last executing test programs:

2.012204696s ago: executing program 1 (id=1146):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='veno', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000000002000000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000280)=0x8, &(0x7f0000000380)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000003ebb6c9c4ac64adf147938afcfbf5b76d5950e9ce7c5d8a36b42001da52dd5248712b5cebf7d98f98ad7f0cf1d443b6e11938a1b823221d627ec2b5d172b7f677b0c1210b1ee6ea3d5fef31498c49cdf6bb7f2af4e114a987334109c660f297ba3b5ff2d0921ab9400679a6142cc1070", @ANYRES16=r8, @ANYBLOB="000025bd7000fddbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="08007e000000000008000d000100000008003500040000000600960006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f236ec70a", 0x7}], 0x2}}], 0x1, 0xc0)

1.942271534s ago: executing program 1 (id=1147):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25OPTRT(r3, 0x89e7, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100001042d3d7000000000000000000016487a330d10f51e247405b16dea5be698ceadb68179be1aa1be749c95d2a5547e5e0bfce86c9d3bcdc40066151f72c0e97f2be6668deac08abf05ef2c56b3a544b194ed387538689cc1c4ac96f233558faa48e33652fb1a47066bf66ada067d705d967473799ad0fdca22f32387c520cc04a9ea3f3f00e212d70ba509105a72b303ef7c6e1c70c69f99086db8489b21263337500f37665a0e6aab48b79150f06bb0f11ca0b0", @ANYRES32=0x0, @ANYBLOB="0c1c0000000000001c001280080001006772650010000280040012000500130001000000"], 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.65187897s ago: executing program 1 (id=1148):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r1, @ANYBLOB='\n\x00'], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000002c0)="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", 0x1000, 0x4080, &(0x7f00000012c0)={0xa, 0x2, 0x7, @private1, 0xfffffffa}, 0x1c)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r3=>0x0, 0x4d266d49}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, 0x4)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000240)=""/106, &(0x7f0000000140)=0x6a)
setsockopt$sock_timeval(r0, 0x1, 0x57, &(0x7f0000001300)={0x77359400}, 0x10)

1.34201336s ago: executing program 2 (id=1149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
connect$inet(r2, &(0x7f0000001700)={0x2, 0x4e22, @local}, 0x10)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804)

872.140211ms ago: executing program 0 (id=1153):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000340)="d8", 0x1)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e26}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r3, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="210f25bd700000000000200800000800a462", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xb8, r12, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xec}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xde}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00'})
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003ed0000000000000000000000950b000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)

791.677268ms ago: executing program 0 (id=1154):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000180)={0xfffffffd, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

790.968819ms ago: executing program 1 (id=1155):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x800, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRES32=r1], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001ffffeffffff8000000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=r3, @ANYBLOB="b8d1aa03f0e4f21c5e8fb2ab76aa7e4c2608f6e30ef47bf50131400fe70834ce3b8bc7f4ef3cf557bf9bca2080b1b2c298b3515fe17392f3dbe5b8b32f90f44977d74ae9772dc2c424d7b771"], 0x4c}}, 0x4000)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xf, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000280000006000000000282b00fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r12 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r12, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1001, 0x1}}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)

790.041903ms ago: executing program 0 (id=1156):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000200)=0x7, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x8000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x4000010) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000002c0)={0x85d, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYBLOB="847d3271af40728708358d3e178aed1206c55c02eb5998d081727a99e0cbd140dd193e87596b2b1061f22056e4834ad464c61a25901ddaea636c721c410d0ee16499da1799922eb103cba69d082eeef58fe3e1c55e199383deee9b7c8f1c85592f7d47a858e66c3b13ac4aa6c196294c93d0da195896311e07a7c57ef5927ce6a72c4941c8bfd36916c32c1a6746f464c2bb43713f492452a5fd56dbd9fd67c1247fd9bde869b6ad5cf3f228b63594b98500d1e4678f3fdcc6846c5e2955fb79dff98dbd4451b06d1c2612fd8b2f0bd92f730165edbbb29bedf78f7cdc9e1709d6df69", @ANYRESOCT=r4], 0x58}}, 0x4004001)

670.012768ms ago: executing program 0 (id=1157):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0xfa8, 0x0, @wg=@data={0x4, 0x202, 0x4, "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"}}}}, 0xfce)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x18}}, 0x2}, 0xffffffffffffff77)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x1, 0x1, [@rand_addr=0x64010101]}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
accept(r3, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4472c7dba24e2fda4dc1b9000000000000000000005293f0d1ad48b8b26b000d3c711671fc2b776c936f7e02bf8f8f74a0239e816a4d31597581be346a716ffafca8fd30cd09b91fa1700023b45644d7212ef151ef611cb414e37b7fc092ebf249f4bc53ae1e707d8ad43f3a286848416e91cc9989b0ad0a2e2eed102cd50909b31bc397933b67d7495c60dd6e5427d32c52c858ea618763a2d1372e76aef3bad6d57116d68126a0f8cfda426db29fa3ceb59428ac6340392585b698a39e4effae4d3f8be7a257ff413d7754", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000980)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000500)={r9, 0x7}, 0xc)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r9, 0x80000000}, &(0x7f00000004c0)=0x8)

482.446325ms ago: executing program 2 (id=1158):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800090000000000000000005ff47f6000feffff95000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b0f101832229118c0000000000000000000000ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6}, 0x50)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r2, &(0x7f0000000040), 0x0}, 0x20)

478.220273ms ago: executing program 2 (id=1159):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='veno', 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000000002000000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000280)=0x8, &(0x7f0000000380)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f236ec70a", 0x7}], 0x2}}], 0x1, 0xc0)

240.623974ms ago: executing program 1 (id=1160):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000440)={0x0, 0x7fffffffffffffff, 0xffffffffffffff7e, 0x1})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x5, 0xfffffffd}]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x800)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000001d80), &(0x7f0000001d40)=r8}, 0x20)
epoll_create1(0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
close(r10)
r11 = socket(0x23, 0x80805, 0x0)
listen(r11, 0x0)

238.379659ms ago: executing program 2 (id=1161):
r0 = socket(0x3, 0x2, 0xd095)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000002400000085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x701, 0x10000, 0xffdffffc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x20044840}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb4e6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r5)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x4c, r6, 0x706050e330e974a5, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040841}, 0x400c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

138.896454ms ago: executing program 2 (id=1162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

80.844131ms ago: executing program 2 (id=1163):
unshare(0x6a040000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @generic={0x6, 0xc, 0x1, 0x200, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 64)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
unshare(0x600)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async, rerun: 64)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64)
unshare(0x2a020400)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2}, 0x50)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x864}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x13)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001d80)={'sit0\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, [0xb]}})
connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) (async)
recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x102) (async)
write(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000007f31c508000000010000009376d96f19c26ead5e4e6dca4c197fd4d6dd34f9988ff7156caaaeda9041a67e8907a7c31b95cf6033446c45612b8ed06d2f2cbfa7dbf3e5538162326f93aa169a2503fcb127e320805a249e475c375dd0ac1ff6cda5f354ca65adf3f7217ff1624938006690147fa6cc536ab1266be5", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

80.315217ms ago: executing program 0 (id=1164):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.680439ms ago: executing program 1 (id=1165):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
close(0x3)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf256b0000000a00060008021100000000000a001a0008021100000100000a000600ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000"], 0x74}, 0x1, 0x0, 0x0, 0x20040040}, 0x4040011)
write$cgroup_pressure(r1, &(0x7f0000000040)={'some', 0x20, 0x0, 0x20, 0x5}, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@random="0b930712e168", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @loopback}}}}, &(0x7f00000003c0)={0x0, 0x4, [0xe4d, 0x2c0, 0xf3a, 0x169]})

0s ago: executing program 0 (id=1166):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfce)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45769' (ED25519) to the list of known hosts.
syzkaller login: [   49.100339][ T5836] cgroup: Unknown subsys name 'net'
[   49.204407][ T5836] cgroup: Unknown subsys name 'cpuset'
[   49.208779][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.608304][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.720157][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.731296][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.735040][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.738192][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.741053][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.744212][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.746940][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.751148][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.755324][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.758543][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.773255][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.784307][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.791876][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.799383][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.803145][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.039636][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.083143][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.178052][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.196984][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.199948][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.202606][ T5851] bridge_slave_0: entered allmulticast mode
[   55.205415][ T5851] bridge_slave_0: entered promiscuous mode
[   55.232299][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.235073][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.237456][ T5851] bridge_slave_1: entered allmulticast mode
[   55.240183][ T5851] bridge_slave_1: entered promiscuous mode
[   55.265508][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.268279][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.270885][ T5845] bridge_slave_0: entered allmulticast mode
[   55.274076][ T5845] bridge_slave_0: entered promiscuous mode
[   55.291129][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.294689][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.297351][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.299849][ T5845] bridge_slave_1: entered allmulticast mode
[   55.303942][ T5845] bridge_slave_1: entered promiscuous mode
[   55.312518][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.365820][ T5851] team0: Port device team_slave_0 added
[   55.370691][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.381098][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.385334][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.388239][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.390900][ T5849] bridge_slave_0: entered allmulticast mode
[   55.394267][ T5849] bridge_slave_0: entered promiscuous mode
[   55.398035][ T5851] team0: Port device team_slave_1 added
[   55.420826][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.423505][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.426250][ T5849] bridge_slave_1: entered allmulticast mode
[   55.429360][ T5849] bridge_slave_1: entered promiscuous mode
[   55.449041][ T5845] team0: Port device team_slave_0 added
[   55.465322][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.467806][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.478528][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.484857][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.487676][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.498158][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.504761][ T5845] team0: Port device team_slave_1 added
[   55.548832][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.552028][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.563578][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.569645][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.574559][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.593048][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.595896][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.606451][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.625575][ T5849] team0: Port device team_slave_0 added
[   55.630236][ T5849] team0: Port device team_slave_1 added
[   55.663908][ T5851] hsr_slave_0: entered promiscuous mode
[   55.667630][ T5851] hsr_slave_1: entered promiscuous mode
[   55.684924][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.687893][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.698442][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.717456][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.720182][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.729662][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.759075][ T5845] hsr_slave_0: entered promiscuous mode
[   55.762034][ T5845] hsr_slave_1: entered promiscuous mode
[   55.764301][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.766297][ T5845] Cannot create hsr debugfs directory
[   55.838234][ T5849] hsr_slave_0: entered promiscuous mode
[   55.840667][ T5849] hsr_slave_1: entered promiscuous mode
[   55.843416][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.845271][ T5849] Cannot create hsr debugfs directory
[   56.094593][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.106705][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.114185][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.128020][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.167704][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.175936][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.195555][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.215711][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.272575][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.278634][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.287094][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.293923][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.373848][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.399570][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.404601][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.413693][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.416195][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.428440][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.444825][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.447849][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.453479][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.458067][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.461357][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.479366][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.482238][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.501433][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.521425][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.524290][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.547942][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.550917][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.628451][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.639009][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.748986][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.776161][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.780877][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.813865][ T5848] Bluetooth: hci1: command tx timeout
[   56.813871][ T5237] Bluetooth: hci0: command tx timeout
[   56.814062][ T5237] Bluetooth: hci2: command tx timeout
[   56.826169][ T5851] veth0_vlan: entered promiscuous mode
[   56.840060][ T5851] veth1_vlan: entered promiscuous mode
[   56.873958][ T5849] veth0_vlan: entered promiscuous mode
[   56.885473][ T5845] veth0_vlan: entered promiscuous mode
[   56.900687][ T5849] veth1_vlan: entered promiscuous mode
[   56.909363][ T5845] veth1_vlan: entered promiscuous mode
[   56.915923][ T5851] veth0_macvtap: entered promiscuous mode
[   56.929581][ T5851] veth1_macvtap: entered promiscuous mode
[   56.956948][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.960337][ T5845] veth0_macvtap: entered promiscuous mode
[   56.975165][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.978656][ T5849] veth0_macvtap: entered promiscuous mode
[   56.982649][ T5845] veth1_macvtap: entered promiscuous mode
[   56.994994][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.003111][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.007675][ T5849] veth1_macvtap: entered promiscuous mode
[   57.014902][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.018175][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.027791][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.036491][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.042175][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.051008][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.059700][ T5718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.074021][ T5718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.095788][ T5718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.098696][ T5718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.125676][ T5718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.129451][ T5718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.146278][ T5718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.150112][ T5718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.165493][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.169693][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.200789][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.203876][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.242973][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.246087][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.274830][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.282173][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.284031][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.314271][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.323270][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.348738][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.355998][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.431155][ T5916] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.435096][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.460794][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.565764][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'.
[   57.575204][ T5929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'.
[   57.588817][ T5926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6'.
[   57.636176][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.651845][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   57.655213][ T5933] netlink: 'syz.2.8': attribute type 12 has an invalid length.
[   57.816496][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.879005][ T5947] netlink: 'syz.1.13': attribute type 12 has an invalid length.
[   57.955855][ T5954] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET)
[   58.088112][ T5962] tipc: Started in network mode
[   58.090492][ T5962] tipc: Node identity ac14140f, cluster identity 4711
[   58.094543][ T5962] tipc: New replicast peer: 255.255.255.255
[   58.098577][ T5962] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.113138][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.117103][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.325709][ T5967] Zero length message leads to an empty skb
[   58.688641][ T6011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.693205][ T6011] syzkaller0: entered promiscuous mode
[   58.699823][ T6011] syzkaller0: entered allmulticast mode
[   58.726748][ T6011] tipc: Resetting bearer <eth:syzkaller0>
[   58.738052][ T6010] tipc: Resetting bearer <eth:syzkaller0>
[   58.748481][ T6010] tipc: Disabling bearer <eth:syzkaller0>
[   58.770161][ T6013] netlink: 'syz.0.28': attribute type 12 has an invalid length.
[   58.893481][ T5854] Bluetooth: hci1: command tx timeout
[   58.896651][ T5237] Bluetooth: hci2: command tx timeout
[   58.909255][ T5897] IPVS: starting estimator thread 0...
[   58.922482][ T6021] netlink: 'syz.1.30': attribute type 4 has an invalid length.
[   59.001994][ T6023] IPVS: using max 46 ests per chain, 110400 per kthread
[   59.067711][ T5897] IPVS: starting estimator thread 0...
[   59.125336][ T6037] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82
[   59.162257][ T6035] IPVS: using max 45 ests per chain, 108000 per kthread
[   59.358507][ T6044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.371230][ T6044] netlink: 'syz.0.37': attribute type 3 has an invalid length.
[   59.433209][ T6044] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   59.436067][ T6044] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   59.443625][ T6044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.685221][ T6057] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.695847][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.784309][ T5911] tipc: Node number set to 2886997007
[   59.990494][ T6071] smc: net device bond0 applied user defined pnetid SYZ2
[   60.064254][ T6075] netlink: 'syz.1.49': attribute type 7 has an invalid length.
[   60.084764][ T6075] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.131554][ T6075] bond1 (unregistering): Released all slaves
[   60.290172][ T6087] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   60.455411][ T6093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.458178][ T6093] syzkaller0: entered promiscuous mode
[   60.460099][ T6093] syzkaller0: entered allmulticast mode
[   60.467875][ T6093] tipc: Resetting bearer <eth:syzkaller0>
[   60.471257][ T6092] tipc: Resetting bearer <eth:syzkaller0>
[   60.480636][ T6092] tipc: Disabling bearer <eth:syzkaller0>
[   60.937096][ T6119] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   60.974661][ T5854] Bluetooth: hci1: command tx timeout
[   60.976876][ T5854] Bluetooth: hci2: command tx timeout
[   61.088995][ T6129] tipc: Started in network mode
[   61.090642][ T6129] tipc: Node identity 5208dc792e8, cluster identity 4711
[   61.094198][ T6129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.099310][ T6133] netlink: 'syz.0.68': attribute type 11 has an invalid length.
[   61.103798][ T6129] syzkaller0: entered promiscuous mode
[   61.105673][ T6129] syzkaller0: entered allmulticast mode
[   61.109759][ T6128] tipc: Resetting bearer <eth:syzkaller0>
[   61.119042][ T6128] tipc: Disabling bearer <eth:syzkaller0>
[   61.359035][ T6143] pimreg: tun_chr_ioctl cmd 2148553947
[   61.461073][ T6141] netlink: 'syz.0.71': attribute type 16 has an invalid length.
[   61.487834][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.269488][ T6187] wg1: entered promiscuous mode
[   62.287267][ T6187] wg1: entered allmulticast mode
[   62.353528][ T6189] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   62.400419][ T6197] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   62.404901][ T6197] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   62.452035][ T6201] __nla_validate_parse: 26 callbacks suppressed
[   62.452047][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[   62.551193][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   62.556264][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'.
[   62.648275][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   62.733759][ T2283] IPVS: starting estimator thread 0...
[   62.756995][ T6215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.791520][ T6218] validate_nla: 4 callbacks suppressed
[   62.791534][ T6218] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   62.796505][ T6218] netlink: 232 bytes leftover after parsing attributes in process `syz.2.92'.
[   62.801458][ T6218] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.92'.
[   62.832591][ T6216] IPVS: using max 78 ests per chain, 187200 per kthread
[   62.836882][ T6215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.917057][ T6223] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.93'.
[   62.923275][ T6215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.963126][ T6223] veth3: entered promiscuous mode
[   62.983285][ T6215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.055969][ T5237] Bluetooth: hci2: command tx timeout
[   63.058467][ T5237] Bluetooth: hci1: command tx timeout
[   63.060853][ T6227] IPVS: Scheduler module ip_vs_sip not found
[   63.091492][ T6229] delete_channel: no stack
[   63.102872][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.103630][ T6228] delete_channel: no stack
[   63.116946][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.126193][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.135961][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.192933][ T6238] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20004
[   63.235132][ T6241] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   63.553776][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'.
[   63.558476][ T6266] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.562166][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'.
[   63.608531][ T6271] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   63.688084][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   63.817574][ T6283] netlink: 'syz.2.110': attribute type 13 has an invalid length.
[   63.989668][ T6291] team0: Caught tx_queue_len zero misconfig
[   64.127909][ T6293] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.197601][ T6303] netlink: 'syz.2.116': attribute type 29 has an invalid length.
[   64.200865][ T6303] netlink: 'syz.2.116': attribute type 29 has an invalid length.
[   64.204455][ T6303] unsupported nla_type 58
[   64.206498][ T6303] bond0: Caught tx_queue_len zero misconfig
[   64.292951][ T6308] bond0: Unable to set up delay as MII monitoring is disabled
[   64.446813][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.511402][ T6339] netlink: 'syz.1.125': attribute type 1 has an invalid length.
[   64.530957][ T6339] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.540017][ T6339] bond1: (slave geneve2): making interface the new active one
[   64.544869][ T6339] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   64.610277][ T6345] bond2: entered promiscuous mode
[   64.615660][ T6345] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.757651][ T6348] netlink: 'syz.1.127': attribute type 13 has an invalid length.
[   64.760259][ T6348] netlink: 'syz.1.127': attribute type 17 has an invalid length.
[   64.843743][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.898985][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.022225][ T6359] netlink: 'syz.0.128': attribute type 9 has an invalid length.
[   65.194009][ T6370] openvswitch: netlink: Flow key attr not present in new flow.
[   65.282138][ T6375] macvlan2: entered promiscuous mode
[   65.285087][ T6375] syz_tun: entered promiscuous mode
[   65.290267][ T6375] team0: Port device macvlan2 added
[   65.301635][ T6376] macvlan3: entered promiscuous mode
[   65.307436][ T6376] team0: Port device macvlan3 added
[   65.349094][ T6378] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   65.353350][ T6378] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.511474][ T6389] tipc: Started in network mode
[   65.514568][ T6389] tipc: Node identity 52b6ac4535a2, cluster identity 4711
[   65.518544][ T6389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.539197][ T6388] vlan2: entered promiscuous mode
[   65.541553][ T6388] bond0: entered promiscuous mode
[   65.544731][ T6388] bond_slave_0: entered promiscuous mode
[   65.547385][ T6388] bond_slave_1: entered promiscuous mode
[   65.553856][ T6383] syzkaller0: entered promiscuous mode
[   65.556121][ T6383] syzkaller0: entered allmulticast mode
[   65.587994][ T6383] tipc: Resetting bearer <eth:syzkaller0>
[   65.603062][ T6382] tipc: Resetting bearer <eth:syzkaller0>
[   65.635682][ T6382] tipc: Disabling bearer <eth:syzkaller0>
[   65.855684][ T6413] bridge0: entered allmulticast mode
[   65.868541][ T6413] bridge_slave_1: left allmulticast mode
[   65.899298][ T6413] bridge_slave_1: left promiscuous mode
[   65.902383][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.934536][ T6413] bridge_slave_0: left allmulticast mode
[   65.936880][ T6413] bridge_slave_0: left promiscuous mode
[   65.939308][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.947735][ T6424] netlink: 'syz.0.150': attribute type 1 has an invalid length.
[   65.961823][ T6413] bridge0 (unregistering): left allmulticast mode
[   66.008009][ T6424] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.024246][ T6427] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.032111][ T6427] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[   66.036964][ T6427] bond3: (slave vxcan5): Error -95 calling set_mac_address
[   66.077311][ T6424] veth3: entered promiscuous mode
[   66.080745][ T6424] bond3: (slave veth3): Enslaving as an active interface with a down link
[   66.088942][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.092856][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.210003][ T6439] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   66.275226][ T6445] netlink: 'syz.1.154': attribute type 11 has an invalid length.
[   66.556787][ T6453] : entered promiscuous mode
[   66.763518][ T6470] 8021q: adding VLAN 0 to HW filter on device bond4
[   66.823842][ T6473] syzkaller0: entered promiscuous mode
[   66.826150][ T6473] syzkaller0: entered allmulticast mode
[   67.100181][ T6477] lo: Caught tx_queue_len zero misconfig
[   67.471478][ T6467] IPVS: Scheduler module ip_vs_sip not found
[   67.617406][ T6489] __nla_validate_parse: 26 callbacks suppressed
[   67.617420][ T6489] netlink: 72 bytes leftover after parsing attributes in process `syz.1.167'.
[   67.896022][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   67.898981][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   67.922593][ T6504] unknown channel width for channel at 909000KHz?
[   68.349990][ T6541] validate_nla: 7 callbacks suppressed
[   68.349999][ T6541] netlink: 'syz.2.180': attribute type 5 has an invalid length.
[   68.364119][ T6544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.367944][ T6544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.370913][ T6532] netlink: 'syz.0.178': attribute type 12 has an invalid length.
[   68.376062][ T6532] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.178'.
[   68.541378][ T6564] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   68.616777][ T6564] 8021q: adding VLAN 0 to HW filter on device bond5
[   68.625224][ T6568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'.
[   68.626323][ T6567] bond5: (slave geneve2): making interface the new active one
[   68.631469][ T6567] bond5: (slave geneve2): Enslaving as an active interface with an up link
[   68.749437][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'.
[   68.773504][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.777412][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.896272][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.903959][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.045683][ T6579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.060884][ T6583] syzkaller0: entered promiscuous mode
[   69.067722][ T6583] syzkaller0: entered allmulticast mode
[   69.071078][ T5718] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.076471][ T5718] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.079817][ T5718] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.086552][ T5718] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.101390][ T6570] tipc: Resetting bearer <eth:syzkaller0>
[   69.114018][ T6569] tipc: Resetting bearer <eth:syzkaller0>
[   69.121325][ T6569] tipc: Disabling bearer <eth:syzkaller0>
[   69.169094][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'.
[   69.223727][ T6596] team0: Port device macvlan2 removed
[   69.240440][ T6596] team0: Port device macvlan3 removed
[   69.343944][ T6609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'.
[   70.437057][ T6662] netlink: 'syz.0.210': attribute type 2 has an invalid length.
[   70.446449][ T6662] : entered promiscuous mode
[   70.504837][ T6672] netlink: 'syz.2.213': attribute type 1 has an invalid length.
[   70.727291][ T6680] ip6tnl2: entered promiscuous mode
[   70.729618][ T6680] ip6tnl2: entered allmulticast mode
[   70.731962][ T6689] Illegal XDP return value 4294967294 on prog  (id 63) dev N/A, expect packet loss!
[   70.738859][ T6680] team0: Device ip6tnl2 is of different type
[   70.855184][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.862599][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.868433][ T6689] bond0 (unregistering): Released all slaves
[   70.976368][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.979972][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.009955][ T6697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   71.105703][ T6717] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   71.167908][ T6719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.182683][ T6719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.185899][ T6719] syzkaller0: entered promiscuous mode
[   71.187747][ T6719] syzkaller0: entered allmulticast mode
[   71.196415][ T6718] tipc: Resetting bearer <eth:syzkaller0>
[   71.204965][ T6718] tipc: Disabling bearer <eth:syzkaller0>
[   71.565427][ T6766] vxcan1: entered allmulticast mode
[   71.624452][ T6772] netlink: 'syz.0.234': attribute type 3 has an invalid length.
[   72.039714][ T6823] Bluetooth: MGMT ver 1.23
[   72.077019][ T6829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.079553][ T6828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.090668][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[   72.095662][ T6827] tipc: Disabling bearer <eth:syzkaller0>
[   72.214555][ T6844] bond6: entered promiscuous mode
[   72.216679][ T6844] bond6: entered allmulticast mode
[   72.219744][ T6844] 8021q: adding VLAN 0 to HW filter on device bond6
[   72.618627][ T6885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.633157][ T6885] syzkaller0: entered promiscuous mode
[   72.635523][ T6885] syzkaller0: entered allmulticast mode
[   72.666529][ T6885] netlink: 'syz.2.245': attribute type 13 has an invalid length.
[   72.674260][ T6885] netlink: 'syz.2.245': attribute type 17 has an invalid length.
[   72.739913][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.747558][ T6885] 8021q: adding VLAN 0 to HW filter on device team0
[   72.756683][ T6885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.816537][ T6884] tipc: Resetting bearer <eth:syzkaller0>
[   72.828712][ T6884] tipc: Disabling bearer <eth:syzkaller0>
[   73.093751][ T6912] __nla_validate_parse: 15 callbacks suppressed
[   73.093761][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'.
[   73.134322][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   73.137694][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'.
[   73.234725][ T6928] syzkaller0: entered promiscuous mode
[   73.236933][ T6928] syzkaller0: entered allmulticast mode
[   73.242392][ T6927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.269906][ T6926] tipc: Resetting bearer <eth:syzkaller0>
[   73.278830][ T6926] tipc: Disabling bearer <eth:syzkaller0>
[   73.358089][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'.
[   73.395868][ T6949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.399167][ T6949] syzkaller0: entered promiscuous mode
[   73.401325][ T6949] syzkaller0: entered allmulticast mode
[   73.428688][ T6949] tipc: Resetting bearer <eth:syzkaller0>
[   73.434419][ T6946] tipc: Resetting bearer <eth:syzkaller0>
[   73.442670][ T6946] tipc: Disabling bearer <eth:syzkaller0>
[   73.492587][ T6956] IPv6: sit1: Disabled Multicast RS
[   73.547649][ T6964] netlink: 360 bytes leftover after parsing attributes in process `syz.0.263'.
[   73.552509][ T6965] netlink: 360 bytes leftover after parsing attributes in process `syz.0.263'.
[   73.616327][ T6968] netlink: 36 bytes leftover after parsing attributes in process `syz.0.264'.
[   73.624885][ T6970] syzkaller1: entered promiscuous mode
[   73.627079][ T6970] syzkaller1: entered allmulticast mode
[   73.630447][ T6968] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[   73.766749][ T6974] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   73.789963][ T6974] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.794807][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.267'.
[   73.797053][ T6978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'.
[   73.815040][ T6978] bridge0: entered allmulticast mode
[   73.836490][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   73.850213][ T6978] bridge_slave_1: left allmulticast mode
[   73.854564][ T6978] bridge_slave_1: left promiscuous mode
[   73.856653][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.862750][ T6981] netlink: 'syz.1.269': attribute type 16 has an invalid length.
[   73.865805][ T6981] netlink: 'syz.1.269': attribute type 17 has an invalid length.
[   73.870047][ T6978] bridge_slave_0: left allmulticast mode
[   73.873712][ T6978] bridge_slave_0: left promiscuous mode
[   73.875808][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.887693][ T6978] bridge0 (unregistering): left allmulticast mode
[   73.938787][ T6981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.988986][ T6991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.991643][ T6991] syzkaller0: entered promiscuous mode
[   73.996464][ T6991] syzkaller0: entered allmulticast mode
[   74.006369][ T6991] wlan1: mtu less than device minimum
[   74.024435][ T6993] !: renamed from dummy0 (while UP)
[   74.036124][ T6990] tipc: Resetting bearer <eth:syzkaller0>
[   74.055573][ T6990] tipc: Disabling bearer <eth:syzkaller0>
[   74.249722][ T7005] netlink: 'syz.0.276': attribute type 1 has an invalid length.
[   74.267562][ T7012] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   74.324438][ T7017] macsec1: entered promiscuous mode
[   74.326336][ T7017] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   74.328820][ T7017] macsec1: entered allmulticast mode
[   74.330694][ T7017] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   74.377586][ T7024] ieee802154 phy0 wpan0: encryption failed: -90
[   74.400776][ T7026] sctp: [Deprecated]: syz.2.282 (pid 7026) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.400776][ T7026] Use struct sctp_sack_info instead
[   74.677885][ T7048] dvmrp0: entered allmulticast mode
[   74.734680][ T7051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.794993][ T7051] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   74.799570][ T7051] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   74.807539][ T7051] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.924778][ T7073] tun0: tun_chr_ioctl cmd 1074025672
[   75.927011][ T7073] tun0: ignored: set checksum disabled
[   75.929308][ T7074] netlink: 'syz.0.294': attribute type 29 has an invalid length.
[   75.937697][ T7075] netlink: 'syz.0.294': attribute type 29 has an invalid length.
[   75.955868][ T7077] netlink: 'syz.2.295': attribute type 1 has an invalid length.
[   75.967763][ T7078] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   76.185021][ T7112] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[   76.226111][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.241002][ T7112] bond0: entered promiscuous mode
[   76.290004][ T7118] pim6reg1: entered promiscuous mode
[   76.294045][ T7118] pim6reg1: entered allmulticast mode
[   76.337833][ T7122] veth0_to_hsr: entered promiscuous mode
[   76.339767][ T7122] veth0_to_hsr: entered allmulticast mode
[   76.465106][ T7135] C: renamed from team_slave_0
[   76.470282][ T7135] netlink: 'syz.2.312': attribute type 3 has an invalid length.
[   76.475479][ T7135] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   76.547044][ T7139] bridge_slave_1: left allmulticast mode
[   76.549076][ T7139] bridge_slave_1: left promiscuous mode
[   76.551140][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.556826][ T7139] bridge_slave_0: left allmulticast mode
[   76.559729][ T7139] bridge_slave_0: left promiscuous mode
[   76.562342][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.058929][ T7158] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[   77.229798][ T7168] netlink: 'syz.2.322': attribute type 19 has an invalid length.
[   77.463191][ T7189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.477930][ T7190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.518091][ T7193] bond3: entered promiscuous mode
[   77.520456][ T7193] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.545036][ T7193] 8021q: adding VLAN 0 to HW filter on device bond4
[   77.550255][ T7193] bond3: (slave bond4): making interface the new active one
[   77.554176][ T7193] bond4: entered promiscuous mode
[   77.556908][ T7193] bond3: (slave bond4): Enslaving as an active interface with an up link
[   77.605500][ T7200] !: renamed from dummy0 (while UP)
[   78.219269][ T7218] 8021q: adding VLAN 0 to HW filter on device bond5
[   78.223308][ T7218] bond0: (slave bond5): Enslaving as an active interface with a down link
[   78.250849][ T7221] __nla_validate_parse: 32 callbacks suppressed
[   78.250860][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'.
[   78.407219][ T7224] netlink: 64 bytes leftover after parsing attributes in process `syz.1.337'.
[   78.445606][ T7224] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   78.608217][ T7236] netlink: 17 bytes leftover after parsing attributes in process `syz.1.340'.
[   78.810016][ T7244] validate_nla: 4 callbacks suppressed
[   78.810027][ T7244] netlink: 'syz.2.343': attribute type 9 has an invalid length.
[   78.815558][ T7244] netlink: 'syz.2.343': attribute type 6 has an invalid length.
[   78.818442][ T7244] netlink: 'syz.2.343': attribute type 7 has an invalid length.
[   78.821894][ T7244] netlink: 'syz.2.343': attribute type 8 has an invalid length.
[   79.185706][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.352'.
[   79.281354][ T7273] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   79.284444][ T7273] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   79.304564][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   79.341181][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   79.549882][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'.
[   79.583458][ T7297] netlink: 'syz.1.360': attribute type 29 has an invalid length.
[   79.588053][ T7297] netlink: 'syz.1.360': attribute type 29 has an invalid length.
[   79.602951][ T7297] netlink: 500 bytes leftover after parsing attributes in process `syz.1.360'.
[   79.631257][ T7303] netlink: 'syz.0.361': attribute type 4 has an invalid length.
[   79.712920][ T7309] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   79.975928][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   80.003302][ T7333] Bluetooth: MGMT ver 1.23
[   80.105584][ T7335] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   80.108188][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[   80.420332][ T7352] sctp: [Deprecated]: syz.1.375 (pid 7352) Use of int in max_burst socket option.
[   80.420332][ T7352] Use struct sctp_assoc_value instead
[   80.437742][ T7352] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   80.764794][ T7376] bond0: (slave bond_slave_0): Releasing backup interface
[   80.807758][ T7376] bond0: (slave bond_slave_1): Releasing backup interface
[   80.813389][ T7394] ieee802154 phy0 wpan0: encryption failed: -22
[   80.828728][ T7376] team0: Port device team_slave_0 removed
[   80.838504][ T7376] team0: Port device team_slave_1 removed
[   80.841546][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.845401][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.850167][ T7376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.854964][ T7376] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.862566][ T7376] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.894731][ T7394] team0: Mode changed to "loadbalance"
[   80.953291][ T7401] netlink: 'syz.2.385': attribute type 10 has an invalid length.
[   80.969698][ T7401] team0: Port device 0! added
[   80.979752][ T7403] netlink: 'syz.1.386': attribute type 1 has an invalid length.
[   80.984572][ T7403] netlink: 'syz.1.386': attribute type 6 has an invalid length.
[   81.028226][ T7405] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   81.039682][ T7405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   81.228945][   T10] cfg80211: failed to load regulatory.db
[   81.400879][ T7432] bridge0: entered allmulticast mode
[   82.127969][ T7504] 8021q: adding VLAN 0 to HW filter on device bond6
[   82.387414][ T7511] hsr_slave_0: left promiscuous mode
[   82.391542][ T7511] hsr_slave_1: left promiscuous mode
[   82.478627][ T7521] chnl_net:caif_netlink_parms(): no params data found
[   82.772925][ T7550] smc: net device bond0 erased user defined pnetid SYZ2
[   83.281679][ T7612] __nla_validate_parse: 46 callbacks suppressed
[   83.286104][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'.
[   83.295020][ T7610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'.
[   83.309566][ T7612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.360274][ T7618] veth0: entered promiscuous mode
[   83.380657][ T7620] veth0: left promiscuous mode
[   83.396823][ T7625] netlink: 88 bytes leftover after parsing attributes in process `syz.1.456'.
[   83.414937][ T7625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.418260][ T7625] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   83.421594][ T7625] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   83.441591][ T7625] tipc: Resetting bearer <eth:syzkaller0>
[   83.463184][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'.
[   83.779816][   T33] audit: type=1107 audit(1758627894.467:2): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   83.815880][ T7652] validate_nla: 6 callbacks suppressed
[   83.815890][ T7652] netlink: 'syz.2.467': attribute type 10 has an invalid length.
[   83.851145][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[   84.171635][ T7670] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   84.283187][ T7680] netlink: 380 bytes leftover after parsing attributes in process `syz.0.474'.
[   84.466976][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[   84.556588][ T7692] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   84.585508][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'.
[   84.589536][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.480'.
[   84.594557][ T7696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.480'.
[   84.599694][ T7697] nbd: illegal input index -1
[   84.602155][ T7698] nbd: illegal input index -1
[   84.690462][ T6591] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.702583][ T6591] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.705643][ T6591] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.715756][ T6591] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.733647][ T7713] netlink: 'syz.0.484': attribute type 10 has an invalid length.
[   84.739096][ T7713] 8021q: adding VLAN 0 to HW filter on device team0
[   84.743154][ T7713] bond0: (slave team0): Enslaving as an active interface with an up link
[   85.090770][ T7741] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[   85.094277][ T7741] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[   85.320655][ T7744] syzkaller1: entered promiscuous mode
[   85.323658][ T7744] syzkaller1: entered allmulticast mode
[   85.474509][ T7746] lo: entered allmulticast mode
[   85.476585][ T7746] lo: left allmulticast mode
[   85.513980][ T7746] veth0_to_batadv: Caught tx_queue_len zero misconfig
[   86.690695][ T7781] netlink: 'syz.1.507': attribute type 1 has an invalid length.
[   88.026532][ T7828] netlink: 'syz.0.519': attribute type 10 has an invalid length.
[   88.038292][ T7828] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   88.045933][ T7828] team0: Failed to send options change via netlink (err -105)
[   88.049149][ T7828] team0: Port device dummy0 added
[   88.131388][ T7837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.183480][ T7837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.244506][ T7837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.316639][ T7837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.377369][ T6591] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.387633][ T6591] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.404966][ T6591] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.410900][ T6591] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.613708][ T7848] 8021q: adding VLAN 0 to HW filter on device bond8
[   88.626367][ T7848] dummy0: entered promiscuous mode
[   88.628663][ T7848] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   88.633473][ T7848] bond8: (slave macvlan0): Enslaving as a backup interface with an up link
[   88.641280][ T7848] bond0: (slave team0): Releasing backup interface
[   88.645669][ T7848] dummy0: left promiscuous mode
[   88.653708][ T7848] team0: Port device dummy0 removed
[   88.659688][ T7848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   88.714059][ T6589] bond8: (slave macvlan0): link status definitely down, disabling slave
[   88.759268][ T7851] __nla_validate_parse: 10 callbacks suppressed
[   88.759278][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'.
[   88.940814][ T7862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.948371][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'.
[   88.973483][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'.
[   88.977825][ T7862] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[   88.982505][ T7862] syzkaller0: entered promiscuous mode
[   88.984634][ T7862] syzkaller0: entered allmulticast mode
[   88.996429][ T7862] tipc: Resetting bearer <eth:syzkaller0>
[   89.015361][ T7861] tipc: Resetting bearer <eth:syzkaller0>
[   89.033075][ T7861] tipc: Disabling bearer <eth:syzkaller0>
[   89.156850][ T7876] netlink: 'syz.0.531': attribute type 1 has an invalid length.
[   89.204426][ T7876] 8021q: adding VLAN 0 to HW filter on device bond9
[   89.209777][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'.
[   89.270973][ T7876] bond9 (unregistering): Released all slaves
[   90.360699][ T7922] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   90.380706][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[   90.384945][ T7925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.387597][ T7925] syzkaller0: entered promiscuous mode
[   90.389854][ T7925] syzkaller0: entered allmulticast mode
[   90.411250][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[   90.414644][ T7924] tipc: Resetting bearer <eth:syzkaller0>
[   90.423199][ T7924] tipc: Disabling bearer <eth:syzkaller0>
[   90.475806][ T7932] xt_policy: neither incoming nor outgoing policy selected
[   90.500058][ T7934] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[   90.519477][ T7937] netlink: 'syz.0.540': attribute type 4 has an invalid length.
[   90.528919][ T7937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.540'.
[   90.532477][ T7937] block nbd0: not configured, cannot reconfigure
[   90.542118][ T7934] bond7: (slave gretap1): making interface the new active one
[   90.546235][ T7934] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   90.555240][ T7934] syz.1.539 (7934) used greatest stack depth: 18616 bytes left
[   90.596909][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.540'.
[   90.654026][ T7944] netlink: 844 bytes leftover after parsing attributes in process `syz.1.542'.
[   90.671545][ T7947] netlink: 'syz.0.543': attribute type 1 has an invalid length.
[   90.685705][ T7947] 8021q: adding VLAN 0 to HW filter on device bond9
[   90.713660][ T7947] bond9: (slave geneve3): making interface the new active one
[   90.717454][ T7947] bond9: (slave geneve3): Enslaving as an active interface with an up link
[   90.724867][ T7950] macvtap0: entered promiscuous mode
[   90.727273][ T7950] macvtap0: entered allmulticast mode
[   90.729587][ T7950] veth0_macvtap: entered allmulticast mode
[   90.748233][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   90.753275][ T7953] netlink: 'syz.0.545': attribute type 20 has an invalid length.
[   90.765723][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'.
[   90.769143][ T7953] netlink: 'syz.0.545': attribute type 20 has an invalid length.
[   90.860774][ T7969] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[   91.262464][ T7980] block nbd0: server does not support multiple connections per device.
[   91.267517][ T7980] block nbd0: shutting down sockets
[   91.792874][ T8013] ip6gretap0: mtu less than device minimum
[   91.795217][ T8013] ip6gretap0: mtu less than device minimum
[   91.797223][ T8013] ip6gretap0: mtu less than device minimum
[   91.799260][ T8013] ip6gretap0: mtu less than device minimum
[   91.801553][ T8013] ip6gretap0: mtu less than device minimum
[   91.830193][ T8013] ip6gretap0: mtu less than device minimum
[   91.833391][ T8013] ip6gretap0: mtu less than device minimum
[   91.840461][ T8013] ip6gretap0: mtu less than device minimum
[   91.843012][ T8013] ip6gretap0: mtu less than device minimum
[   92.291582][ T8063] netlink: 'syz.1.569': attribute type 153 has an invalid length.
[   92.332885][ T8069] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[   92.524853][ T8088] netlink: 'syz.2.572': attribute type 32 has an invalid length.
[   92.527740][ T8088] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255)
[   92.756105][ T8113] syzkaller0: entered promiscuous mode
[   92.757947][ T8113] syzkaller0: entered allmulticast mode
[   93.116961][ T8132] trusted_key: syz.2.586 sent an empty control message without MSG_MORE.
[   93.691926][ T5237] Bluetooth: hci2: command tx timeout
[   93.796175][ T8171] wg1: left promiscuous mode
[   93.797712][ T8171] wg1: left allmulticast mode
[   93.824403][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.830013][ T8171] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.836599][ T8171] veth0_to_hsr: left promiscuous mode
[   93.838867][ T8171] veth0_to_hsr: left allmulticast mode
[   93.864354][ T8171] veth0_macvtap: left allmulticast mode
[   93.866393][ T8171] macvtap0: left promiscuous mode
[   93.868091][ T8171] macvtap0: left allmulticast mode
[   93.883122][ T8175] __nla_validate_parse: 29 callbacks suppressed
[   93.883132][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[   93.892245][ T8171] veth3: left promiscuous mode
[   93.898377][ T8171] bond2: left promiscuous mode
[   93.900575][ T8171] bond0: left promiscuous mode
[   93.910813][ T8171] bond3: left promiscuous mode
[   93.913359][ T8171] bond4: left promiscuous mode
[   93.919171][ T8171] bridge0: left allmulticast mode
[   93.925177][ T8171] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   93.927627][ T8171] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   93.937953][ T6589] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.943868][ T6589] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.947392][ T6589] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.950704][ T6589] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.050176][ T8185] validate_nla: 2 callbacks suppressed
[   94.050185][ T8185] netlink: 'syz.0.598': attribute type 12 has an invalid length.
[   94.060745][ T8184] netlink: 'syz.1.600': attribute type 12 has an invalid length.
[   94.227114][ T8198] sctp: [Deprecated]: syz.1.604 (pid 8198) Use of int in max_burst socket option deprecated.
[   94.227114][ T8198] Use struct sctp_assoc_value instead
[   94.370500][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[   94.433454][ T8219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.436217][ T8219] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[   94.438717][ T8219] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[   94.441431][ T8219] tipc: Resetting bearer <eth:syzkaller0>
[   94.450512][ T8219] netlink: 'syz.2.610': attribute type 11 has an invalid length.
[   94.461448][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[   94.461553][ T8219] tipc: Resetting bearer <eth:syzkaller0>
[   94.529798][ T8229] team0: Port device team_slave_0 removed
[   94.535263][ T8229] team0: Port device team_slave_1 removed
[   94.537299][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.539997][ T8229] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.543670][ T8229] bond1: (slave geneve2): Releasing active interface
[   94.547338][ T8229] bond3: (slave bond4): Releasing backup interface
[   94.550736][ T8229] bond0: (slave bond5): Releasing active interface
[   94.554421][ T8229] bond7: (slave gretap1): Releasing active interface
[   94.558464][ T8229] syz.1.613: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.563881][ T6877] tipc: Resetting bearer <eth:syzkaller0>
[   94.564045][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(full) 
[   94.564055][ T8229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.564060][ T8229] Call Trace:
[   94.564063][ T8229]  <TASK>
[   94.564067][ T8229]  dump_stack_lvl+0x189/0x250
[   94.564081][ T8229]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.564089][ T8229]  ? __pfx__printk+0x10/0x10
[   94.564100][ T8229]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   94.564109][ T8229]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   94.564118][ T8229]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   94.564127][ T8229]  warn_alloc+0x214/0x310
[   94.564137][ T8229]  ? stack_depot_save_flags+0x41b/0x860
[   94.564148][ T8229]  ? __pfx_warn_alloc+0x10/0x10
[   94.564159][ T8229]  ? kasan_save_track+0x4f/0x80
[   94.564167][ T8229]  ? xskq_create+0x56/0x170
[   94.564173][ T8229]  ? xsk_init_queue+0xb0/0x110
[   94.564178][ T8229]  ? xsk_setsockopt+0x4dc/0x8d0
[   94.564187][ T8229]  ? do_sock_setsockopt+0x17c/0x1b0
[   94.564196][ T8229]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   94.564203][ T8229]  ? do_syscall_64+0xfa/0x3b0
[   94.564210][ T8229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.564220][ T8229]  __vmalloc_node_range_noprof+0x125/0x12f0
[   94.564241][ T8229]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.564253][ T8229]  ? __kasan_kmalloc+0x93/0xb0
[   94.564264][ T8229]  vmalloc_user_noprof+0xad/0xf0
[   94.564275][ T8229]  ? xskq_create+0xbf/0x170
[   94.564281][ T8229]  xskq_create+0xbf/0x170
[   94.564289][ T8229]  xsk_init_queue+0xb0/0x110
[   94.564296][ T8229]  xsk_setsockopt+0x4dc/0x8d0
[   94.564307][ T8229]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.564317][ T8229]  ? __pfx_aa_sk_perm+0x10/0x10
[   94.564329][ T8229]  ? aa_sock_opt_perm+0xff/0x1b0
[   94.564337][ T8229]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   94.564353][ T8229]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.564364][ T8229]  do_sock_setsockopt+0x17c/0x1b0
[   94.564375][ T8229]  __x64_sys_setsockopt+0x13f/0x1b0
[   94.564386][ T8229]  do_syscall_64+0xfa/0x3b0
[   94.564394][ T8229]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.564401][ T8229]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.564408][ T8229]  ? exc_page_fault+0x9f/0xf0
[   94.564418][ T8229]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.564424][ T8229] RIP: 0033:0x7f0f64d8ec29
[   94.564432][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.564437][ T8229] RSP: 002b:00007f0f62ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   94.564445][ T8229] RAX: ffffffffffffffda RBX: 00007f0f64fd5fa0 RCX: 00007f0f64d8ec29
[   94.564450][ T8229] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   94.564454][ T8229] RBP: 00007f0f64e11e41 R08: 0000000000000004 R09: 0000000000000000
[   94.564458][ T8229] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.564462][ T8229] R13: 00007f0f64fd6038 R14: 00007f0f64fd5fa0 R15: 00007ffd5ee91bf8
[   94.564473][ T8229]  </TASK>
[   94.564476][ T8229] Mem-Info:
[   94.664908][ T8229] active_anon:4245 inactive_anon:0 isolated_anon:0
[   94.664908][ T8229]  active_file:1298 inactive_file:38252 isolated_file:0
[   94.664908][ T8229]  unevictable:4828 dirty:85 writeback:0
[   94.664908][ T8229]  slab_reclaimable:9941 slab_unreclaimable:63925
[   94.664908][ T8229]  mapped:21017 shmem:5506 pagetables:843
[   94.664908][ T8229]  sec_pagetables:0 bounce:0
[   94.664908][ T8229]  kernel_misc_reclaimable:0
[   94.664908][ T8229]  free:278559 free_pcp:21942 free_cma:0
[   94.680875][ T8232] netlink: 'syz.1.613': attribute type 4 has an invalid length.
[   94.682571][ T8229] Node 0 active_anon:8664kB inactive_anon:0kB active_file:3648kB inactive_file:23388kB unevictable:15776kB isolated(anon):0kB isolated(file):0kB mapped:46680kB dirty:288kB writeback:0kB shmem:17112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5976kB pagetables:1932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.687885][ T8232] netlink: 'syz.1.613': attribute type 4 has an invalid length.
[   94.707473][ T8229] Node 1 active_anon:8316kB inactive_anon:0kB active_file:1544kB inactive_file:129620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37388kB dirty:52kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6408kB pagetables:1440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.717327][ T8229] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.726422][ T8229] lowmem_reserve[]: 0 811 811 811 811
[   94.728313][ T8229] Node 0 DMA32 free:352016kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20768kB inactive_anon:0kB active_file:3648kB inactive_file:23388kB unevictable:3604kB writepending:288kB present:1556484kB managed:830852kB mlocked:68kB bounce:0kB free_pcp:40056kB local_pcp:14452kB free_cma:0kB
[   94.740499][ T8229] lowmem_reserve[]: 0 0 0 0 0
[   94.743808][ T8229] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   94.754492][ T8229] lowmem_reserve[]: 0 0 854 854 854
[   94.756758][ T8229] Node 1 Normal free:288164kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8316kB inactive_anon:0kB active_file:1544kB inactive_file:129620kB unevictable:3536kB writepending:52kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48148kB local_pcp:29600kB free_cma:0kB
[   94.769782][ T8229] lowmem_reserve[]: 0 0 0 0 0
[   94.772007][ T8229] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   94.777359][ T8229] Node 0 DMA32: 1155*4kB (U) 340*8kB (UME) 131*16kB (UE) 170*32kB (UME) 81*64kB (UME) 17*128kB (UM) 6*256kB (UE) 5*512kB (UME) 2*1024kB (U) 2*2048kB (UM) 78*4096kB (M) = 351964kB
[   94.786068][ T8229] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   94.793256][ T8229] Node 1 Normal: 797*4kB (UME) 546*8kB (UME) 253*16kB (UM) 71*32kB (ME) 73*64kB (UM) 30*128kB (UME) 24*256kB (UME) 9*512kB (ME) 7*1024kB (UME) 5*2048kB (UM) 58*4096kB (M) = 288116kB
[   94.800629][ T8229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.804520][ T8229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   94.808648][ T8229] 41996 total pagecache pages
[   94.810809][ T8229] 0 pages in swap cache
[   94.813549][ T8229] Free swap  = 124996kB
[   94.815459][ T8229] Total swap = 124996kB
[   94.817467][ T8229] 786301 pages RAM
[   94.825612][ T8229] 0 pages HighMem/MovableOnly
[   94.828203][ T8229] 241356 pages reserved
[   94.837503][ T8229] 0 pages cma reserved
[   94.875536][ T8237] netlink: 'syz.2.616': attribute type 10 has an invalid length.
[   94.880136][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'.
[   94.881475][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[   94.884477][ T8239] tunl0: Caught tx_queue_len zero misconfig
[   94.909739][ T8237] tipc: Resetting bearer <eth:syzkaller0>
[   94.972920][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'.
[   94.976256][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'.
[   94.979519][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'.
[   94.984115][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'.
[   94.986987][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.620'.
[   95.076858][ T8256] net_ratelimit: 24 callbacks suppressed
[   95.076871][ T8256] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   95.150126][ T8262] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   95.153748][ T8262] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   95.492245][    T9] tipc: Node number set to 2089344121
[   95.880319][ T8269] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   95.922578][ T8276] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.929813][ T8276] syzkaller0: entered promiscuous mode
[   95.934698][ T8276] syzkaller0: entered allmulticast mode
[   96.020304][ T8277] tipc: Resetting bearer <eth:syzkaller0>
[   96.057015][ T8277] tipc: Resetting bearer <eth:syzkaller0>
[   96.069183][ T8277] tipc: Disabling bearer <eth:syzkaller0>
[   96.263539][ T8310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.412629][ T8313] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[   96.417569][ T8313] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[   96.467031][ T8321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.475448][ T8323] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.479267][ T8323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.490502][ T8321] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   96.494116][ T8321] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   96.498188][ T8321] tipc: Resetting bearer <eth:syzkaller0>
[   96.548489][ T8323] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.553473][ T8323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.606458][ T8323] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.612699][ T8323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.628467][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[   96.653239][ T8343] tun0: tun_chr_ioctl cmd 2148045848
[   96.655512][ T8342] tun0: tun_chr_ioctl cmd 21731
[   96.688251][ T8323] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.694877][ T8323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.708598][ T8347] 8021q: adding VLAN 0 to HW filter on device team0
[   96.713134][ T8347] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   96.825529][ T5718] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.828176][ T5718] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.844540][ T5718] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.847479][ T5718] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.884141][ T5718] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.886972][ T5718] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.911871][ T5718] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.914771][ T5718] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.179343][ T8389] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[   97.183228][ T8389] bond0: option all_slaves_active: invalid value (7)
[   97.250691][ T8394] dvmrp8: entered allmulticast mode
[   97.477089][ T8410] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[   97.492058][ T8412] netlink: 'syz.0.667': attribute type 6 has an invalid length.
[   97.496464][ T8412] netlink: 'syz.0.667': attribute type 6 has an invalid length.
[   97.578707][ T8422] syzkaller1: entered allmulticast mode
[   97.735382][ T8436] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   97.895096][ T8451] netlink: 'syz.1.679': attribute type 1 has an invalid length.
[   97.918387][ T8451] 8021q: adding VLAN 0 to HW filter on device bond8
[   97.921001][ T8386] dvmrp8: left allmulticast mode
[   98.209709][ T8478] bond5: entered promiscuous mode
[   98.434985][ T8494] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   98.484397][ T8499] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   98.524273][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.529707][ T8499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.870011][ T8525] openvswitch: netlink: IPv6 tunnel dst address is zero
[   99.103005][ T8536] validate_nla: 4 callbacks suppressed
[   99.103022][ T8536] netlink: 'syz.2.704': attribute type 13 has an invalid length.
[   99.140963][ T8540] syzkaller1: entered promiscuous mode
[   99.142987][ T8540] syzkaller1: entered allmulticast mode
[   99.147193][ T8540] __nla_validate_parse: 49 callbacks suppressed
[   99.147207][ T8540] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.705'.
[   99.183060][ T8544] netlink: 'syz.2.707': attribute type 8 has an invalid length.
[   99.186416][ T8544] netlink: 'syz.2.707': attribute type 21 has an invalid length.
[   99.189184][ T8544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.707'.
[   99.195646][ T8544] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.199676][ T8544] tipc: Resetting bearer <eth:syzkaller0>
[   99.230671][ T8547] team0: Caught tx_queue_len zero misconfig
[   99.297065][ T8553] netlink: 'syz.2.711': attribute type 8 has an invalid length.
[  100.090410][ T8563] netlink: 284 bytes leftover after parsing attributes in process `syz.1.714'.
[  100.168102][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  100.212619][ T8565] syzkaller1: entered promiscuous mode
[  100.214975][ T8565] syzkaller1: entered allmulticast mode
[  101.193480][ T8582] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  101.205520][ T8585] netlink: 112 bytes leftover after parsing attributes in process `syz.1.721'.
[  101.373629][ T8595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.724'.
[  101.472732][ T8606] syz.2.728 (8606) used obsolete PPPIOCDETACH ioctl
[  101.499780][ T8612] dvmrp8: entered allmulticast mode
[  101.502954][ T8612] dvmrp8: left allmulticast mode
[  101.520291][ T8609] netlink: 332 bytes leftover after parsing attributes in process `syz.1.727'.
[  101.524489][ T8609] netlink: 104 bytes leftover after parsing attributes in process `syz.1.727'.
[  101.529142][ T8609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.727'.
[  101.533040][ T8613] netlink: 332 bytes leftover after parsing attributes in process `syz.1.727'.
[  101.657844][ T8620] netlink: 'syz.0.732': attribute type 1 has an invalid length.
[  101.671242][ T8620] 8021q: adding VLAN 0 to HW filter on device bond11
[  101.687288][ T8620] veth7: entered promiscuous mode
[  101.692492][ T8620] bond11: (slave veth7): Enslaving as an active interface with an up link
[  101.736735][ T8627] delete_channel: no stack
[  101.863505][ T8635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.866607][ T8635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.546717][ T8652] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  102.718625][ T8660] veth1: Caught tx_queue_len zero misconfig
[  102.784829][ T6591] IPVS: stopping backup sync thread 8652 ...
[  102.880931][ T8673] netlink: 'syz.0.746': attribute type 21 has an invalid length.
[  103.043461][ T8681] 8021q: adding VLAN 0 to HW filter on device bond6
[  103.065464][ T8683] team0: Port device 0! removed
[  103.072445][ T8683] bond0: (slave bond_slave_0): Releasing backup interface
[  103.076448][ T8683] bond_slave_0: left promiscuous mode
[  103.080034][ T8683] bond0: (slave bond_slave_1): Releasing backup interface
[  103.093365][ T8683] bond_slave_1: left promiscuous mode
[  103.098756][ T8683] team0: Port device C removed
[  103.105918][ T8683] team0: Port device team_slave_1 removed
[  103.108908][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.114947][ T8683] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.119063][ T8683] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  103.138258][ T8689] syzkaller1: entered promiscuous mode
[  103.140352][ T8689] syzkaller1: entered allmulticast mode
[  103.626897][ T8706] sctp: [Deprecated]: syz.0.757 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.626897][ T8706] Use struct sctp_sack_info instead
[  103.714070][ T8711] nbd: couldn't find a device at index -1174339574
[  103.770329][ T8711] netlink: 'syz.1.759': attribute type 15 has an invalid length.
[  104.278942][ T8734] __nla_validate_parse: 17 callbacks suppressed
[  104.278957][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  104.309104][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'.
[  104.313072][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'.
[  104.520520][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'.
[  104.660883][ T8749] GUP no longer grows the stack in syz.1.769 (8749): 200000003000-20000000a000 (200000001000)
[  104.664786][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.1.769 Not tainted syzkaller #0 PREEMPT(full) 
[  104.664798][ T8749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.664803][ T8749] Call Trace:
[  104.664807][ T8749]  <TASK>
[  104.664811][ T8749]  dump_stack_lvl+0x189/0x250
[  104.664826][ T8749]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.664836][ T8749]  ? __pfx__printk+0x10/0x10
[  104.664873][ T8749]  ? find_vma+0xe7/0x160
[  104.664885][ T8749]  ? __lock_acquire+0xab9/0xd20
[  104.664901][ T8749]  __get_user_pages+0x24d0/0x2ce0
[  104.664911][ T8749]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  104.664931][ T8749]  ? rcu_is_watching+0x15/0xb0
[  104.664942][ T8749]  __gup_longterm_locked+0xde9/0x1660
[  104.664957][ T8749]  ? sanity_check_pinned_pages+0x123a/0x1300
[  104.664969][ T8749]  gup_fast_fallback+0x1e6a/0x2010
[  104.664992][ T8749]  ? __pfx_gup_fast_fallback+0x10/0x10
[  104.665001][ T8749]  ? stack_trace_save+0x9c/0xe0
[  104.665008][ T8749]  ? __pfx_stack_trace_save+0x10/0x10
[  104.665020][ T8749]  ? pin_user_pages_fast+0x4d/0xb0
[  104.665029][ T8749]  iov_iter_extract_pages+0x35a/0x5e0
[  104.665042][ T8749]  extract_iter_to_sg+0xe46/0x24e0
[  104.665056][ T8749]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  104.665070][ T8749]  ? __asan_memset+0x22/0x50
[  104.665079][ T8749]  af_alg_get_rsgl+0x436/0x810
[  104.665096][ T8749]  aead_recvmsg+0x4cc/0x13f0
[  104.665107][ T8749]  ? rcu_is_watching+0x15/0xb0
[  104.665116][ T8749]  ? __pfx_aead_recvmsg+0x10/0x10
[  104.665124][ T8749]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  104.665132][ T8749]  ? __pfx_aead_recvmsg+0x10/0x10
[  104.665139][ T8749]  sock_recvmsg_nosec+0x186/0x1c0
[  104.665149][ T8749]  ____sys_recvmsg+0x3aa/0x460
[  104.665162][ T8749]  ? __pfx_____sys_recvmsg+0x10/0x10
[  104.665177][ T8749]  ? import_iovec+0x74/0xa0
[  104.665187][ T8749]  ___sys_recvmsg+0x1b5/0x510
[  104.665198][ T8749]  ? __pfx____sys_recvmsg+0x10/0x10
[  104.665219][ T8749]  ? __might_fault+0xb0/0x130
[  104.665229][ T8749]  do_recvmmsg+0x307/0x770
[  104.665242][ T8749]  ? __pfx_do_recvmmsg+0x10/0x10
[  104.665250][ T8749]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  104.665266][ T8749]  ? __pfx_do_futex+0x10/0x10
[  104.665282][ T8749]  __x64_sys_recvmmsg+0x190/0x240
[  104.665293][ T8749]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  104.665301][ T8749]  ? __task_pid_nr_ns+0x28/0x470
[  104.665311][ T8749]  ? do_syscall_64+0xbe/0x3b0
[  104.665321][ T8749]  do_syscall_64+0xfa/0x3b0
[  104.665327][ T8749]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.665334][ T8749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.665340][ T8749]  ? exc_page_fault+0x9f/0xf0
[  104.665348][ T8749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.665354][ T8749] RIP: 0033:0x7f0f64d8ec29
[  104.665362][ T8749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.665367][ T8749] RSP: 002b:00007f0f62fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  104.665376][ T8749] RAX: ffffffffffffffda RBX: 00007f0f64fd6090 RCX: 00007f0f64d8ec29
[  104.665381][ T8749] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a
[  104.665385][ T8749] RBP: 00007f0f64e11e41 R08: 0000000000000000 R09: 0000000000000000
[  104.665389][ T8749] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  104.665393][ T8749] R13: 00007f0f64fd6128 R14: 00007f0f64fd6090 R15: 00007ffd5ee91bf8
[  104.665404][ T8749]  </TASK>
[  104.820784][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.770'.
[  104.828976][ T8753] Bluetooth: MGMT ver 1.23
[  105.282736][ T8774] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.776'.
[  105.421052][ T8792] raw_sendmsg: syz.2.780 forgot to set AF_INET. Fix it!
[  105.771856][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  105.785721][ T8826] netlink: 4308 bytes leftover after parsing attributes in process `syz.2.790'.
[  105.949636][ T8838] netlink: 'syz.0.791': attribute type 10 has an invalid length.
[  105.954064][ T8839] netlink: 'syz.0.791': attribute type 10 has an invalid length.
[  105.968059][ T8838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.972592][ T8838] batadv0: entered promiscuous mode
[  105.975568][ T8838] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  105.985735][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'.
[  105.994587][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'.
[  106.002234][ T5718] bond8: (slave macvlan0): link status up again after 0 ms
[  106.028215][ T5911] infiniband syz1: ib_query_port failed (-19)
[  106.032771][ T5718] bond8: (slave macvlan0): link status up again after 0 ms
[  106.035617][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.141954][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.242662][ T8862] dvmrp0: entered allmulticast mode
[  106.251867][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.335993][ T8869] netlink: 76 bytes leftover after parsing attributes in process `syz.0.796'.
[  106.372860][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.491952][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.579301][ T8871] 8021q: adding VLAN 0 to HW filter on device bond12
[  106.605965][ T8872] bond12: (slave macsec1): Error -34 calling dev_set_mtu
[  106.631875][ T6591] bond8: (slave macvlan0): failed to get link speed/duplex
[  106.741786][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  107.261141][ T8892] syzkaller0: entered promiscuous mode
[  107.263745][ T8892] syzkaller0: entered allmulticast mode
[  107.588117][ T8905] netlink: 'syz.1.807': attribute type 21 has an invalid length.
[  107.594391][ T8905] netlink: 'syz.1.807': attribute type 21 has an invalid length.
[  107.907462][ T8924] pim6reg1: entered promiscuous mode
[  107.909637][ T8924] pim6reg1: entered allmulticast mode
[  108.116956][ T8942] bridge4: entered allmulticast mode
[  108.174989][ T6591] net_ratelimit: 12 callbacks suppressed
[  108.175001][ T6591] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.182140][ T8944] netlink: 'syz.1.820': attribute type 29 has an invalid length.
[  108.292012][ T6591] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.401875][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.511997][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.621927][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.732074][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  108.812391][ T8950] dvmrp8: entered allmulticast mode
[  108.891132][ T8949] dvmrp8: left allmulticast mode
[  108.922037][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  109.031615][ T8959] netlink: 'syz.1.825': attribute type 15 has an invalid length.
[  109.072097][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  109.108773][ T8967] netlink: 'syz.0.827': attribute type 21 has an invalid length.
[  109.181952][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  109.292513][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  109.295680][ T8980] netlink: 'syz.1.830': attribute type 21 has an invalid length.
[  109.423462][ T8994] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  109.428080][ T8994] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  109.437337][ T8994] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  109.442286][ T8994] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  109.504043][ T9009] __nla_validate_parse: 6 callbacks suppressed
[  109.504053][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'.
[  109.510861][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.839'.
[  109.520886][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  109.525948][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  109.546891][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  109.708903][ T9024] tipc: Resetting bearer <eth:syzkaller0>
[  109.748632][ T9030] bridge0: port 1(erspan0) entered blocking state
[  109.759227][ T9030] bridge0: port 1(erspan0) entered disabled state
[  109.762215][ T9030] erspan0: entered allmulticast mode
[  109.766640][ T9030] erspan0: entered promiscuous mode
[  109.769853][ T9008] infiniband syz2: set active
[  109.773482][ T9008] infiniband syz2: added vxcan1
[  109.775614][ T5911] vxcan1 speed is unknown, defaulting to 1000
[  109.823252][ T9008] RDS/IB: syz2: added
[  109.825273][ T9008] smc: adding ib device syz2 with port count 1
[  109.827716][ T9008] smc:    ib device syz2 port 1 has no pnetid
[  109.832317][ T5911] vxcan1 speed is unknown, defaulting to 1000
[  109.836103][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  109.969669][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  110.087723][ T9008] vxcan1 speed is unknown, defaulting to 1000
[  110.287069][ T9040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  110.658216][ T9048] netlink: 'syz.2.850': attribute type 2 has an invalid length.
[  110.744762][ T9055] tc_dump_action: action bad kind
[  111.374475][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.856'.
[  111.378584][ T9072] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  111.382157][ T9072] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  111.535184][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'.
[  111.680136][ T9085] netlink: 72 bytes leftover after parsing attributes in process `syz.2.860'.
[  112.116332][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[  112.123332][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  112.126990][ T9105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  112.130927][ T9105] lo: Caught tx_queue_len zero misconfig
[  112.214787][ T9112] gtp0: entered promiscuous mode
[  112.259715][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'.
[  112.421172][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'.
[  112.434545][ T9118] netlink: 'syz.0.869': attribute type 4 has an invalid length.
[  112.766552][ T9130] netlink: 'syz.0.872': attribute type 1 has an invalid length.
[  112.917272][ T9143] sctp: [Deprecated]: syz.0.877 (pid 9143) Use of int in max_burst socket option deprecated.
[  112.917272][ T9143] Use struct sctp_assoc_value instead
[  113.231943][ T5718] net_ratelimit: 35 callbacks suppressed
[  113.231959][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.341832][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.461962][ T6591] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.571932][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.681828][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.728606][ T9150] netlink: 'syz.1.878': attribute type 7 has an invalid length.
[  113.742003][ T9150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.748281][ T9152] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  113.768176][ T9155] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  113.777253][ T9152] netlink: 'syz.2.879': attribute type 12 has an invalid length.
[  113.780127][ T9154] netlink: 'syz.2.879': attribute type 12 has an invalid length.
[  113.793260][ T9155] bond0: (slave batadv0): Releasing backup interface
[  113.807855][ T9155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  113.815367][ T9160] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.819467][ T9160] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.823562][ T5911] vxcan1 speed is unknown, defaulting to 1000
[  113.829814][ T9155] netlink: 'syz.0.880': attribute type 10 has an invalid length.
[  113.833629][ T9155] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  113.840467][ T9155] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  113.846342][ T9155] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.852063][   T12] bond8: (slave macvlan0): link status up again after 0 ms
[  113.854409][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  113.962013][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  114.071915][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  114.178766][ T9179] 8021q: VLANs not supported on sit0
[  114.185043][ T9180] 8021q: VLANs not supported on sit0
[  114.465130][ T9195] netlink: 'syz.0.889': attribute type 5 has an invalid length.
[  114.616263][ T9199] bridge: RTM_NEWNEIGH with invalid ether address
[  117.578642][ T9207] vxcan1 speed is unknown, defaulting to 1000
[  117.731359][ T9222] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  117.888309][ T9226] __nla_validate_parse: 15 callbacks suppressed
[  117.888323][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  118.126585][ T9259] netlink: 14 bytes leftover after parsing attributes in process `syz.0.904'.
[  118.187774][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'.
[  118.230844][ T9271] delete_channel: no stack
[  118.236558][ T9268] delete_channel: no stack
[  118.262920][   T13] net_ratelimit: 13 callbacks suppressed
[  118.262932][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.378358][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.387533][ T9279] tc_dump_action: action bad kind
[  118.481935][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.563420][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'.
[  118.602066][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.626879][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[  118.638174][ T9301] vxcan1 speed is unknown, defaulting to 1000
[  118.666557][ T9307] netlink: 'syz.0.920': attribute type 3 has an invalid length.
[  118.712022][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.822256][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  118.934728][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  119.042614][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  119.145653][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'.
[  119.152223][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  119.206651][ T9342] netlink: 6 bytes leftover after parsing attributes in process `syz.2.925'.
[  119.212491][ T9342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.911400][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  119.914981][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  119.992824][ T9372] lo: entered allmulticast mode
[  119.995222][ T9372] netlink: 'syz.0.935': attribute type 32 has an invalid length.
[  119.997700][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  120.000697][ T9372] (unnamed net_device) (uninitialized): option coupled_control: invalid value (8)
[  120.005537][ T9371] lo: left allmulticast mode
[  120.058949][ T9374] pimreg3: entered allmulticast mode
[  120.142728][ T9386] ip6tnl0: Caught tx_queue_len zero misconfig
[  120.209713][ T9393] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  120.212934][ T9393] netlink: 'syz.0.943': attribute type 9 has an invalid length.
[  120.271036][ T9397] netlink: 'syz.2.944': attribute type 27 has an invalid length.
[  121.378237][ T9463] dvmrp8: entered allmulticast mode
[  121.401573][ T9463] vxcan1 speed is unknown, defaulting to 1000
[  121.587729][ T9462] dvmrp8: left allmulticast mode
[  121.744693][ T9493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.748465][ T9493] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  121.973830][ T9513] wg1: entered promiscuous mode
[  121.975697][ T9513] wg1: entered allmulticast mode
[  122.128066][ T9523] netlink: 'syz.0.971': attribute type 1 has an invalid length.
[  122.166043][ T9523] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address
[  122.175549][ T9523] bond13: (slave vxcan5): Error -95 calling set_mac_address
[  122.446994][ T9536] bond0: Caught tx_queue_len zero misconfig
[  122.662547][ T9554] netlink: 'syz.1.974': attribute type 30 has an invalid length.
[  122.670573][ T5718] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.673544][ T9554] netlink: 'syz.1.974': attribute type 30 has an invalid length.
[  122.676514][ T5718] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.683953][ T5718] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.699588][ T5718] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.824757][ T9579] vxcan1 speed is unknown, defaulting to 1000
[  122.946364][ T9585] macvlan0: entered promiscuous mode
[  122.949877][ T9585] bond0: entered promiscuous mode
[  122.956850][ T9585] macvlan0: left promiscuous mode
[  122.960013][ T9585] bond0: left promiscuous mode
[  123.052632][ T9590] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  123.331208][ T9600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.334726][ T9600] syzkaller0: entered promiscuous mode
[  123.336626][ T9600] syzkaller0: entered allmulticast mode
[  123.352567][ T9600] __nla_validate_parse: 10 callbacks suppressed
[  123.352579][ T9600] netlink: 76 bytes leftover after parsing attributes in process `syz.0.985'.
[  123.363530][ T9600] tipc: Resetting bearer <eth:syzkaller0>
[  123.369160][ T9599] tipc: Resetting bearer <eth:syzkaller0>
[  123.390384][ T9599] tipc: Disabling bearer <eth:syzkaller0>
[  123.402098][ T6589] net_ratelimit: 37 callbacks suppressed
[  123.402114][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  123.511839][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  123.591890][ T9603] netlink: 3 bytes leftover after parsing attributes in process `syz.0.986'.
[  123.656613][ T9603] batadv1: entered promiscuous mode
[  123.659073][ T9603] batadv1: entered allmulticast mode
[  123.701877][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  123.793582][ T9613] vxcan1 speed is unknown, defaulting to 1000
[  123.812081][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  123.838077][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'.
[  123.860882][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'.
[  123.866910][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'.
[  123.985705][ T9627] vti0: entered promiscuous mode
[  124.012529][   T51] page_pool_release_retry() stalled pool shutdown: id 17, 3329 inflight 60 sec
[  124.071802][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  124.181812][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  124.187752][ T9634] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  124.190393][ T9634] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.995'.
[  124.245950][ T9643] 8021q: adding VLAN 0 to HW filter on device bond14
[  124.277420][ T9646] vxcan1 speed is unknown, defaulting to 1000
[  124.291856][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  124.325445][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'.
[  124.342712][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'.
[  124.422219][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  124.498367][ T9654] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  124.503880][ T9654] netlink: 'syz.0.999': attribute type 2 has an invalid length.
[  124.508091][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'.
[  124.541851][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  124.613243][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'.
[  124.673506][ T9665] netem: change failed
[  124.680241][ T9665] netlink: 'syz.1.1002': attribute type 1 has an invalid length.
[  124.752154][ T9671] veth0: Caught tx_queue_len zero misconfig
[  124.813610][ T9672] vxcan1 speed is unknown, defaulting to 1000
[  125.025902][ T9680] netlink: 'syz.0.1007': attribute type 58 has an invalid length.
[  125.088747][ T9686] dvmrp0: left allmulticast mode
[  125.111597][ T9691] netlink: 'syz.2.1009': attribute type 9 has an invalid length.
[  125.230851][ T9699] netlink: 'syz.2.1010': attribute type 10 has an invalid length.
[  125.271794][ T9701] pim6reg99999999: entered allmulticast mode
[  125.331262][ T9706] netlink: 'syz.0.1013': attribute type 4 has an invalid length.
[  125.338743][ T9702] tipc: Resetting bearer <eth:syzkaller0>
[  125.380716][ T9706] netlink: 'syz.0.1013': attribute type 4 has an invalid length.
[  125.790396][ T9722] dvmrp8: entered allmulticast mode
[  125.808526][ T9724] netlink: 'syz.1.1018': attribute type 6 has an invalid length.
[  125.813145][ T9722] vxcan1 speed is unknown, defaulting to 1000
[  125.898472][ T9729] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004
[  125.979175][ T9727] vxcan1 speed is unknown, defaulting to 1000
[  126.006922][ T9721] dvmrp8: left allmulticast mode
[  126.153092][ T9737] netlink: 'syz.2.1020': attribute type 13 has an invalid length.
[  126.222689][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.305222][ T9743] vxcan1 speed is unknown, defaulting to 1000
[  126.830650][ T9761] vxcan1 speed is unknown, defaulting to 1000
[  127.377266][ T9780] batadv_slave_0: Caught tx_queue_len zero misconfig
[  127.477585][ T9784] 8021q: adding VLAN 0 to HW filter on device bond7
[  127.506481][ T9784] macvlan4: entered promiscuous mode
[  127.508390][ T9784] macvlan4: entered allmulticast mode
[  127.510861][ T9784] bond7: entered promiscuous mode
[  127.514401][ T9784] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  127.519218][ T9784] bond7: left promiscuous mode
[  127.894832][ T9807] ieee802154 phy0 wpan0: encryption failed: -22
[  127.920433][ T9809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.000111][ T9816] vxcan1 speed is unknown, defaulting to 1000
[  128.049392][ T9817] veth0: entered promiscuous mode
[  128.104427][ T9817] 8021q: adding VLAN 0 to HW filter on device team0
[  128.160913][ T9817] veth0: left promiscuous mode
[  128.196892][ T9820] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.200336][ T9820] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.245719][ T9820] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.249197][ T9820] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.307048][ T9820] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.310994][ T9820] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.344705][ T9820] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.347925][ T9820] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.389277][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.392131][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.402557][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.405318][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.424550][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.432132][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.439812][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.444701][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.462716][   T12] net_ratelimit: 33 callbacks suppressed
[  128.462727][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  128.497963][ T9828] syzkaller1: tun_chr_ioctl cmd 1074025677
[  128.500375][ T9828] syzkaller1: linktype set to 778
[  128.515930][ T9830] __nla_validate_parse: 21 callbacks suppressed
[  128.515943][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  128.552352][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'.
[  128.572162][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  128.692892][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  128.719102][ T9847] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.1053'.
[  128.801934][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  128.916349][ T9873] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1060'.
[  128.935968][ T9873] 8021q: adding VLAN 0 to HW filter on device team0
[  128.940094][ T9873] bond0: (slave team0): Enslaving as an active interface with an up link
[  128.951953][   T12] bond8: (slave macvlan0): failed to get link speed/duplex
[  129.061832][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  129.182186][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  129.195759][ T9894] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.207091][ T9895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.222647][ T9894] validate_nla: 7 callbacks suppressed
[  129.222659][ T9894] netlink: 'syz.2.1066': attribute type 10 has an invalid length.
[  129.227600][ T9894] bond0: (slave wlan1): refused to change device type
[  129.295637][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  129.300523][ T9902] netlink: 'syz.0.1068': attribute type 5 has an invalid length.
[  129.332885][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  129.340256][ T9910] tipc: Resetting bearer <eth:syzkaller0>
[  129.387627][ T9921] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  129.453008][ T9931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1076'.
[  129.495452][ T9935] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  129.697331][ T9946] netlink: 'syz.1.1081': attribute type 13 has an invalid length.
[  129.729394][ T9946] tipc: Resetting bearer <eth:syzkaller0>
[  129.745145][ T6589] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.748882][ T6589] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.752641][ T6589] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.756251][ T6589] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  129.810690][ T9950] netlink: 'syz.1.1083': attribute type 3 has an invalid length.
[  129.817350][ T9950] syz_tun: entered allmulticast mode
[  129.823055][ T9950] siw: device registration error -23
[  129.863563][ T9949] syz_tun: left allmulticast mode
[  129.947548][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[  130.369515][ T9965] vxcan1 speed is unknown, defaulting to 1000
[  130.512828][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1090'.
[  130.765800][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1093'.
[  130.819323][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  130.966341][ T9998] netlink: 'syz.2.1098': attribute type 4 has an invalid length.
[  130.970898][ T9998] : renamed from bond0 (while UP)
[  131.099797][T10006] netlink: 'syz.2.1102': attribute type 11 has an invalid length.
[  131.104442][T10006] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  131.817453][T10021] netlink: 'syz.1.1106': attribute type 2 has an invalid length.
[  131.954790][T10027] vxcan1 speed is unknown, defaulting to 1000
[  132.414176][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.839798][T10060] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  133.252987][T10083] netlink: 'syz.2.1125': attribute type 1 has an invalid length.
[  133.261516][T10083] netlink: 'syz.2.1125': attribute type 1 has an invalid length.
[  133.286823][T10083] bond0: entered promiscuous mode
[  133.289762][T10083] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.322856][T10083] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.326095][T10083] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  133.330555][T10083] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  133.339881][T10083] bond0: (slave wireguard0): making interface the new active one
[  133.343358][T10083] wireguard0: entered promiscuous mode
[  133.347595][T10083] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  133.357688][T10083] : renamed from bond_slave_0
[  133.571821][ T6589] net_ratelimit: 40 callbacks suppressed
[  133.571833][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  133.594323][T10104] netlink: 'syz.2.1131': attribute type 4 has an invalid length.
[  133.682196][ T6589] bond8: (slave macvlan0): failed to get link speed/duplex
[  133.791907][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  133.870104][T10110] __nla_validate_parse: 15 callbacks suppressed
[  133.870114][T10110] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1133'.
[  133.877311][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1133'.
[  133.901835][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.011906][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.047820][T10123] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  134.051470][T10123] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  134.132140][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.146899][T10129] lo speed is unknown, defaulting to 1000
[  134.149944][T10129] lo speed is unknown, defaulting to 1000
[  134.163655][T10131] ipip0: entered promiscuous mode
[  134.166185][T10129] lo speed is unknown, defaulting to 1000
[  134.178744][T10129] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  134.212076][T10132] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1138'.
[  134.229351][T10129] lo speed is unknown, defaulting to 1000
[  134.232668][T10129] lo speed is unknown, defaulting to 1000
[  134.235487][T10129] lo speed is unknown, defaulting to 1000
[  134.256247][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.287080][T10141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1143'.
[  134.342877][T10144] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  134.362384][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.428377][T10155] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1140'.
[  134.433053][ T5237] Bluetooth: hci2: link tx timeout
[  134.435250][ T5237] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  134.438898][ T5237] Bluetooth: hci2: link tx timeout
[  134.440907][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  134.458644][T10155] veth5: entered promiscuous mode
[  134.482233][   T13] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.498109][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1146'.
[  134.550253][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'.
[  134.591932][ T5718] bond8: (slave macvlan0): failed to get link speed/duplex
[  134.645571][T10160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.857405][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'.
[  134.913404][T10163] sctp: [Deprecated]: syz.1.1148 (pid 10163) Use of int in maxseg socket option.
[  134.913404][T10163] Use struct sctp_assoc_value instead
[  135.278198][T10169] validate_nla: 1 callbacks suppressed
[  135.278213][T10169] netlink: 'syz.0.1150': attribute type 13 has an invalid length.
[  135.283885][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'.
[  135.368873][T10172] syzkaller0: entered promiscuous mode
[  135.370924][T10172] syzkaller0: entered allmulticast mode
[  135.660300][T10177] netlink: 'syz.0.1153': attribute type 2 has an invalid length.
[  135.729092][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'.
[  135.818409][T10190] syzkaller1: entered promiscuous mode
[  135.820794][T10190] syzkaller1: entered allmulticast mode
[  136.426468][T10205] vxcan1 speed is unknown, defaulting to 1000
[  136.493851][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  136.520456][ T5237] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  136.525390][ T5237] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  136.529810][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: kworker/u11:1 Not tainted syzkaller #0 PREEMPT(full) 
[  136.533807][ T5237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.537974][ T5237] Workqueue: hci2 hci_cmd_sync_work
[  136.540140][ T5237] RIP: 0010:klist_remove+0x14a/0x340
[  136.542308][ T5237] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 04 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 04 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  136.550325][ T5237] RSP: 0018:ffffc900212976c0 EFLAGS: 00010202
[  136.552822][ T5237] RAX: 000000000000000b RBX: ffff88810754d640 RCX: 0000000000000000
[  136.556107][ T5237] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  136.559354][ T5237] RBP: ffffc900212977c0 R08: ffffffff8f8a0b23 R09: 1ffffffff1f14164
[  136.562642][ T5237] R10: dffffc0000000000 R11: fffffbfff1f14165 R12: 0000000000000000
[  136.566024][ T5237] R13: 1ffff11004ed338c R14: ffff888027699c60 R15: dffffc0000000000
[  136.569403][ T5237] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  136.573141][ T5237] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.575861][ T5237] CR2: 00007f0f65b07d60 CR3: 0000000030894000 CR4: 00000000000006f0
[  136.579236][ T5237] Call Trace:
[  136.580706][ T5237]  <TASK>
[  136.581960][ T5237]  ? __pfx_klist_remove+0x10/0x10
[  136.584096][ T5237]  ? __pfx_kobject_move+0x10/0x10
[  136.586259][ T5237]  ? do_raw_spin_unlock+0x4d/0x240
[  136.588404][ T5237]  ? get_device_parent+0x366/0x3a0
[  136.590526][ T5237]  device_move+0x193/0x700
[  136.592424][ T5237]  hci_conn_del_sysfs+0xb8/0x170
[  136.594535][ T5237]  hci_conn_del+0xc33/0x11b0
[  136.596524][ T5237]  ? hci_abort_conn_sync+0x24e/0xe30
[  136.598704][ T5237]  hci_abort_conn_sync+0x658/0xe30
[  136.600893][ T5237]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  136.603204][ T5237]  ? hci_conn_valid+0x21/0x230
[  136.605269][ T5237]  ? hci_conn_valid+0x21/0x230
[  136.607351][ T5237]  ? hci_conn_valid+0x21/0x230
[  136.609401][ T5237]  ? hci_conn_valid+0x211/0x230
[  136.611478][ T5237]  ? __pfx_abort_conn_sync+0x10/0x10
[  136.613743][ T5237]  hci_cmd_sync_work+0x213/0x3a0
[  136.615808][ T5237]  ? process_scheduled_works+0x9ef/0x17b0
[  136.618226][ T5237]  process_scheduled_works+0xae1/0x17b0
[  136.620609][ T5237]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.623178][ T5237]  worker_thread+0x8a0/0xda0
[  136.625165][ T5237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  136.627873][ T5237]  ? __kthread_parkme+0x7b/0x200
[  136.629956][ T5237]  kthread+0x711/0x8a0
[  136.631676][ T5237]  ? __pfx_worker_thread+0x10/0x10
[  136.633742][ T5237]  ? __pfx_kthread+0x10/0x10
[  136.635741][ T5237]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.637862][ T5237]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.639995][ T5237]  ? __pfx_kthread+0x10/0x10
[  136.641992][ T5237]  ret_from_fork+0x439/0x7d0
[  136.643975][ T5237]  ? __pfx_ret_from_fork+0x10/0x10
[  136.646099][ T5237]  ? __switch_to_asm+0x39/0x70
[  136.648193][ T5237]  ? __switch_to_asm+0x33/0x70
[  136.650241][ T5237]  ? __pfx_kthread+0x10/0x10
[  136.652181][ T5237]  ret_from_fork_asm+0x1a/0x30
[  136.654227][ T5237]  </TASK>
[  136.655544][ T5237] Modules linked in:
[  136.657934][ T5237] ---[ end trace 0000000000000000 ]---
[  136.665039][ T5237] RIP: 0010:klist_remove+0x14a/0x340
[  136.667380][ T5237] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 04 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 04 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  136.675463][ T5237] RSP: 0018:ffffc900212976c0 EFLAGS: 00010202
[  136.678003][ T5237] RAX: 000000000000000b RBX: ffff88810754d640 RCX: 0000000000000000
[  136.681319][ T5237] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  136.684995][ T5237] RBP: ffffc900212977c0 R08: ffffffff8f8a0b23 R09: 1ffffffff1f14164
[  136.687648][ T5237] R10: dffffc0000000000 R11: fffffbfff1f14165 R12: 0000000000000000
[  136.690180][ T5237] R13: 1ffff11004ed338c R14: ffff888027699c60 R15: dffffc0000000000
[  136.693322][ T5237] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  136.696415][ T5237] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  136.698576][ T5237] CR2: 00007f0f65b07d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  136.701553][ T5237] Kernel panic - not syncing: Fatal exception
[  136.704990][ T5237] Kernel Offset: disabled
[  136.706874][ T5237] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:45:47  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff920011f6e01 RBX=ffffc90008fb7040 RCX=ffffffff8172cd88 RDX=0000000000000010
RSI=0000000000000000 RDI=ffffc90008fb7058 RBP=dffffc0000000000 RSP=ffffc90008fb6f30
R8 =ffffc90008fb7067 R9 =1ffff920011f6e0c R10=dffffc0000000000 R11=fffff520011f6e0d
R12=ffffc90008fb7be0 R13=ffffc90008fb7058 R14=ffffc90008fb7008 R15=ffffc90008fb7050
RIP=ffffffff8b7b2c70 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe1130176c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34ec7f CR3=000000010686e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f84a07a7498 00007f84a07a7470 XMM03=00007f84a07a74a8 00007f84a07a74a0
XMM04=00007f84a130d100 00007f84a07a7460 XMM05=00007f84a07a7478 00007f84a07a74c0
XMM06=00007f84a07a74b8 00007f84a07a74b0 XMM07=00007f84a07a74a8 00007f84a07a74a0
XMM08=0000000000000000 00007f84a0612f0f XMM09=0000000000000000 00007f84a0612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90021296ef0
R8 =ffff8881072c8237 R9 =1ffff11020e59046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b02912 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0f65b07d60 CR3=0000000030894000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=00007f0f64fa7478 00007f0f64fa74c0
XMM06=00007f0f64fa74b8 00007f0f64fa74b0 XMM07=00007f0f64fa74a8 00007f0f64fa74a0
XMM08=0000000000000000 00007f0f64e12f0f XMM09=0000000000000000 00007f0f64e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
