last executing test programs:

1.227954851s ago: executing program 1 (id=2645):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 32)
r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
unshare(0x6020480) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0xfffffec7) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000dd00"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="2050bbcdbba6af523930d0f388abe3fe", 0x10}], 0x1}}], 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) (async)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000140)={'virt_wifi0\x00', @ifru_names='tunl0\x00'}})

1.118723666s ago: executing program 1 (id=2646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800)
r3 = socket(0x11, 0x800000003, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xd0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xfffffdff, 0x7fffffff, 0x4}}, {0xc, 0x2, [0x8000, 0x0, 0x0, 0x3]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
connect(r3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80)

1.039697041s ago: executing program 1 (id=2648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9885, 0x10008}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x0, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}]}, 0xfffffe54}}, 0x0)

967.470635ms ago: executing program 1 (id=2651):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'})
sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="8c00000000000000000000000700000000831fcdac1414bb7f00000100000000ac1e01010a010101ac1414aaffffffff890bf7ffffffff640101019404010094040000444459630a01010000000004ac1e0101000001a0e0000002000000066401010200000fffac1e090100000009e000000100007fffac1414aa00000004640101020000000c940400000000000000"], 0x90}}], 0x1, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r4, 0x1ad72f7)
accept4(r4, 0x0, 0x0, 0x80000)
r6 = accept4$netrom(r4, 0x0, 0x0, 0x80000)
writev(r6, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="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", 0x2b4}], 0x2)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)
shutdown(r0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x3a, 0x6, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={<r9=>0x0, 0x8}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000240)={r9, 0xffc4, 0x558f}, 0x8)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x20)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f000086b000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r11, 0x38ff2000)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r12, 0x0, 0x0)

560.402285ms ago: executing program 2 (id=2658):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="43bdb4c7", 0x4) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="43bdb4c7", 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0xd, 0x2020}, 0x20)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000080)=0x84) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={<r4=>0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000080)=0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={r4, 0xe, &(0x7f0000000540)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000500)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={<r5=>r4, 0xe, &(0x7f0000000540)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000500)=0x10)
r6 = socket(0x22, 0x2, 0x22)
write(r6, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80000, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8) (async)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r5}, &(0x7f0000000340)=0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4004004) (async)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4004004)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="181016e93fe145744a65", @ANYBLOB="321bfe5da165e72066595d423531e70deb8cc91b369edb30be39cd04e0edcb8fffdb899eb9eb8c15d628f028da7787f4fff7d36badd300d2eaa25752bf49ef6890e5611408210405f255fd54151e71e987f1b648581972997997e7c60420e3f56c6fd315a812cb752ee613d2464bf4dab6cd52bb0657660f91efbe4fca57c9a6b618eb0642", @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x54}, 0x40014) (async)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="181016e93fe145744a65", @ANYBLOB="321bfe5da165e72066595d423531e70deb8cc91b369edb30be39cd04e0edcb8fffdb899eb9eb8c15d628f028da7787f4fff7d36badd300d2eaa25752bf49ef6890e5611408210405f255fd54151e71e987f1b648581972997997e7c60420e3f56c6fd315a812cb752ee613d2464bf4dab6cd52bb0657660f91efbe4fca57c9a6b618eb0642", @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x54}, 0x40014)
recvfrom(r9, 0x0, 0x0, 0x10140, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005", @ANYRESHEX=r2, @ANYRESHEX=r0], 0x3c}}, 0x0)

470.574435ms ago: executing program 0 (id=2660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000002080001400000000070000000180a01040000000000000000010000000900020073797a30090000000900010073797a3000000000"], 0xf8}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000300)={0x3, 'macsec0\x00', {0x9}, 0x9})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
unshare(0x20000400)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, &(0x7f0000000200))
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$rfkill(r4, &(0x7f0000000200)={0x200, 0x0, 0x2, 0x1}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2e, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x47}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x1, 0x4, 0x6, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x0, 0xfe, 0xe, &(0x7f0000000540)="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", &(0x7f0000000180)=""/14, 0xdbd4, 0x0, 0x1, 0x6e, &(0x7f00000001c0)='\r', &(0x7f0000000640)="4a5b04fe412e99ffcc6cb56f7231ca7cc594b001312907c02133b188fb5f18404ef3e5a94df685a77751499f0cd6037f684c710aca86e1310af9a8ffd75bff46c454c4309823c78e1a63c46f06fb638332805ff9fe9b76015c39dbb0152c923bc34c95f09bfb3d46aa77775e40f4", 0x3, 0x0, 0x327}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)

400.155814ms ago: executing program 0 (id=2661):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x3, 0x4, 0x1, 0x2}}, 0x26)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r0, 0x4, 0x1ff, 0x3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b000200000005000500ef"], 0x3c}}, 0x20000034)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x34, 0x1, 0x40, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x4}}, 0x10)
r12 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0)

399.408498ms ago: executing program 2 (id=2662):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000040000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='global_dirty_state\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000100004e428abee7602814000000000000000000000000004040e427dad3ed4ecf47b6ef13222db118743df542690b0c8a8f14c6a68d42f07e04818a634821d53933b1d783c689f06daa9de27c99103bea75c7dfda1f34986fecebdf624abb464a20184200"/119], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000e5ad000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)

367.917122ms ago: executing program 0 (id=2663):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc)
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000040)=0x800, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400df8000000000000000000000000000aa0c000280050001000000000006000340000100000800074000000000"], 0x9c}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xe}, {0x9, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e25766500000c000a8008000b40000058651400030067656e650aea14350000000000000000"], 0x50}}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r7, 0x0, &(0x7f0000000a80))
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r9, @ANYRES32, @ANYBLOB="2f0800a000000000000000000000000000000000ccf7d33fdea19cff3ed4e4971e7f957a7d3eb00374aa21164d693bc124bfaa0dbbe0b7b16cfeb9c724acf6f9f00a189d77bb20c7514589f0a71b55f71257c7ee412fc60057002c1ddfb3d94e0724b35a6db5adc91af74f4741a7700cd8e7657b5b364094291aeab1c7f1fada0bfa80e8ab6bb36b2b", @ANYRES32=r9, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r10, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r11)

289.236148ms ago: executing program 2 (id=2664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

287.419944ms ago: executing program 2 (id=2665):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711017000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002006400000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x0, 0x7, {{0x1f, 0x4, 0x3, 0x6, 0x7c, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x28, 0x92, 0x0, 0x6, [0x7, 0x0, 0x7, 0x1c, 0x100, 0x4, 0x8, 0xefffffff, 0xfffffff7]}, @ssrr={0x89, 0x2b, 0xec, [@empty, @multicast2, @rand_addr=0x64010101, @empty, @remote, @rand_addr=0x64010100, @broadcast, @rand_addr=0x64010101, @rand_addr=0x64010102, @broadcast]}, @cipso={0x86, 0x6, 0x1}, @generic={0x7, 0xc, "b64a141bcf267764be9c"}]}}}}})
r2 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x38}}, 0x40808c4)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x130, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x100, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0xa, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0x1, 0x1, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x36, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7fffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x83}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x130}}, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, &(0x7f0000000400))
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="0c00018008000100"], 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xe, 0x7, 0x28, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x10, 0xf0000000, 0x1}})
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c)

150.390388ms ago: executing program 2 (id=2666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x40})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r4, 0x900}, 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$int_out(r7, 0x2, &(0x7f0000000140))
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getpeername$unix(r7, &(0x7f00000002c0)=@abs, &(0x7f0000000400)=0x6e)
listen(r10, 0xd35)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001bc0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x7, 0x4, 0x8, 0x5, 0x1, 0x0, 0xc0, 0x6, 0x101, 0x920, 0x7, 0x3, 0x2, 0x2c9d, 0x6, 0x26, 0x2, 0x10, 0xffffffa0, 0x7d0, 0xffff, 0x10000, 0x3, 0x3, 0xfffffff9, 0xe8, 0x3, 0x8, 0x9, 0x3, 0x9, 0x1, 0xfffffff9, 0x22, 0x2, 0x1, 0x2, 0x0, 0x0, 0xea3, 0x1, 0x1, 0x4, 0x91, 0x4, 0x3, 0x5, 0x7, 0x4, 0x7f, 0x6, 0xd9a, 0xc, 0xb, 0x100, 0xed7, 0x8, 0xad4, 0x15, 0x9, 0xfffffff5, 0x31, 0x7, 0x1, 0x3, 0x8, 0x17028692, 0x3, 0x4, 0x7f, 0x4, 0xfe, 0x4, 0xffff, 0x3f, 0x6, 0x5, 0xdf, 0x40000, 0x9, 0x7, 0xb, 0x7ff, 0x3fb3c724, 0x7, 0x7, 0x8, 0x6, 0x7fff, 0x8, 0x6, 0x2, 0x3, 0x5, 0x5, 0x1, 0x10, 0x3, 0x97, 0x3, 0x0, 0x1, 0x5b5b, 0x9, 0x8, 0x9, 0x2000, 0x4ce, 0x8, 0xfff, 0x6, 0x8db3, 0x9, 0x6, 0x279, 0x6, 0x6, 0xffff, 0x0, 0x3, 0x4, 0x4, 0xfff, 0x5, 0x4, 0x800, 0xffff, 0x4, 0x0, 0x7, 0xfffc, 0x5, 0x6, 0xad9b, 0x7, 0x0, 0x3ff, 0x7, 0x8, 0x1, 0x1, 0x7, 0xd6e4, 0x4, 0x533, 0x9, 0x278, 0x7, 0xff, 0x4, 0x2, 0x1166, 0xfffffffa, 0x3, 0xb20e, 0xe8, 0x4, 0x7f4, 0x7, 0x1, 0xfff, 0x3, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x8, 0xca2, 0x6, 0x1000, 0x3, 0x2, 0x4, 0x18, 0xc6, 0x7, 0x7, 0x4, 0x80000000, 0x0, 0x7, 0xb68, 0x7ab, 0x52, 0x3, 0x80, 0x9, 0x2da, 0x5, 0x9, 0x7fff, 0x2, 0xd5916ed, 0x0, 0xb8, 0x6, 0x5, 0x9, 0x2cc, 0x0, 0x2, 0xb7, 0x3, 0xb6b6, 0x0, 0x4, 0x9, 0x5, 0x2, 0x0, 0x4, 0xfce2, 0x8, 0xc, 0x3f5c, 0x100, 0xdb03, 0xfffffff9, 0x4, 0xf84, 0x6, 0xd7d2, 0xffffffff, 0xf300, 0x9a84, 0x8, 0x516, 0x3, 0x3, 0x8, 0x2, 0x1000, 0xffffffff, 0x3, 0x6, 0x200, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x6, 0x8001, 0x8, 0x4, 0x5, 0x8, 0x1, 0xcdb9, 0x70, 0xf1, 0x10, 0x6, 0x93d5eea, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0xb, 0x7, 0x5, 0x101, 0x8000, 0x80000000, 0x5, 0x10, 0xffffffff, 0x7, 0x7fffffff, 0xffffffff, 0x4, 0x83ff, 0x1000, 0x693d24ac, 0x9, 0x7, 0x7f, 0x9, 0x2, 0xe9, 0x14b, 0x3, 0x40, 0x8d, 0x1, 0x6, 0x101, 0xfff, 0x9, 0x3b5, 0x6, 0x10000, 0x8, 0x8001, 0x10c4, 0x3, 0x205, 0x9, 0x8, 0x60b, 0xd, 0xffff, 0x4, 0x1, 0xe, 0x1, 0x9, 0xffff, 0x8, 0x5, 0x0, 0x9, 0x5, 0x8, 0xfffffff9, 0x401, 0xd, 0x800, 0x4, 0x6, 0x3, 0x9, 0x3ff, 0x10, 0x8, 0x80000000, 0x6, 0x2afa, 0xffffffff, 0x6, 0x2, 0x3ff, 0x0, 0xd, 0x5, 0x6, 0x8, 0x2, 0x2000000, 0x7, 0x5, 0xfff, 0x3, 0x7, 0x8, 0x8, 0x6, 0x5, 0x7fff, 0x3, 0x1200, 0x9, 0xbc, 0x1, 0x8001, 0x9, 0xf, 0x5, 0x2, 0x31922130, 0x3, 0x1, 0x3, 0x1000, 0x0, 0x9, 0x8000, 0xfffffff8, 0x3dae, 0x80, 0x5, 0x9, 0x9, 0x7, 0x698, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x5, 0x7, 0x7fffffff, 0x7, 0x10001, 0xffffffe3, 0x7ff, 0x4, 0x10, 0x7, 0x1, 0x7, 0x9, 0x1ff, 0x7, 0xc5dd, 0x2, 0x7, 0x40080, 0x3, 0xa, 0xff, 0x9, 0x6, 0x1, 0xd, 0x42, 0x10000, 0x553, 0x800, 0x0, 0x3, 0x4, 0x1b, 0xb, 0x1, 0x8, 0x59, 0x200, 0x401, 0x6, 0x5, 0xd, 0x8001, 0x5c34a762, 0x4, 0x9, 0x3, 0xf, 0x0, 0x9, 0x3, 0x40, 0xf9, 0xfffffff8, 0x2d1f, 0x0, 0x6, 0xffffffff, 0x80000001, 0x4, 0x40, 0x0, 0xffffffff, 0x80000000, 0x9, 0x8, 0x7, 0xfffffff1, 0x5, 0x7f, 0x9, 0x81, 0x9, 0xeb5e, 0x4, 0x6, 0x2, 0x3, 0xf9d, 0xf, 0xce, 0xea5, 0x6, 0x4, 0x6, 0x400, 0x2, 0x300, 0x15, 0x8, 0x2, 0x6, 0x3, 0x9, 0x800, 0xa, 0x200, 0x6, 0x442b89e0, 0x3, 0x0, 0xc7, 0x10001, 0x3, 0x10001, 0x5, 0x9, 0x4, 0xf, 0x6, 0x7, 0x0, 0x7, 0x0, 0x8ba2, 0x8, 0x2, 0x10001, 0x8, 0x9, 0x6, 0x7fffffff, 0x1, 0x3, 0x6, 0xbd3, 0x9, 0x7fffffff, 0x7, 0xffffd4a4, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x6, 0xbc, 0x7fffffff, 0x12b0abb7, {0xe, 0x0, 0x3, 0x9, 0xc0, 0xfffffffb}, {0x1, 0x2, 0xfff7, 0x101, 0x8000, 0x3}, 0x8, 0x9}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

150.048256ms ago: executing program 0 (id=2667):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x341000, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r5=>0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@delsa={0x198, 0x11, 0x81f, 0x70bd28, 0x25dfdbfc, {@in6=@local, 0x4d4, 0x2, 0xff}, [@address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@private2, 0xa, 0xa, 0x2}}, @tfcpad={0x8, 0x16, 0xa}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x5, 0x0, 0x4e22, 0x1, 0xa, 0x0, 0x0, 0x87, r4, r5}, {0x40, 0x2, 0x4, 0xae, 0x3, 0x4, 0x5, 0xfff}, {0x9, 0x4, 0x101, 0x3}, 0xcd, 0x6e6bb7, 0x1, 0x0, 0x1, 0x2}}, @algo_auth={0x7d, 0x1, {{'md5-generic\x00'}, 0x1a8, "c659ddb3e6532b2a305abd3a6fd1a39187fcc4ab7d62501e6e41009fdfd198d8cacce66d8c933476c7bc0c6cbe980456ad2aa71330"}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010)

50.914892ms ago: executing program 1 (id=2668):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
clock_gettime(0x3, &(0x7f0000000580)={<r2=>0x0, <r3=>0x0})
recvmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000380)=""/85, 0x55}, {&(0x7f0000001340)=""/222, 0xde}, {&(0x7f0000000640)=""/47, 0x2f}, {&(0x7f00000008c0)=""/207, 0xcf}, {&(0x7f00000009c0)=""/90, 0x5a}, {&(0x7f0000000a40)=""/145, 0x91}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000001140)=""/199, 0xc7}, {&(0x7f0000000cc0)=""/99, 0x63}], 0x9, &(0x7f0000000e00)=""/91, 0x5b}, 0x3}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/61, 0x3d}], 0x1, &(0x7f0000001240)=""/231, 0xe7}, 0x40000}], 0x2, 0x40, &(0x7f0000001080)={r2, r3+60000000})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000400))
close(0x3)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="000000000095b298a8fbe06025481b1a46d00f0000000000000000e1ff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r8, @ANYRES32=r5, @ANYBLOB="00dab3311b1a2d24a0661d337e86e8a9dd6c91d95d000000000000004b56733508d288b7030000000000000038a23cd4ac3431e1779f1177c933a1309500000000897b1bc7b2669cf80f9cf1e6a35f394a6e7d3bba1e1e913a77234a086cc839b658c024977d4834057f7c792ec6cf75b2ae35889d615967a5a334ce3b7fabd9be9e4d28faec6339a77717f9bac9cefb22cf3b4382b33fefd156ccb028afdd72c8d563f183553b625603cd269d368b3c09e019632095521c19ab7fe834949e4c7d9b06000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x2}, 0x18)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000016c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r8, @ANYBLOB="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"/337], 0x3c}, 0x1, 0x0, 0x0, 0x40091}, 0x801)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x81, @loopback, 0x7f}, 0x1c)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00559a000000000000000018120000", @ANYRES32, @ANYRES64=r11], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000180), 0x4)
r13 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="480082ccb0c5af1ed905f85400d50000abf4ed9fed6934e1000a4049fc4d7fa31251d3f2a93a4e852bab42b3f7acabbad1ec9a201458337d3b494255a3a8bdea4c68bd0dae39b63353a901e303529ce119c021ae5d17903074ff71c6b721f429ed78c1b2306ba77a2aacd71a323c9102ad5a4575dfec3032d6419fb54c036040b1bdd72cc09c4859d1333590659709858eee0d9238e3fde110f377fe00b06f8a72e4", @ANYRES64=r14, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0)

50.015979ms ago: executing program 1 (id=2669):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0xa, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_OPS={{0xfffffffffffffd59, 0x4, 0x5}, {0x2c, 0x5, [{0x10, 0x5, 0x3, 0x7}, {0x400, 0x80, 0x7, 0x2}, {0x8, 0x2, 0x7, 0x7}, {0x80, 0xe1, 0x8, 0xfffff67d}, {0x401, 0x7, 0xa, 0x4}]}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc8cc}, 0x20004804)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8, 0x8, 0x0, @mcast2, @loopback, 0x40, 0x8708, 0x8792b, 0x5}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20048011}, 0x0)

49.567284ms ago: executing program 0 (id=2670):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4018}, 0x2004000d)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='f2fs_lookup_extent_tree_start\x00', r2, 0x0, 0xcd18}, 0x18)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@newqdisc={0x18c, 0x24, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {0x7, 0x6}, {0x0, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xf7, 0x1, 0x9, 0x1, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0xf, 0x7, 0x5, 0x3, 0x1, 0x1ff, 0x4, 0x5}}, {0xe, 0x2, [0x7896, 0x86, 0xc, 0xfd45, 0x3]}}, {{0x1c, 0x1, {0x81, 0x7f, 0x70dd, 0x7, 0x1, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x7, 0x1, 0x3]}}, {{0x1c, 0x1, {0x7, 0x10, 0x2, 0x4, 0x0, 0xec, 0x1, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0x6b, 0x5, 0xffff, 0xd75]}}, {{0x1c, 0x1, {0x8, 0xa, 0x7, 0x1d36, 0x2, 0x9, 0x0, 0x4}}, {0xc, 0x2, [0x5, 0x7, 0x6, 0x800]}}, {{0x1c, 0x1, {0xc, 0x3, 0xdd5f, 0x9, 0x2, 0x21a, 0x9, 0x8}}, {0x14, 0x2, [0x0, 0x2, 0x4, 0x7, 0x80, 0x393, 0x400, 0x1000]}}, {{0x1c, 0x1, {0xdf, 0x6, 0xd, 0x3, 0x2, 0x6479, 0xff, 0x7}}, {0x12, 0x2, [0xc, 0x9, 0x8, 0x3ff, 0xe8c, 0xf7fb, 0x7fff]}}, {{0x1c, 0x1, {0x4, 0x7, 0x0, 0x8000, 0x1, 0x101, 0xf, 0x4}}, {0xc, 0x2, [0xe, 0x3, 0x3, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x3a, 0x7}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x24000050)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000540)=0x4)
r5 = socket$caif_stream(0x25, 0x1, 0x3)
connect(r5, &(0x7f0000000580)=@x25, 0x80)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000680)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x20004000)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbec0}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r2)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r9, 0x20, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8018}, 0x4000800)
syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0)
bind$inet6(r2, &(0x7f0000000ac0)={0xa, 0x4e22, 0xb, @local, 0x28}, 0x1c)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r0)
recvfrom$rxrpc(r2, &(0x7f0000000b40)=""/175, 0xaf, 0x40000020, 0x0, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r2, 0x8002af76, &(0x7f0000000c00))
sendmsg$nl_netfilter(r2, &(0x7f0000001d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000c80)={0x1020, 0xb, 0x5, 0x101, 0x70bd27, 0x25dfdbff, {0x5, 0x0, 0x6}, [@nested={0x100c, 0xd5, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r5}, @generic="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"]}]}, 0x1020}, 0x1, 0x0, 0x0, 0x14}, 0x40)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r2)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040000}, 0x20040000)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x14, r6, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x4000800)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001fc0), r2)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000002240)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002200)={&(0x7f0000002000)={0x1e4, r11, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x27de69d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43cbfb98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe86}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x140}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa0}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffa3b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb14}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdd69}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000944)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002700)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000026c0)={&(0x7f0000002400)={0x294, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "dcfb5f0314c2cade6e"}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "b3b6278185b8bb8eabb46f2f5719deb17c4c39ea9443941466b544bcec446ba1075fa751af19a59439260a6b7e9c44531feafb3ec2d7fb70e4db9a10f560b6a9ce0536aa05d427edf24a9c9cdf"}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "e48a7cbd9db22376c570dce104a5a27d457d4a0713e7584feb054bf5a4277bf23a5c6af20e2bc9f0edb94599a444f704bdf7d21d606731e73efe96f8233693339cac2d35cec81d1ff8c89cb46b90c5090146fa56bc250340697eb5b788ac95bf6affe696affc64bb656d3a59730ae65b6bd5a4d0798b65370a9edb79bab7112bb1b68bb537cd2ba7beb6d1da22ccea394106648e10abfba1271b5d79c2579adb7b6ccde5db292c31661600d2"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ').[\xfc\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$!}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0xc0d4}, 0x94)

813.159µs ago: executing program 2 (id=2671):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="db759469e36512be2770717f865d", 0x0, 0x8, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000900)="ffffdd014376ea94fe6f22446ab33726e5de05640000000000006929a72cd24065"}, 0x3a)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000704000000000000008c000000000000", @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280050001000600000008000a000000000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x28000000)
splice(r0, &(0x7f00000003c0)=0x80000001, r2, &(0x7f0000000400)=0x1, 0xfffffffffffffffb, 0x1)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000380)={0x0, 0x1, 0x8, 0x0, 0x3}, 0xc)

0s ago: executing program 0 (id=2672):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000040000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='global_dirty_state\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000100004e428abee7602814000000000000000000000000004040e427dad3ed4ecf47b6ef13222db118743df542690b0c8a8f14c6a68d42f07e04818a634821d53933b1d783c689f06daa9de27c99103bea75c7dfda1f34986fecebdf624abb464a20184200"/119], 0x48)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1, r2}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x18)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0)

kernel console output (not intermixed with test programs):

  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.287161][ T6764]  ? __pfx__printk+0x10/0x10
[   72.287178][ T6764]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.287193][ T6764]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   72.287206][ T6764]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   72.287220][ T6764]  warn_alloc+0x214/0x310
[   72.287267][ T6764]  ? __pfx_warn_alloc+0x10/0x10
[   72.287289][ T6764]  ? __get_vm_area_node+0x28f/0x300
[   72.287304][ T6764]  ? hash_mac_create+0x332/0xe80
[   72.287324][ T6764]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   72.287356][ T6764]  ? alloc_pages_mpol+0x3cd/0x4a0
[   72.287407][ T6764]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   72.287427][ T6764]  ? rcu_is_watching+0x15/0xb0
[   72.287441][ T6764]  ? hash_mac_create+0x332/0xe80
[   72.287455][ T6764]  ? hash_mac_create+0x332/0xe80
[   72.287468][ T6764]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   72.287485][ T6764]  ? hash_mac_create+0x332/0xe80
[   72.287500][ T6764]  ? hash_mac_create+0x2d7/0xe80
[   72.287518][ T6764]  hash_mac_create+0x332/0xe80
[   72.287538][ T6764]  ? __nla_parse+0x40/0x60
[   72.287557][ T6764]  ? __pfx_hash_mac_create+0x10/0x10
[   72.287573][ T6764]  ip_set_create+0xa97/0x1940
[   72.287590][ T6764]  ? ip_set_create+0x4a2/0x1940
[   72.287612][ T6764]  ? __pfx_ip_set_create+0x10/0x10
[   72.287650][ T6764]  nfnetlink_rcv_msg+0xb4d/0x1130
[   72.287669][ T6764]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   72.287696][ T6764]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   72.287731][ T6764]  ? sched_balance_rq+0x4e4a/0x57a0
[   72.287757][ T6764]  netlink_rcv_skb+0x208/0x470
[   72.287768][ T6764]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   72.287782][ T6764]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   72.287799][ T6764]  ? bpf_lsm_capable+0x9/0x20
[   72.287813][ T6764]  ? security_capable+0x7e/0x2e0
[   72.287834][ T6764]  nfnetlink_rcv+0x26a/0x2520
[   72.287847][ T6764]  ? is_bpf_text_address+0x26/0x2b0
[   72.287866][ T6764]  ? kernel_text_address+0xa5/0xe0
[   72.287882][ T6764]  ? __kernel_text_address+0xd/0x40
[   72.287917][ T6764]  ? unwind_get_return_address+0x4d/0x90
[   72.287931][ T6764]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   72.287945][ T6764]  ? arch_stack_walk+0xfc/0x150
[   72.287970][ T6764]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   72.287986][ T6764]  ? stack_depot_save_flags+0x40/0x860
[   72.288004][ T6764]  ? __lock_acquire+0xab9/0xd20
[   72.288039][ T6764]  ? __lock_acquire+0xab9/0xd20
[   72.288062][ T6764]  ? netlink_deliver_tap+0x2e/0x1b0
[   72.288077][ T6764]  ? netlink_deliver_tap+0x2e/0x1b0
[   72.288094][ T6764]  netlink_unicast+0x82f/0x9e0
[   72.288118][ T6764]  ? __pfx_netlink_unicast+0x10/0x10
[   72.288135][ T6764]  ? netlink_sendmsg+0x642/0xb30
[   72.288145][ T6764]  ? skb_put+0x11b/0x210
[   72.288160][ T6764]  netlink_sendmsg+0x805/0xb30
[   72.288179][ T6764]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.288192][ T6764]  ? aa_sock_msg_perm+0xf1/0x1d0
[   72.288205][ T6764]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   72.288217][ T6764]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.288229][ T6764]  __sock_sendmsg+0x21c/0x270
[   72.288248][ T6764]  ____sys_sendmsg+0x505/0x830
[   72.288265][ T6764]  ? __pfx_____sys_sendmsg+0x10/0x10
[   72.288284][ T6764]  ? import_iovec+0x74/0xa0
[   72.288300][ T6764]  ___sys_sendmsg+0x21f/0x2a0
[   72.288314][ T6764]  ? __pfx____sys_sendmsg+0x10/0x10
[   72.288353][ T6764]  ? __fget_files+0x2a/0x420
[   72.288368][ T6764]  ? __fget_files+0x3a0/0x420
[   72.288410][ T6764]  __x64_sys_sendmsg+0x19b/0x260
[   72.288427][ T6764]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   72.288446][ T6764]  ? rcu_is_watching+0x15/0xb0
[   72.288461][ T6764]  ? do_syscall_64+0xbe/0x3b0
[   72.288478][ T6764]  do_syscall_64+0xfa/0x3b0
[   72.288489][ T6764]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.288500][ T6764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.288512][ T6764]  ? exc_page_fault+0x9f/0xf0
[   72.288524][ T6764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.288535][ T6764] RIP: 0033:0x7fd7bb98ebe9
[   72.288547][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.288556][ T6764] RSP: 002b:00007fd7bc8b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.288570][ T6764] RAX: ffffffffffffffda RBX: 00007fd7bbbc6090 RCX: 00007fd7bb98ebe9
[   72.288578][ T6764] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[   72.288585][ T6764] RBP: 00007fd7bba11e19 R08: 0000000000000000 R09: 0000000000000000
[   72.288592][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.288599][ T6764] R13: 00007fd7bbbc6128 R14: 00007fd7bbbc6090 R15: 00007ffeb98a94e8
[   72.288618][ T6764]  </TASK>
[   72.288758][ T6764] Mem-Info:
[   72.479742][ T6764] active_anon:5332 inactive_anon:0 isolated_anon:0
[   72.479742][ T6764]  active_file:1098 inactive_file:38227 isolated_file:0
[   72.479742][ T6764]  unevictable:1768 dirty:1413 writeback:0
[   72.479742][ T6764]  slab_reclaimable:9690 slab_unreclaimable:52127
[   72.479742][ T6764]  mapped:18226 shmem:2439 pagetables:1085
[   72.479742][ T6764]  sec_pagetables:0 bounce:0
[   72.479742][ T6764]  kernel_misc_reclaimable:0
[   72.479742][ T6764]  free:297318 free_pcp:22310 free_cma:0
[   72.495843][ T6764] Node 0 active_anon:11288kB inactive_anon:0kB active_file:3236kB inactive_file:143900kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35712kB dirty:5592kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7944kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.510110][ T6764] Node 1 active_anon:10040kB inactive_anon:0kB active_file:1156kB inactive_file:9008kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37192kB dirty:60kB writeback:0kB shmem:4760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3664kB pagetables:1504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   72.523898][ T6764] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.534734][ T6764] lowmem_reserve[]: 0 811 811 811 811
[   72.536515][ T6764] Node 0 DMA32 free:259572kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11288kB inactive_anon:0kB active_file:3236kB inactive_file:143900kB unevictable:3536kB writepending:5592kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:35136kB local_pcp:16808kB free_cma:0kB
[   72.548552][ T6764] lowmem_reserve[]: 0 0 0 0 0
[   72.550594][ T6764] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   72.562172][ T6764] lowmem_reserve[]: 0 0 854 854 854
[   72.564173][ T6764] Node 1 Normal free:455788kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10072kB inactive_anon:0kB active_file:1156kB inactive_file:9008kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:55300kB local_pcp:36552kB free_cma:0kB
[   72.583862][ T6764] lowmem_reserve[]: 0 0 0 0 0
[   72.585450][ T6764] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   72.590781][ T6764] Node 0 DMA32: 6131*4kB (UME) 683*8kB (UME) 165*16kB (UM) 207*32kB (UME) 106*64kB (UM) 37*128kB (UME) 14*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 2*2048kB (UM) 47*4096kB (M) = 259156kB
[   72.597583][ T6764] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   72.611239][ T6764] Node 1 Normal: 1175*4kB (UME) 968*8kB (UME) 675*16kB (UME) 440*32kB (UE) 61*64kB (U) 19*128kB (UM) 5*256kB (UE) 1*512kB (U) 3*1024kB (UME) 3*2048kB (UME) 98*4096kB (M) = 456076kB
[   72.618869][ T6764] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.629060][ T6764] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   72.635445][ T6764] 41768 total pagecache pages
[   72.637935][ T6764] 0 pages in swap cache
[   72.640097][ T6764] Free swap  = 124996kB
[   72.641758][ T6764] Total swap = 124996kB
[   72.645759][ T6764] 786301 pages RAM
[   72.647095][ T6764] 0 pages HighMem/MovableOnly
[   72.648771][ T6764] 241344 pages reserved
[   72.660902][ T6764] 0 pages cma reserved
[   72.816158][    T9] IPVS: starting estimator thread 0...
[   72.885615][ T6818] xt_l2tp: unknown flags: 51
[   72.904544][ T6811] IPVS: using max 81 ests per chain, 194400 per kthread
[   72.940904][ T6824] netlink: 'syz.0.274': attribute type 5 has an invalid length.
[   72.987050][ T6828] x9: renamed from bridge_slave_0
[   73.750560][ T6848] lo speed is unknown, defaulting to 1000
[   74.260737][ T6895] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.260841][ T6900] __nla_validate_parse: 15 callbacks suppressed
[   74.260852][ T6900] netlink: 224 bytes leftover after parsing attributes in process `syz.2.296'.
[   74.270772][ T6900] NCSI netlink: No device for ifindex 246
[   74.274465][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'.
[   74.275438][ T6901] netlink: 224 bytes leftover after parsing attributes in process `syz.2.296'.
[   74.277993][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'.
[   74.281650][ T6901] NCSI netlink: No device for ifindex 246
[   74.332401][ T6906] netlink: 17 bytes leftover after parsing attributes in process `syz.1.297'.
[   74.344758][ T6906] team0: Mode changed to "loadbalance"
[   74.389731][ T6911] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.299'.
[   74.410761][ T6911] netlink: 168 bytes leftover after parsing attributes in process `syz.2.299'.
[   74.674412][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'.
[   74.759860][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[   75.017829][ T6990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.023703][ T6990] syzkaller0: entered promiscuous mode
[   75.032083][ T6990] syzkaller0: entered allmulticast mode
[   75.050993][ T6987] tipc: Resetting bearer <eth:syzkaller0>
[   75.069920][ T6987] tipc: Disabling bearer <eth:syzkaller0>
[   75.099993][ T6995] validate_nla: 6 callbacks suppressed
[   75.100004][ T6995] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[   75.110145][ T6995] netlink: 224 bytes leftover after parsing attributes in process `syz.0.317'.
[   75.409608][ T7034] netlink: 'syz.0.324': attribute type 1 has an invalid length.
[   75.586478][ T7042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.594851][ T7041] syzkaller0: entered promiscuous mode
[   75.613254][ T7041] syzkaller0: entered allmulticast mode
[   75.705788][ T7042] pim6reg: entered allmulticast mode
[   75.718397][ T7041] tipc: Resetting bearer <eth:syzkaller0>
[   75.739623][ T7041] tipc: Resetting bearer <eth:syzkaller0>
[   75.790631][ T7041] tipc: Disabling bearer <eth:syzkaller0>
[   75.968035][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.998535][ T7056] ieee802154 phy1 wpan1: encryption failed: -22
[   76.002536][ T7056] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   76.004937][ T7056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.266434][ T7100] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   76.280691][ T7100] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   76.285009][ T7100] gretap1: entered promiscuous mode
[   76.392443][ T7098] netlink: 'syz.1.341': attribute type 9 has an invalid length.
[   76.396529][ T7104] netlink: 'syz.1.341': attribute type 9 has an invalid length.
[   76.436606][ T7105] netlink: 'syz.2.345': attribute type 8 has an invalid length.
[   76.442950][ T7105] bond0: entered promiscuous mode
[   76.444913][ T7105] bond_slave_0: entered promiscuous mode
[   76.447975][ T7105] bond_slave_1: entered promiscuous mode
[   76.457657][ T7105] bond0: left promiscuous mode
[   76.459622][ T7105] bond_slave_0: left promiscuous mode
[   76.462739][ T7105] bond_slave_1: left promiscuous mode
[   76.609066][ T7111] netlink: 'syz.0.348': attribute type 1 has an invalid length.
[   77.171069][ T7148] dvmrp0: entered allmulticast mode
[   77.209036][ T7151] netem: incorrect gi model size
[   77.210959][ T7151] netem: change failed
[   77.308061][ T7155] lo speed is unknown, defaulting to 1000
[   77.674965][ T7178] netlink: 'syz.0.371': attribute type 10 has an invalid length.
[   77.679734][ T7178] team0: Cannot enslave team device to itself
[   77.718878][ T7182] IPVS: set_ctl: invalid protocol: 50 172.20.20.50:20001
[   77.778984][ T7190] lo speed is unknown, defaulting to 1000
[   77.864823][ T7194] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   78.124149][ T7206] netlink: 'syz.0.380': attribute type 2 has an invalid length.
[   78.258385][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   78.261914][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   78.267584][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   78.270717][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   78.292133][ T7215] block nbd0: server does not support multiple connections per device.
[   78.296505][ T7215] block nbd0: shutting down sockets
[   78.385167][ T7234] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.403688][ T7234] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.406758][ T7234] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[   78.413377][ T7234] bond2: (slave vxcan1): Error -95 calling set_mac_address
[   78.453555][ T7232] veth5: entered promiscuous mode
[   78.480472][ T7242] veth3: entered promiscuous mode
[   78.510295][ T7234] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.568692][ T7255] sctp: [Deprecated]: syz.0.395 (pid 7255) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.568692][ T7255] Use struct sctp_sack_info instead
[   78.777878][ T7272] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   79.467136][ T7279] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[   79.553848][ T7286] __nla_validate_parse: 42 callbacks suppressed
[   79.553859][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.402'.
[   79.605398][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   79.660957][ T7288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.778720][ T7306] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.409'.
[   79.902266][ T5843] Bluetooth: hci2: command tx timeout
[   79.939679][ T7317] lo speed is unknown, defaulting to 1000
[   80.148972][ T7324] erspan1: entered promiscuous mode
[   80.454787][ T7342] netlink: 52 bytes leftover after parsing attributes in process `syz.1.418'.
[   80.459557][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[   80.566053][ T7353] validate_nla: 2 callbacks suppressed
[   80.566067][ T7353] netlink: 'syz.1.421': attribute type 1 has an invalid length.
[   80.623895][ T7353] syzkaller0: entered promiscuous mode
[   80.626156][ T7353] syzkaller0: entered allmulticast mode
[   81.354854][   T47] cfg80211: failed to load regulatory.db
[   81.437046][ T7367] netlink: 'syz.1.424': attribute type 21 has an invalid length.
[   81.439632][ T7367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.424'.
[   81.552516][ T7371] nbd0: detected capacity change from 0 to 549764202496
[   81.570223][   T57] block nbd0: Receive control failed (result -104)
[   82.192541][ T7397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.433'.
[   82.260956][ T7399] netlink: 348 bytes leftover after parsing attributes in process `syz.1.434'.
[   82.274720][ T7399] macsec1: entered promiscuous mode
[   82.277176][ T7399] macsec1: entered allmulticast mode
[   82.558042][ T7410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.438'.
[   82.561141][ T7410] netlink: 'syz.1.438': attribute type 7 has an invalid length.
[   82.564638][ T7410] netlink: 'syz.1.438': attribute type 8 has an invalid length.
[   82.567216][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'.
[   82.574073][ T7410] syzkaller1: entered promiscuous mode
[   82.576342][ T7410] syzkaller1: entered allmulticast mode
[   83.129951][ T7460] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.180787][ T7468] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   83.243785][ T7469] netlink: 'syz.1.447': attribute type 12 has an invalid length.
[   83.309489][ T7480] IPv6: sit2: Disabled Multicast RS
[   83.407297][ T7492] veth0_to_bond: entered allmulticast mode
[   83.450217][ T7498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.458984][ T7498] syzkaller0: entered promiscuous mode
[   83.460871][ T7498] syzkaller0: entered allmulticast mode
[   83.506108][ T7498] tipc: Resetting bearer <eth:syzkaller0>
[   83.528746][ T7498] tipc: Disabling bearer <eth:syzkaller0>
[   83.557076][ T7511] lo speed is unknown, defaulting to 1000
[   84.284853][ T7569] syzkaller1: tun_chr_ioctl cmd 1074025677
[   84.287220][ T7569] syzkaller1: linktype set to 778
[   84.617421][ T7587] __nla_validate_parse: 9 callbacks suppressed
[   84.617434][ T7587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.479'.
[   84.657446][ T7589] netlink: 'syz.2.480': attribute type 4 has an invalid length.
[   84.667365][ T7589] netlink: 'syz.2.480': attribute type 4 has an invalid length.
[   84.778768][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'.
[   85.269334][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'.
[   85.283477][ T7601] lo speed is unknown, defaulting to 1000
[   85.319533][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'.
[   85.361150][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   85.365886][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'.
[   85.396968][ T7609] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   85.626032][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'.
[   85.629723][ T7626] netlink: 236 bytes leftover after parsing attributes in process `syz.1.490'.
[   85.635219][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'.
[   85.699755][ T7634] team0: Mode changed to "broadcast"
[   85.711331][ T7634] vlan0: entered promiscuous mode
[   85.720669][ T7634] team0: Port device vlan0 added
[   85.726591][ T7636] lo speed is unknown, defaulting to 1000
[   85.733679][ T7634] tipc: Enabled bearer <eth:team0>, priority 0
[   85.739323][ T7640] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   85.801326][ T7646] netlink: 'syz.0.496': attribute type 83 has an invalid length.
[   85.887938][ T7650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.945207][ T7650] tipc: Resetting bearer <eth:syzkaller0>
[   85.962790][ T7649] tipc: Disabling bearer <eth:syzkaller0>
[   86.058046][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[   86.129263][ T7675] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.531365][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.534587][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.539040][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.552636][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.598779][ T7724] netlink: 'syz.2.515': attribute type 10 has an invalid length.
[   86.604305][ T7724] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   86.852159][ T5879] tipc: Node number set to 120958944
[   87.191921][ T7772] netlink: 'syz.0.522': attribute type 21 has an invalid length.
[   87.228566][ T7775] netlink: 'syz.1.523': attribute type 1 has an invalid length.
[   87.233974][ T7777] netlink: 'syz.0.524': attribute type 1 has an invalid length.
[   87.314957][ T7784] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   87.327467][ T7786] netlink: 'syz.0.528': attribute type 58 has an invalid length.
[   87.364645][ T7786] x9: left promiscuous mode
[   87.366376][ T7786] bridge0: port 1(1x9) entered disabled state
[   87.369494][ T7786] bridge_slave_1: left allmulticast mode
[   87.371902][ T7786] bridge_slave_1: left promiscuous mode
[   87.375399][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.378289][ T7787] netlink: 'syz.1.527': attribute type 3 has an invalid length.
[   87.381367][ T7787] netlink: 'syz.1.527': attribute type 1 has an invalid length.
[   87.381917][ T7786] veth0_to_bond: left allmulticast mode
[   87.387022][ T7786] bond0: (slave bond_slave_0): Releasing backup interface
[   87.390667][ T7786] bond0: (slave bond_slave_1): Releasing backup interface
[   87.394939][ T7786] team0: Port device team_slave_0 removed
[   87.397770][ T7786] team0: Port device team_slave_1 removed
[   87.399962][ T7786] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.403521][ T7786] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   87.406825][ T7786] bond1: (slave geneve2): Releasing active interface
[   87.409212][ T7786] geneve2: left promiscuous mode
[   87.413856][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.417584][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.420891][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.424339][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.247785][ T7828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   88.358879][ T7833] veth1_macvtap: left promiscuous mode
[   88.643656][ T7850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.647318][ T7850] syzkaller0: entered promiscuous mode
[   88.649251][ T7850] syzkaller0: entered allmulticast mode
[   88.670502][ T7850] tipc: Resetting bearer <eth:syzkaller0>
[   88.685086][ T7849] tipc: Resetting bearer <eth:syzkaller0>
[   88.710271][ T7849] tipc: Disabling bearer <eth:syzkaller0>
[   88.893139][ T7883] bond0 (unregistering): Released all slaves
[   88.939115][ T7890] vlan2: entered allmulticast mode
[   88.941535][ T7890] bridge0: entered allmulticast mode
[   88.950349][ T7890] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   89.061614][ T7909] netlink: 'syz.2.557': attribute type 4 has an invalid length.
[   89.201591][ T7921] tipc: Resetting bearer <eth:team0>
[   89.408798][ T7942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.413066][ T7942] syzkaller0: entered promiscuous mode
[   89.415478][ T7942] syzkaller0: entered allmulticast mode
[   89.433784][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[   89.438522][ T7941] tipc: Resetting bearer <eth:syzkaller0>
[   89.450428][ T7941] tipc: Disabling bearer <eth:syzkaller0>
[   89.732449][ T7962] __nla_validate_parse: 27 callbacks suppressed
[   89.732461][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.738270][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.741914][ T7965] erspan1: entered promiscuous mode
[   89.741925][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.750659][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[   89.756112][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.761146][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.577'.
[   89.761285][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.769351][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.786781][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   89.795034][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'.
[   90.847913][ T7990] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   90.861438][ T7991] siw: device registration error -23
[   91.022155][ T8008] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.026576][ T8008] netlink: 'syz.2.593': attribute type 21 has an invalid length.
[   91.034868][ T8008] netlink: 'syz.2.593': attribute type 3 has an invalid length.
[   91.040775][ T8011] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.280288][ T8020] lo speed is unknown, defaulting to 1000
[   91.516343][ T8052] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   91.535159][ T8053] bridge_slave_0: left allmulticast mode
[   91.537522][ T8053] bridge_slave_0: left promiscuous mode
[   91.539887][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.544675][ T8053] bridge_slave_1: left allmulticast mode
[   91.547009][ T8053] bridge_slave_1: left promiscuous mode
[   91.549345][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.557304][ T8053] bond0: (slave bond_slave_0): Releasing backup interface
[   91.564530][ T8053] bond0: (slave bond_slave_1): Releasing backup interface
[   91.571106][ T8053] team0: Port device team_slave_0 removed
[   91.576786][ T8053] team0: Port device team_slave_1 removed
[   91.579150][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.581559][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.586237][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.588727][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.629123][ T8057] sctp: [Deprecated]: syz.2.604 (pid 8057) Use of int in max_burst socket option.
[   91.629123][ T8057] Use struct sctp_assoc_value instead
[   91.638256][   T24] IPVS: starting estimator thread 0...
[   91.642904][ T8057] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[   91.742346][ T8061] IPVS: using max 81 ests per chain, 194400 per kthread
[   92.463142][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.466063][ T8092] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   92.473416][ T8092] bond0: (slave wlan1): Enslaving as an active interface with a down link
[   92.476582][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.481520][ T8093] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.483299][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.486762][ T8093] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.490285][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.496353][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.500566][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.511689][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.515234][ T8092] netlink: 'syz.2.611': attribute type 10 has an invalid length.
[   92.872273][ T5843] Bluetooth: hci0: command tx timeout
[   92.984152][ T8116] syzkaller1: entered promiscuous mode
[   92.986593][ T8116] syzkaller1: entered allmulticast mode
[   93.393368][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.398834][ T8148] 8021q: adding VLAN 0 to HW filter on device team0
[   93.404562][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.408287][ T8148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.415776][   T24] lo speed is unknown, defaulting to 1000
[   93.418411][   T24] syz1: Port: 1 Link ACTIVE
[   93.470788][ T8148] lo speed is unknown, defaulting to 1000
[   93.553399][ T8148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.639281][ T8169] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[   93.839255][ T8185] !: renamed from dummy0 (while UP)
[   93.975628][ T8198] delete_channel: no stack
[   94.001754][ T8205] veth1_to_bond: entered allmulticast mode
[   94.028401][ T8205] veth1_to_bond (unregistering): left allmulticast mode
[  112.065127][   T25] block nbd0: Possible stuck request ffff8880227a8000: control (read@0,4096B). Runtime 30 seconds
[  123.075375][ T8264] __nla_validate_parse: 42 callbacks suppressed
[  123.075388][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.1.661'.
[  123.081025][ T8264] validate_nla: 21 callbacks suppressed
[  123.081034][ T8264] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  123.088658][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.661'.
[  123.091883][ T8266] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  123.109943][ T8261] lo speed is unknown, defaulting to 1000
[  123.289649][ T8276] netlink: 'syz.1.665': attribute type 8 has an invalid length.
[  123.297319][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'.
[  123.357597][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'.
[  123.367574][ T8285] veth1_macvtap: entered promiscuous mode
[  123.381235][ T8285] veth1_macvtap: left promiscuous mode
[  123.480216][ T8293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.669'.
[  123.501912][ T8298] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  123.510373][ T8298] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[  123.570938][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'.
[  123.593530][ T8311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[  123.645604][ T8321] netlink: 56 bytes leftover after parsing attributes in process `syz.0.679'.
[  123.737521][ T8328] lo speed is unknown, defaulting to 1000
[  123.785642][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  123.787362][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  123.795431][ T8335] openvswitch: netlink: Unknown nsh attribute 0
[  123.802372][ T8335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.839070][ T8311] lo speed is unknown, defaulting to 1000
[  123.941621][ T8342] netlink: 'syz.0.683': attribute type 5 has an invalid length.
[  124.064761][ T8347] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  124.068001][ T8347] bond0 (unregistering): Released all slaves
[  124.274198][ T8362] wg1: entered promiscuous mode
[  124.277024][ T8362] wg1: entered allmulticast mode
[  124.847471][ T8383] 8021q: VLANs not supported on gre0
[  124.942444][ T8387] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.944967][ T8388] bond3: option mode: unable to set because the bond device is up
[  124.953692][ T8387] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  124.957645][ T8387] bond3: (slave macvlan3): Enslaving as a backup interface with a down link
[  125.037993][ T8393] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  125.068065][ T8393] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  125.073439][ T5872] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.078941][ T8393] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.192223][ T5872] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.204074][ T8407] syzkaller0: entered promiscuous mode
[  125.206431][ T8407] syzkaller0: entered allmulticast mode
[  125.227014][ T8409] netlink: 'syz.1.703': attribute type 3 has an invalid length.
[  125.341723][ T8413] syzkaller1: entered promiscuous mode
[  125.350959][ T8413] syzkaller1: entered allmulticast mode
[  125.425997][ T8420] netlink: 'syz.1.706': attribute type 5 has an invalid length.
[  125.462359][ T8427] sctp: [Deprecated]: syz.0.707 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.462359][ T8427] Use struct sctp_sack_info instead
[  125.848216][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113025800: rx timeout, send abort
[  125.851726][    C1] vcan0: j1939_tp_rxtimer: 0xffff888113024400: rx timeout, send abort
[  125.855170][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113025800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  125.861679][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113024400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  125.894474][ T8447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.898023][ T8447] syzkaller0: entered promiscuous mode
[  125.900292][ T8447] syzkaller0: entered allmulticast mode
[  125.918304][ T8447] tipc: Resetting bearer <eth:syzkaller0>
[  125.922791][ T8446] tipc: Resetting bearer <eth:syzkaller0>
[  125.934297][ T8446] tipc: Disabling bearer <eth:syzkaller0>
[  126.098482][ T8456] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  126.332993][ T8473] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  126.375868][ T8475] tipc: Enabling of bearer <et:g> rejected, media not registered
[  126.491390][ T8487] batman_adv: batadv0: Adding interface: ipvlan3
[  126.495961][ T8487] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.507639][ T8487] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  126.515205][ T8489] tipc: Enabling of bearer <et:g> rejected, media not registered
[  126.814011][ T8502] lo speed is unknown, defaulting to 1000
[  126.984746][ T8520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.991867][   T33] audit: type=1107 audit(1756902299.536:2): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  127.240936][ T8546] C: renamed from lo (while UP)
[  127.247308][ T8546] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  127.468942][ T8567] lo speed is unknown, defaulting to 1000
[  127.582221][ T5848] Bluetooth: hci2: command tx timeout
[  127.587111][ T8583] IPv6: sit4: Disabled Multicast RS
[  127.590021][ T8583] sit4: entered allmulticast mode
[  127.653782][ T8583] lo speed is unknown, defaulting to 1000
[  127.921793][ T8607] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20001
[  128.014243][ T8619] geneve1: default FDB implementation only supports local addresses
[  128.035059][ T8618] lo speed is unknown, defaulting to 1000
[  128.089500][ T8624] __nla_validate_parse: 26 callbacks suppressed
[  128.089513][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  128.125522][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'.
[  128.205975][ T8642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.764'.
[  128.223048][ T8638] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  128.319445][ T8657] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.767'.
[  128.324246][ T8654] netlink: 410 bytes leftover after parsing attributes in process `syz.0.766'.
[  128.340406][ T8655] netlink: 80 bytes leftover after parsing attributes in process `syz.0.766'.
[  128.367386][ T8660] validate_nla: 2 callbacks suppressed
[  128.367397][ T8660] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[  128.386985][ T8663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.564418][ T8686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.776'.
[  128.566962][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.775'.
[  128.592942][ T8686] ip6gretap0: entered promiscuous mode
[  128.594911][ T8686] : entered allmulticast mode
[  128.595849][ T8688] netlink: 'syz.0.777': attribute type 10 has an invalid length.
[  128.596501][ T8686] ip6gretap0: entered allmulticast mode
[  128.662383][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'.
[  128.665757][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'.
[  128.679582][ T8692] caif0: entered promiscuous mode
[  128.681289][ T8692] caif0: entered allmulticast mode
[  128.708768][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.711275][ T8693] bridge0: port 1(bond0) entered blocking state
[  128.713886][ T8693] bridge0: port 1(bond0) entered disabled state
[  128.716882][ T8693] bond0: entered allmulticast mode
[  128.719728][ T8693] bond0: entered promiscuous mode
[  128.723239][ T8693] bridge0: port 1(bond0) entered blocking state
[  128.726364][ T8693] bridge0: port 1(bond0) entered listening state
[  128.749367][ T8703] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  128.800626][ T8713] netlink: 'syz.2.782': attribute type 21 has an invalid length.
[  128.885545][ T8716] lo speed is unknown, defaulting to 1000
[  129.363455][ T8728] xt_HMARK: spi-set and port-set can't be combined
[  129.372912][ T8728] netlink: 'syz.2.787': attribute type 9 has an invalid length.
[  129.425856][   T32] bridge0: port 1(bond0) entered disabled state
[  129.568957][ T8734] netlink: 'syz.1.789': attribute type 1 has an invalid length.
[  129.573447][ T8734] netlink: 'syz.1.789': attribute type 3 has an invalid length.
[  129.623850][ T8738] macvlan2: entered allmulticast mode
[  129.625814][ T8738] v: entered allmulticast mode
[  129.628418][ T8738] v: left allmulticast mode
[  129.662164][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  130.444513][ T8754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.448986][ T8754] syzkaller0: entered promiscuous mode
[  130.451392][ T8754] syzkaller0: entered allmulticast mode
[  130.471478][ T8753] tipc: Resetting bearer <eth:syzkaller0>
[  130.484208][ T8753] tipc: Disabling bearer <eth:syzkaller0>
[  130.745740][ T8774] lo speed is unknown, defaulting to 1000
[  131.053165][ T8796] tipc: Can't bind to reserved service type 1
[  131.246172][ T8815] pimreg: tun_chr_ioctl cmd 2147767506
[  131.510177][ T8836] netlink: 'syz.2.820': attribute type 26 has an invalid length.
[  131.526806][ T8836] netlink: 'syz.2.820': attribute type 26 has an invalid length.
[  131.530694][ T8836] netlink: 'syz.2.820': attribute type 26 has an invalid length.
[  131.534815][ T8836] netlink: 'syz.2.820': attribute type 26 has an invalid length.
[  131.847379][ T8853] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  131.850085][ T8853] IPv6: NLM_F_CREATE should be set when creating new route
[  131.853143][ T8853] IPv6: NLM_F_CREATE should be set when creating new route
[  131.855683][ T8853] IPv6: NLM_F_CREATE should be set when creating new route
[  132.545577][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.940628][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.238256][ T8968] __nla_validate_parse: 17 callbacks suppressed
[  133.238264][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'.
[  133.268497][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'.
[  133.272581][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'.
[  133.315232][ T8978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.406300][ T8986] Bluetooth: MGMT ver 1.23
[  133.880239][ T9018] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  134.574397][ T9067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'.
[  134.695969][ T9070] ieee802154 phy1 wpan1: encryption failed: -126
[  134.949388][ T9092] validate_nla: 41 callbacks suppressed
[  134.949397][ T9092] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[  134.955081][ T9091] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[  134.991042][ T9092] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  135.034635][ T9104] netlink: 256 bytes leftover after parsing attributes in process `syz.2.879'.
[  135.148442][ T9112] lo speed is unknown, defaulting to 1000
[  135.192175][ T9112] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  135.392332][ T9134] 8021q: VLANs not supported on gre0
[  135.423652][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  135.429377][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  136.054676][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'.
[  136.096325][ T9181] hsr_slave_1 (unregistering): left promiscuous mode
[  136.149264][ T9194] Bluetooth: MGMT ver 1.23
[  136.185913][ T9181] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  136.253307][ T9200] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[  136.256123][ T9200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.904'.
[  136.310671][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'.
[  136.329618][ T9213] geneve3: entered promiscuous mode
[  136.948288][ T9255] lo speed is unknown, defaulting to 1000
[  136.956960][ T9266] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  136.985778][ T9266] 8021q: adding VLAN 0 to HW filter on device bond6
[  137.021254][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'.
[  137.033612][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'.
[  137.115911][   T12] nci: nci_rx_work: unknown MT 0x1
[  137.757108][ T9307] netlink: 'syz.0.920': attribute type 1 has an invalid length.
[  137.893398][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.911585][ T9316] tipc: Failed to remove unknown binding: 66,1,1/120958944:3529299269/3529299271
[  137.934986][ T9316] tipc: Failed to remove unknown binding: 66,1,1/120958944:3529299269/3529299271
[  137.939059][ T9316] tipc: Failed to remove unknown binding: 66,1,1/120958944:3529299269/3529299271
[  138.065829][ T9326] tun0: tun_chr_ioctl cmd 1074812118
[  138.305002][ T9344] __nla_validate_parse: 8 callbacks suppressed
[  138.305012][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'.
[  138.456228][ T9361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.934'.
[  138.460609][ T9361] netlink: 244 bytes leftover after parsing attributes in process `syz.2.934'.
[  138.467445][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'.
[  138.478669][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'.
[  138.510371][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'.
[  138.515376][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'.
[  138.806482][ T9398] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.897004][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[  138.900062][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[  138.928456][ T9401] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[  138.941809][ T9401] bond6: entered promiscuous mode
[  138.944275][ T9401] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.958928][ T9401] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.961485][ T9401] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  138.965912][ T9401] bond6: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  138.974226][ T9401] bond6: (slave vxcan5): making interface the new active one
[  138.976929][ T9401] vxcan5: entered promiscuous mode
[  138.979568][ T9401] bond6: (slave vxcan5): Enslaving as an active interface with an up link
[  139.208932][ T9433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.958'.
[  139.401499][ T9439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.505284][ T9444] lo speed is unknown, defaulting to 1000
[  139.990983][ T9466] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  140.006102][ T9466] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.337897][ T9479] C: renamed from lo (while UP)
[  140.341927][ T9479] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.636924][ T9495] pim6reg: left allmulticast mode
[  140.916499][ T9517] netlink: 'syz.1.986': attribute type 5 has an invalid length.
[  140.919140][ T9517] netlink: 'syz.1.986': attribute type 6 has an invalid length.
[  141.051757][ T9529] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  141.077629][ T9529] netlink: 'syz.2.990': attribute type 17 has an invalid length.
[  141.083940][ T9529] netlink: 'syz.2.990': attribute type 1 has an invalid length.
[  141.332099][ T9542] netlink: 'syz.2.993': attribute type 11 has an invalid length.
[  141.693904][ T9580] netlink: 'syz.1.1004': attribute type 1 has an invalid length.
[  141.718922][ T9580] bond7: entered promiscuous mode
[  141.721022][ T9580] bond7: entered allmulticast mode
[  141.739519][ T9580] bridge7: entered promiscuous mode
[  141.741810][ T9580] bridge7: entered allmulticast mode
[  141.749087][ T9580] bond7: (slave bridge7): making interface the new active one
[  141.752868][ T9580] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  141.798750][ T9594] netlink: 'syz.1.1008': attribute type 10 has an invalid length.
[  141.804521][ T9594] tipc: Resetting bearer <eth:team0>
[  141.810183][ T9594] netlink: 'syz.1.1008': attribute type 10 has an invalid length.
[  141.843295][ T9594] bond1: option mode: unable to set because the bond device is up
[  142.007065][ T9609] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  142.013244][ T9612] veth0: entered promiscuous mode
[  142.041716][ T9611] veth0 (unregistering): left promiscuous mode
[  142.074267][ T9612] netlink: 'syz.0.1015': attribute type 19 has an invalid length.
[  142.146488][   T25] block nbd0: Possible stuck request ffff8880227a8000: control (read@0,4096B). Runtime 60 seconds
[  142.221946][ T9625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.306900][ T9634] openvswitch: netlink: Flow actions attr not present in new flow.
[  142.586830][ T9659] macvlan4: entered allmulticast mode
[  142.589287][ T9659] v: entered allmulticast mode
[  142.598610][ T9659] v: left allmulticast mode
[  142.661796][ T9671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  142.800995][ T9684] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  142.810896][ T9685] netlink: 'syz.2.1034': attribute type 2 has an invalid length.
[  142.816626][ T9684] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  142.910929][ T9694] bond3: (slave macvlan3): Releasing backup interface
[  142.917937][ T9694] bond4: (slave ip6gretap1): Removing an active aggregator
[  142.923302][ T9694] bond4: (slave ip6gretap1): Releasing backup interface
[  142.938614][ T9694] team0: Mode changed to "broadcast"
[  142.942432][ T9694] vlan0: entered promiscuous mode
[  142.946964][ T9694] tipc: Enabled bearer <eth:team0>, priority 0
[  143.383604][ T9716] __nla_validate_parse: 28 callbacks suppressed
[  143.383618][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  143.516481][ T9720] v: renamed from ip6_vti0 (while UP)
[  143.649922][ T9732] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1049'.
[  143.701228][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  143.857710][ T9758] syz.2.1055 uses old SIOCAX25GETINFO
[  143.919949][ T9767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'.
[  143.953385][   T47] tipc: Node number set to 2703508677
[  143.973507][ T9770] dvmrp8: entered allmulticast mode
[  144.058784][ T9770] C speed is unknown, defaulting to 1000
[  144.141319][ T9768] dvmrp8: left allmulticast mode
[  144.302273][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'.
[  144.302399][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'.
[  144.389339][ T9802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.397088][ T9824] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1069'.
[  144.464947][ T9835] IPv6: addrconf: prefix option has invalid lifetime
[  144.511018][ T9840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  144.635854][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1077'.
[  144.733919][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  144.737690][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  144.869398][ T9877] C speed is unknown, defaulting to 1000
[  144.949542][ T9881] syzkaller1: entered promiscuous mode
[  144.951838][ T9881] syzkaller1: entered allmulticast mode
[  145.169126][ T9894] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.188483][ T9894] bond3: (slave geneve2): making interface the new active one
[  145.212387][ T9894] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  145.229896][ T9894] bond3: entered promiscuous mode
[  145.233666][ T9894] geneve2: entered promiscuous mode
[  145.268561][ T9902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.510098][ T9921] pimreg: entered allmulticast mode
[  145.649419][ T9928] C speed is unknown, defaulting to 1000
[  146.010772][ T9943] netem: unknown loss type 12
[  146.013077][ T9943] netem: change failed
[  146.127581][ T9947] validate_nla: 22 callbacks suppressed
[  146.127595][ T9947] netlink: 'syz.0.1110': attribute type 1 has an invalid length.
[  146.167372][ T9947] bond8: (slave bridge3): making interface the new active one
[  146.170357][ T9947] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  149.658501][T10010] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  149.666564][T10010] __nla_validate_parse: 10 callbacks suppressed
[  149.666571][T10010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1127'.
[  149.760037][T10027] netlink: 'syz.2.1133': attribute type 1 has an invalid length.
[  149.765734][T10027] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1133'.
[  149.769409][T10027] netlink: 'syz.2.1133': attribute type 1 has an invalid length.
[  149.776085][T10024] syzkaller1: entered promiscuous mode
[  149.777986][T10024] syzkaller1: entered allmulticast mode
[  149.795985][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1134'.
[  149.810933][T10029] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.985699][T10051] C speed is unknown, defaulting to 1000
[  150.041626][T10057] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1142'.
[  150.111431][T10068] netlink: 'syz.2.1145': attribute type 11 has an invalid length.
[  150.118379][T10068] netlink: 'syz.2.1145': attribute type 4 has an invalid length.
[  150.120998][T10068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1145'.
[  150.143028][T10064] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1144'.
[  150.174554][T10073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.234914][T10077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1148'.
[  150.330202][T10085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1152'.
[  150.335201][T10082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1150'.
[  150.338202][T10082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1150'.
[  150.388455][T10091] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  150.443499][T10093] sock: sock_timestamping_bind_phc: sock not bind to device
[  150.448315][T10098] C speed is unknown, defaulting to 1000
[  150.473713][T10093] C speed is unknown, defaulting to 1000
[  150.527616][T10101] dvmrp0: entered allmulticast mode
[  150.961076][T10126] syzkaller0: entered promiscuous mode
[  150.965760][T10126] syzkaller0: entered allmulticast mode
[  151.040795][T10136] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  151.353440][T10157] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  151.358040][T10156] IPVS: stopping backup sync thread 10157 ...
[  151.598435][T10179] C speed is unknown, defaulting to 1000
[  151.766486][T10194] netlink: 'syz.1.1186': attribute type 6 has an invalid length.
[  151.791326][T10194] netlink: 'syz.1.1186': attribute type 12 has an invalid length.
[  151.916202][T10203] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  151.958922][T10205] C speed is unknown, defaulting to 1000
[  152.147017][T10215] team0: Port device vlan0 removed
[  152.154121][T10215] batman_adv: batadv0: Removing interface: ipvlan3
[  152.163723][T10215] bond6: (slave vxcan5): Releasing backup interface
[  152.166394][T10215] vxcan5: left promiscuous mode
[  152.176110][T10215] bond7: (slave bridge7): Releasing backup interface
[  152.241421][T10218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.251845][T10218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.287658][T10222] C speed is unknown, defaulting to 1000
[  153.209665][T10271] netlink: 'syz.1.1210': attribute type 10 has an invalid length.
[  153.215995][T10271] netlink: 'syz.1.1210': attribute type 10 has an invalid length.
[  153.554359][T10316] C speed is unknown, defaulting to 1000
[  153.586006][T10318] sctp: [Deprecated]: syz.0.1227 (pid 10318) Use of int in maxseg socket option.
[  153.586006][T10318] Use struct sctp_assoc_value instead
[  153.731101][T10326] C speed is unknown, defaulting to 1000
[  153.888301][T10346] C speed is unknown, defaulting to 1000
[  154.327735][T10377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.368197][T10382] C speed is unknown, defaulting to 1000
[  154.486696][T10385] nbd: must specify an index to disconnect
[  154.615345][T10399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.878344][T10426] __nla_validate_parse: 26 callbacks suppressed
[  154.878353][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'.
[  154.926547][T10428] bridge0: port 1(bond0) entered disabled state
[  155.034517][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  155.230668][T10452] C speed is unknown, defaulting to 1000
[  155.280148][T10458] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  155.435981][T10471] tipc: Resetting bearer <ib:ip6gre0>
[  155.441725][T10471] tipc: Resetting bearer <eth:team0>
[  155.448360][T10471] vlan0: left promiscuous mode
[  155.453613][T10471] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  155.459670][T10471] bond1: left promiscuous mode
[  155.464935][T10471] veth3: left promiscuous mode
[  155.469975][T10471] sit4: left allmulticast mode
[  155.477623][ T5853] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.481084][   T47] C speed is unknown, defaulting to 1000
[  155.481112][ T5853] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.484988][ T5853] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.490683][   T47] syz1: Port: 1 Link DOWN
[  155.496325][ T5853] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.648073][T10483] netlink: 'syz.2.1275': attribute type 10 has an invalid length.
[  155.684900][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  155.698210][T10486] netlink: 'syz.2.1276': attribute type 3 has an invalid length.
[  155.701262][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'.
[  155.905653][T10512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1284'.
[  155.908726][T10512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1284'.
[  156.051196][T10528] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  156.054738][T10525] IPVS: stopping backup sync thread 10528 ...
[  156.057735][T10525] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1288'.
[  156.129936][T10540] lo speed is unknown, defaulting to 1000
[  156.133704][T10540] lo speed is unknown, defaulting to 1000
[  156.136093][T10540] lo speed is unknown, defaulting to 1000
[  156.143259][T10540] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  156.155049][T10540] lo speed is unknown, defaulting to 1000
[  156.169857][T10540] lo speed is unknown, defaulting to 1000
[  156.172657][T10540] lo speed is unknown, defaulting to 1000
[  156.240956][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'.
[  156.579374][T10569] dvmrp1: tun_chr_ioctl cmd 35108
[  156.605792][T10567] C speed is unknown, defaulting to 1000
[  156.610624][T10569] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1299'.
[  156.615678][T10567] lo speed is unknown, defaulting to 1000
[  156.821203][T10578] sctp: [Deprecated]: syz.0.1301 (pid 10578) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.821203][T10578] Use struct sctp_sack_info instead
[  156.909011][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'.
[  157.052256][T10586] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  157.055752][T10586] nbd: error processing sock list
[  157.058363][T10586] block nbd1: shutting down sockets
[  157.113699][T10595] C speed is unknown, defaulting to 1000
[  157.118758][T10595] lo speed is unknown, defaulting to 1000
[  157.198799][T10597] C speed is unknown, defaulting to 1000
[  157.203979][T10597] lo speed is unknown, defaulting to 1000
[  157.390069][T10610] netlink: 'syz.1.1311': attribute type 1 has an invalid length.
[  158.002906][T10623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.235909][T10646] bond0: option arp_validate: invalid value (18446744073491447809)
[  158.239032][T10646] bond0: option arp_validate: invalid value (18446744073491447809)
[  158.270472][T10650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.273241][T10650] syzkaller0: entered promiscuous mode
[  158.275101][T10650] syzkaller0: entered allmulticast mode
[  158.283879][T10650] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  158.298766][T10650] tipc: Resetting bearer <eth:syzkaller0>
[  158.375086][T10645] tipc: Resetting bearer <eth:syzkaller0>
[  158.389720][T10645] tipc: Disabling bearer <eth:syzkaller0>
[  158.477884][T10682] netlink: 'syz.1.1334': attribute type 1 has an invalid length.
[  158.480504][T10682] netlink: 'syz.1.1334': attribute type 1 has an invalid length.
[  158.486058][T10682] openvswitch: netlink: Flow key attr not present in new flow.
[  158.489233][T10684] netlink: 'syz.2.1335': attribute type 5 has an invalid length.
[  158.496773][T10686] netlink: 'syz.2.1335': attribute type 5 has an invalid length.
[  158.523797][T10690] netlink: 'syz.1.1336': attribute type 2 has an invalid length.
[  158.542517][T10689] 8021q: adding VLAN 0 to HW filter on device bond5
[  158.556546][T10689] bond0: left promiscuous mode
[  158.558859][T10689] bridge0: port 1(bond0) entered disabled state
[  158.566186][T10689] bond3: (slave geneve2): Releasing active interface
[  158.568811][T10689] geneve2: left promiscuous mode
[  158.726043][T10708] macvtap1: entered promiscuous mode
[  158.728329][T10708] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  158.736028][T10708] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  158.791115][T10714] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  159.026555][T10732] netlink: 'syz.2.1352': attribute type 83 has an invalid length.
[  159.161417][T10746] netlink: 'syz.2.1354': attribute type 1 has an invalid length.
[  159.227967][T10760] IPVS: length: 230 != 8
[  159.437295][T10774] netlink: 'syz.0.1363': attribute type 2 has an invalid length.
[  159.540152][T10781] C speed is unknown, defaulting to 1000
[  159.549707][T10781] lo speed is unknown, defaulting to 1000
[  159.739007][T10807] sctp: [Deprecated]: syz.0.1370 (pid 10807) Use of int in maxseg socket option.
[  159.739007][T10807] Use struct sctp_assoc_value instead
[  159.901384][T10805] __nla_validate_parse: 20 callbacks suppressed
[  159.901394][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'.
[  159.907657][T10805] tc_dump_action: action bad kind
[  159.985924][T10816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'.
[  160.031749][T10820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1374'.
[  160.039874][T10820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.043313][T10820] syzkaller0: entered promiscuous mode
[  160.045819][T10820] syzkaller0: entered allmulticast mode
[  160.085659][T10820] tipc: Resetting bearer <eth:syzkaller0>
[  160.098723][T10820] tipc: Disabling bearer <eth:syzkaller0>
[  160.217493][   T57] block nbd1: Receive control failed (result -32)
[  160.319024][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  160.726883][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'.
[  160.730896][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'.
[  160.730921][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'.
[  160.739002][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'.
[  160.794276][T10896] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1395'.
[  160.855326][T10898] IPVS: Scheduler module ip_vs_ not found
[  160.921878][T10909] : renamed from bond_slave_0
[  160.954141][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  161.028780][T10916] IPVS: length: 24 != 55320
[  161.042951][T10924] tipc: Resetting bearer <eth:macvtap0>
[  161.045199][T10924] tipc: Resetting bearer <eth:macvtap0>
[  161.069704][   T40] tipc: Resetting bearer <eth:macvtap0>
[  161.249963][T10941] C speed is unknown, defaulting to 1000
[  161.253406][T10941] lo speed is unknown, defaulting to 1000
[  161.331059][T10941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'.
[  161.501927][T10961] tap0: tun_chr_ioctl cmd 1074025677
[  161.508690][T10961] tap0: linktype set to 0
[  161.757911][T10969] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  161.767231][T10969] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  161.971218][T10991] C speed is unknown, defaulting to 1000
[  161.976721][T10991] lo speed is unknown, defaulting to 1000
[  162.141261][T10998] validate_nla: 9 callbacks suppressed
[  162.141274][T10998] netlink: 'syz.0.1418': attribute type 15 has an invalid length.
[  162.335538][T11003] 8021q: adding VLAN 0 to HW filter on device bond7
[  162.346019][T11003] macsec2: entered promiscuous mode
[  162.348316][T11003] bond7: entered promiscuous mode
[  162.350559][T11003] macsec2: entered allmulticast mode
[  162.354548][T11003] bond7: entered allmulticast mode
[  162.358332][T11003] bond7: left allmulticast mode
[  162.360543][T11003] bond7: left promiscuous mode
[  162.440177][T11009] netlink: zone id is out of range
[  162.441908][T11009] netlink: get zone limit has 8 unknown bytes
[  162.510738][T11011] netlink: 'syz.2.1421': attribute type 1 has an invalid length.
[  162.539881][T11016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.551291][T11011] 8021q: adding VLAN 0 to HW filter on device bond8
[  162.634293][T11023] C speed is unknown, defaulting to 1000
[  162.639495][T11023] lo speed is unknown, defaulting to 1000
[  163.010681][   T33] audit: type=1800 audit(1756902335.556:3): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1438" name="memory.events" dev="tmpfs" ino=2599 res=0 errno=0
[  163.056992][T11069] netlink: 'syz.0.1439': attribute type 1 has an invalid length.
[  163.059757][T11069] NCSI netlink: No device for ifindex 0
[  163.076261][T11070] netlink: 'syz.1.1440': attribute type 3 has an invalid length.
[  163.186990][T11080] openvswitch: netlink: Unknown key attributes 2
[  163.410099][T11105] netlink: 'syz.1.1450': attribute type 33 has an invalid length.
[  163.681065][T11137] syzkaller1: entered promiscuous mode
[  163.684753][T11137] syzkaller1: entered allmulticast mode
[  164.004282][T11148] team0: Device sit2 failed to enter team mode
[  164.007219][T11148] team0: Device sit2 failed to enter team mode
[  164.139831][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.352368][T11172] netlink: 'syz.0.1469': attribute type 1 has an invalid length.
[  164.690191][T11187] unsupported nlmsg_type 40
[  164.800247][T11194] netlink: 'syz.0.1475': attribute type 18 has an invalid length.
[  164.929369][T11199] C speed is unknown, defaulting to 1000
[  164.942649][T11199] lo speed is unknown, defaulting to 1000
[  164.973734][T11201] netlink: 'syz.0.1477': attribute type 4 has an invalid length.
[  164.976675][T11201] __nla_validate_parse: 24 callbacks suppressed
[  164.976685][T11201] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1477'.
[  165.051764][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'.
[  165.072898][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'.
[  165.162682][T11210] netlink: 'syz.2.1480': attribute type 9 has an invalid length.
[  165.176481][T11212] netlink: zone id is out of range
[  165.192638][T11212] netlink: zone id is out of range
[  165.195044][T11212] netlink: zone id is out of range
[  165.199156][T11212] netlink: zone id is out of range
[  165.201441][T11212] netlink: zone id is out of range
[  165.203907][T11212] netlink: zone id is out of range
[  165.212289][T11212] netlink: zone id is out of range
[  165.215519][T11212] netlink: zone id is out of range
[  165.285763][T11212] netlink: 'syz.0.1481': attribute type 25 has an invalid length.
[  165.407511][T11218] C speed is unknown, defaulting to 1000
[  165.410758][T11218] lo speed is unknown, defaulting to 1000
[  165.639893][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1485'.
[  165.727130][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'.
[  165.733830][T11236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'.
[  165.740239][T11232] C speed is unknown, defaulting to 1000
[  165.747126][T11232] lo speed is unknown, defaulting to 1000
[  165.865505][T11244] syzkaller0: entered promiscuous mode
[  165.867584][T11244] syzkaller0: entered allmulticast mode
[  166.775576][T11248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.778527][T11249] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  166.781303][T11249] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  166.794984][T11257] tipc: Resetting bearer <eth:syzkaller0>
[  166.949270][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'.
[  167.011500][T11280] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  167.021189][T11285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1498'.
[  167.275365][T11316] validate_nla: 1 callbacks suppressed
[  167.275374][T11316] netlink: 'syz.1.1508': attribute type 1 has an invalid length.
[  167.280129][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'.
[  167.315269][T11316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1508'.
[  167.357994][T11316] vlan0: entered allmulticast mode
[  167.360287][T11316] bond9: entered allmulticast mode
[  167.437536][T11330] netlink: 'syz.2.1511': attribute type 17 has an invalid length.
[  167.684483][T11330] tipc: Resetting bearer <eth:macvtap0>
[  167.769891][ T8257] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.782247][ T8257] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.786230][ T8257] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.791767][ T8257] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.816036][ T8257] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.820027][ T8257] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.832381][ T8257] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.837521][ T8257] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.178267][T11366] C speed is unknown, defaulting to 1000
[  168.209623][T11372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.220863][T11372] syzkaller0: entered promiscuous mode
[  168.225210][T11372] syzkaller0: entered allmulticast mode
[  168.260360][T11372] tipc: Resetting bearer <eth:syzkaller0>
[  168.265455][T11371] tipc: Resetting bearer <eth:syzkaller0>
[  168.274731][T11371] tipc: Disabling bearer <eth:syzkaller0>
[  168.400271][T11376] tipc: Resetting bearer <eth:macvtap0>
[  168.627621][T11394] wireguard0: entered promiscuous mode
[  168.629482][T11394] wireguard0: entered allmulticast mode
[  168.758521][T11412] C speed is unknown, defaulting to 1000
[  169.828522][T11468] netlink: 'syz.2.1549': attribute type 1 has an invalid length.
[  169.845891][T11468] 8021q: adding VLAN 0 to HW filter on device bond9
[  169.851187][T11468] bond9: (slave wlan0): Opening slave failed
[  169.861024][T11468] vlan4: entered allmulticast mode
[  169.864196][T11468] veth1: entered allmulticast mode
[  169.866647][T11468] bond9: (slave vlan4): Opening slave failed
[  169.997033][T11486] __nla_validate_parse: 12 callbacks suppressed
[  169.997048][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1554'.
[  170.014252][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'.
[  170.042402][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1554'.
[  170.236610][T11506] "syz.1.1559" (11506) uses obsolete ecb(arc4) skcipher
[  170.276703][T11514] net_ratelimit: 31 callbacks suppressed
[  170.276717][T11514] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  170.335233][T11506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.339730][T11506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  170.373704][T11506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.378162][T11506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  170.435011][T11506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.438281][T11506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  170.513765][T11506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.517313][T11506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  170.535528][T11530] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  170.539493][T11530] syzkaller0: entered promiscuous mode
[  170.541440][T11530] syzkaller0: entered allmulticast mode
[  170.591895][ T9503] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  170.599127][ T9503] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  170.615935][ T9503] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  170.618796][ T9503] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  170.636331][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  170.639172][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  170.649260][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  170.659640][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  170.869030][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'.
[  170.891611][T11569] sctp: [Deprecated]: syz.2.1575 (pid 11569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.891611][T11569] Use struct sctp_sack_info instead
[  170.901929][T11569] sctp: [Deprecated]: syz.2.1575 (pid 11569) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.901929][T11569] Use struct sctp_sack_info instead
[  171.136823][T11594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'.
[  171.221915][T11599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1586'.
[  171.787629][T11631] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1597'.
[  171.834602][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1599'.
[  171.918446][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'.
[  171.959666][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1603'.
[  172.089681][T11653] C speed is unknown, defaulting to 1000
[  172.187661][T11658] syzkaller1: entered promiscuous mode
[  172.190111][T11658] syzkaller1: entered allmulticast mode
[  172.224646][   T25] block nbd0: Possible stuck request ffff8880227a8000: control (read@0,4096B). Runtime 90 seconds
[  172.366367][T11669] sock: sock_set_timeout: `syz.2.1611' (pid 11669) tries to set negative timeout
[  172.488039][T11681] netlink: 'syz.0.1615': attribute type 9 has an invalid length.
[  172.805667][T11714] ieee802154 phy1 wpan1: encryption failed: -126
[  173.137118][T11734] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  174.016838][T11774] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  174.129931][T11783] netlink: 'syz.1.1648': attribute type 5 has an invalid length.
[  174.266505][T11795] netlink: 'syz.1.1650': attribute type 4 has an invalid length.
[  174.295654][T11797] caif0: left promiscuous mode
[  174.306523][T11797] caif0: left allmulticast mode
[  174.311926][T11797] wg1: left promiscuous mode
[  174.318384][T11797] wg1: left allmulticast mode
[  174.326087][T11797] tipc: Resetting bearer <eth:macvtap0>
[  174.336071][T11797] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  174.340750][T11797] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  174.346491][T11797] gretap1: left promiscuous mode
[  174.349119][T11797] vlan2: left allmulticast mode
[  174.354597][T11797] bridge0: left allmulticast mode
[  174.356838][T11797] erspan1: left promiscuous mode
[  174.359417][T11797] bond0: left allmulticast mode
[  174.368801][T11797] bond3: left promiscuous mode
[  174.380413][T11797] wireguard0: left promiscuous mode
[  174.383152][T11797] wireguard0: left allmulticast mode
[  174.390849][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.402254][ T8257] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.411262][ T8257] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.411605][T11800] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  174.415313][ T8257] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.421354][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.459681][T11810] netlink: 'syz.1.1655': attribute type 1 has an invalid length.
[  174.515995][T11820] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  174.516547][T11810] bond10: (slave veth9): Enslaving as an active interface with a down link
[  174.841082][T11852] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  175.021737][T11872] __nla_validate_parse: 25 callbacks suppressed
[  175.021745][T11872] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1673'.
[  175.030018][T11873] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1673'.
[  175.206005][T11887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1676'.
[  175.232119][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  175.496496][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  175.500285][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  175.700811][T11905] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  175.739043][T11907] 8021q: adding VLAN 0 to HW filter on device bond10
[  175.754891][T11910] tc_dump_action: action bad kind
[  175.783984][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'.
[  175.845876][T11921] netlink: 'syz.0.1686': attribute type 5 has an invalid length.
[  175.904379][T11928] netlink: 'syz.2.1688': attribute type 1 has an invalid length.
[  176.045976][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'.
[  176.050367][T11938] chnl_net:caif_netlink_parms(): no params data found
[  176.140809][T11947] netlink: 'syz.2.1694': attribute type 1 has an invalid length.
[  176.245260][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'.
[  176.378053][T11966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.478438][T11972] bond0: option mode: unable to set because the bond device is up
[  176.638758][T11977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1702'.
[  177.358194][ T9503] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.363347][ T9503] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.367777][ T9503] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.371365][ T9503] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.553164][T12039] IPVS: Unknown mcast interface: veth1_to_bridge
[  177.683456][T12050] : renamed from vlan1 (while UP)
[  177.690772][T12052] netlink: 'syz.0.1727': attribute type 10 has an invalid length.
[  177.696129][T12052] tipc: Resetting bearer <eth:team0>
[  177.703018][T12052] 8021q: adding VLAN 0 to HW filter on device team0
[  177.707438][T12052] bond0: (slave team0): Enslaving as an active interface with a down link
[  177.871324][T12069] netlink: 'syz.2.1734': attribute type 3 has an invalid length.
[  177.919501][T12085] netlink: 'syz.1.1737': attribute type 9 has an invalid length.
[  178.026564][T12095] tipc: New replicast peer: 255.255.255.255
[  178.030149][T12095] tipc: Enabled bearer <udp:syz2>, priority 10
[  179.096395][T12129] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  179.173681][T12127] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  179.176488][T12127] netlink: 'syz.0.1752': attribute type 2 has an invalid length.
[  179.246733][T12145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.324694][T12141] tc_dump_action: action bad kind
[  179.697002][T12160] netlink: 'syz.2.1761': attribute type 21 has an invalid length.
[  179.705771][T12160] ipvlan0: entered promiscuous mode
[  179.709298][T12160] bridge0: port 1(ipvlan0) entered blocking state
[  179.712219][T12160] bridge0: port 1(ipvlan0) entered disabled state
[  179.716513][T12160] ipvlan0: entered allmulticast mode
[  179.718673][T12160] erspan0: entered allmulticast mode
[  179.724133][T12160] ipvlan0: left allmulticast mode
[  179.726231][T12160] erspan0: left allmulticast mode
[  180.054986][T12203] __nla_validate_parse: 15 callbacks suppressed
[  180.054997][T12203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'.
[  180.229957][T12203] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1772'.
[  180.266669][T12212] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  180.270182][T12212] netlink: 'syz.0.1774': attribute type 29 has an invalid length.
[  180.400748][T12221] netlink: 'syz.0.1778': attribute type 2 has an invalid length.
[  180.406905][T12221] netlink: 'syz.0.1778': attribute type 1 has an invalid length.
[  180.497003][T12228] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1780'.
[  180.556495][T12235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1780'.
[  180.664795][T12244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1785'.
[  180.705714][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  180.767933][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.779513][T12250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1787'.
[  180.820887][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'.
[  180.910994][T12263] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  180.917882][T12263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.959746][T12265] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1792'.
[  181.003520][T12267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.006879][T12267] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  181.040888][T12272] delete_channel: no stack
[  181.047770][T12272] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1794'.
[  181.114430][T12277] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1796'.
[  182.453660][T12297] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  182.456854][T12297] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  182.786631][T12342] validate_nla: 5 callbacks suppressed
[  182.786643][T12342] netlink: 'syz.2.1818': attribute type 3 has an invalid length.
[  182.892697][T12350] : entered promiscuous mode
[  182.894698][T12354] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  182.909095][T12349] delete_channel: no stack
[  182.909122][T12354] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  183.021530][T12371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.028793][T12369] tipc: Disabling bearer <eth:syzkaller0>
[  183.096158][T12380] atomic_op ffff88811982f198 conn xmit_atomic 0000000000000000
[  183.207614][T12391] netlink: 'syz.2.1833': attribute type 7 has an invalid length.
[  183.279073][T12391] 8021q: adding VLAN 0 to HW filter on device bond11
[  183.283833][T12391] bridge5: port 1(bond11) entered blocking state
[  183.286961][T12391] bridge5: port 1(bond11) entered disabled state
[  183.290648][T12391] bond11: entered allmulticast mode
[  183.303758][T12391] bridge5: port 1(bond11) entered blocking state
[  183.306549][T12391] bridge5: port 1(bond11) entered forwarding state
[  183.324118][T12397] 8021q: VLANs not supported on caif0
[  183.518195][   T40] bridge5: port 1(bond11) entered disabled state
[  183.665604][T12432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.669042][T12432] syzkaller0: entered promiscuous mode
[  183.671439][T12432] syzkaller0: entered allmulticast mode
[  183.688590][T12432] 8021q: VLANs not supported on syzkaller1
[  183.710050][T12435] netlink: 'syz.2.1841': attribute type 1 has an invalid length.
[  183.738620][T12435] gretap3: entered allmulticast mode
[  183.746378][T12435] bond12: (slave gretap3): making interface the new active one
[  183.749762][T12435] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  183.753906][T12431] tipc: Resetting bearer <eth:syzkaller0>
[  183.763678][T12431] tipc: Disabling bearer <eth:syzkaller0>
[  183.924214][T12449] xt_HMARK: spi-set and port-set can't be combined
[  183.930592][T12452] openvswitch: netlink: Missing key (keys=40, expected=80)
[  183.969810][T12457] C speed is unknown, defaulting to 1000
[  184.114621][T12465] C speed is unknown, defaulting to 1000
[  184.448762][T12482] C speed is unknown, defaulting to 1000
[  185.840341][T12539] __nla_validate_parse: 31 callbacks suppressed
[  185.840350][T12539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1870'.
[  185.847719][T12539] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.851137][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'.
[  185.900108][T12539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1870'.
[  186.254908][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'.
[  186.320177][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1873'.
[  186.323950][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'.
[  186.558081][T12568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1877'.
[  187.074871][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  187.084476][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  187.094062][T12607] hsr_slave_0: left promiscuous mode
[  187.111492][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1891'.
[  187.117892][T12609] pim6reg1: entered promiscuous mode
[  187.120040][T12609] pim6reg1: entered allmulticast mode
[  187.534493][T12636] netlink: 'syz.0.1899': attribute type 29 has an invalid length.
[  187.538905][T12636] netlink: 'syz.0.1899': attribute type 29 has an invalid length.
[  187.583259][T12638] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.594815][T12639] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  187.600941][T12639] bond3: (slave macvlan4): Enslaving as a backup interface with a down link
[  187.608037][T12640] bond0: (slave team0): Releasing backup interface
[  187.611645][T12640] tipc: Resetting bearer <eth:team0>
[  187.616625][T12640] tipc: Resetting bearer <eth:team0>
[  187.619979][T12640] bond8: (slave bridge3): Releasing active interface
[  187.626499][T12640] bond3: (slave macvlan4): Releasing backup interface
[  188.086376][T12663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.320066][T12680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.375566][T12681] netlink: 'syz.2.1913': attribute type 1 has an invalid length.
[  188.474393][T12683] netlink: 'syz.1.1915': attribute type 23 has an invalid length.
[  188.690890][T12690] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  188.695270][T12690] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  188.933034][T12698] macsec2: entered promiscuous mode
[  188.935073][T12698] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  188.937583][T12698] macsec2: entered allmulticast mode
[  188.939431][T12698] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  188.948606][T12698] macsec3: entered promiscuous mode
[  188.950468][T12698] macsec3: entered allmulticast mode
[  188.989752][T12700] netlink: 'syz.0.1922': attribute type 1 has an invalid length.
[  189.099712][T12704] syzkaller0: entered promiscuous mode
[  189.104296][T12704] syzkaller0: entered allmulticast mode
[  189.585141][T12722] netlink: 'syz.2.1930': attribute type 2 has an invalid length.
[  189.993772][T12768] C speed is unknown, defaulting to 1000
[  190.035040][T12771] netlink: 'syz.2.1943': attribute type 18 has an invalid length.
[  190.099267][T12767] delete_channel: no stack
[  190.169639][T12779] 8021q: VLANs not supported on gre0
[  190.239506][T12778] C speed is unknown, defaulting to 1000
[  190.283526][T12787] nbd: illegal input index 65508
[  191.128557][T12808] __nla_validate_parse: 17 callbacks suppressed
[  191.128567][T12808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'.
[  191.136956][T12808] netlink: 'syz.2.1953': attribute type 7 has an invalid length.
[  191.142070][T12808] netlink: 'syz.2.1953': attribute type 8 has an invalid length.
[  191.145092][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'.
[  191.149557][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1953'.
[  191.204011][T12811] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1955'.
[  191.244074][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'.
[  191.449057][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1959'.
[  192.123396][T12862] team0: Device gtp0 is up. Set it down before adding it as a team port
[  192.292813][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  192.296021][T12867] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1969'.
[  192.299180][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  192.308922][T12866] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1969'.
[  192.458045][T12884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.460876][T12884] syzkaller0: entered promiscuous mode
[  192.463944][T12884] syzkaller0: entered allmulticast mode
[  192.477460][T12884] tipc: Resetting bearer <eth:syzkaller0>
[  192.625087][T12872] tipc: Resetting bearer <eth:syzkaller0>
[  192.647626][T12872] tipc: Disabling bearer <eth:syzkaller0>
[  192.657592][T12896] ip6tnl3: entered promiscuous mode
[  192.662505][T12896] ip6tnl3: entered allmulticast mode
[  192.665789][T12896] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  192.808886][T12896] C speed is unknown, defaulting to 1000
[  192.978086][T12933] netlink: 'syz.0.1985': attribute type 12 has an invalid length.
[  193.073810][T12939] net veth1_virt_wifi : renamed from virt_wifi0
[  193.316670][T12945] netlink: 'syz.0.1988': attribute type 1 has an invalid length.
[  193.366900][T12955] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  193.833509][T12969] unsupported nla_type 52263
[  193.949424][T12975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.987305][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.093345][T12982] C speed is unknown, defaulting to 1000
[  194.470632][T13012] netlink: 'syz.1.2009': attribute type 10 has an invalid length.
[  194.481513][T13012] unknown channel width for channel at 909000KHz?
[  194.486257][T13012] unknown channel width for channel at 909000KHz?
[  194.845138][T13039] netlink: 'syz.0.2018': attribute type 12 has an invalid length.
[  194.856233][T13039] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20000
[  195.195318][T13064] netlink: 'syz.0.2025': attribute type 5 has an invalid length.
[  195.198474][T13064] netlink: 'syz.0.2025': attribute type 6 has an invalid length.
[  195.243868][T13072] team0: invalid flags given to default FDB implementation
[  195.247533][T13072] veth0: entered promiscuous mode
[  195.252813][T13072] veth0 (unregistering): left promiscuous mode
[  195.405397][T13085] vlan0: entered promiscuous mode
[  195.454216][T13090] openvswitch: netlink: Key type 29 is not supported
[  196.055976][T13113] netlink: 'syz.2.2042': attribute type 31 has an invalid length.
[  196.069002][T13112] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  196.215648][T13118] __nla_validate_parse: 33 callbacks suppressed
[  196.215658][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2043'.
[  196.430055][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2048'.
[  196.433470][T13136] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  196.436477][T13136] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (109)
[  196.556260][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'.
[  196.776515][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2057'.
[  196.804248][T13184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.814964][T13184] syzkaller0: entered promiscuous mode
[  196.818000][T13184] syzkaller0: entered allmulticast mode
[  196.845178][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  196.858396][T13192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'.
[  196.875557][T13190] tipc: Resetting bearer <eth:syzkaller0>
[  196.904753][T13190] tipc: Disabling bearer <eth:syzkaller0>
[  196.919234][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'.
[  196.926855][T13196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.931499][T13196] syzkaller0: entered promiscuous mode
[  196.935976][T13196] syzkaller0: entered allmulticast mode
[  196.965804][T13196] tipc: Resetting bearer <eth:syzkaller0>
[  196.970877][T13195] tipc: Resetting bearer <eth:syzkaller0>
[  196.988369][T13195] tipc: Disabling bearer <eth:syzkaller0>
[  197.046938][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  197.094388][T13209] bond10: (slave veth9): Releasing active interface
[  197.141482][T13209] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  197.151053][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'.
[  197.233915][T13222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2069'.
[  198.680577][T13292] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  198.686972][T13292] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  198.736365][T13292] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  198.740319][T13292] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  198.748891][T13287] netlink: 'syz.0.2089': attribute type 1 has an invalid length.
[  198.769759][T13292] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  198.775003][T13292] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  198.797223][T13299] netlink: 'syz.2.2091': attribute type 2 has an invalid length.
[  198.830787][T13292] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  198.835358][T13292] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  198.877862][T13312] netlink: 'syz.2.2096': attribute type 9 has an invalid length.
[  198.938325][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  198.941231][ T5853] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  198.951042][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  198.954336][T13317] netlink: 'syz.0.2098': attribute type 1 has an invalid length.
[  198.957039][ T5853] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  198.971751][T13322] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  198.995825][T13322] 8021q: adding VLAN 0 to HW filter on device bond13
[  199.016996][T13322] bond13: (slave gretap4): making interface the new active one
[  199.020747][T13322] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  199.023875][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  199.027512][ T5853] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  199.039899][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  199.042903][ T5853] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  199.150921][T13330] vlan3: entered promiscuous mode
[  199.154463][T13330] bond0: entered promiscuous mode
[  199.987915][T13354] netlink: 'syz.2.2110': attribute type 29 has an invalid length.
[  199.995506][T13354] netlink: 'syz.2.2110': attribute type 29 has an invalid length.
[  200.495730][T13409] netlink: 'syz.1.2125': attribute type 21 has an invalid length.
[  200.499090][T13409] netlink: 'syz.1.2125': attribute type 4 has an invalid length.
[  200.502730][T13409] netlink: 'syz.1.2125': attribute type 5 has an invalid length.
[  201.439897][T13416] erspan1: left promiscuous mode
[  201.443645][T13416] macsec1: left promiscuous mode
[  201.445281][T13416] macsec1: left allmulticast mode
[  201.451561][T13416] ip6gretap0: left allmulticast mode
[  201.462994][T13416] : left allmulticast mode
[  201.466947][T13416] geneve3: left promiscuous mode
[  201.470342][T13416] bond6: left promiscuous mode
[  201.474250][T13416] bond7: left promiscuous mode
[  201.476364][T13416] bond7: left allmulticast mode
[  201.478404][T13416] bridge7: left promiscuous mode
[  201.480085][T13416] bridge7: left allmulticast mode
[  201.533235][ T5853] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.536820][ T5853] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.546635][ T5853] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.550150][ T5853] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.564171][T13434] C speed is unknown, defaulting to 1000
[  201.566204][ T5853] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.573843][ T5853] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.587958][ T5853] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.591861][ T5853] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.608006][T13439] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  201.643828][T13439] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20001
[  201.729009][T13458] __nla_validate_parse: 17 callbacks suppressed
[  201.729018][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  201.742361][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'.
[  201.745675][T13456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2136'.
[  201.760764][T13452] tipc: Enabling of bearer <hb:caif0> rejected, media not registered
[  201.778903][T13451] tipc: Enabling of bearer <hb:caif0> rejected, media not registered
[  201.831212][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'.
[  202.307210][   T25] block nbd0: Possible stuck request ffff8880227a8000: control (read@0,4096B). Runtime 120 seconds
[  202.832688][T13496] C: entered allmulticast mode
[  202.836281][T13496] C: left allmulticast mode
[  202.850747][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2148'.
[  202.873478][T13503] netlink: 'syz.0.2149': attribute type 7 has an invalid length.
[  202.876052][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'.
[  202.951346][T13517] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  203.081410][ T8257] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x12
[  203.087744][T13528] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  203.098733][T13528] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2156'.
[  203.105865][   T33] audit: type=1804 audit(1756902375.656:4): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2156" name="/newroot/714/cgroup.controllers" dev="tmpfs" ino=3668 res=1 errno=0
[  203.115881][   T33] audit: type=1800 audit(1756902375.666:5): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2156" name="cgroup.controllers" dev="tmpfs" ino=3668 res=0 errno=0
[  203.185054][T13538] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2158'.
[  203.233075][T13544] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.2159'.
[  203.261227][T13545] netlink: 'syz.1.2157': attribute type 83 has an invalid length.
[  203.309424][T13545] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2157'.
[  203.313449][T13545] nbd: illegal input index -458780
[  203.333817][T13547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.337410][T13547] syzkaller0: entered promiscuous mode
[  203.339806][T13547] syzkaller0: entered allmulticast mode
[  203.357128][T13547] tipc: Resetting bearer <eth:syzkaller0>
[  203.360896][T13546] tipc: Resetting bearer <eth:syzkaller0>
[  203.370760][T13546] tipc: Disabling bearer <eth:syzkaller0>
[  203.457407][T13552] only policy match revision 0 supported
[  203.457428][T13552] unable to load match
[  203.566006][T13558] C speed is unknown, defaulting to 1000
[  203.746956][T13570] 8021q: adding VLAN 0 to HW filter on device bond10
[  203.780954][T13574] bridge_slave_0: entered promiscuous mode
[  203.787689][T13574] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  203.796638][T13576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.037377][T13599] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  204.379849][T13633] vlan3: entered promiscuous mode
[  204.622427][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  205.771804][T13702] "syz.2.2207" (13702) uses obsolete ecb(arc4) skcipher
[  205.838294][T13702] netlink: 'syz.2.2207': attribute type 1 has an invalid length.
[  205.969326][T13713] C speed is unknown, defaulting to 1000
[  206.269306][   T33] audit: type=1800 audit(1756902378.816:6): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2218" name="memory.events" dev="tmpfs" ino=3758 res=0 errno=0
[  206.287715][   T33] audit: type=1804 audit(1756902378.826:7): pid=13739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2218" name="/newroot/731/memory.events" dev="tmpfs" ino=3758 res=1 errno=0
[  206.389532][T13759] lo: entered allmulticast mode
[  206.402976][T13759] lo: left allmulticast mode
[  206.686438][T13785] C speed is unknown, defaulting to 1000
[  206.812618][T13795] __nla_validate_parse: 42 callbacks suppressed
[  206.812632][T13795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2231'.
[  206.820667][T13795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2231'.
[  206.992810][T13805] macvlan1: entered promiscuous mode
[  206.995058][T13805] ipvlan0: entered promiscuous mode
[  206.997550][T13805] ipvlan0: left promiscuous mode
[  206.999394][T13805] macvlan1: left promiscuous mode
[  207.247556][T13819] bond0: (slave rose0): Error: Device can not be enslaved while up
[  207.267046][T13822] bridge0: port 1(erspan0) entered blocking state
[  207.273568][T13822] bridge0: port 1(erspan0) entered disabled state
[  207.275883][T13822] erspan0: entered allmulticast mode
[  207.280781][T13822] erspan0: entered promiscuous mode
[  207.288053][T13822] erspan0: left allmulticast mode
[  207.289812][T13822] erspan0: left promiscuous mode
[  207.294087][T13822] bridge0: port 1(erspan0) entered disabled state
[  207.336406][T13829] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2240'.
[  207.575182][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'.
[  207.803185][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2253'.
[  207.810359][   T56] block nbd2: Receive control failed (result -107)
[  207.842891][T13869] nbd2: detected capacity change from 0 to 32
[  207.866103][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'.
[  208.041430][T13889] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2256'.
[  208.161530][T13900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2259'.
[  208.211201][T13900] netlink: 'syz.2.2259': attribute type 3 has an invalid length.
[  208.214960][T13900] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2259'.
[  208.253768][T13911] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2262'.
[  208.826810][T13973] netlink: 'syz.1.2275': attribute type 1 has an invalid length.
[  208.871941][T13985] openvswitch: netlink: Flow key attr not present in new flow.
[  208.957558][T13982] C speed is unknown, defaulting to 1000
[  210.055342][T14052] netlink: 'syz.2.2298': attribute type 1 has an invalid length.
[  210.056135][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.085093][T14052] 8021q: adding VLAN 0 to HW filter on device bond14
[  210.088627][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.108272][T14052] 8021q: adding VLAN 0 to HW filter on device bond14
[  210.111548][T14052] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address
[  210.119840][T14052] bond14: (slave vxcan5): Error -95 calling set_mac_address
[  210.130693][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.133550][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.136123][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.138744][T14050] netlink: 'syz.0.2297': attribute type 29 has an invalid length.
[  210.436842][T14066] ipvlan0: entered promiscuous mode
[  210.440421][T14066] bridge0: port 1(ipvlan0) entered blocking state
[  210.443612][T14066] bridge0: port 1(ipvlan0) entered disabled state
[  210.446398][T14066] ipvlan0: entered allmulticast mode
[  210.448572][T14066] gretap0: entered allmulticast mode
[  210.452670][T14066] ipvlan0: left allmulticast mode
[  210.454819][T14066] gretap0: left allmulticast mode
[  211.505095][T14146] syzkaller1: entered promiscuous mode
[  211.507591][T14146] syzkaller1: entered allmulticast mode
[  212.020252][T14158] tipc: Enabling of bearer <et:g> rejected, media not registered
[  212.099365][T14165] validate_nla: 39 callbacks suppressed
[  212.099383][T14165] netlink: 'syz.2.2326': attribute type 10 has an invalid length.
[  212.117392][T14165] __nla_validate_parse: 13 callbacks suppressed
[  212.117407][T14165] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2326'.
[  212.124706][T14165] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2326'.
[  212.175086][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'.
[  212.187384][T14167] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  212.301392][T14175] netlink: 'syz.2.2327': attribute type 3 has an invalid length.
[  212.304344][T14175] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  212.307123][T14175] netlink: 58935 bytes leftover after parsing attributes in process `syz.2.2327'.
[  212.310558][T14174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2329'.
[  212.647298][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'.
[  212.661769][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2336'.
[  212.765398][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2337'.
[  213.107498][T14240] netlink: 'syz.2.2345': attribute type 10 has an invalid length.
[  213.119823][T14240] team0: Port device 0! added
[  213.249909][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'.
[  213.454079][   T33] audit: type=1800 audit(1756902386.006:8): pid=14252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2351" name="memory.events" dev="tmpfs" ino=4039 res=0 errno=0
[  213.486720][T14252] C speed is unknown, defaulting to 1000
[  213.624757][T14257] netlink: 'syz.0.2352': attribute type 1 has an invalid length.
[  213.628249][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'.
[  214.212136][T14308] netlink: 'syz.2.2362': attribute type 15 has an invalid length.
[  214.304772][T14316] netlink: 'syz.2.2364': attribute type 3 has an invalid length.
[  214.687018][T14358] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  214.736427][T14364] tc_dump_action: action bad kind
[  214.776257][T14358] netlink: 'syz.1.2372': attribute type 10 has an invalid length.
[  214.778916][T14358] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  214.829417][ T8257] nci: nci_rx_work: unknown MT 0x1
[  214.876504][T14375] C speed is unknown, defaulting to 1000
[  215.603414][T14368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.761783][T14382] veth15: entered promiscuous mode
[  215.863432][T14387] syzkaller1: entered promiscuous mode
[  215.865926][T14387] syzkaller1: entered allmulticast mode
[  215.915693][T14386] wg1: entered promiscuous mode
[  215.918052][T14386] wg1: entered allmulticast mode
[  215.930463][T14391] netlink: 'syz.1.2380': attribute type 10 has an invalid length.
[  215.934419][T14391] veth0_vlan: entered allmulticast mode
[  215.940486][T14391] bridge0: port 1(veth0_vlan) entered blocking state
[  215.953626][T14391] bridge0: port 1(veth0_vlan) entered disabled state
[  215.959652][T14391] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  215.981854][T14393] netlink: 'syz.0.2381': attribute type 3 has an invalid length.
[  215.988879][T14393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.303787][T14422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.307046][T14422] syzkaller0: entered promiscuous mode
[  216.310429][T14422] syzkaller0: entered allmulticast mode
[  216.333070][T14422] tipc: Resetting bearer <eth:syzkaller0>
[  216.364135][T14421] tipc: Resetting bearer <eth:syzkaller0>
[  216.374611][T14421] tipc: Disabling bearer <eth:syzkaller0>
[  216.548127][T14430] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  216.599070][T14437] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  216.622535][    T9] page_pool_release_retry() stalled pool shutdown: id 36, 3329 inflight 60 sec
[  216.723858][T14449] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.599406][T14478] __nla_validate_parse: 52 callbacks suppressed
[  217.599419][T14478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2406'.
[  217.649179][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'.
[  217.654485][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'.
[  217.658929][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'.
[  217.665455][T14480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2407'.
[  217.665467][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'.
[  217.672897][T14481] veth0_to_bond: entered allmulticast mode
[  217.806049][T14492] validate_nla: 2 callbacks suppressed
[  217.806069][T14492] netlink: 'syz.0.2410': attribute type 1 has an invalid length.
[  217.834852][T14497] netlink: 'syz.2.2412': attribute type 1 has an invalid length.
[  217.849831][T14497] 8021q: adding VLAN 0 to HW filter on device bond16
[  217.872708][T14497] bond16: (slave ip6gretap2): making interface the new active one
[  217.876018][T14497] bond16: (slave ip6gretap2): Enslaving as an active interface with an up link
[  217.889791][T14497] veth9: entered promiscuous mode
[  218.104141][T14511] netlink: 'syz.0.2416': attribute type 10 has an invalid length.
[  218.106831][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2416'.
[  218.110627][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2419'.
[  218.116523][T14511] team0: Port device geneve0 added
[  218.120892][T14516] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2419'.
[  218.124667][ T8257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.128272][ T8257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.131453][ T8257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.136268][ T8257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.140915][T14511] netlink: 'syz.0.2416': attribute type 10 has an invalid length.
[  218.150362][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2416'.
[  218.155122][T14511] veth0_vlan: entered allmulticast mode
[  218.160374][T14511] bridge0: port 1(veth0_vlan) entered blocking state
[  218.165919][T14511] bridge0: port 1(veth0_vlan) entered disabled state
[  218.171156][T14511] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  218.202123][T14518] C speed is unknown, defaulting to 1000
[  219.076277][T14593] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.085419][T14593] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.137406][T14528] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  221.248950][T14659] netlink: 'syz.0.2465': attribute type 10 has an invalid length.
[  221.254314][T14659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.258543][T14659] batadv0: entered promiscuous mode
[  221.261393][T14659] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  221.269357][T14659] netlink: 'syz.0.2465': attribute type 10 has an invalid length.
[  221.273277][T14659] batadv0: entered allmulticast mode
[  221.286944][T14659] bond0: (slave batadv0): Releasing backup interface
[  221.294512][T14659] bridge0: port 1(batadv0) entered blocking state
[  221.297769][T14659] bridge0: port 1(batadv0) entered disabled state
[  221.331241][T14661] C speed is unknown, defaulting to 1000
[  221.438558][T14670] C speed is unknown, defaulting to 1000
[  221.634273][ T5853] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  221.638532][ T5853] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  221.666446][T14677] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  221.774465][T14684] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  222.166945][T14693] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  222.171391][T14693] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  222.176607][T14693] netlink: 'syz.2.2476': attribute type 1 has an invalid length.
[  222.208562][T14693] bond17: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  222.226915][T14693] veth11: entered promiscuous mode
[  222.231474][T14693] bond17: (slave veth11): Enslaving as a backup interface with a down link
[  222.240265][ T5853] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  222.241000][T14693] 8021q: adding VLAN 0 to HW filter on device bond17
[  222.355123][ T5853] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  222.590729][T14715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.594037][T14715] veth0_to_bridge: entered promiscuous mode
[  222.596395][T14715] veth0_to_bridge: entered allmulticast mode
[  222.725481][T14729] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  222.728766][T14729] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  222.855238][ T5853] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  222.856083][T14746] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  222.946912][T14754] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  223.156054][T14768] __nla_validate_parse: 17 callbacks suppressed
[  223.156063][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2500'.
[  223.272867][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2502'.
[  223.276368][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2502'.
[  223.304134][T14771] netlink: 'syz.2.2501': attribute type 2 has an invalid length.
[  223.364028][T14784] netlink: 'syz.2.2504': attribute type 1 has an invalid length.
[  223.641702][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2508'.
[  223.699931][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2509'.
[  223.704952][T14797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2509'.
[  223.916411][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'.
[  223.920590][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2513'.
[  224.227620][T14827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2517'.
[  224.333599][   T33] audit: type=1800 audit(1756902396.886:9): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2519" name="memory.events" dev="tmpfs" ino=4380 res=0 errno=0
[  224.346618][   T33] audit: type=1804 audit(1756902396.886:10): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2519" name="/newroot/854/memory.events" dev="tmpfs" ino=4380 res=1 errno=0
[  224.387962][T14843] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2522'.
[  225.115039][T14896] bond11: entered promiscuous mode
[  225.116771][T14896] bond11: entered allmulticast mode
[  225.118831][T14896] 8021q: adding VLAN 0 to HW filter on device bond11
[  225.129686][T14895] bond12: entered promiscuous mode
[  225.131413][T14895] bond12: entered allmulticast mode
[  225.133447][T14895] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.191607][T14907] nbd: couldn't find device at index 536870912
[  225.219941][T14909] netlink: 'syz.0.2538': attribute type 1 has an invalid length.
[  225.239899][T14909] bond13: (slave bridge8): making interface the new active one
[  225.243616][T14909] bond13: (slave bridge8): Enslaving as an active interface with an up link
[  225.279244][T14913] vlan0: left promiscuous mode
[  225.296770][T14913] macsec2: left promiscuous mode
[  225.298396][T14915] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  225.301727][T14913] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  225.306335][T14913] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  225.309967][T14913] macsec3: left promiscuous mode
[  225.325097][T14913] bond11: left promiscuous mode
[  225.330391][T14913] bond12: left promiscuous mode
[  225.334921][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.338454][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.338483][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.338498][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.360881][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.367538][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.370915][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  225.381060][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.614416][T14946] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  225.776732][T14956] policy can only be matched on NF_INET_PRE_ROUTING
[  225.776749][T14956] unable to load match
[  226.115361][T14979] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  226.117865][T14979] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  226.249984][T14991] netlink: 'syz.0.2563': attribute type 32 has an invalid length.
[  226.252822][T14991] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  227.102266][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  232.393763][   T25] block nbd0: Possible stuck request ffff8880227a8000: control (read@0,4096B). Runtime 150 seconds
[  235.592184][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  251.592244][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  252.638916][T14999] __nla_validate_parse: 17 callbacks suppressed
[  252.638934][T14999] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.2567'.
[  252.661751][T15013] tipc: MTU too low for tipc bearer
[  252.685129][T14999] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  252.931559][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'.
[  252.939250][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'.
[  253.118904][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2578'.
[  253.126483][T15038] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  253.207429][T15043] vlan0: entered promiscuous mode
[  253.215711][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2581'.
[  253.516315][T15072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2589'.
[  253.536537][T15072] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2589'.
[  253.666589][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2595'.
[  253.675323][T15085] macvlan1: entered promiscuous mode
[  253.678684][T15085] macvlan1: left promiscuous mode
[  254.805687][T15110] netlink: 'syz.2.2601': attribute type 10 has an invalid length.
[  254.808868][T15110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2601'.
[  254.813671][T15110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2601'.
[  254.819553][T15112] 8021q: adding VLAN 0 to HW filter on device bond1
[  254.909706][T15123] ip6tnl4: entered promiscuous mode
[  255.372417][T15159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.499459][T15171] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  255.573158][T15175] openvswitch: netlink: Flow key attr not present in new flow.
[  255.595818][T15175] vlan3: entered allmulticast mode
[  255.597639][T15175] bond15: entered allmulticast mode
[  255.696954][T15178] caif0: entered promiscuous mode
[  255.702988][T15178] batadv0: left promiscuous mode
[  255.705389][T15178] bridge0: port 1(batadv0) entered disabled state
[  255.713546][T15178] team0: Port device geneve0 removed
[  255.717731][T15178] bond13: (slave bridge8): Releasing active interface
[  256.094958][T15194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.881814][T15212] nftables ruleset with unbound set
[  256.899676][T15217] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  256.941410][T15217] netlink: 'syz.1.2632': attribute type 2 has an invalid length.
[  256.945525][T15217] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  258.212056][T15265] __nla_validate_parse: 6 callbacks suppressed
[  258.212070][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'.
[  258.258314][T15280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2649'.
[  258.294633][T15284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2651'.
[  258.298478][T15284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2651'.
[  258.397717][T15293] netlink: 'syz.0.2655': attribute type 1 has an invalid length.
[  258.465257][T15293] 8021q: adding VLAN 0 to HW filter on device bond17
[  258.475150][T15293] bond16: (slave bond17): making interface the new active one
[  258.482245][T15293] bond16: (slave bond17): Enslaving as an active interface with an up link
[  258.494013][   T33] audit: type=1804 audit(1756902431.046:11): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2651" name="/newroot/870/cgroup.controllers" dev="tmpfs" ino=4463 res=1 errno=0
[  258.494651][T15293] xt_policy: neither incoming nor outgoing policy selected
[  258.507907][   T33] audit: type=1800 audit(1756902431.046:12): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2651" name="cgroup.controllers" dev="tmpfs" ino=4463 res=0 errno=0
[  258.603363][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2655'.
[  258.764666][T15307] netlink: 'syz.2.2658': attribute type 2 has an invalid length.
[  258.768766][T15307] netlink: 'syz.2.2658': attribute type 1 has an invalid length.
[  258.790953][T15317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2660'.
[  258.803977][T15305] delete_channel: no stack
[  258.960991][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'.
[  259.137364][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'.
[  259.147554][T15336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.284272][T15352] BUG: unable to handle page fault for address: fffffffcbfc58a5b
[  259.287178][T15352] #PF: supervisor read access in kernel mode
[  259.289374][T15352] #PF: error_code(0x0000) - not-present page
[  259.292604][T15352] PGD df3b067 P4D df3b067 PUD 0 
[  259.294255][T15352] Oops: Oops: 0000 [#1] SMP KASAN PTI
[  259.295523][T15349] netlink: 'syz.1.2669': attribute type 24 has an invalid length.
[  259.296057][T15352] CPU: 1 UID: 0 PID: 15352 Comm: syz.0.2672 Not tainted syzkaller #0 PREEMPT(full) 
[  259.302463][T15352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.306566][T15352] RIP: 0010:__xfrm_state_lookup+0x319/0x8d0
[  259.308971][T15352] Code: 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 7c 03 00 00 <45> 0f b7 36 44 89 f7 44 89 ee e8 98 c0 9e f7 66 45 39 ee 0f 85 2f
[  259.316810][T15352] RSP: 0018:ffffc90007b67380 EFLAGS: 00010246
[  259.319383][T15352] RAX: 0000000000000000 RBX: fffffffcbfc58919 RCX: 0000000000080000
[  259.322554][T15352] RDX: ffffc90003b12000 RSI: 00000000000003ad RDI: 00000000000003ae
[  259.325706][T15352] RBP: ffffc90007b67478 R08: dffffc0000000000 R09: 0000000000000002
[  259.328798][T15352] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  259.332119][T15352] R13: 000000000000000a R14: fffffffcbfc58a5b R15: 0000000000000000
[  259.334709][T15352] FS:  00007fd7bc8d96c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  259.337601][T15352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.339767][T15352] CR2: fffffffcbfc58a5b CR3: 0000000113202000 CR4: 00000000000006f0
[  259.342569][T15352] Call Trace:
[  259.343690][T15352]  <TASK>
[  259.344688][T15352]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  259.346847][T15352]  xfrm_state_add+0x27d/0xc40
[  259.348843][T15352]  pfkey_add+0x1edd/0x2e00
[  259.350795][T15352]  ? __pfx_pfkey_add+0x10/0x10
[  259.352875][T15352]  ? kmem_cache_free+0x18f/0x400
[  259.355017][T15352]  pfkey_sendmsg+0xbfe/0x1090
[  259.357028][T15352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  259.358868][T15352]  ? aa_sock_msg_perm+0xf1/0x1d0
[  259.360673][T15352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  259.362814][T15352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  259.364516][T15352]  __sock_sendmsg+0x21c/0x270
[  259.366083][T15352]  ____sys_sendmsg+0x52d/0x830
[  259.367953][T15352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.370106][T15352]  ? import_iovec+0x74/0xa0
[  259.371975][T15352]  ___sys_sendmsg+0x21f/0x2a0
[  259.373654][T15352]  ? __pfx____sys_sendmsg+0x10/0x10
[  259.375376][T15352]  ? __fget_files+0x2a/0x420
[  259.377093][T15352]  ? __fget_files+0x3a0/0x420
[  259.378705][T15352]  __sys_sendmmsg+0x227/0x430
[  259.380232][T15352]  ? __pfx___sys_sendmmsg+0x10/0x10
[  259.382195][T15352]  ? do_futex+0x395/0x420
[  259.383987][T15352]  ? fdget+0x184/0x1e0
[  259.385469][T15352]  ? rcu_is_watching+0x15/0xb0
[  259.387100][T15352]  __x64_sys_sendmmsg+0xa0/0xc0
[  259.388869][T15352]  do_syscall_64+0xfa/0x3b0
[  259.390686][T15352]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.392424][T15352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.394777][T15352]  ? exc_page_fault+0x9f/0xf0
[  259.396426][T15352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.398842][T15352] RIP: 0033:0x7fd7bb98ebe9
[  259.400663][T15352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.406850][T15352] RSP: 002b:00007fd7bc8d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  259.409395][T15352] RAX: ffffffffffffffda RBX: 00007fd7bbbc5fa0 RCX: 00007fd7bb98ebe9
[  259.412659][T15352] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000008
[  259.415801][T15352] RBP: 00007fd7bba11e19 R08: 0000000000000000 R09: 0000000000000000
[  259.418811][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.421917][T15352] R13: 00007fd7bbbc6038 R14: 00007fd7bbbc5fa0 R15: 00007ffeb98a94e8
[  259.424946][T15352]  </TASK>
[  259.426218][T15352] Modules linked in:
[  259.427838][T15352] CR2: fffffffcbfc58a5b
[  259.429517][T15352] ---[ end trace 0000000000000000 ]---
[  259.431672][T15352] RIP: 0010:__xfrm_state_lookup+0x319/0x8d0
[  259.433694][T15352] Code: 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 7c 03 00 00 <45> 0f b7 36 44 89 f7 44 89 ee e8 98 c0 9e f7 66 45 39 ee 0f 85 2f
[  259.440705][T15352] RSP: 0018:ffffc90007b67380 EFLAGS: 00010246
[  259.442579][T15352] RAX: 0000000000000000 RBX: fffffffcbfc58919 RCX: 0000000000080000
[  259.445509][T15352] RDX: ffffc90003b12000 RSI: 00000000000003ad RDI: 00000000000003ae
[  259.448667][T15352] RBP: ffffc90007b67478 R08: dffffc0000000000 R09: 0000000000000002
[  259.451279][T15352] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  259.454277][T15352] R13: 000000000000000a R14: fffffffcbfc58a5b R15: 0000000000000000
[  259.457379][T15352] FS:  00007fd7bc8d96c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[  259.460517][T15352] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.462961][T15352] CR2: fffffffcbfc58a5b CR3: 0000000113202000 CR4: 00000000000006f0
[  259.466217][T15352] Kernel panic - not syncing: Fatal exception in interrupt
[  259.469846][T15352] Kernel Offset: disabled
[  259.471608][T15352] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:27:11  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81f68491 RBX=ffffea0000e09740 RCX=0000000000000000 RDX=ffff88803d13d640
RSI=0000000000000000 RDI=0000000000000002 RBP=ffffc90007ac7b00 RSP=ffffc90007ac79e8
R8 =ffffea0000e09747 R9 =1ffffd40001c12e8 R10=dffffc0000000000 R11=fffff940001c12e9
R12=1ffffd40001c12e9 R13=00fff7800000422d R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81f684ac RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555557ca8500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b9137 CR3=000000003e146000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa72a197498 00007fa72a197470 XMM03=00007fa72a1974a8 00007fa72a1974a0
XMM04=00007fa72acfd100 00007fa72a197460 XMM05=00007fa72a197478 00007fa72a1974c0
XMM06=00007fa72a1974b8 00007fa72a1974b0 XMM07=00007fa72a1974a8 00007fa72a1974a0
XMM08=0000000000000000 00007fa72a012ee7 XMM09=0000000000000000 00007fa72a012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f34 RDI=0000000000000f35 RBP=00000000000003f8 RSP=ffffc90007b669d0
R8 =ffff8881064a8237 R9 =1ffff11020c95046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018de R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd7bc8d96c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffcbfc58a5b CR3=0000000113202000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd7bbb97498 00007fd7bbb97470 XMM03=00007fd7bbb974a8 00007fd7bbb974a0
XMM04=00007fd7bc6fd100 00007fd7bbb97460 XMM05=00007fd7bbb97478 00007fd7bbb974c0
XMM06=00007fd7bbb974b8 00007fd7bbb974b0 XMM07=00007fd7bbb974a8 00007fd7bbb974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fd7bba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
