last executing test programs:

1.979631772s ago: executing program 0 (id=1784):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async, rerun: 64)
r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async, rerun: 64)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'rose0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x10000, 0x43, 0x7ff}) (async)
socket$netlink(0x10, 0x3, 0xf)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0)

1.880362086s ago: executing program 0 (id=1787):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}], 0x1, 0x4040005)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r1, 0x1ad72f7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0x82, 0x0, &(0x7f0000000440))
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000180060001"], 0x24}}, 0x0)
accept4(r1, 0x0, 0x0, 0x80000)
r8 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r8, &(0x7f00000001c0), 0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}]}}}]}, 0x48}}, 0x0)

990.290702ms ago: executing program 0 (id=1805):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="51f0abed9dbb193900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400140069703667726530000000000000000000"], 0x34}}, 0x4c090)

990.10061ms ago: executing program 1 (id=1806):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x0, 0x8000000}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

940.185986ms ago: executing program 1 (id=1808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x208441, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/194)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000280)=0x18, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x3, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_POLICE={0x4c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0x7ff, 0x3eb, 0x0, {0x7, 0x0, 0x22c6, 0x400, 0x6}, {0x3, 0x1, 0x1000, 0xa, 0x800, 0x80000000}, 0x65, 0x5, 0x8001}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x88}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r7, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0x0, 'ip_vti0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x73, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x6]}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r9)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x1000)

939.069709ms ago: executing program 0 (id=1809):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1a4, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x15e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xbc\xdb\x7f\x9a\xf2\xb7\xc5\xb7|\xca\x85\xfd\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3\x06\x00\x00\x00\xbf\\s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\xbb9\xb1\x83A\xffj\x83\xdb\x87\x80\"n\vc\x89\x8c\xb3il~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\x01\x04\xe8\xe3Xg3&\xe2 \xd6\n\x9d?~<\x93/\xaf\x89\x06+\x96]\xb5+\xf1\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8f\xaa$\xe4U\xc8W\xf4\x91\xe2~\xa3\xc2\"\xc4\xb7\x86\x7fx\xcb\x98z]\x83E2\xa8\xb5\xc4\xe8\x9d\xf5G%\xd7\x00\x159\x14,\xb20b\xdcN~\x02\xac{V\xf2\xe5\x03\xc4\xec\x7f\xae\xc21\xaeu`ZW\xc8\x8f\'\xedI\x1a\xcf\xe3\x04\xc6\xb1\xd6\xa4Ds\x10\x9a\x83\xe0\xd1\xc9\xbd\x19\xc9!,\xee;N~\xdcu\x96k\xa6\xf2\xda$\x91vG\xc4\xf5\xa8-Z8\xe0\x97w\xd7\x14\xd8:sQ\x8bTAx|\x9e\x94$\x92\xfd\x05\xc3\xe6-'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1a4}}, 0x4904)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="e33110495bfd93aaaaaaaa0086dd6000000000003a6cfe880000000000000000000000000001ff020000000000000000000000000001"], 0x0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '@$#!\x96!]\xe5)\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x24008000)

849.136074ms ago: executing program 1 (id=1811):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000840))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007211b8000095007400000400000000000000000000d50e00"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)

788.00273ms ago: executing program 1 (id=1813):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)

708.929602ms ago: executing program 1 (id=1815):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="74c41c1f4fd16738a221d4edefee67004fa69f8d2b8e5fea501d5644fc512d295a932b2af65fa7fbcda5ca44dbc244cb9d1a3380ff15a6b467ec5810ce13f021fcedabdbfa010a50a85fd67f8332802e79e0edcd1981c4a38bdb21531055f80d334d764a3b3d13", 0x67}, {&(0x7f0000000640)="10e8c590f816539cb23cbe26dbc90dba122d146198f96f8e5c2dae730d9d4c0225a4b295d7c8b728dce7732fa67be13f636907d2fc3afa5fbe285bfb3f8c569b4d78f7773aa93e08e70b634de31807ac42d7215e14c4b3814ed8e955246a595580b7e24c66a015ad32d3422fb8bc3111267b5840dcae9a0b4a88c3a7725b9d3dae232af2d3e867c688251cdd3e7ceeb2ce6ac9c9d7e636095f6fd742b1790677799de31372fe1f800ae493e7d9ace5859fb6b5d01b53262a79245b7ec5e62568ce45df5bb781fcdbc8314f", 0xcb}, {&(0x7f00000002c0)="15f27dfff5f4df8f984e455eb2bf7eae", 0x10}, {&(0x7f0000000300)="4ec90099f9543ea1fd9857a51da0b83b076324fa4f7fcebeda308eb0a889e0012eeeaf66c7abd3a1ec28d4d75977bafbc0b09bd3d0d2ded73d4c2508e0e917050ee50fdd129232f206978b9995e32caf899c20ae2e81e54fec210bff1e5e", 0x5e}], 0x4, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x400, 0x400, 0x8002, 0x4, 0x7a, 0x1, 0x6, 0xffffffc0}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x80, 0x24}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="4446ccbd9b89562f9f36810853ccaa462348cee49f16f339ef5126b56cc465b13c17e03171fd96507ac3bc8650c2d7556102ba767dd4519b6f98a7d2670dbd715df0cfff90473f75a62bf5ca2449f61e5bea688f7800c6", 0x57}], 0x1, &(0x7f0000000a00)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x2, 0x200, 0xbf90, 0x4, 0x5, 0x100, 0x1800}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7fffffff}}, @init={0x18, 0x84, 0x0, {0x1, 0xff, 0x1, 0x2}}], 0xe0, 0xc040}, {&(0x7f0000000b00)=@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000b40)="58f41fad60af64bb448c946c87cc37c438456cef834bcb3853ab19d1868ec856f1d8a9ab75cdde2b5bfb111e4b747042b7682e769d6994250458379dd59c23074daa87e0e6977c41f4cb6284ffbf30651096d1a16f742a90f1d4bacf8618a13ba644acbe7dfa30c10f57b56ccdf6ce49e4f61e8f386bfbae61fff7bd665ac6da80e1d33f15f89c4aadea9bedf166d2fc41f7e18435b770dd79f7f6156ada2dd8bb9409c23e31a61884f88b07f75c3ea1304504e871c31601e7e982933d032923fbb0b545a5a7dfc80590eb545473b0d5604d2f1481acf3", 0xd7}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="5bbe2df57e37e6f87348dfbd6d57ee5d8993554e1f381bdc4ecfda6a8272555beeef7f01862afb83a5e4e217b8c18fda60f23d5804339219c546b572d93d774f84a261925c1b3a07882717fa37f8381fded30f22ae743202a56d15ad634eddc89198b8119c07456ad758e64cbac5fb0387d83be87e1c8476371140fe7a1c255c5421331f8713a5f30be3c337c43cc88df775920aa6d4f4fef2a15bb7d97bfe63ec52b8b1746f1f551890f82d7dd8b8183c585e2650b2783e56f772cda2510cd7f7c5a94e33d2505077df44fe5029cf15", 0xd0}, {&(0x7f0000000d80)="e05d504ab7f8ddd9d3a147b3166610a70f16f48ee2f136669add", 0x1a}, {&(0x7f0000000dc0)="2b5b3620e14ef4e630a42e9022ae7450136882ae0399cf804f40db7da86f8fb3a37fc79d22d93cdc885c1fbb96e3cedd1399cc5a1932dcf1a2370c0a274867adc017630572b1bc5113876c990c007c2cfef7bcdbbcc879b2c601ff653e33a2db805a62e085ea4a5d9f45e6af21bc5a06a10a5b85a72841cd7f50648d0a193cb4be607fa851dc43990c34722b46599987f05e3130072c7c33dbf255cd92e7a4f1931959788b7697f1be43366f5195c356564d676ab3524ac2dd", 0xb9}, {&(0x7f0000000e80)="c8f7c772d32e0a20e0ea0d88ea3d9551641bad543c44a609ad30980fbb98eb3e2f2751cc075cd64020d542c57b08d018b91fafe8b7e38e5e8c1ced45e8b9ec30890e14aae5aff49e2da52dfadd9f9766899b0b637f06", 0x56}, {&(0x7f0000000f00)="2163ec827a52192b0f9fda2210a97a8f88ce87f12dbad373beda69e07c3b5ca6e5186d82a0e118469ddb2a1cb5ca115e01a39f08a31ff68cbb856ad7e31314bbb8576330db8dfc846155efdcd3580a0bd14926a62ba8964db704fd99ae4fe0176be3bea57f025306101ae499f7597abec304909d5abbe6ff5f752aa43e6206d34d5fe97dee4c2aecd533f9792eb635639a46417990652f0a09362994f4acb693c57e2019d53d6e678ab5a22a667015dfe654ef2ff3cb60a5a5c0580a8c40a6272555e4e0d0894f16601e342d772d242531a6cf21fb96665a5483a6ed3a7b5d54c6c84da83e40955581ada65d49ee3533811ae0e6", 0xf4}, {&(0x7f0000001000)="ac877100fd9d61690d4cfa468ad6cd153e41b347bbde2c2bcb6c5fbae3f548f56a38e796a0cc5edd4ce0d84566352b0afc43d48351fa5c98cdf19d114a5c74825ffab4423ac3c4e006ece494d56e35fc9b9574b1c50e04f463af9f87085f6bafaaf9b168585e825ba3db51996781a85106dc6aa77d614b72ba53486b1ac53a9837d4ee2d7d665172ad9ab5a7c8a964e22f670d35420743d5b88f9e7370e988592a680131f1360a72fedd4d0d4379f6a363ace4b683f6d532a1de231e65ff845f2ac19056ac", 0xc5}], 0x8, &(0x7f0000001180)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x8, 0x8204, 0xa0000, 0x80000000, 0x3ff800, 0x2, 0x7fff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7594}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x60}, {&(0x7f0000001200)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001240)="1cbb05eff3760d7fb38ea5544e374ee529ac2b8b67e059e8b4ba3685cb368dfd9174a499f12f61f28634e7c2346dd5bf98a6f8f4b7a126f816c69b22015a7897bf4ad4d47802d811e4716243c621551b0fe1464b23b9bdf158d3c1cb0cfbdd813612ff0ae24777af74503abd4be79ff19db4d1e519551cfe", 0x78}, {&(0x7f00000012c0)="cf4ffde50dba7f58de05494016444804f338eb0f435b67aa7e64d3d7ec9d849dc99d68538b7044a5294d0500a9dc43b1512ffb7b7f36ef0bfebd1c9107dfe2543c51657ce8a5dca9613e49930bcf97e3df1227a6d3328328da0c6cfd47cd520bd05ccf4d151be0ba026a64da9388dc6e73eacb433ede7ecc05d170ade567a9feb5b50e6f3e924f21c367b9860c0b02339d16e9358ecd9f61f22a6fd361457cdc4d928ecca366d75389d555158d6acf9b1dc93cfc39850374a13753986e3f817b7198018314004bedb4d2e3ccf16575817f174a50e3d0a6e174a1d7e025f1bcb7c878f22b525ee36498467f518be3f6e50b2780", 0xf3}, {&(0x7f00000013c0)="eb553acea7287e9c59e5102c80e43a87126697f31d4a7fad2d96fc2ebbad90066ce8b13d87a5e4f195e16b75e13c1620c60e28e0b0469240e6f0b88fd7018b605e72238f9f78ad4491ea79fa94deaae643254d0600f149977d56c525d9bfa651a70d9b9848bc92e81ca4275809cb0a801739acd1e19e9e26f17071", 0x7b}, {&(0x7f0000001440)="78d7ac376688557d19b53cb0ae076aa1be2038fd869006023051260b1708b1de18ef7a5eb4220eeed8ae7084f614de", 0x2f}], 0x4, 0x0, 0x0, 0x10}, {&(0x7f00000014c0)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001500)="006275baad8049a4a8f595ec891466ff91c033b400963b7a15b9bd2855e190d44e4bc26c9fd595d4eaae5693b4961005ffc7d755fe896fcb78a06806451a7cb042b47e0fb0208546693099afb3831b1a7e01407ce180061d391a166046494f9857a7526cdada4061b31698895553d8a88ccafc4cf7661132e19ea29e6501b2fcb36c58379e5f69546b074eedfe7e4f35619a867c5eb8283fa322ff", 0x9b}], 0x1, &(0x7f0000001700)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @init={0x18, 0x84, 0x0, {0x3, 0x522e}}, @init={0x18, 0x84, 0x0, {0xfff, 0xfd, 0xb1, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7328ae87}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x0, 0x7, 0x9, 0x3, 0x8000, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x1c, 0xf}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x2, 0x4, 0x1, 0x449, 0xfffffffc, 0x564}}, @init={0x18, 0x84, 0x0, {0x4, 0x7, 0xfffa, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x120}, {&(0x7f0000001840)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0x7}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001880)="7f0d2d9ac821c11760bfdffb6522a747ffc66bab60897e4d6905235e247929a4a6b4c99ad52d8f3f83783e881bfe340fd8fb778881623d0d1603be4fe37a57575cfbef9f044337560845d5a69ca4f213a524e39cea007d5c19a1731bfb68f49b5e7a6cf2e17b23d7fcd9729f40c690d56c3c4018b48f0630de07948eb39d60478d41b62bfd04e179a97a3f9a157b9477a225b22bec31bb70c80e11daf7de37cec85e910b60df8fc2a659718c1c4431a6623bd60dad87c537a61d8ada27d0a076a8d5f8f624f02b650693550eaac8dea155a74c46a0db1cc967e91b7762df32fadfe76352c83e4f601d8be502ce9547df2bfd0ab11dca", 0xf6}, {&(0x7f0000001980)="a0cff373ad812752665d83b00d6fb4394ff60b6b512e4c43d8e12ce0e5bb6d8de9200997b9c478cf6087a97b9ca5ae7d9c2a89ee7d4050f7355f9035bb6011f19d525feff1dd42741a72f90450a2ce209ba8bbe950c93435d4c8cd0162bedf40583655824024521b58e61c29be52a61c78bc664dc9c8cbab1caf567e38a058d5a83efd254ac78072ee41afb3b6e7df6f1a4d9240a378b89db05e2acbcb9b9ed5b3", 0xa1}, {&(0x7f0000001a40)="8ef2801bd70cc4f376bfb7018068ff7744958dd52bb340331581411eccd53b6d3dc87e1140c5548abdf664d19a524afd0d298eb5268878909da487ef795cfebfb992e64d72bdb6d00606dec90b1bb77d174eb73f57aaf63d2efc6353393cd6424603453ae357f8f6db556aa898fa503a9f1b7d79", 0x74}, {&(0x7f0000001ac0)="d86980b879b5309e2023837914adcad941025d09616794464d307b33ab", 0x1d}], 0x4, 0x0, 0x0, 0x804}], 0x6, 0x40000)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
select(0x20, 0x0, 0x0, 0x0, &(0x7f0000000200))

708.699827ms ago: executing program 2 (id=1816):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc, 0x0, 0x8000000}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)

660.8081ms ago: executing program 1 (id=1817):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

660.366128ms ago: executing program 2 (id=1818):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'ovf\x00', 0x1, 0x5, 0x49}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_80211_join_ibss(&(0x7f0000000300)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="800000005fa13833000508020940f845000c4908021100"], 0x36)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, '\x00', 0x74, 0x6})
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0xfffffffffffffcd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES64], 0xe8}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c6dc13440007d37cc65c132b1007b5ef7b21ec1fadaeea72aa373443bc113b3367009a8187dfc763455b25458997a1fa", @ANYRES16=r6, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004040}, 0x4000080)
sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="6798e41316d915da719dd2fc7555ee4b7e2ae08f3ac70a79855b1607d3fc26e221c4c6e833db97ce58386cc9dec11810b94133ae92a3a19fcf6dbec3fad03c3438ef97f552b7f6731205b9fee0f69622c249db51a18a1b766cff614dd53af817e7e7d9d5118a44eaee3daebe1f1b58d0dc9de0c6c821e75b55b7a94234d12da06f2e329f9b041404708cdb68ce5e5c336d"], 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x60000000)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100))
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)

91.012813ms ago: executing program 2 (id=1819):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x53}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendto$packet(r0, &(0x7f0000000000)="665ba6c864baea1eeaacc6386c8019b101a74964318981902b4e8daf0baab2129793c99e6f2ff1e9f6358598e93fd16fd7cef5f85bab3921764adddfa9a7f94dee674cd666cd5a33255936002eb764a3fe9cc607d31f9ba671bc72d556b688dde546b53c1cf39fb67147282984c076b74a92729b80e7aba403c76edbeecc920675374e850ca7b4be4941", 0x8a, 0x4000800, &(0x7f0000000140)={0x11, 0x16, r1, 0x1, 0x88, 0x6, @random="05df5d024b1d"}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

90.526557ms ago: executing program 2 (id=1820):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@loopback, <r2=>0x0}, &(0x7f0000000140)=0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r3=>r0, 0x9, 0x6, 0x800000000000000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r6)
getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, r8, 0x500}, 0x38)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x5, 0x8000, 0x3639, 0x420, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000080)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x0, 0x3, 0x5, 0x0, 0x4}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x20, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000280)=[r8, r9], &(0x7f00000003c0)=[{0x2, 0x1, 0x5, 0x4}, {0x1, 0x2, 0x9, 0x8}, {0x3, 0x5, 0xa, 0x8}, {0x0, 0x1, 0x5, 0x5}, {0x3, 0x5, 0xb, 0x5}, {0x1, 0x1, 0x4, 0x4}, {0x1, 0x4, 0x8, 0xb}, {0x0, 0x1, 0xa, 0xc}, {0x2, 0x2, 0xc}], 0x10, 0x7}, 0x94)

11.242496ms ago: executing program 0 (id=1821):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)

7.696409ms ago: executing program 2 (id=1822):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4800)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x500)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x1a, 0x0, &(0x7f0000000000)) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7.445222ms ago: executing program 0 (id=1823):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001b40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000240)="74c41c1f4fd16738a221d4edefee67004fa69f8d2b8e5fea501d5644fc512d295a932b2af65fa7fbcda5ca44dbc244cb9d1a3380ff15a6b467ec5810ce13f021fcedabdbfa010a50a85fd67f8332802e79e0edcd1981c4a38bdb21531055f80d334d764a3b3d13", 0x67}, {&(0x7f0000000640)="10e8c590f816539cb23cbe26dbc90dba122d146198f96f8e5c2dae730d9d4c0225a4b295d7c8b728dce7732fa67be13f636907d2fc3afa5fbe285bfb3f8c569b4d78f7773aa93e08e70b634de31807ac42d7215e14c4b3814ed8e955246a595580b7e24c66a015ad32d3422fb8bc3111267b5840dcae9a0b4a88c3a7725b9d3dae232af2d3e867c688251cdd3e7ceeb2ce6ac9c9d7e636095f6fd742b1790677799de31372fe1f800ae493e7d9ace5859fb6b5d01b53262a79245b7ec5e62568ce45df5bb781fcdbc8314f", 0xcb}, {&(0x7f00000002c0)="15f27dfff5f4df8f984e455eb2bf7eae", 0x10}, {&(0x7f0000000300)="4ec90099f9543ea1fd9857a51da0b83b076324fa4f7fcebeda308eb0a889e0012eeeaf66c7abd3a1ec28d4d75977bafbc0b09bd3d0d2ded73d4c2508e0e917050ee50fdd129232f206978b9995e32caf899c20ae2e81e54fec210bff1e5e", 0x5e}], 0x4, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x400, 0x400, 0x8002, 0x4, 0x7a, 0x1, 0x6, 0xffffffc0}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x80, 0x24}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000008c0)="4446ccbd9b89562f9f36810853ccaa462348cee49f16f339ef5126b56cc465b13c17e03171fd96507ac3bc8650c2d7556102ba767dd4519b6f98a7d2670dbd715df0cfff90473f75a62bf5ca2449f61e5bea688f7800c6", 0x57}], 0x1, &(0x7f0000000a00)=[@sndrcv={0x30, 0x84, 0x1, {0x1, 0x2, 0x200, 0xbf90, 0x4, 0x5, 0x100, 0x1800}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7fffffff}}, @init={0x18, 0x84, 0x0, {0x1, 0xff, 0x1, 0x2}}], 0xe0, 0xc040}, {&(0x7f0000000b00)=@in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000000b40)="58f41fad60af64bb448c946c87cc37c438456cef834bcb3853ab19d1868ec856f1d8a9ab75cdde2b5bfb111e4b747042b7682e769d6994250458379dd59c23074daa87e0e6977c41f4cb6284ffbf30651096d1a16f742a90f1d4bacf8618a13ba644acbe7dfa30c10f57b56ccdf6ce49e4f61e8f386bfbae61fff7bd665ac6da80e1d33f15f89c4aadea9bedf166d2fc41f7e18435b770dd79f7f6156ada2dd8bb9409c23e31a61884f88b07f75c3ea1304504e871c31601e7e982933d032923fbb0b545a5a7dfc80590eb545473b0d5604d2f1481acf3", 0xd7}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="5bbe2df57e37e6f87348dfbd6d57ee5d8993554e1f381bdc4ecfda6a8272555beeef7f01862afb83a5e4e217b8c18fda60f23d5804339219c546b572d93d774f84a261925c1b3a07882717fa37f8381fded30f22ae743202a56d15ad634eddc89198b8119c07456ad758e64cbac5fb0387d83be87e1c8476371140fe7a1c255c5421331f8713a5f30be3c337c43cc88df775920aa6d4f4fef2a15bb7d97bfe63ec52b8b1746f1f551890f82d7dd8b8183c585e2650b2783e56f772cda2510cd7f7c5a94e33d2505077df44fe5029cf15", 0xd0}, {&(0x7f0000000d80)="e05d504ab7f8ddd9d3a147b3166610a70f16f48ee2f136669add", 0x1a}, {&(0x7f0000000dc0)="2b5b3620e14ef4e630a42e9022ae7450136882ae0399cf804f40db7da86f8fb3a37fc79d22d93cdc885c1fbb96e3cedd1399cc5a1932dcf1a2370c0a274867adc017630572b1bc5113876c990c007c2cfef7bcdbbcc879b2c601ff653e33a2db805a62e085ea4a5d9f45e6af21bc5a06a10a5b85a72841cd7f50648d0a193cb4be607fa851dc43990c34722b46599987f05e3130072c7c33dbf255cd92e7a4f1931959788b7697f1be43366f5195c356564d676ab3524ac2dd", 0xb9}, {&(0x7f0000000e80)="c8f7c772d32e0a20e0ea0d88ea3d9551641bad543c44a609ad30980fbb98eb3e2f2751cc075cd64020d542c57b08d018b91fafe8b7e38e5e8c1ced45e8b9ec30890e14aae5aff49e2da52dfadd9f9766899b0b637f06", 0x56}, {&(0x7f0000000f00)="2163ec827a52192b0f9fda2210a97a8f88ce87f12dbad373beda69e07c3b5ca6e5186d82a0e118469ddb2a1cb5ca115e01a39f08a31ff68cbb856ad7e31314bbb8576330db8dfc846155efdcd3580a0bd14926a62ba8964db704fd99ae4fe0176be3bea57f025306101ae499f7597abec304909d5abbe6ff5f752aa43e6206d34d5fe97dee4c2aecd533f9792eb635639a46417990652f0a09362994f4acb693c57e2019d53d6e678ab5a22a667015dfe654ef2ff3cb60a5a5c0580a8c40a6272555e4e0d0894f16601e342d772d242531a6cf21fb96665a5483a6ed3a7b5d54c6c84da83e40955581ada65d49ee3533811ae0e6", 0xf4}, {&(0x7f0000001000)="ac877100fd9d61690d4cfa468ad6cd153e41b347bbde2c2bcb6c5fbae3f548f56a38e796a0cc5edd4ce0d84566352b0afc43d48351fa5c98cdf19d114a5c74825ffab4423ac3c4e006ece494d56e35fc9b9574b1c50e04f463af9f87085f6bafaaf9b168585e825ba3db51996781a85106dc6aa77d614b72ba53486b1ac53a9837d4ee2d7d665172ad9ab5a7c8a964e22f670d35420743d5b88f9e7370e988592a680131f1360a72fedd4d0d4379f6a363ace4b683f6d532a1de231e65ff845f2ac19056ac", 0xc5}], 0x8, &(0x7f0000001180)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x8, 0x8204, 0xa0000, 0x80000000, 0x3ff800, 0x2, 0x7fff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7594}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x60}, {&(0x7f0000001200)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001240)="1cbb05eff3760d7fb38ea5544e374ee529ac2b8b67e059e8b4ba3685cb368dfd9174a499f12f61f28634e7c2346dd5bf98a6f8f4b7a126f816c69b22015a7897bf4ad4d47802d811e4716243c621551b0fe1464b23b9bdf158d3c1cb0cfbdd813612ff0ae24777af74503abd4be79ff19db4d1e519551cfe", 0x78}, {&(0x7f00000012c0)="cf4ffde50dba7f58de05494016444804f338eb0f435b67aa7e64d3d7ec9d849dc99d68538b7044a5294d0500a9dc43b1512ffb7b7f36ef0bfebd1c9107dfe2543c51657ce8a5dca9613e49930bcf97e3df1227a6d3328328da0c6cfd47cd520bd05ccf4d151be0ba026a64da9388dc6e73eacb433ede7ecc05d170ade567a9feb5b50e6f3e924f21c367b9860c0b02339d16e9358ecd9f61f22a6fd361457cdc4d928ecca366d75389d555158d6acf9b1dc93cfc39850374a13753986e3f817b7198018314004bedb4d2e3ccf16575817f174a50e3d0a6e174a1d7e025f1bcb7c878f22b525ee36498467f518be3f6e50b2780", 0xf3}, {&(0x7f00000013c0)="eb553acea7287e9c59e5102c80e43a87126697f31d4a7fad2d96fc2ebbad90066ce8b13d87a5e4f195e16b75e13c1620c60e28e0b0469240e6f0b88fd7018b605e72238f9f78ad4491ea79fa94deaae643254d0600f149977d56c525d9bfa651a70d9b9848bc92e81ca4275809cb0a801739acd1e19e9e26f17071", 0x7b}, {&(0x7f0000001440)="78d7ac376688557d19b53cb0ae076aa1be2038fd869006023051260b1708b1de18ef7a5eb4220eeed8ae7084f614de", 0x2f}], 0x4, 0x0, 0x0, 0x10}, {&(0x7f00000014c0)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001500)="006275baad8049a4a8f595ec891466ff91c033b400963b7a15b9bd2855e190d44e4bc26c9fd595d4eaae5693b4961005ffc7d755fe896fcb78a06806451a7cb042b47e0fb0208546693099afb3831b1a7e01407ce180061d391a166046494f9857a7526cdada4061b31698895553d8a88ccafc4cf7661132e19ea29e6501b2fcb36c58379e5f69546b074eedfe7e4f35619a867c5eb8283fa322ff", 0x9b}], 0x1, &(0x7f0000001700)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @init={0x18, 0x84, 0x0, {0x3, 0x522e}}, @init={0x18, 0x84, 0x0, {0xfff, 0xfd, 0xb1, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7328ae87}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x0, 0x7, 0x9, 0x3, 0x8000, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x1c, 0xf}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x2, 0x4, 0x1, 0x449, 0xfffffffc, 0x564}}, @init={0x18, 0x84, 0x0, {0x4, 0x7, 0xfffa, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x120}, {&(0x7f0000001840)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0x7}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001880)="7f0d2d9ac821c11760bfdffb6522a747ffc66bab60897e4d6905235e247929a4a6b4c99ad52d8f3f83783e881bfe340fd8fb778881623d0d1603be4fe37a57575cfbef9f044337560845d5a69ca4f213a524e39cea007d5c19a1731bfb68f49b5e7a6cf2e17b23d7fcd9729f40c690d56c3c4018b48f0630de07948eb39d60478d41b62bfd04e179a97a3f9a157b9477a225b22bec31bb70c80e11daf7de37cec85e910b60df8fc2a659718c1c4431a6623bd60dad87c537a61d8ada27d0a076a8d5f8f624f02b650693550eaac8dea155a74c46a0db1cc967e91b7762df32fadfe76352c83e4f601d8be502ce9547df2bfd0ab11dca", 0xf6}, {&(0x7f0000001980)="a0cff373ad812752665d83b00d6fb4394ff60b6b512e4c43d8e12ce0e5bb6d8de9200997b9c478cf6087a97b9ca5ae7d9c2a89ee7d4050f7355f9035bb6011f19d525feff1dd42741a72f90450a2ce209ba8bbe950c93435d4c8cd0162bedf40583655824024521b58e61c29be52a61c78bc664dc9c8cbab1caf567e38a058d5a83efd254ac78072ee41afb3b6e7df6f1a4d9240a378b89db05e2acbcb9b9ed5b3", 0xa1}, {&(0x7f0000001a40)="8ef2801bd70cc4f376bfb7018068ff7744958dd52bb340331581411eccd53b6d3dc87e1140c5548abdf664d19a524afd0d298eb5268878909da487ef795cfebfb992e64d72bdb6d00606dec90b1bb77d174eb73f57aaf63d2efc6353393cd6424603453ae357f8f6db556aa898fa503a9f1b7d79", 0x74}, {&(0x7f0000001ac0)="d86980b879b5309e2023837914adcad941025d09616794464d307b33ab", 0x1d}], 0x4, 0x0, 0x0, 0x804}], 0x6, 0x40000)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
select(0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200))

0s ago: executing program 2 (id=1824):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109d000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x29)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, 0x0, &(0x7f0000000040))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendfile(r0, r0, &(0x7f0000000200)=0xffffffff, 0x17e618cf)
sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRES16=r10], 0x328}, 0x1, 0x0, 0x0, 0x4000840}, 0x24000000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:8740' (ED25519) to the list of known hosts.
syzkaller login: [   48.678958][ T5798] cgroup: Unknown subsys name 'net'
[   48.829009][ T5798] cgroup: Unknown subsys name 'cpuset'
[   48.835394][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.193379][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.119472][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.122491][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.143585][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.151220][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.154672][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.158372][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.160914][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.163403][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.166400][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.166554][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.169755][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.172873][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.175377][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.185462][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.189122][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.467987][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.561010][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.620981][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.632947][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.637724][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.640978][ T5830] bridge_slave_0: entered allmulticast mode
[   54.645779][ T5830] bridge_slave_0: entered promiscuous mode
[   54.672401][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.675008][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.677529][ T5830] bridge_slave_1: entered allmulticast mode
[   54.680715][ T5830] bridge_slave_1: entered promiscuous mode
[   54.697262][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.699816][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.702148][ T5831] bridge_slave_0: entered allmulticast mode
[   54.705431][ T5831] bridge_slave_0: entered promiscuous mode
[   54.734212][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.737467][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.740312][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.742734][ T5831] bridge_slave_1: entered allmulticast mode
[   54.746008][ T5831] bridge_slave_1: entered promiscuous mode
[   54.750839][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.812980][ T5830] team0: Port device team_slave_0 added
[   54.816707][ T5830] team0: Port device team_slave_1 added
[   54.843097][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.863014][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.868828][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.871599][ T5840] bridge_slave_0: entered allmulticast mode
[   54.876042][ T5840] bridge_slave_0: entered promiscuous mode
[   54.880518][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.891460][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.895303][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.904831][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.909949][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.912731][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.916464][ T5840] bridge_slave_1: entered allmulticast mode
[   54.919744][ T5840] bridge_slave_1: entered promiscuous mode
[   54.930921][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.933632][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.942336][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.970329][ T5831] team0: Port device team_slave_0 added
[   54.974607][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.981881][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.987920][ T5831] team0: Port device team_slave_1 added
[   55.039166][ T5840] team0: Port device team_slave_0 added
[   55.044115][ T5840] team0: Port device team_slave_1 added
[   55.049376][ T5830] hsr_slave_0: entered promiscuous mode
[   55.051830][ T5830] hsr_slave_1: entered promiscuous mode
[   55.055963][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.058977][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.070250][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.101579][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.104977][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.115166][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.119667][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.122379][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.132804][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.153694][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.156439][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.166357][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.229118][ T5831] hsr_slave_0: entered promiscuous mode
[   55.231535][ T5831] hsr_slave_1: entered promiscuous mode
[   55.234581][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.237177][ T5831] Cannot create hsr debugfs directory
[   55.250987][ T5840] hsr_slave_0: entered promiscuous mode
[   55.254488][ T5840] hsr_slave_1: entered promiscuous mode
[   55.256690][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.259202][ T5840] Cannot create hsr debugfs directory
[   55.459799][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.468349][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.478223][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.486063][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.550191][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.562392][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.568501][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.574719][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.639094][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.644886][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.656065][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.662821][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.728633][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.758544][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.776510][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.778981][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.791930][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.796044][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.798914][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.830482][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   55.844059][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.856960][  T961] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.860044][  T961] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.875725][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.878608][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.898803][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.922400][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.924813][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.939984][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.944297][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.951905][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.954561][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.073527][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.093579][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.147156][ T5830] veth0_vlan: entered promiscuous mode
[   56.160797][ T5840] veth0_vlan: entered promiscuous mode
[   56.166948][ T5830] veth1_vlan: entered promiscuous mode
[   56.188599][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.194974][ T5840] veth1_vlan: entered promiscuous mode
[   56.227049][ T5839] Bluetooth: hci2: command tx timeout
[   56.229731][ T5839] Bluetooth: hci1: command tx timeout
[   56.232285][ T5839] Bluetooth: hci0: command tx timeout
[   56.239097][ T5830] veth0_macvtap: entered promiscuous mode
[   56.258578][ T5830] veth1_macvtap: entered promiscuous mode
[   56.272798][ T5840] veth0_macvtap: entered promiscuous mode
[   56.279799][ T5840] veth1_macvtap: entered promiscuous mode
[   56.299582][ T5831] veth0_vlan: entered promiscuous mode
[   56.319386][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.324184][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.334484][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.340387][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.346295][ T5831] veth1_vlan: entered promiscuous mode
[   56.360215][ T5700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.366713][ T5700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.370376][ T5700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.380545][ T5700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.384627][ T5700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.393419][ T5700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.396249][ T5700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.410492][ T5700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.420250][ T5831] veth0_macvtap: entered promiscuous mode
[   56.435896][ T5831] veth1_macvtap: entered promiscuous mode
[   56.463113][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.474841][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.507972][ T5700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.511308][ T5700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.524011][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.526802][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.530973][ T5700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.537056][ T5700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.551616][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.561685][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.588821][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.591891][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.614496][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.622572][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.643992][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.646649][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.672389][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.685220][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.694654][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.774419][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.786804][ T5899] openvswitch: netlink: Tunnel attr 64 out of range max 16
[   56.906002][ T5915] netlink: 'syz.0.6': attribute type 11 has an invalid length.
[   57.007238][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.050416][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.188788][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.195234][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.299830][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.311417][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'.
[   57.412914][ T5940] !: renamed from dummy0 (while UP)
[   57.698442][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   57.731840][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'.
[   57.907568][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21'.
[   57.920610][ T5985] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET)
[   57.948576][ T5985] dvmrp1: entered allmulticast mode
[   58.044869][ T5984] dvmrp1: left allmulticast mode
[   58.136927][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.246647][ T6018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.316756][ T5839] Bluetooth: hci0: command tx timeout
[   58.318563][ T5839] Bluetooth: hci1: command tx timeout
[   58.320369][ T5839] Bluetooth: hci2: command tx timeout
[   58.411090][ T6029] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   58.450923][ T6038] sock: sock_set_timeout: `syz.2.31' (pid 6038) tries to set negative timeout
[   59.274393][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.279526][ T6063] xt_SECMARK: invalid mode: 0
[   59.301510][ T6064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.410952][ T6082] netlink: 'syz.0.41': attribute type 11 has an invalid length.
[   59.698979][ T6106] sock: sock_set_timeout: `syz.0.45' (pid 6106) tries to set negative timeout
[   59.748262][ T6110] xt_SECMARK: invalid mode: 0
[   59.800055][ T6113] @: renamed from bond_slave_0 (while UP)
[   59.875922][ T6117] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   60.205342][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.256172][ T6133] Illegal XDP return value 4294967262 on prog  (id 16) dev N/A, expect packet loss!
[   60.385713][ T5221] Bluetooth: hci2: command tx timeout
[   60.387874][ T5838] Bluetooth: hci0: command tx timeout
[   60.390193][ T5839] Bluetooth: hci1: command tx timeout
[   60.440799][ T6149] xt_SECMARK: invalid mode: 0
[   60.530349][ T6153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.567208][ T6155] Bluetooth: MGMT ver 1.23
[   60.746123][ T6175] xt_SECMARK: invalid mode: 0
[   60.758295][ T6179] sock: sock_set_timeout: `syz.1.67' (pid 6179) tries to set negative timeout
[   60.778580][ T6181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.048836][ T6204] vti0: entered promiscuous mode
[   61.183148][ T6217] netlink: 'syz.0.78': attribute type 10 has an invalid length.
[   61.197550][ T6217] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   61.229252][ T6219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.293018][ T6223] Y: renamed from veth0_to_hsr (while UP)
[   61.356457][ T6227] Zero length message leads to an empty skb
[   61.419029][ T6233] : renamed from bond_slave_0 (while UP)
[   61.808944][ T6251] __nla_validate_parse: 15 callbacks suppressed
[   61.808956][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   61.988444][ T6267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.95'.
[   62.035688][ T6271] netlink: 84 bytes leftover after parsing attributes in process `syz.1.97'.
[   62.039028][ T6271] netem: invalid attributes len -16
[   62.040932][ T6271] netem: change failed
[   62.043319][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   62.046594][ T6273] net_ratelimit: 1 callbacks suppressed
[   62.046632][ T6273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.252167][ T6294] xt_SECMARK: invalid mode: 0
[   62.292913][ T6299] netlink: 184 bytes leftover after parsing attributes in process `syz.1.108'.
[   62.339778][ T6300] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   62.342504][ T6300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'.
[   62.464514][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'.
[   62.468378][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'.
[   62.474050][ T5221] Bluetooth: hci2: command tx timeout
[   62.476346][ T5839] Bluetooth: hci1: command tx timeout
[   62.478500][ T5838] Bluetooth: hci0: command tx timeout
[   62.499603][ T6316] netlink: 'syz.0.114': attribute type 10 has an invalid length.
[   62.502250][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'.
[   62.537188][ T6318] xt_SECMARK: invalid mode: 0
[   62.649895][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   62.771708][ T6343] xt_SECMARK: invalid mode: 0
[   63.114472][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.120387][ T6365] netlink: 'syz.0.127': attribute type 1 has an invalid length.
[   63.175159][ T6371] xt_SECMARK: invalid mode: 0
[   63.809517][ T6404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.835377][ T6406] tipc: Started in network mode
[   63.837166][ T6406] tipc: Node identity 6e7619661df9, cluster identity 4711
[   63.839804][ T6406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.908351][ T6406] tipc: Disabling bearer <eth:syzkaller0>
[   63.929747][ T6415] xt_SECMARK: invalid mode: 0
[   64.059810][ T6425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.095694][ T6427] syz_tun: entered allmulticast mode
[   64.148263][ T6431] xt_SECMARK: invalid mode: 0
[   64.252788][ T6445] xt_hashlimit: size too large, truncated to 1048576
[   64.343613][ T6459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.418714][ T6463] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   64.662343][ T6490] x_tables: ip_tables: osf match: only valid for protocol 6
[   64.734536][ T6502] xt_SECMARK: invalid mode: 0
[   64.765064][ T6504] vlan2: entered promiscuous mode
[   64.767871][ T6504] bond0: entered promiscuous mode
[   64.769707][ T6504] bond_slave_0: entered promiscuous mode
[   64.771708][ T6504] bond_slave_1: entered promiscuous mode
[   64.775236][ T6504] vlan2: entered allmulticast mode
[   64.777032][ T6504] bond0: entered allmulticast mode
[   64.779136][ T6504] bond_slave_0: entered allmulticast mode
[   64.781022][ T6504] bond_slave_1: entered allmulticast mode
[   64.836830][ T6509] gre1: entered allmulticast mode
[   65.263770][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   65.267125][ T5221] Bluetooth: hci0: command 0x0c1a tx timeout
[   65.667797][ T6535] xt_l2tp: missing protocol rule (udp|l2tpip)
[   65.730020][ T6540] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   65.739514][ T6540] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   65.841452][ T6543] netlink: 'syz.0.187': attribute type 13 has an invalid length.
[   65.844839][ T6543] netlink: 'syz.0.187': attribute type 17 has an invalid length.
[   65.970952][ T6543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.067207][ T6539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.148235][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.247845][ T5700] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   66.284993][ T6484] Set syz1 is full, maxelem 65536 reached
[   66.984672][ T6568] vlan3: entered promiscuous mode
[   66.987039][ T6568] vlan3: entered allmulticast mode
[   66.989375][ T6568] hsr_slave_1: entered allmulticast mode
[   67.053131][ T6568] __nla_validate_parse: 13 callbacks suppressed
[   67.053150][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'.
[   67.075753][ T6539] syz.0.187 (6539) used greatest stack depth: 20456 bytes left
[   67.172310][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.179689][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.184378][ T6574] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.188350][ T6574] openvswitch: netlink: Message has 5 unknown bytes.
[   67.195711][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.204563][ T6574] netlink: 277 bytes leftover after parsing attributes in process `syz.0.194'.
[   67.360385][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[   68.248181][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'.
[   68.250996][ T6594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.262215][ T6592] vlan1: entered promiscuous mode
[   68.264607][ T6592] vlan1: entered allmulticast mode
[   68.266483][ T6592] hsr_slave_1: entered allmulticast mode
[   68.288846][ T6596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.291950][ T6596] syzkaller0: entered promiscuous mode
[   68.297638][ T6596] syzkaller0: entered allmulticast mode
[   68.315043][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   68.317038][ T6596] tipc: Resetting bearer <eth:syzkaller0>
[   68.402957][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   68.415199][ T6595] tipc: Disabling bearer <eth:syzkaller0>
[   68.517676][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   68.531512][ T6609] openvswitch: netlink: Message has 1 unknown bytes.
[   68.534777][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.578707][ T5700] syzkaller0: tun_net_xmit 76
[   68.579840][ T6610] syzkaller0: create flow: hash 3121848244 index 1
[   68.580595][ T5700] syzkaller0: tun_net_xmit 48
[   68.599143][ T6608] syzkaller0: delete flow: hash 3121848244 index 1
[   69.423004][ T6626] netlink: 'syz.1.214': attribute type 8 has an invalid length.
[   69.485909][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.494602][ T6628] macvlan0: entered promiscuous mode
[   69.497771][ T6628] macvlan0: entered allmulticast mode
[   69.500521][ T6628] @: entered promiscuous mode
[   69.502372][ T6628] bond_slave_1: entered promiscuous mode
[   69.504417][ T6628] bond0: entered allmulticast mode
[   69.506240][ T6628] @: entered allmulticast mode
[   69.507916][ T6628] bond_slave_1: entered allmulticast mode
[   69.509923][ T6628] bond0: entered promiscuous mode
[   69.512844][ T6628] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   69.521020][ T6628] bond1: (slave macvlan0): Enslaving as an active interface with an up link
[   69.537334][ T6633] vlan2: entered promiscuous mode
[   69.539559][ T6633] vlan2: entered allmulticast mode
[   69.543849][ T6633] hsr_slave_1: entered allmulticast mode
[   69.641674][ T6643] xt_SECMARK: invalid mode: 0
[   69.960599][ T6679] xt_SECMARK: invalid mode: 0
[   69.980258][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.983326][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.086454][ T6687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.111277][ T6689] xt_SECMARK: invalid mode: 0
[   70.168781][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.181036][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.309529][ T6671] vti0: left promiscuous mode
[   70.322142][ T6682] 8021q: VLANs not supported on tunl0
[   70.327746][ T5926] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.336510][ T5926] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.340190][ T5926] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.363740][ T5926] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.377497][ T6671] syz.0.226 (6671) used greatest stack depth: 19832 bytes left
[   70.651124][ T6726] xt_SECMARK: invalid mode: 0
[   70.662187][ T6723] netlink: 'syz.0.241': attribute type 15 has an invalid length.
[   70.957627][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.972914][ T6757] openvswitch: netlink: IP tunnel TTL not specified.
[   70.978008][ T6749] openvswitch: netlink: IP tunnel TTL not specified.
[   71.905278][ T6778] netlink: 'syz.1.256': attribute type 4 has an invalid length.
[   71.933984][ T6778] syz.1.256 (6778) used obsolete PPPIOCDETACH ioctl
[   72.138176][ T6800] __nla_validate_parse: 11 callbacks suppressed
[   72.138195][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   72.145311][ T6800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.218819][ T6808] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   72.273744][ T6814] xt_SECMARK: invalid mode: 0
[   72.371953][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'.
[   72.443448][   T24] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.129334][ T6853] netlink: 153 bytes leftover after parsing attributes in process `syz.1.281'.
[   73.136354][ T6853] netlink: 'syz.1.281': attribute type 8 has an invalid length.
[   73.391468][ T6866] xt_SECMARK: invalid mode: 0
[   73.427986][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'.
[   73.432442][ T6870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.632560][ T6881] syzkaller0: entered promiscuous mode
[   73.635397][ T6881] syzkaller0: entered allmulticast mode
[   74.576118][ T6891] xt_SECMARK: invalid mode: 0
[   74.625449][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'.
[   74.629201][ T6894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.659808][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'.
[   74.675947][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   74.710249][ T6902] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   74.762372][ T6909] netlink: 'syz.0.300': attribute type 3 has an invalid length.
[   74.913590][ T6924] xt_SECMARK: invalid mode: 0
[   75.019503][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[   75.052147][ T6933] gtp0: entered allmulticast mode
[   75.064099][ T6934] hsr0: entered promiscuous mode
[   75.150190][ T6941] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   75.162154][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'.
[   75.168804][ T6943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.405518][ T6968] bridge_slave_0: left allmulticast mode
[   75.408090][ T6968] bridge_slave_0: left promiscuous mode
[   75.410715][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.426469][ T6968] bridge_slave_1: left allmulticast mode
[   75.429069][ T6968] bridge_slave_1: left promiscuous mode
[   75.431763][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.451985][ T6968] bond0: (slave bond_slave_0): Releasing backup interface
[   75.459478][ T6968] bond_slave_0: left promiscuous mode
[   75.462037][ T6968] bond_slave_0: left allmulticast mode
[   75.469744][ T6968] bond0: (slave bond_slave_1): Releasing backup interface
[   75.485535][ T6968] bond_slave_1: left promiscuous mode
[   75.488246][ T6968] bond_slave_1: left allmulticast mode
[   75.500448][ T6968] team0: Port device team_slave_0 removed
[   75.506976][ T6968] team0: Port device team_slave_1 removed
[   75.509588][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.512466][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.518212][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.521140][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.539689][ T6972] bridge0: entered promiscuous mode
[   75.558328][ T6976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.320'.
[   75.666733][ T6985] xt_SECMARK: invalid mode: 0
[   75.792539][ T6995] gretap0: entered promiscuous mode
[   75.843145][ T7000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.862872][    C0] Unknown status report in ack skb
[   76.030782][ T7016] xt_SECMARK: invalid mode: 0
[   76.175984][ T7029] sctp: [Deprecated]: syz.0.335 (pid 7029) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.175984][ T7029] Use struct sctp_sack_info instead
[   76.179816][ T7030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.461102][ T7040] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   77.072505][ T7048] xt_SECMARK: invalid mode: 0
[   77.270260][ T7050] __nla_validate_parse: 6 callbacks suppressed
[   77.270275][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.343'.
[   77.318116][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'.
[   77.321105][ T7055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.433628][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[   77.548888][ T7073] xt_SECMARK: invalid mode: 0
[   77.698224][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'.
[   77.701326][ T7088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.865530][ T7103] xt_SECMARK: invalid mode: 0
[   77.946841][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.362'.
[   77.958371][ T7112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.362'.
[   78.001871][ T7119] netlink: 'syz.0.364': attribute type 3 has an invalid length.
[   78.006033][ T7119] netlink: 666 bytes leftover after parsing attributes in process `syz.0.364'.
[   78.076517][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   78.091621][ T7120] netlink: 'syz.2.361': attribute type 25 has an invalid length.
[   78.110440][ T7130] xt_SECMARK: invalid mode: 0
[   78.171579][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[   78.224862][ T7142] xt_hashlimit: size too large, truncated to 1048576
[   78.224900][ T7143] xt_hashlimit: size too large, truncated to 1048576
[   78.562152][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   78.571704][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   78.672323][ T7159] xt_SECMARK: invalid mode: 0
[   78.699339][ T7161] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002
[   78.787847][ T7165] net_ratelimit: 1 callbacks suppressed
[   78.787862][ T7165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.944647][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.947486][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.952854][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.955552][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.971267][ T7180] syzkaller1: entered promiscuous mode
[   78.974100][ T7180] syzkaller1: entered allmulticast mode
[   79.383432][ T7199] macvtap1: entered promiscuous mode
[   79.390015][ T7199] batadv0: entered promiscuous mode
[   79.394837][ T7199] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   79.398906][ T7199] batadv0: left promiscuous mode
[   79.688978][ T7223] xt_SECMARK: invalid mode: 0
[   79.765482][ T7229] bond0: (slave lo): Error: Can not enslave VLAN challenged device to VLAN enabled bond
[   79.959260][ T7262] xt_SECMARK: invalid mode: 0
[   80.074958][ T7270] netlink: 'syz.1.415': attribute type 1 has an invalid length.
[   80.077872][ T7270] netlink: 'syz.1.415': attribute type 2 has an invalid length.
[   80.167744][ T7279] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   80.338495][ T7287] xt_SECMARK: invalid mode: 0
[   80.839971][ T7311] netlink: 'syz.0.427': attribute type 4 has an invalid length.
[   80.927161][ T7320] xt_SECMARK: invalid mode: 0
[   81.196732][  T972] cfg80211: failed to load regulatory.db
[   81.287200][ T7347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.312033][ T7380] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   82.315547][ T7380] __nla_validate_parse: 21 callbacks suppressed
[   82.315556][ T7380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.448'.
[   82.325707][ T7380] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[   82.332688][ T7380] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4
[   82.395501][ T7390] xt_SECMARK: invalid mode: 0
[   82.469522][ T7399] pim6reg1: entered promiscuous mode
[   82.471329][ T7399] pim6reg1: entered allmulticast mode
[   82.602514][ T7417] xt_SECMARK: invalid mode: 0
[   82.608496][ T7419] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   82.611461][ T7419] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   82.643126][ T7421] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[   82.648066][ T7421] netlink: 244 bytes leftover after parsing attributes in process `syz.1.463'.
[   82.751529][ T7443] warning: `syz.0.468' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.759435][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[   82.762197][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'.
[   82.794546][ T7447] xt_SECMARK: invalid mode: 0
[   82.847206][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'.
[   82.851008][ T7455] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[   82.865360][ T7455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.473'.
[   82.888652][ T5884] IPVS: starting estimator thread 0...
[   82.904458][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[   82.908395][ T7466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.908826][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[   82.973319][ T7463] IPVS: using max 80 ests per chain, 192000 per kthread
[   83.003871][ T7476] netlink: 'syz.2.476': attribute type 6 has an invalid length.
[   83.047084][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[   83.105084][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.160671][ T7502] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[   83.190585][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.211000][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.214336][ T7502] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.218389][ T7502] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   83.287238][ T7512] xt_SECMARK: invalid mode: 0
[   83.366992][ T7513] veth0: entered promiscuous mode
[   83.384353][ T7513] veth0 (unregistering): left promiscuous mode
[   83.496366][ T7532] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[   83.541314][ T7535] netem: invalid attributes len -16
[   83.545569][ T7535] netem: change failed
[   83.584699][ T7541] xt_SECMARK: invalid mode: 0
[   83.611625][ T7543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.648641][ T7545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.272168][ T7580] xt_SECMARK: invalid mode: 0
[   84.457872][ T7602] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[   84.577375][ T7612] xt_SECMARK: invalid mode: 0
[   84.786337][ T7630] netlink: 'syz.1.531': attribute type 1 has an invalid length.
[   84.788855][ T7630] netlink: 'syz.1.531': attribute type 2 has an invalid length.
[   84.838057][ T7639] xt_SECMARK: invalid mode: 0
[   85.032448][ T7655] netlink: 'syz.1.540': attribute type 1 has an invalid length.
[   85.039348][ T7653] team0: Port device team_slave_0 removed
[   85.039359][ T7655] netlink: 'syz.1.540': attribute type 2 has an invalid length.
[   85.152364][ T7664] xt_SECMARK: invalid mode: 0
[   85.186348][ T7667] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   85.191336][ T7667] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   85.371694][ T7683] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[   85.378502][ T7680] syzkaller0: entered promiscuous mode
[   85.381908][ T7680] syzkaller0: entered allmulticast mode
[   85.393928][ T7684] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   85.398485][ T7684] ipt_ECN: cannot use operation on non-tcp rule
[   86.334525][ T7692] netlink: 'syz.1.552': attribute type 11 has an invalid length.
[   86.739515][ T7702] xt_SECMARK: invalid mode: 0
[   86.956317][ T7720] xt_SECMARK: invalid mode: 0
[   87.167679][ T7730] ipvlan0: entered promiscuous mode
[   87.486127][ T7748] __nla_validate_parse: 25 callbacks suppressed
[   87.486142][ T7748] netlink: 200 bytes leftover after parsing attributes in process `syz.2.570'.
[   87.677844][ T7755] netlink: 200 bytes leftover after parsing attributes in process `syz.2.572'.
[   87.882458][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'.
[   87.905673][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'.
[   88.018573][ T7784] xt_SECMARK: invalid mode: 0
[   88.047024][ T7787] netlink: 200 bytes leftover after parsing attributes in process `syz.2.586'.
[   88.050367][ T7787] validate_nla: 11 callbacks suppressed
[   88.050376][ T7787] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   88.058209][ T7787] netlink: 'syz.2.586': attribute type 2 has an invalid length.
[   88.176529][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[   88.203874][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[   88.278927][ T7812] xt_SECMARK: invalid mode: 0
[   88.355902][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'.
[   88.384562][ T7820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.598'.
[   88.580314][ T7820] Set syz1 is full, maxelem 65536 reached
[   88.720401][ T7850] netlink: 256 bytes leftover after parsing attributes in process `syz.0.605'.
[   88.787493][ T7856] IPVS: Scheduler module ip_vs_sip not found
[   88.888914][ T7865] bridge0: port 3(macsec0) entered blocking state
[   88.892272][ T7865] bridge0: port 3(macsec0) entered disabled state
[   88.899355][ T7865] macsec0: entered allmulticast mode
[   88.910002][ T7865] macsec0: entered promiscuous mode
[   88.940598][ T7877] netlink: 'syz.1.616': attribute type 1 has an invalid length.
[   88.945425][ T7877] netlink: 'syz.1.616': attribute type 2 has an invalid length.
[   88.976485][ T7881] xt_SECMARK: invalid mode: 0
[   88.979426][ T7879] syzkaller1: tun_chr_ioctl cmd 1074025672
[   88.981627][ T7879] syzkaller1: ignored: set checksum disabled
[   89.252363][ T7904] tipc: Started in network mode
[   89.254261][ T7904] tipc: Node identity , cluster identity 4711
[   89.256148][ T7904] tipc: Failed to obtain node identity
[   89.257976][ T7904] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   89.297795][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.303000][ T7891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.397437][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.421299][ T7906] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   89.430835][ T7906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   89.703061][ T7910] xt_SECMARK: invalid mode: 0
[   90.187198][ T7938] xt_SECMARK: invalid mode: 0
[   90.245899][ T7942] syzkaller0: entered promiscuous mode
[   90.247995][ T7942] syzkaller0: entered allmulticast mode
[   90.278720][ T7945] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[   90.458052][ T7956] netlink: 'syz.1.641': attribute type 21 has an invalid length.
[   90.599448][ T7981] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[   90.602854][ T7981] netlink: 'syz.0.647': attribute type 2 has an invalid length.
[   90.750980][ T7996] netlink: 'syz.1.653': attribute type 1 has an invalid length.
[   90.757468][ T7995] xt_SECMARK: invalid mode: 0
[   90.759578][ T7996] netlink: 'syz.1.653': attribute type 1 has an invalid length.
[   90.876209][ T8012] ipt_ECN: cannot use operation on non-tcp rule
[   90.949407][ T8027] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   91.059000][ T8036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.087660][ T8035] tipc: Disabling bearer <eth:syzkaller0>
[   91.398692][ T8070] xt_l2tp: v2 doesn't support IP mode
[   91.595346][ T8084] syzkaller0: entered promiscuous mode
[   91.601873][ T8084] syzkaller0: entered allmulticast mode
[   91.770040][ T8103] xt_SECMARK: invalid mode: 0
[   91.870022][ T8114] bond0: Device is already in use.
[   92.241891][ T8155] team1: entered promiscuous mode
[   92.246797][ T8155] team1: entered allmulticast mode
[   92.260793][ T8154] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000
[   92.773779][ T8208] __nla_validate_parse: 22 callbacks suppressed
[   92.773799][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'.
[   92.870417][ T8218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.730'.
[   93.130964][ T8249] Cannot find add_set index 4 as target
[   93.227821][ T8260] netlink: 236 bytes leftover after parsing attributes in process `syz.0.747'.
[   93.401090][   T33] audit: type=1107 audit(1753469413.703:2): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   93.414847][ T8284] xt_socket: unknown flags 0x8
[   93.500099][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[   93.509349][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'.
[   93.553063][ T8299] tipc: Started in network mode
[   93.555751][ T8299] tipc: Node identity , cluster identity 4711
[   93.559371][ T8299] tipc: Failed to obtain node identity
[   93.565054][ T8299] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   93.620872][ T8300] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   93.827943][ T8334] netlink: 172 bytes leftover after parsing attributes in process `syz.2.775'.
[   94.042568][ T8349] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (64)
[   94.062865][ T8357] xt_SECMARK: invalid mode: 0
[   94.190298][ T8363] !: renamed from dummy0
[   94.305357][ T8380] xt_SECMARK: invalid mode: 0
[   94.474389][ T8402] validate_nla: 18 callbacks suppressed
[   94.474400][ T8402] netlink: 'syz.0.799': attribute type 64 has an invalid length.
[   94.480736][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'.
[   94.616778][ T8409] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[   94.619447][ T8409] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.800'.
[   94.722411][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'.
[   94.727052][ T8415] Bluetooth: MGMT ver 1.23
[   94.759804][ T8417] xt_SECMARK: invalid mode: 0
[   95.061880][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'.
[   95.345050][ T8461] netlink: 'syz.1.818': attribute type 4 has an invalid length.
[   95.406570][ T8464] netlink: 'syz.0.820': attribute type 29 has an invalid length.
[   95.532872][ T8481] ieee802154 phy1 wpan1: encryption failed: -22
[   95.595046][ T8490] netlink: 'syz.2.829': attribute type 1 has an invalid length.
[   95.600759][ T8490] netlink: 'syz.2.829': attribute type 2 has an invalid length.
[   95.638919][ T8479] netlink: 'syz.1.825': attribute type 13 has an invalid length.
[   95.646926][ T8479] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   95.792082][ T8479] syz.1.825 (8479) used greatest stack depth: 19608 bytes left
[   95.999348][ T8514] xt_SECMARK: invalid mode: 0
[   96.225520][ T8529] bridge_slave_0: left allmulticast mode
[   96.227676][ T8529] bridge_slave_0: left promiscuous mode
[   96.230454][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.236309][ T8529] bridge_slave_1: left allmulticast mode
[   96.238242][ T8529] bridge_slave_1: left promiscuous mode
[   96.240252][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.248712][ T8529] bond0: (slave c@): Releasing backup interface
[   96.251721][ T8529] @: left allmulticast mode
[   96.255061][ T8529] @: left promiscuous mode
[   96.261002][ T8529] bond0: (slave bond_slave_1): Releasing backup interface
[   96.268533][ T8529] bond_slave_1: left allmulticast mode
[   96.281604][ T8529] team0: Port device team_slave_0 removed
[   96.289625][ T8529] team0: Port device team_slave_1 removed
[   96.293917][ T8529] hsr0: left promiscuous mode
[   96.299333][ T8529] macvlan0: left promiscuous mode
[   96.301422][ T8529] bond0: left promiscuous mode
[   96.306405][ T8529] macvlan0: left allmulticast mode
[   96.308442][ T8529] bond0: left allmulticast mode
[   96.310991][ T8529] bond1: (slave macvlan0): Releasing backup interface
[   96.317516][ T8529] gtp0: left allmulticast mode
[   96.374782][ T8532] x_tables: unsorted underflow at hook 4
[   96.471704][ T8539] netlink: 'syz.2.846': attribute type 3 has an invalid length.
[   96.474971][ T8539] netlink: 'syz.2.846': attribute type 2 has an invalid length.
[   96.485798][ T8541] xt_SECMARK: invalid mode: 0
[   96.863853][ T8563] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[   96.895962][ T8563] nbd: socks must be embedded in a SOCK_ITEM attr
[   96.899190][ T8563] block nbd0: shutting down sockets
[   97.076306][ T8587] netlink: zone id is out of range
[   97.078046][ T8587] netlink: zone id is out of range
[   97.079832][ T8587] netlink: zone id is out of range
[   97.083250][ T8587] netlink: zone id is out of range
[   97.084934][ T8587] netlink: zone id is out of range
[   97.086802][ T8587] netlink: zone id is out of range
[   97.088651][ T8587] netlink: zone id is out of range
[   97.090443][ T8587] netlink: zone id is out of range
[   97.092425][ T8587] netlink: zone id is out of range
[   97.142988][ T8594] xt_SECMARK: invalid mode: 0
[   97.251279][ T8604] xt_connbytes: Forcing CT accounting to be enabled
[   97.674710][ T8649] xt_SECMARK: invalid mode: 0
[   97.712755][ T8652] tipc: Started in network mode
[   97.716144][ T8652] tipc: Node identity 9a6ba4c3d32d, cluster identity 4711
[   97.719216][ T8652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.727960][ T8652] syzkaller0: entered promiscuous mode
[   97.729864][ T8652] syzkaller0: entered allmulticast mode
[   97.759999][ T8652] tipc: Resetting bearer <eth:syzkaller0>
[   97.764162][ T8651] tipc: Resetting bearer <eth:syzkaller0>
[   97.780295][ T8651] tipc: Disabling bearer <eth:syzkaller0>
[   97.798728][ T8659] __nla_validate_parse: 20 callbacks suppressed
[   97.798742][ T8659] netlink: 80 bytes leftover after parsing attributes in process `syz.0.891'.
[   98.107180][ T8680] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   98.112789][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[   98.129031][ T8678] gretap0: left promiscuous mode
[   98.140416][ T8678] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   98.144333][ T8678] vlan2: left promiscuous mode
[   98.145970][ T8678] bond0: left promiscuous mode
[   98.147635][ T8678] vlan2: left allmulticast mode
[   98.149602][ T8678] bond0: left allmulticast mode
[   98.151319][ T8678] gre1: left allmulticast mode
[   98.154659][ T8678] team1: left promiscuous mode
[   98.156262][ T8678] team1: left allmulticast mode
[   98.316291][ T8695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.903'.
[   98.322998][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'.
[   98.629331][ T8704] x_tables: duplicate underflow at hook 2
[   98.671198][ T8712] macsec1: entered promiscuous mode
[   98.673817][ T8712] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   98.677712][ T8712] macsec1: entered allmulticast mode
[   98.680347][ T8712] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   98.681130][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.908'.
[   98.688282][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.908'.
[   98.692940][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.908'.
[   98.698101][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.908'.
[   98.704277][ T8714] netlink: 104 bytes leftover after parsing attributes in process `syz.2.908'.
[   98.739356][ T8719] x_tables: ip_tables: udp match: only valid for protocol 17
[   98.785561][ T8724] xt_SECMARK: invalid mode: 0
[   98.885318][ T8738] netlink: 240 bytes leftover after parsing attributes in process `syz.2.916'.
[   98.897688][ T8733] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.908756][ T8733] bond1: (slave bond2): Enslaving as an active interface with a down link
[   98.982148][ T8745] xt_SECMARK: invalid mode: 0
[   99.077420][ T8758] ip6erspan0: entered allmulticast mode
[  100.136347][ T8812] delete_channel: no stack
[  100.140893][ T8812] trusted_key: syz.0.941 sent an empty control message without MSG_MORE.
[  100.149337][ T8804] validate_nla: 7 callbacks suppressed
[  100.149348][ T8804] netlink: 'syz.1.937': attribute type 2 has an invalid length.
[  100.194245][ T8815] xt_SECMARK: invalid mode: 0
[  100.351022][ T8820] bond0: Device is already in use.
[  100.393096][ T8825] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  100.505495][ T8842] delete_channel: no stack
[  100.933778][ T8887] delete_channel: no stack
[  101.000446][ T8897] net_ratelimit: 165 callbacks suppressed
[  101.000459][ T8897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.185343][ T8919] xt_SECMARK: invalid mode: 0
[  101.356109][ T8945] xt_SECMARK: invalid mode: 0
[  101.367944][ T8932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.462557][ T8958] syzkaller0: entered promiscuous mode
[  101.468211][ T8958] syzkaller0: entered allmulticast mode
[  101.571519][ T8967] xt_SECMARK: invalid mode: 0
[  101.674305][ T8977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.677812][ T8977] syzkaller0: entered promiscuous mode
[  101.679872][ T8977] syzkaller0: entered allmulticast mode
[  101.692931][ T8977] tipc: Resetting bearer <eth:syzkaller0>
[  101.698173][ T8976] tipc: Resetting bearer <eth:syzkaller0>
[  101.707283][ T8976] tipc: Disabling bearer <eth:syzkaller0>
[  102.054403][ T9006] syz_tun: entered promiscuous mode
[  102.057395][ T9006] batadv_slave_0: entered promiscuous mode
[  102.060083][ T9006] hsr1: entered allmulticast mode
[  102.061896][ T9006] syz_tun: entered allmulticast mode
[  102.065187][ T9006] batadv_slave_0: entered allmulticast mode
[  102.291912][ T9034] netlink: 'syz.0.1019': attribute type 2 has an invalid length.
[  102.307475][ T9034] netlink: 'syz.0.1019': attribute type 2 has an invalid length.
[  102.345035][ T9040] bridge0: port 1(ipvlan0) entered blocking state
[  102.353354][ T9040] bridge0: port 1(ipvlan0) entered disabled state
[  102.355612][ T9040] ipvlan0: entered allmulticast mode
[  102.357328][ T9040] bridge0: entered allmulticast mode
[  102.360184][ T9040] ipvlan0: left allmulticast mode
[  102.362007][ T9040] bridge0: left allmulticast mode
[  102.488605][ T9056] bond0: entered allmulticast mode
[  102.498685][ T9059] xt_SECMARK: invalid mode: 0
[  102.602102][ T9072] sctp: [Deprecated]: syz.2.1035 (pid 9072) Use of int in maxseg socket option.
[  102.602102][ T9072] Use struct sctp_assoc_value instead
[  102.677431][ T9081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.706456][ T9083] netlink: 'syz.2.1040': attribute type 3 has an invalid length.
[  102.757237][ T9090] netlink: 'syz.2.1043': attribute type 4 has an invalid length.
[  102.765998][ T9089] netlink: 'syz.2.1043': attribute type 4 has an invalid length.
[  102.779906][ T9095] netlink: 'syz.0.1045': attribute type 4 has an invalid length.
[  102.787026][ T9098] netlink: 'syz.0.1045': attribute type 4 has an invalid length.
[  102.844932][ T9101] openvswitch: netlink: Missing key (keys=40, expected=80)
[  102.846268][ T9105] __nla_validate_parse: 25 callbacks suppressed
[  102.846282][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'.
[  102.852794][ T9105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.345024][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  131.583454][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1052'.
[  131.607028][ T9122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1052'.
[  131.634835][ T9126] netlink: 'syz.0.1054': attribute type 5 has an invalid length.
[  131.701348][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  131.708768][ T9132] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1054'.
[  131.714609][ T9133] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1057'.
[  131.754949][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1057'.
[  131.758562][ T9133] netlink: 'syz.2.1057': attribute type 7 has an invalid length.
[  131.766747][ T9133] netlink: 'syz.2.1057': attribute type 8 has an invalid length.
[  131.770131][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'.
[  131.784968][ T9138] can: request_module (can-proto-5) failed.
[  131.787945][ T9133] bridge0: entered promiscuous mode
[  131.796735][ T9133] ip6gretap0: entered promiscuous mode
[  131.799225][ T9133] bridge0: left promiscuous mode
[  131.801578][ T9133] ip6gretap0: left promiscuous mode
[  131.916479][ T9148] netlink: 'syz.1.1068': attribute type 5 has an invalid length.
[  131.939854][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1063'.
[  131.944921][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1063'.
[  131.965335][ T9152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1064'.
[  131.968396][ T9152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.088884][ T9165] netlink: 'syz.1.1069': attribute type 7 has an invalid length.
[  132.102217][ T9165] netlink: 'syz.1.1069': attribute type 8 has an invalid length.
[  132.134354][ T9170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  132.311221][ T9187] netlink: 'syz.0.1083': attribute type 7 has an invalid length.
[  132.317025][ T9187] netlink: 'syz.0.1083': attribute type 8 has an invalid length.
[  132.343080][ T9187] bridge0: entered promiscuous mode
[  132.352454][ T9187] ip6gretap0: entered promiscuous mode
[  132.357430][ T9187] bridge0: left promiscuous mode
[  132.362457][ T9187] ip6gretap0: left promiscuous mode
[  132.381319][ T9193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.395059][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.510904][ T9209] : entered promiscuous mode
[  132.788374][ T9241] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.871875][ T9250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.126437][ T9275] xt_SECMARK: invalid mode: 0
[  133.495057][ T9299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.559800][ T9305] xt_SECMARK: invalid mode: 0
[  133.749864][ T9325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.156589][ T9361] netlink: 'syz.0.1145': attribute type 21 has an invalid length.
[  134.225280][ T9369] xt_SECMARK: invalid mode: 0
[  134.519155][ T9396] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  134.636939][ T9401] syz_tun: left allmulticast mode
[  134.670439][ T5700] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.674418][ T5700] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.684985][ T5700] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.693378][ T5700] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.146618][ T9378] delete_channel: no stack
[  135.246063][ T9439] xt_SECMARK: invalid mode: 0
[  135.512880][ T9455] sctp: [Deprecated]: syz.0.1177 (pid 9455) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.512880][ T9455] Use struct sctp_sack_info instead
[  135.588207][ T9460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.932528][ T9469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.063530][  T972] page_pool_release_retry() stalled pool shutdown: id 18, 1 inflight 60 sec
[  137.046724][ T9495] __nla_validate_parse: 31 callbacks suppressed
[  137.046737][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1190'.
[  137.090633][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'.
[  137.270001][ T9509] syzkaller0: entered promiscuous mode
[  137.272051][ T9509] syzkaller0: entered allmulticast mode
[  138.232855][ T9584] xt_SECMARK: invalid mode: 0
[  138.291398][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'.
[  138.459849][ T9610] xt_SECMARK: invalid mode: 0
[  138.820110][ T9638] validate_nla: 1 callbacks suppressed
[  138.820123][ T9638] netlink: 'syz.2.1221': attribute type 2 has an invalid length.
[  138.852526][ T9646] xt_SECMARK: invalid mode: 0
[  138.873740][ T9649] raw_sendmsg: syz.1.1224 forgot to set AF_INET. Fix it!
[  138.904788][ T9657] netlink: 'syz.2.1226': attribute type 4 has an invalid length.
[  138.907537][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  138.929959][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1225'.
[  138.961764][ T9663] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1228'.
[  138.971153][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'.
[  138.975908][ T9665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.102244][ T9680] xt_SECMARK: invalid mode: 0
[  139.105563][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'.
[  139.108953][ T9678] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1234'.
[  139.122000][ T9681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1236'.
[  139.145901][ T9684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.315707][ T9705] netlink: 'syz.1.1247': attribute type 1 has an invalid length.
[  139.352523][ T9705] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  140.350793][ T9734] xt_SECMARK: invalid mode: 0
[  140.390233][ T9739] netlink: 'syz.1.1262': attribute type 2 has an invalid length.
[  140.507256][ T9752] netlink: 'syz.2.1266': attribute type 83 has an invalid length.
[  140.677179][ T9752] syz_tun: entered promiscuous mode
[  140.679661][ T9752] batadv_slave_0: entered promiscuous mode
[  140.682067][ T9752] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  140.685367][ T9752] Cannot create hsr debugfs directory
[  140.687282][ T9752] hsr1: entered allmulticast mode
[  140.688997][ T9752] syz_tun: entered allmulticast mode
[  140.690911][ T9752] batadv_slave_0: entered allmulticast mode
[  141.271245][ T9767] xt_SECMARK: invalid mode: 0
[  141.407423][ T9782] netlink: 'syz.2.1275': attribute type 23 has an invalid length.
[  141.526243][ T9791] tipc: Started in network mode
[  141.528220][ T9791] tipc: Node identity eac6a26d79ca, cluster identity 4711
[  141.536120][ T9791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.548493][ T9791] syzkaller0: Caught tx_queue_len zero misconfig
[  141.560826][ T9791] tipc: Resetting bearer <eth:syzkaller0>
[  141.616166][ T9795] xt_SECMARK: invalid mode: 0
[  141.667723][ T9792] IPv6: sit2: Disabled Multicast RS
[  141.755393][ T9801] vlan3: entered allmulticast mode
[  141.757136][ T9801] veth1: entered allmulticast mode
[  141.830201][ T9811] xt_SECMARK: invalid mode: 0
[  142.270836][ T9858] xt_SECMARK: invalid mode: 0
[  142.374506][ T9868] __nla_validate_parse: 21 callbacks suppressed
[  142.374516][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'.
[  142.380772][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'.
[  142.390137][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'.
[  142.393900][ T9868] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  142.397069][ T9868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.470854][ T9876] xt_SECMARK: invalid mode: 0
[  142.584671][   T24] tipc: Node number set to 2467078765
[  142.708153][ T9889] syzkaller1: entered promiscuous mode
[  142.710000][ T9889] syzkaller1: entered allmulticast mode
[  142.787285][ T9899] netlink: 'syz.1.1312': attribute type 1 has an invalid length.
[  142.795256][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  142.908780][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'.
[  143.009940][ T9919] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1320'.
[  143.731583][ T9948] team0: Port device gtp1 added
[  143.797105][ T9952] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  143.881547][ T9961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.886584][ T9956] syzkaller0: entered promiscuous mode
[  143.888391][ T9956] syzkaller0: entered allmulticast mode
[  143.900817][ T9956] tipc: Resetting bearer <eth:syzkaller0>
[  143.907065][ T9954] tipc: Resetting bearer <eth:syzkaller0>
[  143.916026][ T9954] tipc: Disabling bearer <eth:syzkaller0>
[  143.988993][ T9968] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.061024][ T9970] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1342'.
[  144.066155][ T9977] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1340'.
[  144.096453][ T9981] netlink: 'syz.0.1339': attribute type 1 has an invalid length.
[  144.101836][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'.
[  144.267929][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'.
[  144.331036][T10007] secmark_tg_check: 1 callbacks suppressed
[  144.331055][T10007] xt_SECMARK: invalid mode: 0
[  144.404445][T10011] macsec2: entered promiscuous mode
[  144.649746][T10040] netlink: 'syz.2.1353': attribute type 1 has an invalid length.
[  144.998830][T10069] netlink: 'syz.2.1367': attribute type 1 has an invalid length.
[  145.069452][T10083] xt_SECMARK: invalid mode: 0
[  145.159359][T10095] netlink: 'syz.0.1374': attribute type 11 has an invalid length.
[  145.284244][T10105] netlink: 'syz.0.1378': attribute type 1 has an invalid length.
[  145.314375][T10113] netlink: 'syz.2.1380': attribute type 1 has an invalid length.
[  145.339537][T10113] xt_CT: No such helper "snmp"
[  145.345899][T10113] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  145.371074][T10118] xt_SECMARK: invalid mode: 0
[  145.582699][T10144] xt_SECMARK: invalid mode: 0
[  145.787519][T10174] xt_SECMARK: invalid mode: 0
[  145.977629][T10186] veth5: entered promiscuous mode
[  146.013930][T10193] team0: Port device gtp1 removed
[  146.040632][T10199] xt_SECMARK: invalid mode: 0
[  146.122434][T10207] netlink: 'syz.2.1415': attribute type 5 has an invalid length.
[  146.243817][T10220] xt_SECMARK: invalid mode: 0
[  146.289531][T10222] netlink: 'syz.0.1421': attribute type 1 has an invalid length.
[  146.310741][T10222] bond4: entered promiscuous mode
[  146.312761][T10222] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.347868][T10225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.510281][T10240] xt_SECMARK: invalid mode: 0
[  146.858326][T10260] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  146.877724][T10263] xt_SECMARK: invalid mode: 0
[  146.924818][T10266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.148178][T10287] xt_SECMARK: invalid mode: 0
[  147.200666][T10290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.467791][T10317] netlink: 'syz.1.1455': attribute type 5 has an invalid length.
[  147.471342][T10317] netlink: 'syz.1.1455': attribute type 5 has an invalid length.
[  147.481176][T10321] __nla_validate_parse: 24 callbacks suppressed
[  147.481185][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'.
[  147.494321][T10321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.514071][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  147.565396][T10327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'.
[  147.572200][T10327] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  147.792888][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'.
[  147.906277][T10342] IPv6: sit2: Disabled Multicast RS
[  147.909524][T10342] sit2: entered allmulticast mode
[  147.954238][T10343] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  148.007801][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'.
[  148.011231][T10345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.117801][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'.
[  148.177770][T10354] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1471'.
[  148.209463][T10358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1473'.
[  148.212442][T10358] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1473'.
[  148.237863][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'.
[  148.241381][T10360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.781158][T10400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.807013][T10402] xt_policy: too many policy elements
[  149.159959][T10446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.362977][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.414767][T10470] secmark_tg_check: 4 callbacks suppressed
[  149.414783][T10470] xt_SECMARK: invalid mode: 0
[  149.530608][T10484] set match dimension is over the limit!
[  149.610543][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  149.616271][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  149.629650][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  149.741063][T10511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.820535][T10519] xt_SECMARK: invalid mode: 0
[  149.902598][   T33] audit: type=1800 audit(1753469470.203:3): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1531" name=33FFFF dev="tmpfs" ino=2591 res=0 errno=0
[  150.041390][T10546] validate_nla: 5 callbacks suppressed
[  150.041400][T10546] netlink: 'syz.0.1539': attribute type 1 has an invalid length.
[  150.061807][T10549] xt_SECMARK: invalid mode: 0
[  150.077373][T10546] xt_CT: No such helper "snmp"
[  150.081773][T10546] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  150.085881][T10546] tipc: Enabled bearer <udp:syz1>, priority 10
[  150.115489][T10555] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  150.278718][T10572] xt_SECMARK: invalid mode: 0
[  150.466276][T10590] netlink: 'syz.0.1557': attribute type 10 has an invalid length.
[  150.470274][T10590] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  150.472759][T10590] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  150.478558][T10590] batman_adv: batadv0: Adding interface: netdevsim0
[  150.480819][T10590] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.484760][T10594] xt_SECMARK: invalid mode: 0
[  150.490675][T10590] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  150.500314][T10592] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  150.505395][T10592] macvtap1: entered promiscuous mode
[  150.798050][T10625] netlink: 'syz.0.1569': attribute type 5 has an invalid length.
[  150.831703][T10628] netlink: 'syz.1.1570': attribute type 1 has an invalid length.
[  151.064702][T10636] tipc: Resetting bearer <eth:syzkaller0>
[  151.066760][T10636] syzkaller0: left promiscuous mode
[  151.068421][T10636] syzkaller0: left allmulticast mode
[  151.070828][T10636] hsr1: left allmulticast mode
[  151.072408][T10636] syz_tun: left allmulticast mode
[  151.075394][T10636] batadv_slave_0: left allmulticast mode
[  151.078974][T10636] vlan3: left allmulticast mode
[  151.080596][T10636] veth1: left allmulticast mode
[  151.086006][T10636] macvtap1: left promiscuous mode
[  151.103278][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.110812][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.118645][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.121829][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.181106][T10659] netlink: 'syz.0.1580': attribute type 4 has an invalid length.
[  151.203357][   T10] tipc: Node number set to 1938757990
[  151.328864][T10675] netlink: 'syz.1.1586': attribute type 1 has an invalid length.
[  151.557622][T10696] bridge_slave_0: left allmulticast mode
[  151.560070][T10696] bridge_slave_0: left promiscuous mode
[  151.562678][T10696] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.570339][T10696] bridge_slave_1: left allmulticast mode
[  151.572411][T10696] bridge_slave_1: left promiscuous mode
[  151.576878][T10696] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.588912][T10696] bond0: (slave 77): Releasing backup interface
[  151.594881][T10696] bond0: (slave bond_slave_1): Releasing backup interface
[  151.602675][T10696] team0: Port device team_slave_1 removed
[  151.605376][T10696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.610597][T10696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.614674][T10696] macsec0: left allmulticast mode
[  151.617674][T10696] macsec0: left promiscuous mode
[  151.620850][T10696] bridge0: port 3(macsec0) entered disabled state
[  151.633956][T10696] batman_adv: batadv0: Removing interface: netdevsim0
[  151.638898][T10696] bond0: (slave wlan1): Releasing backup interface
[  151.644043][T10696] bond1: (slave bond2): Releasing active interface
[  151.866184][T10715] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  151.876817][T10715] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  151.904219][T10719] tipc: Enabled bearer <eth:caif0>, priority 10
[  152.000782][T10725] syz_tun (unregistering): left promiscuous mode
[  152.019764][T10727] netlink: 'syz.0.1605': attribute type 4 has an invalid length.
[  152.032256][T10727] netlink: 'syz.0.1605': attribute type 4 has an invalid length.
[  152.156628][T10733] xt_time: invalid argument - start or stop time greater than 23:59:59
[  152.571171][T10769] __nla_validate_parse: 24 callbacks suppressed
[  152.571181][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1620'.
[  152.650659][T10773] IPVS: Unknown mcast interface: pimreg1
[  152.656271][T10773] sit2: entered promiscuous mode
[  152.785188][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  152.844214][T10789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'.
[  152.847623][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'.
[  152.973819][T10796] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.976878][T10796] 8021q: adding VLAN 0 to HW filter on device team0
[  152.982682][T10796] net_ratelimit: 2 callbacks suppressed
[  152.982688][T10796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.025026][T10802] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  153.126234][T10810] siw: device registration error -23
[  153.130122][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'.
[  153.135966][T10810] wg1: entered promiscuous mode
[  153.137806][T10810] wg1: entered allmulticast mode
[  153.202268][T10814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.206742][T10814] syzkaller0: entered promiscuous mode
[  153.208748][T10814] syzkaller0: entered allmulticast mode
[  153.383977][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  153.501912][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1645'.
[  153.728317][T10856] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  153.849648][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1656'.
[  154.084923][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  154.173479][T10897] batadv_slave_1: entered promiscuous mode
[  154.177852][T10896] batadv_slave_1: left promiscuous mode
[  154.293065][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1672'.
[  154.466069][T10924] syzkaller0: entered promiscuous mode
[  154.468165][T10924] syzkaller0: entered allmulticast mode
[  154.555359][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1679'.
[  154.795725][T10959] syzkaller1: entered promiscuous mode
[  154.797649][T10959] syzkaller1: entered allmulticast mode
[  154.941218][T10974] syzkaller0: entered promiscuous mode
[  154.943924][T10974] syzkaller0: entered allmulticast mode
[  154.979047][T10974] openvswitch: netlink: Flow key attr not present in new flow.
[  156.388273][T11022] IPVS: Scheduler module ip_vs_sip not found
[  156.564614][ T5700] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  157.667974][T11072] vlan0: entered promiscuous mode
[  157.670080][T11072] bond0: entered promiscuous mode
[  157.672480][T11072] vlan0: entered allmulticast mode
[  157.690164][T11072] bond0: entered allmulticast mode
[  157.721483][T11085] __nla_validate_parse: 10 callbacks suppressed
[  157.721500][T11085] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1736'.
[  157.811390][ T5839] Bluetooth: hci2: link tx timeout
[  157.816920][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.885597][T11095] validate_nla: 4 callbacks suppressed
[  157.885616][T11095] netlink: 'syz.1.1738': attribute type 4 has an invalid length.
[  157.892730][T11095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1738'.
[  157.898467][T11095] : renamed from bond0
[  157.935026][T11101] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  158.030362][T11105] geneve0: entered promiscuous mode
[  158.033754][ T5700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.037621][ T5700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.042156][ T5700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.051565][ T5700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.053307][T11201] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  159.057847][T11201] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  159.135567][ T5221] Bluetooth: hci2: link tx timeout
[  159.137259][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  159.151781][T11214] openvswitch: netlink: IP tunnel dst address not specified
[  159.160156][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'.
[  159.226451][T11218] netlink: 'syz.2.1761': attribute type 4 has an invalid length.
[  159.229042][T11218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1761'.
[  159.243888][T11218] : renamed from bond0 (while UP)
[  159.388905][T11242] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  159.561326][T11249] macvtap0: entered allmulticast mode
[  159.564141][T11249] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  159.755334][T11259] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1781'.
[  159.913436][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  160.000103][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'.
[  160.047191][T11286] netlink: 'syz.2.1788': attribute type 1 has an invalid length.
[  160.050987][T11286] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1788'.
[  160.675364][T11321] netlink: 'syz.1.1801': attribute type 29 has an invalid length.
[  160.678919][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1801'.
[  160.720612][T11325] netlink: 'syz.1.1802': attribute type 1 has an invalid length.
[  160.737848][T11325] bond0: entered promiscuous mode
[  160.739924][T11325] bond0: entered allmulticast mode
[  160.742400][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'.
[  160.753020][T11325] bridge3: the hash_elasticity option has been deprecated and is always 16
[  160.757994][T11325] bond0: (slave bridge3): making interface the new active one
[  160.760588][T11325] bridge3: entered promiscuous mode
[  160.762604][T11325] bridge3: entered allmulticast mode
[  160.765494][T11325] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  160.964421][T11338] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  161.007032][T11340] No such timeout policy "syz1"
[  161.125761][T11357] xt_recent: Unsupported userspace flags (00000048)
[  161.216729][T11365] IPVS: set_ctl: invalid protocol: 2 172.30.1.3:20003
[  161.222309][ T9773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.225694][ T9773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.238846][T11363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.433412][ T5839] Bluetooth: hci0: command tx timeout
[  161.837031][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'.
[  161.908116][T11380] ==================================================================
[  161.910820][T11380] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  161.913449][T11380] Read of size 1 at addr ffff8881102ca730 by task syz.2.1824/11380
[  161.916739][T11380] 
[  161.917526][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.2.1824 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  161.917538][T11380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.917546][T11380] Call Trace:
[  161.917551][T11380]  <TASK>
[  161.917555][T11380]  dump_stack_lvl+0x189/0x250
[  161.917571][T11380]  ? __virt_addr_valid+0x1c8/0x5c0
[  161.917584][T11380]  ? rcu_is_watching+0x15/0xb0
[  161.917595][T11380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.917604][T11380]  ? rcu_is_watching+0x15/0xb0
[  161.917614][T11380]  ? lock_release+0x4b/0x3e0
[  161.917623][T11380]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  161.917636][T11380]  ? __virt_addr_valid+0x1c8/0x5c0
[  161.917645][T11380]  ? __virt_addr_valid+0x4a5/0x5c0
[  161.917654][T11380]  print_report+0xca/0x230
[  161.917662][T11380]  ? __xfrm_state_insert+0x8af/0x1450
[  161.917670][T11380]  kasan_report+0x118/0x150
[  161.917682][T11380]  ? __xfrm_state_insert+0x8af/0x1450
[  161.917692][T11380]  __xfrm_state_insert+0x8af/0x1450
[  161.917700][T11380]  ? xfrm_state_insert+0x44/0x60
[  161.917709][T11380]  xfrm_state_insert+0x54/0x60
[  161.917717][T11380]  ipcomp6_init_state+0x655/0x900
[  161.917731][T11380]  __xfrm_init_state+0xa76/0x13f0
[  161.917739][T11380]  ? __xfrm_init_state+0x7ef/0x13f0
[  161.917747][T11380]  xfrm_add_sa+0x2f5b/0x4070
[  161.917756][T11380]  ? __pfx_xfrm_add_sa+0x10/0x10
[  161.917767][T11380]  ? apparmor_capable+0x137/0x1b0
[  161.917779][T11380]  ? __nla_parse+0x40/0x60
[  161.917789][T11380]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.917797][T11380]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.917809][T11380]  ? __mutex_trylock_common+0x153/0x260
[  161.917820][T11380]  ? __pfx___mutex_trylock_common+0x10/0x10
[  161.917832][T11380]  ? rcu_is_watching+0x15/0xb0
[  161.917841][T11380]  ? trace_contention_end+0x39/0x120
[  161.917851][T11380]  netlink_rcv_skb+0x208/0x470
[  161.917861][T11380]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.917870][T11380]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.917880][T11380]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.917887][T11380]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.917894][T11380]  xfrm_netlink_rcv+0x79/0x90
[  161.917902][T11380]  netlink_unicast+0x82f/0x9e0
[  161.917914][T11380]  ? __pfx_netlink_unicast+0x10/0x10
[  161.917925][T11380]  ? netlink_sendmsg+0x642/0xb30
[  161.917932][T11380]  ? skb_put+0x11b/0x210
[  161.917940][T11380]  netlink_sendmsg+0x805/0xb30
[  161.917949][T11380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.917957][T11380]  ? aa_sock_msg_perm+0x94/0x160
[  161.917964][T11380]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.917973][T11380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.917980][T11380]  __sock_sendmsg+0x21c/0x270
[  161.917992][T11380]  ____sys_sendmsg+0x505/0x830
[  161.918001][T11380]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.918011][T11380]  ? import_iovec+0x74/0xa0
[  161.918022][T11380]  ___sys_sendmsg+0x21f/0x2a0
[  161.918031][T11380]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.918045][T11380]  ? __fget_files+0x2a/0x420
[  161.918051][T11380]  ? __fget_files+0x3a0/0x420
[  161.918058][T11380]  __x64_sys_sendmsg+0x19b/0x260
[  161.918067][T11380]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.918077][T11380]  ? rcu_is_watching+0x15/0xb0
[  161.918086][T11380]  ? do_syscall_64+0xbe/0x3b0
[  161.918095][T11380]  do_syscall_64+0xfa/0x3b0
[  161.918102][T11380]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.918109][T11380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.918117][T11380]  ? exc_page_fault+0x9f/0xf0
[  161.918123][T11380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.918131][T11380] RIP: 0033:0x7f7bf958e9a9
[  161.918139][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.918146][T11380] RSP: 002b:00007f7bfa32d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.918155][T11380] RAX: ffffffffffffffda RBX: 00007f7bf97b5fa0 RCX: 00007f7bf958e9a9
[  161.918160][T11380] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  161.918165][T11380] RBP: 00007f7bf9610d69 R08: 0000000000000000 R09: 0000000000000000
[  161.918170][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.918174][T11380] R13: 0000000000000000 R14: 00007f7bf97b5fa0 R15: 00007ffe1f526478
[  161.918181][T11380]  </TASK>
[  161.918184][T11380] 
[  162.057152][T11380] Allocated by task 9147:
[  162.059039][T11380]  kasan_save_track+0x3e/0x80
[  162.061069][T11380]  __kasan_slab_alloc+0x6c/0x80
[  162.063124][T11380]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  162.065347][T11380]  xfrm_state_alloc+0x24/0x2f0
[  162.067447][T11380]  __find_acq_core+0x8a7/0x1c00
[  162.069530][T11380]  xfrm_find_acq+0x78/0xa0
[  162.071435][T11380]  xfrm_alloc_userspi+0x6b3/0xc90
[  162.073645][T11380]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.075742][T11380]  netlink_rcv_skb+0x208/0x470
[  162.077796][T11380]  xfrm_netlink_rcv+0x79/0x90
[  162.079874][T11380]  netlink_unicast+0x82f/0x9e0
[  162.081959][T11380]  netlink_sendmsg+0x805/0xb30
[  162.084055][T11380]  __sock_sendmsg+0x21c/0x270
[  162.086032][T11380]  ____sys_sendmsg+0x505/0x830
[  162.088113][T11380]  ___sys_sendmsg+0x21f/0x2a0
[  162.090126][T11380]  __x64_sys_sendmsg+0x19b/0x260
[  162.092274][T11380]  do_syscall_64+0xfa/0x3b0
[  162.094251][T11380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.096777][T11380] 
[  162.097786][T11380] Freed by task 47:
[  162.099344][T11380]  kasan_save_track+0x3e/0x80
[  162.100947][T11380]  kasan_save_free_info+0x46/0x50
[  162.102661][T11380]  __kasan_slab_free+0x62/0x70
[  162.104302][T11380]  kmem_cache_free+0x18f/0x400
[  162.105973][T11380]  xfrm_state_gc_task+0x518/0x6a0
[  162.107694][T11380]  process_scheduled_works+0xae1/0x17b0
[  162.109604][T11380]  worker_thread+0x8a0/0xda0
[  162.111169][T11380]  kthread+0x711/0x8a0
[  162.112531][T11380]  ret_from_fork+0x3fc/0x770
[  162.114403][T11380]  ret_from_fork_asm+0x1a/0x30
[  162.116258][T11380] 
[  162.117089][T11380] The buggy address belongs to the object at ffff8881102ca400
[  162.117089][T11380]  which belongs to the cache xfrm_state of size 928
[  162.121586][T11380] The buggy address is located 816 bytes inside of
[  162.121586][T11380]  freed 928-byte region [ffff8881102ca400, ffff8881102ca7a0)
[  162.126311][T11380] 
[  162.127139][T11380] The buggy address belongs to the physical page:
[  162.129316][T11380] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881102c8480 pfn:0x1102c8
[  162.132662][T11380] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  162.136111][T11380] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  162.139072][T11380] page_type: f5(slab)
[  162.140456][T11380] raw: 057ff00000000040 ffff888105029780 0000000000000000 0000000000000001
[  162.143398][T11380] raw: ffff8881102c8480 00000000000e0008 00000000f5000000 0000000000000000
[  162.146340][T11380] head: 057ff00000000040 ffff888105029780 0000000000000000 0000000000000001
[  162.149540][T11380] head: ffff8881102c8480 00000000000e0008 00000000f5000000 0000000000000000
[  162.153155][T11380] head: 057ff00000000002 ffffea000440b201 00000000ffffffff 00000000ffffffff
[  162.156757][T11380] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  162.160443][T11380] page dumped because: kasan: bad access detected
[  162.163157][T11380] page_owner tracks the page as allocated
[  162.165626][T11380] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6057, tgid 6056 (syz.0.34), ts 59216482960, free_ts 59210141139
[  162.173442][T11380]  post_alloc_hook+0x240/0x2a0
[  162.175480][T11380]  get_page_from_freelist+0x21e4/0x22c0
[  162.177847][T11380]  __alloc_frozen_pages_noprof+0x181/0x370
[  162.180268][T11380]  alloc_pages_mpol+0x232/0x4a0
[  162.182290][T11380]  allocate_slab+0x8a/0x3b0
[  162.184136][T11380]  ___slab_alloc+0xbfc/0x1480
[  162.186176][T11380]  kmem_cache_alloc_noprof+0x283/0x3c0
[  162.188448][T11380]  xfrm_state_alloc+0x24/0x2f0
[  162.190017][T11380]  xfrm_add_sa+0x17d1/0x4070
[  162.191532][T11380]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.193264][T11380]  netlink_rcv_skb+0x208/0x470
[  162.195209][T11380]  xfrm_netlink_rcv+0x79/0x90
[  162.197123][T11380]  netlink_unicast+0x82f/0x9e0
[  162.198732][T11380]  netlink_sendmsg+0x805/0xb30
[  162.200305][T11380]  __sock_sendmsg+0x21c/0x270
[  162.201801][T11380]  ____sys_sendmsg+0x505/0x830
[  162.203380][T11380] page last free pid 5281 tgid 5281 stack trace:
[  162.205524][T11380]  __free_frozen_pages+0xc71/0xe70
[  162.207221][T11380]  __put_partials+0x161/0x1c0
[  162.208781][T11380]  put_cpu_partial+0x17c/0x250
[  162.210345][T11380]  __slab_free+0x2f7/0x400
[  162.211804][T11380]  qlist_free_all+0x97/0x140
[  162.213286][T11380]  kasan_quarantine_reduce+0x148/0x160
[  162.215130][T11380]  __kasan_slab_alloc+0x22/0x80
[  162.216685][T11380]  __kmalloc_cache_noprof+0x1be/0x3d0
[  162.218415][T11380]  kernfs_fop_open+0x397/0xca0
[  162.220001][T11380]  do_dentry_open+0xdf3/0x1970
[  162.221593][T11380]  vfs_open+0x3b/0x340
[  162.222912][T11380]  path_openat+0x2ee5/0x3830
[  162.224625][T11380]  do_filp_open+0x1fa/0x410
[  162.226085][T11380]  do_sys_openat2+0x121/0x1c0
[  162.227644][T11380]  __x64_sys_openat+0x138/0x170
[  162.229234][T11380]  do_syscall_64+0xfa/0x3b0
[  162.230749][T11380] 
[  162.231550][T11380] Memory state around the buggy address:
[  162.233541][T11380]  ffff8881102ca600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.236771][T11380]  ffff8881102ca680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.239362][T11380] >ffff8881102ca700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  162.241970][T11380]                                      ^
[  162.243833][T11380]  ffff8881102ca780: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  162.246790][T11380]  ffff8881102ca800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  162.249328][T11380] ==================================================================
[  162.252180][T11380] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  162.254529][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.2.1824 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  162.258584][T11380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.261886][T11380] Call Trace:
[  162.263036][T11380]  <TASK>
[  162.264281][T11380]  dump_stack_lvl+0x99/0x250
[  162.266004][T11380]  ? __asan_memcpy+0x40/0x70
[  162.267808][T11380]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.269900][T11380]  ? __pfx__printk+0x10/0x10
[  162.271385][T11380]  panic+0x2db/0x790
[  162.272656][T11380]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.274695][T11380]  ? __pfx_panic+0x10/0x10
[  162.276431][T11380]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  162.278938][T11380]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.281404][T11380]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.283892][T11380]  ? __xfrm_state_insert+0x8af/0x1450
[  162.286156][T11380]  check_panic_on_warn+0x89/0xb0
[  162.287945][T11380]  ? __xfrm_state_insert+0x8af/0x1450
[  162.289771][T11380]  end_report+0x78/0x160
[  162.291158][T11380]  kasan_report+0x129/0x150
[  162.292749][T11380]  ? __xfrm_state_insert+0x8af/0x1450
[  162.294976][T11380]  __xfrm_state_insert+0x8af/0x1450
[  162.296865][T11380]  ? xfrm_state_insert+0x44/0x60
[  162.298469][T11380]  xfrm_state_insert+0x54/0x60
[  162.300080][T11380]  ipcomp6_init_state+0x655/0x900
[  162.301810][T11380]  __xfrm_init_state+0xa76/0x13f0
[  162.303904][T11380]  ? __xfrm_init_state+0x7ef/0x13f0
[  162.306083][T11380]  xfrm_add_sa+0x2f5b/0x4070
[  162.308104][T11380]  ? __pfx_xfrm_add_sa+0x10/0x10
[  162.310178][T11380]  ? apparmor_capable+0x137/0x1b0
[  162.312236][T11380]  ? __nla_parse+0x40/0x60
[  162.314184][T11380]  xfrm_user_rcv_msg+0x7a3/0xab0
[  162.316323][T11380]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  162.318480][T11380]  ? __mutex_trylock_common+0x153/0x260
[  162.320784][T11380]  ? __pfx___mutex_trylock_common+0x10/0x10
[  162.323303][T11380]  ? rcu_is_watching+0x15/0xb0
[  162.325245][T11380]  ? trace_contention_end+0x39/0x120
[  162.327527][T11380]  netlink_rcv_skb+0x208/0x470
[  162.329589][T11380]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  162.331552][T11380]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.333436][T11380]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.335137][T11380]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.336998][T11380]  xfrm_netlink_rcv+0x79/0x90
[  162.338570][T11380]  netlink_unicast+0x82f/0x9e0
[  162.340652][T11380]  ? __pfx_netlink_unicast+0x10/0x10
[  162.342937][T11380]  ? netlink_sendmsg+0x642/0xb30
[  162.344917][T11380]  ? skb_put+0x11b/0x210
[  162.346619][T11380]  netlink_sendmsg+0x805/0xb30
[  162.348618][T11380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.350850][T11380]  ? aa_sock_msg_perm+0x94/0x160
[  162.352974][T11380]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.355131][T11380]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.357328][T11380]  __sock_sendmsg+0x21c/0x270
[  162.359355][T11380]  ____sys_sendmsg+0x505/0x830
[  162.361393][T11380]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.363627][T11380]  ? import_iovec+0x74/0xa0
[  162.365588][T11380]  ___sys_sendmsg+0x21f/0x2a0
[  162.367642][T11380]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.369818][T11380]  ? __fget_files+0x2a/0x420
[  162.371614][T11380]  ? __fget_files+0x3a0/0x420
[  162.373371][T11380]  __x64_sys_sendmsg+0x19b/0x260
[  162.375309][T11380]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.377080][T11380]  ? rcu_is_watching+0x15/0xb0
[  162.378707][T11380]  ? do_syscall_64+0xbe/0x3b0
[  162.380483][T11380]  do_syscall_64+0xfa/0x3b0
[  162.382435][T11380]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.384453][T11380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.386633][T11380]  ? exc_page_fault+0x9f/0xf0
[  162.388146][T11380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.390081][T11380] RIP: 0033:0x7f7bf958e9a9
[  162.391555][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.397691][T11380] RSP: 002b:00007f7bfa32d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.400923][T11380] RAX: ffffffffffffffda RBX: 00007f7bf97b5fa0 RCX: 00007f7bf958e9a9
[  162.403869][T11380] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  162.406440][T11380] RBP: 00007f7bf9610d69 R08: 0000000000000000 R09: 0000000000000000
[  162.409067][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.412318][T11380] R13: 0000000000000000 R14: 00007f7bf97b5fa0 R15: 00007ffe1f526478
[  162.415701][T11380]  </TASK>
[  162.417906][T11380] Kernel Offset: disabled
[  162.419795][T11380] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:51:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012ce RDI=00000000000012cf RBP=00000000000003f8 RSP=ffffc90002dbe9f0
R8 =ffff888108b88237 R9 =1ffff11021171046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8c9 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7bfa32d6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004980 CR3=000000003f70c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7bf9786478 00007f7bf9786450 XMM03=00007f7bf9786488 00007f7bf9786480
XMM04=00007f7bfa2ed100 00007f7bf9786440 XMM05=00007f7bf9786458 00007f7bf97864a0
XMM06=00007f7bf9786498 00007f7bf9786490 XMM07=00007f7bf9786488 00007f7bf9786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7bf9611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000cf RBX=0000000000000001 RCX=0000000033fecab0 RDX=000000003228a068
RSI=00000000b76bc2bd RDI=ffff88810068d640 RBP=0000000000000000 RSP=ffffc900001b7678
R8 =0000000000000000 R9 =ffffffff822a36f6 R10=dffffc0000000000 R11=ffffffff8239c8f0
R12=0000000092903d50 R13=ffff88810068e130 R14=ffff88810068e158 R15=5aaec2b733fecab0
RIP=ffffffff819e46d9 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f895b9802d8 CR3=0000000117ef6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff00000098 00000000000001c8 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000031000000005 000001c800000130 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f895b811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
