last executing test programs:

15.654529388s ago: executing program 1 (id=7810):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000000000000004000000020008000800e800540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa000000000000200002000100007f39a94700000000ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x4)
r1 = socket(0x1d, 0x2, 0x6)
getpeername$packet(r1, 0x0, 0x0)
getsockname$qrtr(r1, &(0x7f0000000000), &(0x7f0000000100)=0xc)

15.59443212s ago: executing program 1 (id=7812):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x40)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r3, 0x8918, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000015000100fdffffff0000000002180000", @ANYRES32=r7, @ANYBLOB="14005b36cc45d5987b03007665746830000000000000000000a10008000100ac141412399fb216e0f00374ff66d8c64c9a44b6cd29be9e4db707227c7e6904a51ecc330e3267860a26e3f5f1eca12288af4ebe02"], 0x34}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x3, [0x9, 0x5, 0x7ff]}})
socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2)
mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0x12504000)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000002030102000000000000000003000000080001000200000b080005400000070000000000000000090900020000000ca502000000"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8040)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012cbd7000fedbdf1401000000080002000200000008000100000000000800020002003e03c6e002000200000008000100020000000800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)

15.484504632s ago: executing program 1 (id=7814):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000600)=""/249}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0100001000010000000008000000000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000001c00170000000000000000000000000000000010000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d00feffffff"], 0x15c}}, 0x0)

15.480066178s ago: executing program 1 (id=7816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @broadcast}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd}, 0x90)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84100900}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getsa={0x28, 0x12, 0x200, 0x70bd27, 0x25dfdbfc, {@in6=@local, 0x4d6, 0x2, 0x3c}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x31, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21)
r4 = socket$key(0xf, 0x3, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @mss={0x2, 0x4}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @md5sig={0x13, 0xfffffffffffffe8f, "2b58ea71e70b7ec40843c97fb62cd171"}]}}}}}}}, 0x0)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000000000000004000000020008000800e800540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa000000000000200002000100007f39a94700000000ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x4)

15.415210067s ago: executing program 1 (id=7818):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0xb701, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0), 0xc)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000000000000004000000020008000800e800540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa000000000000200002000100007f39a94700000000ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x4)

15.414197566s ago: executing program 1 (id=7820):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000640)="b777cc56fa159ef3e22f7f70be5915b917cc93487277717ee16e5fe9b2deda98be6c145849149c10abdb6f317648accbc58fc3a6fedd6c917a0bee7958dc498c9d21874a2daf353e694263f55c0de3af5a5774492013bab1cf7c096f5155ce9bffc17082d015592620861449006537c649a34b3848a0c9cf609c21b1be1687ee9846bf39b655939695793ed589f02204f0cf0000000022ebd3dda625d99c06430a946f2647c03ed6371a779d2eb7e95ebd1ccaf9aac5c4f23fe5d7af3c5ae0706e66112bd3f13971cc47d56264e6559522635648a943c2daa9d6a53d496720093e70")
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4ef6}]}, 0x2c}}, 0x4000040) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xc}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000180)=0x4, 0x4) (async)
shutdown(0xffffffffffffffff, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000a98ca430ce66dd9e3600fcdbdf252400000018000180140002006970365f767469"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r7) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='dlm_unlock_end\x00', 0xffffffffffffffff, 0x0, 0x42}, 0x18) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/85, 0x328000, 0x1000, 0x8}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(0x0, r11)

2.083386795s ago: executing program 0 (id=8016):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x1, 0x4000084)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000300)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0xff05, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0xff05, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], <r7=>0x0, 0x75, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000a0f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400e3ffb6030000000000008500000083000000bf0900000000000055090500000000009500000000000000043d05000500000018440000000000000000000000000000bf91000000000000b7020000020000008500000084001c00b708000000000000950000f2ff000000"], &(0x7f0000000800)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x80, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x4, 0x9, 0x9}, {0x80000001, 0x4, 0x3, 0x7}, {0x3, 0x5, 0x41, 0xa}], 0x10, 0x100}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000a0f000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400e3ffb6030000000000008500000083000000bf0900000000000055090500000000009500000000000000043d05000500000018440000000000000000000000000000bf91000000000000b7020000020000008500000084001c00b708000000000000950000f2ff000000"], &(0x7f0000000800)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x80, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x4, 0x9, 0x9}, {0x80000001, 0x4, 0x3, 0x7}, {0x3, 0x5, 0x41, 0xa}], 0x10, 0x100}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000b00)='hsr0\x00', 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a00)={<r11=>r1, 0xf41, 0xa7, 0x4})
bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) (async)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1f, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000200000000000006000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000045680c0009000000a19800000100000018120000", @ANYRES32=r3, @ANYBLOB="000000000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2f, r6, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x4, &(0x7f0000000a80)=[r9, 0xffffffffffffffff, r10, r11, r12], &(0x7f0000000ac0)=[{0x1, 0x3, 0xc, 0x1}, {0x1, 0x4, 0x10, 0x5}, {0x3, 0x5, 0xe, 0x4}, {0x1, 0x4, 0x0, 0x9}], 0x10, 0x5}, 0x94)

1.192572594s ago: executing program 0 (id=8030):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300021100000000000000000000000200080008000000a30000040000000000000000000000000a00000000000000fc020000000000000000000000050000000000000000000002000100000000000009000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000"], 0x88}, 0x1, 0x7}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESDEC=r6, @ANYRES16=r6], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='ext4_ext_convert_to_initialized_fastpath\x00', r8}, 0x18)
ppoll(&(0x7f0000000500)=[{r7, 0x8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0)
listen(r3, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
poll(0x0, 0x0, 0x229d)
accept4$tipc(r3, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f03ec543bbbefc83c046d3b76914551", @ANYRES8=r2, @ANYRES8=r2], 0xfc}}, 0x0)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r9, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, 0x24)

1.191458814s ago: executing program 2 (id=8031):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.190360971s ago: executing program 2 (id=8032):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x510, 0xffffffff, 0x150, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x440, 0x440, 0x440, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@remote, @private1, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 'netdevsim0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x9}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x5], 0x400000, 0x31, 0x3}}, @common=@dst={{0x48}, {0x1, 0x7, 0x1, [0x4, 0xe70, 0x8, 0x5, 0x1, 0x5, 0x3, 0x2, 0x8b, 0x3, 0x8, 0x2815, 0x9, 0xebba, 0xe, 0x5], 0xa}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x1, 0x47e9}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff, 0xff], [0xffffff00, 0xff, 0x0, 0xffffffff], 'ip6gretap0\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0xf, 0x5}, 0x0, 0x1d0, 0x1f8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x8000, 'bm\x00', "8b81fac593dfc55f1992f562353f01f011a2c2bb5ccb7020dfa012bb82d02b279d940be874451a6799b72a8b6d6f8635bf3cad58e515890bd038389d96bd9747feb90e3671341c6372a104d09f7e6fbd20c46d00a2cd12166474600be00cf682e4e217dbb9c429d12d13a906376d963f5a53725a9606d60a6a15b7397c13a069", 0x38, 0x1, {0x7}}}, @common=@inet=@iprange={{0x68}, {@ipv6=@remote, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@rand_addr=' \x01\x00', 0x30}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1c, 0x40, 0x1}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

1.123024783s ago: executing program 2 (id=8033):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5db9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xc, 0x9, 0xa, 0x8, 0x1}, @generic={0xd7, 0x5, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ed9, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x43, &(0x7f0000000100)=""/67, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xd, 0x9, 0x3}, 0x10, 0x14cf6, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x3, 0x9, 0xb}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x32, 0xb7, &(0x7f0000000340)="e8dfddc759069baede0092f8d708cef0270ef26db8c32d4dc26562ffc6999af0121a93cd0309f3723ecd87d07ba12ec2f466", &(0x7f0000000380)=""/183, 0x4, 0x0, 0x9c, 0x6b, &(0x7f0000000440)="6c081b56f7e89ea87c570e73c6b16308ef12da75ab33f9e37e39b7210a69b8c7e03ef651f7f40c8c3aacdf56a1b29ddd227d3f9cbf06d6083531fdc53f14d6c9eaac00a177e3e221bd076cb008cc4a1bd07e9896db3238acc12bcf0f5070170ef63fb3f5732f829bcf2b05187391e33a2b7e29db3b15154e934d113a44b4e8fb3400d5706b9787603ad29cc5b53901138d28e702ebea6f8c3b5ca62d", &(0x7f0000000500)="38a68d9f645741b45b4ad87e38a8c6da70a9028be4ccbf81b88f08a29d2f3a646705826c1fda51d8f481667fbde3fcbffe01b4d522cb344165629b40e9f13aecbd4d4642c5d2652e1c20c5267a079a48f0f0411ec03ba8c60804d3a7c0948adc078ca2e941069574be96ae", 0x2, 0x0, 0x81}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0xd, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @generic={0x0, 0x0, 0x8, 0x8, 0x2}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x9, 0x5, 0xa}, 0x10, 0x0, r0, 0x2, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x3, 0x3, 0xa, 0x2}, {0x5, 0x4, 0x2, 0x3}], 0x10, 0x6}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000900)={r1, r2}, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000940), r3)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000b80)={@mcast1, <r4=>0x0}, &(0x7f0000000bc0)=0x14)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x5f, 0x5f, 0x61]}}, &(0x7f0000000c40)=""/95, 0x2d, 0x5f, 0x1, 0xd7, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r0, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d80)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0], <r7=>0x0, 0xce, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0xa, 0x1f, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x51}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x8, 0xbe, &(0x7f0000000ac0)=""/190, 0x40f00, 0x0, '\x00', r4, @fallback=0x29, r5, 0x8, &(0x7f0000000d00)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0x7, 0x2, 0x9}, 0x10, r7, r1, 0x4, &(0x7f0000001080)=[r2, 0xffffffffffffffff, r2, r2], &(0x7f00000010c0)=[{0x3, 0x4, 0xe, 0x4}, {0x1, 0x4, 0x10, 0x7}, {0x1, 0x4, 0x7, 0x4}, {0x3, 0x5, 0x9, 0xb}], 0x10, 0x61d}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001200)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000001, 0x62}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x20000081)
sendmsg$inet(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001300)="0d9a86d4bc22c7e8ccfb130554ee3e6ddad49e6710463b03ec93f918551d268ad23c8a6c7eefd5c1fa5e01190a92088183cf946f5d1112d6ae45da746b608eb711ecdafff622a868107a7a08c397caef8d4e20b04c6d0f6b0aab1ca924f2297dd2a615016f6e0c7b995bdd743edbbbe053b944e20cd8dd3d618e67e4f8a3e1f99b51b9e3d8", 0x85}], 0x1}, 0x20044810)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f0000001440)={'filter\x00', 0xbf, "da567f32543fc2de72e9a4998ad88e8ced63365cd1c18cd009e7e0cf55e475c9f2789702d9c9aa2a0c27600624858c1518725b02d96225c2f1374814e2f43adf17f793556d9713e44f7d30b6f22c9d89c64fb644adeaffb46d44493f9941494a68b24e3c0378badadce3cce60ce574ebd051b76284f951160877f1fd05521e7ec913341791da05d4589a44f161d8af78afb92f84218a32abacd0a397d2e768c4bce46ce430603044472e77fd2d1104d0f19d9ba57aa89a97f082cd32f77801"}, &(0x7f0000001540)=0xe3)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001580), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r10, 0x102, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x30}}, 0xc005)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f0000001700))
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r12, &(0x7f0000001740)={0xa, 0x4e20, 0x7339, @loopback, 0x7}, 0x1c)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={0x1, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x6, '\x00', r6, r5, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_lsm={0x1d, 0xe, &(0x7f00000017c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}], &(0x7f0000001840)='syzkaller\x00', 0x5, 0x60, &(0x7f0000001880)=""/96, 0x41100, 0x20, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000001900)={0x0, 0x101}, 0x8, 0x10, 0x0, 0x0, r7, 0x0, 0x1, &(0x7f00000019c0)=[r2, r14], &(0x7f0000001a00)=[{0x4, 0x5, 0xb, 0x5}], 0x10, 0x9}, 0x94)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r3)
sendmsg$IPVS_CMD_DEL_DAEMON(r15, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x54, r16, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008001)
bind$rose(0xffffffffffffffff, &(0x7f0000001cc0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)

1.121243235s ago: executing program 2 (id=8034):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe4a}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xfd2b, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_MODE={0x0, 0x2, {0x2, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x0, 0x6, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r4], 0x9c}}, 0x40)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
socket(0xa, 0x3, 0x3a) (async)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x8]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0x7fff, 0xfffffffe, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}}, 0x4020000)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/523], 0x290)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @loopback}}]}, 0x110)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

953.068088ms ago: executing program 2 (id=8035):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r2=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x58, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x58}}, 0x440c0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe6bd}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

272.693931ms ago: executing program 0 (id=8036):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r2, @ANYBLOB="0b12050000000000180012800b00010069703667726500000800028004001200"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000fc0000630134000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@dev, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00 \x00\x00\x00\x007'], 0x20)
accept4(r3, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000480)=0x80, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000a2000000000000001d007110b9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f00000004c0)={0x4d, 0x7, 0x7, 0x9, 0x9})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01d9bfc012398e9e3fc300268fb781cf735683f6e04d210d0003002c081456b28b58e057c1015e4364eb213dac7de885a4516c65f990b603a2133a79d153bf874794e14e2e44406498caff410c08a037e4cab4d55dcdce95d2cc95b597e3042d1522224db0e2132d3f14128ee502c73c8c45be7266dee35b221d0cb3c0b865baf7068331503ffcf4a71c3d304523109994a5248832f66dcdd88a2b52a4ac6f460a9b7c23f9bab2d2248ce82b0039cbc2b1be3494b2e0fa355770e979032b092747a49e76192f0be04205433f3b7a50c6177a5e7596ba0459a46f0d9b00"/230, @ANYRES32=0x0, @ANYBLOB="0c009900090000007f000000040093000400010108003500050000000a0006005d3b74be553b0000080022015c00000008009f0005000000080022010c0000000800a00000000040040046000400d00004000101"], 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x4044404)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x15c, 0x10, 0x1, 0x8000004, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}]}, 0x15c}}, 0x0)

271.696681ms ago: executing program 32 (id=7820):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000640)="b777cc56fa159ef3e22f7f70be5915b917cc93487277717ee16e5fe9b2deda98be6c145849149c10abdb6f317648accbc58fc3a6fedd6c917a0bee7958dc498c9d21874a2daf353e694263f55c0de3af5a5774492013bab1cf7c096f5155ce9bffc17082d015592620861449006537c649a34b3848a0c9cf609c21b1be1687ee9846bf39b655939695793ed589f02204f0cf0000000022ebd3dda625d99c06430a946f2647c03ed6371a779d2eb7e95ebd1ccaf9aac5c4f23fe5d7af3c5ae0706e66112bd3f13971cc47d56264e6559522635648a943c2daa9d6a53d496720093e70")
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4ef6}]}, 0x2c}}, 0x4000040) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xc}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000180)=0x4, 0x4) (async)
shutdown(0xffffffffffffffff, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000a98ca430ce66dd9e3600fcdbdf252400000018000180140002006970365f767469"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r7) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='dlm_unlock_end\x00', 0xffffffffffffffff, 0x0, 0x42}, 0x18) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/85, 0x328000, 0x1000, 0x8}, 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(0x0, r11)

152.280288ms ago: executing program 0 (id=8038):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="0000080008000100ac1e0101080004"], 0x2c}}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x3, 0xffff}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) (async)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20) (async)
close(0x4) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast2, 0x0, 0x33}, @in6=@mcast1, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x2, 0xb2}, {0xfffffffffffffffd, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0xfffffffd, 0xa, 0x2, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)

81.16146ms ago: executing program 2 (id=8039):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040)=0x48, 0xfffffffffffffe32)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e)
recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r5, @ANYRES64=r4, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x20008880}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000080)) (async)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async)
setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040)=0x48, 0xfffffffffffffe32) (async)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e) (async)
recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=r5, @ANYRES64=r4, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) (async)

797.517µs ago: executing program 0 (id=8040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}]}}}]}, 0x50}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67ffc"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
unshare(0x24020400)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)={0x19c0, r3, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xd7}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b0604df2b064"}]}, @NL80211_ATTR_NAN_FUNC={0x84, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x58, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a96d076b7172"}]}, @NL80211_ATTR_NAN_FUNC={0x56c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x51, 0xb, "dc67ccf80317bcf87e6afce0c239d5f2cf18219863e8da28259d6ee3764293019eb17ced14b8408a80da1651a3ebbecb60ff9ed4e08a79ed8d11b4d9bff8d3d04f0b5402a3fcf3f91a6c901df4"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x70, 0xe, 0x0, 0x1, [{0x6c, 0x0, "ffdc800da0fe1cf27ffd5be67df67ddd74bc62c89594450bd333f49ae8fae13af6f640bcebe559a277a192eb67f7aa5e7f258da7fb223cdb87911efabc2afdd410f27b57fd2f70b4648017b1a76d9534821d606a814e7e9ab0e99039d15ac375535cfd8d366be3a9"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x4a4, 0xe, 0x0, 0x1, [{0x66, 0x0, "a169d0f1f7993167c4713ddcc182516995d4f65f7cbca18b50fd01f391b570d890b911d1e990a5cb10ace60122b2e173cb2122b75b060d68494075e2d01a2efb7ded75f8f53935d81bc771510f265cffda5408829f2dc1c30ea6c752a5a2d2c4e40f"}, {0x8c, 0x0, "e0a12c73794b76cd27caddfa0342154eaa3694df4b66db7a99bd30b816d7baf16be2eaf2fb0dc943f4227941d13bfe24809744c2d9067a0473d9c29579030b35931f44660ea8e343307506beb1f929e5bc746a8b42d1baca82306393f90b397616adb244412e25ddb04af61199e8d4f6bfdc75ee3c1aadb310679f397aacfe8006a48bbd512da72e"}, {0xd9, 0x0, "76f4f32a2f0495e0a4a8b866db566828b224eb7e22145ab9a2a0d3f0d05bbb1b927b75cb8380d87e3ab96a0594a169d090d7f02853c9114374c6322138deabc236b21055631f5433859d68a44211e919163928a58465f3dde05548f820824d653eee04d0f527056540cca21ebc4ff98c4974c92ec770bcaa923a1d2cfaf3eb9daa82ed59e00c9633b70fce6607e468abb9c319f7183eff50bee130af2aaa063cd38af5a3b9bf51bef310e1ffeda1e43db2fe37fa73675ce4726a62df9bfe5f035d7a4ec895bef5e2fbbc9b83bbf5e1d5039d15a387"}, {0xb5, 0x0, "444370be7448d2ca324ae6fcbd9844d122d0aa6463a2b7dd70462ff8c01fa5198a331d089e556c2bfcdcec22813b2fa16391597a93dbe14a28e7c418ff771a9b9ef822c63cc2ca2ac57e698a0c051721c56198cb7df7f71a0c94c640abd5524babe55d92d0d985f55707dafb37a777f6e3938bba2c295de79ca18e347918a9d9fa6632787cccc2ff7656403d27b062eab8ea61f07344fe6f56c9423204c7e8923538f2b2ae7549ea00192bc9634d5f0312"}, {0xd8, 0x0, "2d4f4dfe05c70db9e698829a88299cc3b2c72c63388e20d06aecdcae9d9fa3fb760963116b2b1161e4500fbc54f523836b73c145a13bb90287442e47eecae9c6a8e55beff508374059c8e46660b5f823ea51484b376720d005914a027328d44b02c4361534d8f7cb6288c64449ec359ea0db5e088bf1d2c799a98c64f6b381a261a1bf1c2053302a1e73d2d897172b8d05c6079c524f5bd032e41ecf5cb6c047fc41407330adcc3a2bf4d21057aa6566cceddae909b47cc583065b1385970c7cd806fcfc92984d644ea587c8912190a31e5112cc"}, {0xc4, 0x0, "623fd5bc9aa02ff1ad7d996b9af6c95035db88461d0c06bf743bda491bb13f805298cad95b833f4d391353e33d0cd71491244b8b91cefb873ea5b01d59fb93574e3dc5ac7242b2fdda6cb0c82b6b0126b3e4fc30ea05e1ea7bda58387090522d866ecc0b4e826cf834a188b65de54c3ca470283ada689448963f3cfb8c3bef4f282feb4ac961b2e70449608937b7deb1354174ad7a65a8d6f868f0d58696ebdb4388b3e52e2ae79dd7d6d16fe8d64431fb88286256b6df1caf6a54da15352ce7"}, {0x7c, 0x0, "ec2f2a1a698f71bd79728176288e8dd0fe92112e8c266fee46100b4dc57c74bb4c1c433d3309e2cad321df0d3a781b23ed79a8d5e2e91e14d37c06b136e14325fd71ee4639d6e4a49c2fb95e5a629cf85c6b59b72be62377a00eeb16967354c3140321cc09021af5f1048a2c38f65ca9340835a440ed4f1a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xe9, 0xb, "9671a46c51b46f3e293f04b27331acedf0dccdebde9e46eda32f035141441c8a3d3779e463be607fbac3cb57f84ecd5219ab454f4f525634ffaf96e49694440309452288d2c2b814e78c137a136782efaa0821ca8ee3df145075dbb1390ad31be6e77b3beb00dca909b2965b5e1d780d29ea5d895f4377f24c1c5fc5789f5f5c12568ff5cb205743c79bd7807266a1f6918e7e03cc799bb7611c00574844c0fe67b9a998d2920e69aa59ecf8a245bffab5916ccb6b72302b9dc54e1b68f1023c4f3ef2efd88acef96eb20238f5e28c263f74ce14d72db6185c3f59ad992a5b94efb1cb02bd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x39}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x123c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1238, 0xe, 0x0, 0x1, [{0xbe, 0x0, "2c02c667e463f9aaee788d1b8e383c7cb7cc7d2d98bb02fa10046b4b310a5ef1bfd6749adee803fb36d58947b19eff9d9c70c5976f2a56998aeee6c330ae5aab2fd5ae8a14c9193260578c914244ac381502aab70b2a2b76aacafde7d3d5f3752701f9887e525be165f504b49beb9801a6b725b66b20a47983dccad3f0d9ae7040b4454126151d0af2f9bf381947955395ec2086783d9392f7c4ce74b4a7d1f9c2685494d486e27de2fe85bccc18727b25ace6665946e69ddc1d"}, {0xa4, 0x0, "b1f6443c65bb8716ef518739bf9a49db00bc19c73a9ba96ad56e1d240498dc8ab89a82455e5be17ae2cee2f01bbfe75a1885e4603803dbd007491fb7ccd42af42a6d90610ec269664ab1e8dd163013e7f2a543993abba778fdcbbb818f3583294006e305738a41f00b30b545599b4cefe1c0b8fc249f96a32fdf5ab4bd2c4810a409ed2534d5986a5b4bfe1f93b0218a27970d73f578b7f81d83a19ba81c807b"}, {0xe, 0x0, "36c6eef7cea219ca39ed"}, {0x58, 0x0, "50bc7e01f1c5fc8949b8a431bb897879ddca52adb8f396434cc29be2d03ace982455768bf9bb2c039253002e118f80ecfd2f81ef29ed55e24781de922e8222accb8721a341425b9de519df6e0170f0cd3eaa20e2"}, {0x47, 0x0, "7ce5d81fb5c2bed81d1da4174699ccfabe020384988fabd6a3450357cd1063e3ff4d6ef78406f4768af9a7c9fd36d3f3570e254c085e6f2e31728ed3403f0143f3149f"}, {0x1c, 0x0, "271fa8c0f84b1339aa20c4b3f4636a875874d159eec67194"}, {0x1004, 0x0, "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"}]}]}]}, 0x19c0}, 0x1, 0x0, 0x0, 0x884}, 0x4000)

0s ago: executing program 0 (id=8041):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
recvmmsg(r1, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/218, 0xda}], 0x1, &(0x7f00000019c0)=""/149, 0x95}, 0x8}], 0x2, 0x140, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'veth0_virt_wifi\x00', {0x3}, 0xc})
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)

kernel console output (not intermixed with test programs):

rotocol: 46 100.1.1.2:20002
[  358.836258][T20098] IPVS: set_ctl: invalid protocol: 46 100.1.1.2:20002
[  359.283281][T20134] bridge0: entered allmulticast mode
[  359.411073][T20143] netlink: 'syz.1.4499': attribute type 13 has an invalid length.
[  359.568464][T20147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.126837][T20228] bond9: (slave batadv_slave_1): Releasing active interface
[  362.263245][T20299] __nla_validate_parse: 22 callbacks suppressed
[  362.263263][T20299] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4547'.
[  362.268963][T20299] netlink: 'syz.0.4547': attribute type 1 has an invalid length.
[  362.286837][T20299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4547'.
[  362.305648][T20299] veth1: entered promiscuous mode
[  362.345044][T20301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'.
[  362.729893][T20319] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4554'.
[  362.974652][T20328] tap0: tun_chr_ioctl cmd 1074025678
[  362.978071][T20328] tap0: group set to 0
[  362.992135][T20328] tap0: tun_chr_ioctl cmd 3288372253
[  362.994069][T20328] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4555'.
[  363.092866][T20342] netlink: 'syz.2.4560': attribute type 4 has an invalid length.
[  363.098036][T20342] netlink: 'syz.2.4560': attribute type 4 has an invalid length.
[  363.664783][T20380] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4572'.
[  363.776377][T20388] netlink: 'syz.2.4575': attribute type 9 has an invalid length.
[  363.785827][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4575'.
[  363.796501][T20388] macvlan3: entered promiscuous mode
[  363.798801][T20388] hsr0: entered promiscuous mode
[  363.803868][T20388] macvlan3: entered allmulticast mode
[  363.806091][T20388] hsr0: entered allmulticast mode
[  363.808238][T20388] hsr_slave_0: entered allmulticast mode
[  363.811386][T20388] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  363.958292][T20402] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4578'.
[  363.992068][T20404] bridge0: entered allmulticast mode
[  363.994747][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4579'.
[  364.049889][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4581'.
[  364.777518][T20437] netlink: 'syz.2.4591': attribute type 12 has an invalid length.
[  365.200189][T20466] tipc: Invalid UDP bearer configuration
[  365.200233][T20466] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  365.233324][T20460] openvswitch: netlink: Flow actions attr not present in new flow.
[  365.702879][T20492] xt_l2tp: missing protocol rule (udp|l2tpip)
[  365.866360][T20507] netlink: 'syz.1.4610': attribute type 2 has an invalid length.
[  367.665880][T20564] __nla_validate_parse: 14 callbacks suppressed
[  367.665891][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'.
[  367.670804][T20564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4628'.
[  367.690542][T20564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'.
[  367.692583][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4630'.
[  367.693337][T20564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4628'.
[  367.703236][T20571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4630'.
[  367.777728][T20579] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4633'.
[  367.787999][T20581] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4631'.
[  367.825843][T20577] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  367.879965][T20586] vlan0: entered promiscuous mode
[  367.992313][T20594] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  368.148428][T20610] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  368.234882][T20619] openvswitch: netlink: Missing valid actions attribute.
[  368.237699][T20619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.294508][T20619] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4646'.
[  368.337796][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4651'.
[  368.548370][T20652] bpq0: entered promiscuous mode
[  368.798013][T20692] tipc: Resetting bearer <eth:syzkaller0>
[  368.800975][ T2281] syz2: Port: 1 Link ACTIVE
[  368.810296][T20694] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  368.834815][T20691] tipc: Resetting bearer <eth:syzkaller0>
[  368.836771][ T2281] syz2: Port: 1 Link DOWN
[  369.045208][T11257] tipc: Resetting bearer <eth:syzkaller0>
[  369.103020][T20711] policy can only be matched on NF_INET_PRE_ROUTING
[  369.103035][T20711] unable to load match
[  369.892738][T20739] nbd: must specify a device to reconfigure
[  369.981714][T20748] sctp: [Deprecated]: syz.0.4689 (pid 20748) Use of int in max_burst socket option.
[  369.981714][T20748] Use struct sctp_assoc_value instead
[  370.620852][T20778] netlink: 'syz.1.4699': attribute type 1 has an invalid length.
[  370.764318][T20786] openvswitch: netlink: Key 6 has unexpected len 98 expected 2
[  370.907815][T20790] hsr_slave_1 (unregistering): left promiscuous mode
[  371.102105][T20802] netlink: 'syz.0.4708': attribute type 7 has an invalid length.
[  371.120787][T20802] : entered promiscuous mode
[  372.118409][T20856] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20004
[  372.423149][T20883] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check.
[  372.631699][T20900] syzkaller1: entered promiscuous mode
[  372.633919][T20900] syzkaller1: entered allmulticast mode
[  372.670917][T20904] __nla_validate_parse: 23 callbacks suppressed
[  372.670937][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4735'.
[  372.750105][T20913] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  373.038117][T20936] netlink: 'syz.2.4744': attribute type 10 has an invalid length.
[  373.060027][T20936] netlink: 'syz.2.4744': attribute type 10 has an invalid length.
[  373.125155][T20942] x_tables: duplicate underflow at hook 1
[  373.142633][T20942] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4746'.
[  373.242684][T20948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4748'.
[  373.333922][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'.
[  373.337679][T20952] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  373.341068][T20952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.387014][T20950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4749'.
[  374.314717][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'.
[  374.314844][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'.
[  374.325281][T21017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.341408][T21016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  374.415038][T21028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4770'.
[  374.418670][T21028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4770'.
[  374.431571][T21028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4770'.
[  374.585691][T21039] IPv6: NLM_F_REPLACE set, but no existing node found!
[  374.761021][T21057] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  375.318766][T21104] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  375.656217][T21137] netlink: 'syz.1.4807': attribute type 2 has an invalid length.
[  375.663613][T21137] netlink: 'syz.1.4807': attribute type 1 has an invalid length.
[  375.690325][T21140] netlink: 'syz.1.4809': attribute type 10 has an invalid length.
[  375.693066][T21140] team0: Device veth0_vlan is of different type
[  375.694294][T21141] tls_set_device_offload_rx: netdev not found
[  376.120003][T21175] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.122700][T21175] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.125815][T21175] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.128571][T21175] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  376.815598][T21199] bridge9: the hash_elasticity option has been deprecated and is always 16
[  376.821889][T21199] bridge9: entered allmulticast mode
[  377.821728][T21280] __nla_validate_parse: 86 callbacks suppressed
[  377.821748][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4856'.
[  377.830810][T21280] netlink: 'syz.2.4856': attribute type 1 has an invalid length.
[  377.834409][T21280] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4856'.
[  377.882888][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4858'.
[  377.894364][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4858'.
[  377.920970][T21286] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  377.923777][T21284] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4858'.
[  378.234307][T21313] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4867'.
[  378.272647][T21317] netlink: 'syz.1.4869': attribute type 7 has an invalid length.
[  378.276411][T21317] netlink: 'syz.1.4869': attribute type 1 has an invalid length.
[  378.520352][T21337] tipc: Resetting bearer <eth:syzkaller0>
[  378.524265][    T9] syz2: Port: 1 Link ACTIVE
[  378.878889][T21365] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4883'.
[  378.882451][T21335] tipc: Resetting bearer <eth:syzkaller0>
[  378.884885][    T9] syz2: Port: 1 Link DOWN
[  379.082611][T21385] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  379.161248][T21388] netlink: 'syz.1.4891': attribute type 10 has an invalid length.
[  379.353830][  T897] tipc: Resetting bearer <eth:syzkaller0>
[  379.584190][T21419] syzkaller1: entered promiscuous mode
[  379.588814][T21419] syzkaller1: entered allmulticast mode
[  379.740306][T21432] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4904'.
[  379.752149][T21432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  379.755138][T21432] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  379.765146][T21434] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  379.770866][T21434] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4906'.
[  379.836722][T21440] geneve3: entered promiscuous mode
[  379.943202][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4910'.
[  380.500678][T21467] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  380.506781][T21467] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  381.412904][T21509] netlink: 'syz.0.4930': attribute type 1 has an invalid length.
[  382.148688][T21541] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  382.342337][T21559] tipc: Resetting bearer <eth:syzkaller0>
[  382.351983][ T7746] syz2: Port: 1 Link ACTIVE
[  382.514262][T21555] bpq0: left promiscuous mode
[  382.695413][T21582] tipc: Resetting bearer <eth:syzkaller0>
[  382.697635][    T9] syz2: Port: 1 Link DOWN
[  382.876244][T21594] __nla_validate_parse: 11 callbacks suppressed
[  382.876265][T21594] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4956'.
[  382.888172][T21594] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  382.895584][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4956'.
[  382.898854][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4956'.
[  383.010465][T21602] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4958'.
[  383.049659][T21604] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4957'.
[  383.131439][T21610] netlink: 'syz.2.4961': attribute type 3 has an invalid length.
[  383.244276][T21626] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  383.307371][T21631] dvmrp8: entered allmulticast mode
[  383.316851][T21631] dvmrp1: entered allmulticast mode
[  383.433956][  T991] tipc: Resetting bearer <eth:syzkaller0>
[  383.550226][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4972'.
[  384.074883][T21625] dvmrp1: left allmulticast mode
[  384.165218][T21654] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4974'.
[  384.316636][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4978'.
[  384.321604][T21665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4978'.
[  384.348517][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4978'.
[  384.654037][T21691] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.656915][T21692] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.690184][T21818] xt_hashlimit: Unknown mode mask 500, kernel too old?
[  387.519982][T21874] block nbd0: not configured, cannot reconfigure
[  387.644161][T21883] v: renamed from ip6_vti0
[  387.934398][T21904] syzkaller0: left promiscuous mode
[  387.936218][T21904] syzkaller0: left allmulticast mode
[  387.938239][T21904] tipc: Resetting bearer <eth:syzkaller0>
[  388.025419][   T33] audit: type=1800 audit(1753661324.860:14): pid=21910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5055" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8755 res=0 errno=0
[  388.103488][T21917] netlink: 'syz.1.5057': attribute type 12 has an invalid length.
[  388.104926][T21918] __nla_validate_parse: 16 callbacks suppressed
[  388.104948][T21918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5058'.
[  388.154432][T21920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5059'.
[  388.158891][T21920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5059'.
[  388.163975][T21920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5059'.
[  388.167635][T21920] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5059'.
[  388.274863][T21923] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5061'.
[  388.342984][T21929] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5063'.
[  388.544913][T21947] netlink: 'syz.1.5069': attribute type 4 has an invalid length.
[  388.718898][T21950] netlink: 'syz.1.5070': attribute type 21 has an invalid length.
[  388.729274][T21950] netlink: 'syz.1.5070': attribute type 6 has an invalid length.
[  388.756786][T21950] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5070'.
[  388.896554][T21965] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5074'.
[  389.537056][T21976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5076'.
[  389.572145][T21985] syzkaller1: entered promiscuous mode
[  389.574018][T21985] syzkaller1: entered allmulticast mode
[  389.580344][T21985] netlink: 'syz.0.5077': attribute type 15 has an invalid length.
[  389.894781][T21998] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.036788][T22019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.201138][T22027] tipc: Resetting bearer <eth:syzkaller0>
[  390.203635][    T9] syz2: Port: 1 Link ACTIVE
[  390.322913][T22025] tipc: Resetting bearer <eth:syzkaller0>
[  390.325184][    T9] syz2: Port: 1 Link DOWN
[  390.466784][T22052] SET target dimension over the limit!
[  390.577236][T22064] tipc: Resetting bearer <eth:syzkaller0>
[  390.633371][T22064] tipc: Resetting bearer <eth:syzkaller0>
[  390.640097][T22019] delete_channel: no stack
[  391.261894][  T897] tipc: Resetting bearer <eth:syzkaller0>
[  392.130248][T22181] netlink: 'syz.1.5142': attribute type 5 has an invalid length.
[  392.793415][T22219] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  393.024702][T22251] netlink: 'syz.1.5164': attribute type 1 has an invalid length.
[  393.042148][T22253] netlink: 'syz.0.5167': attribute type 12 has an invalid length.
[  393.291992][T22277] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  393.295529][T22278] __nla_validate_parse: 28 callbacks suppressed
[  393.295548][T22278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5175'.
[  393.306642][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'.
[  393.315553][T22283] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  393.321045][T22284] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  393.482458][T22295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5181'.
[  393.563619][T22298] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5182'.
[  393.776842][T22314] netlink: 'syz.2.5186': attribute type 4 has an invalid length.
[  394.686428][T22343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5194'.
[  395.250272][T22385] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5206'.
[  395.291675][T22392] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5208'.
[  395.335341][T22395] netlink: 'syz.0.5207': attribute type 1 has an invalid length.
[  395.338404][T22395] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5207'.
[  395.446431][T22398] netlink: 'syz.1.5210': attribute type 5 has an invalid length.
[  395.449924][T22398] netlink: 'syz.1.5210': attribute type 7 has an invalid length.
[  395.485707][T22405] netlink: 'syz.1.5211': attribute type 1 has an invalid length.
[  395.488893][T22405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5211'.
[  395.496805][T22405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5211'.
[  395.718301][T22420] netlink: 'syz.1.5215': attribute type 21 has an invalid length.
[  395.833375][T22424] sctp: [Deprecated]: syz.1.5217 (pid 22424) Use of struct sctp_assoc_value in delayed_ack socket option.
[  395.833375][T22424] Use struct sctp_sack_info instead
[  396.910531][T22442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.512214][T22515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  397.678412][T22527] netlink: 'syz.2.5250': attribute type 3 has an invalid length.
[  397.925063][T22551] x_tables: duplicate underflow at hook 1
[  398.118508][T22570] netlink: 'syz.0.5263': attribute type 1 has an invalid length.
[  398.162856][T22570] pim6reg1: entered promiscuous mode
[  398.165138][T22570] pim6reg1: entered allmulticast mode
[  398.196467][T22575] C: renamed from team_slave_0
[  398.202953][T22575] netlink: 'syz.2.5264': attribute type 3 has an invalid length.
[  398.206188][T22575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  398.329654][T22591] __nla_validate_parse: 26 callbacks suppressed
[  398.329667][T22591] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5267'.
[  398.473637][T22599] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5270'.
[  398.642180][T22611] siw: device registration error -23
[  398.705947][T22615] netlink: 'syz.2.5276': attribute type 1 has an invalid length.
[  398.779474][T22613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5275'.
[  398.858005][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5277'.
[  398.868527][T22620] validate_nla: 1 callbacks suppressed
[  398.868541][T22620] netlink: 'syz.1.5277': attribute type 1 has an invalid length.
[  398.983247][T22625] netlink: 'syz.0.5279': attribute type 16 has an invalid length.
[  398.986810][T22625] netlink: 'syz.0.5279': attribute type 17 has an invalid length.
[  399.014702][T22625] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  399.017582][T22625] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  399.020755][T22625] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  399.023720][T22625] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  399.102169][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5279'.
[  399.449955][T22658] dvmrp0: entered allmulticast mode
[  399.455290][T22658] netlink: zone id is out of range
[  399.463597][T22658] netlink: zone id is out of range
[  399.465786][T22658] netlink: zone id is out of range
[  399.467926][T22658] netlink: zone id is out of range
[  399.470086][T22658] netlink: zone id is out of range
[  399.475660][T22658] netlink: zone id is out of range
[  399.478454][T22658] netlink: zone id is out of range
[  399.485373][T22658] netlink: zone id is out of range
[  399.487123][T22658] netlink: zone id is out of range
[  399.522041][T22664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5287'.
[  399.642271][T22672] macvlan1: entered promiscuous mode
[  399.647436][T22672] macvlan1: left promiscuous mode
[  399.748147][T22687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  399.758388][T22687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5294'.
[  399.758873][T22686] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5293'.
[  399.831228][T22698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.834300][T22698] syzkaller0: entered promiscuous mode
[  399.836011][T22698] syzkaller0: entered allmulticast mode
[  399.837915][T22698] tipc: Resetting bearer <eth:syzkaller0>
[  400.526200][T22726] netlink: 'syz.0.5308': attribute type 1 has an invalid length.
[  400.547172][T22726] bond14: entered promiscuous mode
[  400.551282][T22726] 8021q: adding VLAN 0 to HW filter on device bond14
[  401.032100][T22761] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  401.036119][T22761] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  401.039820][T22761] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  401.122323][T22773] mac80211_hwsim hwsim5 D: renamed from syzkaller0
[  401.127817][T22773] tipc: Disabling bearer <eth:syzkaller0>
[  401.226208][T22777] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5329'.
[  401.345834][T22784] netlink: 'syz.2.5332': attribute type 2 has an invalid length.
[  401.364479][T22784] : entered promiscuous mode
[  401.583484][T22808] atomic_op ffff88802a60a998 conn xmit_atomic 0000000000000000
[  401.594715][T22808] syzkaller1: entered promiscuous mode
[  401.596740][T22808] syzkaller1: entered allmulticast mode
[  402.625879][T22836] GUP no longer grows the stack in syz.0.5347 (22836): 200000002000-20000000a000 (200000001000)
[  402.634233][T22836] CPU: 0 UID: 0 PID: 22836 Comm: syz.0.5347 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  402.634253][T22836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  402.634260][T22836] Call Trace:
[  402.634265][T22836]  <TASK>
[  402.634282][T22836]  dump_stack_lvl+0x189/0x250
[  402.634304][T22836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.634315][T22836]  ? __pfx__printk+0x10/0x10
[  402.634326][T22836]  ? find_vma+0xe7/0x160
[  402.634345][T22836]  __get_user_pages+0x2a60/0x30b0
[  402.634372][T22836]  ? __pfx___get_user_pages+0x10/0x10
[  402.634386][T22836]  __gup_longterm_locked+0xd66/0x15b0
[  402.634399][T22836]  ? try_grab_folio_fast+0x35b/0x4f0
[  402.634413][T22836]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[  402.634427][T22836]  gup_fast_fallback+0x1cd4/0x2260
[  402.634439][T22836]  ? is_bpf_text_address+0x26/0x2b0
[  402.634465][T22836]  ? __pfx_gup_fast_fallback+0x10/0x10
[  402.634474][T22836]  ? stack_trace_save+0x9c/0xe0
[  402.634486][T22836]  ? stack_depot_save_flags+0x40/0x900
[  402.634500][T22836]  ? pin_user_pages_fast+0x4d/0xb0
[  402.634511][T22836]  iov_iter_extract_pages+0x35a/0x5e0
[  402.634526][T22836]  extract_iter_to_sg+0xe46/0x24e0
[  402.634544][T22836]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  402.634561][T22836]  ? __asan_memset+0x22/0x50
[  402.634576][T22836]  af_alg_get_rsgl+0x436/0x810
[  402.634594][T22836]  aead_recvmsg+0x4cc/0x13f0
[  402.634609][T22836]  ? rcu_is_watching+0x15/0xb0
[  402.634630][T22836]  ? __pfx_aead_recvmsg+0x10/0x10
[  402.634642][T22836]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  402.634654][T22836]  ? __pfx_aead_recvmsg+0x10/0x10
[  402.634665][T22836]  sock_recvmsg_nosec+0x186/0x1c0
[  402.634681][T22836]  ____sys_recvmsg+0x3aa/0x460
[  402.634698][T22836]  ? __pfx_____sys_recvmsg+0x10/0x10
[  402.634721][T22836]  ? import_iovec+0x74/0xa0
[  402.634734][T22836]  ___sys_recvmsg+0x1b5/0x510
[  402.634749][T22836]  ? __pfx____sys_recvmsg+0x10/0x10
[  402.634775][T22836]  ? __might_fault+0xb0/0x130
[  402.634788][T22836]  do_recvmmsg+0x307/0x770
[  402.634800][T22836]  ? __pfx_do_recvmmsg+0x10/0x10
[  402.634806][T22836]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  402.634821][T22836]  ? __pfx_do_futex+0x10/0x10
[  402.634840][T22836]  __x64_sys_recvmmsg+0x190/0x240
[  402.634849][T22836]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  402.634856][T22836]  ? rcu_is_watching+0x15/0xb0
[  402.634867][T22836]  ? do_syscall_64+0xbe/0x3b0
[  402.634879][T22836]  do_syscall_64+0xfa/0x3b0
[  402.634888][T22836]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.634896][T22836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.634930][T22836]  ? exc_page_fault+0x9f/0xf0
[  402.634940][T22836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.634951][T22836] RIP: 0033:0x7fc3ee38e9a9
[  402.634962][T22836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.634970][T22836] RSP: 002b:00007fc3ef27d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  402.634981][T22836] RAX: ffffffffffffffda RBX: 00007fc3ee5b5fa0 RCX: 00007fc3ee38e9a9
[  402.634988][T22836] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[  402.634994][T22836] RBP: 00007fc3ee410d69 R08: 0000000000000000 R09: 0000000000000000
[  402.634999][T22836] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  402.635005][T22836] R13: 0000000000000000 R14: 00007fc3ee5b5fa0 R15: 00007ffc3dbcbbf8
[  402.635025][T22836]  </TASK>
[  402.774997][   T33] audit: type=1804 audit(1753661339.610:15): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5347" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=8926 res=1 errno=0
[  402.783405][   T33] audit: type=1800 audit(1753661339.610:16): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5347" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=8926 res=0 errno=0
[  403.746107][T22914] __nla_validate_parse: 6 callbacks suppressed
[  403.746128][T22914] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5375'.
[  403.765540][T22914] netlink: 'syz.1.5375': attribute type 3 has an invalid length.
[  403.768002][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'.
[  403.996282][T22925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  403.999282][T22925] IPv6: NLM_F_CREATE should be set when creating new route
[  404.008683][T22925] lo: entered allmulticast mode
[  404.010390][T22927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5379'.
[  404.014187][T22927] net_ratelimit: 84 callbacks suppressed
[  404.014200][T22927] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  404.023920][T22925] tunl0: entered allmulticast mode
[  404.032749][T22925] gre0: entered allmulticast mode
[  404.042222][T22925] gretap0: entered allmulticast mode
[  404.054023][T22925] erspan0: entered allmulticast mode
[  404.064310][T22925] ip_vti0: entered allmulticast mode
[  404.072614][T22925] ip6_vti0: entered allmulticast mode
[  404.081292][T22925] sit0: entered allmulticast mode
[  404.099823][T22925] ip6tnl0: entered allmulticast mode
[  404.113268][T22925] ip6gre0: entered allmulticast mode
[  404.122372][T22925] ip6gretap0: entered allmulticast mode
[  404.130330][T22925] bond0: entered allmulticast mode
[  404.136177][T22925] team0: entered allmulticast mode
[  404.138422][T22925] geneve0: entered allmulticast mode
[  404.148023][T22925] dummy0: left promiscuous mode
[  404.158059][T22931] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5379'.
[  404.170922][T22925] nlmon0: entered allmulticast mode
[  404.176085][T22925] caif0: entered allmulticast mode
[  404.178338][T22925] batadv0: entered allmulticast mode
[  404.182149][T22925] vxcan0: entered allmulticast mode
[  404.184343][T22925] vxcan1: entered allmulticast mode
[  404.186642][T22925] veth0: entered allmulticast mode
[  404.188821][T22925] veth1: entered allmulticast mode
[  404.192546][T22925] wg0: entered allmulticast mode
[  404.195839][T22925] wg1: left promiscuous mode
[  404.201083][T22925] wg2: entered allmulticast mode
[  404.203236][T22925] veth0_to_bridge: entered allmulticast mode
[  404.206424][T22925] bridge_slave_0: entered allmulticast mode
[  404.211713][T22925] veth1_to_bridge: entered allmulticast mode
[  404.214240][T22925] bridge_slave_1: entered allmulticast mode
[  404.216628][T22925] veth0_to_bond: entered allmulticast mode
[  404.224026][T22925] bond_slave_0: entered allmulticast mode
[  404.226439][T22925] veth1_to_bond: entered allmulticast mode
[  404.228918][T22925] bond_slave_1: entered allmulticast mode
[  404.237719][T22925] veth0_to_team: left promiscuous mode
[  404.243017][T22925] C: entered allmulticast mode
[  404.245144][T22925] veth1_to_team: entered allmulticast mode
[  404.247610][T22925] team_slave_1: entered allmulticast mode
[  404.250618][T22925] veth0_to_batadv: entered allmulticast mode
[  404.253456][T22925] batadv_slave_0: left promiscuous mode
[  404.255711][T22925] batadv_slave_0: entered allmulticast mode
[  404.258236][T22925] xfrm0: entered allmulticast mode
[  404.260940][T22925] veth0_to_hsr: entered allmulticast mode
[  404.263587][T22925] veth1_virt_wifi: entered allmulticast mode
[  404.266199][T22925] veth0_virt_wifi: entered allmulticast mode
[  404.268740][T22925] veth1_vlan: entered allmulticast mode
[  404.271889][T22925] veth0_vlan: entered allmulticast mode
[  404.274201][T22925] vlan0: entered allmulticast mode
[  404.276324][T22925] vlan1: entered allmulticast mode
[  404.278518][T22925] macvlan0: entered allmulticast mode
[  404.281354][T22925] macvlan1: entered allmulticast mode
[  404.283546][T22925] ipvlan0: entered allmulticast mode
[  404.285821][T22925] ipvlan1: entered allmulticast mode
[  404.288068][T22925] veth1_macvtap: entered allmulticast mode
[  404.290963][T22925] veth0_macvtap: entered allmulticast mode
[  404.293432][T22925] macvtap0: entered allmulticast mode
[  404.295710][T22925] macsec0: entered allmulticast mode
[  404.310021][T22925] geneve1: entered allmulticast mode
[  404.317575][T22925] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  404.334651][T22925] sit1: entered allmulticast mode
[  404.336906][T22925] macvlan2: entered allmulticast mode
[  404.340243][T22925] erspan1: entered allmulticast mode
[  404.342439][T22925] vxlan0: entered allmulticast mode
[  404.344639][T22925] veth2: entered allmulticast mode
[  404.346853][T22925] veth3: entered allmulticast mode
[  404.351035][T22925] bond1: entered allmulticast mode
[  404.353216][T22925] macsec1: entered allmulticast mode
[  404.355541][T22925] team1: entered allmulticast mode
[  404.357769][T22925] ip6gre1: entered allmulticast mode
[  404.361473][T22925] gretap1: entered allmulticast mode
[  404.363638][T22925] gre1: entered allmulticast mode
[  404.369403][T22925] bridge1: entered allmulticast mode
[  404.371701][T22925] ip6gre2: entered allmulticast mode
[  404.373913][T22925] mac80211_hwsim hwsim5 D: entered allmulticast mode
[  404.376632][T22925] geneve2: entered allmulticast mode
[  404.378884][T22925] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  404.383292][T22925] ip6tnl1: entered allmulticast mode
[  404.385432][T22925] ip6tnl2: entered allmulticast mode
[  404.387647][T22925] ip6tnl3: entered allmulticast mode
[  404.389655][T22925] bridge2: entered allmulticast mode
[  404.391322][T22925] vxcan2: entered allmulticast mode
[  404.392976][T22925] vxcan3: entered allmulticast mode
[  404.394721][T22925] veth4: entered allmulticast mode
[  404.396407][T22925] veth5: entered allmulticast mode
[  404.398056][T22925] bond2: entered allmulticast mode
[  404.400000][T22925] bridge0: entered allmulticast mode
[  404.401694][T22925] bond3: entered allmulticast mode
[  404.403611][T22925] netdevsim netdevsim2 eth0: entered allmulticast mode
[  404.406342][T22925] netdevsim netdevsim2 eth1: entered allmulticast mode
[  404.408855][T22925] netdevsim netdevsim2 eth2: entered allmulticast mode
[  404.411767][T22925] netdevsim netdevsim2 eth3: entered allmulticast mode
[  404.414008][T22925] bond4: entered allmulticast mode
[  404.415656][T22925] syztnl1: entered allmulticast mode
[  404.417709][T22925] veth6: entered allmulticast mode
[  404.420194][T22925] veth7: entered allmulticast mode
[  404.422333][T22925] ip6tnl4: entered allmulticast mode
[  404.424408][T22925] syztnl2: entered allmulticast mode
[  404.426849][T22925] bond5: entered allmulticast mode
[  404.431511][T22925] mac80211_hwsim hwsim5 nicvf0: entered allmulticast mode
[  404.437676][T22937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5380'.
[  404.438603][T22925] bridge3: entered allmulticast mode
[  404.447564][T22925] bridge4: entered allmulticast mode
[  404.450620][T22925] bond6: entered allmulticast mode
[  404.453905][T22925] bond7: entered allmulticast mode
[  404.457604][T22925] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode
[  404.461948][T22925] mac80211_hwsim hwsim16 wlan4: entered allmulticast mode
[  404.464711][T22925] mac80211_hwsim hwsim18 wlan5: entered allmulticast mode
[  404.467231][T22925] batadv1: entered allmulticast mode
[  404.471265][T22925] bond8: entered allmulticast mode
[  404.483690][T22925] gtp0: entered allmulticast mode
[  404.491368][T22925] bond9: entered allmulticast mode
[  404.496106][T22925] bond10: entered allmulticast mode
[  404.498418][T22925] ip6tnl5: entered allmulticast mode
[  404.502085][T22925] gre2: entered allmulticast mode
[  404.508800][T22925] pim6reg: entered allmulticast mode
[  404.520138][T22925] hsr0: left promiscuous mode
[  404.523239][T22925] macvlan3: left promiscuous mode
[  404.528580][T22925] sit2: entered allmulticast mode
[  404.537126][T22925] bond11: entered allmulticast mode
[  404.543540][T22925] sit3: entered allmulticast mode
[  404.569636][T22925] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.572994][T22925] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.576333][T22925] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.589177][T22925] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.592888][T22925] geneve3: left promiscuous mode
[  404.594885][T22925] geneve3: entered allmulticast mode
[  404.600058][T22925] gtp1: entered allmulticast mode
[  404.602803][T22925] gtp2: entered allmulticast mode
[  404.604636][T22925] sit4: entered allmulticast mode
[  404.606910][T22925] : entered allmulticast mode
[  404.611073][T22925] syzkaller0: entered allmulticast mode
[  404.617480][T22928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.621208][T22930] syzkaller0: entered promiscuous mode
[  404.642476][T22936] tipc: Resetting bearer <eth:syzkaller0>
[  404.651359][T22924] tipc: Resetting bearer <eth:syzkaller0>
[  404.667342][T22924] tipc: Disabling bearer <eth:syzkaller0>
[  404.815303][T22945] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5383'.
[  405.072647][T22956] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5386'.
[  405.132206][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5387'.
[  405.302763][T22973] tipc: Resetting bearer <eth:syzkaller0>
[  405.305601][T21299] syz2: Port: 1 Link ACTIVE
[  405.317320][T22973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5390'.
[  405.323161][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5390'.
[  405.327014][T22972] tipc: Resetting bearer <eth:syzkaller0>
[  405.329936][T22938] syz2: Port: 1 Link DOWN
[  405.646741][T22983] tipc: Resetting bearer <eth:syzkaller0>
[  405.650304][T22938] syz2: Port: 1 Link ACTIVE
[  405.705861][T22984] tipc: Resetting bearer <eth:syzkaller0>
[  405.747573][T22984] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.751080][T22984] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.754367][T22984] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.757791][T22984] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  405.782068][T22938] syz2: Port: 1 Link DOWN
[  406.051760][T23020] lo: left allmulticast mode
[  406.054215][T23019] siw: device registration error -23
[  406.062226][T23020] tunl0: left allmulticast mode
[  406.065418][T23020] gre0: left allmulticast mode
[  406.080851][T23020] gretap0: left allmulticast mode
[  406.086264][T23020] erspan0: left allmulticast mode
[  406.090438][T23020] ip_vti0: left allmulticast mode
[  406.093018][T23020] ip6_vti0: left allmulticast mode
[  406.096391][T23020] sit0: left allmulticast mode
[  406.102756][T23020] ip6tnl0: left allmulticast mode
[  406.105791][T23020] ip6gre0: left allmulticast mode
[  406.108379][T23020] ip6gretap0: left allmulticast mode
[  406.112820][T23020] bond0: left allmulticast mode
[  406.115336][T23020] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.117949][T23020] team0: left allmulticast mode
[  406.121345][T23020] 8021q: adding VLAN 0 to HW filter on device team0
[  406.127027][T23020] nlmon0: left allmulticast mode
[  406.130603][T23020] caif0: left allmulticast mode
[  406.132219][T23020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.160133][T23022] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  406.172820][T23022] syzkaller0: tun_chr_ioctl cmd 2147767521
[  407.698923][T23086] x_tables: duplicate underflow at hook 2
[  407.903430][T23104] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.645728][T23134] netlink: 'syz.2.5439': attribute type 2 has an invalid length.
[  408.814559][T23142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.939386][T23148] netlink: 'syz.0.5444': attribute type 1 has an invalid length.
[  408.971082][T23148] bond15: (slave vti0): The slave device specified does not support setting the MAC address
[  408.974662][T23148] bond15: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  408.980168][T23155] __nla_validate_parse: 5 callbacks suppressed
[  408.980190][T23155] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5447'.
[  408.990113][T23148] bond15: (slave vti0): making interface the new active one
[  408.993225][T23148] bond15: (slave vti0): Enslaving as an active interface with an up link
[  409.049333][T23153] xt_SECMARK: invalid mode: 0
[  409.438117][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5453'.
[  409.525118][T23185] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  409.531788][T23185] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  409.746349][T23202] netlink: 'syz.1.5460': attribute type 3 has an invalid length.
[  409.755823][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5460'.
[  409.947346][T23221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5468'.
[  409.984700][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'.
[  409.989013][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5467'.
[  409.992768][T23223] netlink: 'syz.0.5467': attribute type 18 has an invalid length.
[  409.999641][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'.
[  410.003374][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5467'.
[  410.006424][T23223] netlink: 'syz.0.5467': attribute type 18 has an invalid length.
[  410.016990][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'.
[  410.173477][T23244] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  410.176225][T23244] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  410.484050][T23274] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5482'.
[  410.612070][T23283] netlink: 'syz.2.5485': attribute type 12 has an invalid length.
[  411.028799][T23305] netlink: 'syz.0.5492': attribute type 6 has an invalid length.
[  411.065714][T23309] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  411.161935][T23316] sctp: [Deprecated]: syz.0.5496 (pid 23316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.161935][T23316] Use struct sctp_sack_info instead
[  411.168136][T23316] sctp: [Deprecated]: syz.0.5496 (pid 23316) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.168136][T23316] Use struct sctp_sack_info instead
[  411.176461][T23316] veth0_to_bond: entered allmulticast mode
[  411.281237][T23321] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  411.355870][T23329] netlink: 'syz.2.5502': attribute type 4 has an invalid length.
[  411.557365][T23348] netlink: 'syz.2.5507': attribute type 12 has an invalid length.
[  411.560582][T23348] netlink: 'syz.2.5507': attribute type 11 has an invalid length.
[  411.748355][T23362] macvtap0: refused to change device tx_queue_len
[  411.759242][T23362] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  413.453030][T23420] netlink: ct family unspecified
[  413.458737][T23420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.467268][T23420] netlink: ct family unspecified
[  413.479559][T23420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.483606][T23420] netlink: ct family unspecified
[  413.485801][T23420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.622580][T23426] xt_CT: No such helper "snmp_trap"
[  413.990388][T23460] netlink: 'syz.0.5542': attribute type 15 has an invalid length.
[  413.996063][T23460] __nla_validate_parse: 12 callbacks suppressed
[  413.996201][T23460] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5542'.
[  414.013509][T23460] netlink: 'syz.0.5542': attribute type 15 has an invalid length.
[  414.016621][T23460] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5542'.
[  414.043156][T23465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5541'.
[  414.064181][T23462] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5542'.
[  414.123110][T23467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.136939][T23467] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5543'.
[  414.259986][T23473] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5545'.
[  414.269381][T23474] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5545'.
[  414.353300][T23478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5547'.
[  414.537537][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5552'.
[  414.636899][T23497] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5554'.
[  414.676473][T23500] netlink: 'syz.2.5555': attribute type 1 has an invalid length.
[  414.732151][T23503] netlink: 'syz.2.5556': attribute type 1 has an invalid length.
[  414.748660][T23503] 8021q: adding VLAN 0 to HW filter on device bond12
[  415.306285][T23530] netlink: 'syz.2.5563': attribute type 10 has an invalid length.
[  415.309533][T23530] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  415.312801][T23530] net_ratelimit: 119 callbacks suppressed
[  415.312813][T23530] wlan1: mtu greater than device maximum
[  415.316295][T23530] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  415.430146][T23537] netlink: 'syz.2.5566': attribute type 21 has an invalid length.
[  415.447846][T23537] IPv6: NLM_F_CREATE should be specified when creating new route
[  415.454424][T23537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  415.457498][T23537] IPv6: NLM_F_CREATE should be set when creating new route
[  415.460643][T23537] IPv6: NLM_F_CREATE should be set when creating new route
[  415.463617][T23537] IPv6: NLM_F_CREATE should be set when creating new route
[  415.594153][T23549] netlink: 'syz.2.5570': attribute type 11 has an invalid length.
[  416.124686][T23587] Cannot find add_set index 2 as target
[  417.630963][T23662] netlink: 'syz.0.5607': attribute type 1 has an invalid length.
[  417.666001][T23662] 8021q: adding VLAN 0 to HW filter on device bond16
[  417.692566][T23662] bond16: (slave gretap5): making interface the new active one
[  417.696522][T23662] bond16: (slave gretap5): Enslaving as an active interface with an up link
[  418.025873][T23694] vlan0: left promiscuous mode
[  418.033888][T23696] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  418.034687][T23694] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  418.043907][T23694] bond8: left promiscuous mode
[  418.046021][T23694] bridge4: left promiscuous mode
[  418.048666][T23694] bond9: left promiscuous mode
[  418.053597][T23694] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  418.056647][T23694] gretap3: left promiscuous mode
[  418.060362][T23694] vlan5: left promiscuous mode
[  418.062531][T23694] 0{X: left promiscuous mode
[  418.066687][T23694] bond14: left promiscuous mode
[  418.357667][T23714] syzkaller1: entered promiscuous mode
[  418.364960][T23714] syzkaller1: entered allmulticast mode
[  419.018023][T23741] __nla_validate_parse: 84 callbacks suppressed
[  419.018039][T23741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5634'.
[  419.289550][T23747] wireguard1: entered promiscuous mode
[  419.292205][T23747] wireguard1: entered allmulticast mode
[  419.548824][T23757] netlink: 83 bytes leftover after parsing attributes in process `syz.2.5638'.
[  419.559150][T11270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.562372][T11270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.574361][T23757] netlink: 22 bytes leftover after parsing attributes in process `syz.2.5638'.
[  419.625068][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5639'.
[  419.826536][T23771] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5644'.
[  419.877456][T23775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5645'.
[  419.892917][T23777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5645'.
[  419.896453][T23777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5645'.
[  420.038030][T23794] Cannot find del_set index 4 as target
[  420.226542][   T33] audit: type=1800 audit(1753661357.060:17): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5652" name=36FFFF dev="tmpfs" ino=9392 res=0 errno=0
[  420.267427][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'.
[  420.330197][T23816] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5654'.
[  420.433066][T23831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.564168][T23900] x_tables: ip_tables: osf match: only valid for protocol 6
[  421.636015][T23902] IPVS: Scheduler module ip_vs_sip not found
[  421.641967][T23902] IPVS: length: 146 != 8
[  421.696648][T23906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  422.073636][T23928] v: renamed from ip6_vti0
[  423.127754][ T5861] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  423.446719][T24004] netlink: 'syz.2.5712': attribute type 1 has an invalid length.
[  424.121648][T24034] __nla_validate_parse: 14 callbacks suppressed
[  424.121662][T24034] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5723'.
[  424.306689][T24058] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5729'.
[  424.318605][T24062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5731'.
[  424.327001][T24062] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  424.348934][T24065] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5732'.
[  424.483586][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5739'.
[  424.592442][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5742'.
[  424.816060][T24101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5748'.
[  424.819247][T24101] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5748'.
[  424.900104][T24105] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  425.012473][T24110] netlink: 'syz.1.5751': attribute type 1 has an invalid length.
[  425.015588][T24110] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5751'.
[  425.020895][T24110] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5751'.
[  425.061282][T24112] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  427.370403][T24176] netlink: 'syz.1.5770': attribute type 4 has an invalid length.
[  427.374701][T24176] netlink: 'syz.1.5770': attribute type 4 has an invalid length.
[  427.534141][T24202] netlink: 'syz.0.5778': attribute type 1 has an invalid length.
[  428.216695][T24253] Cannot find add_set index 65279 as target
[  428.448871][T24277] netlink: 'syz.1.5803': attribute type 11 has an invalid length.
[  428.520848][T24282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.436800][T24315] netlink: 'syz.0.5815': attribute type 1 has an invalid length.
[  429.445488][T24315] __nla_validate_parse: 14 callbacks suppressed
[  429.445508][T24315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5815'.
[  430.726300][T24370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5832'.
[  430.736874][T24370] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  430.815745][T24375] netlink: 'syz.0.5831': attribute type 2 has an invalid length.
[  430.823318][T24375] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5831'.
[  431.068223][T24389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5838'.
[  431.164126][T24398] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5841'.
[  431.376764][T24411] netlink: 'syz.2.5845': attribute type 32 has an invalid length.
[  431.381966][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'.
[  431.384939][T24411] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  431.501842][T24417] sctp: [Deprecated]: syz.2.5847 (pid 24417) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.501842][T24417] Use struct sctp_sack_info instead
[  431.739478][T24433] dvmrp0: left allmulticast mode
[  431.741672][T24433] dvmrp8: left allmulticast mode
[  431.952137][T24447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5858'.
[  432.122348][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5864'.
[  432.176252][T24472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5866'.
[  432.184456][T24472] chnl_net:caif_netlink_parms(): no params data found
[  432.237329][T24472] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  432.312271][T24483] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5871'.
[  432.386771][T24490] syzkaller1: entered promiscuous mode
[  432.388660][T24490] syzkaller1: entered allmulticast mode
[  432.528116][T24505] netlink: 'syz.1.5878': attribute type 1 has an invalid length.
[  432.641724][T24515] siw: device registration error -23
[  432.805279][T24527] wg2: entered promiscuous mode
[  433.491472][T24531] netlink: 'syz.0.5886': attribute type 1 has an invalid length.
[  434.015082][T24583] bridge_slave_0: entered promiscuous mode
[  434.017575][T24583] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  434.908506][T24592] __nla_validate_parse: 4 callbacks suppressed
[  434.908524][T24592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5904'.
[  435.102158][T24604] sctp: [Deprecated]: syz.0.5908 (pid 24604) Use of int in maxseg socket option.
[  435.102158][T24604] Use struct sctp_assoc_value instead
[  435.214122][T24609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5910'.
[  435.218716][T24609] netlink: 'syz.0.5910': attribute type 29 has an invalid length.
[  435.891299][T24624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5914'.
[  436.034684][T24638] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  436.222769][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'.
[  436.357118][T24654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5923'.
[  436.365171][T24649] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5923'.
[  436.484847][T24656] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5925'.
[  436.542094][T24669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5927'.
[  436.605528][T24674] netlink: 'syz.1.5930': attribute type 1 has an invalid length.
[  436.608621][T24674] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5930'.
[  436.655777][T24677] netlink: 'syz.0.5931': attribute type 11 has an invalid length.
[  436.660583][T24677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5931'.
[  436.674095][T24679] netlink: 'syz.1.5932': attribute type 33 has an invalid length.
[  436.677280][T24679] netlink: 'syz.1.5932': attribute type 10 has an invalid length.
[  436.680160][T24679] team0: Device bond0 is of different type
[  436.748807][T24684] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  436.757799][T24685] netlink: 'syz.1.5934': attribute type 6 has an invalid length.
[  436.798341][T24691] syzkaller0: entered promiscuous mode
[  436.800675][T24691] syzkaller0: entered allmulticast mode
[  437.096399][T24726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.152648][T24726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.207315][T24726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  437.953786][T24808] x_tables: duplicate underflow at hook 3
[  438.177850][T24845] netlink: 'syz.0.5984': attribute type 1 has an invalid length.
[  438.180857][T24845] netlink: 'syz.0.5984': attribute type 1 has an invalid length.
[  438.183556][T24845] netlink: 'syz.0.5984': attribute type 2 has an invalid length.
[  438.203479][T24847] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  438.267091][T24853] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  438.388450][T24872] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  438.404685][T24873] pimreg3: entered allmulticast mode
[  438.424960][T24877] netlink: 'syz.0.5994': attribute type 29 has an invalid length.
[  438.841530][T24917] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  439.977677][T25016] __nla_validate_parse: 29 callbacks suppressed
[  439.977691][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6044'.
[  440.366995][T25031] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  440.374625][T25031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6049'.
[  440.387133][T25033] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  440.844644][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6063'.
[  440.996326][T25077] validate_nla: 7 callbacks suppressed
[  440.996345][T25077] netlink: 'syz.1.6066': attribute type 3 has an invalid length.
[  441.009434][T25077] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6066'.
[  441.015371][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6065'.
[  441.484168][T25110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6075'.
[  441.703095][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6082'.
[  441.906684][   T33] audit: type=1800 audit(1753661378.740:18): pid=25145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6086" name="blkio.bfq.time_recursive" dev="tmpfs" ino=10129 res=0 errno=0
[  442.182461][T25163] tap0: tun_chr_ioctl cmd 1074025678
[  442.184243][T25163] tap0: group set to 0
[  442.497340][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6093'.
[  442.665542][T25183] IPv6: syztnl1: Disabled Multicast RS
[  443.134840][T25196] x_tables: duplicate underflow at hook 3
[  443.194809][T25198] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6099'.
[  443.274541][T25204] openvswitch: netlink: IP tunnel dst address not specified
[  443.575071][T25217] tc_dump_action: action bad kind
[  443.578082][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6103'.
[  444.914735][T25307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.362576][T25337] veth11: entered promiscuous mode
[  445.674587][T25357] __nla_validate_parse: 7 callbacks suppressed
[  445.674598][T25357] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6142'.
[  445.844491][T25364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6144'.
[  446.235023][T25378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6149'.
[  446.238807][T25378] netlink: 'syz.2.6149': attribute type 2 has an invalid length.
[  446.244797][T25378] netlink: 'syz.2.6149': attribute type 1 has an invalid length.
[  446.249501][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6149'.
[  446.253993][T25378] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6149'.
[  446.702955][T25397] syzkaller1: entered promiscuous mode
[  446.705332][T25397] syzkaller1: entered allmulticast mode
[  447.562145][T25435] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6169'.
[  448.685539][T25521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6194'.
[  448.810809][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'.
[  448.814472][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6197'.
[  448.818076][T25529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.895061][T25534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6199'.
[  449.249003][T25552] netlink: 'syz.1.6205': attribute type 21 has an invalid length.
[  449.274077][T25552] netlink: 'syz.1.6205': attribute type 9 has an invalid length.
[  449.276692][T25553] netlink: 'syz.1.6205': attribute type 9 has an invalid length.
[  449.331764][T25556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.334500][T25553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  450.102496][T25598] sctp: [Deprecated]: syz.2.6220 (pid 25598) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.102496][T25598] Use struct sctp_sack_info instead
[  450.236339][T25610] x_tables: duplicate underflow at hook 3
[  450.244509][T25604] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  450.249608][T25604] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  450.921239][T25637] netlink: 'syz.1.6231': attribute type 7 has an invalid length.
[  450.923770][T25637] netlink: 'syz.1.6231': attribute type 8 has an invalid length.
[  450.926499][T25637] netlink: 'syz.1.6231': attribute type 4 has an invalid length.
[  450.929023][T25637] __nla_validate_parse: 3 callbacks suppressed
[  450.931656][T25637] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6231'.
[  450.977450][T25640] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6232'.
[  450.997189][T25640] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6232'.
[  451.093396][T25645] pim6reg1: entered promiscuous mode
[  451.095490][T25645] pim6reg1: entered allmulticast mode
[  451.338151][T25664] syzkaller0: MTU too low for tipc bearer
[  451.340271][T25664] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  452.125094][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6240'.
[  452.681111][T25718] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6255'.
[  452.684861][T25718] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6255'.
[  452.895335][T25734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6260'.
[  453.138315][T25752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6265'.
[  453.219824][T25758] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6269'.
[  453.234433][T25761] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6269'.
[  453.380208][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.382984][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  453.391551][T25775] sctp: [Deprecated]: syz.1.6276 (pid 25775) Use of int in max_burst socket option deprecated.
[  453.391551][T25775] Use struct sctp_assoc_value instead
[  453.494460][T25787] netlink: 'syz.0.6282': attribute type 1 has an invalid length.
[  453.511583][T25787] bond17: entered promiscuous mode
[  453.513324][T25787] bond17: entered allmulticast mode
[  453.515155][T25787] 8021q: adding VLAN 0 to HW filter on device bond17
[  453.527339][T25787] bridge10: entered promiscuous mode
[  453.529391][T25787] bridge10: entered allmulticast mode
[  453.531633][T25787] bond17: (slave bridge10): Enslaving as a backup interface with an up link
[  453.551997][T25785] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  453.620303][T19280] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  453.729635][ T5726] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  453.739208][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  453.743142][T25806] bridge0: left allmulticast mode
[  453.932038][T25829] Cannot find del_set index 3 as target
[  454.296957][T25879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.301596][T25880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.541139][T25899] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  454.608367][T25900] team0: Port device geneve0 removed
[  454.615339][T25899] netlink: 'syz.2.6314': attribute type 10 has an invalid length.
[  454.618606][T25899] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  454.623036][T25899] wlan1: mtu greater than device maximum
[  454.625477][T25899] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  454.779643][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  455.819314][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  456.169323][T25953] bond0: (slave bond_slave_0): Releasing backup interface
[  456.175118][T25953] bond0: (slave bond_slave_1): Releasing backup interface
[  456.186336][T25953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.190385][T25953] batman_adv: batadv0: Removing interface: 26
[  456.203906][T25953] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  456.383690][T25964] __nla_validate_parse: 24 callbacks suppressed
[  456.383704][T25964] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6335'.
[  456.560861][T25970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  456.568224][T25992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.577333][T25992] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6340'.
[  456.596325][T25993] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6340'.
[  456.600433][T25992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.703348][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6342'.
[  456.706187][T25998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'.
[  456.708934][T25998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6342'.
[  456.859212][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  456.866802][T26015] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6345'.
[  456.909562][T26017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6346'.
[  456.913460][T26017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6346'.
[  456.916695][T26017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6346'.
[  457.295950][T26040] netlink: 'syz.0.6355': attribute type 2 has an invalid length.
[  457.330540][T26043] netlink: 'syz.1.6356': attribute type 83 has an invalid length.
[  457.554076][T26049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.899205][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  457.989259][   T55] Bluetooth: hci1: Opcode 0x0c24 failed: -110
[  457.991556][T21179] Bluetooth: hci1: command 0x0406 tx timeout
[  458.440933][T26130] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  458.939379][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  459.407170][T26161] xfrm0: left allmulticast mode
[  459.452844][T19280] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  459.635187][T26177] netlink: 'syz.1.6401': attribute type 11 has an invalid length.
[  459.724680][T26186] netlink: 'syz.1.6403': attribute type 1 has an invalid length.
[  459.743286][T26186] bond12: entered promiscuous mode
[  459.745278][T26186] 8021q: adding VLAN 0 to HW filter on device bond12
[  459.979289][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  460.046782][T26200] netlink: 'syz.1.6407': attribute type 4 has an invalid length.
[  460.172976][T26208] syzkaller0: tun_chr_ioctl cmd 2147767511
[  460.354586][T26212] tipc: Trying to set illegal importance in message
[  460.526464][T26222] macvlan0: left allmulticast mode
[  460.528713][T26222] netlink: 'syz.2.6416': attribute type 1 has an invalid length.
[  460.940093][T26256] netlink: 'syz.2.6429': attribute type 12 has an invalid length.
[  461.019218][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  461.427463][T26289] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  461.629781][T26303] __nla_validate_parse: 31 callbacks suppressed
[  461.629805][T26303] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6441'.
[  461.707071][T26307] : left promiscuous mode
[  461.748280][T26309] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6444'.
[  461.861070][T26323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.876425][T26323] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6447'.
[  461.931528][T26325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6448'.
[  461.993450][T26334] geneve0: left allmulticast mode
[  462.059343][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  462.197445][T26348] tipc: Resetting bearer <eth:syzkaller0>
[  462.245686][T26350] syzkaller0: left promiscuous mode
[  462.247373][T26350] syzkaller0: left allmulticast mode
[  462.249854][T26350] tipc: Resetting bearer <eth:syzkaller0>
[  462.261961][T26351] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  462.362775][T26354] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6457'.
[  462.624680][T26366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6461'.
[  462.980240][T26385] netlink: 'syz.2.6467': attribute type 1 has an invalid length.
[  462.983288][T26385] netlink: 'syz.2.6467': attribute type 1 has an invalid length.
[  463.066569][T26393] netlink: 'syz.2.6469': attribute type 3 has an invalid length.
[  463.072507][T26393] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6469'.
[  463.099322][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  463.173427][T26397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6470'.
[  463.404526][T26415] : renamed from batadv_slave_1
[  463.524611][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'.
[  463.527716][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'.
[  464.139185][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  464.930522][T26456] block nbd2: server does not support multiple connections per device.
[  464.934842][T26456] block nbd2: shutting down sockets
[  465.179276][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  465.237773][T26479] nbd: must specify a device to reconfigure
[  465.315157][T26485] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  465.459013][T26495] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  465.878648][T26534] netlink: 'syz.0.6513': attribute type 1 has an invalid length.
[  466.219333][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  466.246547][T26569] netlink: 'syz.1.6525': attribute type 4 has an invalid length.
[  466.263726][T26572] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.677600][T26618] delete_channel: no stack
[  466.721440][T26604] delete_channel: no stack
[  466.764679][T26625] netlink: 'syz.1.6542': attribute type 10 has an invalid length.
[  466.767294][T26625] netlink: 'syz.1.6542': attribute type 49 has an invalid length.
[  466.996797][T26657] __nla_validate_parse: 13 callbacks suppressed
[  466.996813][T26657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6551'.
[  467.080975][T26662] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6553'.
[  467.116019][T26667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6555'.
[  467.140905][T26665] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6554'.
[  467.233131][T26674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6557'.
[  467.236078][T26674] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6557'.
[  467.238860][T26674] netlink: 'syz.0.6557': attribute type 6 has an invalid length.
[  467.241525][T26674] netlink: 'syz.0.6557': attribute type 5 has an invalid length.
[  467.243994][T26674] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6557'.
[  467.259137][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  467.442561][T26687] syzkaller1: entered promiscuous mode
[  467.443098][T26688] netlink: 'syz.0.6562': attribute type 33 has an invalid length.
[  467.444459][T26687] syzkaller1: entered allmulticast mode
[  467.447823][T26688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6562'.
[  467.487199][T26687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6561'.
[  468.299284][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  468.775763][T26740] netlink: 'syz.1.6577': attribute type 1 has an invalid length.
[  468.856733][T26745] netlink: 'syz.0.6579': attribute type 7 has an invalid length.
[  468.859565][T26745] netlink: 'syz.0.6579': attribute type 3 has an invalid length.
[  468.862031][T26745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6579'.
[  469.341152][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  470.379297][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  470.444092][T26765] tipc: Resetting bearer <eth:syzkaller0>
[  470.447505][T21299] syz2: Port: 1 Link ACTIVE
[  470.452691][T26765] syzkaller0: tun_chr_ioctl cmd 1074025684
[  470.484958][T26764] tipc: Resetting bearer <eth:syzkaller0>
[  470.487387][   T96] syz2: Port: 1 Link DOWN
[  470.846519][T26826] tipc: Resetting bearer <eth:syzkaller0>
[  470.905992][ T5279] udevd[5279]: worker [24675] terminated by signal 33 (Unknown signal 33)
[  470.910288][ T5279] udevd[5279]: worker [24675] failed while handling '/devices/virtual/mac80211_hwsim/hwsim25/net/wlan1'
[  470.914309][T26825] tipc: Resetting bearer <eth:syzkaller0>
[  471.060523][T26836] netlink: 'syz.1.6608': attribute type 6 has an invalid length.
[  471.195301][T26846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  471.198173][T26846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  471.202425][T26846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  471.205625][T26846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  471.419261][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  471.424246][T11263] tipc: Resetting bearer <eth:syzkaller0>
[  471.536137][T26872] netlink: 'syz.1.6618': attribute type 1 has an invalid length.
[  471.538890][T26872] netlink: 'syz.1.6618': attribute type 1 has an invalid length.
[  471.588458][T26878] bridge_slave_0: left promiscuous mode
[  471.600457][T26878] veth1_to_team: left allmulticast mode
[  471.603842][T26878] 0: left allmulticast mode
[  471.606012][T26878] hsr_slave_0: left allmulticast mode
[  471.608699][T26878] vlan0: left promiscuous mode
[  471.615508][T26878] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  471.626515][T26878] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  471.636467][T26878] ip6gre1: left allmulticast mode
[  471.639420][T26878] ipvlan2: left promiscuous mode
[  471.641439][T26878] vti0: left promiscuous mode
[  471.643610][T26878] tipc: Resetting bearer <eth:syzkaller0>
[  471.660616][T26878] macsec1: left promiscuous mode
[  471.662278][T26878] macsec1: left allmulticast mode
[  471.664227][T26878] vlan3: left promiscuous mode
[  471.665711][T26878] gretap0: left promiscuous mode
[  471.675423][T26878] bond4: left promiscuous mode
[  471.677020][T26878] wireguard0: left promiscuous mode
[  471.680034][T26878] bond6: left promiscuous mode
[  471.681608][T26878] bridge3: left promiscuous mode
[  471.683940][T26878] veth7: left promiscuous mode
[  471.686423][T26878] ip6erspan0: left allmulticast mode
[  471.689451][T26878] bridge5: left allmulticast mode
[  471.691150][T26878] ip6gre3: left promiscuous mode
[  471.732421][T26878] bond12: left promiscuous mode
[  471.736424][T26878] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.739821][T26878] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.742796][T26878] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.745704][T26878] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.875143][T26893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.958142][T26906] netlink: 'syz.0.6628': attribute type 12 has an invalid length.
[  472.019185][T26910] __nla_validate_parse: 9 callbacks suppressed
[  472.019197][T26910] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6628'.
[  472.103069][T26920] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6631'.
[  472.126933][T26921] sctp: [Deprecated]: syz.2.6630 (pid 26921) Use of struct sctp_assoc_value in delayed_ack socket option.
[  472.126933][T26921] Use struct sctp_sack_info instead
[  472.159531][T26921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6630'.
[  472.343866][T26940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.459280][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  472.486527][T26950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6641'.
[  472.595185][T26954] netlink: 'syz.0.6643': attribute type 1 has an invalid length.
[  472.598254][T26954] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6643'.
[  472.606752][T26954] NCSI netlink: No device for ifindex 813332851
[  473.089806][T26974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6649'.
[  473.092662][T26974] nbd: couldn't find a device at index 65546
[  473.129439][T26981] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.6651'.
[  473.132376][T26981] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  473.188514][T26984] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6652'.
[  473.200896][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6652'.
[  473.204047][T26986] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6653'.
[  473.414926][T27002] netlink: 'syz.1.6656': attribute type 2 has an invalid length.
[  473.499283][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  474.141104][T27036] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  474.166652][T27041] netlink: 'syz.2.6671': attribute type 15 has an invalid length.
[  474.352603][T27058] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  474.376527][T27058] netlink: 'syz.0.6676': attribute type 30 has an invalid length.
[  474.381237][T27058] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  474.539233][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  474.570724][T27088] netlink: 'syz.1.6685': attribute type 1 has an invalid length.
[  474.637281][T27095] openvswitch: netlink: EtherType 0 is less than min 600
[  475.579317][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  475.630538][   T33] audit: type=1800 audit(1753661412.470:19): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6701" name=14 dev="tmpfs" ino=11374 res=0 errno=0
[  475.843314][T27159] siw: device registration error -23
[  475.952523][T27176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.194602][T27197] IPVS: set_ctl: invalid protocol: 0 172.20.20.26:20004
[  476.619278][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  477.257348][T27254] __nla_validate_parse: 29 callbacks suppressed
[  477.257367][T27254] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6741'.
[  477.445425][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6746'.
[  477.659581][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  477.741551][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6751'.
[  477.744962][T27296] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6751'.
[  477.782956][T27301] netlink: 'syz.2.6753': attribute type 3 has an invalid length.
[  477.828414][T27309] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6754'.
[  477.905582][T27317] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6756'.
[  477.930595][T27320] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6757'.
[  478.002681][T27324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6758'.
[  478.015216][T27324] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6758'.
[  478.062004][T27330] veth0_to_batadv: entered allmulticast mode
[  478.065446][T27331] sctp: [Deprecated]: syz.2.6760 (pid 27331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.065446][T27331] Use struct sctp_sack_info instead
[  478.400512][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6769'.
[  478.699229][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  479.078566][T27398] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  479.739199][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  479.812390][T27455] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  480.114212][T27479] netlink: 'syz.1.6810': attribute type 4 has an invalid length.
[  480.118222][T27479] : renamed from bond0
[  480.444092][T27510] 8021q: adding VLAN 0 to HW filter on device bond0
[  480.779313][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  481.240761][T27589] sctp: [Deprecated]: syz.1.6843 (pid 27589) Use of int in max_burst socket option.
[  481.240761][T27589] Use struct sctp_assoc_value instead
[  481.819206][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  482.014250][T27620] netlink: 'syz.2.6854': attribute type 1 has an invalid length.
[  482.299615][T21179] Bluetooth: hci2: command 0x0406 tx timeout
[  482.334576][T27652] __nla_validate_parse: 23 callbacks suppressed
[  482.334588][T27652] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6864'.
[  482.339965][T27650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6863'.
[  482.452911][T27666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6866'.
[  482.540235][T27676] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.859226][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  483.605716][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6882'.
[  483.886525][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'.
[  483.895711][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'.
[  483.899436][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  483.904410][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'.
[  483.916471][T27741] openvswitch: netlink: IP tunnel dst address not specified
[  484.053584][T27748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6891'.
[  484.451824][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6896'.
[  484.457690][T27765] gtp1: entered promiscuous mode
[  484.460910][T27765] gtp1: entered allmulticast mode
[  484.742120][T27789] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6903'.
[  484.944453][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  485.825586][T27893] No such timeout policy "syz0"
[  485.979223][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  486.025111][T27919] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  486.031500][T27919] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  486.041610][T27920] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  486.044857][T27920] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  486.147909][T27933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  486.206057][T27933] syzkaller1: entered promiscuous mode
[  486.207768][T27933] syzkaller1: entered allmulticast mode
[  486.274968][T27942] netlink: 'syz.0.6945': attribute type 1 has an invalid length.
[  486.448510][T27958] netlink: 'syz.1.6950': attribute type 1 has an invalid length.
[  487.019218][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  487.197109][T28019] netlink: 'syz.1.6971': attribute type 26 has an invalid length.
[  487.400059][T28035] __nla_validate_parse: 16 callbacks suppressed
[  487.400085][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6977'.
[  487.596605][T28054] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6984'.
[  487.663764][T28064] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6985'.
[  487.745630][T28069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6988'.
[  488.059382][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  488.063090][T28100] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6994'.
[  488.249441][T28126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6998'.
[  488.627578][T28162] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7007'.
[  488.807059][T28175] netlink: 'syz.2.7011': attribute type 21 has an invalid length.
[  488.807099][T28174] netlink: 'syz.2.7011': attribute type 21 has an invalid length.
[  488.819363][T28175] netlink: 'syz.2.7011': attribute type 1 has an invalid length.
[  488.822412][T28175] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7011'.
[  488.849440][T28174] netlink: 'syz.2.7011': attribute type 1 has an invalid length.
[  488.852018][T28174] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7011'.
[  489.099281][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  489.211952][T28203] netlink: 51 bytes leftover after parsing attributes in process `syz.2.7020'.
[  489.515281][T28224] netlink: 'syz.0.7027': attribute type 6 has an invalid length.
[  489.518530][T28224] netlink: 'syz.0.7027': attribute type 5 has an invalid length.
[  490.139425][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  490.152279][T28273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.155975][T28273] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  490.158962][T28273] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  490.173778][T28273] tipc: Resetting bearer <eth:syzkaller0>
[  490.691071][T28300] IPv6: NLM_F_REPLACE set, but no existing node found!
[  490.828738][T28303] delete_channel: no stack
[  490.835135][T28308] netlink: 'syz.0.7054': attribute type 7 has an invalid length.
[  490.914611][T28311] netem: change failed
[  491.023430][T28326] veth1_to_bond: left allmulticast mode
[  491.026211][T28328] pim6reg1: entered promiscuous mode
[  491.027902][T28328] pim6reg1: entered allmulticast mode
[  491.179304][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  491.722164][T28370] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20003
[  492.219716][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  492.352414][T28404] rdma_rxe: rxe_newlink: failed to add lo
[  492.370408][T28404] 0{X: left allmulticast mode
[  492.394192][T28404] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.399002][T28404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  492.525230][T28407] __nla_validate_parse: 28 callbacks suppressed
[  492.525251][T28407] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7083'.
[  492.556014][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  492.989682][T28433] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  492.995121][T28433] CPU: 0 UID: 0 PID: 28433 Comm: syz.1.7089 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  492.995137][T28433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  492.995144][T28433] Call Trace:
[  492.995150][T28433]  <TASK>
[  492.995156][T28433]  dump_stack_lvl+0x189/0x250
[  492.995179][T28433]  ? __pfx_dump_stack_lvl+0x10/0x10
[  492.995191][T28433]  ? __pfx__printk+0x10/0x10
[  492.995206][T28433]  ? kernfs_path_from_node+0x2c/0x260
[  492.995222][T28433]  ? kernfs_path_from_node+0x2c/0x260
[  492.995239][T28433]  ? kernfs_path_from_node+0x2c/0x260
[  492.995258][T28433]  ? kernfs_path_from_node+0x22c/0x260
[  492.995303][T28433]  ? kernfs_path_from_node+0x2c/0x260
[  492.995322][T28433]  sysfs_warn_dup+0x8e/0xa0
[  492.995348][T28433]  sysfs_do_create_link_sd+0xc0/0x110
[  492.995365][T28433]  device_add_class_symlinks+0x1cf/0x240
[  492.995384][T28433]  device_add+0x475/0xb50
[  492.995399][T28433]  wiphy_register+0x199a/0x26b0
[  492.995431][T28433]  ? __pfx_wiphy_register+0x10/0x10
[  492.995441][T28433]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  492.995459][T28433]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  492.995475][T28433]  ieee80211_register_hw+0x33e1/0x4120
[  492.995500][T28433]  ? ieee80211_register_hw+0x1431/0x4120
[  492.995517][T28433]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  492.995531][T28433]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  492.995549][T28433]  ? __hrtimer_setup+0x187/0x210
[  492.995559][T28433]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  492.995574][T28433]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  492.995603][T28433]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  492.995616][T28433]  ? trace_kmalloc+0x1f/0xd0
[  492.995628][T28433]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  492.995639][T28433]  ? kstrndup+0xbf/0x160
[  492.995654][T28433]  hwsim_new_radio_nl+0xea4/0x1b10
[  492.995668][T28433]  ? __pfx___nla_validate_parse+0x10/0x10
[  492.995686][T28433]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.995704][T28433]  ? __nla_parse+0x40/0x60
[  492.995716][T28433]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  492.995732][T28433]  genl_family_rcv_msg_doit+0x215/0x300
[  492.995745][T28433]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  492.995777][T28433]  ? bpf_lsm_capable+0x9/0x20
[  492.995792][T28433]  ? security_capable+0x7e/0x2e0
[  492.995807][T28433]  genl_rcv_msg+0x60e/0x790
[  492.995819][T28433]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.995828][T28433]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  492.995848][T28433]  netlink_rcv_skb+0x208/0x470
[  492.995863][T28433]  ? __pfx_genl_rcv_msg+0x10/0x10
[  492.995873][T28433]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  492.995892][T28433]  ? down_read+0x1ad/0x2e0
[  492.995903][T28433]  genl_rcv+0x28/0x40
[  492.995911][T28433]  netlink_unicast+0x75c/0x8e0
[  492.995927][T28433]  netlink_sendmsg+0x805/0xb30
[  492.995943][T28433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.995955][T28433]  ? aa_sock_msg_perm+0x94/0x160
[  492.995966][T28433]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  492.995974][T28433]  ? __pfx_netlink_sendmsg+0x10/0x10
[  492.995986][T28433]  __sock_sendmsg+0x21c/0x270
[  492.995998][T28433]  ____sys_sendmsg+0x505/0x830
[  492.996012][T28433]  ? __pfx_____sys_sendmsg+0x10/0x10
[  492.996029][T28433]  ? import_iovec+0x74/0xa0
[  492.996042][T28433]  ___sys_sendmsg+0x21f/0x2a0
[  492.996055][T28433]  ? __pfx____sys_sendmsg+0x10/0x10
[  492.996086][T28433]  ? __fget_files+0x2a/0x420
[  492.996093][T28433]  ? __fget_files+0x3a0/0x420
[  492.996106][T28433]  __x64_sys_sendmsg+0x19b/0x260
[  492.996119][T28433]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  492.996136][T28433]  ? rcu_is_watching+0x15/0xb0
[  492.996149][T28433]  ? do_syscall_64+0xbe/0x3b0
[  492.996161][T28433]  do_syscall_64+0xfa/0x3b0
[  492.996169][T28433]  ? lockdep_hardirqs_on+0x9c/0x150
[  492.996177][T28433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.996185][T28433]  ? exc_page_fault+0x9f/0xf0
[  492.996194][T28433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.996202][T28433] RIP: 0033:0x7f2c7d38e9a9
[  492.996213][T28433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  492.996221][T28433] RSP: 002b:00007f2c7e20c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  492.996233][T28433] RAX: ffffffffffffffda RBX: 00007f2c7d5b5fa0 RCX: 00007f2c7d38e9a9
[  492.996239][T28433] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  492.996245][T28433] RBP: 00007f2c7d410d69 R08: 0000000000000000 R09: 0000000000000000
[  492.996250][T28433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  492.996256][T28433] R13: 0000000000000000 R14: 00007f2c7d5b5fa0 R15: 00007fff899b91a8
[  492.996294][T28433]  </TASK>
[  493.145323][T28434] validate_nla: 1 callbacks suppressed
[  493.145343][T28434] netlink: 'syz.1.7089': attribute type 1 has an invalid length.
[  493.208534][T28434] 8021q: adding VLAN 0 to HW filter on device bond13
[  493.246487][T28433] bond13: (slave veth13): Enslaving as an active interface with a down link
[  493.259203][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  493.273282][T28433] vlan5: entered allmulticast mode
[  493.275088][T28433] veth1: entered allmulticast mode
[  493.288933][T28445] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7091'.
[  493.313038][T28433] netlink: 45 bytes leftover after parsing attributes in process `syz.1.7089'.
[  493.317774][T28431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.338128][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7092'.
[  494.299540][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  494.317803][T28504] veth13: entered promiscuous mode
[  494.716219][T28521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7114'.
[  495.067686][T28530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7117'.
[  495.322433][T28532] netlink: 'syz.1.7118': attribute type 13 has an invalid length.
[  495.332423][T28532] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  495.339228][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  495.678616][T28549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7123'.
[  495.686713][T28549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  495.746170][T28551] IPVS: stopping backup sync thread 17189 ...
[  495.910700][T28559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7127'.
[  495.920407][T28559] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  496.276150][T28582] sctp: [Deprecated]: syz.0.7136 (pid 28582) Use of int in max_burst socket option.
[  496.276150][T28582] Use struct sctp_assoc_value instead
[  496.379175][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  496.394379][T28595] dvmrp0: entered allmulticast mode
[  497.170638][T28623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7146'.
[  497.419223][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  497.613107][T28634] netlink: 'syz.1.7150': attribute type 9 has an invalid length.
[  497.619433][T28634] netlink: 'syz.1.7150': attribute type 6 has an invalid length.
[  497.660504][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7150'.
[  497.694330][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7152'.
[  497.706636][T28645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7152'.
[  497.763175][T28650] netlink: 'syz.1.7154': attribute type 1 has an invalid length.
[  497.771129][T28653] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  497.787236][T28650] 8021q: adding VLAN 0 to HW filter on device bond14
[  497.999307][T28666] netlink: 'syz.2.7157': attribute type 6 has an invalid length.
[  498.084239][T28674] erspan0: entered promiscuous mode
[  498.106613][T28674] erspan0: left promiscuous mode
[  498.223655][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7162'.
[  498.255809][T28689] netlink: 'syz.1.7165': attribute type 1 has an invalid length.
[  498.258495][T28689] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7165'.
[  498.348530][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7166'.
[  498.366535][T28694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7166'.
[  498.380572][T28694] netlink: 'syz.1.7166': attribute type 19 has an invalid length.
[  498.451704][T28713] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7171'.
[  498.459294][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  498.460955][T28709] tap0: tun_chr_ioctl cmd 1074025678
[  498.468600][T28709] tap0: group set to 0
[  498.514184][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7172'.
[  498.525365][T28716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  498.528324][T28716] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  498.543571][T28719] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7174'.
[  499.165432][T28778] xt_CT: No such helper "snmp_trap"
[  499.499247][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  499.510352][T28823] netlink: 'syz.1.7197': attribute type 1 has an invalid length.
[  499.787952][T28856] netlink: 'syz.2.7211': attribute type 4 has an invalid length.
[  499.800480][T28856] netlink: 'syz.2.7211': attribute type 4 has an invalid length.
[  499.885574][T28865] netlink: 'syz.2.7215': attribute type 21 has an invalid length.
[  499.892462][T19280] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  499.936134][T28865] netlink: 'syz.2.7215': attribute type 11 has an invalid length.
[  500.539291][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  500.915396][T28933] netlink: 'syz.0.7228': attribute type 6 has an invalid length.
[  500.954596][T28931] macsec0: left promiscuous mode
[  500.957869][T28931] macsec0: left allmulticast mode
[  501.034285][T28939] netlink: zone id is out of range
[  501.036381][T28939] netlink: zone id is out of range
[  501.038363][T28939] netlink: zone id is out of range
[  501.040656][T28939] netlink: zone id is out of range
[  501.064775][T28944] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  501.067209][T28944] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  501.499442][T21179] Bluetooth: hci2: command 0x0406 tx timeout
[  501.579418][    C0] net_ratelimit: 1 callbacks suppressed
[  501.579472][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  501.674183][T28987] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  501.676758][T28987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.680980][T28987] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  501.683355][T28987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.686362][T28987] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  501.688728][T28987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.693418][T28987] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  501.695760][T28987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  501.698674][T28987] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  501.847347][T28999] netlink: 'syz.2.7245': attribute type 1 has an invalid length.
[  501.880024][T28999] 8021q: adding VLAN 0 to HW filter on device bond15
[  501.894504][T28999] ipvlan2: entered allmulticast mode
[  501.896764][T28999] bond15: entered allmulticast mode
[  501.905794][T28999] bond15: (slave gretap2): making interface the new active one
[  501.908758][T28999] gretap2: entered allmulticast mode
[  501.912400][T28999] bond15: (slave gretap2): Enslaving as an active interface with an up link
[  501.938618][T28999] syz.2.7245 (28999) used greatest stack depth: 18712 bytes left
[  502.075968][T29014] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  502.081055][T29014] netlink: 'syz.0.7250': attribute type 1 has an invalid length.
[  502.406764][T29030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  502.409988][T29030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  502.413075][T29030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  502.416595][T29030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  502.423761][T29030] geneve5: entered promiscuous mode
[  503.108253][T29085] __nla_validate_parse: 90 callbacks suppressed
[  503.108272][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7274'.
[  503.116544][T29085] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7274'.
[  503.121590][T29090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7272'.
[  503.397443][T29121] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7285'.
[  503.440313][T29121] bond0 (unregistering): Released all slaves
[  503.667897][T29144] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7291'.
[  503.703858][T29149] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7292'.
[  503.727060][T29151] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7293'.
[  503.732098][T29151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7293'.
[  503.775867][T29156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7292'.
[  504.175115][T29201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7305'.
[  505.950004][T29277] syzkaller0: tun_chr_ioctl cmd 1074025678
[  506.212524][T29294] validate_nla: 2 callbacks suppressed
[  506.212539][T29294] netlink: 'syz.0.7339': attribute type 23 has an invalid length.
[  506.298936][T29306] RDS: rds_bind could not find a transport for ::ffff:172.30.253.1, load rds_tcp or rds_rdma?
[  506.775807][T29342] net_ratelimit: 146 callbacks suppressed
[  506.775826][T29342] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  506.779183][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  506.781062][T29342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.120840][T29359] netlink: 'syz.0.7362': attribute type 1 has an invalid length.
[  507.150280][T29361] netlink: 'syz.1.7361': attribute type 3 has an invalid length.
[  507.156174][T29361] syz_tun: entered allmulticast mode
[  507.161939][T29361] siw: device registration error -23
[  507.203466][T29361] 8021q: adding VLAN 0 to HW filter on device 
[  507.206668][T29361] 8021q: adding VLAN 0 to HW filter on device team0
[  507.222242][T29361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  507.242811][T29360] syz_tun: left allmulticast mode
[  507.584937][T29383] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  507.587482][T29383] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  507.590164][T29383] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  507.592893][T29383] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  507.819244][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  508.205604][T29415] __nla_validate_parse: 17 callbacks suppressed
[  508.205620][T29415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7379'.
[  508.256412][T29420] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.7381'.
[  508.446275][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7389'.
[  508.695636][T29462] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7395'.
[  508.859192][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  508.874568][T29479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7401'.
[  509.263051][T29488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7404'.
[  509.437660][ T5861] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  509.787800][T29494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7404'.
[  509.899229][    C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  509.910343][T29504] netlink: 'syz.1.7407': attribute type 21 has an invalid length.
[  509.912969][T29504] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7407'.
[  509.915836][T29504] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7407'.
[  510.095611][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7407'.
[  510.188618][T29512] openvswitch: netlink: IPv4 tun info is not correct
[  510.583664][T29541] bond3: (slave geneve2): Releasing active interface
[  510.588710][T29541] bond6: (slave bridge0): Releasing backup interface
[  510.594844][T29541] bond7: (slave geneve4): Releasing active interface
[  510.605950][T29541] bond8: (slave bridge4): Releasing backup interface
[  510.612796][T29541] bond10: (slave gretap0): Releasing active interface
[  510.618794][T29541] bond15: (slave vti0): Releasing backup interface
[  510.630316][T29541] bond16: (slave gretap5): Releasing active interface
[  510.642793][T29541] bond17: (slave bridge10): Removing an active aggregator
[  510.647382][T29541] bond17: (slave bridge10): Releasing backup interface
[  510.653119][T29541] bridge10: left promiscuous mode
[  510.655405][T29541] bridge10: left allmulticast mode
[  511.473261][T29604] netlink: 'syz.0.7438': attribute type 1 has an invalid length.
[  511.512887][T29606] bond18: entered promiscuous mode
[  511.515006][T29606] bond18: entered allmulticast mode
[  511.516858][T29606] 8021q: adding VLAN 0 to HW filter on device bond18
[  511.519443][T29597] sctp: [Deprecated]: syz.2.7435 (pid 29597) Use of struct sctp_assoc_value in delayed_ack socket option.
[  511.519443][T29597] Use struct sctp_sack_info instead
[  511.524920][T29600] nbd: couldn't find a device at index 0
[  511.526817][T29597] nbd: couldn't find a device at index 0
[  511.554977][T29606] bridge15: entered promiscuous mode
[  511.556978][T29606] bridge15: entered allmulticast mode
[  511.559596][T29606] bond18: (slave bridge15): Enslaving as a backup interface with an up link
[  511.576068][T29613] IPv4: Oversized IP packet from 127.202.26.0
[  511.582434][T29607] bridge16: entered promiscuous mode
[  511.586111][T29607] bridge16: entered allmulticast mode
[  511.588097][T29607] bond18: (slave bridge16): Enslaving as a backup interface with a down link
[  511.592389][T29610] x9`.Ā*|: renamed from bridge_slave_0
[  511.619612][T19280] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  511.827090][T29624] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.831226][T29624] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.833886][T29624] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.836513][T29624] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  511.844987][T29630] gretap0: entered promiscuous mode
[  511.870321][T29624] 0{X: renamed from gretap0
[  511.873111][T29624] 0{X: left promiscuous mode
[  511.874700][T29624] 0{X: entered allmulticast mode
[  511.879045][T29624] net_ratelimit: 1 callbacks suppressed
[  511.881211][T29624] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  512.646337][T29645] xfrm2: entered promiscuous mode
[  512.647985][T29645] xfrm2: entered allmulticast mode
[  512.751805][T29655] netlink: 'syz.2.7451': attribute type 10 has an invalid length.
[  512.754611][T29655] team0: Device dummy0 is up. Set it down before adding it as a team port
[  512.987192][T29658] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.045005][T29658] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.097175][T29658] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.152264][T29658] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  513.216726][T29658] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.226657][T29658] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  513.240385][T29658] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.254723][T29658] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.381020][T29697] __nla_validate_parse: 16 callbacks suppressed
[  513.381032][T29697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7466'.
[  513.877481][T29707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7469'.
[  513.903809][T29707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7469'.
[  514.408126][T29724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7474'.
[  514.510612][T29740] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7480'.
[  514.786158][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7483'.
[  514.828965][T29764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7485'.
[  514.843992][T29766] openvswitch: netlink: Multiple metadata blocks provided
[  514.859724][T29766] netlink: 'syz.1.7484': attribute type 23 has an invalid length.
[  514.888356][T29770] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  514.888592][T29772] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7488'.
[  514.952239][T29770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7486'.
[  514.970922][T29770] netlink: 'syz.2.7486': attribute type 9 has an invalid length.
[  515.024992][T29787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7493'.
[  515.435647][T29832] netlink: 'syz.0.7503': attribute type 1 has an invalid length.
[  515.464387][T29835] netlink: 'syz.2.7504': attribute type 1 has an invalid length.
[  515.610655][T29849] netlink: 'syz.0.7508': attribute type 5 has an invalid length.
[  515.662674][T29852] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  515.707447][T29854] netlink: 'syz.2.7510': attribute type 1 has an invalid length.
[  515.710349][T29854] netlink: 'syz.2.7510': attribute type 2 has an invalid length.
[  516.551493][T29868] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  516.601030][T29878] netlink: 'syz.1.7516': attribute type 5 has an invalid length.
[  516.693280][T29885] ip6t_srh: unknown srh invflags 4449
[  517.535672][T29981] netlink: 'syz.2.7548': attribute type 23 has an invalid length.
[  517.724936][T29998] netlink: 'syz.1.7555': attribute type 7 has an invalid length.
[  517.727416][T29998] netlink: 'syz.1.7555': attribute type 8 has an invalid length.
[  517.737161][T29998] pim6reg1: entered promiscuous mode
[  517.738969][T29998] pim6reg1: entered allmulticast mode
[  517.747997][T29998] IPVS: set_ctl: invalid protocol: 108 172.20.20.26:20002
[  517.975152][T30018] vlan0: entered promiscuous mode
[  517.977124][T30018] vlan0: left allmulticast mode
[  518.129198][T30028] wg2: left promiscuous mode
[  518.136253][T30028] vlan0: left promiscuous mode
[  518.145003][T30028] veth11: left promiscuous mode
[  518.151231][T30028] veth13: left promiscuous mode
[  518.326592][T30053] netlink: 'syz.0.7573': attribute type 1 has an invalid length.
[  518.334998][T30053] netlink: 'syz.0.7573': attribute type 4 has an invalid length.
[  518.448277][T30058] __nla_validate_parse: 33 callbacks suppressed
[  518.448295][T30058] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7574'.
[  519.102424][T30081] netlink: 558 bytes leftover after parsing attributes in process `syz.1.7582'.
[  519.270504][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  519.288973][T30096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7586'.
[  519.396509][T30108] netlink: 'syz.2.7589': attribute type 1 has an invalid length.
[  519.437490][T30108] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.457243][T30111] _Z`Ԁ@: entered promiscuous mode
[  519.471556][T30111] netlink: 'syz.1.7590': attribute type 10 has an invalid length.
[  519.506060][T30108] bond0: (slave veth19): Enslaving as an active interface with a down link
[  519.512516][T30111] : (slave team0): refused to change device type
[  519.518131][T30107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.522487][T30110] delete_channel: no stack
[  519.583699][T30120] netlink: 'syz.0.7594': attribute type 5 has an invalid length.
[  519.744905][T30130] netlink: 'syz.1.7597': attribute type 1 has an invalid length.
[  519.810992][T30135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7599'.
[  519.814688][T30135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.112786][T30158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7605'.
[  520.118917][T30158] netlink: 364 bytes leftover after parsing attributes in process `syz.2.7605'.
[  520.127462][T30158] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  520.140910][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7605'.
[  520.278250][T30175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7611'.
[  520.281544][T30175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7611'.
[  520.361232][T30184] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7614'.
[  520.445508][T30192] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.459376][T30192] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.461876][T30192] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.464386][T30192] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.467107][T30192] geneve5: entered promiscuous mode
[  520.758949][T30224] SET target dimension over the limit!
[  520.936582][T30236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  521.336791][T30264] pimreg: entered allmulticast mode
[  521.966577][T30310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.218637][T30268] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  523.608902][T30399] __nla_validate_parse: 90 callbacks suppressed
[  523.608993][T30399] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7684'.
[  523.667225][T30405] delete_channel: no stack
[  523.783910][T30424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7691'.
[  523.786738][T30424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7691'.
[  523.792637][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7691'.
[  523.844547][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7691'.
[  523.847974][T30424] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7691'.
[  523.878605][T30431] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7692'.
[  524.581348][T30448] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7696'.
[  524.587521][T30450] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7697'.
[  524.647896][T30456] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7700'.
[  524.858357][T30474] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  524.879600][T30474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.904165][T30476] openvswitch: netlink: Message has 5 unknown bytes.
[  524.966653][T30483] validate_nla: 3 callbacks suppressed
[  524.966666][T30483] netlink: 'syz.0.7710': attribute type 1 has an invalid length.
[  524.988981][T30483] 8021q: adding VLAN 0 to HW filter on device bond19
[  525.365998][T30516] netlink: 'syz.0.7719': attribute type 1 has an invalid length.
[  525.554676][T30530] netlink: 'syz.0.7723': attribute type 1 has an invalid length.
[  525.765794][T30543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  525.770104][T30543] syzkaller0: entered promiscuous mode
[  525.772531][T30543] syzkaller0: entered allmulticast mode
[  525.775328][T30543] tipc: Resetting bearer <eth:syzkaller0>
[  525.975724][T30562] tipc: Resetting bearer <eth:syzkaller0>
[  525.988677][T21299] syz2: Port: 1 Link ACTIVE
[  526.008514][T30561] tipc: Resetting bearer <eth:syzkaller0>
[  526.011793][T22938] syz2: Port: 1 Link DOWN
[  527.021249][T11263] tipc: Resetting bearer <eth:syzkaller0>
[  528.020211][T30707] bridge0: Device is already in use.
[  528.233876][T30717] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  528.236094][T30717] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  528.760750][T30764] __nla_validate_parse: 28 callbacks suppressed
[  528.760765][T30764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7792'.
[  528.888410][T30771] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  528.966578][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7796'.
[  529.033228][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7796'.
[  529.040149][T30782] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7796'.
[  529.243968][T30801] tipc: Failed to remove unknown binding: 66,1,1/2640855643:3812742208/3812742210
[  529.247106][T30801] tipc: Failed to remove unknown binding: 66,1,1/2640855643:3812742208/3812742210
[  529.343461][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7804'.
[  529.410311][T30822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7807'.
[  529.434560][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7806'.
[  529.437884][T30820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7806'.
[  529.453118][T30824] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  529.534527][T30836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7812'.
[  529.683899][T30849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.768406][T30856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7820'.
[  529.857709][T26532] smc: removing ib device syz0
[  531.123761][T30935] x_tables: duplicate underflow at hook 2
[  531.257405][T30941] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  531.262021][T30941] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  531.703198][T30957] netlink: 'syz.2.7853': attribute type 7 has an invalid length.
[  531.706026][T30957] netlink: 'syz.2.7853': attribute type 8 has an invalid length.
[  532.123448][T30991] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  532.175302][T30997] wireguard1: entered allmulticast mode
[  532.214751][T31005] netlink: 'syz.0.7865': attribute type 1 has an invalid length.
[  532.217175][T31005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  532.581124][T31021] syzkaller1: entered promiscuous mode
[  532.584217][T31021] syzkaller1: entered allmulticast mode
[  532.593750][T31021] netlink: 'syz.0.7869': attribute type 15 has an invalid length.
[  532.634902][T31031] veth0_to_team: entered promiscuous mode
[  532.827019][T31045] bridge0: entered promiscuous mode
[  533.721343][T31060] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  533.923172][T31071] netlink: 'syz.2.7882': attribute type 12 has an invalid length.
[  534.007411][T31081] delete_channel: no stack
[  534.181851][T31093] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  534.231655][T31095] __nla_validate_parse: 16 callbacks suppressed
[  534.231670][T31095] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7889'.
[  534.244139][T31095] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  534.432869][T31108] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7891'.
[  534.485724][T31113] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7892'.
[  534.736429][T31123] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7896'.
[  534.782975][T31124] pim6reg1: entered promiscuous mode
[  534.784785][T31124] pim6reg1: entered allmulticast mode
[  534.900952][T31130] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  534.905510][T31130] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  534.908585][T31130] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  535.075329][T31141] pim6reg1: entered promiscuous mode
[  535.077911][T31141] pim6reg1: entered allmulticast mode
[  535.215886][T31143] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  535.271290][T31145] sctp: [Deprecated]: syz.2.7903 (pid 31145) Use of int in maxseg socket option.
[  535.271290][T31145] Use struct sctp_assoc_value instead
[  535.323404][T31154] netlink: 112 bytes leftover after parsing attributes in process `syz.0.7906'.
[  536.067637][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7912'.
[  536.104009][T31177] netlink: 'syz.2.7913': attribute type 3 has an invalid length.
[  536.138710][T31179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7914'.
[  536.205216][T31183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7916'.
[  536.297574][T31189] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7919'.
[  536.572153][T31218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7927'.
[  537.069788][T31261] netlink: 'syz.0.7939': attribute type 1 has an invalid length.
[  537.096077][T31261] 8021q: adding VLAN 0 to HW filter on device bond20
[  537.122548][T31263] 8021q: adding VLAN 0 to HW filter on device bond20
[  537.124885][T31263] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  537.128849][T31263] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  537.140872][T31270] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  537.145098][T31271] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  537.403116][T31286] netlink: 'syz.0.7947': attribute type 11 has an invalid length.
[  537.478080][T31287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.298104][T31308] Unsupported ieee802154 address type: 0
[  538.605850][T31329] netlink: 'syz.2.7959': attribute type 8 has an invalid length.
[  539.069721][T31378] netlink: 'syz.2.7971': attribute type 8 has an invalid length.
[  539.382299][T31393] __nla_validate_parse: 11 callbacks suppressed
[  539.382315][T31393] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7971'.
[  539.715460][T31407] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7976'.
[  539.761153][T31409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7977'.
[  539.814853][T31411] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7978'.
[  540.042867][T31423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7982'.
[  541.381570][T31466] openvswitch: netlink: IP tunnel dst address not specified
[  541.386216][T31466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7996'.
[  541.451734][T31473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7997'.
[  541.801719][T31479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7998'.
[  541.804722][T31480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7998'.
[  541.924753][T31488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8000'.
[  541.927576][T31488] netlink: 'syz.0.8000': attribute type 15 has an invalid length.
[  541.930750][T31488] netlink: 'syz.0.8000': attribute type 15 has an invalid length.
[  542.482923][T31505] netlink: 'syz.2.8005': attribute type 4 has an invalid length.
[  542.828640][T31517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.020785][T31581] netlink: 'syz.2.8034': attribute type 1 has an invalid length.
[  544.023486][T31582] netlink: 'syz.2.8034': attribute type 1 has an invalid length.
[  544.045735][T31582] bond17: entered promiscuous mode
[  544.047778][T31582] bond17: entered allmulticast mode
[  544.084744][T31581] bond18: entered promiscuous mode
[  544.088227][T31581] bond18: entered allmulticast mode
[  544.097471][T31582] bridge9: the hash_elasticity option has been deprecated and is always 16
[  544.201816][T31589] IPVS: Error connecting to the multicast addr
[  544.205344][T31589] netlink: 'syz.2.8035': attribute type 16 has an invalid length.
[  544.207765][T31589] netlink: 'syz.2.8035': attribute type 17 has an invalid length.
[  544.306573][T31589] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.309681][T31589] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.312195][T31589] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  544.313964][T31592] IPv6: NLM_F_REPLACE set, but no existing node found!
[  544.314951][T31589] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  545.027487][T21179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  545.036336][T21179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  545.040382][T21179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  545.045461][T21179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  545.051313][T21179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  545.073060][T31608] __nla_validate_parse: 5 callbacks suppressed
[  545.073072][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8039'.
[  545.116246][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8041'.
[  545.122514][T31613] Oops: general protection fault, probably for non-canonical address 0xdffffc000000003c: 0000 [#1] SMP KASAN PTI
[  545.126727][T31613] KASAN: null-ptr-deref in range [0x00000000000001e0-0x00000000000001e7]
[  545.129607][T31613] CPU: 0 UID: 0 PID: 31613 Comm: syz.0.8041 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  545.134016][T31613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.137175][T31613] RIP: 0010:__ethtool_get_link_ksettings+0x7e/0x190
[  545.139236][T31613] Code: 02 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 4c 89 ff e8 92 46 8c f8 41 bc e0 01 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 73 46 8c f8 49 83 3c 24 00 74 4e
[  545.145044][T31613] RSP: 0018:ffffc90008966b08 EFLAGS: 00010206
[  545.146952][T31613] RAX: 000000000000003c RBX: ffffc90008966b80 RCX: 0000000000080000
[  545.149435][T31613] RDX: ffffc9000f5c9000 RSI: 0000000000000772 RDI: 0000000000000773
[  545.151733][T31613] RBP: 1ffff110061e605d R08: ffffffff8f51bbe7 R09: 1ffffffff1ea377c
[  545.154132][T31613] R10: dffffc0000000000 R11: fffffbfff1ea377d R12: 00000000000001e0
[  545.156625][T31613] R13: dffffc0000000000 R14: ffff888030f30000 R15: ffff888030f302e8
[  545.159147][T31613] FS:  00007fc3ef27d6c0(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[  545.161873][T31613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  545.163916][T31613] CR2: 0000200000000480 CR3: 000000001e90a000 CR4: 00000000000006f0
[  545.166340][T31613] Call Trace:
[  545.167573][T31613]  <TASK>
[  545.168511][T31613]  ib_get_eth_speed+0x15e/0x7b0
[  545.170032][T31613]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  545.171719][T31613]  ? do_raw_spin_unlock+0x4d/0x240
[  545.173337][T31613]  ? rxe_query_port+0x6b/0x3b0
[  545.174838][T31613]  rxe_query_port+0x93/0x3b0
[  545.175903][T31614] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8039'.
[  545.176301][T31613]  ib_query_port+0x170/0x830
[  545.176314][T31613]  ? nla_put+0xd0/0x150
[  545.182617][T31613]  fill_port_info+0x1b9/0x5b0
[  545.184111][T31613]  ? __pfx_fill_port_info+0x10/0x10
[  545.185736][T31613]  ? __up_read+0x280/0x680
[  545.187238][T31613]  ? __pfx___up_read+0x10/0x10
[  545.188716][T31613]  ? __asan_memset+0x22/0x50
[  545.190160][T31613]  ? __nlmsg_put+0xef/0x1b0
[  545.191590][T31613]  nldev_port_get_dumpit+0x57f/0x8a0
[  545.193251][T31613]  ? __pfx_nldev_port_get_dumpit+0x10/0x10
[  545.195092][T31613]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  545.197251][T31613]  ? __build_skb_around+0x257/0x3e0
[  545.198865][T31613]  ? __alloc_skb+0x1bc/0x2d0
[  545.200340][T31613]  netlink_dump+0x6de/0xe60
[  545.201745][T31613]  ? __pfx_netlink_dump+0x10/0x10
[  545.203307][T31613]  ? netlink_lookup+0x30/0x200
[  545.204788][T31613]  ? netlink_lookup+0x30/0x200
[  545.206266][T31613]  ? netlink_lookup+0x30/0x200
[  545.207967][T31613]  __netlink_dump_start+0x5cb/0x7e0
[  545.209601][T31613]  rdma_nl_rcv+0x749/0x980
[  545.211054][T31613]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  545.212608][T31613]  ? __pfx_nldev_port_get_dumpit+0x10/0x10
[  545.214444][T31613]  ? netlink_deliver_tap+0x2e/0x1b0
[  545.216048][T31613]  ? netlink_deliver_tap+0x2e/0x1b0
[  545.217755][T31613]  netlink_unicast+0x75c/0x8e0
[  545.219254][T31613]  netlink_sendmsg+0x805/0xb30
[  545.220800][T31613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  545.222451][T31613]  ? aa_sock_msg_perm+0x94/0x160
[  545.224004][T31613]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  545.225663][T31613]  ? __pfx_netlink_sendmsg+0x10/0x10
[  545.227427][T31613]  __sock_sendmsg+0x21c/0x270
[  545.228913][T31613]  ____sys_sendmsg+0x505/0x830
[  545.230421][T31613]  ? __pfx_____sys_sendmsg+0x10/0x10
[  545.232072][T31613]  ? import_iovec+0x74/0xa0
[  545.233525][T31613]  ___sys_sendmsg+0x21f/0x2a0
[  545.235021][T31613]  ? __pfx____sys_sendmsg+0x10/0x10
[  545.236763][T31613]  ? __fget_files+0x2a/0x420
[  545.238380][T31613]  ? __fget_files+0x3a0/0x420
[  545.239888][T31613]  __x64_sys_sendmsg+0x19b/0x260
[  545.241482][T31613]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  545.243174][T31613]  ? rcu_is_watching+0x15/0xb0
[  545.244671][T31613]  ? do_syscall_64+0xbe/0x3b0
[  545.246127][T31613]  do_syscall_64+0xfa/0x3b0
[  545.247788][T31613]  ? lockdep_hardirqs_on+0x9c/0x150
[  545.249407][T31613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.251293][T31613]  ? exc_page_fault+0x9f/0xf0
[  545.252889][T31613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.254744][T31613] RIP: 0033:0x7fc3ee38e9a9
[  545.256138][T31613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.262190][T31613] RSP: 002b:00007fc3ef27d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  545.264775][T31613] RAX: ffffffffffffffda RBX: 00007fc3ee5b5fa0 RCX: 00007fc3ee38e9a9
[  545.267313][T31613] RDX: 0000000000008080 RSI: 0000200000000480 RDI: 0000000000000004
[  545.269726][T31613] RBP: 00007fc3ee410d69 R08: 0000000000000000 R09: 0000000000000000
[  545.272146][T31613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.274568][T31613] R13: 0000000000000000 R14: 00007fc3ee5b5fa0 R15: 00007ffc3dbcbbf8
[  545.277056][T31613]  </TASK>
[  545.278038][T31613] Modules linked in:
SYZFAIL: failed to recv rpc
[  545.279989][T31613] ---[ end trace 0000000000000000 ]---
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  545.300790][T31613] RIP: 0010:__ethtool_get_link_ksettings+0x7e/0x190
[  545.302887][T31613] Code: 02 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 2d 00 00 74 08 4c 89 ff e8 92 46 8c f8 41 bc e0 01 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 73 46 8c f8 49 83 3c 24 00 74 4e
[  545.308909][T31613] RSP: 0018:ffffc90008966b08 EFLAGS: 00010206
[  545.330142][T31613] RAX: 000000000000003c RBX: ffffc90008966b80 RCX: 0000000000080000
[  545.339441][T31613] RDX: ffffc9000f5c9000 RSI: 0000000000000772 RDI: 0000000000000773
[  545.341954][T31613] RBP: 1ffff110061e605d R08: ffffffff8f51bbe7 R09: 1ffffffff1ea377c
[  545.344418][T31613] R10: dffffc0000000000 R11: fffffbfff1ea377d R12: 00000000000001e0
[  545.346866][T31613] R13: dffffc0000000000 R14: ffff888030f30000 R15: ffff888030f302e8
[  545.364199][T31613] FS:  00007fc3ef27d6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  545.367456][T31613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  545.370905][T31613] CR2: 00007fdc33687e20 CR3: 000000001e90a000 CR4: 00000000000006f0
[  545.373410][T31613] Kernel panic - not syncing: Fatal exception
[  545.375830][T31613] Kernel Offset: disabled
[  545.377181][T31613] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:11:22  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001bbc RDI=0000000000001bbd RBP=00000000000003f8 RSP=ffffc90008966290
R8 =ffff888108dd0237 R9 =1ffff110211ba046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af188f R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc3ef27d6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000480 CR3=000000001e90a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0100080000000000 0000000621140500
XMM02=00007fc3ee586478 00007fc3ee586450 XMM03=00007fc3ee586488 00007fc3ee586480
XMM04=00007fc3ef0ed100 00007fc3ee586440 XMM05=00007fc3ee586458 00007fc3ee5864a0
XMM06=00007fc3ee586498 00007fc3ee586490 XMM07=00007fc3ee586488 00007fc3ee586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc3ee411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0aed1aa595d88900 RBX=ffffffff81976a48 RCX=0aed1aa595d88900 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff3d73f5d58 CR3=0000000028a72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
