last executing test programs:

760.61125ms ago: executing program 2 (id=6493):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)="e9be026b531d5bd34067c8b60d1a6e6dca638c6d9507c301a471b5d77a85d6eef5d566c391a4d9748f019181dd0e554ddc2efd4363e89df2e70bb1609114d7065cadcaa817130f4e4a72d33218ca3bea85adfcf713cf51da554588fd4b1ddd85797400811bcb64eed3f32de7e5bac1da18c5278e7aabb583b8e5", 0x7a}, 0x1, 0x0, 0x0, 0x24040001}, 0x20044806)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="080000fa0000", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a0014000180c200000e00000800090000000000"], 0x48}}, 0x4000)

679.949187ms ago: executing program 2 (id=6495):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000040f500000061143c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x901, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

608.732763ms ago: executing program 2 (id=6498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24040094)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socketpair(0x26, 0x4, 0x3, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x108, 0x248, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@mh={{0x28}, {"e51f"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x5, 0x1}, {0x1, 0x2, 0x4}, {0x2, 0x5, 0x4}, 0x2}}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ah={{0x30}, {[0x4d5, 0x4d5], 0x9, 0x2, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffff, 0x8274, 0x8, 0x7, 0xfffffffd, 0x9, 0xc, 0x3]}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffff00], 'team0\x00', 'pimreg\x00', {}, {}, 0x3c, 0x5, 0x1, 0x2}, 0x0, 0x128, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0xc, 0x7f, 0x5, 0x0, 0x202, 0x481}}, @common=@inet=@set4={{0x50}, {{0x4, 0x3, 0x7}, {{0x7}, 0xe}, {{0x7}, 0x3}, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf9, 0x0, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x10000145}}], 0x48}, 0xd000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet6(0xa, 0x80002, 0x8000)
setsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="2e000000010002", 0x7)

603.759283ms ago: executing program 1 (id=6499):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4000000, [{0x0, 0x1, 0x101}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x28)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400284000000800000232"], 0x20, 0x2400e054}, 0x44)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = accept4$unix(r2, &(0x7f0000000440)=@abs, &(0x7f0000000280)=0x6e, 0x80000)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4)
syz_emit_ethernet(0x118, &(0x7f0000000140)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x2c, 0x4, 0x3, 0x3, 0x10a, 0x65, 0x0, 0x4, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x82, 0xd, "fde44ee7ec4ea389696209"}, @lsrr={0x83, 0x7, 0x56, [@local]}, @lsrr={0x83, 0x3, 0x30}, @ssrr={0x89, 0xb, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ssrr={0x89, 0x17, 0x16, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @broadcast, @rand_addr=0x64010100, @remote]}, @generic={0x94, 0xa, "5972389a9764d8d3"}, @cipso={0x86, 0x35, 0x3, [{0x7, 0xf, "7286ee0a87c914a2efee0ff705"}, {0x5, 0x10, "e2440090c0fa1aea3e6d20e155a7"}, {0x0, 0x6, "a4425658"}, {0x1, 0xa, "59a45ed63216e220"}]}, @lsrr={0x83, 0x23, 0xd, [@rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x4e22, 0x4e22, 0x5a, 0x0, @wg=@data={0x4, 0x3, 0x3, "5894638010ca5b5415283b6b6b6accac53ee892b1552d0901fbf207e1b99642b2c721bd6ebdf73e5aaaa01c552cd61960968080f14d5b8cd32cc5a1a5a35ff6f27a0"}}}}}}, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109d000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
pwrite64(r0, &(0x7f00000000c0)="81ab31b6671d8bc711435db02eebec60c1a8ed857640d52dc7539a3bdc4b4aead10ecb350992ce1ad56d9d8dcf74b5f7e46b88e452088bf398dec5080cb09c89342a9405528f40bcf803309acd01a0e4e5fe2a1655be707e212f662671ec726cf01db6202b81ef0e5645c982117f", 0x6e, 0x6)
sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4a1d, 0x5, @remote, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002280)='I', 0x1}], 0x1}, 0x200000c0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4000000, [{0x0, 0x1, 0x101}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x28) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400284000000800000232"], 0x20, 0x2400e054}, 0x44) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async)
accept4$unix(r2, &(0x7f0000000440)=@abs, &(0x7f0000000280)=0x6e, 0x80000) (async)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4) (async)
syz_emit_ethernet(0x118, &(0x7f0000000140)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x2c, 0x4, 0x3, 0x3, 0x10a, 0x65, 0x0, 0x4, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x82, 0xd, "fde44ee7ec4ea389696209"}, @lsrr={0x83, 0x7, 0x56, [@local]}, @lsrr={0x83, 0x3, 0x30}, @ssrr={0x89, 0xb, 0xda, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ssrr={0x89, 0x17, 0x16, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @broadcast, @rand_addr=0x64010100, @remote]}, @generic={0x94, 0xa, "5972389a9764d8d3"}, @cipso={0x86, 0x35, 0x3, [{0x7, 0xf, "7286ee0a87c914a2efee0ff705"}, {0x5, 0x10, "e2440090c0fa1aea3e6d20e155a7"}, {0x0, 0x6, "a4425658"}, {0x1, 0xa, "59a45ed63216e220"}]}, @lsrr={0x83, 0x23, 0xd, [@rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {0x4e22, 0x4e22, 0x5a, 0x0, @wg=@data={0x4, 0x3, 0x3, "5894638010ca5b5415283b6b6b6accac53ee892b1552d0901fbf207e1b99642b2c721bd6ebdf73e5aaaa01c552cd61960968080f14d5b8cd32cc5a1a5a35ff6f27a0"}}}}}}, 0x0) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xb, 0xfb6}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109d000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
pwrite64(r0, &(0x7f00000000c0)="81ab31b6671d8bc711435db02eebec60c1a8ed857640d52dc7539a3bdc4b4aead10ecb350992ce1ad56d9d8dcf74b5f7e46b88e452088bf398dec5080cb09c89342a9405528f40bcf803309acd01a0e4e5fe2a1655be707e212f662671ec726cf01db6202b81ef0e5645c982117f", 0x6e, 0x6) (async)
sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4a1d, 0x5, @remote, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002280)='I', 0x1}], 0x1}, 0x200000c0) (async)

535.748418ms ago: executing program 2 (id=6501):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3)
sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000fedbdf251300000006000800000000000600080064ff00000c0009000201aaaaaaaaaaaa050003000100000005000300fa0000000c00090000000000000000000c0009000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x28005}, 0x10000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0)

533.210018ms ago: executing program 1 (id=6503):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000120010000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb00ffffffffffffff80000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000600000003834fd81d166017e0db9a200000000c538c7cb7a1c000400027fb259788e0ba6da05d083db4f958474bdd61ee1e97bd6646c016e042aee5cf952d278c9383e57bf82802d238db735ffd933a02b9bf69617c78ffcf9626c3706ca7dfe19a22419d017519eb853ed221d6ed37044ca2f582bd3612471e61cd901d42bdc04c355a1f9e0021f5b0ddbc0ba9d9a51af772e4e7932b0de5031c35814837f0f9704f68642f5046fe90a2df57aab17e05ed84954669019d001750185965ee5a2f83fb4928a88786f6804d4f3e589d344432263d0"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

459.0864ms ago: executing program 1 (id=6504):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
r1 = socket(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001f40)={0x0, r1}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x80087601, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001f00)={&(0x7f0000000340), 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x58, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x638, 0x1a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1c6693cbfe38aae4a4ba9af77f"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040880}, 0x8884)
bind$llc(r0, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x19d0, r11, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x19bc, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@challenge={0x10, 0x1, 0x96}]}, @NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_chsw={0x76, 0x6, {0x3, 0x7f, 0x2e, 0x1}}]}, @NL80211_ATTR_PROBE_RESP={0x888, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@mic={0x8c, 0x18, {0xe0b, "a90020000061", @long="b72734a874bee55f2b6ce270f79c846b"}}]}, @NL80211_ATTR_BEACON_HEAD={0x298, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_b, @initial, {0x3, 0x9}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xf8, @default, 0x4800, @void, @val, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0xca}, @val={0x5, 0xf3, {0x20, 0xee, 0x1, "c24142eef810ace4116be57c5e19ede27d73f0aa9772b579525d914101d36931a90aba0601c1328047e72d6b62933269eb7f67a49b755617b5a1d165b49e7b959ff87d19b5e3df0416b721e7bbdc526e6b852bb5608371ad1760957865f448f8e664931d0be16dc931bb6b9837a54fabc241db0030bc0c70772e3e8780bc76d21896b10fdbcf47a3742164a3b5345d90366ba466b265655b27110cb38510444ca2847b74296c95a5f3fac29beba8a52e7f801d37bcd76d6b6a930ba3c2afd4aa54207f7d9c69245e9eb5b4b6e4c7e394fef0d052a6a130f52eba1ad7e4d67556594d6f6bb7387877f751ff69369e11a1"}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x3, 0x0, {0x0, 0x7, 0x0, 0x8, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x2, 0x2}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x50, "fe7c15e3afd03701d660bd3845a0d4f6c3f044825c7ad2980afbf7ae01e84ee72b61a6e2811cc1879a11165995e213ac2738a4bd5f42427a1b2c0b8873925bc435cb5a3f3b15dcee66025fe668352be6"}, {0xdd, 0xf6, "867c71c2701aeb1aeef915f60d986f847c0929abfb3f0a7f4f180bcb1a0edf3688b474aa4c04a2073aad2b9ea57eedbc8b73072c635ecb5d6470e06eb42e2e5dc8649ea2780036104257c750eaf4d6680a767f1d395f4190042f67a522f368167b5ca58e8bf9cbf8a9d5ecfdf45783e6657837a7c78d9df96a49ae05e0d17f63f9d6770c1bac8f299c55c3074dcfdfc59a56915076e7346ee110e2e3bcfb86fee34b7f211feecaca4d6c6beb842bbc25722fdb6e99bd032256f111f764ba0e28f9f41ab6b460ef4da0b5b9917f8e35a5bdd5ba0c1499dd6428570ba255e8ec94262968492cea2d448044154ab8479d8ebb720113a72f"}]}}, @NL80211_ATTR_BEACON_TAIL={0x3f, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x1, 0xf8, 0x10}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x7, 0xb, @device_b, 0x581f2db9, @value, 0x3, 0x10000, @device_a, 0xffffff20}}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0xffff, 0x8, 0x7, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x4]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0x3, 0x22, "7f9b8f1b8b51e3c81e6fa933dd92b27c13f0fecbbaa63874249d3ecc0a25b2b632b3"}, @cf={0x4, 0x6, {0x9, 0x4, 0x9a15, 0x9}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x193, 0x2a, [@challenge={0x10, 0x1, 0xc0}, @random_vendor={0xdd, 0x9b, "2f0df08ffc592f8ef40d24687a9a6e27e423d08bff15bc70751136cdbe34fc2444d375bf5c5d6a6f4d2f554a3ef00e25060e05ee884be8415dce5ed94a8c6dae071278db8e7074dc84d1d278799123c6c27e1cfb1b112ab3e5c54119ff7472dceada3498dd7537a96d80c4a457feca4fca93bc145389f68f3cb6d455e34cce9c9cea694d4b1b4c3090492909baf16fd7eead86e33c14f7ca099319"}, @channel_switch={0x25, 0x3, {0x0, 0xad, 0x9d}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x0, 0x20}}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xd1, "f51ff4c269d2940582738e67135a2da02e88b666b0dc894e03e91c1989f074e54354fd72083054ffa772597648d5cfc9840eef9bf515409f792dc009e685c6b49c375c9acb830558dd4eac94aafa4dfce98c88067b73f97c22812c233ae563aba02e142747cc7f83a709fbd63db9ee30edbbd5752cd4d11bf0035510e78a3bcbeda1651ed06958b11c155ea8bb536ca8c00978ed30358fab4a1d399eac4ab1b700a9dc52f855ccf4ac54421a9d2d89a22007a3946daa38880ba288b47b0f40fd6807f8e1fd0e27fd977dc578e7609ff2ec"}, @dsss={0x3, 0x1, 0x83}]}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x2f1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x3, 0xff}, @value=@ver_80211n={0x0, 0x883, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x1, @default, 0x8211, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x6}, {0x48}, {0x60, 0x1}, {0x12}, {0x4}]}, @void, @void, @val={0x6, 0x2, 0x9}, @val={0x5, 0xbb, {0x2, 0x5a, 0x0, "a40fde8e5ebf2204e6f4a495c9761fe3c27a9de397bec3f9c70f21273589d22155e41c1c8e73c9505d2cc7e06f676220a209e0872263403b652ab2b8ae7d2dac4fe0c75df19054921901ddf0dba8c140b94bb51a96c27e637fd3ca7cfe8a9d26d0ed8b5dedeed2494dfd5b23e4c1a56cc0fb148b3e507696b01cbdb9e75058b8c54941633c33b6c8a2df199ff07d97847726ae9fe6239f0d9e97db997522f94d57f93c95b9f141b454dbd9cf8ab98ab856c09b772db30c69"}}, @val={0x25, 0x3, {0x1, 0x3c, 0x6}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x98, "b59bd700eeddd1bbc3ae7231bf7ea9ebc87344af6fa837340696bf58ddb72815376cac6bb6aee141a17e56ff255e36741a0618ebe634ad73ccc7639efa692164a0c4986f9f8d171af8ce2b3cd84d77dbfb7725b85123f0657ea64fe34b7cb838787a07eefd4d6d6d86b0e520af70efdb6064b3fb1d10ca84827ca766f01f26ba7f094230ede67a87fd44ec653ada6b349d97e1d92b12bf5d"}, {0xdd, 0x59, "4839b6d3703efbb9f92eb0037f0b8cda53966bf62085b4fc56578aea041c0d9239f569ddf87ce21e022b18adb6075ce5b52a869b71c4a456515a6ad3c2e59d758b814f01bb56d6e3ba06cea34d0f44930df599c1f8087ad916"}, {0xdd, 0x43, "3575fb7edb9a0d372a5c28c0343768bf49333f20b36adc5bc832cb402860a379fd57e57c3530aa691657bf2b48661410942be42b121ba19caa61628c9b429d8b705950"}, {0xdd, 0x51, "a42f489da4182814639e20ca858cfa2dbc1e15c8473c2d6a8a88417e3bf2b4cf827771f1eadde86abf75eaee79e93c875b5b4797389c0bd5f1f20237fdcfc8e3290dd3721f27adc32d31f1b90b4fc9bcd4"}, {0xdd, 0x5e, "f3d2928e19ad5bf664a70d0843baf25701d71d3e55c4780b384f9b981a7d3062ce4f4c12308ef35ab34d1a0de12010b648335fd62a546702a7abb909e2f43ae66bb5674f2873d19bc9025275259b26af151aed0277278caa35f52e50ca90"}]}}, @NL80211_ATTR_PROBE_RESP={0x3d3, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0xde, 0x7f, [@chsw_timing={0x68, 0x4, {0x8001, 0xd3}}, @random_vendor={0xdd, 0xd2, "2ba6783412e6c639f596fdfa9148187a381cae39f98c0cb88b7471fb03312e7f038633008d9d6eca1e7a0889248e9e6383f79aaa13bed5988585baa3846ba0e83dc3a8af3d85931aa5a57600c260d1db91c0008686487def3b24975e126b09334057bb40c69f7661184c8ab4801ecd84e5e27e4f05a557f9c5b48f1248d98279aa1ecd266f1f8c6d74fd355d38ff5bd8c6e2feb85105b2c03471b6a873d9364005b9dbf947519f092ba79330b949866ab2d664e48eee40443322abc34beb1030092ca8baa4d3325a55e8ce3348e03c01b7a5"}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x1f7, 0x91, "8daf14d190360218127ce358864e7a64d25082f4a5ff743d30d20a0fc794344239c07226c63e2d23dc36db7628ebb580d8506f9fe5a7184b9a2c551a5ba878a8189a34b82d0ae089132dc3c7819f9eccb24a2cf4eba5d4e517e6e8726ce59750285b1c3c4b802eeea2c87a9247d239aad2acd67ef6771a88e281d612584f315c2ff8c64db458e3ac3aab439bc121d53905051865fa714b70d836ecd33a0c9c732b8ed2f916cf2d33cbb657dedbc01573304abc0b5564dd7bc9cb038e986f9aa83f633affc0ad034ad6bd71ada9eff2f52b16dedc57a1eb4a0277457e8a73be54751c74f2805cf7f9aea095c8af8d1548297e613297e4ab6b55d306cf59095dbcabd1588eae17a24fbb9cc7d9fee00e3dd393e11c3541c4e3a4938954e81633277d43ac0bca4a7696e18e0b0814df82661da713b21ee6eadba0843b6f16a4c478c4d0943a413bd83b7ba94875b00b6cc3ca60fd4d4a5947532a17f517c9dc8c5876d4994ad4ba41b8dedb3884d5794c3ff9a337e2d0b5956c8be5a9a1d813be64514be0e864bdb1101fdf7b675b70c96979de32bfd9c0116f21aca747cdefa0d8c03805a602693c69ebe1c01062d8701f6ac538e6b8eb67b2b9855adb497ba95237d9fafa91e87f832040ccc5ef694b2c6940e9c1473e9c3e6e6e1b8319b322324de656a47cce0203968d2bc59c57f7a337f46b"}, @NL80211_ATTR_BEACON_TAIL={0x44, 0xf, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x0, 0x9}}, @chsw_timing={0x68, 0x4, {0x8, 0xfc00}}, @ssid={0x0, 0x1e, @random="286ed54af08b37c3439d6f80e5fee2273bfa0a8faab88c5156f324108b92"}]}, @NL80211_ATTR_BEACON_HEAD={0x23b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @broadcast, @initial, {0x0, 0x5}}, 0x1, @default, 0x800, @void, @void, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6, {0x6, 0xc7, 0x1, 0x5}}, @val={0x6, 0x2, 0x400}, @void, @val={0x25, 0x3, {0x1, 0x46, 0x14}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0xf8, 0xac, 0x1}}, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x4, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3}, 0x1, 0x1, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfc, 0x21}}, @val={0x76, 0x6, {0x5, 0x7, 0x18, 0xa}}, [{0xdd, 0x12, "5006586749fb2c0069b884f585e9aae27c96"}, {0xdd, 0xb, "fae1b0110d8c25001c8e7c"}, {0xdd, 0x29, "02ab8d8f2c2f885728a64139233cb269d23afc5366ef25d5f1b56de778c6dff7bbae23bb9041805ead"}, {0xdd, 0x35, "3f5957ef675e2b9a0d8391f9d7cc45c6ad613d0c4fba52312abdfb93c33f425834e869f1a66db078c4a7cde1650a4808de10041d94"}, {0xdd, 0x37, "c05cb7320833fa95c662709bf189f3d61a1cafb538a24cd777337f7907b3cd5db5da939553a5aefffbea6deb6d7fedaeb37bfe2cf634eb"}, {0xdd, 0x6f, "afc44b1def52252145080dc46fd0aefbd82021da700d1cc06d3924d6d7f40c10197c6a3d1a38bc4eb19d00c7127d69a1ca90fe9d186c986651ede424ef2603a08dcba539254a9de8ad6126c51ccc255632ca8f3794f5ee1d985bbc83717609c274907e2e2a6bdd82aa0e618047d26d"}, {0xdd, 0x89, "824ba3fe1a161b87703262c7398e06af8ad0136ef5cd4bf7627f48049c39b1a48738b76ff8043b586e80acc08eecefb6b921a84f37f2f7badf438898ea9a8e2d592608a681fd102888bd68dcd3bbebee588d48b9f4f8c06f8fe731c307ec68f58f405316b8b7aedb4828fa75baf5ef0db51c75cbc0cc258c59268f750fdd7fd18fcff2a997383bf967"}, {0xdd, 0x7, "3005d8ef33328b"}]}}]]}]}, 0x19d0}, 0x1, 0x0, 0x0, 0x4}, 0x84)

458.854278ms ago: executing program 2 (id=6505):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)
r5 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async)
listen(r5, 0x0)
r6 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x40, 0x2}, 0x1c) (async)
accept4$inet6(r5, 0x0, 0x0, 0x800) (async)
sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x101) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x81, 0x0, 0x6, 0x8, r4}, &(0x7f0000000140)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xffff, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xca7d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xffff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

458.397078ms ago: executing program 0 (id=6506):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0)
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000140)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2})

386.848471ms ago: executing program 1 (id=6507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x7, 0x4, 0x1, 0x6, 0x1, 0x4}, 0x50) (async)
r1 = socket$inet(0x2, 0x2, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) (async)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r4=>0x0}) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="0800038000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
bind$x25(r6, &(0x7f00000001c0), 0x12)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x1, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0xfffffe5a, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x81) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r10 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r10, &(0x7f0000000f40)="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", 0x201, 0x4008001, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)}, {&(0x7f00000002c0)="40288f34bcf7367c6993649e4111", 0xe}, {&(0x7f0000000440)="155332afc2328ac8", 0x8}], 0x5, 0x6) (async)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async)
setsockopt(r11, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) (async)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94)

338.84581ms ago: executing program 0 (id=6508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c4}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)

338.452292ms ago: executing program 2 (id=6509):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES32=r6, @ANYRES64=r6, @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000001640)={{r6}, "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"})
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x74e660bf}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)={0x1c, 0x5e, 0x1, 0x70bd29, 0x0, {}, [@generic="ba5754db21"]}, 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x66)

289.777397ms ago: executing program 0 (id=6510):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000120010000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

239.989968ms ago: executing program 1 (id=6511):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, &(0x7f0000000180)="8ec6b1ee58ca706c1650eb9a56cb55897a498e6841bedf1145bb9b3a049dc5f35a05b9fc944a17802af0a89c28db4d911720f368d3ed2d2ed06396b7d4db9619ee1eac8fedc33624e74db8132c9ee4b5604686bd73df8ade2e4b9f", &(0x7f0000000740)=""/4096}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

239.581442ms ago: executing program 0 (id=6512):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x3, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x502}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00'}, 0x94)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000004004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000020000000000000000000000000000000000000000000000000100000000000000000a0000008700"/61, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xb8}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000003000000000000000000000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0)

108.569545ms ago: executing program 1 (id=6513):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x3, {0x0, 0xf1, 0x3}}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x6) (async, rerun: 64)
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) (rerun: 64)
sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000801f3c9e216f4d411001000000850000008e00000095000000"], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x41000}, 0x94) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000200), &(0x7f00000002c0)=0x30)

1.057984ms ago: executing program 0 (id=6514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8800)

0s ago: executing program 0 (id=6515):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB="0b062dbd70000000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x800)

kernel console output (not intermixed with test programs):

figuration, please check.
[  378.699746][T20881] netlink: 'syz.1.4402': attribute type 1 has an invalid length.
[  379.315062][T20928] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  379.383629][T20933] netlink: 'syz.2.4416': attribute type 13 has an invalid length.
[  379.386268][T20933] netlink: 'syz.2.4416': attribute type 17 has an invalid length.
[  379.423726][T20933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  379.446037][T20930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.502452][T20933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.558026][T20930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.731828][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  402.021782][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  414.384420][T20955] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.490602][T20962] __nla_validate_parse: 17 callbacks suppressed
[  414.490626][T20962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'.
[  414.528689][T20964] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  414.700758][T20979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'.
[  414.804418][T20988] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  414.925927][T21001] sctp: [Deprecated]: syz.2.4443 (pid 21001) Use of struct sctp_assoc_value in delayed_ack socket option.
[  414.925927][T21001] Use struct sctp_sack_info instead
[  415.043587][T21013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4447'.
[  415.178716][T21030] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4452'.
[  415.240703][T21042] netlink: 'syz.2.4455': attribute type 1 has an invalid length.
[  415.432619][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'.
[  415.435702][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4459'.
[  415.489526][T21066] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  415.493326][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4463'.
[  415.496665][T21068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.497296][T21068] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  415.503532][T21068] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  415.510575][T21068] tipc: Resetting bearer <eth:syzkaller0>
[  415.654132][T21081] @: renamed from bond_slave_0
[  415.674259][T21081] netlink: 'syz.1.4466': attribute type 1 has an invalid length.
[  415.784682][T21091] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4469'.
[  415.893130][T21103] netlink: 410 bytes leftover after parsing attributes in process `syz.1.4470'.
[  416.317443][T21120] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4478'.
[  416.325124][T21127] netlink: 'syz.1.4479': attribute type 2 has an invalid length.
[  416.328089][T21127] netlink: 'syz.1.4479': attribute type 2 has an invalid length.
[  416.331074][T21127] netlink: 'syz.1.4479': attribute type 1 has an invalid length.
[  416.485808][T21136] 8021q: adding VLAN 0 to HW filter on device bond10
[  416.545338][T21133] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  416.548065][T21133] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  416.551053][T21133] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  416.566611][T21133] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  417.040845][T21161] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  417.045378][T21161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.531964][ T5840] Bluetooth: hci0: command tx timeout
[  417.632447][T21183] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  418.120904][T21224] netlink: 'syz.1.4509': attribute type 3 has an invalid length.
[  419.094613][T21258] warn_alloc: 1 callbacks suppressed
[  419.094629][T21258] syz.1.4516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  419.105203][T21258] CPU: 0 UID: 0 PID: 21258 Comm: syz.1.4516 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  419.105227][T21258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.105248][T21258] Call Trace:
[  419.105255][T21258]  <TASK>
[  419.105263][T21258]  dump_stack_lvl+0x189/0x250
[  419.105293][T21258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.105313][T21258]  ? __pfx__printk+0x10/0x10
[  419.105335][T21258]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  419.105358][T21258]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  419.105381][T21258]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  419.105404][T21258]  warn_alloc+0x214/0x310
[  419.105420][T21258]  ? stack_depot_save_flags+0x40/0x900
[  419.105440][T21258]  ? __pfx_warn_alloc+0x10/0x10
[  419.105457][T21258]  ? kasan_save_track+0x4f/0x80
[  419.105479][T21258]  ? xskq_create+0x56/0x170
[  419.105497][T21258]  ? xsk_init_queue+0xb0/0x110
[  419.105510][T21258]  ? xsk_setsockopt+0x43f/0x710
[  419.105533][T21258]  ? do_sock_setsockopt+0x17c/0x1b0
[  419.105553][T21258]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  419.105573][T21258]  ? do_syscall_64+0xfa/0x3b0
[  419.105622][T21258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.105647][T21258]  __vmalloc_node_range_noprof+0x125/0x12f0
[  419.105697][T21258]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  419.105724][T21258]  ? __kasan_kmalloc+0x93/0xb0
[  419.105746][T21258]  vmalloc_user_noprof+0xad/0xf0
[  419.105768][T21258]  ? xskq_create+0xbf/0x170
[  419.105784][T21258]  xskq_create+0xbf/0x170
[  419.105802][T21258]  xsk_init_queue+0xb0/0x110
[  419.105818][T21258]  xsk_setsockopt+0x43f/0x710
[  419.105843][T21258]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.105869][T21258]  ? __fget_files+0x2a/0x420
[  419.105881][T21258]  ? aa_sock_opt_perm+0x74/0x110
[  419.105896][T21258]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  419.105912][T21258]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.105933][T21258]  do_sock_setsockopt+0x17c/0x1b0
[  419.105955][T21258]  __x64_sys_setsockopt+0x13f/0x1b0
[  419.105978][T21258]  do_syscall_64+0xfa/0x3b0
[  419.105992][T21258]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.106005][T21258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.106021][T21258]  ? exc_page_fault+0x9f/0xf0
[  419.106036][T21258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.106049][T21258] RIP: 0033:0x7f8a96f8e9a9
[  419.106064][T21258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.106079][T21258] RSP: 002b:00007f8a97e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  419.106098][T21258] RAX: ffffffffffffffda RBX: 00007f8a971b5fa0 RCX: 00007f8a96f8e9a9
[  419.106112][T21258] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  419.106121][T21258] RBP: 00007f8a97010d69 R08: 0000000000000004 R09: 0000000000000000
[  419.106130][T21258] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.106139][T21258] R13: 0000000000000000 R14: 00007f8a971b5fa0 R15: 00007ffde9451da8
[  419.106160][T21258]  </TASK>
[  419.106167][T21258] Mem-Info:
[  419.156489][T21267] SET target dimension over the limit!
[  419.181661][T21258] active_anon:12276 inactive_anon:0 isolated_anon:0
[  419.181661][T21258]  active_file:1164 inactive_file:38337 isolated_file:0
[  419.181661][T21258]  unevictable:1768 dirty:60 writeback:0
[  419.181661][T21258]  slab_reclaimable:10508 slab_unreclaimable:86555
[  419.181661][T21258]  mapped:18149 shmem:2494 pagetables:1012
[  419.181661][T21258]  sec_pagetables:0 bounce:0
[  419.181661][T21258]  kernel_misc_reclaimable:0
[  419.181661][T21258]  free:249400 free_pcp:23967 free_cma:0
[  419.254875][T21258] Node 0 active_anon:12672kB inactive_anon:0kB active_file:3656kB inactive_file:23088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40396kB dirty:228kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9212kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  419.288786][T21258] Node 1 active_anon:36296kB inactive_anon:0kB active_file:1000kB inactive_file:130260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32200kB dirty:12kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4080kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  419.305652][T21258] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  419.318251][T21258] lowmem_reserve[]: 0 812 812 812 812
[  419.320844][T21258] Node 0 DMA32 free:274444kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12808kB inactive_anon:0kB active_file:3656kB inactive_file:23088kB unevictable:3536kB writepending:228kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:33620kB local_pcp:16392kB free_cma:0kB
[  419.359519][T21258] lowmem_reserve[]: 0 0 0 0 0
[  419.364512][T21258] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  419.387559][T21258] lowmem_reserve[]: 0 0 854 854 854
[  419.390817][T21258] Node 1 Normal free:248872kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36364kB inactive_anon:0kB active_file:1000kB inactive_file:130260kB unevictable:3536kB writepending:12kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:62716kB local_pcp:43768kB free_cma:0kB
[  419.405955][T21258] lowmem_reserve[]: 0 0 0 0 0
[  419.410008][T21258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  419.420525][T21278] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.424936][T21258] Node 0 DMA32: 312*4kB (M) 447*8kB (UME) 603*16kB (UM) 207*32kB (UM) 64*64kB (UME) 99*128kB (UM) 12*256kB (U) 6*512kB (UME) 9*1024kB (U) 4*2048kB (UM) 52*4096kB (UM) = 274408kB
[  419.435282][T21258] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  419.445861][T21258] Node 1 Normal: 474*4kB (UME) 568*8kB (UME) 550*16kB (UME) 1063*32kB (UME) 408*64kB (UM) 67*128kB (UME) 12*256kB (UME) 16*512kB (UM) 14*1024kB (UM) 16*2048kB (UM) 26*4096kB (UM) = 248808kB
[  419.464366][T21258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.468617][T21258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.474025][T21258] 41995 total pagecache pages
[  419.475964][T21258] 0 pages in swap cache
[  419.477669][T21258] Free swap  = 124996kB
[  419.479325][T21258] Total swap = 124996kB
[  419.480990][T21258] 786301 pages RAM
[  419.489497][T21258] 0 pages HighMem/MovableOnly
[  419.496652][T21258] 241056 pages reserved
[  419.498684][T21258] 0 pages cma reserved
[  419.506944][T21283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.631000][T21293] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000
[  419.744727][T21300] __nla_validate_parse: 12 callbacks suppressed
[  419.744742][T21300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4531'.
[  419.750878][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'.
[  420.045099][T21312] netlink: 'syz.0.4534': attribute type 9 has an invalid length.
[  420.048403][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'.
[  420.327493][T21328] rdma_op ffff8880357c19f0 conn xmit_rdma 0000000000000000
[  420.338299][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4538'.
[  420.494729][T21335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4541'.
[  420.498208][T21335] tipc: Invalid UDP bearer configuration
[  420.498253][T21335] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  421.005703][T21366] netlink: 'syz.2.4548': attribute type 1 has an invalid length.
[  421.008937][T21366] netlink: 'syz.2.4548': attribute type 1 has an invalid length.
[  421.151288][T21378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4553'.
[  421.440510][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4556'.
[  422.009555][T21404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4559'.
[  422.013315][T21404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4559'.
[  422.027815][T21404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4559'.
[  422.161300][T21387] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  422.290806][T21418] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  422.303211][T21418] bond0 (unregistering): Released all slaves
[  422.440442][T21426] netlink: 'syz.1.4569': attribute type 1 has an invalid length.
[  422.656367][T21434] netlink: 'syz.1.4571': attribute type 21 has an invalid length.
[  422.661321][T21434] netlink: 'syz.1.4571': attribute type 6 has an invalid length.
[  423.188414][T21463] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  423.283548][T21468] atomic_op ffff8880315f9198 conn xmit_atomic 0000000000000000
[  423.297368][T21459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  423.780773][T21500] sctp: [Deprecated]: syz.1.4587 (pid 21500) Use of int in maxseg socket option.
[  423.780773][T21500] Use struct sctp_assoc_value instead
[  423.848026][T21502] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  424.306696][T21506] syzkaller1: entered promiscuous mode
[  424.308543][T21506] syzkaller1: entered allmulticast mode
[  424.487466][T21515] netlink: 'syz.2.4594': attribute type 1 has an invalid length.
[  424.608282][T21513] infiniband syz2: set down
[  424.611415][T21513] infiniband syz2: added bond_slave_1
[  424.656621][T21513] RDS/IB: syz2: added
[  424.659344][T21513] smc: adding ib device syz2 with port count 1
[  424.661985][T21513] smc:    ib device syz2 port 1 has pnetid 
[  425.875763][T21575] bond2: (slave bridge5): Releasing active interface
[  425.880336][T21575] bond3: (slave geneve2): Releasing active interface
[  425.885819][T21575] bond3: (slave geneve2): the permanent HWaddr of slave - da:99:fa:7f:de:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  425.904387][T21575] bond3: (slave ip6gretap2): making interface the new active one
[  425.916422][T21575] bond3: (slave ip6gretap2): Releasing active interface
[  425.944659][T21575] bond4: (slave ip6gretap3): Releasing active interface
[  425.950003][T21575] bond5: (slave bridge7): Releasing backup interface
[  425.961165][T21575] team0: Port device gtp0 removed
[  425.968042][T21575] team0: Port device gtp1 removed
[  425.974079][T21575] bond7: (slave bridge9): Releasing active interface
[  426.006385][T21581] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  426.010856][T21581] netlink: 'syz.1.4613': attribute type 21 has an invalid length.
[  426.013762][T21581] netlink: 'syz.1.4613': attribute type 22 has an invalid length.
[  426.017054][T21581] netlink: 'syz.1.4613': attribute type 23 has an invalid length.
[  426.022873][ T5886] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  426.024450][T21581] netlink: 'syz.1.4613': attribute type 25 has an invalid length.
[  426.028596][T21581] netlink: 'syz.1.4613': attribute type 26 has an invalid length.
[  426.031311][T21581] __nla_validate_parse: 20 callbacks suppressed
[  426.031319][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4613'.
[  426.097041][T21585] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20004
[  426.106895][T21585] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20002
[  426.323315][T21602] netlink: 'syz.0.4623': attribute type 1 has an invalid length.
[  426.391894][ T5886] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  426.424663][T21607] netlink: 'syz.0.4625': attribute type 39 has an invalid length.
[  426.484233][T21608] netlink: 'syz.0.4625': attribute type 28 has an invalid length.
[  426.517502][T21603] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4622'.
[  426.947787][T21624] x_tables: duplicate underflow at hook 2
[  426.986814][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'.
[  426.989664][T21626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'.
[  427.001773][T21628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4629'.
[  427.018824][T21626] netlink: 'syz.2.4628': attribute type 15 has an invalid length.
[  427.023550][T21626] netlink: 'syz.2.4628': attribute type 18 has an invalid length.
[  427.092946][T21632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4631'.
[  427.144695][T21632] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4631'.
[  427.214174][T21650] netlink: 'syz.2.4636': attribute type 1 has an invalid length.
[  427.217183][T21650] netlink: 784 bytes leftover after parsing attributes in process `syz.2.4636'.
[  427.321448][T21655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4638'.
[  427.355526][T21661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4640'.
[  427.355687][T21659] IPv6: NLM_F_CREATE should be specified when creating new route
[  427.415824][T21662] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  427.587847][T21686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.596196][T21686] x_tables: duplicate underflow at hook 1
[  427.936743][T21703] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  427.954477][T21702] 8021q: VLANs not supported on wlan1
[  428.186066][T21713] bond12: entered promiscuous mode
[  428.187740][T21713] bond12: entered allmulticast mode
[  428.190175][T21713] 8021q: adding VLAN 0 to HW filter on device bond12
[  428.335320][T21726] sctp: [Deprecated]: syz.1.4653 (pid 21726) Use of struct sctp_assoc_value in delayed_ack socket option.
[  428.335320][T21726] Use struct sctp_sack_info instead
[  428.970688][T21744] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  429.445196][T21770] 8021q: adding VLAN 0 to HW filter on device bond13
[  429.456768][T21770] bond11: (slave veth25): Releasing active interface
[  429.506945][T21770] 8021q: adding VLAN 0 to HW filter on device bond14
[  429.725427][T21795] veth30: entered allmulticast mode
[  429.963357][T21806] tipc: Resetting bearer <eth:syzkaller0>
[  429.973505][T21806] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.976131][T21806] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.978615][T21806] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.981280][T21806] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  429.999979][T21806] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  430.003618][T21806] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  430.006346][T21806] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  430.009063][T21806] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  430.274861][T21829] xt_l2tp: v2 doesn't support IP mode
[  430.401356][T21839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.019585][T21851] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  431.023612][T21851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.073731][T21855] validate_nla: 4 callbacks suppressed
[  431.073775][T21855] netlink: 'syz.1.4691': attribute type 7 has an invalid length.
[  431.496941][T21878] __nla_validate_parse: 14 callbacks suppressed
[  431.496959][T21878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4694'.
[  431.505831][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'.
[  431.788850][T21892] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4700'.
[  431.832715][T21892] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  431.843228][T21894] netlink: 'syz.0.4701': attribute type 178 has an invalid length.
[  431.887945][T21899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  432.027950][   T33] audit: type=1800 audit(1752974732.245:17): pid=21908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4705" name="memory.events" dev="tmpfs" ino=8083 res=0 errno=0
[  432.241302][T21922] netlink: 'syz.0.4709': attribute type 28 has an invalid length.
[  432.309215][T21925] netlink: 'syz.1.4708': attribute type 1 has an invalid length.
[  432.312312][T21925] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4708'.
[  432.315527][T21925] netlink: 'syz.1.4708': attribute type 1 has an invalid length.
[  432.332712][T21926] sctp: [Deprecated]: syz.0.4710 (pid 21926) Use of int in max_burst socket option.
[  432.332712][T21926] Use struct sctp_assoc_value instead
[  432.573717][T21939] syz.2.4714: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  432.587189][T21939] CPU: 0 UID: 0 PID: 21939 Comm: syz.2.4714 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  432.587212][T21939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.587218][T21939] Call Trace:
[  432.587222][T21939]  <TASK>
[  432.587226][T21939]  dump_stack_lvl+0x189/0x250
[  432.587248][T21939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.587259][T21939]  ? __pfx__printk+0x10/0x10
[  432.587271][T21939]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  432.587283][T21939]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  432.587295][T21939]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  432.587306][T21939]  warn_alloc+0x214/0x310
[  432.587315][T21939]  ? stack_depot_save_flags+0x40/0x900
[  432.587326][T21939]  ? __pfx_warn_alloc+0x10/0x10
[  432.587334][T21939]  ? kasan_save_track+0x4f/0x80
[  432.587345][T21939]  ? xskq_create+0x56/0x170
[  432.587353][T21939]  ? xsk_init_queue+0xb0/0x110
[  432.587359][T21939]  ? xsk_setsockopt+0x43f/0x710
[  432.587370][T21939]  ? do_sock_setsockopt+0x17c/0x1b0
[  432.587382][T21939]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  432.587392][T21939]  ? do_syscall_64+0xfa/0x3b0
[  432.587401][T21939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.587413][T21939]  __vmalloc_node_range_noprof+0x125/0x12f0
[  432.587439][T21939]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  432.587455][T21939]  ? __kasan_kmalloc+0x93/0xb0
[  432.587467][T21939]  vmalloc_user_noprof+0xad/0xf0
[  432.587480][T21939]  ? xskq_create+0xbf/0x170
[  432.587489][T21939]  xskq_create+0xbf/0x170
[  432.587500][T21939]  xsk_init_queue+0xb0/0x110
[  432.587509][T21939]  xsk_setsockopt+0x43f/0x710
[  432.587523][T21939]  ? __pfx_xsk_setsockopt+0x10/0x10
[  432.587537][T21939]  ? __fget_files+0x2a/0x420
[  432.587544][T21939]  ? aa_sock_opt_perm+0x74/0x110
[  432.587555][T21939]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  432.587564][T21939]  ? __pfx_xsk_setsockopt+0x10/0x10
[  432.587577][T21939]  do_sock_setsockopt+0x17c/0x1b0
[  432.587591][T21939]  __x64_sys_setsockopt+0x13f/0x1b0
[  432.587605][T21939]  do_syscall_64+0xfa/0x3b0
[  432.587614][T21939]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.587622][T21939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.587661][T21939]  ? exc_page_fault+0x9f/0xf0
[  432.587671][T21939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.587679][T21939] RIP: 0033:0x7f316df8e9a9
[  432.587689][T21939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.587696][T21939] RSP: 002b:00007f316eea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  432.587706][T21939] RAX: ffffffffffffffda RBX: 00007f316e1b6080 RCX: 00007f316df8e9a9
[  432.587712][T21939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  432.587717][T21939] RBP: 00007f316e010d69 R08: 0000000000000004 R09: 0000000000000000
[  432.587722][T21939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.587727][T21939] R13: 0000000000000000 R14: 00007f316e1b6080 R15: 00007ffee6b00d38
[  432.587740][T21939]  </TASK>
[  432.587744][T21939] Mem-Info:
[  432.736420][T21939] active_anon:12188 inactive_anon:0 isolated_anon:0
[  432.736420][T21939]  active_file:1164 inactive_file:38343 isolated_file:0
[  432.736420][T21939]  unevictable:1768 dirty:81 writeback:0
[  432.736420][T21939]  slab_reclaimable:10668 slab_unreclaimable:88475
[  432.736420][T21939]  mapped:18197 shmem:2483 pagetables:977
[  432.736420][T21939]  sec_pagetables:0 bounce:0
[  432.736420][T21939]  kernel_misc_reclaimable:0
[  432.736420][T21939]  free:249496 free_pcp:21978 free_cma:0
[  432.762920][T21939] Node 0 active_anon:12872kB inactive_anon:0kB active_file:3656kB inactive_file:23112kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40664kB dirty:284kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9356kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  432.774299][T21939] Node 1 active_anon:35948kB inactive_anon:0kB active_file:1000kB inactive_file:130260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32192kB dirty:40kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4148kB pagetables:1532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  432.791067][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'.
[  432.817196][T21939] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  432.845342][T21939] lowmem_reserve[]: 0 812 812 812 812
[  432.847191][T21939] Node 0 DMA32 free:270348kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12872kB inactive_anon:0kB active_file:3656kB inactive_file:23112kB unevictable:3536kB writepending:284kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:42320kB local_pcp:24172kB free_cma:0kB
[  432.862015][T21939] lowmem_reserve[]: 0 0 0 0 0
[  432.864388][T21939] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  432.890046][T21950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4717'.
[  432.891834][T21939] lowmem_reserve[]: 0 0 854 854 854
[  432.895684][T21939] Node 1 Normal free:253580kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35948kB inactive_anon:0kB active_file:1000kB inactive_file:130260kB unevictable:3536kB writepending:40kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:47152kB local_pcp:24868kB free_cma:0kB
[  432.941992][T21939] lowmem_reserve[]: 0 0 0 0 0
[  432.944194][T21939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  432.949317][T21939] Node 0 DMA32: 24*4kB (UM) 94*8kB (UME) 197*16kB (UME) 332*32kB (UME) 131*64kB (UM) 64*128kB (UM) 9*256kB (UM) 4*512kB (UME) 9*1024kB (U) 6*2048kB (UM) 52*4096kB (UM) = 270048kB
[  432.982129][T21939] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  432.988754][T21939] Node 1 Normal: 25*4kB (ME) 93*8kB (ME) 246*16kB (UME) 1013*32kB (UM) 431*64kB (UME) 147*128kB (UM) 34*256kB (UM) 21*512kB (UM) 15*1024kB (UM) 14*2048kB (UM) 26*4096kB (UM) = 253580kB
[  433.034791][T21939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  433.038433][T21939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  433.051932][T21939] 41990 total pagecache pages
[  433.053904][T21939] 0 pages in swap cache
[  433.055208][T21939] Free swap  = 124996kB
[  433.056523][T21939] Total swap = 124996kB
[  433.057855][T21939] 786301 pages RAM
[  433.059023][T21939] 0 pages HighMem/MovableOnly
[  433.060649][T21939] 241056 pages reserved
[  433.091782][T21939] 0 pages cma reserved
[  433.141376][T21962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4723'.
[  433.424539][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'.
[  433.428355][T21983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4729'.
[  433.432226][T21983] netlink: 'syz.1.4729': attribute type 7 has an invalid length.
[  433.488623][T21988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4733'.
[  433.587196][T21996] pimreg3: entered allmulticast mode
[  434.024205][T22031] netlink: 'syz.0.4749': attribute type 10 has an invalid length.
[  434.139756][T22046] nbd: must specify a size in bytes for the device
[  434.245398][T22054] netlink: 'syz.0.4755': attribute type 12 has an invalid length.
[  434.747944][T22071] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  434.980858][T22078] netlink: 'syz.1.4763': attribute type 21 has an invalid length.
[  434.980975][T22079] netlink: 'syz.1.4763': attribute type 21 has an invalid length.
[  436.115271][T22140] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  436.359064][T22164] block nbd2: not configured, cannot reconfigure
[  436.361777][T22167] validate_nla: 3 callbacks suppressed
[  436.361787][T22167] netlink: 'syz.1.4790': attribute type 4 has an invalid length.
[  436.455856][T22175] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.520621][T22182] __nla_validate_parse: 25 callbacks suppressed
[  436.520637][T22182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4795'.
[  436.629559][T22188] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  436.641872][T22188] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  436.645300][T22188] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  436.648843][T22188] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  436.655697][T22188] geneve4: entered allmulticast mode
[  436.766050][T22201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4796'.
[  436.768998][T22201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4796'.
[  436.777617][T22201] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  436.790445][T22203] netlink: 'syz.0.4801': attribute type 1 has an invalid length.
[  436.794412][T22203] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  437.040839][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'.
[  437.211795][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  437.268494][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'.
[  437.566436][T22252] x_tables: duplicate underflow at hook 1
[  437.569640][T22254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4815'.
[  437.647049][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4817'.
[  437.654688][T22261] xt_bpf: check failed: parse error
[  437.735685][T22270] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  437.756464][T22272] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4821'.
[  437.777092][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4822'.
[  437.870371][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4825'.
[  437.880780][T22284] netlink: 'syz.1.4824': attribute type 10 has an invalid length.
[  437.901085][T22284] team0: Port device 0! added
[  437.914462][T22284] netlink: 'syz.1.4824': attribute type 30 has an invalid length.
[  437.918659][T22284] vlan0: entered promiscuous mode
[  438.133750][T22292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.137519][T22292] netlink: 'syz.1.4827': attribute type 2 has an invalid length.
[  438.140026][T22292] netlink: 'syz.1.4827': attribute type 2 has an invalid length.
[  438.602815][T22313] pim6reg1: entered promiscuous mode
[  438.604759][T22313] pim6reg1: entered allmulticast mode
[  438.840360][T22296] sit0: entered promiscuous mode
[  438.853240][T22327] netlink: 'syz.1.4836': attribute type 1 has an invalid length.
[  438.857152][T22327] netlink: 'syz.1.4836': attribute type 2 has an invalid length.
[  438.861897][T22327] veth0_to_team: left promiscuous mode
[  438.867303][T22327] veth0_to_team: left allmulticast mode
[  439.059215][T22340] netlink: 'syz.0.4840': attribute type 1 has an invalid length.
[  439.449963][T22365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  439.776305][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  439.825361][T22390] bridge: RTM_NEWNEIGH with invalid ether address
[  439.960844][T22402] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  440.009916][T22398] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.021425][T22398] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.026055][T22398] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.028566][T22398] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.031090][T22398] geneve1: entered promiscuous mode
[  440.039166][T22398] geneve1: entered allmulticast mode
[  440.480808][T22444] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  440.563025][T22453] xt_TCPMSS: Only works on TCP SYN packets
[  440.767453][T22471] netlink: 'syz.2.4874': attribute type 2 has an invalid length.
[  441.593401][T22491] __nla_validate_parse: 147 callbacks suppressed
[  441.593420][T22491] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4881'.
[  441.727433][T22501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.846626][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4884'.
[  441.926865][T22516] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4888'.
[  442.041132][T22527] validate_nla: 2 callbacks suppressed
[  442.041150][T22527] netlink: 'syz.1.4892': attribute type 8 has an invalid length.
[  442.083114][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'.
[  442.087372][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4893'.
[  442.154615][T22536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4895'.
[  442.420209][T22553] xt_hashlimit: size too large, truncated to 1048576
[  442.911320][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'.
[  442.916104][T22582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4905'.
[  442.987362][T22586] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  443.057056][T22594] bridge15: entered promiscuous mode
[  443.059469][T22594] bridge15: entered allmulticast mode
[  443.147449][T22586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4907'.
[  443.239761][T22605] netlink: 'syz.2.4911': attribute type 29 has an invalid length.
[  443.394031][T22615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4913'.
[  443.809537][T22644] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[  443.913495][T22649] netlink: 'syz.0.4925': attribute type 1 has an invalid length.
[  444.278458][T22666] netlink: 'syz.0.4930': attribute type 83 has an invalid length.
[  444.381075][T22669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  444.419507][T22669] tipc: Resetting bearer <eth:syzkaller0>
[  444.443775][T22674] sctp: [Deprecated]: syz.2.4932 (pid 22674) Use of int in maxseg socket option.
[  444.443775][T22674] Use struct sctp_assoc_value instead
[  444.693802][T22683] bond24: entered promiscuous mode
[  444.695658][T22683] 8021q: adding VLAN 0 to HW filter on device bond24
[  444.857104][T22694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  444.860012][T22694] IPv6: NLM_F_CREATE should be set when creating new route
[  444.862972][T22694] IPv6: NLM_F_CREATE should be set when creating new route
[  444.865861][T22694] IPv6: NLM_F_CREATE should be set when creating new route
[  444.913576][T22694] team0: Port device 0! removed
[  445.222836][T22720] netlink: 'syz.1.4944': attribute type 1 has an invalid length.
[  445.225490][T22720] netlink: 'syz.1.4944': attribute type 3 has an invalid length.
[  445.277586][T22724] xt_TPROXY: Can be used only with -p tcp or -p udp
[  445.567784][T22746] nbd: must specify a device to reconfigure
[  445.810676][T22766] netlink: 'syz.1.4959': attribute type 9 has an invalid length.
[  445.814935][T22766] netlink: 'syz.1.4959': attribute type 7 has an invalid length.
[  445.818217][T22766] netlink: 'syz.1.4959': attribute type 8 has an invalid length.
[  446.044477][T22786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  446.047545][T22785] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  446.204691][T22799] netlink: 'syz.0.4970': attribute type 58 has an invalid length.
[  446.239760][T22797] vlan0: entered promiscuous mode
[  446.241397][T22797] veth1: entered promiscuous mode
[  446.707695][T22833] delete_channel: no stack
[  446.976120][T22850] __nla_validate_parse: 22 callbacks suppressed
[  446.976133][T22850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4984'.
[  446.981159][T22850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'.
[  447.074568][T22858] sock: sock_timestamping_bind_phc: sock not bind to device
[  447.095660][T22856] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4985'.
[  447.113323][T22856] netlink: zone id is out of range
[  447.115302][T22856] netlink: zone id is out of range
[  447.117321][T22856] netlink: zone id is out of range
[  447.119360][T22856] netlink: get zone limit has 8 unknown bytes
[  447.222976][T22868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'.
[  447.554403][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4997'.
[  447.637294][T22898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5000'.
[  447.757519][T22910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5005'.
[  447.803392][T22909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  448.220369][T22933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5010'.
[  448.225639][T22933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5010'.
[  448.756992][T22969] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5019'.
[  449.378850][T22987] validate_nla: 4 callbacks suppressed
[  449.378871][T22987] netlink: 'syz.0.5027': attribute type 142 has an invalid length.
[  449.468382][T22993] bridge0: entered promiscuous mode
[  449.476594][T22992] bridge0: left promiscuous mode
[  449.768296][T23013] ip6t_srh: unknown srh invflags 4000
[  449.836789][T23018] netlink: 'syz.2.5037': attribute type 8 has an invalid length.
[  450.877675][T23067] netlink: 'syz.2.5049': attribute type 21 has an invalid length.
[  450.953127][T23071] openvswitch: netlink: Unknown nsh attribute 0
[  450.956026][T23071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  451.714888][T23119] netlink: 'syz.1.5062': attribute type 1 has an invalid length.
[  451.782426][T23119] 8021q: adding VLAN 0 to HW filter on device bond16
[  451.900523][T23125] 8021q: adding VLAN 0 to HW filter on device bond16
[  451.917903][T23125] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  451.941141][T23125] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  451.973901][T23119] veth31: entered promiscuous mode
[  451.980923][T23119] bond16: (slave veth31): Enslaving as an active interface with a down link
[  451.993789][T23131] erspan0: entered allmulticast mode
[  452.004923][T23133] __nla_validate_parse: 12 callbacks suppressed
[  452.004943][T23133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5064'.
[  452.005006][T23131] bond16: (slave erspan0): making interface the new active one
[  452.022304][T23131] bond16: (slave erspan0): Enslaving as an active interface with an up link
[  452.149779][T23141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5067'.
[  452.298976][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5071'.
[  452.307306][T23148] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'.
[  452.563011][T23158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5074'.
[  452.706703][T23164] netlink: 'syz.1.5076': attribute type 1 has an invalid length.
[  452.754014][T23164] 8021q: adding VLAN 0 to HW filter on device bond17
[  452.805424][T23164] bond17: (slave gretap1): making interface the new active one
[  452.872984][T23164] bond17: (slave gretap1): Enslaving as an active interface with an up link
[  454.425072][T23213] batadv0: entered promiscuous mode
[  454.427852][T23213] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.576848][T23223] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  454.579131][T23223] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  454.667016][T23228] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  455.833575][T23244] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5097'.
[  456.327444][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5104'.
[  456.337705][T23268] openvswitch: netlink: Flow key attr not present in new flow.
[  456.400701][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5104'.
[  456.906208][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5106'.
[  457.104785][T23282] openvswitch: netlink: IPv4 tun info is not correct
[  457.291306][T23296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.335959][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5113'.
[  457.345448][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5113'.
[  457.353760][T23300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5113'.
[  457.464019][T23305] netlink: 'syz.1.5115': attribute type 5 has an invalid length.
[  457.482139][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5115'.
[  457.547122][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.574024][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.577791][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.604709][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.608075][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.622066][T23311] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5118'.
[  457.808814][T23325] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  457.816988][T23325] bond0: option all_slaves_active: invalid value (7)
[  457.853112][T23328] vlan3: entered promiscuous mode
[  457.999987][T23339] bridge0: left allmulticast mode
[  458.140515][T23342] erspan0: left allmulticast mode
[  458.280465][T23355] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  458.499540][T23374] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  458.626344][T23382] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  458.706146][T23386] bond25: (slave bridge15): Enslaving as an active interface with an up link
[  458.716536][T14048] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  458.722067][T23382] netlink: 'syz.0.5137': attribute type 10 has an invalid length.
[  458.725039][T23382] mac80211_hwsim hwsim20 wlan1: left allmulticast mode
[  458.737150][T23382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  458.740380][T23382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  458.843419][T14048] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  459.544192][T23440] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.550969][T23440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.557408][T23440] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.560781][T23440] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.566416][T23440] geneve1: entered promiscuous mode
[  459.568241][T23440] geneve1: entered allmulticast mode
[  461.127978][T23524] netlink: 'syz.1.5178': attribute type 6 has an invalid length.
[  461.999720][T23575] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.074884][T23575] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.146784][T23575] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.212796][T23575] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.355912][T23604] netlink: 'syz.1.5198': attribute type 2 has an invalid length.
[  462.363065][T23604] netlink: 'syz.1.5198': attribute type 2 has an invalid length.
[  462.371456][T23604] __nla_validate_parse: 55 callbacks suppressed
[  462.371474][T23604] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5198'.
[  462.407815][T23575] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.417005][T23575] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.428117][T23575] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.438995][T23575] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.444225][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5200'.
[  462.713633][T23633] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5208'.
[  462.824678][T23644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5211'.
[  462.886992][T23647] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.5213'.
[  463.076215][T23668] can: request_module (can-proto-0) failed.
[  463.217924][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5222'.
[  463.229592][T23679] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  463.245600][T23679] team0: Device ipvlan4 is already an upper device of the team interface
[  463.291290][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5221'.
[  463.546366][T23708] IPv6: Can't replace route, no match found
[  463.548818][T23708] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  463.654290][T23712] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5232'.
[  463.955309][T23706] netlink: 'syz.0.5231': attribute type 1 has an invalid length.
[  463.958451][T23706] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5231'.
[  463.994825][T23745] ip6gre4: entered allmulticast mode
[  464.142294][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5241'.
[  464.427905][T23764] netlink: 'syz.1.5245': attribute type 12 has an invalid length.
[  464.430911][T23764] netlink: 'syz.1.5245': attribute type 11 has an invalid length.
[  464.441418][T23764] netlink: 'syz.1.5245': attribute type 12 has an invalid length.
[  464.447593][T23764] netlink: 'syz.1.5245': attribute type 11 has an invalid length.
[  466.149788][T23836] netlink: 'syz.0.5269': attribute type 12 has an invalid length.
[  466.380558][T23856] netpci0: tun_chr_ioctl cmd 1074025681
[  466.778476][T23881] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  466.793008][T23881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.722338][T23894] __nla_validate_parse: 56 callbacks suppressed
[  467.722349][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5289'.
[  467.876662][T23915] netlink: 'syz.2.5295': attribute type 39 has an invalid length.
[  468.048037][T23925] IPVS: length: 163 != 8
[  468.140411][T23934] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5301'.
[  468.287363][T23936] netlink: 'syz.2.5302': attribute type 10 has an invalid length.
[  468.328877][T23946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5304'.
[  468.336331][T23946] netlink: 'syz.0.5304': attribute type 10 has an invalid length.
[  468.417735][T23951] netlink: 'syz.0.5308': attribute type 10 has an invalid length.
[  468.423752][T23951] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5308'.
[  468.582769][T23965] IPVS: length: 148 != 24
[  468.618371][T23967] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5313'.
[  468.648299][T23969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5314'.
[  468.663467][T23969] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5314'.
[  468.847369][T23976] netlink: 'syz.0.5317': attribute type 10 has an invalid length.
[  468.925363][T23975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5316'.
[  468.988326][T23975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5316'.
[  469.004363][T23975] netlink: 'syz.1.5316': attribute type 1 has an invalid length.
[  469.007640][T23975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5316'.
[  469.054384][T23987] netlink: 'syz.1.5319': attribute type 2 has an invalid length.
[  469.498897][T24010] dvmrp8: entered allmulticast mode
[  469.505112][T24009] dvmrp8: left allmulticast mode
[  470.588068][   T33] audit: type=1800 audit(1752974770.805:18): pid=24041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5336" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9250 res=0 errno=0
[  470.597754][   T33] audit: type=1800 audit(1752974770.815:19): pid=24041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5336" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9250 res=0 errno=0
[  471.748680][T24054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  471.879413][T24084] IPVS: Unknown mcast interface: dummy0
[  472.039686][T24106] netlink: 'syz.0.5354': attribute type 1 has an invalid length.
[  472.071482][T24106] bond12: (slave vxcan5): The slave device specified does not support setting the MAC address
[  472.075697][T24106] bond12: (slave vxcan5): Error -95 calling set_mac_address
[  472.125905][T24115] gretap2: entered promiscuous mode
[  472.129454][T24115] bond12: (slave gretap2): making interface the new active one
[  472.136127][T24115] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  472.146656][T24106] macvlan0: entered promiscuous mode
[  472.148420][T24106] macvlan0: entered allmulticast mode
[  472.150642][T24106] bond12: entered promiscuous mode
[  472.156381][T24106] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  472.162303][T24106] bond12: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  472.168444][T24106] bond12: left promiscuous mode
[  472.234203][T24124] syzkaller1: entered promiscuous mode
[  472.236074][T24124] syzkaller1: entered allmulticast mode
[  472.426319][T24129] tipc: Can't bind to reserved service type 2
[  472.800967][T24154] __nla_validate_parse: 12 callbacks suppressed
[  472.800982][T24154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5368'.
[  472.804429][T24151] x_tables: duplicate underflow at hook 2
[  472.939452][T24166] delete_channel: no stack
[  472.959245][T24165] delete_channel: no stack
[  473.166866][T24178] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5375'.
[  473.227960][T24182] netlink: 836 bytes leftover after parsing attributes in process `syz.1.5374'.
[  473.497128][T24203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5376'.
[  473.656479][T24204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5378'.
[  473.686104][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'.
[  473.689782][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'.
[  473.697343][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'.
[  473.700344][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'.
[  473.722698][T24211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'.
[  473.765001][T24213] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  473.892783][T24218] bond18: entered promiscuous mode
[  473.896438][T24218] 8021q: adding VLAN 0 to HW filter on device bond18
[  474.089308][T24234] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  475.734063][T24298] netlink: 'syz.2.5402': attribute type 21 has an invalid length.
[  475.737409][T24298] netlink: 'syz.2.5402': attribute type 4 has an invalid length.
[  475.739894][T24298] netlink: 'syz.2.5402': attribute type 3 has an invalid length.
[  475.980796][T24305] netlink: 'syz.2.5403': attribute type 9 has an invalid length.
[  476.054416][T24317] netlink: 'syz.0.5406': attribute type 1 has an invalid length.
[  476.072787][T24317] 8021q: adding VLAN 0 to HW filter on device bond13
[  476.089060][T24317] macvlan0: entered promiscuous mode
[  476.091127][T24317] macvlan0: entered allmulticast mode
[  476.097231][T24317] bond13: entered promiscuous mode
[  476.099846][T24317] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  476.112435][T24317] bond13: left promiscuous mode
[  476.918061][T24366] batadv2: entered promiscuous mode
[  476.920303][T24366] batadv2: entered allmulticast mode
[  477.036287][T24366] batadv2: entered allmulticast mode
[  477.039539][T24366] 8021q: adding VLAN 0 to HW filter on device batadv2
[  477.087977][T24374] xt_HMARK: spi-set and port-set can't be combined
[  477.223640][T24385] netlink: 'syz.2.5420': attribute type 21 has an invalid length.
[  477.233928][T24384] ip6gre1: entered allmulticast mode
[  477.383027][T24406] delete_channel: no stack
[  477.469680][T24419] wireguard0: entered promiscuous mode
[  477.474423][T24419] wireguard0: entered allmulticast mode
[  477.738624][T24452] netlink: 'syz.0.5439': attribute type 10 has an invalid length.
[  477.829183][T24460] __nla_validate_parse: 21 callbacks suppressed
[  477.829199][T24460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5442'.
[  477.910226][T24462] bond16: (slave erspan0): Releasing active interface
[  477.935671][T24462] bond16: (slave veth31): Releasing active interface
[  477.963700][T24471] netlink: 'syz.1.5443': attribute type 10 has an invalid length.
[  477.995450][T24462] bond17: (slave gretap1): Releasing active interface
[  478.201437][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5448'.
[  478.211328][T24484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.316296][T24488] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5449'.
[  478.661835][T12983] wlan0: Trigger new scan to find an IBSS to join
[  478.696980][T24496] netlink: 'syz.0.5451': attribute type 83 has an invalid length.
[  478.702803][T24496] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5451'.
[  478.853326][T24505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5454'.
[  478.948898][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5456'.
[  478.957495][T24509] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  479.449188][T24545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5467'.
[  479.457800][T24545] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.5467'.
[  479.465693][T24545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5467'.
[  479.750113][T24562] netlink: 'syz.2.5471': attribute type 1 has an invalid length.
[  479.756763][T24562] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5471'.
[  479.875611][T24569] bridge0: port 1(vlan0) entered blocking state
[  479.878153][T24569] bridge0: port 1(vlan0) entered disabled state
[  479.880263][T24569] vlan0: entered allmulticast mode
[  479.884199][T24569] bond0: entered allmulticast mode
[  479.887617][T24569] vlan0: entered promiscuous mode
[  479.889751][T24569] bond0: entered promiscuous mode
[  480.182577][T24585] xt_TPROXY: Can be used only with -p tcp or -p udp
[  480.486635][T24613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.744931][T24636] `: entered promiscuous mode
[  480.747851][T24636] xt_cgroup: path and classid specified
[  480.796672][T24643] validate_nla: 3 callbacks suppressed
[  480.796685][T24643] netlink: 'syz.0.5502': attribute type 10 has an invalid length.
[  480.898914][T24654] netlink: 'syz.2.5506': attribute type 1 has an invalid length.
[  480.921090][T24654] 8021q: adding VLAN 0 to HW filter on device bond27
[  480.935375][T24654] bond27: (slave gretap3): making interface the new active one
[  480.939605][T24654] bond27: (slave gretap3): Enslaving as an active interface with an up link
[  480.999785][T24666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  481.040856][T24670] netlink: ct family unspecified
[  481.043436][T24670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.285470][T24685] tipc: New replicast peer: 255.255.255.255
[  481.288165][T24685] tipc: Enabled bearer <udp:syz2>, priority 10
[  481.312009][T24685] tipc: Disabling bearer <udp:syz2>
[  481.322768][T24685] netlink: 'syz.1.5514': attribute type 1 has an invalid length.
[  481.612011][  T732] wlan0: Trigger new scan to find an IBSS to join
[  482.158046][T24691] netlink: 'syz.1.5517': attribute type 2 has an invalid length.
[  482.239311][T24704] netlink: 'syz.1.5521': attribute type 7 has an invalid length.
[  482.258598][T24706] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.324290][T24706] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.383664][T24706] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.440058][T24706] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.521064][T24706] Failed to register nexthop notifier
[  482.523884][T24732] netlink: 'syz.1.5528': attribute type 1 has an invalid length.
[  482.526674][T24732] netlink: 'syz.1.5528': attribute type 2 has an invalid length.
[  482.858555][T24760] __nla_validate_parse: 66 callbacks suppressed
[  482.858565][T24760] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5536'.
[  482.916118][T24768] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5538'.
[  482.919754][T24768] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  482.929583][T24772] x_tables: duplicate underflow at hook 1
[  482.933958][T24770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5538'.
[  482.938664][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5538'.
[  483.158446][T24780] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  484.652018][T12988] wlan0: Trigger new scan to find an IBSS to join
[  484.880873][T24827] veth0: entered promiscuous mode
[  484.900676][T24827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5555'.
[  484.956676][T24827] veth0 (unregistering): left promiscuous mode
[  485.035446][T24829] netlink: 'syz.1.5554': attribute type 1 has an invalid length.
[  485.186706][T24840] ip6gre2: entered allmulticast mode
[  485.300220][T24850] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5563'.
[  485.310191][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5562'.
[  485.617011][T12988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  485.671407][T24899] veth1: entered promiscuous mode
[  485.707403][T24904] syzkaller1: entered promiscuous mode
[  485.709096][T24904] syzkaller1: entered allmulticast mode
[  485.979695][T24920] netlink: 2528 bytes leftover after parsing attributes in process `syz.2.5584'.
[  485.983058][T24920] netlink: 2528 bytes leftover after parsing attributes in process `syz.2.5584'.
[  485.985870][T24920] netlink: 508 bytes leftover after parsing attributes in process `syz.2.5584'.
[  486.296384][T24953] 6: entered promiscuous mode
[  486.369762][T24962] netlink: 'syz.1.5596': attribute type 20 has an invalid length.
[  486.374283][T24962] netlink: 'syz.1.5596': attribute type 21 has an invalid length.
[  486.553163][T24975] nbd2: detected capacity change from 0 to 63
[  486.556498][T24977] block nbd2: NBD_DISCONNECT
[  486.560713][T24977] block nbd2: Disconnected due to user request.
[  486.566199][T24977] block nbd2: shutting down sockets
[  486.567283][T24558] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.576330][T24558] Buffer I/O error on dev nbd2, logical block 1, async page read
[  486.579866][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.583091][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  486.583363][   T60] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.586149][T24558] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.589273][   T60] Buffer I/O error on dev nbd2, logical block 2, async page read
[  486.594480][T24558] Buffer I/O error on dev nbd2, logical block 3, async page read
[  486.604132][T24558] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.608170][T24558] Buffer I/O error on dev nbd2, logical block 0, async page read
[  486.615109][T24558] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.619316][T24558] Buffer I/O error on dev nbd2, logical block 1, async page read
[  486.622101][T24558] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.624820][T24558] Buffer I/O error on dev nbd2, logical block 2, async page read
[  486.626412][T24983] xt_CT: You must specify a L4 protocol and not use inversions on it
[  486.627575][T24558] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.634714][T24558] Buffer I/O error on dev nbd2, logical block 3, async page read
[  486.642500][T24558] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.645509][T24558] Buffer I/O error on dev nbd2, logical block 0, async page read
[  486.650460][T24558] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  486.662253][T24558] Buffer I/O error on dev nbd2, logical block 1, async page read
[  486.679893][T24558] ldm_validate_partition_table(): Disk read failed.
[  486.684475][T24558] Dev nbd2: unable to read RDB block 0
[  486.688539][T24558]  nbd2: unable to read partition table
[  486.709872][T24558] ldm_validate_partition_table(): Disk read failed.
[  486.716836][T24558] Dev nbd2: unable to read RDB block 0
[  486.719934][T24558]  nbd2: unable to read partition table
[  486.896424][T25001] SET target dimension over the limit!
[  486.955309][T25005] netlink: 'syz.1.5609': attribute type 1 has an invalid length.
[  487.398276][T25036] set match dimension is over the limit!
[  488.326036][T25069] netlink: 'syz.0.5627': attribute type 12 has an invalid length.
[  488.360164][T25071] __nla_validate_parse: 53 callbacks suppressed
[  488.360177][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5628'.
[  488.409971][T25077] ieee802154 phy0 wpan0: encryption failed: -22
[  488.410462][T25078] sctp: [Deprecated]: syz.0.5629 (pid 25078) Use of int in max_burst socket option.
[  488.410462][T25078] Use struct sctp_assoc_value instead
[  488.773400][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5633'.
[  488.962778][T25102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5635'.
[  489.692210][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  489.711857][T25139] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  489.715904][T25139] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  489.718420][T25139] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  489.788376][T25143] netlink: 'syz.0.5648': attribute type 29 has an invalid length.
[  489.886505][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5650'.
[  490.060620][T25151] tipc: Resetting bearer <eth:syzkaller0>
[  490.065632][T25151] tipc: Resetting bearer <eth:syzkaller0>
[  490.100904][T25153] tipc: Resetting bearer <eth:syzkaller0>
[  490.210076][T25155] xt_HMARK: proto mask must be zero with L3 mode
[  490.221130][T25155] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  490.281762][T25155] delete_channel: no stack
[  490.397738][T25164] netlink: 'syz.2.5654': attribute type 10 has an invalid length.
[  490.603278][T25178] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5658'.
[  490.609765][T25175] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5658'.
[  490.624103][T25175] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[  490.640242][T25175] Cannot find add_set index 3 as target
[  490.653271][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'.
[  490.653918][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5660'.
[  490.661355][T25182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'.
[  490.951757][T25201] mac80211_hwsim hwsim20 syzkaller0: left promiscuous mode
[  490.954850][T25201] mac80211_hwsim hwsim20 syzkaller0: left allmulticast mode
[  490.962889][T25201] tipc: Resetting bearer <eth:syzkaller0>
[  491.179503][T25221] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  491.186797][T25221] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  491.216682][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5673'.
[  491.269865][   T33] audit: type=1107 audit(1752974791.485:20): pid=25228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  491.316942][T25234] netlink: 'syz.0.5677': attribute type 9 has an invalid length.
[  491.339791][T25237] netlink: 'syz.1.5678': attribute type 2 has an invalid length.
[  491.353542][T25237] netlink: 'syz.1.5678': attribute type 1 has an invalid length.
[  491.375807][T25239] syzkaller1: entered promiscuous mode
[  491.380223][T25239] syzkaller1: entered allmulticast mode
[  493.195276][T25306] netlink: 'syz.0.5695': attribute type 4 has an invalid length.
[  493.211065][T25312] netlink: 'syz.0.5695': attribute type 4 has an invalid length.
[  493.557731][T25333] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  493.570835][T25333] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  493.576873][T25334] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2
[  493.583142][T25334] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2
[  493.587943][T25334] set match dimension is over the limit!
[  493.699460][T25345] __nla_validate_parse: 19 callbacks suppressed
[  493.699474][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5705'.
[  493.791360][T25352] netlink: 'syz.1.5707': attribute type 32 has an invalid length.
[  493.799183][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5707'.
[  493.802382][T25352] (unnamed net_device) (uninitialized): option coupled_control: invalid value (152)
[  493.901714][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5709'.
[  493.908353][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5709'.
[  493.913206][T25366] netlink: 'syz.1.5709': attribute type 1 has an invalid length.
[  493.916018][T25366] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5709'.
[  493.920125][T25366] block nbd0: Unsupported socket: shutdown callout must be supported.
[  493.933821][T25364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5710'.
[  494.110707][T25382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5716'.
[  494.117859][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5716'.
[  494.121004][T25382] openvswitch: netlink: Missing key (keys=40, expected=100)
[  494.165376][T25385] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  494.167850][T25377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  494.295325][T25401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5719'.
[  494.528433][T25433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.534184][T25433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5727'.
[  494.657919][T25439] xt_CT: You must specify a L4 protocol and not use inversions on it
[  495.253239][T25444] netlink: 'syz.0.5730': attribute type 10 has an invalid length.
[  495.256575][T25444] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  495.357787][T25458] netlink: 'syz.1.5733': attribute type 29 has an invalid length.
[  495.365741][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.368620][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.372002][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.374864][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.378104][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.380801][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.385355][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.389098][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.392473][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.395915][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.398768][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.401430][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.404577][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.407882][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.410790][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.418434][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.424150][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.427148][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.431980][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.440276][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.450646][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.455141][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.458831][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.464870][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.471916][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.482981][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.489470][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.521811][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.527806][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.540958][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.548888][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.560210][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.569380][T25465] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  495.669902][T25476] netlink: 'syz.2.5739': attribute type 12 has an invalid length.
[  495.984454][T25493] netlink: 'syz.2.5746': attribute type 3 has an invalid length.
[  496.026696][T25498] netlink: 'syz.1.5747': attribute type 1 has an invalid length.
[  496.048498][T25498] 8021q: adding VLAN 0 to HW filter on device bond19
[  496.414499][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  496.540135][T25541] IPv6: NLM_F_CREATE should be specified when creating new route
[  496.546332][T25542] xfrm2: entered promiscuous mode
[  496.548323][T25542] xfrm2: entered allmulticast mode
[  496.569364][T25534] xt_hashlimit: size too large, truncated to 1048576
[  496.978137][T25558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  497.478536][T25587] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  497.753927][T25592] syz.1.5769: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  497.761122][T25592] CPU: 1 UID: 0 PID: 25592 Comm: syz.1.5769 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  497.761143][T25592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  497.761151][T25592] Call Trace:
[  497.761156][T25592]  <TASK>
[  497.761164][T25592]  dump_stack_lvl+0x189/0x250
[  497.761189][T25592]  ? __pfx_dump_stack_lvl+0x10/0x10
[  497.761202][T25592]  ? __pfx__printk+0x10/0x10
[  497.761219][T25592]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  497.761235][T25592]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  497.761251][T25592]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  497.761267][T25592]  warn_alloc+0x214/0x310
[  497.761283][T25592]  ? __pfx_warn_alloc+0x10/0x10
[  497.761297][T25592]  ? __get_vm_area_node+0x28f/0x300
[  497.761316][T25592]  ? nf_tables_newset+0x132b/0x2530
[  497.761338][T25592]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  497.761380][T25592]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  497.761401][T25592]  ? rcu_is_watching+0x15/0xb0
[  497.761418][T25592]  ? nf_tables_newset+0x132b/0x2530
[  497.761435][T25592]  ? nf_tables_newset+0x132b/0x2530
[  497.761451][T25592]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  497.761469][T25592]  ? nf_tables_newset+0x132b/0x2530
[  497.761511][T25592]  ? nft_table_lookup+0x211/0x230
[  497.761523][T25592]  ? nft_set_lookup+0x128/0x150
[  497.761534][T25592]  ? nft_hash_privsize+0xbf/0xf0
[  497.761553][T25592]  nf_tables_newset+0x132b/0x2530
[  497.761583][T25592]  ? __pfx_nf_tables_newset+0x10/0x10
[  497.761614][T25592]  ? __nla_parse+0x40/0x60
[  497.761631][T25592]  nfnetlink_rcv+0x1132/0x2520
[  497.761670][T25592]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  497.761698][T25592]  ? ref_tracker_free+0x63a/0x7d0
[  497.761734][T25592]  ? __netlink_deliver_tap+0x807/0x850
[  497.761760][T25592]  ? netlink_deliver_tap+0x2e/0x1b0
[  497.761776][T25592]  ? netlink_deliver_tap+0x2e/0x1b0
[  497.761796][T25592]  netlink_unicast+0x75c/0x8e0
[  497.761815][T25592]  netlink_sendmsg+0x805/0xb30
[  497.761835][T25592]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.761852][T25592]  ? aa_sock_msg_perm+0x94/0x160
[  497.761866][T25592]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  497.761879][T25592]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.761894][T25592]  __sock_sendmsg+0x21c/0x270
[  497.761938][T25592]  ____sys_sendmsg+0x505/0x830
[  497.761961][T25592]  ? __pfx_____sys_sendmsg+0x10/0x10
[  497.761986][T25592]  ? import_iovec+0x74/0xa0
[  497.762038][T25592]  ___sys_sendmsg+0x21f/0x2a0
[  497.762059][T25592]  ? __pfx____sys_sendmsg+0x10/0x10
[  497.762103][T25592]  ? __fget_files+0x2a/0x420
[  497.762117][T25592]  ? __fget_files+0x3a0/0x420
[  497.762137][T25592]  __x64_sys_sendmsg+0x19b/0x260
[  497.762159][T25592]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  497.762188][T25592]  ? rcu_is_watching+0x15/0xb0
[  497.762208][T25592]  ? do_syscall_64+0xbe/0x3b0
[  497.762226][T25592]  do_syscall_64+0xfa/0x3b0
[  497.762238][T25592]  ? lockdep_hardirqs_on+0x9c/0x150
[  497.762252][T25592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.762266][T25592]  ? exc_page_fault+0x9f/0xf0
[  497.762278][T25592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.762290][T25592] RIP: 0033:0x7f8a96f8e9a9
[  497.762306][T25592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.762317][T25592] RSP: 002b:00007f8a97e56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.762332][T25592] RAX: ffffffffffffffda RBX: 00007f8a971b5fa0 RCX: 00007f8a96f8e9a9
[  497.762342][T25592] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  497.762351][T25592] RBP: 00007f8a97010d69 R08: 0000000000000000 R09: 0000000000000000
[  497.762359][T25592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  497.762368][T25592] R13: 0000000000000000 R14: 00007f8a971b5fa0 R15: 00007ffde9451da8
[  497.762388][T25592]  </TASK>
[  497.904623][T25592] Mem-Info:
[  497.906090][T25592] active_anon:12267 inactive_anon:0 isolated_anon:0
[  497.906090][T25592]  active_file:1164 inactive_file:38369 isolated_file:0
[  497.906090][T25592]  unevictable:1768 dirty:104 writeback:0
[  497.906090][T25592]  slab_reclaimable:10929 slab_unreclaimable:89540
[  497.906090][T25592]  mapped:18308 shmem:2487 pagetables:1002
[  497.906090][T25592]  sec_pagetables:0 bounce:0
[  497.906090][T25592]  kernel_misc_reclaimable:0
[  497.906090][T25592]  free:246429 free_pcp:21514 free_cma:0
[  497.928622][T25592] Node 0 active_anon:12588kB inactive_anon:0kB active_file:3592kB inactive_file:23216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40656kB dirty:304kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9520kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  497.941430][T25592] Node 1 active_anon:36480kB inactive_anon:0kB active_file:1064kB inactive_file:130260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32576kB dirty:112kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4692kB pagetables:1636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  497.966152][T25592] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  497.981365][T25592] lowmem_reserve[]: 0 812 812 812 812
[  497.983811][T25592] Node 0 DMA32 free:261844kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12588kB inactive_anon:0kB active_file:3592kB inactive_file:23216kB unevictable:3536kB writepending:304kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:41236kB local_pcp:20276kB free_cma:0kB
[  497.999850][T25613] tipc: Resetting bearer <eth:syzkaller0>
[  498.002804][T25592] lowmem_reserve[]: 0 0 0 0 0
[  498.004892][T25613] bond12: (slave gretap2): Releasing active interface
[  498.008301][T25613] vlan0: left allmulticast mode
[  498.010018][T25613] bond0: left allmulticast mode
[  498.014338][T25613] vlan0: left promiscuous mode
[  498.015902][T25613] bond0: left promiscuous mode
[  498.017958][T25613] bridge0: port 1(vlan0) entered disabled state
[  498.020292][T25592] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  498.030731][T25592] lowmem_reserve[]: 0 0 854 854 854
[  498.033837][T25592] Node 1 Normal free:250020kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36480kB inactive_anon:0kB active_file:1064kB inactive_file:130260kB unevictable:3536kB writepending:112kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:45540kB local_pcp:21908kB free_cma:0kB
[  498.047482][T25592] lowmem_reserve[]: 0 0 0 0 0
[  498.049425][T25592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  498.058227][T25592] Node 0 DMA32: 445*4kB (UM) 1098*8kB (UM) 369*16kB (UME) 160*32kB (UME) 149*64kB (UM) 108*128kB (UM) 19*256kB (UME) 4*512kB (UM) 11*1024kB (UME) 5*2048kB (UME) 46*4096kB (UM) = 261780kB
[  498.066089][T25592] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  498.081777][T25592] Node 1 Normal: 513*4kB (U) 371*8kB (U) 301*16kB (U) 330*32kB (UE) 384*64kB (UME) 212*128kB (UM) 101*256kB (UM) 43*512kB (UM) 21*1024kB (U) 3*2048kB (UM) 25*4096kB (UM) = 250028kB
[  498.088762][T25592] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  498.100269][T25592] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  498.105191][T25592] 42326 total pagecache pages
[  498.107022][T25592] 0 pages in swap cache
[  498.108689][T25592] Free swap  = 124996kB
[  498.110438][T25592] Total swap = 124996kB
[  498.112822][T25592] 786301 pages RAM
[  498.114303][T25592] 0 pages HighMem/MovableOnly
[  498.116236][T25592] 241056 pages reserved
[  498.117826][T25592] 0 pages cma reserved
[  498.439338][T25634] netlink: 'syz.2.5780': attribute type 13 has an invalid length.
[  498.769683][T25661] __nla_validate_parse: 52 callbacks suppressed
[  498.769701][T25661] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5788'.
[  499.303214][T25691] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  499.449881][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5799'.
[  499.581267][T25706] netlink: 'syz.2.5803': attribute type 83 has an invalid length.
[  499.780052][T25717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5806'.
[  499.812324][T25719] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5807'.
[  500.038931][T25735] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  500.068125][T25735] tipc: Resetting bearer <eth:syzkaller0>
[  500.074602][T25735] netlink: 'syz.0.5812': attribute type 10 has an invalid length.
[  500.079153][T25735] mac80211_hwsim hwsim20 wlan1: left allmulticast mode
[  500.405725][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'.
[  500.416793][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'.
[  500.454710][T25750] netlink: 'syz.1.5818': attribute type 13 has an invalid length.
[  500.457636][T25750] netlink: 'syz.1.5818': attribute type 17 has an invalid length.
[  500.626852][T25764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5822'.
[  500.664252][T25769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5824'.
[  500.822216][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'.
[  500.926449][T25787] netlink: 'syz.2.5829': attribute type 12 has an invalid length.
[  500.935115][T25789] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  500.938661][T25789] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  501.016904][T25792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'.
[  501.070146][T25799] netlink: 'syz.0.5833': attribute type 1 has an invalid length.
[  501.078730][T25799] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  501.110353][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.122336][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.127084][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.132620][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.137371][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.142371][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.147234][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.152553][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.157309][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.162418][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.167302][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.172276][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.177023][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.181954][T25796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  501.216313][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  501.252322][T25809] netlink: 'syz.2.5835': attribute type 1 has an invalid length.
[  502.018769][T25874] x_tables: duplicate underflow at hook 2
[  503.134955][T25914] netlink: 'syz.0.5866': attribute type 5 has an invalid length.
[  503.274581][T25919] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  503.476244][T25940] xt_nfacct: accounting object `syz1' does not exists
[  503.850142][T25953] __nla_validate_parse: 88 callbacks suppressed
[  503.850156][T25953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5877'.
[  504.524700][T25969] netlink: 'syz.1.5881': attribute type 10 has an invalid length.
[  504.842995][T25992] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  504.847584][T25992] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  505.722039][T26013] openvswitch: netlink: EtherType 10 is less than min 600
[  505.798874][T26021] netlink: 'syz.0.5892': attribute type 16 has an invalid length.
[  505.828936][T26020] netlink: 'syz.2.5894': attribute type 1 has an invalid length.
[  505.934126][T26032] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5898'.
[  506.217817][T26033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5897'.
[  506.325650][T26059] netlink: 'syz.1.5904': attribute type 21 has an invalid length.
[  506.328368][T26059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5904'.
[  506.347963][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'.
[  506.365724][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5906'.
[  506.407465][T26066] netlink: 'syz.1.5908': attribute type 1 has an invalid length.
[  506.613857][ T5866] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  506.616737][T26078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5909'.
[  506.620339][T26078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5909'.
[  506.629890][T26080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5910'.
[  506.638593][T26080] batadv0: entered promiscuous mode
[  506.640697][T26080] batadv0: entered allmulticast mode
[  506.820550][T26081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5910'.
[  507.017845][T26090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  507.448847][T26096] netlink: 'syz.2.5913': attribute type 1 has an invalid length.
[  507.560932][T26109] nbd: illegal input index 65508
[  507.623496][T26111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  507.634282][T26113] netlink: 'syz.1.5919': attribute type 1 has an invalid length.
[  507.653074][T26113] 8021q: adding VLAN 0 to HW filter on device bond22
[  507.689961][T26113] bond22: (slave veth39): Enslaving as an active interface with a down link
[  507.710766][T26113] vlan3: entered allmulticast mode
[  507.715566][T26113] bond22: entered allmulticast mode
[  507.720404][T26113] bond22: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  507.980898][T26136] netlink: 'syz.0.5925': attribute type 13 has an invalid length.
[  508.101189][T26141] syzkaller1: entered promiscuous mode
[  508.106545][T26141] syzkaller1: entered allmulticast mode
[  508.210744][T22734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.214374][T22734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.275932][   T33] audit: type=1800 audit(1752974808.495:21): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5930" name=36FFFF dev="tmpfs" ino=10324 res=0 errno=0
[  508.877942][T26178] __nla_validate_parse: 3 callbacks suppressed
[  508.877955][T26178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5935'.
[  509.098878][T26195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5941'.
[  509.125482][T26197] xt_TCPMSS: Only works on TCP SYN packets
[  509.156391][T26202] netlink: 'syz.0.5943': attribute type 11 has an invalid length.
[  509.417720][T26230] openvswitch: netlink: Message has 20 unknown bytes.
[  509.420781][T26230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.510325][T26238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5954'.
[  509.521322][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5954'.
[  509.565598][T26240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  509.568895][T26240] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  509.597213][T26251] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5958'.
[  509.606466][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5958'.
[  509.617059][T26242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5956'.
[  509.624797][T26252] unknown channel width for channel at 909000KHz?
[  509.879419][T26273] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (65485) !
[  510.037672][T26277] veth0: entered promiscuous mode
[  510.040526][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5967'.
[  510.082829][T26277] veth0 (unregistering): left promiscuous mode
[  510.190107][T26283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5969'.
[  510.283849][T26287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5971'.
[  510.360431][T26291] xt_nfacct: accounting object `syz1' does not exists
[  510.593674][T26296] netlink: 'syz.1.5974': attribute type 30 has an invalid length.
[  510.885825][T26302] netlink: 'syz.2.5977': attribute type 11 has an invalid length.
[  510.950304][T26306] sit0: Master is either lo or non-ether device
[  511.270195][T26327] IPVS: Unknown mcast interface: bridge_slave_0
[  511.275514][T26327] IPVS: Unknown mcast interface: bridge_slave_0
[  511.428215][T26339] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  511.496637][T26343] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (43)
[  511.617371][T26347] netlink: 'syz.2.5991': attribute type 32 has an invalid length.
[  511.624670][T26348] netlink: 'syz.2.5991': attribute type 32 has an invalid length.
[  511.725080][T26356] pim6reg1: entered allmulticast mode
[  511.775822][T26306] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[  511.865091][T26360] netlink: 'syz.2.5995': attribute type 30 has an invalid length.
[  511.870618][T26360] netlink: 'syz.2.5995': attribute type 10 has an invalid length.
[  512.056086][T26376] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  512.076807][T26381] pim6reg: entered allmulticast mode
[  512.097603][T26381] pim6reg: left allmulticast mode
[  512.185388][T26386] SET target dimension over the limit!
[  512.293930][T26395] netlink: 'syz.2.6004': attribute type 1 has an invalid length.
[  512.874631][   T33] audit: type=1800 audit(1752974813.095:22): pid=26424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6014" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7911 res=0 errno=0
[  512.971746][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  513.045969][T26432] netlink: 'syz.0.6016': attribute type 2 has an invalid length.
[  513.048975][T26432] netlink: 'syz.0.6016': attribute type 1 has an invalid length.
[  513.129697][T26435] netlink: 'syz.1.6017': attribute type 1 has an invalid length.
[  513.180722][T26443] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  513.186479][T26443] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode
[  513.189073][T26443] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode
[  513.192263][T26443] tipc: Resetting bearer <eth:syzkaller0>
[  514.150118][T26471] xt_l2tp: invalid flags combination: 4
[  514.156694][T26471] __nla_validate_parse: 23 callbacks suppressed
[  514.156704][T26471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6028'.
[  514.320502][T26478] openvswitch: netlink: IPv6 tunnel dst address is zero
[  514.333388][T26478] tc_dump_action: action bad kind
[  514.404675][T26480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6031'.
[  514.606618][T26486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6033'.
[  514.728582][T26492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'.
[  515.116267][T26520] tipc: New replicast peer: 255.255.255.255
[  515.122452][T26520] tipc: Enabled bearer <udp:syz2>, priority 10
[  515.965052][T26524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6044'.
[  515.968503][T26524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6044'.
[  515.972234][T26524] validate_nla: 4 callbacks suppressed
[  515.972243][T26524] netlink: 'syz.1.6044': attribute type 9 has an invalid length.
[  515.978198][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6044'.
[  515.990611][T26524] macvlan5: entered promiscuous mode
[  515.993486][T26524] hsr0: entered promiscuous mode
[  515.995681][T26524] macvlan5: entered allmulticast mode
[  515.997801][T26524] hsr0: entered allmulticast mode
[  515.999810][T26524] hsr_slave_0: entered allmulticast mode
[  516.002305][T26524] hsr_slave_1: entered allmulticast mode
[  516.028155][T26529] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  516.131229][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6050'.
[  516.837042][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6054'.
[  516.865937][T26556] block nbd2: not configured, cannot reconfigure
[  516.868639][T26556] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6055'.
[  517.100574][T26575] tap0: tun_chr_ioctl cmd 1074025677
[  517.102772][T26575] tap0: linktype set to 786
[  517.168875][T26571] bond25: (slave bridge15): Releasing backup interface
[  517.176076][T26571] bond27: (slave gretap3): Releasing active interface
[  517.869212][T12985] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  517.889636][T26608] openvswitch: netlink: Message has 4 unknown bytes.
[  518.078146][T26630] netlink: 'syz.2.6074': attribute type 1 has an invalid length.
[  518.224921][T26644] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  518.242795][T26645] tipc: Enabling of bearer <et:g> rejected, media not registered
[  518.751462][T26665] netlink: del zone limit has 4 unknown bytes
[  518.765319][T26663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  518.769932][T26663] gretap2: entered promiscuous mode
[  518.772328][T26663] gretap2: entered allmulticast mode
[  518.843722][T26667] openvswitch: netlink: Flow key attr not present in new flow.
[  519.088796][T26677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  519.128459][T26682] netlink: 'syz.0.6090': attribute type 20 has an invalid length.
[  519.322968][T26696] __nla_validate_parse: 23 callbacks suppressed
[  519.322986][T26696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6092'.
[  519.336527][T26695] netlink: 'syz.1.6093': attribute type 3 has an invalid length.
[  519.488036][T26705] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  519.567440][T26710] netlink: 'syz.1.6098': attribute type 10 has an invalid length.
[  519.579050][T26711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6099'.
[  519.669565][T26717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6100'.
[  519.681890][T26717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6100'.
[  519.685858][T26717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6100'.
[  519.787708][T26724] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6103'.
[  519.789167][T26725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6102'.
[  519.799618][T26725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'.
[  519.804322][T26725] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  519.807997][T26725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.827904][T26724] xt_CT: No such helper "snmp"
[  520.078371][T26745] netlink: 'syz.2.6106': attribute type 11 has an invalid length.
[  520.081397][T26745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6106'.
[  520.093796][T26745] xt_time: invalid argument - start or stop time greater than 23:59:59
[  520.191468][T26749] SET target dimension over the limit!
[  520.195339][T26749] SET target dimension over the limit!
[  520.197684][T26749] SET target dimension over the limit!
[  520.199964][T26749] SET target dimension over the limit!
[  520.265235][T26755] netlink: 'syz.2.6110': attribute type 1 has an invalid length.
[  520.268460][T26755] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6110'.
[  520.275384][T26755] netlink: 'syz.2.6110': attribute type 1 has an invalid length.
[  521.722386][T26831] openvswitch: netlink: IP tunnel TTL not specified.
[  522.112137][T26865] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  522.114325][T26865] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  523.455680][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  524.261809][T26986] xt_hashlimit: size too large, truncated to 1048576
[  524.311286][T26986] syz.1.6170: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  524.319551][T26986] CPU: 0 UID: 0 PID: 26986 Comm: syz.1.6170 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  524.319564][T26986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  524.319570][T26986] Call Trace:
[  524.319575][T26986]  <TASK>
[  524.319579][T26986]  dump_stack_lvl+0x189/0x250
[  524.319597][T26986]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  524.319613][T26986]  ? __pfx_dump_stack_lvl+0x10/0x10
[  524.319623][T26986]  ? __pfx__printk+0x10/0x10
[  524.319635][T26986]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  524.319648][T26986]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  524.319662][T26986]  warn_alloc+0x214/0x310
[  524.319674][T26986]  ? __pfx_warn_alloc+0x10/0x10
[  524.319686][T26986]  ? __get_vm_area_node+0x28f/0x300
[  524.319699][T26986]  ? htable_create+0xfc/0x7a0
[  524.319710][T26986]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  524.319737][T26986]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  524.319752][T26986]  ? rcu_is_watching+0x15/0xb0
[  524.319762][T26986]  ? htable_create+0xfc/0x7a0
[  524.319773][T26986]  ? htable_create+0xfc/0x7a0
[  524.319780][T26986]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  524.319794][T26986]  ? htable_create+0xfc/0x7a0
[  524.319801][T26986]  ? hashlimit_pernet+0x23/0x240
[  524.319812][T26986]  htable_create+0xfc/0x7a0
[  524.319823][T26986]  hashlimit_mt_check_common+0x719/0xa10
[  524.319836][T26986]  xt_check_match+0x3d1/0xab0
[  524.319849][T26986]  ? __pfx___mutex_lock+0x10/0x10
[  524.319862][T26986]  ? __pfx_xt_check_match+0x10/0x10
[  524.319876][T26986]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  524.319892][T26986]  ? xt_find_match+0x1f7/0x250
[  524.319908][T26986]  translate_table+0x1553/0x2040
[  524.319930][T26986]  ? __pfx_translate_table+0x10/0x10
[  524.319943][T26986]  ? __might_fault+0xb0/0x130
[  524.319964][T26986]  ? _copy_from_user+0x94/0xb0
[  524.319980][T26986]  do_ip6t_set_ctl+0x970/0xce0
[  524.319995][T26986]  ? rcu_is_watching+0x15/0xb0
[  524.320004][T26986]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  524.320024][T26986]  ? __pfx___mutex_lock+0x10/0x10
[  524.320033][T26986]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  524.320046][T26986]  ? __lock_acquire+0xab9/0xd20
[  524.320060][T26986]  nf_setsockopt+0x26f/0x290
[  524.320076][T26986]  rawv6_setsockopt+0x23b/0x5b0
[  524.320087][T26986]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  524.320094][T26986]  ? aa_sock_opt_perm+0x74/0x110
[  524.320105][T26986]  ? sock_common_setsockopt+0x36/0xc0
[  524.320116][T26986]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  524.320149][T26986]  do_sock_setsockopt+0x17c/0x1b0
[  524.320164][T26986]  __x64_sys_setsockopt+0x13f/0x1b0
[  524.320178][T26986]  do_syscall_64+0xfa/0x3b0
[  524.320189][T26986]  ? lockdep_hardirqs_on+0x9c/0x150
[  524.320198][T26986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.320206][T26986]  ? exc_page_fault+0x9f/0xf0
[  524.320215][T26986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.320223][T26986] RIP: 0033:0x7f8a96f8e9a9
[  524.320232][T26986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.320240][T26986] RSP: 002b:00007f8a97e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  524.320249][T26986] RAX: ffffffffffffffda RBX: 00007f8a971b6080 RCX: 00007f8a96f8e9a9
[  524.320255][T26986] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000045
[  524.320260][T26986] RBP: 00007f8a97010d69 R08: 00000000000005c0 R09: 0000000000000000
[  524.320265][T26986] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  524.320271][T26986] R13: 0000000000000000 R14: 00007f8a971b6080 R15: 00007ffde9451da8
[  524.320284][T26986]  </TASK>
[  524.320288][T26986] Mem-Info:
[  524.436349][T26986] active_anon:12202 inactive_anon:0 isolated_anon:0
[  524.436349][T26986]  active_file:1196 inactive_file:38379 isolated_file:0
[  524.436349][T26986]  unevictable:1768 dirty:92 writeback:0
[  524.436349][T26986]  slab_reclaimable:11081 slab_unreclaimable:90301
[  524.436349][T26986]  mapped:18242 shmem:2488 pagetables:1028
[  524.436349][T26986]  sec_pagetables:0 bounce:0
[  524.436349][T26986]  kernel_misc_reclaimable:0
[  524.436349][T26986]  free:242390 free_pcp:23902 free_cma:0
[  524.450361][T26986] Node 0 active_anon:12180kB inactive_anon:0kB active_file:3540kB inactive_file:23256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40576kB dirty:304kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9560kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  524.460409][T26986] Node 1 active_anon:36424kB inactive_anon:0kB active_file:1244kB inactive_file:130260kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32392kB dirty:64kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4668kB pagetables:1940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  524.470924][T26986] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  524.480085][T26986] lowmem_reserve[]: 0 812 812 812 812
[  524.481858][T26986] Node 0 DMA32 free:245528kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12180kB inactive_anon:0kB active_file:3540kB inactive_file:23256kB unevictable:3536kB writepending:304kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:48080kB local_pcp:28692kB free_cma:0kB
[  524.491855][T26986] lowmem_reserve[]: 0 0 0 0 0
[  524.493486][T26986] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  524.506327][T27001] openvswitch: netlink: Key type 10512 is out of range max 32
[  524.508812][T27003] openvswitch: netlink: Key type 10512 is out of range max 32
[  524.519974][T26986] lowmem_reserve[]: 0 0 854 854 854
[  524.521736][T26986] Node 1 Normal free:249508kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36356kB inactive_anon:0kB active_file:1244kB inactive_file:130260kB unevictable:3536kB writepending:64kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48704kB local_pcp:17468kB free_cma:0kB
[  524.532701][T27004] __nla_validate_parse: 16 callbacks suppressed
[  524.532711][T27004] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6175'.
[  524.537597][T26986] lowmem_reserve[]: 0 0 0 0 0
[  524.539143][T26986] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  524.545045][T26986] Node 0 DMA32: 1022*4kB (UM) 848*8kB (UME) 202*16kB (UME) 214*32kB (UME) 277*64kB (UM) 50*128kB (UME) 29*256kB (UME) 11*512kB (UM) 15*1024kB (UME) 10*2048kB (UME) 37*4096kB (UM) = 245528kB
[  524.547213][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'.
[  524.551326][T26986] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  524.559477][T26986] Node 1 Normal: 501*4kB (UM) 240*8kB (UM) 183*16kB (UM) 153*32kB (M) 403*64kB (UME) 214*128kB (UME) 105*256kB (UME) 44*512kB (UM) 22*1024kB (UE) 3*2048kB (UE) 26*4096kB (UM) = 249508kB
[  524.576092][T26986] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  524.579263][T26986] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  524.584729][T26986] 42063 total pagecache pages
[  524.586350][T26986] 0 pages in swap cache
[  524.587663][T26986] Free swap  = 124996kB
[  524.588949][T26986] Total swap = 124996kB
[  524.590237][T26986] 786301 pages RAM
[  524.591406][T26986] 0 pages HighMem/MovableOnly
[  524.592903][T26986] 241056 pages reserved
[  524.594350][T26986] 0 pages cma reserved
[  524.734136][T27021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6180'.
[  524.959044][T27042] x_tables: ip6_tables: mh match: only valid for protocol 135
[  525.069246][T27050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6187'.
[  525.135302][T27053] syzkaller1: entered promiscuous mode
[  525.154885][T27053] syzkaller1: entered allmulticast mode
[  525.165684][T27053] : entered allmulticast mode
[  525.358593][T27071] 6: left promiscuous mode
[  525.364194][T27071] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.372232][T27071] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.385932][T27071] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.388665][T27071] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  525.394148][T27071] geneve1: left promiscuous mode
[  525.400735][T27071] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  525.404449][T27071] tipc: Resetting bearer <eth:syzkaller0>
[  525.411250][T27071] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  525.421318][T27071] geneve2: left promiscuous mode
[  525.432617][T27071] ip6tnl3: left promiscuous mode
[  525.434339][T27071] gretap1: left promiscuous mode
[  525.436316][T27071] veth9: left promiscuous mode
[  525.442804][T27071] bridge6: left promiscuous mode
[  525.444507][T27071] bridge7: left promiscuous mode
[  525.446135][T27071] bond14: left promiscuous mode
[  525.447727][T27071] gtp1: left promiscuous mode
[  525.449400][T27071] batadv0: left promiscuous mode
[  525.476476][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6195'.
[  525.482912][T27071] macvlan5: left promiscuous mode
[  525.484712][T27071] veth11: left promiscuous mode
[  525.486258][T27071] ip6erspan0: left promiscuous mode
[  525.487859][T27071] bond17: left promiscuous mode
[  525.489403][T27071] bond18: left promiscuous mode
[  525.490985][T27071] vti1: left promiscuous mode
[  525.493452][T27071] sit3: left promiscuous mode
[  525.495192][T27071] bond21: left promiscuous mode
[  525.497217][T27071] bond24: left promiscuous mode
[  525.781229][T27101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6202'.
[  525.949956][T27121] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  526.000308][T27126] netlink: 'syz.2.6210': attribute type 58 has an invalid length.
[  526.004481][T27126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6210'.
[  526.007859][T27129] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6212'.
[  526.022486][T27129] netlink: 'syz.1.6212': attribute type 10 has an invalid length.
[  526.026217][T27127] netlink: 'syz.0.6211': attribute type 5 has an invalid length.
[  526.028722][T27129] team0: Device ipvlan1 failed to register rx_handler
[  526.032591][T27127] netlink: 'syz.0.6211': attribute type 2 has an invalid length.
[  526.035583][T27127] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6211'.
[  526.105660][T27133] C: renamed from lo
[  526.120084][T27133] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  526.130350][T27138] netlink: 'syz.1.6216': attribute type 10 has an invalid length.
[  526.138081][T27138] team0: Device ipvlan1 failed to register rx_handler
[  526.146797][T27138] netlink: 'syz.1.6216': attribute type 1 has an invalid length.
[  526.149867][T27138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6216'.
[  526.157861][T27140] netlink: 'syz.1.6216': attribute type 10 has an invalid length.
[  526.163625][T27140] team0: Device ipvlan1 failed to register rx_handler
[  526.170396][T27143] tipc: Resetting bearer <eth:syzkaller0>
[  526.311770][T27145] vlan0: entered promiscuous mode
[  526.313970][T27145] bond0: entered promiscuous mode
[  526.910861][T27190] netlink: 'syz.1.6228': attribute type 10 has an invalid length.
[  527.106220][T27201] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  527.109180][T27201] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  527.145389][T27203] netlink: 'syz.2.6231': attribute type 7 has an invalid length.
[  527.213284][T27206] netlink: 'syz.2.6233': attribute type 12 has an invalid length.
[  528.700383][T27264] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  528.749319][T27268] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  528.889449][T27280] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  528.952003][T27284] openvswitch: netlink: Missing valid actions attribute.
[  528.954403][T27284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.354801][T27311] syzkaller1: entered promiscuous mode
[  529.356628][T27311] syzkaller1: entered allmulticast mode
[  529.629198][T27322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.827327][T27335] 8021q: adding VLAN 0 to HW filter on device bond23
[  530.021831][T27348] __nla_validate_parse: 7 callbacks suppressed
[  530.021843][T27348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6270'.
[  530.070978][T27350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6271'.
[  530.111029][T27359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6273'.
[  530.260134][   T33] audit: type=1800 audit(1752974830.475:23): pid=27365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6276" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=8370 res=0 errno=0
[  530.266345][T27370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  530.271173][T27370] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  530.283149][   T33] audit: type=1804 audit(1752974830.495:24): pid=27365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6276" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=8370 res=1 errno=0
[  530.382897][T27377] bond24: entered promiscuous mode
[  530.384590][T27377] bond24: entered allmulticast mode
[  530.386520][T27377] 8021q: adding VLAN 0 to HW filter on device bond24
[  530.436952][T27382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6281'.
[  530.442668][T27382] tipc: Resetting bearer <eth:syzkaller0>
[  530.455989][T27384] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  530.530005][T27391] bond22: (slave veth39): Releasing active interface
[  530.841331][T27419] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6290'.
[  530.877257][T27420] delete_channel: no stack
[  530.912130][T27423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6293'.
[  530.915447][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6293'.
[  531.136389][T27435] validate_nla: 6 callbacks suppressed
[  531.136409][T27435] netlink: 'syz.0.6298': attribute type 21 has an invalid length.
[  531.143911][T27435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6298'.
[  531.208451][T27437] netlink: 'syz.0.6299': attribute type 1 has an invalid length.
[  531.211254][T27437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6299'.
[  531.453919][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'.
[  531.457036][T27456] netlink: 'syz.0.6305': attribute type 1 has an invalid length.
[  531.516681][T27457] xt_CT: No such helper "pptp"
[  531.559031][T27456] nbd: socks must be embedded in a SOCK_ITEM attr
[  531.563215][T27456] block nbd0: shutting down sockets
[  531.754311][T27471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  531.757279][T27471] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  531.889689][T27493] netlink: 'syz.1.6317': attribute type 21 has an invalid length.
[  531.892546][T27493] netlink: 'syz.1.6317': attribute type 22 has an invalid length.
[  531.895086][T27493] netlink: 'syz.1.6317': attribute type 23 has an invalid length.
[  531.897405][T27493] netlink: 'syz.1.6317': attribute type 25 has an invalid length.
[  531.954031][T27498] siw: device registration error -23
[  531.957639][T27497] netlink: 'syz.1.6318': attribute type 1 has an invalid length.
[  531.984720][T27497] bond25: entered promiscuous mode
[  531.995612][T27497] 8021q: adding VLAN 0 to HW filter on device bond25
[  532.007806][T27497] 8021q: adding VLAN 0 to HW filter on device bond25
[  532.010438][T27497] bond25: (slave vcan0): The slave device specified does not support setting the MAC address
[  532.015893][T27497] bond25: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  532.021416][T27497] bond25: (slave vcan0): making interface the new active one
[  532.024089][T27497] vcan0: entered promiscuous mode
[  532.027609][T27497] bond25: (slave vcan0): Enslaving as an active interface with an up link
[  532.036063][T27504] netlink: 'syz.0.6320': attribute type 21 has an invalid length.
[  532.042713][T27504] netlink: 'syz.0.6320': attribute type 1 has an invalid length.
[  532.275315][T27523] @: renamed from veth0_vlan
[  532.358784][T27527] ipvlan0: entered promiscuous mode
[  532.367474][T27527] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  532.485431][T27538] xt_CT: No such helper "snmp"
[  532.706366][ T7730] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  533.600608][T27579] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  534.445842][T27606] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  534.450115][T27606] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  534.923163][T27628] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 60100 - 0
[  534.926545][T27628] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 60100 - 0
[  534.929656][T27628] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 60100 - 0
[  534.934087][T27628] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 60100 - 0
[  534.937551][T27628] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 42206 - 0
[  534.940622][T27628] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 42206 - 0
[  534.943989][T27628] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 42206 - 0
[  534.947105][T27628] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 42206 - 0
[  534.950164][T27628] geneve3: entered promiscuous mode
[  534.952117][T27628] geneve3: entered allmulticast mode
[  535.093554][T27630] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  535.151395][T27636] tipc: Resetting bearer <eth:syzkaller0>
[  535.258773][T27637] __nla_validate_parse: 16 callbacks suppressed
[  535.258785][T27637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6358'.
[  536.077860][T27654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.080475][T27654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.083503][T27654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.086112][T27654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.089056][T27654] geneve5: entered promiscuous mode
[  536.158751][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6366'.
[  536.330887][T27665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6368'.
[  536.334690][T27665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6368'.
[  536.745828][T27676] batadv_slave_0: entered promiscuous mode
[  536.790156][T27677] batadv_slave_0: left promiscuous mode
[  536.910334][T27686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6376'.
[  536.915371][T27686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6376'.
[  537.013428][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6378'.
[  537.212102][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6383'.
[  537.249426][T27710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6382'.
[  537.308404][T27717] tap0: tun_chr_ioctl cmd 1074025676
[  537.310437][T27717] tap0: owner set to 0
[  537.341775][T27725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6388'.
[  537.468455][T27738] validate_nla: 5 callbacks suppressed
[  537.468476][T27738] netlink: 'syz.0.6393': attribute type 1 has an invalid length.
[  537.525884][T27738] 8021q: adding VLAN 0 to HW filter on device bond16
[  537.546019][T27739] 8021q: adding VLAN 0 to HW filter on device bond16
[  537.548912][T27739] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  537.553462][T27739] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  537.947374][T27769] netlink: 'syz.0.6399': attribute type 14 has an invalid length.
[  537.950769][T27769] netlink: 'syz.0.6399': attribute type 13 has an invalid length.
[  538.426110][T27795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.607046][T27827] netlink: 'syz.0.6411': attribute type 10 has an invalid length.
[  538.609465][T27827] dummy0: entered promiscuous mode
[  538.611347][T27827] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  538.815363][T27846] netlink: ct family unspecified
[  538.817126][T27846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.106277][T27869] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  539.361961][T27886] netlink: 'syz.2.6432': attribute type 1 has an invalid length.
[  539.450998][T27892] bridge0: failed insert local address into bridge forwarding table
[  539.657015][T27900] netlink: 'syz.2.6436': attribute type 11 has an invalid length.
[  539.746056][T27907] syzkaller1: entered promiscuous mode
[  539.748435][T27907] syzkaller1: entered allmulticast mode
[  540.191876][T27926] can: request_module (can-proto-3) failed.
[  540.502844][T27941] __nla_validate_parse: 17 callbacks suppressed
[  540.502857][T27941] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6446'.
[  540.509662][T27941] syzkaller1: entered promiscuous mode
[  540.512268][T27941] syzkaller1: entered allmulticast mode
[  540.622330][T27947] netlink: 'syz.0.6449': attribute type 1 has an invalid length.
[  540.677677][T27954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6451'.
[  540.756185][T27966] openvswitch: netlink: Missing valid actions attribute.
[  540.758452][T27966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.826065][T27975] IPv6: NLM_F_CREATE should be specified when creating new route
[  540.855418][T27979] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6458'.
[  541.017307][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6463'.
[  541.024981][T27993] netlink: 198220 bytes leftover after parsing attributes in process `syz.1.6463'.
[  541.147551][T28003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  541.324446][T28016] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  541.831481][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6482'.
[  542.413267][T28124] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6501'.
[  542.643950][T28144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.703235][T28152] netlink: 'syz.1.6511': attribute type 1 has an invalid length.
[  542.706423][T28153] netlink: 'syz.1.6511': attribute type 1 has an invalid length.
[  542.710128][T28144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.771752][T28153] 8021q: adding VLAN 0 to HW filter on device bond26
[  542.798595][T28144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.824170][T28155] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6512'.
[  542.836346][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6513'.
[  542.868325][T28165] bond25: (slave vcan0): Releasing backup interface
[  542.871134][T28165] vcan0 (unregistering): left promiscuous mode
[  542.875317][T28165] bond25: Destroying bond
[  542.981409][T28165] bond25 (unregistering): Released all slaves
[  543.011405][T28144] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI
[  543.015147][T28144] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007]
[  543.018435][T28144] CPU: 0 UID: 0 PID: 28144 Comm: syz.2.6509 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  543.023194][T28144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  543.026287][T28144] RIP: 0010:mld_clear_delrec+0x34a/0x5d0
[  543.028031][T28144] Code: ff ff ff e8 68 40 41 01 89 c5 31 ff 89 c6 e8 0d 15 94 f7 85 ed 74 40 e8 c4 10 94 f7 eb 05 e8 bd 10 94 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 b7 24 f6 f7 4d 8b 27 49 8d 7f 30
[  543.033883][T28144] RSP: 0000:ffffc90006bc6b90 EFLAGS: 00010206
[  543.035737][T28144] RAX: 000000001fffe000 RBX: ffff88811dd4b538 RCX: 0000000000080000
[  543.038166][T28144] RDX: ffffc9000f388000 RSI: 000000000001d5c2 RDI: 000000000001d5c3
[  543.040590][T28144] RBP: 0000000000000001 R08: ffffffff8fa1d5f7 R09: 1ffffffff1f43abe
[  543.042980][T28144] R10: dffffc0000000000 R11: fffffbfff1f43abf R12: ffff888107834c28
[  543.045347][T28144] R13: dffffc0000000000 R14: ffff888107834c00 R15: 00000000ffff0000
[  543.047821][T28144] FS:  00007f316eec36c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  543.050531][T28144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  543.052598][T28144] CR2: 00005593fd9c8e28 CR3: 00000001208a8000 CR4: 00000000000006f0
[  543.055046][T28144] Call Trace:
[  543.056088][T28144]  <TASK>
[  543.057021][T28144]  ? ipv6_mc_down+0x36c/0x480
[  543.058486][T28144]  ipv6_mc_destroy_dev+0x45/0x5a0
[  543.060050][T28144]  ? addrconf_ifdown+0x1396/0x1880
[  543.061632][T28144]  addrconf_ifdown+0x139e/0x1880
[  543.063308][T28144]  ? tls_dev_event+0x717/0xec0
[  543.064807][T28144]  ? __pfx_addrconf_ifdown+0x10/0x10
[  543.066455][T28144]  addrconf_notify+0x1bc/0x1010
[  543.067966][T28144]  notifier_call_chain+0x1b6/0x3e0
[  543.069544][T28144]  unregister_netdevice_many_notify+0x15d8/0x2320
[  543.071519][T28144]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  543.073613][T28144]  ? rcu_is_watching+0x15/0xb0
[  543.075104][T28144]  ? trace_contention_end+0x39/0x120
[  543.076742][T28144]  ? __mutex_lock+0x330/0xe80
[  543.078232][T28144]  ? rtnl_net_dev_lock+0x36/0x2f0
[  543.079804][T28144]  ? rtnl_is_locked+0x15/0x20
[  543.081284][T28144]  ? nsim_destroy+0xdb/0x670
[  543.082787][T28144]  unregister_netdevice_queue+0x33c/0x380
[  543.084643][T28144]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  543.086580][T28144]  nsim_destroy+0x1f6/0x670
[  543.088016][T28144]  __nsim_dev_port_del+0x14d/0x1b0
[  543.089591][T28144]  nsim_dev_reload_destroy+0x288/0x490
[  543.091247][T28144]  nsim_dev_reload_down+0x8a/0xc0
[  543.092784][T28144]  devlink_reload+0x1b6/0x8d0
[  543.094212][T28144]  ? __pfx_devlink_reload+0x10/0x10
[  543.095813][T28144]  ? devlink_resources_validate+0xa7/0xd0
[  543.097552][T28144]  ? devlink_resources_validate+0xa7/0xd0
[  543.099318][T28144]  devlink_nl_reload_doit+0xb35/0xd50
[  543.100994][T28144]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  543.102833][T28144]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  543.104705][T28144]  genl_family_rcv_msg_doit+0x215/0x300
[  543.106404][T28144]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  543.108209][T28144]  ? bpf_lsm_capable+0x9/0x20
[  543.109607][T28144]  ? security_capable+0x7e/0x2e0
[  543.111126][T28144]  genl_rcv_msg+0x60e/0x790
[  543.112536][T28144]  ? __pfx_genl_rcv_msg+0x10/0x10
[  543.114051][T28144]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  543.115968][T28144]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  543.117743][T28144]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  543.119730][T28144]  netlink_rcv_skb+0x208/0x470
[  543.121275][T28144]  ? __pfx_genl_rcv_msg+0x10/0x10
[  543.122856][T28144]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  543.124566][T28144]  ? down_read+0x1ad/0x2e0
[  543.126156][T28144]  genl_rcv+0x28/0x40
[  543.127704][T28144]  netlink_unicast+0x75c/0x8e0
[  543.129231][T28144]  netlink_sendmsg+0x805/0xb30
[  543.130721][T28144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.132529][T28144]  ? aa_sock_msg_perm+0x94/0x160
[  543.134152][T28144]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  543.135804][T28144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.137443][T28144]  __sock_sendmsg+0x21c/0x270
[  543.138944][T28144]  ____sys_sendmsg+0x505/0x830
[  543.140437][T28144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  543.142095][T28144]  ? import_iovec+0x74/0xa0
[  543.143525][T28144]  ___sys_sendmsg+0x21f/0x2a0
[  543.145017][T28144]  ? __pfx____sys_sendmsg+0x10/0x10
[  543.146662][T28144]  ? __fget_files+0x2a/0x420
[  543.148100][T28144]  ? __fget_files+0x3a0/0x420
[  543.149568][T28144]  __x64_sys_sendmsg+0x19b/0x260
[  543.151129][T28144]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  543.152871][T28144]  ? rcu_is_watching+0x15/0xb0
[  543.154447][T28144]  ? do_syscall_64+0xbe/0x3b0
[  543.155970][T28144]  do_syscall_64+0xfa/0x3b0
[  543.157387][T28144]  ? lockdep_hardirqs_on+0x9c/0x150
[  543.159009][T28144]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.160880][T28144]  ? exc_page_fault+0x9f/0xf0
[  543.162341][T28144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.164177][T28144] RIP: 0033:0x7f316df8e9a9
[  543.165577][T28144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  543.171568][T28144] RSP: 002b:00007f316eec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.174214][T28144] RAX: ffffffffffffffda RBX: 00007f316e1b5fa0 RCX: 00007f316df8e9a9
[  543.176630][T28144] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  543.179028][T28144] RBP: 00007f316e010d69 R08: 0000000000000000 R09: 0000000000000000
[  543.181495][T28144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.183934][T28144] R13: 0000000000000000 R14: 00007f316e1b5fa0 R15: 00007ffee6b00d38
[  543.186325][T28144]  </TASK>
[  543.187257][T28144] Modules linked in:
[  543.189183][T28144] ---[ end trace 0000000000000000 ]---
[  543.192619][T28144] RIP: 0010:mld_clear_delrec+0x34a/0x5d0
[  543.200537][T28144] Code: ff ff ff e8 68 40 41 01 89 c5 31 ff 89 c6 e8 0d 15 94 f7 85 ed 74 40 e8 c4 10 94 f7 eb 05 e8 bd 10 94 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 b7 24 f6 f7 4d 8b 27 49 8d 7f 30
[  543.208706][T28144] RSP: 0000:ffffc90006bc6b90 EFLAGS: 00010206
[  543.210691][T28144] RAX: 000000001fffe000 RBX: ffff88811dd4b538 RCX: 0000000000080000
[  543.221622][T28144] RDX: ffffc9000f388000 RSI: 000000000001d5c2 RDI: 000000000001d5c3
[  543.224435][T28144] RBP: 0000000000000001 R08: ffffffff8fa1d5f7 R09: 1ffffffff1f43abe
[  543.227145][T28144] R10: dffffc0000000000 R11: fffffbfff1f43abf R12: ffff888107834c28
[  543.229709][T28144] R13: dffffc0000000000 R14: ffff888107834c00 R15: 00000000ffff0000
[  543.233819][T28144] FS:  00007f316eec36c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  543.236688][T28144] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  543.238836][T28144] CR2: 00007f4b5e38efc8 CR3: 00000001208a8000 CR4: 00000000000006f0
[  543.241632][T28144] Kernel panic - not syncing: Fatal exception
[  543.244339][T28144] Kernel Offset: disabled
[  543.245634][T28144] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:27:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001ea84 RDI=000000000001ea85 RBP=00000000000003f8 RSP=ffffc90006bc6330
R8 =ffff8881076a8237 R9 =1ffff11020ed5046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee888 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f316eec36c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005593fd9c8e28 CR3=00000001208a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff00000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ae4d623babbb9100 RBX=ffffffff81976c78 RCX=ae4d623babbb9100 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d5f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c33c730 CR3=00000001208a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=82e99e1a77ba5cc7 143f0d37e52aea41
XMM02=59c20981e6dadc90 8a4c942b636dacef XMM03=87ae605dbcda114d 2fb1a87319babff0
XMM04=1ad65fbbafa3bde1 b5012a6b8dc7b6f6 XMM05=3e6ea4a42afd4881 febbdd10f643d632
XMM06=ed71447962f05c52 064d954414616b02 XMM07=67221ad65fbbafa3 bde1b5012a6b8dc7
XMM08=b6f687ae605dbcda 114d2fb1a87319ba XMM09=0000000000000000 00007f316e011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
