last executing test programs:

682.588633ms ago: executing program 2 (id=8349):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="8700"], 0x28, 0x20048095}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020600df2500"/16], 0x10}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) (async)
sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0x50}, {0x0}], 0x2, 0x0, 0x0, 0x4048800}, 0x20008801) (async)
syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0)

563.317736ms ago: executing program 2 (id=8350):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x89}, {0x0, 0x0, 0x13, 0x1, 0x0, 0x0, 0x7, 0x100000001}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x8404d3, 0x2b}, 0x0, @in6=@private2}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'geneve0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000000)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @local}, 0x14)
close(0x3)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}})
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000240)=0xc7, 0x4)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xfffd, 0xfb7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8}, 0x1c)
setsockopt$inet_opts(r6, 0x0, 0x2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000d00000000000000aa800040fe398aa6f754125743c38b35dcaf7fe21c1825fdb05f063c24c0b86afd0eec8a7b5b4eea26307699be604b9d891a751f5f79faeaf8f935acd4d5ffce5e956f87c11e0061f5c0dcdc0230b48a1f40c3bf5b2658d8c4f2a37fafa194377913d9d7976fa5ac2d46e4aa773e601ed14729e3941659430180fea04b35131bdef972b8875019496159c2f2ab5cd40bdef393", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002010090780000fe04f989"], 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00b\x00\x00\x00\x00\x00\x00'], 0x8)
getsockopt$inet6_opts(r8, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

503.518071ms ago: executing program 2 (id=8351):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000085fde"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0x3)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64], 0x90}}, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0)

503.195446ms ago: executing program 2 (id=8352):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd", 0x13}, {&(0x7f0000000780)="6a8b75132a75d0dd41c6ab24f8378e70f95fb5d4f394cc44a8", 0x19}], 0x2, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0c0000000400000004000000090000000000", @ANYRES32], 0x50)
unshare(0x22020400)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r2, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20)
r3 = socket$inet(0x2, 0x3, 0x81)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000feffffff01000000100007800c00018008000100", @ANYRES32=r4, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x44008090}, 0x2048044)
splice(r0, 0x0, r3, 0x0, 0x8000, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf250000000072cb7d3b001a50b3360ebdfd0b905ace82a88f275edeb6f521a374e5a20e81c2a694fd756ee142f5888e3fe91b21048ae606bae51aaf58412ddcbe81cb0da43d88f2996087617641ebd81cbcf37aa121c78748894dda26b47ec11c2407163197e13c0b2fdae53e86a9ba3ed0e360c8c2e5f36b39", @ANYRES32=r0, @ANYRESOCT=r0], 0x50}}, 0x8000)

451.586131ms ago: executing program 2 (id=8354):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20040000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5)
sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x20000000)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000080)=@assoc_value, &(0x7f0000000300)=0x8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f00000019c0)="e94e6785facdeda4e9a789778edd8051746667861fcb55fc79f3dce63694e62c7129c14cad36728ec771c9b3ad8ff8bb3b3aef032adf92a73fccc368f7e4d07073ce68baace2fe4cd861eb3a2988ca9fd7f2705cfa224834816767e62ff51ae65db5ee09c76585f0722b13d592d9802d70802efe930242ca43280995f58a88253329a8f6edea76902bd788304505c89f7fcdf8ae99f9d7d90748f6ba6fe67f634fd01f4748a6cdf5e7b532b57d822b4b931229e2be3205408e37917aa6aa36391d5f2d55d44148932f2e849bb14e69fca4e3bcece4c70f56094e0c5e1e489fd63b691adb46cfb1234810341415f0cd066ef33a67b6ae1c87eff349aac90632539d0f3842ac7d8d101bfb58a8ac8c353b0be5b1e16bf560cf4a909d369a73da8c5627edce549e1e307377bb768da857d113a603f051769c9df45c64550ef7299271dd821421e60977f693942666cd79fb7c96899e57b56aa13dc3334dbe96879ba304d672f92548f3b5d7df7835d7307a6d47cb13afd113609f093cf527d64d29437d15eee3cf82ecb328e7beb0595f534d712154092ab45559c25dce68753ed7956c98dd8c432415c6e7f1b1444e7178afd18f506033d4a4c5feaf56c663cad615f7e04a009e53edcbc2d587e9f8edd184d9cf8cefb8a722510f4b037fc0eeb88e4e294c3bdcd2bc36e5a79e5b03d8f0fd363142d85bc0098a13b29e5dda20f20e1f22b10bdce593ea7d0ab6a88455d2acd4667d996b3e913923099ed01944efc2427f04fa09886c6e7c43120a023d9427d38a6b0be6a35b8e83491c5e472f2bb1bdbd39b6e3c8d8fd803529de9ea66155928aa56f4cec6654d3480ad9da35624ae41b836b455a5449c73ac22a3fe8fc020a8af63e4e21c1e791bd160d1c04a2a42e93784a225fdbd169bdea851f91886433813fcd7677c2b87791dfa280c9d322b52bcd3708778cb644fd8656321416c905c893ffd578a57c2ecd21a75e34cf2e9ddb56b6e62347cfd9d4413047903a5643f6734d42699715d457ca11721e21fa2cd0bd776548d2f9da40900848606d8587fdc24612b6d9042c9f1785db6628c11d7e79e9a550a8bfbcc82f218926b3043701e0e4111d73ca7bf7b061debe7231d9293abfe2ff6dbfbdbebbed3915e9d27f2f63cb0a6091ba7bda625aa9d978fe41aed03bbd0aeb6cc2985e0c2c4d9d1eeb2474e7d26ab7cc472afe2f11f243708ed43623fd5c0861ad7cf5970f154048fbc58678cb14a4e4e6fdd43605cb3e23efd9df955c7f9539a2074bbe65ee1748a81fe5efe6bf533836becce2afb20366e647a225d7ed6d554d9df7ac1b7c466aab548283a2a9b54fea91bb1ddeceb71aa078c1b847c92d7d5ba703f9d7d9a116f9b18a27ca47c3500ccffb187d70d3b86b31da43d02f1dc0fd92072471c66b931c81dae72bbaa19556a8a806471ff5d91e6489066a287cc1f6dee365f65416fa506edfacbd4a16a66e138f93eb603babe582027e38fee835a002e1a94eb0424c016619f26604517d0bc03e7bdbf2a437fbcb6a3f9ec6977762193665339ad6af2f84872cfcc794fe1e61f6392d1f5cbc409d3050cc655435d6fdd38385e39e18d70c6ea1618e962b6b4b4d0edbffd882c700bf900137832027f807d7739af211ad5be5c538b70d1983bf6693ed909fd406e1d5c8b7bfbdd36d5f9d6a88100895f08cb6ef123e41419d5877d1e17ec72b862fbfc7ddf6f37c8aacbcfb05dad0c2a596b610da09b0bf3b72b420fd797ed0aa72fcac87a6192c0ef7551baa06d50739abff50ba92e79451dc3588ed45e821bfe9b8e25fb871e592dcfedb1b5de9fba1b1635f7e10a4aa8f1785429ac582b4d5a725c6d0051af07ab043d62326b77ea259cf44e8cf14bd8d6a1353c770ab6f1dbedd7f3b39fe2bbd9cc986db49782b34be117cf578cbc417799f12cc5c5bf32ea96d2d7ca48650c74e827f5fe12393be2181416e4030d02c875eb242f815774211cb50a1ce4d53e926388723c5d157b12bcccaf193f2fffb8a53b0b0ec9834c07e96a2cf2323cfb2e1cc92e18baf8bf87ac9a7336f8c04fe6c8fae5ccc81976a26afb44c1aa0efbd93ef87e722c6c3f00da78bdc81dad9795fe2c1c644fdc09c842c138f704353c786311a0e14c226ef9061e36cdade4febdad904cdad6cbc4edcd1d73e27e835324988510534af9475416d5b8c14075b774efaddaad27889736369ab28ac8d005292105d1c3bdc7c665fceef0d945626bf76c8c147f7de23b07c9ca073058f1150958e85193303c7f1f7a60839dcce54d466a210a6d123968fbec47ba47239c1a2fadf9566e356ac610e562b77934bf56456e16edf9a8c0915c0a0b9405676d0d20d31ad62844416de5c043255f24c591427a21479c7fccd231c6b6a90880a551832ef874a879cc7b847aa926964224231a81af9b13d48f02828cb960d88a46302d2ef1492fae558a3d9c81042e2450b3a0aa1cb86bfa58ec3b09da9c360a202d28136565bb956ab1b814a64cb9d89c6122d191faaaee8c908c45919a22aae4cae89446114d5435d4805cbe3158068868daa1a6acfcc5f35c335094b517f9092073449ffb77b951e202a7444b5d96bc97207b30dd69a0c87ee620c559526c1641d159173c81cfe18ceafcd56325b99e1ed851d7cca0255c2b1aada05c1aac26131d342bd6e8fccc547f31d428c491dc8d8273d795ae9972b5386d427309183c5a6a72d049497192f62e50588885414033be661f91e0df461d5bbdb3f6b531d09f5deae7e5ef1f2318b359960e25b4c21cfb844bbe3a67aca7126742737f0b5ea90b42879dad5d00711a96a39d73d58d1eb6184310ca77227696e2969df90352f327391c590581757b98f7a8e3cb65f9e8c2631e742f4ee1629b2241a88ef6c3ba7dfbffbaa5a39e143d26c8c892f2facb83d38a12e966cad83f7b917feb56f26197c31028d968f50426ac1e6cc2c590af1eaf51044b53c32a34d3e03b4f82c324fa321c12299c1fb17504579307476ac3ef6195e2035d94df49f860c7e1a91cb2a76d723b17996cb041e056719c8063aaf2bb0ec90e7194029b19e46ef194a6f5be88459b53765fe8b2176e2bb87b7433b6f6874fc73bac9acff85798d18656499ca6b7b2d22d5e6597bc4151c3aa8f17097ee544f828782f050b13dd31c1cef1cae4dab9e3a52dcd8c851ebba82e619407122071467dee6c8b163aa904d0e2bdf1c0ee7b651be51836ea07f5b2be94a56d5880b8c8c263b7324f90a17460b78d07cad7c6edebba75dd4448e7eaa319ee4c2d87138f34a620a0f6979142e92317fa852ca9b13ee0f864b08fcfa43c0aa31ba47b8c132255300e01384466f2e2b8b284051c99a6058b4edb209a03dbf3f5f69c3cb6f0b62cac07069e8a3dec0243683582e3463922152c0839c8ce7a01f7545e1a7f010af59000e6956e7aa5b0d6ef82b676726053a6a9df5541f5ae2bd770ef65bf4c1be546098770c097debd558cce23091fb8b89797956b8d526fa53eab747367d82e58690338185bfdf9bd9c5b2555de31c47cf750d933d87f0e4f4175a28a8943666a563adef827d3d478cc06d76b69f2d9641cccd39ebfea5514a1141162cf5abb3930d5ead0cd27935de280553e6fc7fbeb2700c85dc666468da3014379122e9a92dcdd2fb7b7f3395c2520c3cb34608fa5b0c744840b76dff7d9203da5f720e3b577eb0b5e88c3073f31dc280d711d989dfe27b6f503aa60dbb52bd0f8345b7b0890ad8073af80d79671e1f646d26a9eca69c2cfcf317d28b78626e2487c4a01115180cd88151fc0dba9ba7476e3d7f60f2c4c1f5368340b54df764086f1ca358a887a9a1a94d4b8d326198cf18f5b6bdd5a4a611a8807f292acc712b02656a487f280086d4d366f224cac1daf8af144eeaa5959b9b4ec5194b05759ee545fd5c708014548257d1603fdd9bb3dddffa34f2c7da8fab09358083fb29e2732959f742405247c7046409ea157dbc434fca910d0fd273ca477a6ba5761759a3688402ae02214a59f8825385897dbfd6cb74c681f51fbeb5fe654dd5347414501a25efc20d6f1fd98ec698df9aa1ea90b1305fbfc61e2f1114767acac8a6ce0c643714fc03dc868797451edd37ff397e62015f0e5d4f6786e52aac5d29f7909d61700cf7b506a51121aa030a21b538c09ab2b097612108d2c512a63e75e35f09a063d361d3d8463ca6b16c407538b5d20a7dfb0c9639b241e70c8bed9c24643f2358807d450e8eb58741a360ad24a05f66f78b9b40ab9c13bb74856769ab68ca095f6e4ff80eec8246aad3874331dc060c4a37c70d756973dd3a8ed74dd3f7a89f9d4e958a3fe69828f50ad950dd59736eb5e270bc960a1cedfeb8f4a15db33ac634502241905833a9e3543058cb753dbfb05378bc955fd14add776adfb126540c3119292fe5a23bf345f10d43aa2bb37eb166bc90475b1d7edf10aa20b0cedf3c65c36c1e732b028a4954a2cf1b8cca8c23e9850889b9ecebff204ef26f915b670b2e2ce059cae6ba7aecfe6966aad7a65bcc186cfe465d7f2027960efb14abced50a2e48170995023805c401f5bb70e22a42b5dc432880e2b36dbefd85bbfb8abb0606e59e74ab4f6073a90d01928ae910fe1da94201a68712ba06ced2ab6500770da4a7182cee0fc92e210eb11aa64a6a523211ee456fc3fbf7caec4ca1f9aa64f3bf70ae1fb6bf6a6df0701debec5e5c73f33b9ce767175220d64b7be0bfddb6340b71426ade83df2382b57c55634e141ef5b8dc2ca6f9c32e5aa5f6b1ba3a1b21d38c1017b6a3aa1c5406928e054e4123e003be90ac7074c9ed36261e550c75f3a60ed70e5f8288ca2628dcf31da9ce72d23e913e727df6efcbba28bff54e8ed1eca653e2b16f3e84a9ccb2455ccf2d8d244c9e0ec84c075020737db6c4fc951ed9878bd8d4231800c237f88bc5db2e95d14d77281e0b7c02cd6bcf0220a8f726469262cabfc60091a4be37031dfce9c964554c2459d6fbbe9da09d9ef3faf507b4234f5423508b1ddbbb07924618b00f6fc6b0eaf100b608a3056ebaba0a1dcb250b572aeb21303c6c02a11eab76a67189f823f006c24a580914d45d0e45dfd9b902ca516ea8bbb2cdfbebdb46b7695174b70d55265208478d2e1e475fc3bd631704a55f7251cd4a718b82fdbd0472e22e48f583f4f032826a28fd3b2da39dd6ae1fea56b9a17b4d1acb90998c0aefe6af3c19f3fc5e3a7c6b83dc17ba52faf0b46396c5e755d12647962f667ea6a1068e8205252c8ee6a9635af207528ee957bc09eeda020e3e1494cb9f3135756351ae20e2a957b433c2207205d8c82b9f9bb344787ab367601fd2e9f89a8e43927c2fd04b4eb5bfe74f84144f926b292b16aabd2033dfd4c2fa28034a75444ec60d74b369acd34378222bd6cfb2611c23df5787cf45ec2a057b0998c1df9de44cd3a86833d80c9f8fee39f2be9da9667dac56286cce406735f3650ba65e471e43fc83fc0470d98162c181a0a751dbbec50df98de4fb65ef812a563e48c491ca15ef74054915226d489836be2c7ca822f83153dd68ac435f5d22f38813ea998a1790114a07516e0bc2519896ab4f77433ffb57f2a7f777dc81bc32e8d94066ce70f0a8908f3dbfaa842bcc3e48e9a09ac775939e99bcc8d7ab3baff6e9f85593b1c95b7b9a9a4b76d82b4bbae9f43eaa690960852f422bdf7e5aebfd662381969d71da4483ebf7a9572bd9fba8", 0xfdb}, {&(0x7f0000000340)="3ecfeb443a592462958e8fb1f42dcfafed50682dd2e6d99be287950b93650b32f39f0d3133ad70f6dc999230e202a34cc6a53c25d39403aa99593d26f81fd25027c1659e3d7c8832ed698ccd35d3a977d6fc1bf82430c4f903ceaf963afacb3035", 0x61}], 0x2, 0x0, 0x0, 0x40080}], 0x1, 0x20040800)
recvmsg(r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f00000015c0)=@phonet, 0x80, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000001740)=""/186, 0xba}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}, {0x0}, {0x0}, {&(0x7f0000002a80)=""/20, 0x14}, {&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000016c0)=""/51, 0x33}], 0x9, &(0x7f0000001980)=""/26, 0x1a}, 0x9}, {{0x0, 0x0, &(0x7f0000006440)=[{&(0x7f0000005f40)=""/217, 0xd9}, {&(0x7f0000001400)=""/62, 0x3e}, {&(0x7f0000006080)=""/231, 0xe7}, {&(0x7f0000006180)=""/237, 0xed}, {&(0x7f0000006280)=""/112, 0x70}, {&(0x7f0000006300)=""/25, 0x19}, {&(0x7f0000006340)=""/199, 0xc7}]}, 0x5}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004a40)=""/234, 0xea}, {&(0x7f0000004b80)=""/207, 0xcf}, {&(0x7f0000004c80)=""/112, 0x70}, {&(0x7f0000004d00)=""/164, 0xa4}], 0x4, &(0x7f0000005e40)=""/244, 0xf4}, 0x7}, {{&(0x7f00000064c0)=@un=@abs, 0x80, &(0x7f0000006640), 0x0, &(0x7f0000006680)=""/151, 0x97}, 0x8001}, {{&(0x7f0000006d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f00000029c0)=""/137, 0x89}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000001640)=""/101, 0x65}], 0x4, &(0x7f0000006dc0)=""/21, 0x15}, 0x2}, {{&(0x7f0000006740)=@can, 0x80, &(0x7f0000006bc0)=[{&(0x7f00000067c0)=""/116, 0x74}, {0x0}, {&(0x7f0000006880)=""/82, 0x52}, {&(0x7f0000006900)=""/83, 0x53}, {&(0x7f0000006980)}, {&(0x7f00000069c0)=""/141, 0x8d}, {&(0x7f0000006a80)=""/222, 0xde}, {&(0x7f0000006b80)=""/21, 0x15}], 0x8, &(0x7f0000006c40)=""/135, 0x87}, 0xfffffffa}], 0x6, 0x60000102, &(0x7f0000007240))
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000002b40)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x38, 0x1403, 0x10, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4054}, 0x4)
recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0xb, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x81}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x5, 0x0, 0x300}, 0x4}], 0x400000000000202, 0x12000, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}})

393.351172ms ago: executing program 2 (id=8356):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0x0, 0x2, [@enum={0x0, 0x0, 0x0, 0x6, 0x4, [{}, {}, {}, {}]}]}}, &(0x7f0000002b80)=""/176, 0x26, 0xb0, 0x1}, 0x20)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x66960000)
read(r1, &(0x7f0000001540)=""/4102, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

323.493855ms ago: executing program 1 (id=8357):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x3ccc, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x727bcafb}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/4110, 0x100e}, 0x20000007}], 0x1, 0x40002000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080))

322.803637ms ago: executing program 1 (id=8358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)
sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)

272.799542ms ago: executing program 1 (id=8359):
r0 = socket$isdn(0x22, 0x2, 0x22)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x11c, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x10a, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64)
close(r0) (rerun: 64)

270.971828ms ago: executing program 1 (id=8361):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "fba73c2908c599ca7a12b5cc422a1e96"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0)

191.471738ms ago: executing program 1 (id=8363):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r1=>0x0}) (async)
mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x3000) (async)
r2 = socket(0x9, 0x80006, 0x7) (async)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb}, 0x20) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0x2, 0xd, 0x8, 0x20, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0xe9, &(0x7f0000000500)=""/233, 0x100, 0x2c, '\x00', r1, 0x17, r0, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e3db, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x4, 0x2, 0x4, 0xb}, {0x5, 0x3, 0xe, 0x5}, {0x5, 0x1, 0x5, 0xb}, {0x3, 0x2, 0x2, 0x5}], 0x10, 0xd}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_retopts={{0x14, 0x110, 0xb, {[@timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x9}]}}}], 0x38}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200", 0x0, 0x104, 0x6000000000000000, 0xc9, 0x120, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", &(0x7f00000006c0)="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", 0x4}, 0x50) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5, <r7=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r7, 0x4) (async)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000a44324897afe1c8b67a1d77ae3000000001c00128009000100627a6e64000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

77.016906ms ago: executing program 1 (id=8365):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/252, 0xfc}], 0x1)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r4, r3, 0x0, 0x9c)
getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

76.372708ms ago: executing program 0 (id=8367):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r3 = epoll_create1(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x20, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0xa, 0x8, 0x2d97, 0xb}, @exit, @jmp={0x5, 0x1, 0x2, 0x6, 0x4, 0xfffffffffffffff0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000020000000c0002000400000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001000000000000000000000000000000000aae0d2c808c8a3467e605d26703fe929b16c65c0f55dcecfda3b1aeb8fdb1c8a932ff4924"], 0x44}}, 0x20000000) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000010})

75.46066ms ago: executing program 0 (id=8368):
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = accept4(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r7=>0x0}) (async)
recvmsg$qrtr(r1, &(0x7f0000001900)={&(0x7f00000011c0), 0xc, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/175, 0xaf}, {&(0x7f00000012c0)=""/130, 0x82}, {&(0x7f0000001380)=""/48, 0x30}], 0x3, &(0x7f0000001400)=[{0xb8, 0x0, 0x0, ""/168}, {0xf8, 0x0, 0x0, ""/231}, {0x58, 0x0, 0x0, ""/72}, {0x50, 0x0, 0x0, ""/59}, {0xe8, 0x0, 0x0, ""/214}, {0xc0, 0x0, 0x0, ""/171}, {0x80, 0x0, 0x0, ""/106}, {0x80, 0x0, 0x0, ""/105}], 0x500, 0x1}, 0x38, 0x2)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010071000000f6ffefff1700000008000300", @ANYRES32=r7, @ANYBLOB="0c003080050001"], 0x28}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$alg(0x26, 0x5, 0x0) (async)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async)
close(r9) (async)
bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
r10 = accept4(r8, 0x0, 0x0, 0x80800) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd8000ff600000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) (async)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r4, 0x2f, 0x69, 0x5, 0x3, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8, 0x8, 0x7, 0xd}})
syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f0000001940)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

74.682162ms ago: executing program 0 (id=8369):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x20, 0x20, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0xe9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240))

72.907621ms ago: executing program 0 (id=8370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2a, 0x2, 0xf4ac)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x8, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d}, 0x48)
close(r7)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
socket$unix(0x1, 0x1, 0x0)
r8 = accept$alg(r1, 0x0, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
r10 = accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=<r11=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000280)={<r14=>0x0, <r15=>0x0, <r16=>0x0}, &(0x7f00000002c0)=0xc)
sendmmsg$unix(r13, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x20, 0x20040045}}], 0x1, 0x5)
r17 = accept4$rose(r1, &(0x7f0000000500)=@short={0xb, @dev, @rose}, &(0x7f0000000540)=0x1c, 0x800)
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="b11aa13563c673e6c9d7413d45c41d1910ced59606c38c3f8804086054302d19ef5ea85f3a5c8215a375f7ecfafd8b76afe74a1588208592b8211e9200a8a048a29fda4a29c8ee64ae", 0x49}, {&(0x7f0000000240)="2326135b318e05029e173fd25da21b19aee8fa4e54cfcd01eb695b313703dd210c9db5191854df6a347ab0ad9d58e95acdab8b510b35f22c22ba7e7ef567d1e1841b6857ad9b0f5eec394f944a10175568f65c7c3c72521d908da947333b54165ff05c0a161654b311e218c673674e2f3095df1186c1f73e35fd8f5212e097a03af69e88bc9c6f", 0x87}], 0x2, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x38, 0x1, 0x1, [r5, r2, r8, r1, r4, r0, r9, r1, r4, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r1, r1, r2, r0, r4, r2]}}, @rights={{0x34, 0x1, 0x1, [r1, r4, r10, r4, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r16}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r4, r1, r2, r2, r0, r0, r4]}}, @rights={{0x18, 0x1, 0x1, [r17, r0]}}], 0x128, 0x20000800}}], 0x1, 0x4008000)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
r18 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r18, &(0x7f0000000000)={0x27}, 0x62)
r19 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r19, 0x890b, &(0x7f0000000700)={@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, 0x7, 0x1ff, 0x0, 0x0, 0xce, 0x2, r3})

2.797646ms ago: executing program 0 (id=8371):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffd0d, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000016020500000a140000001100010000000000000000000500000a681d9da04155880adda45ac9ef0d3fab59158f30ed31e133b23be4aa94181d8355d1d87f77b398a91303d78690c921673999174145654993b9959e2442dc2ecdcbadc52915168c08c6f1a08d73929b975ef9ce283d30340c1aa174fe3f7b79c63c78413d6178bfbe142cbe47a0addb1524100e1d78a83186d0fd64f3697da67a29262434652e59f380d6862af7610b12a2b2bf1da5e4e96baf0a19b98d8ed3999db48692c8298be2be090336e31a2af91dfe5db35cd0115d3f5ace0b0e69ed425e260b68c08a19363ef79f2545ce1a829f2eb578f2084a82dd7bbfca1290476a9eede6dd9172277e197c914e7a0f5c4e7bb49615959fb0a6a5abbdf5c468700d"], 0x28}}, 0x0)

0s ago: executing program 0 (id=8372):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)

kernel console output (not intermixed with test programs):

 8 bytes leftover after parsing attributes in process `syz.2.6216'.
[  340.138689][T26720] tipc: Enabling of bearer <eth:vlan0> rejected, max 3 bearers permitted
[  340.215139][T26731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6220'.
[  340.218435][T26731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6220'.
[  340.221562][T26731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6220'.
[  340.310755][T26739] bond0: Device is already in use.
[  340.711529][T26745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6225'.
[  340.879871][T26761] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6229'.
[  340.912294][ T5280] udevd[5280]: worker [5834] /devices/virtual/block/nbd0 timeout; kill it
[  340.916464][ T5280] udevd[5280]: seq 12817 '/devices/virtual/block/nbd0' killed
[  340.919111][ T5280] udevd[5280]: worker [7331] /devices/virtual/block/nbd1 timeout; kill it
[  340.922392][ T5280] udevd[5280]: seq 12818 '/devices/virtual/block/nbd1' killed
[  340.964494][T26763] netlink: 'syz.1.6230': attribute type 5 has an invalid length.
[  341.039682][T26774] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  341.068496][T26778] netlink: 'syz.1.6234': attribute type 83 has an invalid length.
[  341.071303][T26778] netlink: 'syz.1.6234': attribute type 1 has an invalid length.
[  341.139084][T26779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.231691][T26791] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6239'.
[  341.234888][T26795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6240'.
[  341.299234][T26808] netlink: 'syz.0.6244': attribute type 3 has an invalid length.
[  341.362625][T26822] pim6reg9: entered allmulticast mode
[  341.422055][T26830] openvswitch: netlink: Duplicate or invalid key (type 0).
[  341.424486][T26830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.586314][T26841] bond28: (slave bridge10): Enslaving as an active interface with an up link
[  341.670090][T26850] vlan0: left allmulticast mode
[  341.671752][T26850] geneve1: left allmulticast mode
[  341.785043][T26857] delete_channel: no stack
[  341.868520][T26864] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  341.871607][T26864] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  342.738596][T26918] tc_dump_action: action bad kind
[  342.914893][    T9] lo speed is unknown, defaulting to 1000
[  342.917379][    T9] syz0: Port: 1 Link ACTIVE
[  342.919559][    T9] lo speed is unknown, defaulting to 1000
[  344.080210][T26983] Unsupported ieee802154 address type: 0
[  344.220866][T26997] tipc: Enabling of bearer <et:g> rejected, media not registered
[  344.314616][T27010] No such timeout policy "syz1"
[  344.374306][T27016] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  344.454272][T27024] syzkaller1: entered promiscuous mode
[  344.457237][T27024] syzkaller1: entered allmulticast mode
[  344.462538][T27022] netlink: 'syz.0.6311': attribute type 83 has an invalid length.
[  344.665950][T27041] netlink: 'syz.0.6315': attribute type 5 has an invalid length.
[  344.875936][T27065] lo speed is unknown, defaulting to 1000
[  344.958926][T27065] lo speed is unknown, defaulting to 1000
[  345.284634][T27076] xt_hashlimit: max too large, truncated to 1048576
[  345.349822][T27081] __nla_validate_parse: 21 callbacks suppressed
[  345.349832][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'.
[  345.659607][T27106] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6330'.
[  345.807658][T27124] netlink: 'syz.2.6336': attribute type 1 has an invalid length.
[  345.815961][T27124] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6336'.
[  345.901447][T27126] macsec4: entered promiscuous mode
[  345.903456][T27126] batadv0: entered promiscuous mode
[  345.908740][T27126] batadv0: left promiscuous mode
[  346.009722][T27138] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6343'.
[  346.026580][T27138] xt_hashlimit: max too large, truncated to 1048576
[  346.028920][T27138] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  346.061613][T27144] x_tables: ip_tables: osf match: only valid for protocol 6
[  346.070405][T27146] netlink: 'syz.2.6344': attribute type 1 has an invalid length.
[  346.097441][T27146] 8021q: adding VLAN 0 to HW filter on device bond29
[  346.108471][T27146] gretap0: entered promiscuous mode
[  346.112957][T27146] bond29: (slave gretap0): making interface the new active one
[  346.116668][T27146] bond29: (slave gretap0): Enslaving as an active interface with an up link
[  346.125070][T27146] macvlan4: entered promiscuous mode
[  346.127378][T27146] macvlan4: entered allmulticast mode
[  346.129523][T27146] bond29: entered promiscuous mode
[  346.131808][T27146] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  346.134528][T27146] bond29: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  346.142388][T27146] bond29: left promiscuous mode
[  346.346800][T27157] team0: Port device gtp3 added
[  346.481803][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6352'.
[  346.558321][T27178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6355'.
[  346.634674][T27189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6357'.
[  346.654783][T27191] netlink: 'syz.0.6358': attribute type 1 has an invalid length.
[  346.659904][T27192] netlink: 'syz.0.6358': attribute type 1 has an invalid length.
[  346.669958][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'.
[  346.783781][T27204] netlink: 'syz.0.6360': attribute type 1 has an invalid length.
[  346.803961][T27204] bond19: entered promiscuous mode
[  346.806616][T27204] 8021q: adding VLAN 0 to HW filter on device bond19
[  346.889376][T27207] team0: Device batadv1 is of different type
[  346.961851][T27213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6363'.
[  346.964887][T27213] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6363'.
[  347.276849][T27238] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  347.286012][T27238] tipc: Disabling bearer <udp:syz2>
[  347.814635][T27260] netlink: 'syz.1.6378': attribute type 11 has an invalid length.
[  347.952529][T27276] xfrm2: entered promiscuous mode
[  347.954360][T27276] xfrm2: entered allmulticast mode
[  347.974769][T27275] xt_hashlimit: size too large, truncated to 1048576
[  347.975228][T27276] xt_hashlimit: size too large, truncated to 1048576
[  348.026948][T27279] veth31: entered promiscuous mode
[  348.028749][T27279] bridge19: port 1(veth31) entered blocking state
[  348.030894][T27279] bridge19: port 1(veth31) entered disabled state
[  348.034517][T27279] veth31: entered allmulticast mode
[  348.205538][T27300] lo speed is unknown, defaulting to 1000
[  348.295969][T27307] ieee802154 phy0 wpan0: encryption failed: -90
[  348.331003][T27300] lo speed is unknown, defaulting to 1000
[  348.608135][T27327] netlink: 'syz.0.6400': attribute type 1 has an invalid length.
[  348.642377][T27327] 8021q: adding VLAN 0 to HW filter on device bond20
[  348.650133][T27333] x_tables: ip6_tables: tcp match: only valid for protocol 6
[  348.774230][T27345] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  348.781081][T27345] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode
[  348.794494][T27345] tipc: Resetting bearer <eth:syzkaller0>
[  348.834454][T27350] xt_limit: Overflow, try lower: 0/0
[  348.943642][T27377] xt_policy: too many policy elements
[  348.947214][T27377] netlink: 'syz.1.6416': attribute type 1 has an invalid length.
[  348.959543][T27377] 8021q: adding VLAN 0 to HW filter on device bond29
[  348.968528][T27377] ipvlan2: entered allmulticast mode
[  348.970600][T27377] bond29: entered allmulticast mode
[  349.119851][T27393] lo speed is unknown, defaulting to 1000
[  349.123669][T27396] netlink: 'syz.1.6421': attribute type 1 has an invalid length.
[  349.135638][T27396] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR
[  349.171204][T27401] netlink: 'syz.1.6423': attribute type 1 has an invalid length.
[  349.177855][T27401] NCSI netlink: No device for ifindex 203
[  349.189867][T27402] netlink: 'syz.2.6422': attribute type 21 has an invalid length.
[  349.220136][T27405] lo speed is unknown, defaulting to 1000
[  349.246922][T27393] lo speed is unknown, defaulting to 1000
[  349.417964][T27405] lo speed is unknown, defaulting to 1000
[  349.901982][T27460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.004539][T27467] macsec0: left allmulticast mode
[  350.019312][T27467] macsec0: left promiscuous mode
[  350.990500][T27500] __nla_validate_parse: 21 callbacks suppressed
[  350.990509][T27500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'.
[  351.039738][T27514] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6454'.
[  351.043030][T27513] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  351.107678][T27513] batadv_slave_0: left allmulticast mode
[  351.111984][T27513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6455'.
[  351.117911][T27513] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6455'.
[  351.121054][T27513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6455'.
[  351.149902][T27521] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6458'.
[  351.153709][T27522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6458'.
[  351.180409][T27526] veth0_to_bridge: left allmulticast mode
[  351.182351][T27526] veth0_to_bridge: left promiscuous mode
[  351.184388][T27526] bridge0: port 1(veth0_to_bridge) entered disabled state
[  351.190993][T27526] bond11: (slave gretap0): Releasing active interface
[  351.199263][T27526] team0: Port device gtp1 removed
[  351.201808][T27526] bond13: (slave ip6gretap5): Releasing backup interface
[  351.204180][T27526] bond13: (slave ip6gretap5): the permanent HWaddr of slave - 6e:8e:55:14:ca:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  351.211366][T27526] bond13: (slave veth13): Releasing backup interface
[  351.214895][T27526] bond14: (slave veth15): Releasing active interface
[  351.219112][T27530] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  351.219685][T27526] vlan2: left allmulticast mode
[  351.224848][T27526] bond0: left allmulticast mode
[  351.227296][T27526] vlan2: left promiscuous mode
[  351.228995][T27526] bond0: left promiscuous mode
[  351.230847][T27526] bridge0: port 2(vlan2) entered disabled state
[  351.234655][T27534] validate_nla: 2 callbacks suppressed
[  351.234663][T27534] netlink: 'syz.0.6459': attribute type 10 has an invalid length.
[  351.246552][T27526] bond17: (slave vti0): Releasing backup interface
[  351.309736][T27541] netlink: 'syz.1.6462': attribute type 12 has an invalid length.
[  351.312393][T27541] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.6462'.
[  351.552807][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6468'.
[  351.757170][T27575] netlink: 'syz.0.6472': attribute type 5 has an invalid length.
[  351.927812][T27579] netlink: 'syz.2.6474': attribute type 4 has an invalid length.
[  351.931613][T27579] netlink: 'syz.2.6474': attribute type 4 has an invalid length.
[  352.718437][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6483'.
[  352.867001][T27632] netlink: 'syz.0.6489': attribute type 21 has an invalid length.
[  352.869662][T27631] netlink: 'syz.0.6489': attribute type 21 has an invalid length.
[  352.944852][T27641] xt_time: invalid argument - start or stop time greater than 23:59:59
[  353.006488][T27649] netlink: 'syz.0.6494': attribute type 13 has an invalid length.
[  353.009042][T27649] netlink: 'syz.0.6494': attribute type 17 has an invalid length.
[  353.022947][T27649] 1{X: refused to change device tx_queue_len
[  353.028815][T27649] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  353.034011][T27644] netlink: zone id is out of range
[  353.043181][ T5871] lo speed is unknown, defaulting to 1000
[  353.053641][T27644] netlink: zone id is out of range
[  353.057213][ T5871] syz1: Port: 1 Link ACTIVE
[  353.059590][T27644] netlink: zone id is out of range
[  353.061857][T27644] netlink: zone id is out of range
[  353.063614][T27644] netlink: zone id is out of range
[  353.081622][T27644] netlink: set zone limit has 4 unknown bytes
[  353.099391][T27662] netlink: 'syz.1.6498': attribute type 7 has an invalid length.
[  353.138010][T27644] delete_channel: no stack
[  353.234857][T27683] 0{X: left promiscuous mode
[  353.237269][T27683] bridge0: port 1(30{X) entered disabled state
[  353.253892][T27683] tipc: Resetting bearer <eth:syzkaller0>
[  353.259016][T27683] bond26: (slave vti0): Releasing backup interface
[  353.269705][T27683] bond28: (slave bridge10): Releasing backup interface
[  353.277911][T27683] bond29: (slave gretap0): Releasing active interface
[  353.293354][T27683] team0: Port device gtp3 removed
[  353.557425][T27720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  353.560464][T27720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  353.746919][T27734] tipc: Resetting bearer <eth:syzkaller0>
[  353.868987][T27740] bond0: entered promiscuous mode
[  353.871036][T27740] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.874859][T27740] delete_channel: no stack
[  354.472159][T27762] netdevsim0: entered allmulticast mode
[  354.474212][T27762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  354.853320][T27799] x_tables: duplicate underflow at hook 1
[  354.877002][T27801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.232630][T27824] pim6reg1: entered promiscuous mode
[  355.234518][T27824] pim6reg1: entered allmulticast mode
[  355.238492][T27824] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.118324][T27867] __nla_validate_parse: 13 callbacks suppressed
[  356.118334][T27867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6556'.
[  356.151738][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6557'.
[  356.156972][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6557'.
[  356.159881][T27870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6557'.
[  356.199597][T27873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6558'.
[  356.268661][T27879] validate_nla: 12 callbacks suppressed
[  356.268672][T27879] netlink: 'syz.1.6560': attribute type 3 has an invalid length.
[  356.279751][T27879] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6560'.
[  356.314848][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6562'.
[  356.383169][T27892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.408158][T27899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6567'.
[  356.797977][T27919] netlink: 'syz.2.6572': attribute type 1 has an invalid length.
[  356.803452][T27919] _Z`Ԁ@: entered promiscuous mode
[  356.851655][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6573'.
[  356.854480][T27923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6573'.
[  357.431354][T27991] netlink: 'syz.1.6589': attribute type 3 has an invalid length.
[  357.433940][T27991] netlink: 'syz.1.6589': attribute type 3 has an invalid length.
[  357.439301][T27993] openvswitch: netlink: IP tunnel dst address not specified
[  357.498480][T28004] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  357.646326][T28019] sctp: [Deprecated]: syz.2.6598 (pid 28019) Use of int in max_burst socket option.
[  357.646326][T28019] Use struct sctp_assoc_value instead
[  358.491813][T28047] openvswitch: netlink: Flow key attr not present in new flow.
[  358.532738][T28049] lo speed is unknown, defaulting to 1000
[  358.624083][T28049] lo speed is unknown, defaulting to 1000
[  358.684559][T28055] block nbd2: NBD_DISCONNECT
[  358.695458][T28055] block nbd2: Send disconnect failed -32
[  358.697470][T28055] block nbd2: shutting down sockets
[  358.955045][T28071] openvswitch: netlink: Message has 5 unknown bytes.
[  359.301800][T28088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  359.310918][T28088] bond0: option ad_select: unable to set because the bond device is up
[  359.332393][T28090] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  359.332701][T28091] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  359.407682][T28093] lo speed is unknown, defaulting to 1000
[  359.487311][T28093] lo speed is unknown, defaulting to 1000
[  359.682706][T28105] netlink: 'syz.2.6629': attribute type 3 has an invalid length.
[  359.687445][T28105] team0: Caught tx_queue_len zero misconfig
[  360.173453][T28148] bridge19: entered allmulticast mode
[  360.227843][T28152] netlink: 'syz.0.6644': attribute type 9 has an invalid length.
[  360.730588][T28187] netlink: 'syz.0.6657': attribute type 1 has an invalid length.
[  360.815292][T28192] netlink: 'syz.0.6659': attribute type 10 has an invalid length.
[  360.878636][T28198] netlink: 'syz.0.6660': attribute type 29 has an invalid length.
[  360.881589][T28198] netlink: 'syz.0.6660': attribute type 29 has an invalid length.
[  361.162744][T28235] xt_CT: No such helper "snmp"
[  361.228716][T28245] __nla_validate_parse: 96 callbacks suppressed
[  361.228731][T28245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6676'.
[  361.271965][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6678'.
[  361.288651][T28251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6676'.
[  361.293103][T28245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6676'.
[  361.348545][T28256] ip6tnl10: entered promiscuous mode
[  361.387688][T28256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6680'.
[  361.408411][T28263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6682'.
[  361.478602][T28274] netlink: 'syz.2.6686': attribute type 1 has an invalid length.
[  361.481110][T28274] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6686'.
[  361.483935][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6686'.
[  361.515585][T28280] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.520248][T28280] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  361.554327][T28283] netlink: 'syz.2.6689': attribute type 1 has an invalid length.
[  361.562126][T28285] xt_hashlimit: invalid interval
[  361.573179][T28283] 8021q: adding VLAN 0 to HW filter on device bond30
[  361.620437][T28290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.622757][T28290] IPv6: NLM_F_CREATE should be set when creating new route
[  361.625041][T28290] IPv6: NLM_F_CREATE should be set when creating new route
[  361.627417][T28290] IPv6: NLM_F_CREATE should be set when creating new route
[  361.631076][T28290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  361.677113][T28301] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  361.787730][T28325] netlink: 'syz.2.6697': attribute type 4 has an invalid length.
[  361.824215][T28321] lo speed is unknown, defaulting to 1000
[  361.932953][T28321] lo speed is unknown, defaulting to 1000
[  361.953900][T28342] netlink: 'syz.0.6704': attribute type 3 has an invalid length.
[  361.957162][T28342] netlink: 146 bytes leftover after parsing attributes in process `syz.0.6704'.
[  361.987671][T28344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6705'.
[  362.054597][T28350] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  362.330830][T28372] netlink: 'syz.0.6713': attribute type 1 has an invalid length.
[  362.619225][T28400] netlink: 'syz.2.6722': attribute type 1 has an invalid length.
[  362.700605][T28410] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.707595][T28411] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  362.732421][T28411] lo speed is unknown, defaulting to 1000
[  362.819035][T28419] netlink: 'syz.2.6731': attribute type 1 has an invalid length.
[  362.838229][T28419] 8021q: adding VLAN 0 to HW filter on device bond31
[  362.851282][T28419] veth21: entered promiscuous mode
[  362.854852][T28419] bond31: (slave veth21): Enslaving as an active interface with a down link
[  362.858614][T28411] lo speed is unknown, defaulting to 1000
[  362.900806][T28424] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig
[  362.954863][T28428] netlink: 'syz.0.6734': attribute type 58 has an invalid length.
[  363.085160][T28438] netlink: 'syz.1.6737': attribute type 1 has an invalid length.
[  363.113086][T28438] 8021q: adding VLAN 0 to HW filter on device bond30
[  363.122926][T28443] xt_TCPMSS: Only works on TCP SYN packets
[  363.144043][T28438] bond30: (slave veth33): Enslaving as an active interface with a down link
[  363.158424][T28438] vlan4: entered allmulticast mode
[  363.168344][T28438] bond30: entered allmulticast mode
[  363.171198][T28438] bond30: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  363.240528][T28446]  (unregistering): Released all slaves
[  363.384666][T28454] pim6reg: entered allmulticast mode
[  363.387870][T28454] pim6reg: left allmulticast mode
[  363.653108][T28495] lo speed is unknown, defaulting to 1000
[  363.756341][T28495] lo speed is unknown, defaulting to 1000
[  363.854564][T28514] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  364.406917][T28558] netlink: 'syz.1.6776': attribute type 1 has an invalid length.
[  364.431369][T28558] bond31: (slave bridge23): making interface the new active one
[  364.434159][T28558] bond31: (slave bridge23): Enslaving as an active interface with an up link
[  364.460276][T28562] sock: sock_timestamping_bind_phc: sock not bind to device
[  364.568112][   T60] block nbd0: Possible stuck request ffff888020db8000: control (read@0,1024B). Runtime 270 seconds
[  364.571897][   T60] block nbd0: Possible stuck request ffff888020db8200: control (read@1024,1024B). Runtime 270 seconds
[  364.576004][   T60] block nbd0: Possible stuck request ffff888020db8400: control (read@2048,1024B). Runtime 270 seconds
[  364.577159][ T1117] block nbd1: Possible stuck request ffff888020de8000: control (read@0,1024B). Runtime 270 seconds
[  364.579788][   T60] block nbd0: Possible stuck request ffff888020db8600: control (read@3072,1024B). Runtime 270 seconds
[  364.583164][ T1117] block nbd1: Possible stuck request ffff888020de8200: control (read@1024,1024B). Runtime 270 seconds
[  364.590751][ T1117] block nbd1: Possible stuck request ffff888020de8400: control (read@2048,1024B). Runtime 270 seconds
[  364.594276][ T1117] block nbd1: Possible stuck request ffff888020de8600: control (read@3072,1024B). Runtime 270 seconds
[  365.145140][T28595] vlan3: entered promiscuous mode
[  365.148412][T28595] 1: entered promiscuous mode
[  365.150178][T28595] vlan3: entered allmulticast mode
[  365.263577][T28601] 8021q: VLANs not supported on team0
[  365.746516][T28673] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  365.802747][T28677] xt_CT: No such helper "pptp"
[  365.804846][T28677] --map-set only usable from mangle table
[  365.849376][T28683] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  366.659006][T28683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  366.678501][T21678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.683771][T21678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.742846][T28710] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  366.783599][T28719] __nla_validate_parse: 102 callbacks suppressed
[  366.783610][T28719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6827'.
[  366.810271][T28723] xt_TCPMSS: Only works on TCP SYN packets
[  366.882152][T28736] netlink: 'syz.2.6833': attribute type 10 has an invalid length.
[  366.886198][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6833'.
[  366.890136][T28738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6834'.
[  366.894400][T28738] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  366.973509][T28748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6838'.
[  367.138974][T28771] xt_l2tp: v2 tid > 0xffff: 4294967295
[  367.168937][T28776] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  367.189496][T28768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6845'.
[  367.189517][T28773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6845'.
[  367.235049][T28779] : left allmulticast mode
[  367.324121][T28792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6853'.
[  367.330857][T28795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6854'.
[  367.376290][T28800] netlink: 324 bytes leftover after parsing attributes in process `syz.1.6855'.
[  367.397752][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6855'.
[  367.437964][T28804] team0: Master is either lo or non-ether device
[  367.441934][T28804] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  367.501534][T28809] netlink: 'syz.2.6858': attribute type 9 has an invalid length.
[  367.589030][T28811] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  367.729462][T28832] xt_limit: Overflow, try lower: 262144/524288
[  367.767377][T28837] netlink: 'syz.2.6864': attribute type 1 has an invalid length.
[  368.158046][T28856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  368.161946][T28856] netlink: 'syz.0.6874': attribute type 1 has an invalid length.
[  368.164481][T28856] netlink: 'syz.0.6874': attribute type 11 has an invalid length.
[  368.263067][T28865] macvlan0: entered allmulticast mode
[  368.267201][T28865] netlink: 'syz.1.6878': attribute type 1 has an invalid length.
[  368.275635][T28865] netlink: 'syz.1.6878': attribute type 2 has an invalid length.
[  368.306325][T28867] netlink: 'syz.1.6879': attribute type 10 has an invalid length.
[  368.608355][T28887] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  368.676118][T28894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.761588][T28902] netlink: 'syz.0.6888': attribute type 2 has an invalid length.
[  368.813449][T28910] netlink: 'syz.0.6888': attribute type 2 has an invalid length.
[  369.427091][T28967] lo: left promiscuous mode
[  369.428888][T28967] lo: left allmulticast mode
[  369.432543][T28967] tunl0: left promiscuous mode
[  369.434061][T28967] tunl0: left allmulticast mode
[  369.436206][T28967] gretap0: left allmulticast mode
[  369.438219][T28967] ip_vti0: left promiscuous mode
[  369.440060][T28967] ip_vti0: left allmulticast mode
[  369.441802][T28967] ip6_vti0: left promiscuous mode
[  369.443351][T28967] ip6_vti0: left allmulticast mode
[  369.446379][T28967] !: left promiscuous mode
[  369.447923][T28967] !: left allmulticast mode
[  369.449536][T28967] ip6tnl0: left promiscuous mode
[  369.451347][T28967] ip6tnl0: left allmulticast mode
[  369.453316][T28967] ip6gre0: left promiscuous mode
[  369.455069][T28967] ip6gre0: left allmulticast mode
[  369.457659][T28967] ip6gretap0: left promiscuous mode
[  369.459468][T28967] ip6gretap0: left allmulticast mode
[  369.461541][T28967] nlmon0: left promiscuous mode
[  369.463049][T28967] nlmon0: left allmulticast mode
[  369.465221][T28967] caif0: left promiscuous mode
[  369.466995][T28967] caif0: left allmulticast mode
[  369.469183][T28967] wg0: left promiscuous mode
[  369.470661][T28967] wg0: left allmulticast mode
[  369.472296][T28967] wg1: left promiscuous mode
[  369.473812][T28967] wg1: left allmulticast mode
[  369.475761][T28967] veth0_to_bridge: left promiscuous mode
[  369.477586][T28967] veth0_to_bridge: left allmulticast mode
[  369.480593][T28967] bridge_slave_0: left promiscuous mode
[  369.482761][T28967] veth1_to_bridge: left promiscuous mode
[  369.484717][T28967] veth1_to_bridge: left allmulticast mode
[  369.490643][T28967] bridge_slave_1: left promiscuous mode
[  369.492751][T28967] bridge_slave_1: left allmulticast mode
[  369.495205][T28967] bond_slave_0: left promiscuous mode
[  369.497240][T28967] bond_slave_0: left allmulticast mode
[  369.499337][T28967] veth1_to_bond: left promiscuous mode
[  369.501696][T28967] veth1_to_bond: left allmulticast mode
[  369.503612][T28967] bond_slave_1: left promiscuous mode
[  369.505790][T28967] bond_slave_1: left allmulticast mode
[  369.507804][T28967] veth0_to_team: left promiscuous mode
[  369.509559][T28967] veth0_to_team: left allmulticast mode
[  369.511420][T28967] C: left promiscuous mode
[  369.512890][T28967] C: left allmulticast mode
[  369.514460][T28967] veth1_to_team: left allmulticast mode
[  369.516947][T28967] team_slave_1: left promiscuous mode
[  369.518676][T28967] team_slave_1: left allmulticast mode
[  369.520512][T28967] veth0_to_batadv: left promiscuous mode
[  369.522353][T28967] veth0_to_batadv: left allmulticast mode
[  369.524434][T28967] batadv_slave_0: left promiscuous mode
[  369.527145][T28967] veth1_to_batadv: left promiscuous mode
[  369.528960][T28967] veth1_to_batadv: left allmulticast mode
[  369.530870][T28967] batadv_slave_1: left promiscuous mode
[  369.532673][T28967] batadv_slave_1: left allmulticast mode
[  369.534543][T28967] xfrm0: left promiscuous mode
[  369.536300][T28967] xfrm0: left allmulticast mode
[  369.537977][T28967] veth0_to_hsr: left promiscuous mode
[  369.539742][T28967] veth0_to_hsr: left allmulticast mode
[  369.541585][T28967] hsr_slave_0: left promiscuous mode
[  369.543325][T28967] hsr_slave_0: left allmulticast mode
[  369.545117][T28967] veth1_virt_wifi: left promiscuous mode
[  369.547098][T28967] veth1_virt_wifi: left allmulticast mode
[  369.549000][T28967] veth0_virt_wifi: left promiscuous mode
[  369.550791][T28967] veth0_virt_wifi: left allmulticast mode
[  369.552684][T28967] veth1_macvtap: left allmulticast mode
[  369.554587][T28967] veth0_macvtap: left allmulticast mode
[  369.557601][T28967] geneve0: left promiscuous mode
[  369.559240][T28967] geneve0: left allmulticast mode
[  369.561077][T28967] ip6tnl1: left promiscuous mode
[  369.562721][T28967] ip6tnl1: left allmulticast mode
[  369.564403][T28967] wireguard0: left promiscuous mode
[  369.567594][T28967] wireguard0: left allmulticast mode
[  369.569408][T28967] bridge1: left promiscuous mode
[  369.571045][T28967] bridge1: left allmulticast mode
[  369.572778][T28967] bridge2: left promiscuous mode
[  369.574422][T28967] bridge2: left allmulticast mode
[  369.576592][T28967] veth2: left promiscuous mode
[  369.578205][T28967] veth2: left allmulticast mode
[  369.579875][T28967] veth3: left promiscuous mode
[  369.581472][T28967] veth3: left allmulticast mode
[  369.583187][T28967] veth4: left promiscuous mode
[  369.584769][T28967] veth4: left allmulticast mode
[  369.587780][T28967] veth5: left promiscuous mode
[  369.589387][T28967] veth5: left allmulticast mode
[  369.591042][T28967] vxlan0: left promiscuous mode
[  369.592661][T28967] vxlan0: left allmulticast mode
[  369.594354][T28967] bond1: left promiscuous mode
[  369.596629][T28967] bond1: left allmulticast mode
[  369.598320][T28967] gtp0: left promiscuous mode
[  369.599946][T28967] gtp0: left allmulticast mode
[  369.601621][T28967] bond2: left promiscuous mode
[  369.603230][T28967] bond2: left allmulticast mode
[  369.604875][T28967] bond3: left promiscuous mode
[  369.607888][T28967] bond3: left allmulticast mode
[  369.609563][T28967] bond4: left promiscuous mode
[  369.611147][T28967] bond4: left allmulticast mode
[  369.612768][T28967] bridge3: left promiscuous mode
[  369.614370][T28967] bridge3: left allmulticast mode
[  369.617143][T28967] gre1: left promiscuous mode
[  369.618671][T28967] gre1: left allmulticast mode
[  369.620320][T28967] bond5: left promiscuous mode
[  369.621951][T28967] bond5: left allmulticast mode
[  369.623690][T28967] geneve2: left promiscuous mode
[  369.626667][T28967] geneve2: left allmulticast mode
[  369.628270][T28967] bond6: left promiscuous mode
[  369.629739][T28967] bond6: left allmulticast mode
[  369.631298][T28967] ip6_vti1: left promiscuous mode
[  369.632967][T28967] ip6_vti1: left allmulticast mode
[  369.634601][T28967] erspan1: left promiscuous mode
[  369.636620][T28967] erspan1: left allmulticast mode
[  369.638251][T28967] mac80211_hwsim hwsim16 wlan2: left promiscuous mode
[  369.640347][T28967] mac80211_hwsim hwsim16 wlan2: left allmulticast mode
[  369.642466][T28967] bridge4: left promiscuous mode
[  369.644089][T28967] bridge4: left allmulticast mode
[  369.646941][T28967] bond7: left promiscuous mode
[  369.648448][T28967] bond7: left allmulticast mode
[  369.649996][T28967] gretap1: left promiscuous mode
[  369.651503][T28967] gretap1: left allmulticast mode
[  369.653123][T28967] vlan0: left promiscuous mode
[  369.654647][T28967] geneve1: left promiscuous mode
[  369.656838][T28967] ip6gretap1: left promiscuous mode
[  369.658449][T28967] ip6gretap1: left allmulticast mode
[  369.660114][T28967] bridge5: left promiscuous mode
[  369.661610][T28967] bridge5: left allmulticast mode
[  369.663211][T28967] bridge6: left promiscuous mode
[  369.664811][T28967] bridge6: left allmulticast mode
[  369.667704][T28967] K: left promiscuous mode
[  369.669110][T28967] K: left allmulticast mode
[  369.670575][T28967] veth0_to_bond.0: left promiscuous mode
[  369.672308][T28967] veth0_to_bond: left promiscuous mode
[  369.674036][T28967] veth0_to_bond.0: left allmulticast mode
[  369.676279][T28967] veth0_to_bond: left allmulticast mode
[  369.678083][T28967] veth6: left promiscuous mode
[  369.679560][T28967] veth6: left allmulticast mode
[  369.681097][T28967] veth7: left promiscuous mode
[  369.682558][T28967] veth7: left allmulticast mode
[  369.684112][T28967] bridge7: left promiscuous mode
[  369.687422][T28967] bridge7: left allmulticast mode
[  369.689046][T28967] bond8: left promiscuous mode
[  369.690505][T28967] bond8: left allmulticast mode
[  369.692089][T28967] bond9: left promiscuous mode
[  369.693568][T28967] bond9: left allmulticast mode
[  369.695135][T28967] bond10: left promiscuous mode
[  369.697120][T28967] bond10: left allmulticast mode
[  369.698797][T28967] ip6erspan0: left promiscuous mode
[  369.700412][T28967] ip6erspan0: left allmulticast mode
[  369.702098][T28967] ip6erspan1: left promiscuous mode
[  369.703679][T28967] ip6erspan1: left allmulticast mode
[  369.706711][T28967] bridge8: left promiscuous mode
[  369.708277][T28967] bridge8: left allmulticast mode
[  369.710034][T28967] macsec2: left promiscuous mode
[  369.711551][T28967] macsec2: left allmulticast mode
[  369.713173][T28967] bond11: left promiscuous mode
[  369.714669][T28967] bond11: left allmulticast mode
[  369.716926][T28967] ip6gretap2: left promiscuous mode
[  369.718547][T28967] ip6gretap2: left allmulticast mode
[  369.720382][T28967] veth8: left promiscuous mode
[  369.721916][T28967] veth8: left allmulticast mode
[  369.723569][T28967] veth9: left promiscuous mode
[  369.725151][T28967] veth9: left allmulticast mode
[  369.728468][T28967] bridge9: left promiscuous mode
[  369.729991][T28967] bridge9: left allmulticast mode
[  369.731686][T28967] batadv1: left promiscuous mode
[  369.733257][T28967] batadv1: left allmulticast mode
[  369.734963][T28967] vlan1: left promiscuous mode
[  369.737027][T28967] erspan0: left promiscuous mode
[  369.738665][T28967] vlan1: left allmulticast mode
[  369.740309][T28967] bond12: left promiscuous mode
[  369.741941][T28967] bond12: left allmulticast mode
[  369.743516][T28967] bond13: left promiscuous mode
[  369.745033][T28967] bond13: left allmulticast mode
[  369.747998][T28967] gre2: left promiscuous mode
[  369.749445][T28967] gre2: left allmulticast mode
[  369.750971][T28967] ieee802154 phy1 wpan1: left promiscuous mode
[  369.752945][T28967] ieee802154 phy1 wpan1: left allmulticast mode
[  369.754910][T28967] macsec3: left promiscuous mode
[  369.757012][T28967] macsec3: left allmulticast mode
[  369.758628][T28967] veth10: left promiscuous mode
[  369.760211][T28967] veth10: left allmulticast mode
[  369.761826][T28967] veth11: left promiscuous mode
[  369.763452][T28967] veth11: left allmulticast mode
[  369.765110][T28967] bridge10: left promiscuous mode
[  369.767974][T28967] bridge10: left allmulticast mode
[  369.769706][T28967] bond14: left promiscuous mode
[  369.771297][T28967] bond14: left allmulticast mode
[  369.772895][T28967] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  369.775156][T28967] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  369.778029][T28967] bond15: left allmulticast mode
[  369.779697][T28967] veth12: left promiscuous mode
[  369.781221][T28967] veth12: left allmulticast mode
[  369.782838][T28967] veth13: left promiscuous mode
[  369.784386][T28967] veth13: left allmulticast mode
[  369.787307][T28967] ip6gretap3: left promiscuous mode
[  369.788964][T28967] ip6gretap3: left allmulticast mode
[  369.790666][T28967] veth14: left promiscuous mode
[  369.792184][T28967] veth14: left allmulticast mode
[  369.793798][T28967] veth15: left promiscuous mode
[  369.795829][T28967] veth15: left allmulticast mode
[  369.797520][T28967] ipvlan0: left promiscuous mode
[  369.799072][T28967] ipvlan0: left allmulticast mode
[  369.800660][T28967] bridge11: left promiscuous mode
[  369.802225][T28967] bridge11: left allmulticast mode
[  369.803866][T28967] vti0: left promiscuous mode
[  369.806643][T28967] vti0: left allmulticast mode
[  369.808339][T28967] bond0: left promiscuous mode
[  369.809892][T28967] bond0: left allmulticast mode
[  369.811528][T28967] geneve3: left promiscuous mode
[  369.813062][T28967] geneve3: left allmulticast mode
[  369.814714][T28967] bridge12: left promiscuous mode
[  369.817431][T28967] bridge12: left allmulticast mode
[  369.819187][T28967] netdevsim netdevsim1 eth0: left promiscuous mode
[  369.821169][T28967] netdevsim netdevsim1 eth0: left allmulticast mode
[  369.823227][T28967] netdevsim netdevsim1 eth1: left promiscuous mode
[  369.825630][T28967] netdevsim netdevsim1 eth1: left allmulticast mode
[  369.827735][T28967] netdevsim netdevsim1 eth2: left promiscuous mode
[  369.829811][T28967] netdevsim netdevsim1 eth2: left allmulticast mode
[  369.831928][T28967] netdevsim netdevsim1 eth3: left promiscuous mode
[  369.833938][T28967] netdevsim netdevsim1 eth3: left allmulticast mode
[  369.836685][T28967] veth16: left promiscuous mode
[  369.838178][T28967] veth16: left allmulticast mode
[  369.839773][T28967] veth17: left promiscuous mode
[  369.841381][T28967] veth17: left allmulticast mode
[  369.842990][T28967] ip6gretap4: left promiscuous mode
[  369.844573][T28967] ip6gretap4: left allmulticast mode
[  369.846907][T28967] macvlan0: left allmulticast mode
[  369.848672][T28967] bond18: left promiscuous mode
[  369.850535][T28967] vlan3: left allmulticast mode
[  369.852201][T28967] bridge_slave_0: left allmulticast mode
[  369.854265][T28967] veth1: left promiscuous mode
[  369.856588][T28967] ipvlan1: left allmulticast mode
[  369.858189][T28967] bond21: left allmulticast mode
[  369.862581][T28967] veth27: left promiscuous mode
[  369.866050][T28967] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.868599][T28967] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.871103][T28967] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.873658][T28967] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  369.881295][T28967] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.883830][T28967] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.886796][T28967] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.889340][T28967] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  369.892936][T28967] bond25: left promiscuous mode
[  369.894433][T28967] bond25: left allmulticast mode
[  369.899733][T28967] bridge18: left allmulticast mode
[  369.902587][T28967] sit0: left promiscuous mode
[  369.907750][T28967] ipvlan2: left allmulticast mode
[  369.909354][T28967] bond29: left allmulticast mode
[  369.920521][   T24] lo speed is unknown, defaulting to 1000
[  369.922315][   T24] syz0: Port: 1 Link DOWN
[  369.923680][   T24] lo speed is unknown, defaulting to 1000
[  370.524248][T29019] Cannot find del_set index 4 as target
[  371.316121][T29045] bond0: option arp_validate: invalid value (18446744073491447809)
[  371.843838][T29063] __nla_validate_parse: 26 callbacks suppressed
[  371.843848][T29063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6934'.
[  371.927680][T29065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6935'.
[  371.933972][T29065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6935'.
[  371.938125][T29065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6935'.
[  371.941965][T29065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6935'.
[  372.251140][ T5221] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  372.258391][T29074] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:0
[  372.339276][T29079] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  372.942377][T29088] can: request_module (can-proto-3) failed.
[  372.994698][T29091] xt_CT: No such helper "syz0"
[  373.002174][T29093] xt_CT: No such helper "syz0"
[  373.134754][T29105] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6944'.
[  373.276966][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6948'.
[  373.339470][T29127] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6949'.
[  373.374201][T29135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6952'.
[  373.404505][T29131] netem: change failed
[  373.427712][T29142] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6954'.
[  373.456568][ T5221] Bluetooth: hci2: command 0x0406 tx timeout
[  373.487324][T29144] validate_nla: 2 callbacks suppressed
[  373.487334][T29144] netlink: 'syz.2.6955': attribute type 13 has an invalid length.
[  373.568727][T29161] tap0: tun_chr_ioctl cmd 1074025678
[  373.570444][T29161] tap0: group set to 0
[  373.598393][T29162] netlink: 'syz.2.6955': attribute type 1 has an invalid length.
[  373.649574][T29164] veth0_to_team: left promiscuous mode
[  373.651465][T29164] veth0_to_team: left allmulticast mode
[  373.656813][T29164] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  373.661918][    T9] lo speed is unknown, defaulting to 1000
[  373.663814][    T9] syz1: Port: 1 Link DOWN
[  373.781120][T29169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  373.907616][T29179] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  374.021354][T29186] netlink: 'syz.0.6968': attribute type 12 has an invalid length.
[  374.394316][T29199] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  374.412129][T29197] lo speed is unknown, defaulting to 1000
[  374.519220][T29197] lo speed is unknown, defaulting to 1000
[  374.528545][T29211] xt_hashlimit: size too large, truncated to 1048576
[  375.552107][T29255] lo speed is unknown, defaulting to 1000
[  375.654446][T29263] syz.2.6992 (29263) used obsolete PPPIOCDETACH ioctl
[  375.759595][T29255] lo speed is unknown, defaulting to 1000
[  376.060891][T29277] netlink: 'syz.2.6995': attribute type 58 has an invalid length.
[  376.428850][T29290] gtp4: entered promiscuous mode
[  376.432790][T29290] gtp4: entered allmulticast mode
[  376.533480][T29304] netlink: 'syz.1.7003': attribute type 1 has an invalid length.
[  376.554409][T29304] 8021q: adding VLAN 0 to HW filter on device bond32
[  376.596826][T29309] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  376.993111][T29356] __nla_validate_parse: 21 callbacks suppressed
[  376.993121][T29356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7019'.
[  377.114772][T29369] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7023'.
[  377.164647][T29367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7022'.
[  377.172836][T29378] netlink: 884 bytes leftover after parsing attributes in process `syz.1.7023'.
[  377.178665][T29367] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  377.190519][T29375] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  377.302312][T29393] ipt_REJECT: ECHOREPLY no longer supported.
[  377.440796][T29395] tipc: Disabling bearer <eth:team0>
[  377.483316][T29399] syz.1.7032: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  377.489210][T29399] CPU: 0 UID: 0 PID: 29399 Comm: syz.1.7032 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  377.489222][T29399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.489227][T29399] Call Trace:
[  377.489230][T29399]  <TASK>
[  377.489234][T29399]  dump_stack_lvl+0x189/0x250
[  377.489249][T29399]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.489259][T29399]  ? __pfx__printk+0x10/0x10
[  377.489269][T29399]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  377.489280][T29399]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  377.489290][T29399]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  377.489307][T29399]  warn_alloc+0x214/0x310
[  377.489317][T29399]  ? __pfx_warn_alloc+0x10/0x10
[  377.489327][T29399]  ? __get_vm_area_node+0x28f/0x300
[  377.489338][T29399]  ? xskq_create+0xbf/0x170
[  377.489348][T29399]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  377.489371][T29399]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  377.489385][T29399]  ? __kasan_kmalloc+0x93/0xb0
[  377.489397][T29399]  vmalloc_user_noprof+0xad/0xf0
[  377.489409][T29399]  ? xskq_create+0xbf/0x170
[  377.489416][T29399]  xskq_create+0xbf/0x170
[  377.489424][T29399]  xsk_init_queue+0xb0/0x110
[  377.489432][T29399]  xsk_setsockopt+0x4de/0x710
[  377.489445][T29399]  ? __pfx_xsk_setsockopt+0x10/0x10
[  377.489457][T29399]  ? __fget_files+0x2a/0x420
[  377.489464][T29399]  ? aa_sock_opt_perm+0x74/0x110
[  377.489474][T29399]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  377.489482][T29399]  ? __pfx_xsk_setsockopt+0x10/0x10
[  377.489493][T29399]  do_sock_setsockopt+0x17c/0x1b0
[  377.489506][T29399]  __x64_sys_setsockopt+0x13f/0x1b0
[  377.489519][T29399]  do_syscall_64+0xfa/0x3b0
[  377.489527][T29399]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.489535][T29399]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.489542][T29399]  ? exc_page_fault+0x9f/0xf0
[  377.489550][T29399]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.489557][T29399] RIP: 0033:0x7fd9c518e9a9
[  377.489564][T29399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.489571][T29399] RSP: 002b:00007fd9c608c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  377.489579][T29399] RAX: ffffffffffffffda RBX: 00007fd9c53b5fa0 RCX: 00007fd9c518e9a9
[  377.489584][T29399] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  377.489589][T29399] RBP: 00007fd9c5210d69 R08: 0000000000000004 R09: 0000000000000000
[  377.489593][T29399] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  377.489597][T29399] R13: 0000000000000000 R14: 00007fd9c53b5fa0 R15: 00007ffdb9c32b88
[  377.489609][T29399]  </TASK>
[  377.489612][T29399] Mem-Info:
[  377.575602][T29399] active_anon:17085 inactive_anon:14 isolated_anon:0
[  377.575602][T29399]  active_file:1364 inactive_file:32308 isolated_file:0
[  377.575602][T29399]  unevictable:1768 dirty:45 writeback:0
[  377.575602][T29399]  slab_reclaimable:8211 slab_unreclaimable:174300
[  377.575602][T29399]  mapped:18503 shmem:2438 pagetables:975
[  377.575602][T29399]  sec_pagetables:0 bounce:0
[  377.575602][T29399]  kernel_misc_reclaimable:0
[  377.575602][T29399]  free:145075 free_pcp:26045 free_cma:0
[  377.590512][T29399] Node 0 active_anon:59424kB inactive_anon:16kB active_file:3832kB inactive_file:118460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25828kB dirty:148kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8548kB pagetables:1860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.601005][T29399] Node 1 active_anon:8916kB inactive_anon:40kB active_file:1624kB inactive_file:10772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48184kB dirty:32kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6948kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.612484][T29399] Node 0 DMA free:8548kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:360kB free_cma:0kB
[  377.621415][T29399] lowmem_reserve[]: 0 812 812 812 812
[  377.623200][T29399] Node 0 DMA32 free:150376kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59424kB inactive_anon:16kB active_file:3832kB inactive_file:118460kB unevictable:3536kB writepending:148kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:33224kB local_pcp:19756kB free_cma:0kB
[  377.634248][T29399] lowmem_reserve[]: 0 0 0 0 0
[  377.635926][T29399] Node 1 DMA32 free:270516kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:23096kB local_pcp:11356kB free_cma:0kB
[  377.645781][T29399] lowmem_reserve[]: 0 0 854 854 854
[  377.647601][T29399] Node 1 Normal free:158672kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8916kB inactive_anon:40kB active_file:1624kB inactive_file:10772kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40088kB local_pcp:19820kB free_cma:0kB
[  377.658652][T29399] lowmem_reserve[]: 0 0 0 0 0
[  377.660222][T29399] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 2*128kB (U) 3*256kB (U) 2*512kB (U) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 8552kB
[  377.665333][T29399] Node 0 DMA32: 822*4kB (UE) 538*8kB (UE) 205*16kB (UE) 379*32kB (UE) 227*64kB (UME) 98*128kB (UE) 26*256kB (UE) 5*512kB (UME) 13*1024kB (UM) 0*2048kB 19*4096kB (U) = 150424kB
[  377.670804][T29399] Node 1 DMA32: 61*4kB (UM) 66*8kB (UM) 57*16kB (UME) 107*32kB (UM) 81*64kB (UM) 79*128kB (UME) 71*256kB (UME) 43*512kB (UME) 23*1024kB (UME) 5*2048kB (UE) 43*4096kB (UM) = 270516kB
[  377.678899][T29399] Node 1 Normal: 1390*4kB (UM) 653*8kB (UME) 680*16kB (UME) 614*32kB (UME) 581*64kB (UME) 268*128kB (UME) 105*256kB (UME) 23*512kB (UM) 7*1024kB (UM) 0*2048kB 0*4096kB = 158624kB
[  377.685810][T29399] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.688965][T29399] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.689018][T29406] netlink: 'syz.0.7034': attribute type 32 has an invalid length.
[  377.691924][T29399] 36110 total pagecache pages
[  377.694367][T29406] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7034'.
[  377.695990][T29399] 0 pages in swap cache
[  377.695996][T29399] Free swap  = 124996kB
[  377.696000][T29399] Total swap = 124996kB
[  377.696005][T29399] 786301 pages RAM
[  377.696008][T29399] 0 pages HighMem/MovableOnly
[  377.696011][T29399] 241056 pages reserved
[  377.696014][T29399] 0 pages cma reserved
[  377.794182][T29419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7036'.
[  377.799280][T29420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7036'.
[  378.008626][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.121115][T29465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7050'.
[  378.124950][T29465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7050'.
[  378.233183][T29480] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7056'.
[  378.482051][T29522] netlink: 'syz.2.7071': attribute type 21 has an invalid length.
[  378.527032][T29522] vlan0: entered promiscuous mode
[  378.763316][T29550] netlink: 'syz.1.7077': attribute type 7 has an invalid length.
[  378.767403][T29549] netlink: 'syz.1.7077': attribute type 7 has an invalid length.
[  379.337005][T29519] syz.0.7069 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  379.342190][T29519] CPU: 0 UID: 0 PID: 29519 Comm: syz.0.7069 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  379.342203][T29519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  379.342207][T29519] Call Trace:
[  379.342211][T29519]  <TASK>
[  379.342215][T29519]  dump_stack_lvl+0x189/0x250
[  379.342229][T29519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  379.342239][T29519]  ? __pfx__printk+0x10/0x10
[  379.342255][T29519]  dump_header+0xd3/0x480
[  379.342268][T29519]  oom_kill_process+0x3b6/0x950
[  379.342278][T29519]  out_of_memory+0xf09/0x12a0
[  379.342295][T29519]  ? __pfx_out_of_memory+0x10/0x10
[  379.342311][T29519]  mem_cgroup_out_of_memory+0x145/0x240
[  379.342320][T29519]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  379.342333][T29519]  ? _raw_spin_unlock+0x28/0x50
[  379.342344][T29519]  ? memcg1_oom_prepare+0x37f/0x450
[  379.342355][T29519]  try_charge_memcg+0xdff/0x1290
[  379.342373][T29519]  ? __pfx_try_charge_memcg+0x10/0x10
[  379.342392][T29519]  charge_memcg+0x9f/0x180
[  379.342403][T29519]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  379.342413][T29519]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  379.342426][T29519]  __read_swap_cache_async+0x28c/0x510
[  379.342439][T29519]  swap_cluster_readahead+0x4cf/0x5f0
[  379.342450][T29519]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  379.342464][T29519]  ? get_vma_policy+0x27c/0x3c0
[  379.342476][T29519]  swapin_readahead+0x17d/0xb50
[  379.342484][T29519]  ? __pfx_filemap_get_entry+0x10/0x10
[  379.342495][T29519]  ? __pfx_swapin_readahead+0x10/0x10
[  379.342505][T29519]  ? __filemap_get_folio+0x9a6/0xaf0
[  379.342515][T29519]  ? swap_cache_get_folio+0xae/0x3b0
[  379.342525][T29519]  do_swap_page+0x525/0x5ac0
[  379.342537][T29519]  ? __lock_acquire+0xab9/0xd20
[  379.342551][T29519]  ? do_swap_page+0x184/0x5ac0
[  379.342559][T29519]  ? __pfx_do_swap_page+0x10/0x10
[  379.342567][T29519]  ? do_raw_spin_unlock+0x4d/0x240
[  379.342578][T29519]  ? __pfx_default_wake_function+0x10/0x10
[  379.342587][T29519]  ? ___pte_offset_map+0x21f/0x2c0
[  379.342599][T29519]  ? pte_offset_map_rw_nolock+0xea/0x160
[  379.342610][T29519]  __handle_mm_fault+0xf3e/0x5620
[  379.342619][T29519]  ? __lock_acquire+0xab9/0xd20
[  379.342634][T29519]  ? __pfx___handle_mm_fault+0x10/0x10
[  379.342644][T29519]  ? lock_vma_under_rcu+0xf8/0x710
[  379.342659][T29519]  ? lock_vma_under_rcu+0xf8/0x710
[  379.342670][T29519]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  379.342684][T29519]  handle_mm_fault+0x40a/0x8e0
[  379.342698][T29519]  do_user_addr_fault+0xa81/0x1390
[  379.342728][T29519]  ? rcu_is_watching+0x15/0xb0
[  379.342740][T29519]  ? trace_page_fault_user+0x84/0x1e0
[  379.342748][T29519]  exc_page_fault+0x76/0xf0
[  379.342757][T29519]  asm_exc_page_fault+0x26/0x30
[  379.342765][T29519] RIP: 0033:0x7fe550a6ea7b
[  379.342772][T29519] Code: 83 e6 03 0f 85 0e 02 00 00 48 89 df be 04 00 00 00 e8 19 7e fe ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 44 89 68 fc <8b> 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 c6
[  379.342779][T29519] RSP: 002b:00007ffd90f56000 EFLAGS: 00010206
[  379.342786][T29519] RAX: 0000001b3011ff50 RBX: 00007fe5518e5720 RCX: ffffffff822d595c
[  379.342791][T29519] RDX: 0000001b3011ff4c RSI: 0000000000000004 RDI: 00007fe5518e5720
[  379.342796][T29519] RBP: ffffffffffffff50 R08: 00007fe550db6038 R09: 00007fe550da2000
[  379.342801][T29519] R10: 00007fe5501ff008 R11: 0000000000000005 R12: 00000000000000b0
[  379.342806][T29519] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000007ffff
[  379.342814][T29519]  ? __page_table_check_zero+0x1ec/0x530
[  379.342828][T29519]  </TASK>
[  379.342831][T29519] memory: usage 307200kB, limit 307200kB, failcnt 370
[  379.457177][T29519] memory+swap: usage 295412kB, limit 9007199254740988kB, failcnt 0
[  379.461979][T29519] kmem: usage 293800kB, limit 9007199254740988kB, failcnt 0
[  379.466840][T29519] Memory cgroup stats for /syz0:
[  379.467038][T29519] cache 0
[  379.472537][T29519] rss 0
[  379.473447][T29519] rss_huge 0
[  379.477929][T29519] shmem 0
[  379.478942][T29519] mapped_file 0
[  379.482434][T29519] dirty 0
[  379.483451][T29519] writeback 0
[  379.492450][T29519] workingset_refault_anon 5
[  379.499579][T29519] workingset_refault_file 0
[  379.504418][T29519] swap 176128
[  379.507500][T29519] swapcached 40960
[  379.511188][T29519] pgpgin 270418
[  379.515552][T29519] pgpgout 270408
[  379.519095][T29519] pgfault 506246
[  379.523696][T29519] pgmajfault 21
[  379.530038][T29519] inactive_anon 40960
[  379.533492][T29519] active_anon 0
[  379.538046][T29519] inactive_file 0
[  379.542678][T29519] active_file 0
[  379.546146][T29519] unevictable 0
[  379.549573][T29519] hierarchical_memory_limit 314572800
[  379.556349][T29519] hierarchical_memsw_limit 9223372036854771712
[  379.561688][T29519] total_cache 0
[  379.564172][T29519] total_rss 0
[  379.568992][T29519] total_rss_huge 0
[  379.571667][T29519] total_shmem 0
[  379.575170][T29519] total_mapped_file 0
[  379.579790][T29519] total_dirty 0
[  379.583282][T29519] total_writeback 0
[  379.586892][T29519] total_workingset_refault_anon 5
[  379.594914][T29519] total_workingset_refault_file 0
[  379.599019][T29519] total_swap 176128
[  379.601422][T29519] total_swapcached 40960
[  379.603943][T29519] total_pgpgin 270418
[  379.605606][T29519] total_pgpgout 270408
[  379.607024][T29519] total_pgfault 506246
[  379.608375][T29519] total_pgmajfault 21
[  379.609731][T29519] total_inactive_anon 40960
[  379.611226][T29519] total_active_anon 0
[  379.612538][T29519] total_inactive_file 0
[  379.613967][T29519] total_active_file 0
[  379.615465][T29519] total_unevictable 0
[  379.616831][T29519] anon_cost 0
[  379.617999][T29519] file_cost 0
[  379.619147][T29519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7069,pid=29519,uid=0
[  379.624061][T29519] Memory cgroup out of memory: Killed process 29519 (syz.0.7069) total-vm:101956kB, anon-rss:952kB, file-rss:23004kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  380.412386][T29609] sch_tbf: burst 0 is lower than device bridge21 mtu (1514) !
[  380.442840][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.457777][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.464267][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.483003][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.489156][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.499033][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.506050][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.513380][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.519821][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.527575][T29616] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  380.533260][T29621] syzkaller1: entered promiscuous mode
[  380.535687][T29621] syzkaller1: entered allmulticast mode
[  380.594648][T29623] lo speed is unknown, defaulting to 1000
[  380.730010][T29623] lo speed is unknown, defaulting to 1000
[  380.794389][T29638] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  380.805592][T29640] netlink: 'syz.2.7104': attribute type 21 has an invalid length.
[  380.808123][T29640] netlink: 'syz.2.7104': attribute type 22 has an invalid length.
[  380.810658][T29640] netlink: 'syz.2.7104': attribute type 23 has an invalid length.
[  380.815970][T29640] netlink: 'syz.2.7104': attribute type 25 has an invalid length.
[  380.818380][T29640] netlink: 'syz.2.7104': attribute type 26 has an invalid length.
[  381.032754][T29662] netlink: 'syz.1.7109': attribute type 6 has an invalid length.
[  381.035346][T29663] netlink: 'syz.1.7109': attribute type 6 has an invalid length.
[  381.038239][T29662] netlink: 'syz.1.7109': attribute type 6 has an invalid length.
[  381.160297][T29677] team0: Mode changed to "loadbalance"
[  381.168143][T29677] block nbd2: Unsupported socket: shutdown callout must be supported.
[  381.362216][T29686] veth23: entered promiscuous mode
[  381.510434][T29690] macvlan4: entered allmulticast mode
[  381.513427][T29690] 0: entered allmulticast mode
[  381.515040][T29690] hsr_slave_0: entered allmulticast mode
[  381.517457][T29690] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  381.520740][T29690] 0: left allmulticast mode
[  381.522234][T29690] hsr_slave_0: left allmulticast mode
[  381.570908][T29691] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  381.573701][T29691] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  381.913406][T29717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.916221][T29717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.918893][T29717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.921488][T29717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.924210][T29717] geneve3: entered promiscuous mode
[  381.927027][T29717] geneve3: entered allmulticast mode
[  382.024265][T29727] __nla_validate_parse: 13 callbacks suppressed
[  382.024318][T29727] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.7130'.
[  382.187742][T29745] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  382.233015][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7141'.
[  382.236292][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7141'.
[  382.243712][T29751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7141'.
[  383.100725][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7147'.
[  383.103770][T29775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7147'.
[  383.107532][T29775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7147'.
[  383.247353][T29756] syz.1.7143 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  383.256286][T29756] CPU: 0 UID: 0 PID: 29756 Comm: syz.1.7143 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  383.256300][T29756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.256304][T29756] Call Trace:
[  383.256308][T29756]  <TASK>
[  383.256312][T29756]  dump_stack_lvl+0x189/0x250
[  383.256326][T29756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.256335][T29756]  ? __pfx__printk+0x10/0x10
[  383.256352][T29756]  dump_header+0xd3/0x480
[  383.256365][T29756]  oom_kill_process+0x3b6/0x950
[  383.256375][T29756]  out_of_memory+0xf09/0x12a0
[  383.256392][T29756]  ? __pfx_out_of_memory+0x10/0x10
[  383.256408][T29756]  mem_cgroup_out_of_memory+0x145/0x240
[  383.256417][T29756]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  383.256429][T29756]  ? _raw_spin_unlock+0x28/0x50
[  383.256441][T29756]  ? memcg1_oom_prepare+0x37f/0x450
[  383.256453][T29756]  try_charge_memcg+0xdff/0x1290
[  383.256471][T29756]  ? __pfx_try_charge_memcg+0x10/0x10
[  383.256482][T29756]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  383.256493][T29756]  ? get_mem_cgroup_from_mm+0x38/0x2a0
[  383.256503][T29756]  charge_memcg+0x9f/0x180
[  383.256515][T29756]  __mem_cgroup_charge+0x25/0x80
[  383.256525][T29756]  filemap_add_folio+0x49/0x270
[  383.256539][T29756]  __filemap_get_folio+0x4f6/0xaf0
[  383.256550][T29756]  filemap_fault+0x89d/0x1200
[  383.256562][T29756]  ? __pfx_filemap_fault+0x10/0x10
[  383.256569][T29756]  ? __pfx_do_swap_page+0x10/0x10
[  383.256585][T29756]  __do_fault+0x138/0x390
[  383.256592][T29756]  __handle_mm_fault+0x198b/0x5620
[  383.256601][T29756]  ? __lock_acquire+0xab9/0xd20
[  383.256617][T29756]  ? __pfx___handle_mm_fault+0x10/0x10
[  383.256627][T29756]  ? lock_vma_under_rcu+0xf8/0x710
[  383.256642][T29756]  ? lock_vma_under_rcu+0xf8/0x710
[  383.256675][T29756]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  383.256691][T29756]  handle_mm_fault+0x40a/0x8e0
[  383.256705][T29756]  do_user_addr_fault+0xa81/0x1390
[  383.256716][T29756]  ? rcu_is_watching+0x15/0xb0
[  383.256725][T29756]  ? trace_page_fault_user+0x84/0x1e0
[  383.256733][T29756]  exc_page_fault+0x76/0xf0
[  383.256742][T29756]  asm_exc_page_fault+0x26/0x30
[  383.256749][T29756] RIP: 0033:0x7fd9c506ea77
[  383.256757][T29756] Code: 49 89 ee 41 83 e6 03 0f 85 0e 02 00 00 48 89 df be 04 00 00 00 e8 19 7e fe ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 <44> 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3
[  383.256763][T29756] RSP: 002b:00007ffdb9c32c10 EFLAGS: 00010212
[  383.256771][T29756] RAX: 0000001b3021ff94 RBX: 00007fd9c5ee5720 RCX: ffffffff822d57da
[  383.256777][T29756] RDX: 0000001b3021ff90 RSI: 0000000000000004 RDI: 00007fd9c5ee5720
[  383.256781][T29756] RBP: ffffffffffffff94 R08: 00007fd9c53b6038 R09: 00007fd9c53a2000
[  383.256786][T29756] R10: 00007fd9c47ff008 R11: 0000000000000002 R12: 000000000000006c
[  383.256791][T29756] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000007ffff
[  383.256800][T29756]  ? __page_table_check_zero+0x6a/0x530
[  383.256813][T29756]  </TASK>
[  383.256816][T29756] memory: usage 307200kB, limit 307200kB, failcnt 456
[  383.361091][T29756] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0
[  383.363611][T29756] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0
[  383.370864][T29756] Memory cgroup stats for /syz1:
[  383.371047][T29756] cache 0
[  383.373746][T29756] rss 0
[  383.374673][T29756] rss_huge 0
[  383.377577][T29756] shmem 0
[  383.378646][T29756] mapped_file 0
[  383.379901][T29756] dirty 0
[  383.380866][T29756] writeback 0
[  383.382017][T29756] workingset_refault_anon 23
[  383.384066][T29756] workingset_refault_file 28
[  383.387287][T29756] swap 167936
[  383.398923][T29756] swapcached 32768
[  383.401059][T29756] pgpgin 257366
[  383.402286][T29756] pgpgout 257358
[  383.403532][T29756] pgfault 443956
[  383.404815][T29756] pgmajfault 23
[  383.406219][T29756] inactive_anon 20480
[  383.407577][T29756] active_anon 12288
[  383.408852][T29756] inactive_file 0
[  383.410086][T29756] active_file 0
[  383.411280][T29756] unevictable 0
[  383.413518][T29756] hierarchical_memory_limit 314572800
[  383.416871][T29756] hierarchical_memsw_limit 9223372036854771712
[  383.418895][T29756] total_cache 0
[  383.420094][T29756] total_rss 0
[  383.421228][T29756] total_rss_huge 0
[  383.422486][T29756] total_shmem 0
[  383.423746][T29756] total_mapped_file 0
[  383.425131][T29756] total_dirty 0
[  383.426808][T29756] total_writeback 0
[  383.428988][T29756] total_workingset_refault_anon 23
[  383.430774][T29756] total_workingset_refault_file 28
[  383.432510][T29756] total_swap 167936
[  383.433855][T29756] total_swapcached 32768
[  383.436902][T29756] total_pgpgin 257366
[  383.438293][T29756] total_pgpgout 257358
[  383.439709][T29756] total_pgfault 443956
[  383.441115][T29756] total_pgmajfault 23
[  383.442457][T29756] total_inactive_anon 20480
[  383.444015][T29756] total_active_anon 12288
[  383.448007][T29756] total_inactive_file 0
[  383.449489][T29756] total_active_file 0
[  383.450946][T29756] total_unevictable 0
[  383.452358][T29756] anon_cost 0
[  383.453563][T29756] file_cost 0
[  383.454763][T29756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7143,pid=29756,uid=0
[  383.462417][T29756] Memory cgroup out of memory: Killed process 29756 (syz.1.7143) total-vm:101884kB, anon-rss:1076kB, file-rss:23000kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  383.593830][T29799] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7154'.
[  383.630004][T29801] x_tables: duplicate underflow at hook 2
[  383.775969][T29811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7157'.
[  383.868525][T29819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7160'.
[  383.953855][T29824] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  383.956937][T29824] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  383.959386][T29824] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  384.012794][T29826] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.077911][T29830] validate_nla: 6 callbacks suppressed
[  384.077920][T29830] netlink: 'syz.2.7164': attribute type 9 has an invalid length.
[  384.209478][T29852] netlink: 'syz.2.7171': attribute type 1 has an invalid length.
[  384.212025][T29852] netlink: 'syz.2.7171': attribute type 1 has an invalid length.
[  384.369052][T29870] x_tables: ip_tables: ah match: only valid for protocol 51
[  384.403607][T29874] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.184469][T29921] batadv_slave_1: entered promiscuous mode
[  385.187187][T29921] batadv_slave_1: left promiscuous mode
[  385.259130][T29929] netlink: 'syz.2.7192': attribute type 10 has an invalid length.
[  385.308188][T29944] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.311436][T29944] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  385.315105][T29944] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  385.399867][T29957] tipc: Resetting bearer <eth:gre0>
[  385.418531][T29957] tipc: Resetting bearer <eth:macvtap0>
[  385.458053][T29968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  385.463884][T29967] bond0: entered promiscuous mode
[  385.469578][T29967] bond0: left promiscuous mode
[  385.476691][T29973] tipc: Bearer <ib:ip6gre0>: already 2 bearers with priority 10
[  385.479113][T29973] tipc: Bearer <ib:ip6gre0>: trying with adjusted priority
[  385.481492][T29973] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  385.631455][T29992] sit6: entered promiscuous mode
[  385.649245][T29994] syzkaller1: entered promiscuous mode
[  385.651199][T29994] syzkaller1: entered allmulticast mode
[  385.954800][T30033] xt_CT: No such helper "syz0"
[  386.025111][T30040] net_ratelimit: 68 callbacks suppressed
[  386.025123][T30040] openvswitch: netlink: Flow key attr not present in new flow.
[  386.263555][T30064] bridge23: entered promiscuous mode
[  386.689447][T30108] netlink: 'syz.1.7249': attribute type 2 has an invalid length.
[  386.723538][T30114] syzkaller1: entered promiscuous mode
[  386.726106][T30114] syzkaller1: entered allmulticast mode
[  387.064485][T30131] __nla_validate_parse: 41 callbacks suppressed
[  387.064495][T30131] netlink: 300 bytes leftover after parsing attributes in process `syz.0.7255'.
[  387.366791][T28997] Bluetooth: hci2: command 0x0406 tx timeout
[  387.631940][T30170] bridge0: port 1(gretap0) entered blocking state
[  387.634051][T30170] bridge0: port 1(gretap0) entered disabled state
[  387.641539][T30170] gretap0: entered allmulticast mode
[  387.644188][T30170] gretap0: left allmulticast mode
[  387.681767][T30175] netlink: 'syz.1.7260': attribute type 2 has an invalid length.
[  387.691149][T30175] k*]: entered promiscuous mode
[  387.724987][T30178] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  387.753103][T30182] netlink: 'syz.0.7262': attribute type 1 has an invalid length.
[  387.769646][T30182] 8021q: adding VLAN 0 to HW filter on device bond21
[  387.780195][T30182] veth21: entered promiscuous mode
[  387.783733][T30182] bond21: (slave veth21): Enslaving as an active interface with a down link
[  387.790122][T30182] erspan0: entered allmulticast mode
[  387.830736][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7263'.
[  387.874118][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7264'.
[  387.879257][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7264'.
[  387.882632][T30191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7264'.
[  387.886618][T30191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7264'.
[  387.929415][T30193] netlink: 'syz.0.7265': attribute type 1 has an invalid length.
[  387.956507][T30193] 8021q: adding VLAN 0 to HW filter on device bond22
[  387.974455][T30193] veth23: entered promiscuous mode
[  387.980473][T30193] bond22: (slave veth23): Enslaving as a backup interface with a down link
[  388.007465][T30196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7266'.
[  388.029706][T30198] netlink: 'syz.0.7267': attribute type 5 has an invalid length.
[  388.033123][T30198] netlink: 'syz.0.7267': attribute type 6 has an invalid length.
[  388.039074][T30198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'.
[  388.669802][T30214] 8021q: adding VLAN 0 to HW filter on device bond22
[  388.673858][T30214] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7272'.
[  388.677250][T30214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7272'.
[  388.684863][T30214] bond23: (slave gretap3): Releasing active interface
[  388.691697][T30214] bond24: (slave geneve5): Releasing active interface
[  388.694677][T30214] veth31: left allmulticast mode
[  388.697242][T30214] veth31: left promiscuous mode
[  388.699373][T30214] bridge19: port 1(veth31) entered disabled state
[  388.703944][T30214] bond30: (slave veth33): Releasing active interface
[  388.709660][T30214] bond31: (slave bridge23): Releasing active interface
[  388.973871][T30232] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  388.990298][T30234] nbd: nbd0 already in use
[  389.068426][T30244] bridge0: entered allmulticast mode
[  389.097398][T30248] validate_nla: 1 callbacks suppressed
[  389.097407][T30248] netlink: 'syz.1.7287': attribute type 1 has an invalid length.
[  389.101715][T30248] netlink: 'syz.1.7287': attribute type 2 has an invalid length.
[  389.104944][T30248] netlink: 'syz.1.7287': attribute type 1 has an invalid length.
[  389.134749][T30246] pim6reg: entered allmulticast mode
[  389.137531][T30246] pim6reg: left allmulticast mode
[  389.150954][T30255] netlink: 'syz.1.7290': attribute type 33 has an invalid length.
[  389.264887][T30278] pimreg: entered allmulticast mode
[  389.346975][T30288] netlink: 'syz.1.7301': attribute type 1 has an invalid length.
[  389.444655][T30300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.471719][T30298] netlink: 'syz.2.7302': attribute type 21 has an invalid length.
[  389.517941][T30305] 8021q: adding VLAN 0 to HW filter on device bond34
[  389.692045][T30312] macvlan7: entered promiscuous mode
[  389.693871][T30312] macvlan7: entered allmulticast mode
[  389.696365][T30312] bond0: entered allmulticast mode
[  389.698128][T30312] bond0: entered promiscuous mode
[  389.700147][T30312] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  389.703491][T30312] bond34: (slave macvlan7): Enslaving as an active interface with an up link
[  390.493461][T30346] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  390.502471][T30346] netlink: 'syz.1.7320': attribute type 4 has an invalid length.
[  390.571220][T30347] lo speed is unknown, defaulting to 1000
[  390.692716][T30347] lo speed is unknown, defaulting to 1000
[  390.772017][T30368] netlink: 'syz.1.7327': attribute type 1 has an invalid length.
[  390.793288][T30368] 8021q: adding VLAN 0 to HW filter on device bond35
[  390.824153][T30374] veth1_to_team: entered allmulticast mode
[  390.827071][T30374] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  390.874521][T30381] openvswitch: netlink: Multiple metadata blocks provided
[  390.973913][T30387] netlink: 'syz.1.7332': attribute type 8 has an invalid length.
[  391.008476][T30392] vlan5: entered promiscuous mode
[  391.010367][T30392] vlan5: entered allmulticast mode
[  391.143087][T30404] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.147579][T30406] netlink: 'syz.1.7337': attribute type 12 has an invalid length.
[  391.198260][T30410] bond34: (slave macvlan7): Releasing backup interface
[  391.215209][T30410] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  391.313070][T30413] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  391.513657][T30429] netlink: 'syz.2.7343': attribute type 11 has an invalid length.
[  391.716469][T30443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.817300][T30457] xt_hashlimit: max too large, truncated to 1048576
[  391.963113][T30478] bond0: Device is already in use.
[  392.164990][T30503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.315433][T30522] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  392.319979][T30522] __nla_validate_parse: 33 callbacks suppressed
[  392.319988][T30522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7370'.
[  392.366857][T30532] veth1_to_bond: entered allmulticast mode
[  392.371203][T30532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7372'.
[  392.397361][T30532] veth1_to_bond (unregistering): left allmulticast mode
[  392.477645][T30547] IPVS: length: 8 != 446622349272
[  392.521751][T30553] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7381'.
[  392.577236][T30567] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7385'.
[  392.622294][T30573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  392.701330][T30583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7389'.
[  392.763567][T30587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  392.803719][   T24] lo speed is unknown, defaulting to 1000
[  392.806186][   T24] syz1: Port: 1 Link ACTIVE
[  392.807282][T30593] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.7392'.
[  392.877286][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7392'.
[  392.880388][T30599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7392'.
[  393.037489][T30610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7399'.
[  393.104976][T30611] : entered promiscuous mode
[  393.474413][T30619] xt_l2tp: missing protocol rule (udp|l2tpip)
[  393.532690][T30627] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7404'.
[  393.933039][T30665] : renamed from batadv_slave_1
[  394.003046][T30665] xt_HMARK: spi-set and port-set can't be combined
[  394.041254][T30667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  394.044185][T30667] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  394.115602][T30671] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  394.118164][T30671] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  394.120700][T30671] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  394.123375][T30671] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  394.137912][T30671] geneve1: entered allmulticast mode
[  394.383101][T30701] validate_nla: 9 callbacks suppressed
[  394.383110][T30701] netlink: 'syz.1.7428': attribute type 1 has an invalid length.
[  394.464460][T30710] sctp: [Deprecated]: syz.1.7432 (pid 30710) Use of int in maxseg socket option.
[  394.464460][T30710] Use struct sctp_assoc_value instead
[  394.469214][T30710] sctp: [Deprecated]: syz.1.7432 (pid 30710) Use of int in maxseg socket option.
[  394.469214][T30710] Use struct sctp_assoc_value instead
[  394.554010][T30720] netlink: 'syz.1.7434': attribute type 10 has an invalid length.
[  394.657074][   T60] block nbd0: Possible stuck request ffff888020db8000: control (read@0,1024B). Runtime 300 seconds
[  394.660430][   T60] block nbd0: Possible stuck request ffff888020db8200: control (read@1024,1024B). Runtime 300 seconds
[  394.663953][   T60] block nbd0: Possible stuck request ffff888020db8400: control (read@2048,1024B). Runtime 300 seconds
[  394.668258][ T1117] block nbd1: Possible stuck request ffff888020de8000: control (read@0,1024B). Runtime 300 seconds
[  394.669093][   T60] block nbd0: Possible stuck request ffff888020db8600: control (read@3072,1024B). Runtime 300 seconds
[  394.672755][ T1117] block nbd1: Possible stuck request ffff888020de8200: control (read@1024,1024B). Runtime 300 seconds
[  394.681148][ T1117] block nbd1: Possible stuck request ffff888020de8400: control (read@2048,1024B). Runtime 300 seconds
[  394.686202][ T1117] block nbd1: Possible stuck request ffff888020de8600: control (read@3072,1024B). Runtime 300 seconds
[  394.730814][T30728] bridge0: entered allmulticast mode
[  394.742971][T30728] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  394.897186][T30743] IPv6: sit2: Disabled Multicast RS
[  395.050742][T30757] sctp: [Deprecated]: syz.1.7445 (pid 30757) Use of int in max_burst socket option.
[  395.050742][T30757] Use struct sctp_assoc_value instead
[  395.170898][T30764] veth1_to_team: entered allmulticast mode
[  395.278086][T30768] netlink: 'syz.2.7450': attribute type 20 has an invalid length.
[  395.291607][T30769] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  395.297364][T30768] netlink: 'syz.2.7450': attribute type 8 has an invalid length.
[  395.350078][T30777] netlink: 'syz.2.7452': attribute type 5 has an invalid length.
[  395.534407][T30802] netlink: 'syz.0.7459': attribute type 12 has an invalid length.
[  395.552301][T30805] netlink: 'syz.2.7460': attribute type 10 has an invalid length.
[  395.667812][T30825] netlink: 'syz.2.7466': attribute type 10 has an invalid length.
[  395.697638][T30829] netlink: 'syz.2.7467': attribute type 2 has an invalid length.
[  395.700186][T30829] netlink: 'syz.2.7467': attribute type 1 has an invalid length.
[  395.807091][T30843] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  396.111676][T30879] syzkaller1: entered promiscuous mode
[  396.113444][T30879] syzkaller1: entered allmulticast mode
[  396.652202][T30883] lo speed is unknown, defaulting to 1000
[  396.661221][T30884] lo speed is unknown, defaulting to 1000
[  396.781287][T30883] lo speed is unknown, defaulting to 1000
[  396.901309][T30884] lo speed is unknown, defaulting to 1000
[  397.731174][T30924] netlink: 'syz.0.7492': attribute type 11 has an invalid length.
[  397.733735][T30924] netlink: 'syz.0.7492': attribute type 11 has an invalid length.
[  397.736661][T30924] __nla_validate_parse: 59 callbacks suppressed
[  397.736668][T30924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7492'.
[  397.959560][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7495'.
[  397.963045][T30935] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  397.968304][T30935] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  397.998852][T30937] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  398.162727][T30944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7498'.
[  398.252189][T30902] Bluetooth: hci1: Opcode 0x080f failed: -4
[  398.283660][T30953] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7501'.
[  398.327641][T30958] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.333216][T30958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7504'.
[  398.420425][T30962] netlink: zone id is out of range
[  398.422185][T30962] netlink: zone id is out of range
[  398.423967][T30962] netlink: zone id is out of range
[  398.428398][T30962] netlink: zone id is out of range
[  398.434150][T30962] netlink: zone id is out of range
[  398.437555][T30962] netlink: zone id is out of range
[  398.439190][T30962] netlink: zone id is out of range
[  398.440826][T30962] netlink: zone id is out of range
[  398.463861][T30962] netlink: set zone limit has 4 unknown bytes
[  398.527143][T30981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7513'.
[  398.603529][T30997] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7517'.
[  398.648112][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7521'.
[  398.651036][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7521'.
[  398.653895][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7521'.
[  398.715760][T31020] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  398.932545][T31052] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  399.031575][T31064] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  399.128593][T31080] syzkaller0: mtu less than device minimum
[  399.445617][T28997] Bluetooth: hci1: command 0x0406 tx timeout
[  400.023906][T31147] validate_nla: 12 callbacks suppressed
[  400.023915][T31147] netlink: 'syz.2.7565': attribute type 12 has an invalid length.
[  400.035901][T31147] netlink: 'syz.2.7565': attribute type 11 has an invalid length.
[  400.173395][T31153] 8021q: VLANs not supported on ip6tnl0
[  400.297215][T31160] netlink: 'syz.2.7569': attribute type 4 has an invalid length.
[  400.381779][T31162] netlink: 'syz.2.7570': attribute type 1 has an invalid length.
[  400.450476][T31164] netlink: 'syz.2.7571': attribute type 1 has an invalid length.
[  400.487568][T31164] 8021q: adding VLAN 0 to HW filter on device bond33
[  400.590154][T31167] pim6reg1: entered promiscuous mode
[  400.600482][T31167] pim6reg1: entered allmulticast mode
[  401.119345][T31215] netlink: 'syz.2.7587': attribute type 5 has an invalid length.
[  401.211216][T31224] pim6reg: entered allmulticast mode
[  401.217772][T31223] netlink: 'syz.2.7590': attribute type 1 has an invalid length.
[  401.229135][T31220] pim6reg: left allmulticast mode
[  401.351846][ T5857] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  401.354507][ T5857] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  401.375756][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  401.442823][T31255] dummy0: entered promiscuous mode
[  401.444604][T31255] macvtap1: entered promiscuous mode
[  401.448095][T31255] macvtap1: entered allmulticast mode
[  401.449826][T31255] dummy0: entered allmulticast mode
[  401.451883][T31257] macvlan0: entered allmulticast mode
[  401.465792][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  401.468371][T31255] dummy0: left allmulticast mode
[  401.470146][T31255] dummy0: left promiscuous mode
[  401.487832][T31261] ieee802154 phy0 wpan0: encryption failed: -22
[  401.525104][T31268] netlink: 'syz.2.7606': attribute type 1 has an invalid length.
[  401.525183][T31267] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  401.530898][T28997] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  401.533496][T31264] IPVS: set_ctl: invalid protocol: 136 10.1.1.0:20002
[  401.533530][T31267] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  401.556252][T31268] 8021q: adding VLAN 0 to HW filter on device bond34
[  401.791884][T31300] netlink: 'syz.0.7613': attribute type 4 has an invalid length.
[  401.798508][T31299] ieee802154 phy0 wpan0: encryption failed: -22
[  401.801258][T31299] bridge0: failed insert local address into bridge forwarding table
[  401.847171][T31306] netlink: 'syz.1.7617': attribute type 1 has an invalid length.
[  401.871771][T31306] bond36: (slave vti2): The slave device specified does not support setting the MAC address
[  401.875759][T31306] bond36: (slave vti2): Setting fail_over_mac to active for active-backup mode
[  401.880220][T31306] bond36: (slave vti2): making interface the new active one
[  401.883150][T31306] bond36: (slave vti2): Enslaving as an active interface with an up link
[  402.255484][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  403.685219][T31339] net_ratelimit: 3 callbacks suppressed
[  403.685229][T31339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.692935][T31339] __nla_validate_parse: 37 callbacks suppressed
[  403.692944][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7630'.
[  403.697951][T31339] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  403.700480][T31339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.754948][T31346] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7632'.
[  403.761131][T31346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.803565][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7633'.
[  403.832531][T31352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7634'.
[  403.842433][T31352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7634'.
[  403.853075][T31353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.855961][T31353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.858727][T31353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.861391][T31353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.864085][T31353] geneve4: entered promiscuous mode
[  403.900301][T31369] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7638'.
[  404.013516][T31384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.136372][T31392] can: request_module (can-proto-4) failed.
[  404.610388][T31397] xt_time: invalid argument - start or stop time greater than 23:59:59
[  404.717920][T31400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7650'.
[  404.889459][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7655'.
[  404.933935][T31415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7656'.
[  404.937862][T31415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7656'.
[  404.959579][T31417] lo speed is unknown, defaulting to 1000
[  405.045073][T31417] lo speed is unknown, defaulting to 1000
[  405.365575][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  405.677073][T31427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  405.851252][T31452] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  405.883735][T31457] validate_nla: 3 callbacks suppressed
[  405.883744][T31457] netlink: 'syz.2.7669': attribute type 1 has an invalid length.
[  405.902641][T31457] 8021q: adding VLAN 0 to HW filter on device bond35
[  405.937953][T31457] 8021q: adding VLAN 0 to HW filter on device bond35
[  405.940230][T31457] bond35: (slave vxcan1): The slave device specified does not support setting the MAC address
[  405.959715][T31457] bond35: (slave vxcan1): Error -95 calling set_mac_address
[  406.099801][T31476] xt_HMARK: proto mask must be zero with L3 mode
[  406.389309][T31507] lo speed is unknown, defaulting to 1000
[  406.464587][T31519] xt_policy: too many policy elements
[  406.467432][T31519] veth1_to_bond: entered allmulticast mode
[  406.510621][T31519] veth1_to_bond (unregistering): left allmulticast mode
[  406.514786][T31507] lo speed is unknown, defaulting to 1000
[  406.593437][T21679] smc: removing ib device syz2
[  406.867258][T31534] IPVS: length: 148 != 24
[  407.075148][T31543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.549226][T31567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.602449][T31574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.762682][T31591] netlink: 'syz.0.7717': attribute type 21 has an invalid length.
[  407.968158][T31607] lo speed is unknown, defaulting to 1000
[  407.970678][T31607] lo speed is unknown, defaulting to 1000
[  408.060622][T31613] xt_CT: You must specify a L4 protocol and not use inversions on it
[  408.172653][T31620] bridge0: port 1(erspan0) entered blocking state
[  408.177638][T31620] bridge0: port 1(erspan0) entered disabled state
[  408.224775][T31626] ipt_REJECT: ECHOREPLY no longer supported.
[  408.234847][T31626] IPv6: sit5: Disabled Multicast RS
[  408.239199][T31626] sit5: entered allmulticast mode
[  408.453276][T31638] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig
[  408.547687][T31644] netlink: 'syz.2.7734': attribute type 39 has an invalid length.
[  408.960626][T31658] lo speed is unknown, defaulting to 1000
[  408.963270][T31658] lo speed is unknown, defaulting to 1000
[  409.201354][T31672] netlink: 'syz.0.7743': attribute type 1 has an invalid length.
[  409.203793][T31672] __nla_validate_parse: 22 callbacks suppressed
[  409.203800][T31672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7743'.
[  409.325034][T31681] netlink: 668 bytes leftover after parsing attributes in process `syz.0.7746'.
[  409.355053][T31683] openvswitch: netlink: Duplicate or invalid key (type 0).
[  409.359871][T31683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.371697][T31685] pim6reg1: entered promiscuous mode
[  409.373419][T31685] pim6reg1: entered allmulticast mode
[  409.428632][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7748'.
[  409.458985][T31685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7748'.
[  409.462134][T31685] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  409.464389][T31685] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  409.540616][T31695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7751'.
[  409.575786][T31699] macsec4: entered promiscuous mode
[  409.577494][T31699] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  409.579746][T31699] macsec4: entered allmulticast mode
[  409.581501][T31699] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  409.650982][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7754'.
[  409.653832][T31703] openvswitch: netlink: Unknown nsh attribute 0
[  409.657859][T31703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.721057][T31707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7756'.
[  409.882328][T31718] xt_hashlimit: max too large, truncated to 1048576
[  409.934994][T31723] lo speed is unknown, defaulting to 1000
[  409.937944][T31723] lo speed is unknown, defaulting to 1000
[  410.284657][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7762'.
[  410.288504][T31730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7762'.
[  410.338871][T31732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7763'.
[  411.545902][T31797] No such timeout policy "syz1"
[  411.552115][T31797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  411.691681][T31801] lo speed is unknown, defaulting to 1000
[  411.694324][T31801] lo speed is unknown, defaulting to 1000
[  411.898329][T31812] 8021q: VLANs not supported on nlmon0
[  412.001079][T31818] nbd: nbd1 already in use
[  412.002787][T31818] block nbd1: NBD_DISCONNECT
[  412.004315][T31818] block nbd1: Send disconnect failed -32
[  412.008627][T31818] block nbd1: shutting down sockets
[  412.036102][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.039172][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.041715][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.044673][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.047253][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.050272][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  412.052832][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.055843][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  412.063791][ T7331] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.078092][ T7331] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.080773][ T7331] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.084034][ T7331] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.087015][ T7331] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.090821][ T7331] Buffer I/O error on dev nbd1, logical block 2, async page read
[  412.093901][ T7331] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.099018][ T7331] Buffer I/O error on dev nbd1, logical block 3, async page read
[  412.103152][ T7331] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.107324][ T7331] Buffer I/O error on dev nbd1, logical block 0, async page read
[  412.110224][ T7331] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  412.113121][ T7331] Buffer I/O error on dev nbd1, logical block 1, async page read
[  412.118532][ T7331] ldm_validate_partition_table(): Disk read failed.
[  412.123566][ T7331] Dev nbd1: unable to read RDB block 0
[  412.129367][ T7331]  nbd1: unable to read partition table
[  412.153735][ T5280] udevd[5280]: worker [7331] terminated by signal 9 (Killed)
[  412.156270][ T5280] udevd[5280]: worker [7331] failed while handling '/devices/virtual/block/nbd1'
[  412.195065][T31827] netlink: 'syz.1.7794': attribute type 1 has an invalid length.
[  412.199638][T31827] netlink: 'syz.1.7794': attribute type 1 has an invalid length.
[  412.206042][T31829] tipc: Enabling of bearer <et:g> rejected, media not registered
[  412.239917][T31839] netlink: 'syz.2.7797': attribute type 1 has an invalid length.
[  412.242559][T31839] NCSI netlink: No device for ifindex 0
[  412.417931][T31862] netlink: 'syz.2.7801': attribute type 1 has an invalid length.
[  412.420453][T31862] netlink: 'syz.2.7801': attribute type 2 has an invalid length.
[  412.559732][T31877] vlan4: entered allmulticast mode
[  412.561431][T31877] bridge_slave_0: entered allmulticast mode
[  413.205417][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  413.356934][T31922] netlink: 'syz.2.7821': attribute type 11 has an invalid length.
[  413.432351][T31928] netlink: 'syz.2.7823': attribute type 13 has an invalid length.
[  414.014005][T31928] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.027778][T31928] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.041166][T31928] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.045874][T31928] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  414.076075][T31928] syz.2.7823 (31928) used greatest stack depth: 17768 bytes left
[  414.205646][T31948] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  414.238106][T31951] netlink: 'syz.1.7828': attribute type 13 has an invalid length.
[  414.240558][T31951] netlink: 'syz.1.7828': attribute type 17 has an invalid length.
[  414.265792][T31951] tipc: Resetting bearer <eth:gre0>
[  414.267577][T31951] tipc: Resetting bearer <eth:gre0>
[  414.269411][T31951] gretap0: left promiscuous mode
[  414.297088][T31951] 8021q: adding VLAN 0 to HW filter on device 
[  414.300544][T31951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.306407][ T5871] lo speed is unknown, defaulting to 1000
[  414.308333][ T5871] syz0: Port: 1 Link ACTIVE
[  414.309939][ T5871] lo speed is unknown, defaulting to 1000
[  414.322075][T31951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.395502][T31946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  414.447111][T31969] netlink: 'syz.0.7834': attribute type 1 has an invalid length.
[  414.454698][T31972] __nla_validate_parse: 18 callbacks suppressed
[  414.454708][T31972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7836'.
[  414.460499][T31972] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  414.463036][T31972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.490051][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7834'.
[  414.539836][T31975] bond21: (slave veth21): Releasing active interface
[  414.547377][T31975] bond22: (slave veth23): Releasing backup interface
[  414.588340][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  414.593973][T31977] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  414.640082][T31982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7840'.
[  414.643016][T31982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.740294][T31991] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7844'.
[  414.863886][T32003] x_tables: unsorted underflow at hook 4
[  415.154219][T32033] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  415.193002][T32039] netlink: 'syz.1.7860': attribute type 1 has an invalid length.
[  415.207084][T32041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7859'.
[  415.269211][T32045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7861'.
[  415.281496][T32045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7861'.
[  415.412955][T32047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7862'.
[  415.417650][T32047] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7862'.
[  415.421074][T32047] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7862'.
[  415.424333][T32047] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  415.445653][ T5871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  415.861508][T32089] sctp: [Deprecated]: syz.2.7871 (pid 32089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  415.861508][T32089] Use struct sctp_sack_info instead
[  415.909728][T32094] sctp: [Deprecated]: syz.2.7873 (pid 32094) Use of int in max_burst socket option.
[  415.909728][T32094] Use struct sctp_assoc_value instead
[  415.951059][T32098] syzkaller1: entered promiscuous mode
[  415.952902][T32098] syzkaller1: entered allmulticast mode
[  416.047372][ T5871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  416.195107][T32125] sctp: [Deprecated]: syz.2.7881 (pid 32125) Use of struct sctp_assoc_value in delayed_ack socket option.
[  416.195107][T32125] Use struct sctp_sack_info instead
[  416.607002][ T5871] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  417.350908][T32166] bond0: Device is already in use.
[  417.605205][T32184] validate_nla: 100 callbacks suppressed
[  417.605216][T32184] netlink: 'syz.1.7903': attribute type 1 has an invalid length.
[  417.691038][T32187] netlink: 'syz.2.7904': attribute type 83 has an invalid length.
[  417.779914][T32192] netlink: 'syz.1.7907': attribute type 1 has an invalid length.
[  417.971035][T32217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.048409][T32229] netlink: 'syz.0.7918': attribute type 1 has an invalid length.
[  418.072015][T32229] 8021q: adding VLAN 0 to HW filter on device bond24
[  418.092051][T32229] 8021q: adding VLAN 0 to HW filter on device bond24
[  418.095209][T32229] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  418.106009][T32229] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  418.130400][T32237] macvlan0: entered promiscuous mode
[  418.133327][T32237] macvlan0: entered allmulticast mode
[  418.139076][T32237] bond24: entered promiscuous mode
[  418.142405][T32237] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  418.149036][T32237] bond24: left promiscuous mode
[  418.239312][T32247] netlink: 'syz.0.7924': attribute type 1 has an invalid length.
[  418.338711][T32259] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  418.346445][T32259] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  418.410361][T32267] ipt_ECN: cannot use operation on non-tcp rule
[  418.838007][T32307] netlink: 'syz.1.7943': attribute type 1 has an invalid length.
[  418.862668][T32307] 8021q: adding VLAN 0 to HW filter on device bond38
[  418.876729][T32307] ipvlan5: entered allmulticast mode
[  418.879094][T32307] bond38: entered allmulticast mode
[  419.039363][T32321] netlink: 'syz.1.7947': attribute type 14 has an invalid length.
[  419.041862][T32321] netlink: 'syz.1.7947': attribute type 13 has an invalid length.
[  419.058908][T32321] lo speed is unknown, defaulting to 1000
[  419.061596][T32321] lo speed is unknown, defaulting to 1000
[  419.391066][T32333] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.403231][T32334] netlink: 'syz.0.7952': attribute type 15 has an invalid length.
[  419.460964][T32333] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.489512][T32333] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.539734][T32333] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.577586][T32333] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.578906][T32348] __nla_validate_parse: 35 callbacks suppressed
[  419.578915][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7955'.
[  419.588774][T32333] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.598415][T32348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7955'.
[  419.601165][T32333] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.608876][T32333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.638683][T32351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7957'.
[  419.691246][T32361] openvswitch: netlink: Key type 30 is not supported
[  419.693656][T32361] openvswitch: netlink: Key type 30 is not supported
[  419.737173][T32368] ip6t_srh: unknown srh invflags 4000
[  419.739870][T32368] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  419.742186][T32368] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  419.780249][T32370] sit0: Master is either lo or non-ether device
[  419.830301][T32374] netlink: 'syz.1.7963': attribute type 11 has an invalid length.
[  419.878533][T32382] rdma_rxe: rxe_newlink: failed to add lo
[  419.913910][T32384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  419.935646][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  419.998117][T32402] netlink: 'syz.2.7971': attribute type 4 has an invalid length.
[  420.176814][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7979'.
[  420.207107][T32431] ip6t_srh: unknown srh invflags 4449
[  420.263013][T32435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7981'.
[  420.372165][T32443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7984'.
[  420.376186][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7984'.
[  420.421638][T32445] lo speed is unknown, defaulting to 1000
[  420.424376][T32445] lo speed is unknown, defaulting to 1000
[  420.649433][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  420.897594][T32477] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7993'.
[  420.901554][T32477] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7993'.
[  421.038153][T32492] x_tables: duplicate underflow at hook 1
[  421.059487][T32497] tipc: Resetting bearer <eth:gre0>
[  421.062404][T32497] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  421.154951][T32511] macvlan1: entered allmulticast mode
[  421.206960][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8006'.
[  421.209897][T32517] 8021q: VLANs not supported on team0
[  421.277241][T32509] macvlan1: left allmulticast mode
[  421.499374][T32564] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  421.859610][T32607] xt_l2tp: unknown flags: 10
[  422.460526][T32651] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  422.489407][T32655] xt_hashlimit: max too large, truncated to 1048576
[  422.491679][T32655] Cannot find add_set index 3 as target
[  422.516415][T32658] x_tables: duplicate underflow at hook 1
[  422.518343][T32658] x_tables: duplicate underflow at hook 1
[  422.521533][T32658] x_tables: duplicate underflow at hook 1
[  422.523469][T32658] x_tables: duplicate underflow at hook 1
[  422.526698][T32658] x_tables: duplicate underflow at hook 1
[  422.528612][T32658] x_tables: duplicate underflow at hook 1
[  422.530466][T32658] x_tables: duplicate underflow at hook 1
[  422.532308][T32658] x_tables: duplicate underflow at hook 1
[  422.535001][T32658] x_tables: duplicate underflow at hook 1
[  422.723151][T32685] xt_hashlimit: size too large, truncated to 1048576
[  422.911581][T32700] xt_socket: unknown flags 0x8
[  422.950693][T32705] syzkaller1: entered promiscuous mode
[  422.952583][T32705] syzkaller1: entered allmulticast mode
[  423.123421][T32713] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  424.055303][T32742] lo speed is unknown, defaulting to 1000
[  424.058098][T32742] lo speed is unknown, defaulting to 1000
[  424.164858][T32756] bond25: entered promiscuous mode
[  424.168849][T32756] 8021q: adding VLAN 0 to HW filter on device bond25
[  424.266048][T32756] bond25 (unregistering): Released all slaves
[  424.593040][  T324] __nla_validate_parse: 25 callbacks suppressed
[  424.593050][  T324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8086'.
[  424.725825][   T60] block nbd0: Possible stuck request ffff888020db8000: control (read@0,1024B). Runtime 330 seconds
[  424.729249][   T60] block nbd0: Possible stuck request ffff888020db8200: control (read@1024,1024B). Runtime 330 seconds
[  424.732701][   T60] block nbd0: Possible stuck request ffff888020db8400: control (read@2048,1024B). Runtime 330 seconds
[  424.736482][   T60] block nbd0: Possible stuck request ffff888020db8600: control (read@3072,1024B). Runtime 330 seconds
[  424.812911][  T339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8092'.
[  424.829041][  T339] openvswitch: netlink: Flow key attr not present in new flow.
[  424.869253][  T348] validate_nla: 4 callbacks suppressed
[  424.869270][  T348] netlink: 'syz.2.8095': attribute type 3 has an invalid length.
[  424.873824][  T348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8095'.
[  424.878539][  T348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  425.014341][  T379] netlink: 'syz.0.8101': attribute type 1 has an invalid length.
[  425.019529][  T379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8101'.
[  425.026632][  T383] netlink: 'syz.0.8101': attribute type 1 has an invalid length.
[  425.031646][  T383] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8101'.
[  425.070392][  T389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8105'.
[  425.071091][  T385] lo speed is unknown, defaulting to 1000
[  425.073329][  T389] nbd: illegal input index -381222912
[  425.078952][  T385] lo speed is unknown, defaulting to 1000
[  425.220758][  T400] netlink: 'syz.0.8109': attribute type 5 has an invalid length.
[  425.258033][  T405] IPVS: length: 159 != 24
[  425.326883][  T409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8113'.
[  425.421425][  T417] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8116'.
[  425.557959][  T421] pimreg: entered allmulticast mode
[  425.603326][  T428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8119'.
[  425.607861][  T429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8119'.
[  425.611521][  T428] netlink: 'syz.2.8119': attribute type 3 has an invalid length.
[  425.917362][  T470] netlink: 'syz.0.8129': attribute type 4 has an invalid length.
[  426.042313][  T491] pim6reg1: entered promiscuous mode
[  426.044217][  T491] pim6reg1: entered allmulticast mode
[  426.067119][  T493] netlink: 'syz.2.8135': attribute type 1 has an invalid length.
[  426.221941][  T499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  426.435882][  T517] lo speed is unknown, defaulting to 1000
[  426.438544][  T517] lo speed is unknown, defaulting to 1000
[  427.279293][  T549] netlink: 'syz.1.8144': attribute type 1 has an invalid length.
[  427.306991][  T549] 8021q: adding VLAN 0 to HW filter on device bond39
[  427.385964][  T556] 8021q: VLANs not supported on ip6_vti0
[  427.488131][  T568] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  427.848837][  T628] netlink: 'syz.1.8160': attribute type 2 has an invalid length.
[  427.879094][  T630] netlink: 'syz.0.8162': attribute type 1 has an invalid length.
[  427.935192][  T641] bridge_slave_0: default FDB implementation only supports local addresses
[  427.989062][  T648] openvswitch: netlink: Missing key (keys=40, expected=80)
[  428.081241][  T661] tipc: Resetting bearer <eth:gre0>
[  428.109533][  T661] veth1_to_team: left allmulticast mode
[  428.113971][  T661] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  428.122473][ T5872] lo speed is unknown, defaulting to 1000
[  428.124378][ T5872] syz0: Port: 1 Link DOWN
[  428.127390][ T5872] lo speed is unknown, defaulting to 1000
[  429.205426][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  429.716006][  T708] bond25: entered promiscuous mode
[  429.718095][  T708] 8021q: adding VLAN 0 to HW filter on device bond25
[  429.748521][  T708] 8021q: adding VLAN 0 to HW filter on device bond25
[  429.751083][  T708] bond25: (slave vcan2): The slave device specified does not support setting the MAC address
[  429.775589][  T708] bond25: (slave vcan2): Setting fail_over_mac to active for active-backup mode
[  429.785219][  T708] bond25: (slave vcan2): making interface the new active one
[  429.788149][  T708] vcan2: entered promiscuous mode
[  429.790872][  T708] bond25: (slave vcan2): Enslaving as an active interface with an up link
[  429.813426][  T711] __nla_validate_parse: 20 callbacks suppressed
[  429.813436][  T711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8187'.
[  430.122252][  T731] openvswitch: netlink: Actions may not be safe on all matching packets
[  430.148622][  T738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8194'.
[  430.151443][  T738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8194'.
[  430.154305][  T738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8194'.
[  430.158783][  T738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8194'.
[  430.161851][  T738] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8194'.
[  430.233851][  T753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8198'.
[  430.239769][  T753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8198'.
[  430.294853][  T757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8199'.
[  430.338195][  T759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8200'.
[  430.498929][  T765] validate_nla: 4 callbacks suppressed
[  430.498940][  T765] netlink: 'syz.2.8203': attribute type 10 has an invalid length.
[  430.572011][  T784] netlink: 'syz.1.8208': attribute type 1 has an invalid length.
[  430.606022][  T784] 8021q: adding VLAN 0 to HW filter on device bond40
[  430.884295][  T808] netlink: 'syz.0.8214': attribute type 23 has an invalid length.
[  430.944359][  T816] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  431.078837][  T827] netlink: 'syz.1.8221': attribute type 2 has an invalid length.
[  431.085136][  T827] : entered promiscuous mode
[  431.193101][  T841] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  431.224871][  T843] netlink: 'syz.1.8226': attribute type 1 has an invalid length.
[  431.376552][  T854] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  431.566141][  T863] netlink: 'syz.1.8231': attribute type 1 has an invalid length.
[  432.353677][  T889] openvswitch: netlink: IP tunnel dst address not specified
[  432.485850][ T5221] Bluetooth: hci2: command 0x0406 tx timeout
[  432.493636][  T909] xt_nat: multiple ranges no longer supported
[  432.641607][  T926] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  432.752904][  T935] netlink: 'syz.2.8246': attribute type 16 has an invalid length.
[  432.755982][  T935] netlink: 'syz.2.8246': attribute type 17 has an invalid length.
[  432.780542][  T935] 8021q: adding VLAN 0 to HW filter on device team0
[  432.782907][  T935] tipc: Resetting bearer <eth:team0>
[  432.799293][  T935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  432.883385][  T939] netlink: 'syz.1.8247': attribute type 1 has an invalid length.
[  432.903210][  T939] 8021q: adding VLAN 0 to HW filter on device bond41
[  433.051893][  T951] bond0: Device is already in use.
[  433.759779][ T1001] netlink: 'syz.2.8266': attribute type 3 has an invalid length.
[  434.629901][ T1049] netlink: 'syz.0.8276': attribute type 11 has an invalid length.
[  434.720397][ T1051] veth25: entered promiscuous mode
[  435.141362][ T1069] __nla_validate_parse: 23 callbacks suppressed
[  435.141376][ T1069] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8281'.
[  435.149241][ T1067] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8281'.
[  435.182092][ T1067] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8281'.
[  435.423545][ T1096] xt_check_table_hooks: 56 callbacks suppressed
[  435.423555][ T1096] x_tables: duplicate underflow at hook 2
[  435.496777][ T1101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8290'.
[  435.525200][ T1104] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8291'.
[  435.531476][ T1104] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8291'.
[  435.563325][ T1106] validate_nla: 2 callbacks suppressed
[  435.563335][ T1106] netlink: 'syz.0.8292': attribute type 1 has an invalid length.
[  435.588577][ T1106] bond26: (slave bridge26): making interface the new active one
[  435.591541][ T1106] bond26: (slave bridge26): Enslaving as an active interface with an up link
[  435.679048][ T1114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8295'.
[  435.699576][ T1116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8296'.
[  435.775856][ T1120] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  435.922280][ T1129] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  435.925425][ T1129] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  435.961318][ T1143] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode
[  435.967719][ T1143] tipc: Resetting bearer <eth:syzkaller0>
[  436.004877][ T1147] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8307'.
[  436.032747][ T1149] netlink: 'syz.0.8308': attribute type 15 has an invalid length.
[  436.038800][ T1151] netlink: 'syz.0.8308': attribute type 15 has an invalid length.
[  436.044318][ T1151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8308'.
[  436.058107][ T1154] erspan0: left allmulticast mode
[  436.093922][ T1154] ip6gre1: left allmulticast mode
[  436.097954][ T1154] ip6tnl2: left allmulticast mode
[  436.099657][ T1154] gretap2: left allmulticast mode
[  436.101495][ T1154] bridge10: left allmulticast mode
[  436.103570][ T1154] gretap3: left allmulticast mode
[  436.107064][ T1154] macsec1: left allmulticast mode
[  436.108777][ T1154] bridge0: left promiscuous mode
[  436.110880][ T1154] geneve2: left promiscuous mode
[  436.112519][ T1154] geneve2: left allmulticast mode
[  436.114927][ T1154] netdevsim0: left allmulticast mode
[  436.117200][ T1154] veth1: left promiscuous mode
[  436.118984][ T1154] gtp2: left promiscuous mode
[  436.120529][ T1154] gtp2: left allmulticast mode
[  436.122482][ T1154] veth13: left promiscuous mode
[  436.124285][ T1154] veth15: left promiscuous mode
[  436.128154][ T1154] bridge16: left allmulticast mode
[  436.130179][ T1154] macsec3: left allmulticast mode
[  436.136610][ T1154] bond19: left promiscuous mode
[  436.146795][ T1154] bridge19: left allmulticast mode
[  436.157741][ T1154] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.160362][ T1154] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.162988][ T1154] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.167546][ T1154] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  436.170486][ T1154] geneve3: left promiscuous mode
[  436.172122][ T1154] geneve3: left allmulticast mode
[  436.178812][ T1154] sit6: left promiscuous mode
[  436.182243][ T1154] bridge23: left promiscuous mode
[  436.191927][ T1154] veth21: left promiscuous mode
[  436.196963][ T1154] veth23: left promiscuous mode
[  436.209381][ T1154] macvtap1: left promiscuous mode
[  436.212339][ T1154] macvtap1: left allmulticast mode
[  436.214500][ T1154] mac80211_hwsim hwsim37 wlan0: left allmulticast mode
[  436.216927][ T1154] mac80211_hwsim hwsim37 wlan0: left promiscuous mode
[  436.219344][ T1154] macsec4: left promiscuous mode
[  436.221088][ T1154] macsec4: left allmulticast mode
[  436.224438][ T1154] bond25: left promiscuous mode
[  436.226217][ T1154] vcan2: left promiscuous mode
[  436.232372][ T5871] lo speed is unknown, defaulting to 1000
[  436.235633][ T5871] syz1: Port: 1 Link DOWN
[  436.253819][ T1161] bridge_slave_0: invalid flags given to default FDB implementation
[  436.738111][ T1218] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  437.173037][ T1228] xt_bpf: check failed: parse error
[  437.634362][ T1235] netlink: 'syz.1.8332': attribute type 9 has an invalid length.
[  437.893044][ T1265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  437.895538][ T1265] IPv6: NLM_F_CREATE should be set when creating new route
[  437.897887][ T1265] IPv6: NLM_F_CREATE should be set when creating new route
[  437.904942][ T1265] netlink: 'syz.2.8340': attribute type 2 has an invalid length.
[  438.284201][ T1287] netlink: 'syz.2.8346': attribute type 1 has an invalid length.
[  438.299682][ T1287] 8021q: adding VLAN 0 to HW filter on device bond37
[  438.507926][ T1309] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  438.584054][ T1315] nbd: must specify a size in bytes for the device
[  438.589623][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  438.598037][ T1317] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  438.614762][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  438.670535][ T1326] xt_CT: No such helper "snmp"
[  438.711537][ T1331] tipc: Enabling of bearer <udp:sy{> rejected, max 3 bearers permitted
[  438.767913][ T1336] netlink: 'syz.1.8359': attribute type 1 has an invalid length.
[  438.770545][ T1336] netlink: 'syz.1.8359': attribute type 1 has an invalid length.
[  438.773164][ T1336] netlink: 'syz.1.8359': attribute type 1 has an invalid length.
[  438.777890][ T1336] netlink: 'syz.1.8359': attribute type 1 has an invalid length.
[  438.778134][ T1338] delete_channel: no stack
[  439.445324][    C0] ==================================================================
[  439.447956][    C0] BUG: KFENCE: use-after-free write in rose_timer_expiry+0x22d/0x4b0
[  439.447956][    C0] 
[  439.448496][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  439.451316][    C0] Use-after-free write at 0xffff888136588e2a (in kfence-#195):
[  439.451328][    C0]  rose_timer_expiry+0x22d/0x4b0
[  439.451337][    C0]  call_timer_fn+0x17e/0x5f0
[  439.451344][    C0]  __run_timer_base+0x61a/0x860
[  439.451353][    C0]  run_timer_softirq+0xb7/0x180
[  439.451361][    C0]  handle_softirqs+0x286/0x870
[  439.451369][    C0]  __irq_exit_rcu+0xca/0x1f0
[  439.451375][    C0]  irq_exit_rcu+0x9/0x30
[  439.451381][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.451388][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.451394][    C0]  pv_native_safe_halt+0x13/0x20
[  439.451400][    C0]  default_idle+0x13/0x20
[  439.451407][    C0]  default_idle_call+0x74/0xb0
[  439.451414][    C0]  do_idle+0x1e8/0x510
[  439.451422][    C0]  cpu_startup_entry+0x44/0x60
[  439.451430][    C0]  rest_init+0x2de/0x300
[  439.480037][    C0]  start_kernel+0x47d/0x500
[  439.481544][    C0]  x86_64_start_reservations+0x24/0x30
[  439.483334][    C0]  x86_64_start_kernel+0x143/0x1c0
[  439.485023][    C0]  common_startup_64+0x13e/0x147
[  439.486641][    C0] 
[  439.487445][    C0] kfence-#195: 0xffff888136588000-0xffff8881365887ff, size=2048, cache=kmalloc-2k
[  439.487445][    C0] 
[  439.491102][    C0] allocated by task 861 on cpu 0 at 431.805872s (7.685229s ago):
[  439.493600][    C0]  kmalloc_reserve+0x136/0x290
[  439.495183][    C0]  __alloc_skb+0x142/0x2d0
[  439.496663][    C0]  alloc_skb_with_frags+0xca/0x890
[  439.498363][    C0]  sock_alloc_send_pskb+0x857/0x990
[  439.500062][    C0]  llc_ui_sendmsg+0x477/0xdd0
[  439.501553][    C0]  __sock_sendmsg+0x21c/0x270
[  439.503096][    C0]  sock_sendmsg+0x158/0x230
[  439.504545][    C0]  splice_to_socket+0x8ff/0xf10
[  439.506211][    C0]  direct_splice_actor+0x101/0x160
[  439.507902][    C0]  splice_direct_to_actor+0x5a8/0xcc0
[  439.509665][    C0]  do_splice_direct+0x181/0x270
[  439.511284][    C0]  do_sendfile+0x4da/0x7e0
[  439.512728][    C0]  __se_sys_sendfile64+0x13e/0x190
[  439.514413][    C0]  do_syscall_64+0xfa/0x3b0
[  439.515918][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.517871][    C0] 
[  439.518688][    C0] freed by task 861 on cpu 0 at 431.805902s (7.712786s ago):
[  439.521097][    C0]  skb_release_data+0x62d/0x7c0
[  439.522695][    C0]  kfree_skb_list_reason+0x25d/0x460
[  439.524439][    C0]  __dev_queue_xmit+0x2148/0x3a70
[  439.526108][    C0]  llc_ui_sendmsg+0x938/0xdd0
[  439.527654][    C0]  __sock_sendmsg+0x21c/0x270
[  439.529189][    C0]  sock_sendmsg+0x158/0x230
[  439.530681][    C0]  splice_to_socket+0x8ff/0xf10
[  439.532292][    C0]  direct_splice_actor+0x101/0x160
[  439.533981][    C0]  splice_direct_to_actor+0x5a8/0xcc0
[  439.535741][    C0]  do_splice_direct+0x181/0x270
[  439.537362][    C0]  do_sendfile+0x4da/0x7e0
[  439.538814][    C0]  __se_sys_sendfile64+0x13e/0x190
[  439.540410][    C0]  do_syscall_64+0xfa/0x3b0
[  439.541858][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.543769][    C0] 
[  439.544579][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  439.548435][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.551609][    C0] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  439.553474][    C0] Code: 80 3c 28 00 74 08 4c 89 e7 e8 3f 79 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  439.559693][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  439.561802][    C0] RAX: 0000000000000000 RBX: ffff88803b44f6f8 RCX: ffffffff8de95280
[  439.564930][    C0] RDX: 0000000000000100 RSI: ffffffff8f678db0 RDI: 0000000000000002
[  439.567535][    C0] RBP: 1ffff11007689ebd R08: ffffffff8de95280 R09: 0000000000000004
[  439.570119][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888136588e2a
[  439.572699][    C0] R13: dffffc0000000000 R14: ffff88803b44f1c0 R15: ffff88803b44f000
[  439.575283][    C0] FS:  0000000000000000(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  439.578174][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.580313][    C0] CR2: ffff888136588e2a CR3: 000000010b2e4000 CR4: 00000000000006f0
[  439.582926][    C0] Call Trace:
[  439.584052][    C0]  <IRQ>
[  439.585015][    C0]  call_timer_fn+0x17e/0x5f0
[  439.586538][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.588329][    C0]  ? call_timer_fn+0xbe/0x5f0
[  439.589877][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  439.591554][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.593267][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.594975][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.596765][    C0]  __run_timer_base+0x61a/0x860
[  439.598400][    C0]  ? ktime_get+0x3e/0x1f0
[  439.599830][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  439.601612][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  439.603611][    C0]  run_timer_softirq+0xb7/0x180
[  439.605234][    C0]  handle_softirqs+0x286/0x870
[  439.606809][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.608396][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  439.610136][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  439.611790][    C0]  __irq_exit_rcu+0xca/0x1f0
[  439.613335][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  439.615134][    C0]  irq_exit_rcu+0x9/0x30
[  439.616533][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.618390][    C0]  </IRQ>
[  439.619375][    C0]  <TASK>
[  439.620362][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.622475][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  439.624362][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  439.630585][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  439.632435][    C0] RAX: 1ce8153400d6c100 RBX: ffffffff81976c78 RCX: 1ce8153400d6c100
[  439.634884][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  439.637452][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  439.640038][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  439.642607][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  439.645183][    C0]  ? do_idle+0x1e8/0x510
[  439.646591][    C0]  default_idle+0x13/0x20
[  439.648020][    C0]  default_idle_call+0x74/0xb0
[  439.649597][    C0]  do_idle+0x1e8/0x510
[  439.650958][    C0]  ? __pfx_do_idle+0x10/0x10
[  439.652493][    C0]  cpu_startup_entry+0x44/0x60
[  439.654060][    C0]  rest_init+0x2de/0x300
[  439.655405][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  439.657210][    C0]  start_kernel+0x47d/0x500
[  439.658728][    C0]  x86_64_start_reservations+0x24/0x30
[  439.660520][    C0]  x86_64_start_kernel+0x143/0x1c0
[  439.662198][    C0]  common_startup_64+0x13e/0x147
[  439.663809][    C0]  </TASK>
[  439.664858][    C0] ==================================================================
[  439.667462][    C0] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  439.670257][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  439.674135][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.677397][    C0] Call Trace:
[  439.678520][    C0]  <IRQ>
[  439.679486][    C0]  dump_stack_lvl+0x99/0x250
[  439.681019][    C0]  ? __asan_memcpy+0x40/0x70
[  439.682540][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.684171][    C0]  ? __pfx__printk+0x10/0x10
[  439.685659][    C0]  panic+0x2db/0x790
[  439.686927][    C0]  ? __pfx_panic+0x10/0x10
[  439.688338][    C0]  ? _printk+0xcf/0x120
[  439.689646][    C0]  ? __pfx__printk+0x10/0x10
[  439.691130][    C0]  check_panic_on_warn+0x89/0xb0
[  439.692686][    C0]  kfence_report_error+0x748/0xa40
[  439.694314][    C0]  ? __pfx_kfence_report_error+0x10/0x10
[  439.696116][    C0]  ? rose_timer_expiry+0x22d/0x4b0
[  439.697797][    C0]  ? call_timer_fn+0x17e/0x5f0
[  439.699396][    C0]  ? __run_timer_base+0x61a/0x860
[  439.701056][    C0]  ? run_timer_softirq+0xb7/0x180
[  439.702730][    C0]  ? handle_softirqs+0x286/0x870
[  439.704367][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.705942][    C0]  ? irq_exit_rcu+0x9/0x30
[  439.707416][    C0]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.709328][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.711336][    C0]  ? pv_native_safe_halt+0x13/0x20
[  439.713001][    C0]  ? default_idle+0x13/0x20
[  439.714500][    C0]  ? default_idle_call+0x74/0xb0
[  439.716132][    C0]  ? do_idle+0x1e8/0x510
[  439.717491][    C0]  ? cpu_startup_entry+0x44/0x60
[  439.719052][    C0]  ? rest_init+0x2de/0x300
[  439.720533][    C0]  ? start_kernel+0x47d/0x500
[  439.722073][    C0]  ? x86_64_start_reservations+0x24/0x30
[  439.723930][    C0]  ? x86_64_start_kernel+0x143/0x1c0
[  439.725661][    C0]  ? common_startup_64+0x13e/0x147
[  439.727376][    C0]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  439.729138][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  439.731070][    C0]  ? search_bpf_extables+0x26/0x3c0
[  439.732779][    C0]  kfence_handle_page_fault+0x358/0x4d0
[  439.734600][    C0]  page_fault_oops+0x19f/0xa10
[  439.736143][    C0]  ? __pfx_fixup_exception+0x10/0x10
[  439.737924][    C0]  ? __pfx_page_fault_oops+0x10/0x10
[  439.739983][    C0]  ? is_prefetch+0x403/0x640
[  439.741877][    C0]  ? debug_object_activate+0x2e2/0x420
[  439.744042][    C0]  ? __pfx_is_prefetch+0x10/0x10
[  439.745685][    C0]  __bad_area_nosemaphore+0x11a/0x780
[  439.747483][    C0]  ? sched_clock+0x3f/0x60
[  439.748979][    C0]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  439.750930][    C0]  ? spurious_kernel_fault+0x1c7/0x6b0
[  439.752723][    C0]  ? do_kern_addr_fault+0x30/0x80
[  439.754422][    C0]  exc_page_fault+0xc3/0xf0
[  439.755937][    C0]  asm_exc_page_fault+0x26/0x30
[  439.757559][    C0] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  439.759449][    C0] Code: 80 3c 28 00 74 08 4c 89 e7 e8 3f 79 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  439.766753][    C0] RSP: 0018:ffffc90000007b68 EFLAGS: 00010246
[  439.768932][    C0] RAX: 0000000000000000 RBX: ffff88803b44f6f8 RCX: ffffffff8de95280
[  439.771550][    C0] RDX: 0000000000000100 RSI: ffffffff8f678db0 RDI: 0000000000000002
[  439.774143][    C0] RBP: 1ffff11007689ebd R08: ffffffff8de95280 R09: 0000000000000004
[  439.776734][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888136588e2a
[  439.779459][    C0] R13: dffffc0000000000 R14: ffff88803b44f1c0 R15: ffff88803b44f000
[  439.782068][    C0]  ? rose_timer_expiry+0x1ea/0x4b0
[  439.783666][    C0]  call_timer_fn+0x17e/0x5f0
[  439.785123][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.786885][    C0]  ? call_timer_fn+0xbe/0x5f0
[  439.788376][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  439.790030][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.791693][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.793333][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  439.795064][    C0]  __run_timer_base+0x61a/0x860
[  439.796643][    C0]  ? ktime_get+0x3e/0x1f0
[  439.798081][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  439.799859][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  439.801916][    C0]  run_timer_softirq+0xb7/0x180
[  439.803515][    C0]  handle_softirqs+0x286/0x870
[  439.805122][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  439.806672][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  439.808373][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  439.810040][    C0]  __irq_exit_rcu+0xca/0x1f0
[  439.811568][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  439.813289][    C0]  irq_exit_rcu+0x9/0x30
[  439.814693][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  439.816549][    C0]  </IRQ>
[  439.817538][    C0]  <TASK>
[  439.818547][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  439.820520][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  439.822396][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  439.828635][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  439.830634][    C0] RAX: 1ce8153400d6c100 RBX: ffffffff81976c78 RCX: 1ce8153400d6c100
[  439.833102][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  439.835666][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  439.838265][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  439.840850][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  439.843435][    C0]  ? do_idle+0x1e8/0x510
[  439.844864][    C0]  default_idle+0x13/0x20
[  439.846298][    C0]  default_idle_call+0x74/0xb0
[  439.847814][    C0]  do_idle+0x1e8/0x510
[  439.849145][    C0]  ? __pfx_do_idle+0x10/0x10
[  439.850668][    C0]  cpu_startup_entry+0x44/0x60
[  439.852268][    C0]  rest_init+0x2de/0x300
[  439.853669][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  439.855495][    C0]  start_kernel+0x47d/0x500
[  439.857017][    C0]  x86_64_start_reservations+0x24/0x30
[  439.858827][    C0]  x86_64_start_kernel+0x143/0x1c0
[  439.860535][    C0]  common_startup_64+0x13e/0x147
[  439.862184][    C0]  </TASK>
[  439.863807][    C0] Kernel Offset: disabled
[  439.865662][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:54:24  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006df0
R8 =ffff888020568237 R9 =1ffff110040ad046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee881 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff888136588e2a CR3=000000010b2e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd9c5211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f58 RCX=b8f5c160e4ad0b00 RDX=0000000000000000
RSI=ffffffff8be28c20 RDI=ffffffff8be28be0 RBP=ffffffff8172aae5 RSP=ffffc90007e37158
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90007e37338 R11=ffffffff81ad03a0
R12=0000000000000002 R13=ffffffff8e13f160 R14=ffffffff8dbbbc78 R15=dffffc0000000000
RIP=ffffffff81a7300a RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe550ca15f0 CR3=000000003d57a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0073657479625f6e 695f65676173752e
XMM02=00007fd9c5386478 00007fd9c5386450 XMM03=00007fd9c5386488 00007fd9c5386480
XMM04=00007fd9c5eed100 00007fd9c5386440 XMM05=00007fd9c5386458 00007fd9c53864a0
XMM06=00007fd9c5386498 00007fd9c5386490 XMM07=00007fd9c5386488 00007fd9c5386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd9c5211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
