][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.875946][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.880795][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.884924][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.889415][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.893506][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.897657][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.901671][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.907466][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.911748][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.915649][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.921350][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.925761][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.929926][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.934087][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.938075][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.942034][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.945851][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.949819][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.953970][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.958976][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.962863][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.971462][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.978918][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.985453][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.989872][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.996032][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.999901][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.004656][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.009441][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.015889][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.019669][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.025236][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.029120][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.032965][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.040011][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.046532][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.050362][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.057177][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.060969][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.065285][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.069033][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.072799][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.078385][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.083107][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.094043][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.098061][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.101816][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.106949][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.110951][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.115201][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.119262][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.123035][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.129881][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.134273][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.139398][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.147473][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.151270][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.157881][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.161684][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.168615][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.172925][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.177051][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.180792][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.187186][ T9994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.240438][T10018] netlink: 'syz.1.1205': attribute type 178 has an invalid length.
[  145.296367][T10023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.299840][T10023] syzkaller0: entered promiscuous mode
[  145.302154][T10023] syzkaller0: entered allmulticast mode
[  145.312313][T10023] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  145.330942][T10023] tipc: Resetting bearer <eth:syzkaller0>
[  145.336765][T10022] tipc: Resetting bearer <eth:syzkaller0>
[  145.355867][T10022] tipc: Disabling bearer <eth:syzkaller0>
[  145.443148][T10033] netlink: 'syz.1.1212': attribute type 178 has an invalid length.
[  145.645539][T10042] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.171381][T10099] netlink: 'syz.2.1221': attribute type 3 has an invalid length.
[  146.176214][T10099] netlink: 'syz.2.1221': attribute type 3 has an invalid length.
[  146.180434][T10099] netlink: 'syz.2.1221': attribute type 178 has an invalid length.
[  146.369568][T10107] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  146.373010][T10107] tipc: Enabled bearer <udp:syz0>, priority 10
[  146.447445][T10113] pimreg: tun_chr_ioctl cmd 1074025677
[  146.449868][T10113] pimreg: linktype set to 780
[  146.452203][T10114] pimreg: tun_chr_ioctl cmd 35111
[  146.455296][T10113] pimreg: tun_chr_ioctl cmd 35111
[  146.559380][T10120] netlink: 'syz.2.1227': attribute type 178 has an invalid length.
[  146.673215][T10131] bridge0: port 3(erspan0) entered blocking state
[  146.679466][T10131] bridge0: port 3(erspan0) entered disabled state
[  146.685673][T10131] erspan0: entered allmulticast mode
[  146.692305][T10131] erspan0: entered promiscuous mode
[  146.698522][T10131] bridge0: port 3(erspan0) entered blocking state
[  146.702264][T10131] bridge0: port 3(erspan0) entered forwarding state
[  146.715941][T10134] netlink: 'syz.1.1226': attribute type 178 has an invalid length.
[  146.751660][T10136] net_ratelimit: 10 callbacks suppressed
[  146.751678][T10136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.097274][T10168] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  148.974800][T10278] bond3: (slave bridge2): making interface the new active one
[  148.978236][T10278] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  149.042895][T10284] __nla_validate_parse: 45 callbacks suppressed
[  149.042910][T10284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1281'.
[  149.265845][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'.
[  149.311958][T10263] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  149.690576][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1289'.
[  149.885621][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1293'.
[  149.887134][T10320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.909685][T10320] syzkaller0: entered promiscuous mode
[  149.912635][T10320] syzkaller0: entered allmulticast mode
[  149.936850][T10320] tipc: Resetting bearer <eth:syzkaller0>
[  149.939496][T10325] validate_nla: 9 callbacks suppressed
[  149.939509][T10325] netlink: 'syz.0.1294': attribute type 178 has an invalid length.
[  149.949714][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1292'.
[  149.955879][T10318] tipc: Resetting bearer <eth:syzkaller0>
[  149.971189][T10318] tipc: Disabling bearer <eth:syzkaller0>
[  150.117681][T10334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'.
[  150.118368][T10337] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.156103][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'.
[  150.203030][T10342] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  150.258440][T10344] wg1 speed is unknown, defaulting to 1000
[  150.260935][T10344] wg1 speed is unknown, defaulting to 1000
[  150.268725][T10344] wg1 speed is unknown, defaulting to 1000
[  150.278678][T10344] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  150.301837][T10344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  150.352327][T10344] wg1 speed is unknown, defaulting to 1000
[  150.368592][T10344] wg1 speed is unknown, defaulting to 1000
[  150.376786][T10344] wg1 speed is unknown, defaulting to 1000
[  150.441512][T10352] netlink: 'syz.0.1304': attribute type 178 has an invalid length.
[  150.535329][T10359] netlink: 'syz.1.1305': attribute type 83 has an invalid length.
[  150.538169][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'.
[  150.554285][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'.
[  150.635493][T10365] can: request_module (can-proto-5) failed.
[  150.805680][T10381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1314'.
[  151.578790][T10403] sctp: [Deprecated]: syz.2.1321 (pid 10403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  151.578790][T10403] Use struct sctp_sack_info instead
[  151.832416][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.844788][ T6422] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  153.996268][T10482] xt_policy: too many policy elements
[  154.049555][T10491] macvtap1: entered promiscuous mode
[  154.051476][T10491] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  154.056965][T10491] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  154.075957][T10493] __nla_validate_parse: 7 callbacks suppressed
[  154.075967][T10493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'.
[  154.365601][T10518] netlink: 'syz.0.1358': attribute type 1 has an invalid length.
[  154.368656][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'.
[  154.648926][T10540] wg1 speed is unknown, defaulting to 1000
[  154.745093][T10546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1369'.
[  154.828953][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'.
[  154.913467][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  154.923503][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'.
[  155.107420][T10578] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1379'.
[  155.112062][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'.
[  155.167296][T10578] wg1 speed is unknown, defaulting to 1000
[  155.448527][T10600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.617913][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'.
[  155.656433][T10614] netlink: 'syz.0.1391': attribute type 3 has an invalid length.
[  155.659498][T10614] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1391'.
[  155.748351][T10619] netlink: 'syz.2.1394': attribute type 178 has an invalid length.
[  155.780261][T10618] netlink: 'syz.2.1394': attribute type 1 has an invalid length.
[  155.871416][T10633] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  156.158024][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.217374][T10657] netlink: 'syz.2.1406': attribute type 178 has an invalid length.
[  156.308835][T10661] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003
[  156.948903][T10685] vlan2: left allmulticast mode
[  156.951031][T10685] batadv0: left allmulticast mode
[  156.988068][T10685] hsr_slave_0: left promiscuous mode
[  156.991140][T10685] hsr_slave_1: left promiscuous mode
[  157.121923][T10694] netlink: 'syz.1.1418': attribute type 3 has an invalid length.
[  157.129546][T10694] netlink: 'syz.1.1418': attribute type 1 has an invalid length.
[  157.379693][T10710] wg1 speed is unknown, defaulting to 1000
[  157.486376][T10726] netlink: 'syz.0.1431': attribute type 1 has an invalid length.
[  158.244361][T10780] nbd0: detected capacity change from 0 to 63
[  158.246689][T10782] block nbd0: NBD_DISCONNECT
[  158.250205][T10782] block nbd0: Disconnected due to user request.
[  158.252377][T10782] block nbd0: shutting down sockets
[  158.256048][ T7533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.262130][ T7533] Buffer I/O error on dev nbd0, logical block 1, async page read
[  158.295979][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.298854][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  158.301439][   T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[  158.304445][   T25] Buffer I/O error on dev nbd0, logical block 2, async page read
[  158.305294][T10780] netlink: 'syz.0.1449': attribute type 3 has an invalid length.
[  158.306911][   T25] Buffer I/O error on dev nbd0, logical block 3, async page read
[  158.309284][T10780] netlink: 'syz.0.1449': attribute type 1 has an invalid length.
[  158.323818][ T7533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.326997][ T7533] Buffer I/O error on dev nbd0, logical block 0, async page read
[  158.329857][ T7533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.332967][ T7533] Buffer I/O error on dev nbd0, logical block 1, async page read
[  158.346681][T10782] netlink: 'syz.0.1449': attribute type 178 has an invalid length.
[  158.355281][ T7533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.362044][ T7533] Buffer I/O error on dev nbd0, logical block 2, async page read
[  158.368319][ T7533] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.371070][ T7533] Buffer I/O error on dev nbd0, logical block 3, async page read
[  158.375337][ T7533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.378277][ T7533] Buffer I/O error on dev nbd0, logical block 0, async page read
[  158.381070][ T7533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.385890][ T7533] Buffer I/O error on dev nbd0, logical block 1, async page read
[  158.388403][ T7533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.393951][ T7533] ldm_validate_partition_table(): Disk read failed.
[  158.397326][ T7533] Dev nbd0: unable to read RDB block 0
[  158.400262][ T7533]  nbd0: unable to read partition table
[  158.413082][ T7533] ldm_validate_partition_table(): Disk read failed.
[  158.420411][ T7533] Dev nbd0: unable to read RDB block 0
[  158.424145][ T7533]  nbd0: unable to read partition table
[  158.525864][T10794] sctp: [Deprecated]: syz.1.1453 (pid 10794) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.525864][T10794] Use struct sctp_sack_info instead
[  158.541700][T10798] IPVS: length: 41 != 8
[  158.686988][T10810] veth0_to_bond: entered allmulticast mode
[  158.765707][T10819] erspan0: entered promiscuous mode
[  158.768266][T10819] macsec2: entered promiscuous mode
[  158.773071][T10819] erspan0: left promiscuous mode
[  158.901465][ T5857] Bluetooth: hci2: link tx timeout
[  158.907107][ T5857] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  159.187611][T10854] __nla_validate_parse: 21 callbacks suppressed
[  159.187623][T10854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1473'.
[  159.297931][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1474'.
[  159.400427][T10875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1479'.
[  159.697625][T10900] tipc: New replicast peer: 255.255.255.255
[  159.700098][T10900] tipc: Enabled bearer <udp:s>, priority 10
[  159.942517][T10910] wg1 speed is unknown, defaulting to 1000
[  160.964554][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  162.731088][T10914] pim6reg1: entered promiscuous mode
[  162.732885][T10914] pim6reg1: entered allmulticast mode
[  162.750152][T10916] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1496'.
[  162.834623][T10921] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  162.871774][T10921] bond1: (slave geneve2): Opening slave failed
[  162.890195][T10928] netlink: 'syz.2.1500': attribute type 178 has an invalid length.
[  162.910259][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1498'.
[  162.917375][T10929] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.995429][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'.
[  163.009261][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1506'.
[  163.026592][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'.
[  163.030523][T10945] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1507'.
[  163.033975][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'.
[  163.482828][T10991] syzkaller0: entered promiscuous mode
[  163.485015][T10991] syzkaller0: entered allmulticast mode
[  163.791282][T10993] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  163.871391][T10998] geneve1: default FDB implementation only supports local addresses
[  164.206543][T11016] wg1 speed is unknown, defaulting to 1000
[  164.273919][T11024] __nla_validate_parse: 7 callbacks suppressed
[  164.273936][T11024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1531'.
[  164.421929][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1535'.
[  164.500612][T11032] delete_channel: no stack
[  164.642828][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'.
[  164.821056][T11047] tipc: MTU too low for tipc bearer
[  164.960430][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  165.784322][T11063] netlink: 'syz.0.1546': attribute type 1 has an invalid length.
[  165.787250][T11063] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1546'.
[  165.792236][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'.
[  165.853068][T11076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1547'.
[  165.861703][T11076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.864075][T11076] IPv6: NLM_F_CREATE should be set when creating new route
[  165.866232][T11076] IPv6: NLM_F_CREATE should be set when creating new route
[  165.992416][T11086] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1550'.
[  166.037194][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1552'.
[  166.083604][T11094] netlink: 'syz.0.1551': attribute type 5 has an invalid length.
[  166.207580][T11107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.236288][T11107] syzkaller0: entered promiscuous mode
[  166.237937][T11107] syzkaller0: entered allmulticast mode
[  166.240908][T11107] tipc: Resetting bearer <eth:syzkaller0>
[  166.248476][T11106] tipc: Resetting bearer <eth:syzkaller0>
[  166.328737][T11117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'.
[  167.192587][T11106] tipc: Disabling bearer <eth:syzkaller0>
[  167.196779][T11115] ipvlan1: entered promiscuous mode
[  167.242821][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  167.390077][T11143] netlink: 'syz.1.1568': attribute type 178 has an invalid length.
[  167.752528][T11166] netlink: 'syz.0.1576': attribute type 178 has an invalid length.
[  167.811779][T11171] delete_channel: no stack
[  167.855369][T11175] netlink: 'syz.0.1579': attribute type 178 has an invalid length.
[  168.268535][T11209] wg1 speed is unknown, defaulting to 1000
[  168.699663][T11244] netlink: 'syz.0.1601': attribute type 178 has an invalid length.
[  168.782022][T11249] bridge5: entered allmulticast mode
[  168.839957][T11254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  168.861025][T11254] netlink: 'syz.2.1605': attribute type 178 has an invalid length.
[  169.091052][T11285] netlink: 'syz.1.1614': attribute type 178 has an invalid length.
[  169.178350][T11287] syz.0.1615: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  169.186553][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.0.1615 Not tainted syzkaller #0 PREEMPT(full) 
[  169.186565][T11287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.186570][T11287] Call Trace:
[  169.186574][T11287]  <TASK>
[  169.186578][T11287]  dump_stack_lvl+0x189/0x250
[  169.186594][T11287]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.186603][T11287]  ? __pfx__printk+0x10/0x10
[  169.186614][T11287]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  169.186624][T11287]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  169.186633][T11287]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  169.186643][T11287]  warn_alloc+0x214/0x310
[  169.186658][T11287]  ? __pfx_warn_alloc+0x10/0x10
[  169.186673][T11287]  ? __get_vm_area_node+0x28f/0x300
[  169.186684][T11287]  ? nf_tables_newset+0x132b/0x2530
[  169.186695][T11287]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  169.186717][T11287]  ? alloc_pages_mpol+0x3cd/0x4a0
[  169.186753][T11287]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  169.186766][T11287]  ? rcu_is_watching+0x15/0xb0
[  169.186775][T11287]  ? nf_tables_newset+0x132b/0x2530
[  169.186783][T11287]  ? nf_tables_newset+0x132b/0x2530
[  169.186791][T11287]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  169.186802][T11287]  ? nf_tables_newset+0x132b/0x2530
[  169.186810][T11287]  ? nft_table_lookup+0x211/0x230
[  169.186818][T11287]  ? nft_set_lookup+0x128/0x150
[  169.186828][T11287]  ? nft_hash_privsize+0x5f/0xf0
[  169.186836][T11287]  nf_tables_newset+0x132b/0x2530
[  169.186850][T11287]  ? __pfx_nf_tables_newset+0x10/0x10
[  169.186868][T11287]  ? __nla_parse+0x40/0x60
[  169.186883][T11287]  nfnetlink_rcv+0x1132/0x2520
[  169.186908][T11287]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  169.186925][T11287]  ? ref_tracker_free+0x63a/0x7d0
[  169.186948][T11287]  ? __netlink_deliver_tap+0x807/0x850
[  169.186960][T11287]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.186979][T11287]  netlink_unicast+0x82f/0x9e0
[  169.186994][T11287]  ? __pfx_netlink_unicast+0x10/0x10
[  169.187005][T11287]  ? netlink_sendmsg+0x642/0xb30
[  169.187010][T11287]  ? skb_put+0x11b/0x210
[  169.187020][T11287]  netlink_sendmsg+0x805/0xb30
[  169.187031][T11287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.187039][T11287]  ? aa_sock_msg_perm+0xf1/0x1d0
[  169.187047][T11287]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.187061][T11287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.187068][T11287]  __sock_sendmsg+0x21c/0x270
[  169.187080][T11287]  ____sys_sendmsg+0x505/0x830
[  169.187091][T11287]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.187103][T11287]  ? import_iovec+0x74/0xa0
[  169.187114][T11287]  ___sys_sendmsg+0x21f/0x2a0
[  169.187124][T11287]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.187148][T11287]  ? __fget_files+0x2a/0x420
[  169.187168][T11287]  ? __fget_files+0x3a0/0x420
[  169.187181][T11287]  __x64_sys_sendmsg+0x19b/0x260
[  169.187191][T11287]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.187204][T11287]  ? rcu_is_watching+0x15/0xb0
[  169.187213][T11287]  ? do_syscall_64+0xbe/0x3b0
[  169.187223][T11287]  do_syscall_64+0xfa/0x3b0
[  169.187229][T11287]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.187241][T11287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.187248][T11287]  ? exc_page_fault+0x9f/0xf0
[  169.187259][T11287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.187266][T11287] RIP: 0033:0x7f51f6f8eba9
[  169.187275][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.187283][T11287] RSP: 002b:00007f51f7ec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.187296][T11287] RAX: ffffffffffffffda RBX: 00007f51f71d5fa0 RCX: 00007f51f6f8eba9
[  169.187304][T11287] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  169.187309][T11287] RBP: 00007f51f7011e19 R08: 0000000000000000 R09: 0000000000000000
[  169.187315][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.187321][T11287] R13: 00007f51f71d6038 R14: 00007f51f71d5fa0 R15: 00007ffdc8aa2398
[  169.187338][T11287]  </TASK>
[  169.187451][T11287] Mem-Info:
[  169.310832][T11287] active_anon:5739 inactive_anon:0 isolated_anon:0
[  169.310832][T11287]  active_file:1331 inactive_file:38276 isolated_file:0
[  169.310832][T11287]  unevictable:1768 dirty:79 writeback:0
[  169.310832][T11287]  slab_reclaimable:9988 slab_unreclaimable:65124
[  169.310832][T11287]  mapped:18191 shmem:2421 pagetables:980
[  169.310832][T11287]  sec_pagetables:0 bounce:0
[  169.310832][T11287]  kernel_misc_reclaimable:0
[  169.310832][T11287]  free:265572 free_pcp:21840 free_cma:0
[  169.325023][T11287] Node 0 active_anon:14728kB inactive_anon:0kB active_file:3656kB inactive_file:23460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34420kB dirty:156kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.334439][T11287] Node 1 active_anon:8228kB inactive_anon:0kB active_file:1668kB inactive_file:129644kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38344kB dirty:160kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5384kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.336050][T11290] __nla_validate_parse: 9 callbacks suppressed
[  169.336060][T11290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1616'.
[  169.345470][T11287] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.360454][T11287] lowmem_reserve[]: 0 811 811 811 811
[  169.362120][T11287] Node 0 DMA32 free:261980kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14728kB inactive_anon:0kB active_file:3656kB inactive_file:23460kB unevictable:3536kB writepending:156kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:59300kB local_pcp:40192kB free_cma:0kB
[  169.373513][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  169.373789][T11287] lowmem_reserve[]: 0 0 0 0 0
[  169.377068][T11287] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.400246][T11287] lowmem_reserve[]: 0 0 854 854 854
[  169.401875][T11287] Node 1 Normal free:326332kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8024kB inactive_anon:0kB active_file:1668kB inactive_file:129644kB unevictable:3536kB writepending:160kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27416kB local_pcp:19196kB free_cma:0kB
[  169.411497][T11287] lowmem_reserve[]: 0 0 0 0 0
[  169.412981][T11287] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  169.423905][T11287] Node 0 DMA32: 0*4kB 3*8kB (E) 295*16kB (UME) 261*32kB (UME) 112*64kB (UME) 74*128kB (UME) 21*256kB (UME) 9*512kB (UM) 7*1024kB (UME) 3*2048kB (ME) 51*4096kB (M) = 261928kB
[  169.431878][T11287] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  169.437631][T11287] Node 1 Normal: 727*4kB (ME) 526*8kB (UME) 247*16kB (UME) 178*32kB (UME) 151*64kB (UME) 41*128kB (UME) 19*256kB (UME) 16*512kB (UME) 9*1024kB (ME) 9*2048kB (UME) 62*4096kB (UM) = 326332kB
[  169.445488][T11287] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.448988][T11287] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.452163][T11287] 42028 total pagecache pages
[  169.459002][T11287] 0 pages in swap cache
[  169.460362][T11287] Free swap  = 124996kB
[  169.461842][T11287] Total swap = 124996kB
[  169.465512][T11287] 786301 pages RAM
[  169.467199][T11287] 0 pages HighMem/MovableOnly
[  169.469336][T11287] 241343 pages reserved
[  169.471000][T11287] 0 pages cma reserved
[  169.522242][T11317] sctp: [Deprecated]: syz.2.1625 (pid 11317) Use of int in maxseg socket option.
[  169.522242][T11317] Use struct sctp_assoc_value instead
[  169.528740][T11317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1625'.
[  169.685890][T11337] netlink: 'syz.1.1630': attribute type 1 has an invalid length.
[  169.689859][T11337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.979913][T11372] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1644'.
[  170.209639][T11399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.283145][T11399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.342709][T11399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.350852][T11417] bridge_slave_0: default FDB implementation only supports local addresses
[  170.419034][T11399] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.486203][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.502540][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.518828][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.539115][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.064724][T11489] openvswitch: netlink: Message has 8 unknown bytes.
[  171.099636][T11497] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1684'.
[  171.103149][T11497] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1684'.
[  171.177784][T11506] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  171.221542][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'.
[  171.397243][T11532] netlink: 'syz.0.1696': attribute type 4 has an invalid length.
[  171.400354][T11528] netlink: 'syz.0.1696': attribute type 4 has an invalid length.
[  171.474380][T11538] wg1 speed is unknown, defaulting to 1000
[  171.507569][T11530] wg1 speed is unknown, defaulting to 1000
[  171.551297][T11545] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1695'.
[  171.811251][T11577] netlink: 'syz.0.1708': attribute type 11 has an invalid length.
[  171.918091][T11583] syzkaller0: entered promiscuous mode
[  171.920376][T11583] syzkaller0: entered allmulticast mode
[  171.927685][T11583] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  172.244962][T11608] netlink: 'syz.2.1720': attribute type 178 has an invalid length.
[  173.100665][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.103376][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.106012][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.108921][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.111635][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.115267][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.117846][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.120601][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.124145][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.126972][T11625] netlink: 'syz.2.1726': attribute type 178 has an invalid length.
[  173.198201][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'.
[  173.334068][T11643] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1732'.
[  173.719313][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1739'.
[  174.160050][T11643] delete_channel: no stack
[  174.202227][T11666] nbd: socks must be embedded in a SOCK_ITEM attr
[  174.209203][T11459] block nbd64: NBD_DISCONNECT
[  174.691782][T11684] __nla_validate_parse: 1 callbacks suppressed
[  174.691793][T11684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  174.731245][ T6197] IPVS: ip_vs_send_async error -101
[  174.750976][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1747'.
[  174.819049][T11694] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0
[  175.061077][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'.
[  175.159887][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'.
[  175.163786][T11710] openvswitch: netlink: EtherType 0 is less than min 600
[  175.310173][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.315408][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.319043][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.322574][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.328299][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.331914][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'.
[  175.420715][T11726] openvswitch: netlink: IP tunnel dst address not specified
[  175.427397][T11726] openvswitch: netlink: IP tunnel dst address not specified
[  175.510363][T11736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.737109][T11741] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.117815][T11768] wg1 speed is unknown, defaulting to 1000
[  176.305567][T11778] wg1 speed is unknown, defaulting to 1000
[  176.860052][T11814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.863330][T11814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.929418][T11814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.933006][T11814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.969543][T11831] ip_vti0: entered promiscuous mode
[  176.989768][T11814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.993057][T11814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.039874][T11814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.043430][T11814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.136601][ T5863] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.140072][ T5863] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.154028][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.157758][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.179074][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.181884][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.192920][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.197256][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.535754][T11863] Can't find ip_set type hah:net
[  177.718592][T11884] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.785735][T11891] wg1 speed is unknown, defaulting to 1000
[  177.795011][T11884] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  177.798620][T11884] bond3: (slave macvlan2): Enslaving as a backup interface with a down link
[  178.340653][T11942] validate_nla: 63 callbacks suppressed
[  178.340665][T11942] netlink: 'syz.1.1820': attribute type 178 has an invalid length.
[  178.423234][T11953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.460661][T11953] syzkaller0: entered promiscuous mode
[  178.462528][T11953] syzkaller0: entered allmulticast mode
[  178.464853][T11953] tipc: Resetting bearer <eth:syzkaller0>
[  178.489295][T11952] tipc: Resetting bearer <eth:syzkaller0>
[  178.550917][T11963] netlink: 'syz.0.1829': attribute type 178 has an invalid length.
[  179.080444][T11970] nbd: couldn't find device at index 536870912
[  179.082664][T11971] nbd: couldn't find device at index 536870912
[  179.819768][T11952] tipc: Disabling bearer <eth:syzkaller0>
[  179.855698][T11978] netlink: 'syz.2.1834': attribute type 1 has an invalid length.
[  179.879703][T11981] __nla_validate_parse: 86 callbacks suppressed
[  179.879715][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'.
[  179.895233][T11981] netlink: 'syz.0.1835': attribute type 178 has an invalid length.
[  179.942516][T11989] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1838'.
[  180.092635][T12010] tun0: tun_chr_ioctl cmd 1074025675
[  180.096715][T12010] tun0: persist enabled
[  180.098971][T12010] tun0: tun_chr_ioctl cmd 1074025675
[  180.101839][T12010] tun0: persist enabled
[  180.156348][T12013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1846'.
[  180.189009][T12015] tipc: New replicast peer: 0.0.0.0
[  180.191294][T12015] tipc: Enabled bearer <udp:syz2>, priority 10
[  180.206101][T12015] tipc: New replicast peer: 255.255.255.255
[  180.212253][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'.
[  180.320451][T12033] netem: change failed
[  180.413019][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'.
[  180.578152][T12057] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1862'.
[  180.682974][T12069] netlink: 'syz.2.1867': attribute type 10 has an invalid length.
[  180.687644][T12069] bond0: (slave wlan1): Opening slave failed
[  180.707725][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1868'.
[  180.711848][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1868'.
[  180.715508][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1868'.
[  180.718653][T12073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1868'.
[  180.757796][T12077] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  180.800114][T12080] delete_channel: no stack
[  180.803518][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  181.164410][T12125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.230091][T12134] netlink: 'syz.1.1888': attribute type 178 has an invalid length.
[  181.283135][T12137] bond0: entered promiscuous mode
[  181.288467][T12137] bond_slave_0: entered promiscuous mode
[  181.295182][T12137] batadv0: entered promiscuous mode
[  181.299025][T12137] 8021q: adding VLAN 0 to HW filter on device hsr1
[  181.304759][ T5887] tipc: Node number set to 2165155390
[  181.532110][T12162] openvswitch: netlink: IP tunnel TTL not specified.
[  182.020707][T12208] wg1 speed is unknown, defaulting to 1000
[  182.472054][T12266] netlink: 'syz.2.1921': attribute type 1 has an invalid length.
[  182.639580][T12286] netlink: 'syz.2.1925': attribute type 2 has an invalid length.
[  182.832716][T12299] netlink: 'syz.2.1930': attribute type 178 has an invalid length.
[  183.118637][T12316] netlink: 'syz.2.1936': attribute type 1 has an invalid length.
[  183.443182][T12342] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  183.661045][T12366] netlink: 'syz.0.1951': attribute type 178 has an invalid length.
[  183.699448][T12372] netlink: 'syz.0.1953': attribute type 5 has an invalid length.
[  183.704803][T12372] netlink: 'syz.0.1953': attribute type 178 has an invalid length.
[  183.810565][T12388] netlink: 'syz.0.1958': attribute type 14 has an invalid length.
[  184.074225][T12423] netlink: 'syz.0.1964': attribute type 1 has an invalid length.
[  184.077381][T12423] netlink: 'syz.0.1964': attribute type 2 has an invalid length.
[  185.138456][T12505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.670218][T12539] __nla_validate_parse: 111 callbacks suppressed
[  185.670230][T12539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1999'.
[  185.709384][T12542] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2000'.
[  185.997986][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2008'.
[  186.039608][T12565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2010'.
[  186.054187][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2011'.
[  186.151066][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'.
[  186.167344][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'.
[  186.175620][T12584] netlink: 'syz.2.2016': attribute type 178 has an invalid length.
[  186.192569][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'.
[  186.201462][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.231093][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.235805][T12590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.282127][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.287947][T12590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.339945][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.343116][T12590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.414780][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.417965][T12590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.430969][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'.
[  186.433957][T12609] geneve4: entered promiscuous mode
[  186.433982][T12609] geneve4: entered allmulticast mode
[  186.434831][ T5863] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55714 - 0
[  186.440586][ T5863] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 46052 - 0
[  186.444051][ T5863] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55714 - 0
[  186.446596][ T5863] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 46052 - 0
[  186.449991][ T5863] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55714 - 0
[  186.452521][ T5863] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 46052 - 0
[  186.457860][ T5863] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55714 - 0
[  186.461730][ T5863] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 46052 - 0
[  186.510478][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.516087][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.531228][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.534595][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.548805][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.554136][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.566860][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.570964][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.578897][T12618] wg1 speed is unknown, defaulting to 1000
[  186.642815][T12631] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  186.647023][T12631] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  186.889253][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'.
[  186.962727][T12660] netlink: 'syz.1.2039': attribute type 178 has an invalid length.
[  187.030268][T12679] wg1 speed is unknown, defaulting to 1000
[  187.122601][T12677] netlink: 'syz.0.2045': attribute type 2 has an invalid length.
[  187.130679][T12677] : entered promiscuous mode
[  187.314439][T12691] : renamed from vlan1 (while UP)
[  187.347595][T12697] netlink: 'syz.0.2051': attribute type 178 has an invalid length.
[  187.500729][   T33] audit: type=1107 audit(1758203082.924:6): pid=12714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  187.799984][T12762] netlink: 'syz.2.2065': attribute type 11 has an invalid length.
[  188.138280][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  188.216538][T12793] pimreg: entered allmulticast mode
[  189.046876][T12818] bridge: RTM_NEWNEIGH with invalid ether address
[  189.050283][T12818] validate_nla: 1 callbacks suppressed
[  189.050292][T12818] netlink: 'syz.0.2079': attribute type 178 has an invalid length.
[  189.093721][T12829] netlink: 'syz.2.2081': attribute type 10 has an invalid length.
[  189.096358][T12829] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  189.098991][T12829] bond0: (slave wlan1): Opening slave failed
[  189.602601][T12847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  189.649521][T12849] netlink: zone id is out of range
[  189.671104][T12852] netlink: 'syz.0.2087': attribute type 178 has an invalid length.
[  189.703862][T12857] netlink: 'syz.0.2090': attribute type 9 has an invalid length.
[  189.739092][T12857] netlink: 'syz.0.2090': attribute type 178 has an invalid length.
[  189.958485][T12869] netlink: 'syz.2.2091': attribute type 178 has an invalid length.
[  190.488199][T12927] netlink: 'syz.2.2110': attribute type 178 has an invalid length.
[  190.518031][T12917] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  190.556567][T12934] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  190.580223][T12934] bond4: entered promiscuous mode
[  190.582052][T12934] bond4: entered allmulticast mode
[  190.587821][T12934] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.752783][T12955] netlink: 'syz.0.2116': attribute type 1 has an invalid length.
[  190.768914][T12955] __nla_validate_parse: 32 callbacks suppressed
[  190.768932][T12955] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2116'.
[  190.880920][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2119'.
[  190.902376][T12966] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2121'.
[  190.908224][T12966] netlink: 'syz.2.2121': attribute type 178 has an invalid length.
[  191.037857][T12976] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2125'.
[  191.052604][T12976] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2125'.
[  191.478060][T13009] netlink: 'syz.1.2133': attribute type 178 has an invalid length.
[  191.689010][T13023] bond4: entered promiscuous mode
[  191.691017][T13023] bond4: entered allmulticast mode
[  191.693270][T13023] 8021q: adding VLAN 0 to HW filter on device bond4
[  192.016366][T13057] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2147'.
[  192.039348][T13062] macvlan1: entered allmulticast mode
[  192.040999][T13062] veth1_vlan: entered allmulticast mode
[  192.102840][T13066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'.
[  192.343141][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2159'.
[  192.428267][T13108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2162'.
[  192.590695][T13123] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2166'.
[  192.593621][T13123] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  192.646680][T13126] bond3: (slave macvlan2): Releasing backup interface
[  192.666257][T13126] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  193.257124][T13159] wg1 speed is unknown, defaulting to 1000
[  193.357061][T13164] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  193.646122][T13176] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  193.670224][T13176] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[  193.678816][T13176] bond3 (unregistering): Released all slaves
[  193.907963][T13212] sctp: [Deprecated]: syz.0.2197 (pid 13212) Use of int in max_burst socket option.
[  193.907963][T13212] Use struct sctp_assoc_value instead
[  194.878123][T13238] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  194.884934][T13243] block nbd1: not configured, cannot reconfigure
[  195.028204][T13254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.032510][T13254] syzkaller0: entered promiscuous mode
[  195.034503][T13254] syzkaller0: entered allmulticast mode
[  195.042137][T13254] tipc: Resetting bearer <eth:syzkaller0>
[  195.044630][T13254] validate_nla: 10 callbacks suppressed
[  195.044638][T13254] netlink: 'syz.1.2211': attribute type 178 has an invalid length.
[  195.132303][T13257] netlink: 'syz.1.2212': attribute type 178 has an invalid length.
[  195.617199][T13282] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.627264][T13282] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.642246][T13287] netlink: 'syz.0.2223': attribute type 1 has an invalid length.
[  196.147719][T13309] __nla_validate_parse: 11 callbacks suppressed
[  196.147733][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2231'.
[  196.207330][T13314] netlink: 'syz.0.2232': attribute type 178 has an invalid length.
[  196.296097][T13320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2234'.
[  196.311117][T13322] netlink: 'syz.0.2236': attribute type 29 has an invalid length.
[  196.542835][T13336] bond0: (slave gretap0): Opening slave failed
[  196.851480][T13357] netlink: 'syz.1.2249': attribute type 10 has an invalid length.
[  197.012128][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'.
[  197.016246][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2254'.
[  197.066946][T13376] sctp: [Deprecated]: syz.2.2255 (pid 13376) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.066946][T13376] Use struct sctp_sack_info instead
[  197.124597][T13379] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2257'.
[  197.819991][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'.
[  197.953156][T13444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2278'.
[  198.230085][T13460] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  198.263020][T13460] netlink: 'syz.1.2283': attribute type 4 has an invalid length.
[  198.273162][T13460] netlink: 'syz.1.2283': attribute type 4 has an invalid length.
[  198.298096][T13462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.301395][T13462] syzkaller0: entered promiscuous mode
[  198.303937][T13462] syzkaller0: entered allmulticast mode
[  198.335757][T13462] tipc: Resetting bearer <eth:syzkaller0>
[  198.352904][T13461] tipc: Resetting bearer <eth:syzkaller0>
[  198.379564][T13461] tipc: Disabling bearer <eth:syzkaller0>
[  198.534803][T13483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'.
[  198.539222][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'.
[  198.560213][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2291'.
[  198.616833][T13491] netlink: 'syz.2.2291': attribute type 4 has an invalid length.
[  198.636605][T13491] netlink: 'syz.2.2291': attribute type 4 has an invalid length.
[  198.726268][T13497] wg1 speed is unknown, defaulting to 1000
[  223.499110][T13530] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  223.703059][T13552] __nla_validate_parse: 2 callbacks suppressed
[  223.703075][T13552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2311'.
[  223.718996][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2309'.
[  223.722171][T13549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2309'.
[  223.800011][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'.
[  223.809280][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'.
[  223.957769][T13574] validate_nla: 2 callbacks suppressed
[  223.957792][T13574] netlink: 'syz.2.2321': attribute type 10 has an invalid length.
[  223.964418][T13574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2321'.
[  223.969533][T13574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.029755][T13582] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.046220][T13582] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2322'.
[  224.050086][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'.
[  224.054565][T13582] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2322'.
[  224.060462][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'.
[  224.217787][T13597] netlink: 'syz.2.2327': attribute type 167 has an invalid length.
[  224.507335][T13626] netlink: 'syz.2.2339': attribute type 178 has an invalid length.
[  224.577811][T13630] netlink: 'syz.2.2341': attribute type 178 has an invalid length.
[  224.613617][T13636] netlink: 'syz.1.2342': attribute type 11 has an invalid length.
[  224.731540][T13649] netlink: 'syz.1.2348': attribute type 8 has an invalid length.
[  224.742225][T13649] bridge5: entered allmulticast mode
[  224.759930][T13649] ip6tnl0: entered promiscuous mode
[  224.807804][T13655] netlink: 'syz.2.2350': attribute type 178 has an invalid length.
[  225.001190][T13666] bridge0: port 1(syz_tun) entered blocking state
[  225.024846][T13666] bridge0: port 1(syz_tun) entered disabled state
[  225.027712][T13666] syz_tun: entered allmulticast mode
[  225.030241][T13666] syz_tun: entered promiscuous mode
[  225.071114][T13687] : left promiscuous mode
[  225.148885][T13692] ip6tnl2: entered promiscuous mode
[  225.150733][T13692] ip6tnl2: entered allmulticast mode
[  225.153531][T13692] team0: Device ip6tnl2 is of different type
[  225.296104][T13705] netlink: 'syz.1.2367': attribute type 2 has an invalid length.
[  225.401131][T13715] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  225.445327][T13717] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  225.461153][T13717] CPU: 1 UID: 0 PID: 13717 Comm: syz.1.2369 Not tainted syzkaller #0 PREEMPT(full) 
[  225.461174][T13717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.461182][T13717] Call Trace:
[  225.461189][T13717]  <TASK>
[  225.461195][T13717]  dump_stack_lvl+0x189/0x250
[  225.461219][T13717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.461235][T13717]  ? __pfx__printk+0x10/0x10
[  225.461257][T13717]  ? kernfs_path_from_node+0x2f/0x290
[  225.461271][T13717]  ? kernfs_path_from_node+0x250/0x290
[  225.461282][T13717]  ? kernfs_path_from_node+0x2f/0x290
[  225.461297][T13717]  sysfs_warn_dup+0x8e/0xa0
[  225.461309][T13717]  sysfs_do_create_link_sd+0xc0/0x110
[  225.461325][T13717]  device_add_class_symlinks+0x1cf/0x240
[  225.461344][T13717]  device_add+0x475/0xb50
[  225.461390][T13717]  wiphy_register+0x1ba6/0x28d0
[  225.461423][T13717]  ? __pfx_wiphy_register+0x10/0x10
[  225.461440][T13717]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  225.461459][T13717]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  225.461475][T13717]  ieee80211_register_hw+0x3484/0x4100
[  225.461502][T13717]  ? ieee80211_register_hw+0x14b1/0x4100
[  225.461526][T13717]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  225.461542][T13717]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.461566][T13717]  ? __hrtimer_setup+0x187/0x210
[  225.461602][T13717]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  225.461623][T13717]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  225.461664][T13717]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  225.461685][T13717]  ? trace_kmalloc+0x1f/0xd0
[  225.461698][T13717]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  225.461716][T13717]  ? kstrndup+0xbf/0x160
[  225.461738][T13717]  hwsim_new_radio_nl+0xea4/0x1b10
[  225.461757][T13717]  ? __pfx___nla_validate_parse+0x10/0x10
[  225.461788][T13717]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  225.461817][T13717]  ? __nla_parse+0x40/0x60
[  225.461839][T13717]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  225.461862][T13717]  genl_family_rcv_msg_doit+0x215/0x300
[  225.461885][T13717]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  225.461911][T13717]  ? bpf_lsm_capable+0x9/0x20
[  225.461928][T13717]  ? security_capable+0x7e/0x2e0
[  225.461972][T13717]  genl_rcv_msg+0x60e/0x790
[  225.461992][T13717]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.462005][T13717]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  225.462032][T13717]  netlink_rcv_skb+0x208/0x470
[  225.462050][T13717]  ? __lock_acquire+0xab9/0xd20
[  225.462069][T13717]  ? __pfx_genl_rcv_msg+0x10/0x10
[  225.462085][T13717]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  225.462122][T13717]  ? down_read+0x1ad/0x2e0
[  225.462138][T13717]  genl_rcv+0x28/0x40
[  225.462151][T13717]  netlink_unicast+0x82f/0x9e0
[  225.462176][T13717]  ? __pfx_netlink_unicast+0x10/0x10
[  225.462195][T13717]  ? netlink_sendmsg+0x642/0xb30
[  225.462205][T13717]  ? skb_put+0x11b/0x210
[  225.462220][T13717]  netlink_sendmsg+0x805/0xb30
[  225.462240][T13717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.462254][T13717]  ? aa_sock_msg_perm+0xf1/0x1d0
[  225.462266][T13717]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.462279][T13717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.462292][T13717]  __sock_sendmsg+0x21c/0x270
[  225.462312][T13717]  ____sys_sendmsg+0x505/0x830
[  225.462333][T13717]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.462356][T13717]  ? import_iovec+0x74/0xa0
[  225.462404][T13717]  ___sys_sendmsg+0x21f/0x2a0
[  225.462421][T13717]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.462466][T13717]  ? __fget_files+0x2a/0x420
[  225.462478][T13717]  ? __fget_files+0x3a0/0x420
[  225.462499][T13717]  __x64_sys_sendmsg+0x19b/0x260
[  225.462516][T13717]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.462538][T13717]  ? do_user_addr_fault+0xc8a/0x1390
[  225.462560][T13717]  ? do_syscall_64+0xbe/0x3b0
[  225.462576][T13717]  do_syscall_64+0xfa/0x3b0
[  225.462586][T13717]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.462604][T13717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.462616][T13717]  ? exc_page_fault+0x9f/0xf0
[  225.462634][T13717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.462646][T13717] RIP: 0033:0x7f1341b8eba9
[  225.462659][T13717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.462669][T13717] RSP: 002b:00007f1342a43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.462688][T13717] RAX: ffffffffffffffda RBX: 00007f1341dd6090 RCX: 00007f1341b8eba9
[  225.462697][T13717] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  225.462705][T13717] RBP: 00007f1341c11e19 R08: 0000000000000000 R09: 0000000000000000
[  225.462713][T13717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.462720][T13717] R13: 00007f1341dd6128 R14: 00007f1341dd6090 R15: 00007ffe6dab0738
[  225.462743][T13717]  </TASK>
[  225.480953][T13715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.964127][T13767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.270116][T13788] netlink: 'syz.0.2388': attribute type 178 has an invalid length.
[  226.286579][T13788] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  226.291200][T13790] netlink: 'syz.1.2389': attribute type 178 has an invalid length.
[  226.412390][T13804] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  226.436909][T13806] wg1 speed is unknown, defaulting to 1000
[  227.559589][T13851] netlink: 'syz.0.2406': attribute type 1 has an invalid length.
[  229.000438][T13933] validate_nla: 1 callbacks suppressed
[  229.000453][T13933] netlink: 'syz.1.2435': attribute type 1 has an invalid length.
[  229.040240][T13933] bond5: entered promiscuous mode
[  229.042331][T13933] bond5: entered allmulticast mode
[  229.044903][T13933] 8021q: adding VLAN 0 to HW filter on device bond5
[  229.060893][T13933] bridge6: entered promiscuous mode
[  229.063223][T13933] bridge6: entered allmulticast mode
[  229.066042][T13933] bond5: (slave bridge6): Enslaving as a backup interface with an up link
[  229.105673][T13940] __nla_validate_parse: 21 callbacks suppressed
[  229.105688][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2437'.
[  229.111747][T13943] netlink: 'syz.2.2438': attribute type 178 has an invalid length.
[  229.114168][T13940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2437'.
[  229.143811][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  229.216231][T13955] netlink: 'syz.2.2441': attribute type 178 has an invalid length.
[  229.254006][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  229.308406][T13963] wg1 speed is unknown, defaulting to 1000
[  229.393152][T13968] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2444'.
[  229.407401][T13963] netlink: 'syz.2.2443': attribute type 2 has an invalid length.
[  229.562285][T13976] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2447'.
[  229.746441][T13983] wg1 speed is unknown, defaulting to 1000
[  229.902156][T14000] openvswitch: netlink: Multiple metadata blocks provided
[  229.937069][T14002] wg1 speed is unknown, defaulting to 1000
[  230.022400][T14008] tc_dump_action: action bad kind
[  230.051261][T14002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2456'.
[  230.421422][T14043] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2465'.
[  230.567172][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'.
[  230.567177][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'.
[  230.908216][T14093] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  231.059232][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2487'.
[  231.165874][T14126] lo: entered allmulticast mode
[  231.167961][T14126] lo: left allmulticast mode
[  231.241415][T14130] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  231.245734][T14130] tipc: Bearer <ib:lo>: trying with adjusted priority
[  231.247890][T14130] tipc: Enabling <ib:lo> not permitted
[  231.253404][T14130] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  231.257711][T14134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.261035][T14134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.336737][T14141] bond0: (slave gretap0): Opening slave failed
[  231.390270][T14148] sctp: [Deprecated]: syz.2.2501 (pid 14148) Use of int in maxseg socket option.
[  231.390270][T14148] Use struct sctp_assoc_value instead
[  232.407744][T14182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.432193][T14181] geneve3: entered promiscuous mode
[  232.437262][T14180] syzkaller0: entered allmulticast mode
[  232.438275][T14181] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2512'.
[  232.441941][ T6422] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.444656][ T6422] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.461478][ T6422] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.466882][T14180] tipc: Disabling bearer <eth:syzkaller0>
[  232.471294][ T6422] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.802324][T14226] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.808431][T14226] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 55714 - 0
[  232.811671][T14226] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 46052 - 0
[  232.852921][T14230] IPVS: persistence engine module ip_vs_pe_ not found
[  232.861723][T14226] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.875889][T14226] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 55714 - 0
[  232.885889][T14226] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 46052 - 0
[  232.938331][T14226] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.941403][T14226] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 55714 - 0
[  232.946155][T14226] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 46052 - 0
[  232.990978][T14226] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.994463][T14226] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 55714 - 0
[  232.997423][T14226] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 46052 - 0
[  233.054281][ T5863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 46052 - 0
[  233.057173][ T5863] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55714 - 0
[  233.060248][ T5863] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  233.069747][ T5863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 46052 - 0
[  233.072343][ T5863] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55714 - 0
[  233.075100][ T5863] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  233.083266][ T5863] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 46052 - 0
[  233.087906][ T5863] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55714 - 0
[  233.091037][ T5863] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  233.101199][ T5863] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 46052 - 0
[  233.104577][ T5863] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55714 - 0
[  233.107210][ T5863] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  233.490785][T14250] delete_channel: no stack
[  233.901200][T14279] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  234.167714][T14298] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  234.199889][T14300] __nla_validate_parse: 11 callbacks suppressed
[  234.199900][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'.
[  234.267352][T14302] netlink: 'syz.1.2548': attribute type 178 has an invalid length.
[  234.295899][T14305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2547'.
[  234.381949][T14310] wg1 speed is unknown, defaulting to 1000
[  234.468398][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'.
[  234.657205][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2558'.
[  234.732220][T14337] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2559'.
[  234.830121][T14349] netlink: 'syz.2.2564': attribute type 178 has an invalid length.
[  234.876759][T14354] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004
[  235.020461][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2568'.
[  235.621155][T14392] netlink: 'syz.1.2576': attribute type 1 has an invalid length.
[  235.753089][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  235.828334][T14408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.832606][T14408] netlink: 'syz.1.2582': attribute type 10 has an invalid length.
[  235.837188][T14408] team0: Cannot enslave team device to itself
[  235.957320][T14415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2585'.
[  236.027671][T14420] geneve0: entered promiscuous mode
[  236.313807][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2594'.
[  236.316645][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2594'.
[  236.343890][T14463] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  236.346579][T14463] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  236.817314][T14487] unknown channel width for channel at 909000KHz?
[  236.987245][T14500] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  237.322815][T14522] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.328675][T14522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.380864][T14522] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.387316][T14522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.438558][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.441257][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.447074][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.449855][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.455095][T14522] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.458125][T14522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.518874][T14522] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.523233][T14522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.602273][ T6422] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.608500][ T6422] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.637218][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.643261][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.648832][T14543] warn_alloc: 1 callbacks suppressed
[  237.648845][T14543] syz.0.2628: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  237.657066][T14543] CPU: 1 UID: 0 PID: 14543 Comm: syz.0.2628 Not tainted syzkaller #0 PREEMPT(full) 
[  237.657086][T14543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.657096][T14543] Call Trace:
[  237.657103][T14543]  <TASK>
[  237.657109][T14543]  dump_stack_lvl+0x189/0x250
[  237.657134][T14543]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.657152][T14543]  ? __pfx__printk+0x10/0x10
[  237.657173][T14543]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  237.657191][T14543]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  237.657209][T14543]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  237.657229][T14543]  warn_alloc+0x214/0x310
[  237.657252][T14543]  ? stack_depot_save_flags+0x40/0x860
[  237.657273][T14543]  ? __pfx_warn_alloc+0x10/0x10
[  237.657295][T14543]  ? kasan_save_track+0x4f/0x80
[  237.657313][T14543]  ? xskq_create+0x56/0x170
[  237.657332][T14543]  ? xsk_init_queue+0xb0/0x110
[  237.657349][T14543]  ? xsk_setsockopt+0x4dc/0x8d0
[  237.657364][T14543]  ? do_sock_setsockopt+0x17c/0x1b0
[  237.657378][T14543]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  237.657390][T14543]  ? do_syscall_64+0xfa/0x3b0
[  237.657401][T14543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.657452][T14543]  __vmalloc_node_range_noprof+0x125/0x12f0
[  237.657503][T14543]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  237.657525][T14543]  ? xskq_create+0x56/0x170
[  237.657546][T14543]  ? __kasan_kmalloc+0x93/0xb0
[  237.657567][T14543]  vmalloc_user_noprof+0xad/0xf0
[  237.657587][T14543]  ? xskq_create+0xbf/0x170
[  237.657605][T14543]  xskq_create+0xbf/0x170
[  237.657625][T14543]  xsk_init_queue+0xb0/0x110
[  237.657646][T14543]  xsk_setsockopt+0x4dc/0x8d0
[  237.657667][T14543]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.657686][T14543]  ? __pfx_aa_sk_perm+0x10/0x10
[  237.657710][T14543]  ? aa_sock_opt_perm+0xff/0x1b0
[  237.657726][T14543]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  237.657741][T14543]  ? __pfx_xsk_setsockopt+0x10/0x10
[  237.657761][T14543]  do_sock_setsockopt+0x17c/0x1b0
[  237.657780][T14543]  __x64_sys_setsockopt+0x13f/0x1b0
[  237.657799][T14543]  do_syscall_64+0xfa/0x3b0
[  237.657812][T14543]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.657831][T14543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.657845][T14543]  ? exc_page_fault+0x9f/0xf0
[  237.657867][T14543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.657880][T14543] RIP: 0033:0x7f51f6f8eba9
[  237.657894][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.657906][T14543] RSP: 002b:00007f51f7ec2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.657923][T14543] RAX: ffffffffffffffda RBX: 00007f51f71d5fa0 RCX: 00007f51f6f8eba9
[  237.657933][T14543] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  237.657943][T14543] RBP: 00007f51f7011e19 R08: 0000000000000004 R09: 0000000000000000
[  237.657952][T14543] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.657961][T14543] R13: 00007f51f71d6038 R14: 00007f51f71d5fa0 R15: 00007ffdc8aa2398
[  237.657985][T14543]  </TASK>
[  237.657991][T14543] Mem-Info:
[  237.679523][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.682361][T14543] active_anon:5560 inactive_anon:0 isolated_anon:0
[  237.682361][T14543]  active_file:1364 inactive_file:38301 isolated_file:0
[  237.682361][T14543]  unevictable:1768 dirty:132 writeback:0
[  237.682361][T14543]  slab_reclaimable:10302 slab_unreclaimable:66815
[  237.682361][T14543]  mapped:18415 shmem:2408 pagetables:940
[  237.682361][T14543]  sec_pagetables:0 bounce:0
[  237.682361][T14543]  kernel_misc_reclaimable:0
[  237.682361][T14543]  free:263344 free_pcp:20586 free_cma:0
[  237.688707][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.689380][T14543] Node 0 active_anon:14312kB inactive_anon:0kB active_file:3828kB inactive_file:23532kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35384kB dirty:388kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8176kB pagetables:1924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  237.690704][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.713575][T14543] Node 1 active_anon:7888kB inactive_anon:0kB active_file:1628kB inactive_file:129672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38304kB dirty:192kB writeback:0kB shmem:4768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5424kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  237.742070][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.745872][T14543] Node 0 
[  237.835091][T14544] netlink: 'syz.0.2628': attribute type 4 has an invalid length.
[  237.851614][T14543] DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  237.876115][T14546] wg1 speed is unknown, defaulting to 1000
[  237.885529][T14550] netlink: 'syz.0.2628': attribute type 4 has an invalid length.
[  237.889574][T14543] lowmem_reserve[]: 0 811 811 811 811
[  237.891475][T14543] Node 0 DMA32 free:280412kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14448kB inactive_anon:0kB active_file:3828kB inactive_file:23532kB unevictable:3536kB writepending:388kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:45384kB local_pcp:15076kB free_cma:0kB
[  237.905561][T14543] lowmem_reserve[]: 0 0 0 0 0
[  237.908744][T14543] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  237.920959][T14543] lowmem_reserve[]: 0 0 854 854 854
[  237.922622][T14543] Node 1 Normal free:290944kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7888kB inactive_anon:0kB active_file:1628kB inactive_file:129672kB unevictable:3536kB writepending:192kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36520kB local_pcp:19472kB free_cma:0kB
[  237.937451][T14543] lowmem_reserve[]: 0 0 0 0 0
[  237.939007][T14543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  237.942874][T14543] Node 0 DMA32: 1311*4kB (UME) 680*8kB (UM) 414*16kB (UME) 241*32kB (UME) 137*64kB (UME) 115*128kB (UME) 26*256kB (UME) 13*512kB (UM) 9*1024kB (UM) 2*2048kB (ME) 50*4096kB (M) = 279932kB
[  237.949670][T14543] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  237.958750][T14543] Node 1 Normal: 1300*4kB (UME) 302*8kB (UME) 390*16kB (UME) 163*32kB (UM) 112*64kB (UME) 16*128kB (UME) 8*256kB (UME) 5*512kB (M) 8*1024kB (ME) 6*2048kB (UME) 58*4096kB (UM) = 290944kB
[  237.965803][T14543] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  237.969414][T14543] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  237.972983][T14543] 42073 total pagecache pages
[  237.975034][T14543] 0 pages in swap cache
[  237.976466][T14543] Free swap  = 124996kB
[  237.978167][T14543] Total swap = 124996kB
[  237.979733][T14543] 786301 pages RAM
[  237.981050][T14543] 0 pages HighMem/MovableOnly
[  237.982689][T14543] 241343 pages reserved
[  237.984268][T14543] 0 pages cma reserved
[  238.650290][T14586] wg1 speed is unknown, defaulting to 1000
[  238.764071][T14587] netlink: 'syz.1.2641': attribute type 2 has an invalid length.
[  238.830124][T14593] openvswitch: netlink: Duplicate or invalid key (type 0).
[  238.833066][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.016119][T14604] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  239.307485][T14610] wg1 speed is unknown, defaulting to 1000
[  239.439209][T14628] __nla_validate_parse: 12 callbacks suppressed
[  239.439224][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'.
[  239.661031][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'.
[  239.806079][T14664] netlink: 'syz.2.2664': attribute type 1 has an invalid length.
[  239.809188][T14664] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2664'.
[  239.820001][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'.
[  239.841888][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2664'.
[  240.004755][T14672] sch_tbf: peakrate 4096 is lower than or equals to rate 185707055559232049 !
[  240.131693][T14678] netlink: 'syz.2.2670': attribute type 178 has an invalid length.
[  240.365078][T14691] netlink: 'syz.2.2673': attribute type 11 has an invalid length.
[  240.383616][T14691] netlink: 'syz.2.2673': attribute type 4 has an invalid length.
[  240.393543][T14691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2673'.
[  240.564223][T14708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2678'.
[  240.571287][T14708] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2678'.
[  240.578409][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2678'.
[  240.585753][T14712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2678'.
[  240.692540][T14732] netlink: 'syz.0.2683': attribute type 178 has an invalid length.
[  240.777830][T14742] netlink: 'syz.2.2687': attribute type 178 has an invalid length.
[  241.327320][T14764] netlink: 'syz.1.2691': attribute type 178 has an invalid length.
[  241.491851][T14779] netlink: 'syz.1.2695': attribute type 1 has an invalid length.
[  241.520934][T14779] 8021q: adding VLAN 0 to HW filter on device bond6
[  242.308643][T14823] netlink: 'syz.0.2709': attribute type 178 has an invalid length.
[  242.391071][T14837] netlink: 'syz.2.2716': attribute type 178 has an invalid length.
[  242.430980][T14839] netlink: 'syz.1.2718': attribute type 4 has an invalid length.
[  242.778833][T14898] nftables ruleset with unbound set
[  243.177080][T14944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.184550][T14944] syzkaller0: entered promiscuous mode
[  243.194663][T14944] syzkaller0: entered allmulticast mode
[  243.226698][T14944] tipc: Resetting bearer <eth:syzkaller0>
[  243.239658][T14944] tipc: Disabling bearer <eth:syzkaller0>
[  243.364318][T14951] batadv1: entered promiscuous mode
[  243.365988][T14951] batadv1: entered allmulticast mode
[  243.558665][T14972] syz_tun: mtu less than device minimum
[  243.680047][T14984] syzkaller0: entered promiscuous mode
[  243.681884][T14984] syzkaller0: entered allmulticast mode
[  243.749705][T14990] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  243.754391][T14990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.846632][T14990] bond7: (slave geneve4): making interface the new active one
[  243.850276][T14990] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  243.866570][ T5878] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  243.870450][ T5878] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  243.883640][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  243.902416][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  245.098559][T15027] validate_nla: 7 callbacks suppressed
[  245.098576][T15027] netlink: 'syz.0.2773': attribute type 178 has an invalid length.
[  245.799187][T15064] __nla_validate_parse: 15 callbacks suppressed
[  245.799197][T15064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2787'.
[  245.808157][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'.
[  245.832076][T15067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  246.059893][T15086] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  246.064420][T15086] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  246.138600][T15090] bridge_slave_0: left promiscuous mode
[  246.140577][T15090] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.148422][T15090] bridge_slave_1: left allmulticast mode
[  246.150204][T15090] bridge_slave_1: left promiscuous mode
[  246.152142][T15090] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.160247][T15090] bond0: (slave bond_slave_0): Releasing backup interface
[  246.166627][T15090] bond0: (slave bond_slave_1): Releasing backup interface
[  246.186093][T15090] team0: Port device team_slave_0 removed
[  246.195979][T15090] team0: Port device team_slave_1 removed
[  246.198911][T15090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.201866][T15090] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.207129][T15090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.210103][T15090] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.221724][T15090] bond3: (slave bridge2): Releasing active interface
[  246.231797][ T5901] wg1 speed is unknown, defaulting to 1000
[  246.292534][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2800'.
[  246.300891][T15102] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  246.304360][T15102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.420152][T15111] netlink: 'syz.1.2804': attribute type 2 has an invalid length.
[  246.522911][T15125] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2808'.
[  246.565982][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'.
[  246.712873][T15144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2814'.
[  246.857526][T15166] netlink: 'syz.1.2819': attribute type 178 has an invalid length.
[  246.859150][T15169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2820'.
[  246.919052][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'.
[  246.926151][T15176] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  247.007368][T15186] netlink: 'syz.2.2826': attribute type 1 has an invalid length.
[  247.036965][T15186] 8021q: adding VLAN 0 to HW filter on device bond5
[  247.238359][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'.
[  247.490755][T15241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2836'.
[  247.533840][ T5901] page_pool_release_retry() stalled pool shutdown: id 22, 3329 inflight 60 sec
[  247.849559][T15279] netlink: 'syz.1.2843': attribute type 178 has an invalid length.
[  248.256193][T15322] IPVS: Unknown mcast interface: pim6reg
[  248.259695][T15322] openvswitch: netlink: IPv4 tun info is not correct
[  248.264719][T15323] vlan3: entered promiscuous mode
[  248.266576][T15323] vlan3: entered allmulticast mode
[  248.268338][T15323] hsr_slave_1: entered allmulticast mode
[  248.294791][T15323] wg1 speed is unknown, defaulting to 1000
[  248.541860][T15342] openvswitch: netlink: Missing valid actions attribute.
[  248.551217][T15342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.559180][T15342] netlink: 'syz.2.2862': attribute type 178 has an invalid length.
[  248.577142][T15343] syz_tun: left allmulticast mode
[  248.578749][T15343] syz_tun: left promiscuous mode
[  248.580381][T15343] bridge0: port 1(syz_tun) entered disabled state
[  248.876761][T15371] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  249.072866][T15382] netlink: 'syz.2.2875': attribute type 1 has an invalid length.
[  249.174309][T15395] netlink: 'syz.0.2877': attribute type 178 has an invalid length.
[  249.986452][T15403] sctp: [Deprecated]: syz.1.2881 (pid 15403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.986452][T15403] Use struct sctp_sack_info instead
[  249.995534][T15403] sctp: [Deprecated]: syz.1.2881 (pid 15403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.995534][T15403] Use struct sctp_sack_info instead
[  250.008089][T15403] sctp: [Deprecated]: syz.1.2881 (pid 15403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  250.008089][T15403] Use struct sctp_sack_info instead
[  250.065620][T15414] netlink: 'syz.0.2883': attribute type 3 has an invalid length.
[  250.431920][T15439] netlink: 'syz.0.2888': attribute type 178 has an invalid length.
[  250.469585][T15441] netlink: 'syz.1.2890': attribute type 178 has an invalid length.
[  250.472863][T15441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.477498][T15441] netlink: 'syz.1.2890': attribute type 2 has an invalid length.
[  250.491816][T15441] k*]: entered promiscuous mode
[  250.635945][T15456] netlink: 'syz.0.2893': attribute type 4 has an invalid length.
[  250.762088][T15467] openvswitch: netlink: Message has 4 unknown bytes.
[  250.872004][T15481] __nla_validate_parse: 7 callbacks suppressed
[  250.872015][T15481] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2901'.
[  250.884258][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.889115][T15483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2902'.
[  250.932530][T15485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2903'.
[  250.989318][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'.
[  251.045207][T10087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.078754][T15491] veth1_vlan (unregistering): left allmulticast mode
[  251.189803][T15501] netlink: 'syz.2.2908': attribute type 12 has an invalid length.
[  251.195676][T15499] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  251.391776][T15517] tc_dump_action: action bad kind
[  251.400305][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'.
[  251.585939][T15525] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  251.589165][T15525] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2914'.
[  251.870469][T15535] wg1 speed is unknown, defaulting to 1000
[  251.909077][T15536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'.
[  251.923751][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.207638][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'.
[  252.214136][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2920'.
[  252.226195][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'.
[  252.232138][T15554] netlink: 'syz.2.2921': attribute type 1 has an invalid length.
[  252.302399][T15559] netlink: 'syz.2.2922': attribute type 178 has an invalid length.
[  252.435061][T15584] netlink: 'syz.1.2927': attribute type 12 has an invalid length.
[  252.644316][T15610] netlink: 'syz.2.2938': attribute type 4 has an invalid length.
[  252.874575][T15642] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.879218][T15642] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  252.892519][T15644] sctp: [Deprecated]: syz.2.2947 (pid 15644) Use of int in max_burst socket option.
[  252.892519][T15644] Use struct sctp_assoc_value instead
[  252.937802][T15642] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.951870][T15642] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  252.965945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.972432][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.976211][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.039135][T15642] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.043116][T15642] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  253.100844][T15642] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.104234][T15642] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  253.156648][ T5863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  253.160048][ T5863] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  253.175918][ T5863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  253.178576][ T5863] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  253.187982][ T5863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  253.191389][ T5863] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  253.210397][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  253.215119][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  254.003500][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.159353][T15742] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  254.235928][T15748] bridge6: entered promiscuous mode
[  254.238078][T15748] bridge6: entered allmulticast mode
[  254.255028][ T8955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.539991][T15776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.736345][T15796] wg1 speed is unknown, defaulting to 1000
[  254.845984][T15808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.859389][T15808] syzkaller0: entered promiscuous mode
[  254.861725][T15808] syzkaller0: entered allmulticast mode
[  254.876312][T15808] tipc: Resetting bearer <eth:syzkaller0>
[  254.900865][T15807] tipc: Resetting bearer <eth:syzkaller0>
[  254.926952][T15807] tipc: Disabling bearer <eth:syzkaller0>
[  255.271881][T15829] 8021q: adding VLAN 0 to HW filter on device bond9
[  255.316872][T15829] bond9: (slave veth11): Enslaving as an active interface with a down link
[  255.454341][T15829] macvlan3: entered promiscuous mode
[  255.456830][T15829] macvlan3: entered allmulticast mode
[  255.460381][T15829] bond9: entered promiscuous mode
[  255.463613][T15829] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  255.466636][T15829] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  255.472275][T15829] bond9: left promiscuous mode
[  255.723956][T15852] validate_nla: 9 callbacks suppressed
[  255.723974][T15852] netlink: 'syz.1.3013': attribute type 178 has an invalid length.
[  256.083820][    C0] net_ratelimit: 5 callbacks suppressed
[  256.083836][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.114180][T15876] __nla_validate_parse: 14 callbacks suppressed
[  256.114191][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'.
[  256.164233][T10087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.224350][T15883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3023'.
[  256.237941][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'.
[  256.389899][T15896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3025'.
[  257.123670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.135447][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  257.252310][T15938] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3038'.
[  257.284516][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.681697][T15949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3043'.
[  257.719836][T15952] netlink: 'syz.2.3044': attribute type 178 has an invalid length.
[  257.811168][T15961] netlink: 'syz.1.3049': attribute type 178 has an invalid length.
[  257.885782][T15965] wg1 speed is unknown, defaulting to 1000
[  257.904948][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'.
[  258.067972][T15974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3051'.
[  258.070776][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3051'.
[  258.074062][T15974] tipc: Started in network mode
[  258.075662][T15974] tipc: Node identity fffffe01, cluster identity 64
[  258.077719][T15974] tipc: Node number set to 4294966785
[  258.079877][T15974] tipc: Cannot configure node identity twice
[  258.163733][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.199405][ T5878] tipc: Left network mode
[  258.219710][T16004] netlink: 'syz.1.3060': attribute type 178 has an invalid length.
[  258.576101][T16055] netlink: 'syz.1.3077': attribute type 1 has an invalid length.
[  259.203616][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.309528][T16096] netlink: 'syz.1.3088': attribute type 178 has an invalid length.
[  259.310417][T16102] netlink: 'syz.2.3090': attribute type 178 has an invalid length.
[  259.399431][T16111] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  259.403915][T16111] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  259.407367][T16111] CPU: 0 UID: 0 PID: 16111 Comm: syz.0.3094 Not tainted syzkaller #0 PREEMPT(full) 
[  259.411606][T16111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.415360][T16111] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  259.417494][T16111] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 06 1a 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 cf 1a 01 f8 4d 89 3e
[  259.424720][T16111] RSP: 0018:ffffc90009fff0e0 EFLAGS: 00010246
[  259.427034][T16111] RAX: 0000000000000000 RBX: 1ffff110055e8e36 RCX: dffffc0000000000
[  259.430018][T16111] RDX: ffffc90003501000 RSI: 0000000000000225 RDI: 0000000000000226
[  259.432952][T16111] RBP: ffffc90009fff230 R08: ffff888033dbb980 R09: 0000000000000002
[  259.435809][T16110] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.435905][T16111] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110055e8e36
[  259.439149][T16110] syzkaller0: entered promiscuous mode
[  259.441300][T16111] R13: ffff88802af471b0 R14: 0000000000000000 R15: ffff88802af471a8
[  259.441318][T16111] FS:  00007f51f7ec26c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  259.441331][T16111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.441341][T16111] CR2: 0000000000000000 CR3: 00000000280b2000 CR4: 00000000000006f0
[  259.441372][T16111] Call Trace:
[  259.443805][T16110] syzkaller0: entered allmulticast mode
[  259.446665][T16111]  <TASK>
[  259.446678][T16111]  ? xfrm_alloc_spi+0x2a0/0xf30
[  259.446708][T16111]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  259.446747][T16111]  ? xfrm_find_acq+0x87/0xa0
[  259.465683][T16111]  xfrm_alloc_userspi+0x70b/0xc90
[  259.467638][T16111]  ? apparmor_capable+0x137/0x1b0
[  259.469607][T16111]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  259.471763][T16111]  ? __nla_parse+0x40/0x60
[  259.473511][T16111]  xfrm_user_rcv_msg+0x7a3/0xab0
[  259.475438][T16111]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  259.477560][T16111]  ? __pfx___mutex_trylock_common+0x10/0x10
[  259.479812][T16111]  ? rcu_is_watching+0x15/0xb0
[  259.481637][T16111]  ? trace_contention_end+0x39/0x120
[  259.483629][T16111]  ? __mutex_lock+0x335/0x1350
[  259.485515][T16111]  netlink_rcv_skb+0x208/0x470
[  259.487391][T16111]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  259.489496][T16111]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  259.491555][T16111]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.493570][T16111]  ? netlink_deliver_tap+0x2e/0x1b0
[  259.495548][T16111]  xfrm_netlink_rcv+0x79/0x90
[  259.497336][T16111]  netlink_unicast+0x82f/0x9e0
[  259.499170][T16111]  ? __pfx_netlink_unicast+0x10/0x10
[  259.501207][T16111]  ? netlink_sendmsg+0x642/0xb30
[  259.503168][T16111]  ? skb_put+0x11b/0x210
[  259.504792][T16111]  netlink_sendmsg+0x805/0xb30
[  259.506638][T16111]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.508641][T16111]  ? aa_sock_msg_perm+0xf1/0x1d0
[  259.510563][T16111]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  259.512603][T16111]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.514603][T16111]  __sock_sendmsg+0x21c/0x270
[  259.516439][T16111]  ____sys_sendmsg+0x505/0x830
[  259.518263][T16111]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.520298][T16111]  ? import_iovec+0x74/0xa0
[  259.522082][T16111]  ___sys_sendmsg+0x21f/0x2a0
[  259.523880][T16111]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.525914][T16111]  ? __fget_files+0x2a/0x420
[  259.527703][T16111]  ? __fget_files+0x3a0/0x420
[  259.529556][T16111]  __x64_sys_sendmsg+0x19b/0x260
[  259.531471][T16111]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  259.533587][T16111]  ? rcu_is_watching+0x15/0xb0
[  259.535456][T16111]  ? do_syscall_64+0xbe/0x3b0
[  259.537281][T16111]  do_syscall_64+0xfa/0x3b0
[  259.539052][T16111]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.541088][T16111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.543466][T16111]  ? exc_page_fault+0x9f/0xf0
[  259.545282][T16111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.547550][T16111] RIP: 0033:0x7f51f6f8eba9
[  259.549278][T16111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.556555][T16111] RSP: 002b:00007f51f7ec2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.559782][T16111] RAX: ffffffffffffffda RBX: 00007f51f71d5fa0 RCX: 00007f51f6f8eba9
[  259.562877][T16111] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000008
[  259.565880][T16111] RBP: 00007f51f7011e19 R08: 0000000000000000 R09: 0000000000000000
[  259.568941][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.572033][T16111] R13: 00007f51f71d6038 R14: 00007f51f71d5fa0 R15: 00007ffdc8aa2398
[  259.575103][T16111]  </TASK>
[  259.576307][T16111] Modules linked in:
[  259.578017][T16111] ---[ end trace 0000000000000000 ]---
[  259.580061][T16111] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  259.582191][T16111] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 06 1a 01 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 cf 1a 01 f8 4d 89 3e
[  259.589673][T16111] RSP: 0018:ffffc90009fff0e0 EFLAGS: 00010246
[  259.591985][T16111] RAX: 0000000000000000 RBX: 1ffff110055e8e36 RCX: dffffc0000000000
[  259.595079][T16111] RDX: ffffc90003501000 RSI: 0000000000000225 RDI: 0000000000000226
[  259.598114][T16111] RBP: ffffc90009fff230 R08: ffff888033dbb980 R09: 0000000000000002
[  259.601140][T16111] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110055e8e36
[  259.604258][T16111] R13: ffff88802af471b0 R14: 0000000000000000 R15: ffff88802af471a8
[  259.607322][T16111] FS:  00007f51f7ec26c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  259.610533][T16111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.613055][T16111] CR2: 0000000000000000 CR3: 00000000280b2000 CR4: 00000000000006f0
[  259.616195][T16111] Kernel panic - not syncing: Fatal exception in interrupt
[  259.619655][T16111] Kernel Offset: disabled
[  259.621342][T16111] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:45:55  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be405 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001383 RDI=0000000000001384 RBP=ffffc90009ffea50 RSP=ffffc90009ffe878
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854f4630
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f46a7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f51f7ec26c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=00000000280b2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f51f71a7498 00007f51f71a7470 XMM03=00007f51f71a74a8 00007f51f71a74a0
XMM04=00007f51f7d0d100 00007f51f71a7460 XMM05=00007f51f71a7478 00007f51f71a74c0
XMM06=00007f51f71a74b8 00007f51f71a74b0 XMM07=00007f51f71a74a8 00007f51f71a74a0
XMM08=0000000000000000 00007f51f7012ee7 XMM09=0000000000000000 00007f51f7012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff820c1f28 RBX=ffffea0000835c00 RCX=ffff8881098a9cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000390f360
R8 =ffffea0000835c37 R9 =1ffffd4000106b86 R10=dffffc0000000000 R11=fffff94000106b87
R12=0000000000012a48 R13=dffffc0000000000 R14=ffffea0000835c00 R15=0000000000000000
RIP=ffffffff81bfae58 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555587d02500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559e7acbb000 CR3=000000010dfdc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000016c08 168c030100000204
XMM02=0000000000a80005 0000004c00000000 XMM03=0000006d69737665 6474656e0001000e
XMM04=0000306d69737665 6474656e0002000f XMM05=0100100015800401 0000000806060159
XMM06=f000080015e00300 100015d003001000 XMM07=15c00302100015b0 0378100013900300
XMM08=00306d6973766564 74656e0002000f00 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
