last executing test programs:

1.111732557s ago: executing program 0 (id=4105):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x4, 0x0, 0x25dfdbff, {0xa, 0x0, 0x3}}, 0x18}}, 0x0)

1.10924736s ago: executing program 0 (id=4107):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x62040200)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000004000400"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e70"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

811.024803ms ago: executing program 2 (id=4111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond_slave_0\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1, 0x2a00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xfd}}]}, 0x24}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
connect$x25(0xffffffffffffffff, &(0x7f0000000180), 0x12)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000680001000200000000000000000c99092b1b7395b0230002000100000004000000f81db3bad6bf9a1ac03d9082ef038b165394df984b0c2d48a2ea644d9f6f34cc38ad7aabf22a0cb0068c4d3c13a58837cb7c2d485ba6938571fed67cabcc580364f7f6c8877256398e4991e1d6d55b00e37230869238e474e5e0cf733f731c44266f"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

721.821749ms ago: executing program 2 (id=4112):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='signal_generate\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x601, 0x70bd25, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xa, 0x1, 0x0, r4}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1, @mcast2, 0x5907}], 0x1c) (async)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x640c1}, 0x8000) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async, rerun: 32)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async, rerun: 32)
unshare(0x6a040000) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
socket(0x8, 0x0, 0x8000) (async, rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x18, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x19, 0x7c}, [@nested={0x4, 0x143}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000c000}, 0x2400e000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x5, 0x84)

631.65029ms ago: executing program 2 (id=4113):
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e24, 0x7, @local, 0x3}, {0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, {[0xd, 0x2, 0x0, 0xa, 0x80000, 0x5, 0x8, 0x7]}}, 0x5c)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x1c}}, 0x20008000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '$%]--\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000340)={&(0x7f0000003b40)=@ipv4_getnexthop={0x20, 0x6a, 0xf5c1404b35d587dd, 0x0, 0x0, {0x2, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)

556.418527ms ago: executing program 2 (id=4115):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x200, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xfff3}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20004055) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) (async)
sendmmsg$inet(r1, &(0x7f0000001180)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1=0x3000000}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@remote, <r5=>0x0}, &(0x7f0000000200)=0x14)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) (async, rerun: 64)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000380)={@local, @empty, <r7=>0x0}, &(0x7f00000003c0)=0xc) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000400)={'ip_vti0\x00', <r8=>0x0, 0x0, 0x7a0, 0x2, 0x4, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x64, 0x0, 0x38, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@end]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', <r9=>0x0, 0x40, 0x7, 0x1ff, 0x7, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty, {[@timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x8bc2}, {@private=0xa010101, 0x5}, {@local, 0x431}, {@multicast2, 0x7}]}, @rr={0x7, 0x17, 0xfd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @private=0xa010101, @empty]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x96, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@remote, 0x101}, {@loopback, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa0}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x27e}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3}, {@broadcast, 0x246}]}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x8, [{@multicast2, 0x5}, {@broadcast, 0x5}, {@broadcast, 0x1}]}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', <r10=>0x0, 0x10, 0x8000, 0x2, 0x9, {{0x26, 0x4, 0x0, 0x5, 0x98, 0x64, 0x0, 0x8, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x21, 0x1, [{0x6, 0xb, "5b4297eef24c51a81b"}, {0x6, 0x10, "14450bf288343ad5723e15201a48"}]}, @lsrr={0x83, 0x1f, 0x96, [@empty, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2, @multicast1, @rand_addr=0x64010102, @remote, @remote]}, @rr={0x7, 0xb, 0xe2, [@loopback, @broadcast]}, @end, @rr={0x7, 0x13, 0xdd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x1f, 0xb7, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010101]}, @generic={0x94, 0x4, "7fa4"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', <r11=>0x0, 0x7, 0x8000, 0x8, 0x2, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x64, 0x0, 0xfb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x13, 0xeb, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @rr={0x7, 0x17, 0x67, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @rand_addr=0x64010101, @remote]}, @end, @noop]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4642aaa15234ed60}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

481.377911ms ago: executing program 2 (id=4117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186e000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESDEC, @ANYBLOB="60dc5e013f086da544875bece3ffe705dbe06c8f1b44b2a1e4b794f17f35ddfad868c3a24f81849e97b2bcbdeb5f02a23b61405deec2291af7b33c226809459fe2605b1463f55e57b9db73ea7d6a24c57c64c72e34070a8ebf72e119870d1171ffb3fb", @ANYRESHEX=r2, @ANYRES64=r2], 0x164}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="20001000", @ANYRES16=r1, @ANYBLOB="33030000000004000000150000000c0001800800030007000000"], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x35, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_getrule={0x0, 0x22, 0x800, 0x70bd25, 0x25dfdbff, {0x2, 0x10, 0x14, 0x8, 0x5, 0x0, 0x0, 0x7, 0x4}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

402.104775ms ago: executing program 2 (id=4118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010305000000000000000000000605000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
unshare(0x28000600)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/155, 0x9b}], 0x3}, 0xfffffffc}], 0x1, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r6 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x6)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f00000017c0), 0x0}, 0x20)
bind$ax25(r7, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
connect$ax25(r7, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1900010003001000fcdbdfa2aa000000010000000c000200000c0008800500070000000000728c289a9a29b15bee1361a7e7f116e7db8313b499d7016e60e3b440757758ca61603ec26fe4e518b833cd8947fb97115dfc3838af5367fd43edb47101f6cd6facb6c15c966e066e67353bdf43c1f16b79f978d8aaf586f2933a861deb1c41223268aab19f66b932c91afad3c5a2aa7166e38d1a98a1528c2cda88194943f8c22e34d56c4af146aad39b87bd9d6052eb949af53aa75cf823ac62802aebc4"], 0x39}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)

342.305628ms ago: executing program 0 (id=4119):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f00000001a00130400000000fbdbdf257f0000010000000000000000000000007f00000100000000000000000000000000004be64e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414110000000000000000000000000000000f13000000fe8000000000000000000000000000140000000000000000010000000000000000000000000000000000000000000000fffffffffffffffffcffffffffffff07ff000000000000000000000000000000ffffffffffffffff0800000000000000cc000000000000000000000000000000f5000000000000000010000000000000040000000a0001010000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000076"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0)

341.493812ms ago: executing program 1 (id=4120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r2, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffdc}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'sit0\x00', <r4=>0x0, 0x80, 0x8000, 0x3000, 0x40, {{0x1a, 0x4, 0x1, 0xc, 0x68, 0x66, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, {[@timestamp={0x44, 0x2c, 0xeb, 0x0, 0x3, [0x9, 0x401, 0x8, 0x7fff, 0x280, 0x1ff, 0x584, 0x1000, 0x0, 0x9]}, @cipso={0x86, 0x23, 0x0, [{0x2, 0x8, "f5ada6227c15"}, {0x0, 0x9, "edcd47ac6c6187"}, {0x6, 0xc, "08a304576f30a53a7621"}]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x41040)
r5 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xffffffffffffff87)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040011}, 0x4)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r11 = socket(0x23, 0x80805, 0x0)
listen(r11, 0x0)
accept4$unix(r11, 0x0, 0x0, 0x0)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000059c0)={'veth0\x00', 0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x76, 0x709, 0x1, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
pread64(r5, &(0x7f0000000600)=""/156, 0x9c, 0xffffffffffffffff)

270.673387ms ago: executing program 0 (id=4121):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) (async)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2) (async)
r3 = socket$kcm(0x10, 0x2, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a5742cbd7000fddbdf252800000005002b00000000000a0001007770616e3100001008000200aa211f65454e4e8d4e1154f44261872474a2ac45aadd5cd1020edb222f7d64eb5ecfc8bc394f614836aae876cca5d7d9e5267f2c19f989acd306fb810230daef6fc3fd47e3c712791529e259d95cda1e1a02b107", @ANYRES32=0x0, @ANYBLOB="06000600030000000c002d000200aaaaaaaaaaaa08002c0003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040841}, 0x400c0) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1800000068006b0041000010000000003ac0dd909a4453eb", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010)

210.514884ms ago: executing program 0 (id=4122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000004200000000000000b000010850000002700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb5", 0x87}], 0x1}, 0x20004804)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20)
close(r6)
sendmsg$nl_route(r0, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a005fa62bbd7000fedbdf25132ba7000000000000000000000000002c893c89fa020aee70de021c89d09d024f4f30e2ef768153d457e14372c0a7b8ccab2b44cdd6e60e8c15ba7dea79316563dbd9eb96b434a50a1f4f13c5f3ab3cd87a75283285a66834a66c3e419321f9117918bdc3047024195b322cd08226642153a5ec445a4942c542c320df0f6da2d7d94ca918d843"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000004)

207.327023ms ago: executing program 1 (id=4123):
r0 = socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x5)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f00000012c0))
setsockopt$inet6_int(r2, 0x29, 0x47, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x0, 0x80, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20000880)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x84, 0x3ed, 0x4, 0x70bd2c, 0x25dfdbfc, "4f900aeb2547138caffcedfb94fc3d6cd46c99823ba6ac40fb716129d628acd518bf4d87dc1922038bf8249346a89d682088f207cdf815f2ca7a9adb390cf2cefc60e1a2e9c55332418bc144e965d4738b62b10f89c382684c802bcae1d3d2b0f2c3e64aa2aeddb23e7453e100f535d266", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x20040880}, 0x0)
shutdown(r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x9e, 0x2, 0x7, [0x9, 0x5, 0x401, 0x2d, 0x9e, 0x2, 0x10000]}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000044000900fffffffffddbdf250400000004001f00100001", @ANYRES16=r0, @ANYRESDEC=r3, @ANYBLOB="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"/285, @ANYRES64=0x0, @ANYRESOCT=r8, @ANYRES16=r1, @ANYBLOB="9b399a15d9fd54acb73972c80386ef63c69aed3568ec2032a08746879e154ca3f0175a7c88d6d172152dd090d718f703435ca2a5be0352acc1aa4781ebc00048d97afe584cdad360bb3240bb03b3157b55aa2c76b7b6772f6faf5eca66549d1d43872c7421a0269e4f4f32fe6f5492ee783831d3cf0e4a11da842379768d6f08071b986ea7631ab85d2e709669132b32f5d09fc7f637d79bfd9f386e986954365cf3f22015dec87d3917b10fab372e4f129ccb06bdaeb5ae025012a4"], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x70, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x48, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x44, 0x1, {{0x0, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}, [@rand_addr=' \x01\x00', @loopback, @loopback]}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x200608a0}, 0x40048d0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)

99.113669ms ago: executing program 1 (id=4124):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x8, 0x289, 0xe3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
close(0x3) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r2}, 0x8) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x23, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xcf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x18}, 0x1, 0x0, 0x0, 0x5d0471cfafe4a6c8}, 0x0)

96.885179ms ago: executing program 0 (id=4125):
r0 = socket(0x1f, 0x1, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff00000000711071000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000b00)="66b88c73b297848e54", 0x9}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x40000000, {0xa}, [@RTA_DPORT={0x6}, @RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x2c}}, 0x20004800)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000240)=0x4, 0x4)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000080)={'bridge_slave_0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000280), &(0x7f0000000380)=0x4)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="faf0dd3daab354057b371cc5692eb8d937f56f8fdaf12ca3d4abe51943"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60210085f9", @ANYRES16=r7, @ANYRESOCT=r2], 0x60}}, 0x44000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00014625bd7000fb0500250a0000000000000008000a00010000ff"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2000c051)

90.756969ms ago: executing program 1 (id=4126):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x28, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0xffffffb1, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)
unshare(0x68040200) (async)
socket$inet(0x2, 0x3, 0x7) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
epoll_create1(0x0) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r7 = socket(0x1e, 0x4, 0x0) (async)
r8 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}], 0x1}}], 0x1, 0x0) (async)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000000)=@req={0x6, 0x5, 0x1, 0x1}, 0x10) (async)
sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, 0x0, 0x0) (async)
close(0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.551421ms ago: executing program 1 (id=4127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b004000"/24], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r2=>0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@nfc={0x27, r2, 0xffffffffffffffff, 0x6}, 0x80, &(0x7f0000003580)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="0e6956ddd31c7182503e503be153904671c4f8ebd3bee70e8f77a2a7089e00441bd25b9d9d3d571f13404062c7583f8b499d41517766b593c2d2c6eca8ca1ebe30bf8733a0ab24001eb3b2f64d30252bfaaf74310902b956537b734c2fbbdb87097d662cccc93c2c6443d87fa6c774b84ebc1df97f2f9cadb49a2ad0ee42263a8669065c336d", 0x86}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="6e1c1801b7570c1716c0b91d1de12c3262b490faf62ac6d00b2f081c84245114cfb8c7dc374b377c337fab18359e081f3842e6fadeff64a017f8528cf3f20992c911c60c5afde710815ae2db6ecc36f95bd7130f08f7653e26f23075f39aea22f1308e39386f9d273f4b55181105100202fc166d1fad879e5ef87e18f9b88184c8b4a11e8171bb6a25722619142bf27338a93a6a63e58ac05386433ce78f0db8abaf52c0f17c78a5b0cc06b0ec1c66f07b60ae3dadb2f3f07da2e7f96efb8dd019f64e4f652dd48d5a2e6c5dddb6c5c933170d584f7697e892cbb03df52b3e3575fefa768fcd105db40702b61e22", 0xee}, {&(0x7f0000002580)="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", 0x1000}], 0x5}, 0x408c1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x6)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x14000014, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
bind$inet6(r3, &(0x7f0000003600)={0xa, 0x4e20, 0x81, @local, 0x7ff}, 0x1c)
socket$kcm(0x2, 0x1000000000000005, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r10, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

0s ago: executing program 1 (id=4128):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf25080000008400068029000302e11cd591ed7ad18adae75d3587cccdf453607fb495f7c175cb39842bfc631680d309a8f2e20000004300040067636d28616573290000000000000000000000000000000000000000000000001b000000f2b8129a40b879ce197b592f75284ac44fb3c9de9a431c2e6fc2d300080001003aa6000008000100ff0300001400098008000200ca9900000800020008000000340003800800010081000000080001000700000008000200010000000800030006000000080001000000f0ff0800030005000000"], 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=<r1=>0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', <r6=>0x0, 0x7800, 0x40, 0x7fff, 0x1, {{0x23, 0x4, 0x0, 0x4, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @empty, {[@generic={0x82, 0xf, "c1f2546ffaa832c4624aaa2635"}, @timestamp_addr={0x44, 0x24, 0xe3, 0x1, 0x7, [{@multicast1, 0x7fff}, {@local, 0x3}, {@local, 0xffff8000}, {@private=0xa010101, 0x97}]}, @generic={0x82, 0x7, "ac4df7842d"}, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@empty, 0x9}, {@broadcast, 0xc6f1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@remote, 0x480}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x80000000}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@deltclass={0x30, 0x29, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xe}, {0x10, 0xd}, {0xd, 0x8}}, [@tclass_kind_options=@c_prio={0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111380000000000460000000000000095000025425a8200"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x2, 0x0, 0x0, 0x9}, 0x20)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES64=r7, @ANYRESOCT=r3], 0x4c}}, 0x40)

kernel console output (not intermixed with test programs):

!
[  242.150271][T14722] netlink: 'syz.2.2342': attribute type 1 has an invalid length.
[  242.191276][T14722] bond22: (slave gretap4): making interface the new active one
[  242.196721][T14722] bond22: (slave gretap4): Enslaving as an active interface with an up link
[  242.245976][T14731] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  242.300865][T14733] macvtap1: entered promiscuous mode
[  242.305559][T14733] veth1_to_hsr: entered promiscuous mode
[  242.308044][T14733] macvtap1: entered allmulticast mode
[  242.310442][T14733] veth1_to_hsr: entered allmulticast mode
[  242.329154][T14733] macvtap2: entered promiscuous mode
[  242.331475][T14733] macvtap2: entered allmulticast mode
[  242.376752][T14736] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.434416][T14738] netlink: 'syz.2.2347': attribute type 1 has an invalid length.
[  242.596149][T14749] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  242.596187][T14748] IPVS: stopping backup sync thread 14749 ...
[  242.943662][T14766] lo speed is unknown, defaulting to 1000
[  243.031832][T14771] netlink: 'syz.0.2359': attribute type 1 has an invalid length.
[  243.065812][T14771] 8021q: adding VLAN 0 to HW filter on device bond20
[  243.072800][T14770] delete_channel: no stack
[  243.224070][T14777] netlink: 'syz.0.2360': attribute type 5 has an invalid length.
[  243.281537][T14782] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  243.352701][T14786] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  243.355179][T14785] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  243.481712][T14796] netlink: 'syz.0.2365': attribute type 10 has an invalid length.
[  243.498404][T14796] __nla_validate_parse: 11 callbacks suppressed
[  243.498418][T14796] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.2365'.
[  243.516005][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'.
[  243.544791][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'.
[  243.547720][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'.
[  243.550700][T14800] netlink: 'syz.2.2367': attribute type 12 has an invalid length.
[  243.554667][T14800] netlink: 'syz.2.2367': attribute type 11 has an invalid length.
[  243.580098][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  243.769586][T14808] lo speed is unknown, defaulting to 1000
[  243.892343][T14812] netlink: 'syz.2.2368': attribute type 6 has an invalid length.
[  244.244347][T14821] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2372'.
[  244.248303][T14821] netlink: 'syz.1.2372': attribute type 39 has an invalid length.
[  244.599496][T14830] lo speed is unknown, defaulting to 1000
[  244.666571][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2376'.
[  244.770495][T14836] lo speed is unknown, defaulting to 1000
[  246.142029][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'.
[  246.284884][T14862] lo speed is unknown, defaulting to 1000
[  246.601042][T14862] netlink: 'syz.1.2381': attribute type 6 has an invalid length.
[  246.814876][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.817528][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.932341][T14888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'.
[  246.965308][T14888] bond15: (slave bridge0): Releasing backup interface
[  246.969422][T14888] bridge0 (unregistering): left promiscuous mode
[  246.972941][T14888] bridge0 (unregistering): left allmulticast mode
[  247.168918][T14897] netlink: 'syz.2.2390': attribute type 1 has an invalid length.
[  247.199596][T14899] tipc: Can't bind to reserved service type 1
[  247.202067][T14899] netlink: 'syz.0.2391': attribute type 39 has an invalid length.
[  247.255193][T14901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2391'.
[  247.258705][T14901] netlink: 'syz.0.2391': attribute type 5 has an invalid length.
[  247.262830][T14901] netlink: 'syz.0.2391': attribute type 1 has an invalid length.
[  247.543806][T14920] netlink: 'syz.1.2398': attribute type 30 has an invalid length.
[  247.556790][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.561567][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.596261][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.602229][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.769498][T14932] Bluetooth: MGMT ver 1.23
[  247.771832][T14934] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  247.778344][T14932] IPVS: stopping backup sync thread 14934 ...
[  247.825836][T14938] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  247.829699][T14937] IPVS: stopping backup sync thread 14938 ...
[  247.972941][T14951] netlink: 'syz.0.2408': attribute type 1 has an invalid length.
[  248.133019][T14969] netlink: 'syz.0.2414': attribute type 2 has an invalid length.
[  248.318259][T14983] lo speed is unknown, defaulting to 1000
[  248.475345][T14998] bridge_slave_1: left allmulticast mode
[  248.478559][T14998] xfrm0: left promiscuous mode
[  248.480519][T14998] xfrm0: left allmulticast mode
[  248.485353][T14998] tipc: Resetting bearer <eth:syzkaller0>
[  248.487713][T14998] syzkaller0: left promiscuous mode
[  248.489574][T14998] syzkaller0: left allmulticast mode
[  248.508338][T14998] bridge8: left allmulticast mode
[  248.511247][T14998] bond14: left promiscuous mode
[  248.517110][T14998] bond15: left promiscuous mode
[  248.520468][T14998] macvlan5: left allmulticast mode
[  248.524843][T14998] bond0: left allmulticast mode
[  248.527195][T14998] macvlan6: left allmulticast mode
[  248.535735][T14998] gretap4: left promiscuous mode
[  248.538687][T14998] vlan0: left promiscuous mode
[  248.540894][T14998] ip6gretap0: left promiscuous mode
[  248.571420][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.576065][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.580431][T14998] __nla_validate_parse: 11 callbacks suppressed
[  248.580444][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'.
[  248.611366][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.616535][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.680929][T15003] netlink: 'syz.2.2423': attribute type 3 has an invalid length.
[  248.728985][T15005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.868007][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2428'.
[  248.925733][T15021] netlink: 'syz.0.2430': attribute type 10 has an invalid length.
[  249.079441][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'.
[  249.091924][T15030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2432'.
[  249.156239][T15033] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2433'.
[  249.161384][T15033] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  249.892298][T15065] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  249.894387][T15066] IPVS: stopping backup sync thread 15065 ...
[  249.900681][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2441'.
[  249.901810][T15067] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2441'.
[  250.210623][T15093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.259897][T15095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'.
[  250.297449][T15099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2449'.
[  250.340826][T15102] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  250.491630][T15105] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2451'.
[  250.988392][T15134] IPv6: sit1: Disabled Multicast RS
[  251.176306][T15139] lo speed is unknown, defaulting to 1000
[  251.398493][T15146] lo speed is unknown, defaulting to 1000
[  252.043956][T15153] 8021q: adding VLAN 0 to HW filter on device bond18
[  252.060837][T15154] bond18: (slave geneve4): making interface the new active one
[  252.064975][T15154] bond18: (slave geneve4): Enslaving as an active interface with an up link
[  252.067946][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.071174][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.086860][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.091026][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.374170][T15168] syzkaller0: entered promiscuous mode
[  252.378781][T15168] syzkaller0: entered allmulticast mode
[  252.397585][ T5862] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  252.400612][ T5862] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  252.417826][ T5862] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  252.420486][ T5862] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  252.608063][T15182] validate_nla: 6 callbacks suppressed
[  252.608077][T15182] netlink: 'syz.0.2475': attribute type 10 has an invalid length.
[  252.640292][T15182] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.644902][T15182] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.691329][T15195] netlink: 'syz.1.2478': attribute type 21 has an invalid length.
[  252.736713][T15199] netlink: 'syz.2.2480': attribute type 1 has an invalid length.
[  252.788158][T15201] lo speed is unknown, defaulting to 1000
[  252.926363][T15213] lo speed is unknown, defaulting to 1000
[  253.685921][T15218] netlink: 'syz.1.2483': attribute type 3 has an invalid length.
[  253.689841][T15218] __nla_validate_parse: 9 callbacks suppressed
[  253.689853][T15218] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2483'.
[  253.769231][T15226] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  253.772903][T15227] IPVS: stopping backup sync thread 15226 ...
[  253.827362][T15230] netlink: 'syz.0.2486': attribute type 2 has an invalid length.
[  253.830013][T15230] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2486'.
[  253.854058][T15232] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  254.065058][T15253] lo speed is unknown, defaulting to 1000
[  254.069624][T15255] netlink: 'syz.0.2497': attribute type 1 has an invalid length.
[  254.073517][T15255] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2497'.
[  254.081471][T15255] netlink: 'syz.0.2497': attribute type 1 has an invalid length.
[  254.128540][T15261] IPVS: stopping backup sync thread 15262 ...
[  254.179174][T15266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.188003][T15266] syzkaller0: entered promiscuous mode
[  254.190233][T15266] syzkaller0: entered allmulticast mode
[  254.202464][T15267] tipc: Resetting bearer <eth:syzkaller0>
[  254.207122][T15265] netlink: 'syz.0.2500': attribute type 1 has an invalid length.
[  254.221390][T15264] tipc: Resetting bearer <eth:syzkaller0>
[  254.230952][T15264] tipc: Disabling bearer <eth:syzkaller0>
[  254.306493][T15272] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004
[  254.309702][T15272] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002
[  254.363005][T15274] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2503'.
[  254.565228][T15293] syz.0.2509: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  254.571354][T15293] CPU: 0 UID: 0 PID: 15293 Comm: syz.0.2509 Not tainted syzkaller #0 PREEMPT(full) 
[  254.571365][T15293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.571370][T15293] Call Trace:
[  254.571373][T15293]  <TASK>
[  254.571377][T15293]  dump_stack_lvl+0x189/0x250
[  254.571391][T15293]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.571400][T15293]  ? __pfx__printk+0x10/0x10
[  254.571411][T15293]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  254.571416][T15289] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2506'.
[  254.571420][T15293]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  254.571429][T15293]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  254.571439][T15293]  warn_alloc+0x214/0x310
[  254.571453][T15293]  ? __pfx_warn_alloc+0x10/0x10
[  254.571468][T15293]  ? __get_vm_area_node+0x28f/0x300
[  254.571479][T15293]  ? xskq_create+0xbf/0x170
[  254.571488][T15293]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  254.571510][T15293]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  254.571524][T15293]  ? __kasan_kmalloc+0x93/0xb0
[  254.571535][T15293]  vmalloc_user_noprof+0xad/0xf0
[  254.571546][T15293]  ? xskq_create+0xbf/0x170
[  254.571553][T15293]  xskq_create+0xbf/0x170
[  254.571561][T15293]  xsk_init_queue+0xb0/0x110
[  254.571569][T15293]  xsk_setsockopt+0x57b/0x8d0
[  254.571581][T15293]  ? __pfx_xsk_setsockopt+0x10/0x10
[  254.571592][T15293]  ? __pfx_aa_sk_perm+0x10/0x10
[  254.571605][T15293]  ? __fget_files+0x2a/0x420
[  254.571611][T15293]  ? aa_sock_opt_perm+0xff/0x1b0
[  254.571620][T15293]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  254.571628][T15293]  ? __pfx_xsk_setsockopt+0x10/0x10
[  254.571639][T15293]  do_sock_setsockopt+0x17c/0x1b0
[  254.571651][T15293]  __x64_sys_setsockopt+0x13f/0x1b0
[  254.571661][T15293]  do_syscall_64+0xfa/0x3b0
[  254.571670][T15293]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.571677][T15293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.571684][T15293]  ? exc_page_fault+0x9f/0xf0
[  254.571692][T15293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.571699][T15293] RIP: 0033:0x7fd43e38eba9
[  254.571706][T15293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.571713][T15293] RSP: 002b:00007fd43f22f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  254.571721][T15293] RAX: ffffffffffffffda RBX: 00007fd43e5d6090 RCX: 00007fd43e38eba9
[  254.571726][T15293] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  254.571731][T15293] RBP: 00007fd43e411e19 R08: 0000000000000004 R09: 0000000000000000
[  254.571735][T15293] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  254.571739][T15293] R13: 00007fd43e5d6128 R14: 00007fd43e5d6090 R15: 00007fff022ca388
[  254.571751][T15293]  </TASK>
[  254.571754][T15293] Mem-Info:
[  254.575100][T15289] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2506'.
[  254.579371][T15293] active_anon:5921 inactive_anon:0 isolated_anon:0
[  254.579371][T15293]  active_file:1499 inactive_file:38314 isolated_file:0
[  254.579371][T15293]  unevictable:1768 dirty:36 writeback:0
[  254.579371][T15293]  slab_reclaimable:10649 slab_unreclaimable:146097
[  254.579371][T15293]  mapped:18418 shmem:2412 pagetables:1023
[  254.579371][T15293]  sec_pagetables:0 bounce:0
[  254.579371][T15293]  kernel_misc_reclaimable:0
[  254.579371][T15293]  free:194199 free_pcp:22568 free_cma:0
[  254.599080][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'.
[  254.609629][T15293] Node 0 active_anon:15412kB inactive_anon:0kB active_file:5012kB inactive_file:135316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28132kB dirty:100kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6024kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.644072][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  254.650417][T15293] Node 1 active_anon:8272kB inactive_anon:0kB active_file:984kB inactive_file:17940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45608kB dirty:44kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8204kB pagetables:1664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  254.711765][T15293] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.729646][T15293] lowmem_reserve[]: 0 811 811 811 811
[  254.731491][T15293] Node 0 DMA32 free:226720kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15376kB inactive_anon:0kB active_file:5012kB inactive_file:135316kB unevictable:3536kB writepending:100kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:45044kB local_pcp:30592kB free_cma:0kB
[  254.744880][T15293] lowmem_reserve[]: 0 0 0 0 0
[  254.746608][T15293] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  254.758350][T15293] lowmem_reserve[]: 0 0 854 854 854
[  254.760142][T15293] Node 1 Normal free:76144kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15392kB inactive_anon:0kB active_file:984kB inactive_file:17940kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38176kB local_pcp:22528kB free_cma:0kB
[  254.770889][T15293] lowmem_reserve[]: 0 0 0 0 0
[  254.772488][T15293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  254.778284][T15293] Node 0 DMA32: 957*4kB (UM) 504*8kB (UME) 543*16kB (UME) 592*32kB (UME) 115*64kB (UME) 46*128kB (UME) 45*256kB (UME) 23*512kB (UME) 11*1024kB (UM) 6*2048kB (UM) 32*4096kB (UM) = 226660kB
[  254.789335][T15293] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  254.795901][T15293] Node 1 Normal: 213*4kB (UME) 138*8kB (UME) 283*16kB (UM) 297*32kB (UME) 104*64kB (UME) 45*128kB (UM) 23*256kB (UM) 16*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 5*4096kB (UM) = 75252kB
[  254.807873][T15293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  254.812664][T15293] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  254.815838][T15293] 44272 total pagecache pages
[  254.817634][T15293] 0 pages in swap cache
[  254.819172][T15293] Free swap  = 124996kB
[  254.820651][T15293] Total swap = 124996kB
[  254.822192][T15293] 786301 pages RAM
[  254.823654][T15293] 0 pages HighMem/MovableOnly
[  254.825446][T15293] 241346 pages reserved
[  254.829270][T15293] 0 pages cma reserved
[  254.915507][T15313] netlink: 'syz.1.2514': attribute type 1 has an invalid length.
[  254.970846][  T790] lo speed is unknown, defaulting to 1000
[  254.972847][  T790] syz1: Port: 1 Link DOWN
[  254.975276][  T790] lo speed is unknown, defaulting to 1000
[  255.034850][T15320] 8021q: adding VLAN 0 to HW filter on device bond19
[  255.041191][T15313] bond19: (slave wlan0): Opening slave failed
[  255.066998][T15325] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2516'.
[  255.073795][T15327] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2517'.
[  255.188157][T15339] bridge0: port 2(macvlan0) entered blocking state
[  255.191646][T15339] bridge0: port 2(macvlan0) entered disabled state
[  255.195646][T15339] macvlan0: entered allmulticast mode
[  255.198094][T15339] bridge0: entered allmulticast mode
[  255.202666][T15339] macvlan0: left allmulticast mode
[  255.207648][T15339] bridge0: left allmulticast mode
[  255.305706][T15352] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  255.308715][T15350] IPVS: stopping backup sync thread 15352 ...
[  255.383806][T15356] sctp: [Deprecated]: syz.0.2525 (pid 15356) Use of int in maxseg socket option.
[  255.383806][T15356] Use struct sctp_assoc_value instead
[  255.456823][T15364] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 512, id = 0
[  255.461490][T15363] IPVS: stopping backup sync thread 15364 ...
[  255.567097][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.974167][T15393] vlan2: entered promiscuous mode
[  256.957044][T15417] Bluetooth: MGMT ver 1.23
[  257.535403][T15447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.538054][T15447] syzkaller0: entered promiscuous mode
[  257.539928][T15447] syzkaller0: entered allmulticast mode
[  257.615763][T15446] tipc: Resetting bearer <eth:syzkaller0>
[  257.629233][T15446] tipc: Disabling bearer <eth:syzkaller0>
[  257.772800][T15471] tipc: Resetting bearer <eth:team0>
[  257.790669][T15471] veth1_to_hsr: left allmulticast mode
[  257.792666][T15471] veth1_to_hsr: left promiscuous mode
[  257.800536][T15471] validate_nla: 6 callbacks suppressed
[  257.800544][T15471] netlink: 'syz.2.2558': attribute type 3 has an invalid length.
[  257.806313][T15471] netlink: 'syz.2.2558': attribute type 1 has an invalid length.
[  257.826189][T15477] syzkaller0: entered promiscuous mode
[  257.827997][T15477] syzkaller0: entered allmulticast mode
[  257.924876][T15485] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  257.990667][T15491] vxcan0: entered promiscuous mode
[  258.065482][T15492] erspan0: left promiscuous mode
[  258.070661][T15492] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  258.077174][T15492] geneve3: left promiscuous mode
[  258.079280][T15492] geneve3: left allmulticast mode
[  258.081929][T15492] bond17: left promiscuous mode
[  258.084222][T15492] bond19: left promiscuous mode
[  258.445642][T15519] lo speed is unknown, defaulting to 1000
[  258.510743][T15523] bond16: left allmulticast mode
[  258.512582][T15523] bond16: left promiscuous mode
[  258.514869][T15523] bridge0: port 1(bond16) entered disabled state
[  258.677867][T15526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.772069][T15530] netlink: 'syz.1.2575': attribute type 1 has an invalid length.
[  259.047555][T15548] lo speed is unknown, defaulting to 1000
[  260.470051][T15562] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  260.480898][T15562] netlink: 'syz.0.2583': attribute type 10 has an invalid length.
[  260.534965][T15570] __nla_validate_parse: 18 callbacks suppressed
[  260.534980][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2585'.
[  260.575720][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'.
[  260.587976][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2587'.
[  260.667075][T15577] syzkaller0: entered promiscuous mode
[  260.669276][T15577] syzkaller0: entered allmulticast mode
[  260.810648][T15586] openvswitch: netlink: Missing key (keys=40, expected=80)
[  261.790533][T15588] netlink: 'syz.0.2590': attribute type 1 has an invalid length.
[  261.794680][T15588] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2590'.
[  261.805010][T15588] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2590'.
[  261.882938][T15593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2591'.
[  261.951415][T15600] lo speed is unknown, defaulting to 1000
[  261.969867][T15602] netlink: 'syz.2.2591': attribute type 1 has an invalid length.
[  262.117098][T15602] lo speed is unknown, defaulting to 1000
[  262.468172][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2598'.
[  262.627792][T15633] veth1_to_team: entered promiscuous mode
[  262.631171][T15633] bond0: entered promiscuous mode
[  262.636887][T15633] bond0: left promiscuous mode
[  262.638806][T15633] veth1_to_team: left promiscuous mode
[  262.826371][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2605'.
[  263.139534][T15659] IPVS: stopping backup sync thread 14731 ...
[  263.143082][T15655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2610'.
[  263.167196][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'.
[  263.399375][T15679] lo speed is unknown, defaulting to 1000
[  263.738137][T15693] tipc: Disabling bearer <eth:team0>
[  263.957029][T15724] netlink: 'syz.0.2625': attribute type 2 has an invalid length.
[  263.977146][T15724] : entered promiscuous mode
[  264.070612][T15731] batadv0: entered promiscuous mode
[  264.078613][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.160439][T15736] IPVS: stopping backup sync thread 15741 ...
[  264.602566][T15765] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  264.606820][T15764] IPVS: stopping backup sync thread 15765 ...
[  264.691826][T15767] vlan1: entered allmulticast mode
[  264.694522][T15767] bond21: entered allmulticast mode
[  264.799902][T15774] IPVS: stopping backup sync thread 15775 ...
[  264.802079][T15775] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  264.808014][T15778] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  264.896317][T15787] lo speed is unknown, defaulting to 1000
[  264.959721][T15788] tipc: Resetting bearer <eth:syzkaller0>
[  264.962535][T15788] syzkaller0: left promiscuous mode
[  264.967291][T15788] syzkaller0: left allmulticast mode
[  264.990410][ T5855] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.997455][ T5855] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  265.000406][ T5855] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.003488][ T5855] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  265.015152][ T5855] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.018576][ T5855] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  265.029928][ T5855] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.035440][ T5855] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  265.540693][T15821] lo speed is unknown, defaulting to 1000
[  266.108449][T15836] lo speed is unknown, defaulting to 1000
[  266.190707][T15839] IPVS: stopping backup sync thread 15840 ...
[  266.190790][T15840] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  266.553044][T15864] __nla_validate_parse: 19 callbacks suppressed
[  266.553061][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'.
[  266.651009][T15871] netlink: 'syz.1.2668': attribute type 10 has an invalid length.
[  266.657916][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  266.661787][T15871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2668'.
[  266.665809][T15871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  266.669663][T15871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2668'.
[  266.778759][T15876] lo speed is unknown, defaulting to 1000
[  266.785096][T15879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2671'.
[  266.947438][T15895] netlink: 'syz.2.2677': attribute type 1 has an invalid length.
[  266.953323][T15895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'.
[  266.957301][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'.
[  266.961990][T15895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'.
[  267.090071][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2682'.
[  267.202772][T15920] netlink: 'syz.1.2686': attribute type 1 has an invalid length.
[  267.235722][T15920] 8021q: adding VLAN 0 to HW filter on device bond22
[  267.245177][T15920] bond22: (slave wlan0): Opening slave failed
[  267.258871][T15920] vlan1: entered allmulticast mode
[  267.261568][T15920] veth1: entered allmulticast mode
[  267.265631][T15920] bond22: (slave vlan1): Opening slave failed
[  267.328770][T15929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.331934][T15929] syzkaller0: entered promiscuous mode
[  267.334623][T15929] syzkaller0: entered allmulticast mode
[  267.350756][T15929] tipc: Resetting bearer <eth:syzkaller0>
[  267.366641][T15929] tipc: Disabling bearer <eth:syzkaller0>
[  267.460348][T15940] IPVS: stopping backup sync thread 15941 ...
[  267.460804][T15941] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  267.508568][T15946] netlink: 'syz.1.2692': attribute type 10 has an invalid length.
[  267.636688][T15964] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0
[  267.641033][T15962] IPVS: stopping backup sync thread 15964 ...
[  267.737026][T15974] netlink: 'syz.2.2698': attribute type 1 has an invalid length.
[  267.865193][T15978] bond23: (slave veth15): Enslaving as a backup interface with a down link
[  267.883524][T15974] bond11: (slave geneve5): Releasing active interface
[  267.903594][T15974] bond12: (slave gretap2): Releasing active interface
[  267.907531][T15974] batman_adv: batadv0: Removing interface: ip6gretap4
[  267.917315][T15974] bond20: (slave gretap3): Releasing active interface
[  267.924793][T15974] bond22: (slave gretap4): Releasing active interface
[  267.929953][T15974] bond23: (slave veth15): Releasing backup interface
[  268.004015][T15988] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  268.245317][T16017] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  268.258671][T16020] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  268.264650][T16021] IPVS: stopping backup sync thread 16020 ...
[  268.338066][T16031] netlink: 'syz.0.2713': attribute type 1 has an invalid length.
[  268.352397][T16031] 8021q: adding VLAN 0 to HW filter on device bond21
[  268.362279][T16033] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.367541][T16031] bond21: (slave wlan0): Opening slave failed
[  268.377099][T16033] syzkaller0: entered promiscuous mode
[  268.379347][T16033] syzkaller0: entered allmulticast mode
[  268.402667][T16031] vlan1: entered allmulticast mode
[  268.406491][T16031] bond21: (slave vlan1): Opening slave failed
[  268.811268][T16066] netlink: 'syz.2.2721': attribute type 3 has an invalid length.
[  268.945470][T16080] lo speed is unknown, defaulting to 1000
[  268.971426][T16084] IPVS: stopping backup sync thread 16017 ...
[  269.152480][T16089] netlink: 'syz.1.2727': attribute type 1 has an invalid length.
[  269.172403][T16089] 8021q: adding VLAN 0 to HW filter on device bond23
[  269.196139][T16089] syzkaller0: left promiscuous mode
[  269.198258][T16089] syzkaller0: left allmulticast mode
[  269.300770][T16097] can: request_module (can-proto-0) failed.
[  269.571529][T16114] veth0_to_bridge: entered promiscuous mode
[  269.578293][T16114] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  269.790164][T16135] tipc: Resetting bearer <eth:syzkaller0>
[  270.106000][T16157] lo speed is unknown, defaulting to 1000
[  270.188331][T16168] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  270.188359][T16165] IPVS: stopping backup sync thread 16168 ...
[  270.215674][T16165] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003
[  270.608652][T16175] netlink: 'syz.2.2746': attribute type 6 has an invalid length.
[  270.671508][T16190] netlink: 'syz.0.2751': attribute type 6 has an invalid length.
[  270.682578][T16190] netlink: 'syz.0.2751': attribute type 12 has an invalid length.
[  270.816745][T16196] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  270.856620][T16196] 8021q: adding VLAN 0 to HW filter on device bond22
[  270.874457][T16196] bond22: (slave ip6gretap1): making interface the new active one
[  270.880084][T16196] bond22: (slave ip6gretap1): Enslaving as an active interface with an up link
[  270.933792][T16196] veth5: entered promiscuous mode
[  270.942755][T16196] bond22: (slave veth5): Enslaving as an active interface with a down link
[  270.948918][T16196] erspan0: entered allmulticast mode
[  270.954106][T16196] bond22: (slave erspan0): Enslaving as an active interface with an up link
[  271.320485][T16222] lo speed is unknown, defaulting to 1000
[  273.045975][T16219] lo speed is unknown, defaulting to 1000
[  273.587206][T16255] __nla_validate_parse: 18 callbacks suppressed
[  273.587222][T16255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2769'.
[  273.650646][T16264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.654351][T16263] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.657317][T16266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2772'.
[  273.668585][T16262] syzkaller0: entered promiscuous mode
[  273.670865][T16262] syzkaller0: entered allmulticast mode
[  273.700327][T16262] syzkaller0: Caught tx_queue_len zero misconfig
[  273.795240][T16273] lo speed is unknown, defaulting to 1000
[  273.848366][T16282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.857265][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'.
[  274.132231][T16306] batadv_slave_0: entered promiscuous mode
[  274.138316][T16304] lo speed is unknown, defaulting to 1000
[  274.254939][T16299] netlink: 'syz.2.2783': attribute type 3 has an invalid length.
[  274.889190][T16305] batadv_slave_0: left promiscuous mode
[  275.068369][T16322] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  275.073099][T16321] IPVS: stopping backup sync thread 16322 ...
[  275.093701][T16321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.105238][T16324] IPVS: stopping backup sync thread 15778 ...
[  275.585172][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'.
[  275.588975][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'.
[  275.592687][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2796'.
[  275.599683][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'.
[  275.710616][T16361] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  275.806281][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'.
[  275.861841][T16378] netlink: 'syz.0.2805': attribute type 1 has an invalid length.
[  275.865025][T16378] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2805'.
[  275.868080][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'.
[  276.107258][T16393] netlink: 'syz.0.2808': attribute type 1 has an invalid length.
[  276.245539][T16397] netlink: 'syz.0.2809': attribute type 4 has an invalid length.
[  276.993056][T16418] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  276.997375][T16417] IPVS: stopping backup sync thread 16418 ...
[  277.091298][T16431] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.095991][T16430] IPVS: stopping backup sync thread 16431 ...
[  277.192171][T16441] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.197291][T16439] IPVS: stopping backup sync thread 16441 ...
[  277.269620][T16446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.501260][T16479] bond24: (slave vxcan5): The slave device specified does not support setting the MAC address
[  277.506991][T16479] bond24: (slave vxcan5): Error -95 calling set_mac_address
[  277.552868][T16485] macvlan0: entered promiscuous mode
[  277.555004][T16485] macvlan0: entered allmulticast mode
[  277.557261][T16485] bond24: (slave macvlan0): Error -98 calling set_mac_address
[  277.767010][T16497] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.770694][T16495] IPVS: stopping backup sync thread 16497 ...
[  277.827663][T16500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.977855][T16515] xfrm0: entered promiscuous mode
[  277.980054][T16515] xfrm0: entered allmulticast mode
[  278.065157][T16527] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  278.079577][T16527] C: renamed from lo (while UP)
[  278.085551][T16527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  278.096516][T16531] netlink: 'syz.2.2848': attribute type 21 has an invalid length.
[  278.191023][T16540] pim6reg: entered allmulticast mode
[  278.203082][T16540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.212147][T16540] pim6reg: left allmulticast mode
[  278.334944][T16545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.340923][T16545] syzkaller0: entered promiscuous mode
[  278.344956][T16545] syzkaller0: entered allmulticast mode
[  278.379961][T16545] tipc: Resetting bearer <eth:syzkaller0>
[  278.393101][T16544] tipc: Resetting bearer <eth:syzkaller0>
[  278.416985][T16544] tipc: Disabling bearer <eth:syzkaller0>
[  278.861119][T16564] netlink: 'syz.0.2858': attribute type 1 has an invalid length.
[  278.882568][T16564] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  278.959537][T16570] __nla_validate_parse: 8 callbacks suppressed
[  278.959548][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'.
[  278.968820][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'.
[  278.972499][T16570] netlink: 'syz.0.2859': attribute type 15 has an invalid length.
[  279.036374][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'.
[  279.156959][T16574] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2861'.
[  279.260578][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'.
[  279.317305][T16594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2865'.
[  279.359663][T16599] lo speed is unknown, defaulting to 1000
[  279.426952][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2869'.
[  279.429854][T16612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2869'.
[  279.432933][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2869'.
[  279.438090][T16613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2869'.
[  279.568797][T16622] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  279.573381][T16621] IPVS: stopping backup sync thread 16622 ...
[  279.902468][T16645] 8021q: VLANs not supported on wg1
[  279.921466][T16647] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  280.125426][   T54] Bluetooth: hci1: command tx timeout
[  280.171573][T16669] bond15: left promiscuous mode
[  280.181845][T16669] bond15: left allmulticast mode
[  280.202539][T16669] bond19: left promiscuous mode
[  280.206129][T16669] bond19: left allmulticast mode
[  280.208769][T16669] gretap3: left promiscuous mode
[  280.211069][T16669] bridge5: left promiscuous mode
[  280.223363][T16669] bridge5: left allmulticast mode
[  280.233677][T16669] macvtap1: left promiscuous mode
[  280.236135][T16669] macvtap1: left allmulticast mode
[  280.545456][T16688] syz.0.2889: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  280.555156][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.0.2889 Not tainted syzkaller #0 PREEMPT(full) 
[  280.555169][T16688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.555174][T16688] Call Trace:
[  280.555177][T16688]  <TASK>
[  280.555181][T16688]  dump_stack_lvl+0x189/0x250
[  280.555196][T16688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.555205][T16688]  ? __pfx__printk+0x10/0x10
[  280.555216][T16688]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  280.555225][T16688]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  280.555234][T16688]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  280.555244][T16688]  warn_alloc+0x214/0x310
[  280.555260][T16688]  ? __pfx_warn_alloc+0x10/0x10
[  280.555282][T16688]  ? __get_vm_area_node+0x28f/0x300
[  280.555298][T16688]  ? xskq_create+0xbf/0x170
[  280.555309][T16688]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  280.555331][T16688]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  280.555352][T16688]  ? __kasan_kmalloc+0x93/0xb0
[  280.555370][T16688]  vmalloc_user_noprof+0xad/0xf0
[  280.555382][T16688]  ? xskq_create+0xbf/0x170
[  280.555389][T16688]  xskq_create+0xbf/0x170
[  280.555397][T16688]  xsk_init_queue+0xb0/0x110
[  280.555405][T16688]  xsk_setsockopt+0x57b/0x8d0
[  280.555421][T16688]  ? __pfx_xsk_setsockopt+0x10/0x10
[  280.555438][T16688]  ? __pfx_aa_sk_perm+0x10/0x10
[  280.555457][T16688]  ? __fget_files+0x2a/0x420
[  280.555466][T16688]  ? aa_sock_opt_perm+0xff/0x1b0
[  280.555477][T16688]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  280.555486][T16688]  ? __pfx_xsk_setsockopt+0x10/0x10
[  280.555498][T16688]  do_sock_setsockopt+0x17c/0x1b0
[  280.555508][T16688]  __x64_sys_setsockopt+0x13f/0x1b0
[  280.555520][T16688]  do_syscall_64+0xfa/0x3b0
[  280.555534][T16688]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.555545][T16688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.555556][T16688]  ? exc_page_fault+0x9f/0xf0
[  280.555569][T16688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.555579][T16688] RIP: 0033:0x7fd43e38eba9
[  280.555590][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.555600][T16688] RSP: 002b:00007fd43f250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  280.555613][T16688] RAX: ffffffffffffffda RBX: 00007fd43e5d5fa0 RCX: 00007fd43e38eba9
[  280.555622][T16688] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  280.555629][T16688] RBP: 00007fd43e411e19 R08: 0000000000000004 R09: 0000000000000000
[  280.555636][T16688] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  280.555643][T16688] R13: 00007fd43e5d6038 R14: 00007fd43e5d5fa0 R15: 00007fff022ca388
[  280.555662][T16688]  </TASK>
[  280.555667][T16688] Mem-Info:
[  280.683527][T16688] active_anon:6495 inactive_anon:0 isolated_anon:0
[  280.683527][T16688]  active_file:1499 inactive_file:38324 isolated_file:0
[  280.683527][T16688]  unevictable:1768 dirty:39 writeback:0
[  280.683527][T16688]  slab_reclaimable:10953 slab_unreclaimable:143913
[  280.683527][T16688]  mapped:18353 shmem:3118 pagetables:1004
[  280.683527][T16688]  sec_pagetables:0 bounce:0
[  280.683527][T16688]  kernel_misc_reclaimable:0
[  280.683527][T16688]  free:192782 free_pcp:24951 free_cma:0
[  280.715331][T16688] Node 0 active_anon:15200kB inactive_anon:0kB active_file:5012kB inactive_file:135336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27836kB dirty:100kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6124kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  280.731945][T16688] Node 1 active_anon:7996kB inactive_anon:0kB active_file:984kB inactive_file:17960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45564kB dirty:56kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8232kB pagetables:1636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  280.739539][T16695] netlink: 'syz.1.2891': attribute type 6 has an invalid length.
[  280.746932][T16688] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  280.762503][T16688] lowmem_reserve[]: 0 811 811 811 811
[  280.764139][T16698] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  280.767433][T16688] Node 0 DMA32 free:217320kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15192kB inactive_anon:0kB active_file:5012kB inactive_file:135336kB unevictable:3536kB writepending:100kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:55600kB local_pcp:35088kB free_cma:0kB
[  280.769021][T16697] IPVS: stopping backup sync thread 16698 ...
[  280.780331][T16688] lowmem_reserve[]: 0 0 0 0 0
[  280.780366][T16688] Node 1 DMA32 free:446768kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:11664kB local_pcp:0kB free_cma:0kB
[  280.780399][T16688] lowmem_reserve[]: 0 0 854 854 854
[  280.780425][T16688] Node 1 Normal free:91480kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8196kB inactive_anon:0kB active_file:984kB inactive_file:17960kB unevictable:3536kB writepending:56kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35672kB local_pcp:21480kB free_cma:0kB
[  280.780459][T16688] lowmem_reserve[]: 0 0 0 0 0
[  280.780485][T16688] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  280.780567][T16688] Node 0 DMA32: 660*4kB (UM) 753*8kB (UME) 267*16kB (UME) 435*32kB (UME) 204*64kB (UM) 66*128kB (UME) 34*256kB (UME) 17*512kB (UME) 10*1024kB (UM) 3*2048kB (M) 33*4096kB (UM) = 217320kB
[  280.830947][T16688] Node 1 DMA32: 16*4kB (UM) 14*8kB (UM) 12*16kB (UME) 6*32kB (UM) 2*64kB (U) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 3*2048kB (ME) 106*4096kB (UM) = 446768kB
[  280.840862][T16688] Node 1 Normal: 850*4kB (UME) 1018*8kB (UM) 649*16kB (UME) 116*32kB (UM) 88*64kB (UM) 50*128kB (UM) 30*256kB (UM) 14*512kB (UME) 8*1024kB (UM) 5*2048kB (UME) 5*4096kB (U) = 91432kB
[  280.848673][T16688] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  280.852286][T16688] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  280.876328][T16688] 42251 total pagecache pages
[  280.878613][T16688] 0 pages in swap cache
[  280.880480][T16688] Free swap  = 124996kB
[  280.882340][T16688] Total swap = 124996kB
[  280.887847][T16688] 786301 pages RAM
[  280.889421][T16688] 0 pages HighMem/MovableOnly
[  280.891271][T16688] 241346 pages reserved
[  280.892919][T16688] 0 pages cma reserved
[  280.944101][T16708] netlink: 'syz.0.2895': attribute type 1 has an invalid length.
[  280.992238][T16708] bond23: entered promiscuous mode
[  280.994669][T16708] bond23: entered allmulticast mode
[  280.997110][T16708] 8021q: adding VLAN 0 to HW filter on device bond23
[  281.015064][T16708] bridge0: entered promiscuous mode
[  281.017429][T16708] bridge0: entered allmulticast mode
[  281.020080][T16708] bond23: (slave bridge0): Enslaving as a backup interface with an up link
[  281.072693][T16721] bridge0: port 1(batadv1) entered blocking state
[  281.076583][T16721] bridge0: port 1(batadv1) entered disabled state
[  281.078966][T16721] batadv1: entered allmulticast mode
[  281.082762][T16721] batadv1: entered promiscuous mode
[  281.096761][ T5862] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  281.219362][   T13] bond23: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  281.352255][T16758] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  281.357987][T16759] IPVS: stopping backup sync thread 16758 ...
[  281.427541][T16764] lo speed is unknown, defaulting to 1000
[  281.573445][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  281.577517][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  281.639908][T16770] lo speed is unknown, defaulting to 1000
[  281.764855][T16781] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  281.832550][T16781] 8021q: adding VLAN 0 to HW filter on device bond25
[  281.855693][T16784] 8021q: adding VLAN 0 to HW filter on device bond25
[  281.858793][T16784] bond25: (slave vxcan5): The slave device specified does not support setting the MAC address
[  281.864782][T16784] bond25: (slave vxcan5): Error -95 calling set_mac_address
[  281.892111][T16787] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  281.903264][T16786] IPVS: stopping backup sync thread 16787 ...
[  281.910203][T16781] bond25: (slave bridge9): Enslaving as an active interface with an up link
[  282.001786][T16789] lo speed is unknown, defaulting to 1000
[  282.644431][T16832] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  282.771351][T16847] netlink: 'syz.0.2934': attribute type 39 has an invalid length.
[  282.817949][T16851] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  282.821549][T16850] IPVS: stopping backup sync thread 16851 ...
[  282.998301][T16866] netlink: 'syz.1.2943': attribute type 1 has an invalid length.
[  283.045341][T16872] batadv2: entered promiscuous mode
[  283.047371][T16872] batadv2: entered allmulticast mode
[  283.164516][T16885] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  283.170000][T16884] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  283.248162][T16892] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  283.248212][T16891] IPVS: stopping backup sync thread 16892 ...
[  283.773947][T16925] lo speed is unknown, defaulting to 1000
[  284.002076][T16940] __nla_validate_parse: 27 callbacks suppressed
[  284.002091][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'.
[  284.077121][T16940] batadv1: left allmulticast mode
[  284.081719][T16940] batadv1: left promiscuous mode
[  284.094069][T16940] bridge0: port 1(batadv1) entered disabled state
[  284.132852][T16940] bond23: (slave bridge0): Removing an active aggregator
[  284.136037][T16940] bond23: (slave bridge0): Releasing backup interface
[  284.139575][T16940] bridge0 (unregistering): left promiscuous mode
[  284.142456][T16940] bridge0 (unregistering): left allmulticast mode
[  284.195209][T16934] lo speed is unknown, defaulting to 1000
[  284.366814][T16946] netlink: 'syz.0.2968': attribute type 1 has an invalid length.
[  284.468632][T16946] bond24: (slave bridge0): making interface the new active one
[  284.471495][T16946] bond24: (slave bridge0): Enslaving as an active interface with an up link
[  284.747001][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2973'.
[  284.798749][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  285.017242][T16990] netlink: 'syz.2.2976': attribute type 1 has an invalid length.
[  285.031252][T16989] IPVS: stopping backup sync thread 16361 ...
[  285.188355][T17010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2982'.
[  285.218274][T17013] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  285.222809][T17012] IPVS: stopping backup sync thread 17013 ...
[  285.245162][T17017] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  285.249176][T17016] IPVS: stopping backup sync thread 17017 ...
[  285.288304][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'.
[  285.298174][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'.
[  285.302214][T17021] netlink: 'syz.0.2985': attribute type 13 has an invalid length.
[  285.345986][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2987'.
[  285.349334][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2987'.
[  285.400346][T17024] lo speed is unknown, defaulting to 1000
[  285.542636][T17029] lo speed is unknown, defaulting to 1000
[  285.691585][T17034] netlink: 'syz.0.2987': attribute type 6 has an invalid length.
[  285.920792][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2988'.
[  285.933558][T17039] netlink: 'syz.1.2988': attribute type 4 has an invalid length.
[  285.936275][T17039] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2988'.
[  285.972519][T17041] netlink: 'syz.1.2989': attribute type 6 has an invalid length.
[  285.975382][T17041] netlink: 'syz.1.2989': attribute type 25 has an invalid length.
[  285.977995][T17041] netlink: 'syz.1.2989': attribute type 27 has an invalid length.
[  285.980652][T17041] netlink: 'syz.1.2989': attribute type 28 has an invalid length.
[  285.987210][T17041] netlink: 'syz.1.2989': attribute type 29 has an invalid length.
[  285.990016][T17041] netlink: 'syz.1.2989': attribute type 30 has an invalid length.
[  286.028785][T17042] batman_adv: batadv0: Adding interface: ip6gretap2
[  286.032178][T17042] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  286.046542][T17042] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  286.220448][T17060] netlink: 'syz.2.2993': attribute type 13 has an invalid length.
[  286.235619][T17060] netlink: 'syz.2.2993': attribute type 17 has an invalid length.
[  286.296588][T17060] 8021q: adding VLAN 0 to HW filter on device 
[  286.307264][T17060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.695792][T17094] lo speed is unknown, defaulting to 1000
[  286.932269][T17107] netlink: 'syz.2.3007': attribute type 4 has an invalid length.
[  287.139077][T17124] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  287.291367][T17132] pim6reg1: entered promiscuous mode
[  287.293567][T17132] pim6reg1: entered allmulticast mode
[  287.366835][T17137] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  287.370579][T17136] IPVS: stopping backup sync thread 17137 ...
[  287.475486][T17140] vxcan1: entered allmulticast mode
[  287.481642][T17141] vxcan3: entered allmulticast mode
[  287.737584][T17146] lo speed is unknown, defaulting to 1000
[  287.870201][   T33] audit: type=1800 audit(1758475102.698:8): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3013" name="cgroup.controllers" dev="tmpfs" ino=4886 res=0 errno=0
[  288.221063][T17161] lo speed is unknown, defaulting to 1000
[  288.245274][T17166] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  288.248745][T17164] IPVS: stopping backup sync thread 17166 ...
[  288.481890][T17181] syzkaller1: entered promiscuous mode
[  288.485492][T17181] syzkaller1: entered allmulticast mode
[  288.641068][T17205] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  288.646837][T17201] IPVS: stopping backup sync thread 17205 ...
[  288.766738][T17208] bond25: (slave vxcan5): The slave device specified does not support setting the MAC address
[  288.772282][T17208] bond25: (slave vxcan5): Error -95 calling set_mac_address
[  289.043997][T17236] __nla_validate_parse: 35 callbacks suppressed
[  289.044011][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'.
[  289.057036][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3040'.
[  289.081900][T17236] bond24: (slave bridge0): Releasing active interface
[  289.151029][T17240] 8021q: adding VLAN 0 to HW filter on device bond25
[  289.164146][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'.
[  289.371015][T17272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3045'.
[  289.448222][T17276] bond26: entered promiscuous mode
[  289.450579][T17276] 8021q: adding VLAN 0 to HW filter on device bond26
[  289.459448][T17276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'.
[  289.560752][T17276] 8021q: adding VLAN 0 to HW filter on device bond26
[  289.570485][T17276] bond26: (slave wireguard0): The slave device specified does not support setting the MAC address
[  289.577139][T17276] bond26: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  289.583040][T17276] bond26: (slave wireguard0): making interface the new active one
[  289.586196][T17276] wireguard0: entered promiscuous mode
[  289.588935][T17276] bond26: (slave wireguard0): Enslaving as an active interface with an up link
[  289.608915][T17280] team0: Device macvtap1 is already an upper device of the team interface
[  289.641529][T17285] lo speed is unknown, defaulting to 1000
[  289.641816][T17287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.653405][T17288] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  289.663009][T17288] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  289.670484][T17287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  290.313056][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3051'.
[  290.318069][T17295] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3051'.
[  291.107014][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3051'.
[  291.310332][T17309] validate_nla: 10 callbacks suppressed
[  291.310346][T17309] netlink: 'syz.0.3057': attribute type 1 has an invalid length.
[  291.381427][T17313] bond26: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  291.386377][T17313] bond26: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  291.391986][T17313] bond26: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  291.398146][T17313] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  291.505924][T17322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3059'.
[  291.541968][T17324] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3060'.
[  291.678236][T17339] netlink: 'syz.1.3065': attribute type 1 has an invalid length.
[  291.686483][T17343] netlink: 'syz.0.3066': attribute type 1 has an invalid length.
[  291.721248][T17343] bond27: (slave geneve5): making interface the new active one
[  291.726664][T17343] bond27: (slave geneve5): Enslaving as an active interface with an up link
[  291.730261][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  291.742700][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  291.746567][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  291.749575][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  292.999257][T17439] dvmrp1: tun_chr_ioctl cmd 1074025677
[  293.001807][T17439] dvmrp1: linktype set to 773
[  293.080022][T17443] netlink: 'syz.1.3081': attribute type 1 has an invalid length.
[  293.083481][T17443] netlink: 'syz.1.3081': attribute type 1 has an invalid length.
[  293.192129][T17443] netlink: 'syz.1.3081': attribute type 1 has an invalid length.
[  293.192164][T17446] netlink: 'syz.1.3081': attribute type 1 has an invalid length.
[  293.209124][T17443] 8021q: adding VLAN 0 to HW filter on device bond26
[  293.216366][T17443] vlan1: entered allmulticast mode
[  293.539745][T17465] netlink: 'syz.1.3087': attribute type 1 has an invalid length.
[  293.568143][T17465] 8021q: adding VLAN 0 to HW filter on device bond27
[  293.582092][T17465] bond27: (slave gretap5): making interface the new active one
[  293.586537][T17465] bond27: (slave gretap5): Enslaving as an active interface with an up link
[  293.730323][T17477] sctp: [Deprecated]: syz.0.3092 (pid 17477) Use of struct sctp_assoc_value in delayed_ack socket option.
[  293.730323][T17477] Use struct sctp_sack_info instead
[  293.741858][T17477] geneve0: entered promiscuous mode
[  293.835809][T17486] netlink: 'syz.0.3096': attribute type 1 has an invalid length.
[  293.860395][T17486] : renamed from bond_slave_0
[  293.909184][T17491] veth7: entered promiscuous mode
[  294.102117][T17502] __nla_validate_parse: 143 callbacks suppressed
[  294.102135][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'.
[  294.319156][T17512] netlink: 'syz.1.3103': attribute type 1 has an invalid length.
[  294.322524][T17512] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.3103'.
[  294.370626][T17514] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3104'.
[  294.447270][T17515] lo speed is unknown, defaulting to 1000
[  294.750124][T17523] lo speed is unknown, defaulting to 1000
[  294.794392][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'.
[  294.821218][T17526] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3107'.
[  295.760750][T17541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3109'.
[  295.785041][T17541] geneve0: left promiscuous mode
[  295.790802][T17541] team0: Port device geneve0 added
[  295.801491][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  295.806484][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  295.809913][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  295.817078][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  295.827413][T17541] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  295.941229][T17547] lo speed is unknown, defaulting to 1000
[  296.097698][T17548] lo speed is unknown, defaulting to 1000
[  296.361611][T17553] validate_nla: 3 callbacks suppressed
[  296.361625][T17553] netlink: 'syz.1.3111': attribute type 6 has an invalid length.
[  296.829326][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'.
[  296.833921][T17573] netlink: 'syz.0.3117': attribute type 2 has an invalid length.
[  296.949927][T17582] IPVS: stopping backup sync thread 17586 ...
[  296.977865][T17587] netlink: 'syz.0.3121': attribute type 1 has an invalid length.
[  296.993189][T17587] netlink: 'syz.0.3121': attribute type 1 has an invalid length.
[  297.002000][T17587] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3121'.
[  297.018796][T17587] netlink: 'syz.0.3121': attribute type 1 has an invalid length.
[  297.022318][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'.
[  297.212875][T17600] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.216054][T17589] netlink: 'syz.1.3122': attribute type 1 has an invalid length.
[  297.220990][T17589] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3122'.
[  297.257518][T17602] netlink: 'syz.1.3126': attribute type 1 has an invalid length.
[  297.280084][T17602] 8021q: adding VLAN 0 to HW filter on device bond28
[  297.300274][T17606] lo speed is unknown, defaulting to 1000
[  297.818206][T17629] openvswitch: netlink: Missing key (keys=40, expected=80)
[  297.966177][T17640] netlink: 'syz.0.3135': attribute type 5 has an invalid length.
[  297.994762][T17642] netlink: 'syz.0.3136': attribute type 2 has an invalid length.
[  298.047331][T17646] netlink: 'syz.0.3137': attribute type 14 has an invalid length.
[  298.440587][T17665] (unnamed net_device) (uninitialized): down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  298.451800][T17665] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  298.512010][T17669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.535516][T17669] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  298.539104][T17669] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  298.561267][T17669] tipc: Resetting bearer <eth:syzkaller0>
[  298.567844][T17669] nbd: must specify a size in bytes for the device
[  298.580389][T17675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.729154][T17690] netlink: 'syz.2.3152': attribute type 11 has an invalid length.
[  298.746745][T17688] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.018785][T17714] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  299.028436][T17714] openvswitch: netlink: Duplicate or invalid key (type 0).
[  299.030890][T17714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.072507][T17720] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  299.080982][T17719] IPVS: stopping backup sync thread 17720 ...
[  299.119947][T17723] __nla_validate_parse: 18 callbacks suppressed
[  299.119957][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3161'.
[  299.127351][T17725] IPVS: stopping backup sync thread 17726 ...
[  299.128655][T17726] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  299.199576][T17729] lo speed is unknown, defaulting to 1000
[  299.337471][T17727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3163'.
[  299.395303][T17731] lo speed is unknown, defaulting to 1000
[  299.543306][  T790] tipc: Node number set to 332347550
[  299.932323][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'.
[  300.044907][T17746] lo speed is unknown, defaulting to 1000
[  300.155260][T17755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3172'.
[  300.199234][T17753] lo speed is unknown, defaulting to 1000
[  300.206107][T17758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3173'.
[  300.210308][T17758] unsupported nlmsg_type 40
[  300.419809][T17768] IPVS: Unknown mcast interface: veth0_vlan
[  300.498786][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'.
[  300.529075][T17770] syzkaller1: entered promiscuous mode
[  300.532030][T17770] syzkaller1: entered allmulticast mode
[  300.561394][T17772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3177'.
[  300.598471][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'.
[  300.602005][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3176'.
[  300.690240][T17776] lo speed is unknown, defaulting to 1000
[  300.923478][   T24] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec
[  301.069121][T17792] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.081117][T17792] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3183'.
[  301.284965][T17805] geneve6: entered promiscuous mode
[  301.583376][T17827] validate_nla: 5 callbacks suppressed
[  301.583386][T17827] netlink: 'syz.2.3193': attribute type 30 has an invalid length.
[  301.671400][T17834] bond29: entered promiscuous mode
[  301.673983][T17834] 8021q: adding VLAN 0 to HW filter on device bond29
[  301.731667][T17841] bridge8: entered allmulticast mode
[  301.746192][T17842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  302.734414][T17890] lo speed is unknown, defaulting to 1000
[  303.190375][T17904] erspan0: left allmulticast mode
[  303.192924][T17904] batadv0: left promiscuous mode
[  303.215639][T17904] veth0_to_bridge: left promiscuous mode
[  303.225152][T17904] mac80211_hwsim hwsim21 wlan1: left allmulticast mode
[  303.246437][T17904] veth5: left promiscuous mode
[  303.250416][T17904] bond23: left promiscuous mode
[  303.252924][T17904] bond23: left allmulticast mode
[  303.258606][T17904] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  303.261130][T17904] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  303.268231][T17904] veth7: left promiscuous mode
[  303.270865][T17904] geneve6: left promiscuous mode
[  303.280736][T17904] bond29: left promiscuous mode
[  303.285522][ T5862] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.289007][ T5862] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  303.296752][ T5862] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.299547][ T5862] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  303.302303][ T5862] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.308730][ T5862] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  303.312327][ T5862] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  303.316855][ T5862] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  303.617296][T17941] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  303.617417][T17940] IPVS: stopping backup sync thread 17941 ...
[  303.735144][T17949] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  303.739070][T17948] IPVS: stopping backup sync thread 17949 ...
[  304.020002][T17971] netlink: 'syz.0.3236': attribute type 1 has an invalid length.
[  304.045356][T17971] 8021q: adding VLAN 0 to HW filter on device bond30
[  304.080458][T17971] bond30: (slave veth9): Enslaving as an active interface with a down link
[  304.098429][T17973] lo speed is unknown, defaulting to 1000
[  304.430085][T18003] __nla_validate_parse: 21 callbacks suppressed
[  304.430095][T18003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3242'.
[  304.438389][T18003] netlink: 'syz.0.3242': attribute type 4 has an invalid length.
[  304.443002][T18003] netlink: 'syz.0.3242': attribute type 4 has an invalid length.
[  304.449946][   T24] lo speed is unknown, defaulting to 1000
[  304.451903][   T24] syz1: Port: 1 Link ACTIVE
[  304.453779][   T24] lo speed is unknown, defaulting to 1000
[  304.542309][T18005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'.
[  304.546445][T18005] ip6_vti0: Master is either lo or non-ether device
[  304.816385][T18008] netlink: 'syz.1.3244': attribute type 2 has an invalid length.
[  305.148269][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'.
[  305.401471][T18044] lo speed is unknown, defaulting to 1000
[  305.479994][T18047] 8021q: adding VLAN 0 to HW filter on device bond28
[  305.485170][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'.
[  305.522301][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3259'.
[  305.583340][T18059] lo speed is unknown, defaulting to 1000
[  305.940613][T18068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'.
[  306.017494][T18064] netlink: 'syz.1.3260': attribute type 6 has an invalid length.
[  306.036033][T18071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3262'.
[  306.132177][T18072] lo speed is unknown, defaulting to 1000
[  306.690317][T18084] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  306.691542][T18083] IPVS: stopping backup sync thread 18084 ...
[  306.697175][T18083] netlink: 'syz.1.3266': attribute type 32 has an invalid length.
[  306.700593][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'.
[  306.708416][T18083] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  306.920251][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'.
[  306.939538][T14542] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.942536][T14542] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.944829][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3271'.
[  306.949726][T14542] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.959090][T18111] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  306.967451][T14542] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.124789][T18125] netlink: 'syz.2.3276': attribute type 5 has an invalid length.
[  307.171866][T18129] lo speed is unknown, defaulting to 1000
[  307.331600][T18145] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  307.331651][T18144] IPVS: stopping backup sync thread 18145 ...
[  307.454918][T18152] netlink: 'syz.0.3285': attribute type 1 has an invalid length.
[  307.480695][T18152] 8021q: adding VLAN 0 to HW filter on device bond31
[  307.704334][T18173] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  307.707228][T18173] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  307.752131][T18184] netlink: 'syz.2.3294': attribute type 10 has an invalid length.
[  308.035959][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.325300][T18231] bridge9: entered promiscuous mode
[  308.328027][T18231] bridge9: entered allmulticast mode
[  308.332350][T18231] team0: Port device bridge9 added
[  308.617086][T18245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  308.621254][T18244] IPVS: stopping backup sync thread 18245 ...
[  308.730252][T18253] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  308.785032][T18254] syzkaller1: entered promiscuous mode
[  308.787813][T18254] syzkaller1: entered allmulticast mode
[  308.791968][T18254] nbd: nbd0 already in use
[  309.127723][T18279] lo speed is unknown, defaulting to 1000
[  309.854904][T18291] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  309.858093][T18291] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  309.861624][T18293] netem: change failed
[  309.985186][T18307] __nla_validate_parse: 13 callbacks suppressed
[  309.985196][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3323'.
[  309.990816][T18307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'.
[  309.996584][T18307] netlink: 'syz.0.3323': attribute type 1 has an invalid length.
[  310.004494][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'.
[  310.271319][T18330] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  310.275199][T18328] IPVS: stopping backup sync thread 18330 ...
[  310.306394][T18311] lo speed is unknown, defaulting to 1000
[  310.334947][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3329'.
[  310.390295][T18343] netlink: 'syz.0.3331': attribute type 10 has an invalid length.
[  310.448211][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'.
[  310.965824][T18365] netlink: 360 bytes leftover after parsing attributes in process `syz.2.3335'.
[  310.992518][T18367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'.
[  311.049047][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  311.074322][T18369] tipc: Resetting bearer <eth:syzkaller0>
[  311.079949][T18371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3339'.
[  311.200322][T18377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3341'.
[  311.202712][T18379] IPVS: stopping backup sync thread 18253 ...
[  311.223037][T18379] tap0: tun_chr_ioctl cmd 1074025677
[  311.226786][T18379] tap0: linktype set to 270
[  311.490307][T18399] 8021q: adding VLAN 0 to HW filter on device bond30
[  311.508764][T18399] macvlan0: entered promiscuous mode
[  311.510886][T18399] macvlan0: entered allmulticast mode
[  311.514152][T18399] bond30: entered promiscuous mode
[  311.516663][T18399] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  311.522545][T18399] bond30: left promiscuous mode
[  311.634303][T18414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.218074][T18455] 8021q: adding VLAN 0 to HW filter on device bond29
[  312.252521][T18453] lo speed is unknown, defaulting to 1000
[  312.608858][T18462] netlink: 'syz.1.3365': attribute type 6 has an invalid length.
[  312.648947][T18490] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  312.654693][T18489] IPVS: stopping backup sync thread 18490 ...
[  312.737124][T18504] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  312.737138][T18502] IPVS: stopping backup sync thread 18504 ...
[  312.783807][T18501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.787610][T18501] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  312.790151][T18501] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  312.817500][T18507] netlink: 'syz.0.3380': attribute type 1 has an invalid length.
[  312.832152][T18511] netlink: 'syz.2.3381': attribute type 2 has an invalid length.
[  312.921859][T18519] sctp: [Deprecated]: syz.2.3384 (pid 18519) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.921859][T18519] Use struct sctp_sack_info instead
[  312.963670][T18516] lo speed is unknown, defaulting to 1000
[  313.035738][T18525] gretap6: entered allmulticast mode
[  313.129079][T18527] lo speed is unknown, defaulting to 1000
[  314.105302][T18541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  314.363036][T18552] vlan1: entered promiscuous mode
[  314.365546][T18552] hsr_slave_1: entered promiscuous mode
[  314.368305][T18552] vlan1: entered allmulticast mode
[  314.370607][T18552] hsr_slave_1: entered allmulticast mode
[  314.460356][T18558] bridge0: entered allmulticast mode
[  314.654695][T18573] lo speed is unknown, defaulting to 1000
[  315.171941][T18581] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004
[  315.315339][T18587] __nla_validate_parse: 16 callbacks suppressed
[  315.315355][T18587] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3404'.
[  315.328675][T18587] batadv2: entered promiscuous mode
[  315.330971][T18587] batadv2: entered allmulticast mode
[  315.392799][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3405'.
[  315.432695][T18602] IPVS: stopping backup sync thread 18603 ...
[  315.434910][T18603] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  316.146550][T18617] netlink: 'syz.0.3412': attribute type 12 has an invalid length.
[  316.149137][T18617] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3412'.
[  316.221878][T18626] netlink: 'syz.0.3415': attribute type 13 has an invalid length.
[  316.226864][T18626] netlink: 'syz.0.3415': attribute type 17 has an invalid length.
[  316.241080][T18626] gretap0: refused to change device tx_queue_len
[  316.244266][T18626] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  316.263033][T18628] vxcan4: entered promiscuous mode
[  316.586517][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'.
[  316.628052][T18654] lo speed is unknown, defaulting to 1000
[  316.991847][T18683] syz.1.3427: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  316.999188][T18683] CPU: 1 UID: 0 PID: 18683 Comm: syz.1.3427 Not tainted syzkaller #0 PREEMPT(full) 
[  316.999199][T18683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.999204][T18683] Call Trace:
[  316.999207][T18683]  <TASK>
[  316.999211][T18683]  dump_stack_lvl+0x189/0x250
[  316.999225][T18683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  316.999234][T18683]  ? __pfx__printk+0x10/0x10
[  316.999244][T18683]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  316.999253][T18683]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  316.999262][T18683]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  316.999272][T18683]  warn_alloc+0x214/0x310
[  316.999286][T18683]  ? __pfx_warn_alloc+0x10/0x10
[  316.999301][T18683]  ? __get_vm_area_node+0x28f/0x300
[  316.999311][T18683]  ? xskq_create+0xbf/0x170
[  316.999320][T18683]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  316.999342][T18683]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  316.999356][T18683]  ? __kasan_kmalloc+0x93/0xb0
[  316.999388][T18683]  vmalloc_user_noprof+0xad/0xf0
[  316.999400][T18683]  ? xskq_create+0xbf/0x170
[  316.999407][T18683]  xskq_create+0xbf/0x170
[  316.999415][T18683]  xsk_init_queue+0xb0/0x110
[  316.999424][T18683]  xsk_setsockopt+0x57b/0x8d0
[  316.999435][T18683]  ? __pfx_xsk_setsockopt+0x10/0x10
[  316.999446][T18683]  ? __pfx_aa_sk_perm+0x10/0x10
[  316.999459][T18683]  ? __fget_files+0x2a/0x420
[  316.999465][T18683]  ? aa_sock_opt_perm+0xff/0x1b0
[  316.999474][T18683]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  316.999483][T18683]  ? __pfx_xsk_setsockopt+0x10/0x10
[  316.999494][T18683]  do_sock_setsockopt+0x17c/0x1b0
[  316.999505][T18683]  __x64_sys_setsockopt+0x13f/0x1b0
[  316.999516][T18683]  do_syscall_64+0xfa/0x3b0
[  316.999525][T18683]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.999532][T18683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.999539][T18683]  ? exc_page_fault+0x9f/0xf0
[  316.999547][T18683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.999554][T18683] RIP: 0033:0x7f09c938eba9
[  316.999561][T18683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  316.999568][T18683] RSP: 002b:00007f09ca2a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  316.999576][T18683] RAX: ffffffffffffffda RBX: 00007f09c95d6180 RCX: 00007f09c938eba9
[  316.999581][T18683] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  316.999586][T18683] RBP: 00007f09c9411e19 R08: 0000000000000004 R09: 0000000000000000
[  316.999591][T18683] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  316.999595][T18683] R13: 00007f09c95d6218 R14: 00007f09c95d6180 R15: 00007ffeee3baaf8
[  316.999606][T18683]  </TASK>
[  316.999609][T18683] Mem-Info:
[  317.007900][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.015985][T18683] active_anon:5847 inactive_anon:0 isolated_anon:0
[  317.015985][T18683]  active_file:1499 inactive_file:38338 isolated_file:0
[  317.015985][T18683]  unevictable:1768 dirty:58 writeback:0
[  317.015985][T18683]  slab_reclaimable:11014 slab_unreclaimable:147179
[  317.015985][T18683]  mapped:18395 shmem:2441 pagetables:980
[  317.015985][T18683]  sec_pagetables:0 bounce:0
[  317.015985][T18683]  kernel_misc_reclaimable:0
[  317.015985][T18683]  free:187043 free_pcp:26307 free_cma:0
[  317.122251][T18683] Node 0 active_anon:14972kB inactive_anon:0kB active_file:5012kB inactive_file:135360kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28020kB dirty:208kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6732kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.147879][T18683] Node 1 active_anon:8416kB inactive_anon:0kB active_file:984kB inactive_file:17992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45560kB dirty:24kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8564kB pagetables:1580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  317.158946][T18683] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  317.171573][T18683] lowmem_reserve[]: 0 811 811 811 811
[  317.176990][T18683] Node 0 DMA32 free:206376kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14972kB inactive_anon:0kB active_file:5012kB inactive_file:135360kB unevictable:3536kB writepending:208kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:58760kB local_pcp:45260kB free_cma:0kB
[  317.189650][T18683] lowmem_reserve[]: 0 0 0 0 0
[  317.191261][T18683] Node 1 DMA32 free:449660kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8888kB local_pcp:260kB free_cma:0kB
[  317.202866][T18683] lowmem_reserve[]: 0 0 854 854 854
[  317.205672][T18683] Node 1 Normal free:76776kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8416kB inactive_anon:0kB active_file:984kB inactive_file:17992kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37868kB local_pcp:21596kB free_cma:0kB
[  317.216962][T18683] lowmem_reserve[]: 0 0 0 0 0
[  317.218474][T18683] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  317.223279][T18683] Node 0 DMA32: 4*4kB (UE) 312*8kB (UE) 598*16kB (UM) 28*32kB (UME) 112*64kB (UME) 79*128kB (UME) 38*256kB (UME) 17*512kB (UME) 8*1024kB (UM) 5*2048kB (UM) 34*4096kB (UM) = 206384kB
[  317.229021][T18683] Node 1 DMA32: 5*4kB (UM) 7*8kB (UM) 11*16kB (UME) 6*32kB (UM) 7*64kB (UM) 6*128kB (UME) 8*256kB (UME) 7*512kB (UME) 4*1024kB (UME) 2*2048kB (ME) 106*4096kB (UM) = 449660kB
[  317.235032][T18683] Node 1 Normal: 1402*4kB (UME) 346*8kB (UME) 169*16kB (UME) 159*32kB (UME) 111*64kB (UM) 56*128kB (UM) 33*256kB (UM) 10*512kB (UM) 8*1024kB (UM) 4*2048kB (ME) 4*4096kB (U) = 76776kB
[  317.240755][T18683] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.244299][T18683] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  317.247607][T18683] 42278 total pagecache pages
[  317.249212][T18683] 0 pages in swap cache
[  317.250563][T18683] Free swap  = 124996kB
[  317.251879][T18683] Total swap = 124996kB
[  317.253394][T18683] 786301 pages RAM
[  317.254950][T18683] 0 pages HighMem/MovableOnly
[  317.256725][T18683] 241346 pages reserved
[  317.258244][T18683] 0 pages cma reserved
[  317.466775][T18704] lo speed is unknown, defaulting to 1000
[  317.556428][T18710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3436'.
[  317.650621][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'.
[  317.665495][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3436'.
[  318.614297][T18732] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  318.618660][T18731] IPVS: stopping backup sync thread 18732 ...
[  318.682872][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'.
[  318.723086][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3442'.
[  318.831121][T18744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3445'.
[  318.981290][T18751] lo speed is unknown, defaulting to 1000
[  319.566981][T18794] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  319.571144][T18793] IPVS: stopping backup sync thread 18794 ...
[  319.622137][T18799] openvswitch: netlink: Multiple metadata blocks provided
[  319.940207][T18824] netlink: 'syz.1.3463': attribute type 20 has an invalid length.
[  319.943595][T18824] netlink: 'syz.1.3463': attribute type 20 has an invalid length.
[  320.036822][T18832] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.041073][T18831] IPVS: stopping backup sync thread 18832 ...
[  320.627472][T18880] netlink: 'syz.2.3474': attribute type 1 has an invalid length.
[  320.675326][T18880] bond30: (slave vxcan5): The slave device specified does not support setting the MAC address
[  320.682318][T18880] bond30: (slave vxcan5): Error -95 calling set_mac_address
[  320.694805][T18886] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.699844][T18885] IPVS: stopping backup sync thread 18886 ...
[  320.721877][T18890] netlink: 'syz.2.3474': attribute type 14 has an invalid length.
[  320.730887][T18880] macvlan3: entered promiscuous mode
[  320.733033][T18880] macvlan3: entered allmulticast mode
[  320.736759][T18880] bond30: entered promiscuous mode
[  320.738886][T18880] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  320.747477][T18880] bond30: left promiscuous mode
[  320.768988][T18885] __nla_validate_parse: 12 callbacks suppressed
[  320.769003][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'.
[  320.810865][T18896] netlink: 'syz.1.3479': attribute type 1 has an invalid length.
[  320.817878][T18894] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3478'.
[  320.822040][T18894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'.
[  320.856936][T18901] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.856949][T18898] IPVS: stopping backup sync thread 18901 ...
[  321.025724][T18915] netlink: 'syz.0.3485': attribute type 9 has an invalid length.
[  321.078642][T18924] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  321.082979][T18923] IPVS: stopping backup sync thread 18924 ...
[  321.114867][T18929] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  321.192870][T18932] lo speed is unknown, defaulting to 1000
[  321.292257][T18945] netlink: 'syz.1.3491': attribute type 1 has an invalid length.
[  321.477028][T18949] lo speed is unknown, defaulting to 1000
[  321.933069][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3495'.
[  321.972369][T18960] netlink: 'syz.2.3496': attribute type 1 has an invalid length.
[  321.990301][T18957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3495'.
[  321.994622][T18957] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3495'.
[  322.051707][T18964] netlink: 'syz.2.3497': attribute type 1 has an invalid length.
[  322.126223][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'.
[  322.438165][T18976] netlink: 'syz.1.3499': attribute type 1 has an invalid length.
[  322.535635][T18981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'.
[  322.635451][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3502'.
[  322.703355][T18988] 8021q: adding VLAN 0 to HW filter on device bond31
[  322.844395][T18962] delete_channel: no stack
[  322.847942][T18964] delete_channel: no stack
[  322.958827][T19008] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3507'.
[  322.982276][T19009] lo speed is unknown, defaulting to 1000
[  323.067723][T19015] bond33 (unregistering): Released all slaves
[  323.097027][T19019] bridge0 (unregistering): left allmulticast mode
[  323.201986][T19015] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  323.315925][T19036] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.633086][T19065] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  323.641155][T19064] IPVS: stopping backup sync thread 19065 ...
[  323.657996][T19068] lo speed is unknown, defaulting to 1000
[  324.021840][T19105] xt_l2tp: invalid flags combination: 0
[  324.547662][T19149] syzkaller1: entered promiscuous mode
[  324.549595][T19149] syzkaller1: entered allmulticast mode
[  324.792983][T19181] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  324.808465][T19184] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  324.812740][T19183] IPVS: stopping backup sync thread 19184 ...
[  324.836786][T19187] veth1_to_team: entered promiscuous mode
[  324.838674][T19187] veth1_to_team: entered allmulticast mode
[  325.059155][T19216] lo speed is unknown, defaulting to 1000
[  325.267568][T19226] lo speed is unknown, defaulting to 1000
[  325.390314][T19235] validate_nla: 2 callbacks suppressed
[  325.390329][T19235] netlink: 'syz.1.3569': attribute type 11 has an invalid length.
[  325.645638][T19248] can: request_module (can-proto-0) failed.
[  325.821000][T19262] __nla_validate_parse: 18 callbacks suppressed
[  325.821010][T19262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3576'.
[  325.849273][T19263] netlink: 'syz.1.3577': attribute type 1 has an invalid length.
[  325.851902][T19263] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3577'.
[  325.883594][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3578'.
[  325.908182][T19273] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  325.912457][T19271] IPVS: stopping backup sync thread 19273 ...
[  325.970119][T19279] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.024946][T19279] tipc: Resetting bearer <eth:syzkaller0>
[  326.037221][T19279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'.
[  326.082724][T19287] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  326.162570][T19292] netlink: 'syz.2.3587': attribute type 1 has an invalid length.
[  326.164631][T19294] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  326.186800][T19294] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  326.228776][T19298] bond31: entered promiscuous mode
[  326.232686][T19298] bond31: entered allmulticast mode
[  326.241643][T19298] 8021q: adding VLAN 0 to HW filter on device bond31
[  326.273488][T19292] A link change request failed with some changes committed already. Interface bond31 may have been left with an inconsistent configuration, please check.
[  326.372091][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'.
[  326.437141][T19314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3593'.
[  326.448263][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3591'.
[  326.470111][T19315] veth1_to_team: left promiscuous mode
[  326.473342][T19315] veth1_to_team: left allmulticast mode
[  326.486234][T19315] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  326.489308][T19315] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  326.489836][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3594'.
[  326.493716][T19315] vxcan1: left allmulticast mode
[  326.497763][T19315] vxcan3: left allmulticast mode
[  326.500314][T19315] bond26: left promiscuous mode
[  326.502333][T19315] wireguard0: left promiscuous mode
[  326.508510][T19315] bridge8: left allmulticast mode
[  326.530053][T19315] bond31: left promiscuous mode
[  326.532143][T19315] bond31: left allmulticast mode
[  326.536077][ T5855] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.542386][ T5855] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.553967][ T5855] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.562416][ T5855] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  326.579807][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'.
[  326.611474][T19327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.646326][T19332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3598'.
[  326.754968][T19340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.941473][T19360] lo speed is unknown, defaulting to 1000
[  327.401623][T19377] 8021q: adding VLAN 0 to HW filter on device team0
[  327.407191][T19377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  327.500063][T19391] netlink: zone id is out of range
[  327.502164][T19391] netlink: zone id is out of range
[  327.528666][T19391] netlink: zone id is out of range
[  327.532590][T19391] netlink: zone id is out of range
[  327.536253][T19391] netlink: zone id is out of range
[  327.538460][T19391] netlink: zone id is out of range
[  327.540827][T19391] netlink: zone id is out of range
[  327.543035][T19391] netlink: zone id is out of range
[  327.554289][T19393] netlink: 'syz.2.3613': attribute type 6 has an invalid length.
[  327.617060][T19399] TCP: TCP_TX_DELAY enabled
[  327.619894][T19399] netlink: 'syz.1.3617': attribute type 11 has an invalid length.
[  327.676402][T19407] netlink: 'syz.1.3619': attribute type 1 has an invalid length.
[  327.760761][T19412] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  327.939806][T19430] geneve6: entered promiscuous mode
[  327.941920][T19430] geneve6: entered allmulticast mode
[  327.946282][ T5862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 58211 - 0
[  327.949704][ T5862] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 54551 - 0
[  327.966559][ T5855] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 58211 - 0
[  327.969555][ T5855] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 54551 - 0
[  327.975214][ T5862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 58211 - 0
[  327.981434][ T5862] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 54551 - 0
[  327.985852][ T5862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 58211 - 0
[  327.989051][ T5862] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 54551 - 0
[  329.796888][T19524] tipc: Resetting bearer <eth:syzkaller0>
[  329.799096][T19524] tipc: Resetting bearer <eth:syzkaller0>
[  329.885149][T19529] lo speed is unknown, defaulting to 1000
[  330.321974][T19537] batadv_slave_1: entered promiscuous mode
[  330.335017][T19538] batadv_slave_1: left promiscuous mode
[  330.420669][T19542] netlink: 'syz.0.3652': attribute type 39 has an invalid length.
[  331.142916][T19578] dvmrp0: entered allmulticast mode
[  331.184030][T19580] __nla_validate_parse: 23 callbacks suppressed
[  331.184045][T19580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3662'.
[  331.206345][T19580] bridge0: entered allmulticast mode
[  331.599835][T19598] bond26: (slave wireguard0): Releasing backup interface
[  331.732565][T19604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3669'.
[  331.781327][T19611] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.785019][T19611] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  331.787919][T19611] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  331.898589][T19624] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3677'.
[  331.932710][T19627] lo speed is unknown, defaulting to 1000
[  331.973901][T19630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3678'.
[  331.983317][T19630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3678'.
[  332.003778][T19628] block nbd1: server does not support multiple connections per device.
[  332.017594][T19628] block nbd1: shutting down sockets
[  332.054283][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'.
[  332.215087][T19645] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3682'.
[  332.217023][T19646] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3682'.
[  332.246519][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'.
[  332.411266][T19658] netlink: 'syz.1.3685': attribute type 1 has an invalid length.
[  332.512144][T19675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3692'.
[  332.523037][T19673] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  332.610756][T19679] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004
[  332.794478][T19689] IPVS: stopping backup sync thread 19691 ...
[  332.833705][T19695] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  332.836852][T19695] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  332.851525][T19695] geneve6: left promiscuous mode
[  332.861838][T19695] geneve6: left allmulticast mode
[  332.867406][T19695] bridge0: left allmulticast mode
[  332.872606][ T5862] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 58211 - 0
[  332.884079][ T5862] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 54551 - 0
[  332.890062][ T5862] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 58211 - 0
[  332.900276][ T5862] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 54551 - 0
[  332.910434][ T5862] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 58211 - 0
[  332.915858][ T5862] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 54551 - 0
[  332.919364][ T5862] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 58211 - 0
[  332.930751][ T5862] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 54551 - 0
[  333.013078][T19710] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  333.018866][T19708] IPVS: stopping backup sync thread 19710 ...
[  333.080694][T19717] syzkaller1: entered promiscuous mode
[  333.083068][T19717] syzkaller1: entered allmulticast mode
[  333.119896][T19722] pim6reg: left allmulticast mode
[  333.158113][T19724] net_ratelimit: 12 callbacks suppressed
[  333.158231][T19724] openvswitch: netlink: Flow key attribute not present in set flow.
[  333.167460][T19724] netlink: 'syz.1.3705': attribute type 1 has an invalid length.
[  333.218120][T19724] vlan1: entered allmulticast mode
[  333.220449][T19724] bond32: entered allmulticast mode
[  333.340684][T19734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.380146][T19736] lo speed is unknown, defaulting to 1000
[  333.511001][T19738] lo speed is unknown, defaulting to 1000
[  333.998157][T19759] lo speed is unknown, defaulting to 1000
[  334.285709][T19765] netlink: 'syz.0.3715': attribute type 2 has an invalid length.
[  334.458007][T19770] lo speed is unknown, defaulting to 1000
[  335.898421][   T24] lo speed is unknown, defaulting to 1000
[  335.900783][   T24] syz1: Port: 1 Link DOWN
[  335.902623][   T24] lo speed is unknown, defaulting to 1000
[  336.014867][T19804] lo speed is unknown, defaulting to 1000
[  336.077467][T19811] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  336.083492][T19810] IPVS: stopping backup sync thread 19811 ...
[  336.131056][T19814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.135092][T19814] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  336.138443][T19814] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  336.190745][T19816] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  336.217891][T19816] __nla_validate_parse: 18 callbacks suppressed
[  336.217905][T19816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3732'.
[  336.258687][T19823] netlink: 'syz.2.3734': attribute type 1 has an invalid length.
[  336.261526][T19822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3734'.
[  336.299499][T19823] 8021q: adding VLAN 0 to HW filter on device bond32
[  336.361786][T19834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3737'.
[  336.366880][T19837] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3736'.
[  336.381150][T19837] netlink: 'syz.1.3736': attribute type 1 has an invalid length.
[  336.532301][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'.
[  336.536588][T19850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'.
[  336.539560][T19850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'.
[  336.542772][T19850] netlink: 'syz.1.3741': attribute type 19 has an invalid length.
[  336.545705][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'.
[  336.549450][T19856] netlink: 'syz.1.3741': attribute type 19 has an invalid length.
[  336.756321][T19873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'.
[  336.762821][T19872] netlink: 'syz.1.3746': attribute type 13 has an invalid length.
[  336.901459][T19885] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.946509][T19872] tipc: Resetting bearer <eth:syzkaller0>
[  337.170769][T19900] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.227552][T19902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.294117][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3754'.
[  337.440011][T19917] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.447571][T19917] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  337.609608][T19924] ip6gre1: entered allmulticast mode
[  337.651013][T19927] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  337.811983][T19944] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.819538][T19942] IPVS: stopping backup sync thread 19944 ...
[  337.841457][T19943] netlink: 'syz.0.3767': attribute type 1 has an invalid length.
[  337.865383][T19943] 8021q: adding VLAN 0 to HW filter on device bond35
[  337.876464][T19943] bond35: (slave gretap6): making interface the new active one
[  337.880324][T19943] bond35: (slave gretap6): Enslaving as an active interface with an up link
[  337.889477][T19950] vti1: entered promiscuous mode
[  337.925487][T19960] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  337.977782][T19963] Bluetooth: hci0: Opcode 0x080f failed: -22
[  338.409830][T19991] IPVS: stopping backup sync thread 19960 ...
[  338.515663][T19995] lo speed is unknown, defaulting to 1000
[  338.752666][T20004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.794715][T20008] IPVS: stopping backup sync thread 20009 ...
[  338.796770][T20009] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  338.866577][T20016] 8021q: adding VLAN 0 to HW filter on device bond6
[  338.884244][T20016] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  338.889115][T20016] bond6: (slave macvlan3): Enslaving as a backup interface with a down link
[  338.897743][T20016] bond6: (slave macvlan3): Releasing backup interface
[  339.493977][T20061] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.539071][T20061] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  339.559416][T20061] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  339.704893][T20067] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  340.043876][   T54] Bluetooth: hci0: command tx timeout
[  340.051481][T20075] netlink: 'syz.0.3803': attribute type 2 has an invalid length.
[  340.219355][T20079] lo speed is unknown, defaulting to 1000
[  341.347523][T20106] __nla_validate_parse: 12 callbacks suppressed
[  341.347537][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'.
[  341.567994][T20117] lo speed is unknown, defaulting to 1000
[  341.568077][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'.
[  341.574564][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3812'.
[  341.578969][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'.
[  341.582429][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3812'.
[  341.750508][T20116] lo speed is unknown, defaulting to 1000
[  341.789162][T20130] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig
[  341.937254][T20141] bond36: entered promiscuous mode
[  341.939408][T20141] 8021q: adding VLAN 0 to HW filter on device bond36
[  341.984408][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'.
[  341.987677][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'.
[  342.001317][T20148] netlink: 'syz.1.3818': attribute type 13 has an invalid length.
[  342.011712][T20148] netlink: 'syz.1.3818': attribute type 12 has an invalid length.
[  342.189650][T20167] netlink: 'syz.1.3824': attribute type 1 has an invalid length.
[  342.251504][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3824'.
[  342.459813][T20178] lo speed is unknown, defaulting to 1000
[  343.277989][T20191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3830'.
[  343.489199][T20202] netlink: 'syz.0.3836': attribute type 6 has an invalid length.
[  343.493280][T20202] netlink: 'syz.0.3836': attribute type 6 has an invalid length.
[  343.578833][T20209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'.
[  343.752657][T20220] netlink: 'syz.0.3839': attribute type 9 has an invalid length.
[  343.787885][T20225] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  343.792362][T20220] IPVS: stopping backup sync thread 20225 ...
[  343.945790][T20242] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  343.950231][T20240] IPVS: stopping backup sync thread 20242 ...
[  344.142947][T20260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.488789][ T5862] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  344.494579][T14542] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  344.505738][T14542] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  344.512235][T14542] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  344.599569][T20287] netlink: 'syz.1.3854': attribute type 1 has an invalid length.
[  344.612149][T20285] lo speed is unknown, defaulting to 1000
[  345.595818][T20302] netlink: 'syz.2.3858': attribute type 15 has an invalid length.
[  345.604974][ T5862] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 256 - 0
[  345.608352][T20302] netlink: 'syz.2.3858': attribute type 15 has an invalid length.
[  345.611042][ T5862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 256 - 0
[  345.616609][ T5862] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 256 - 0
[  345.619853][ T5862] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 256 - 0
[  345.654069][T20306] bond0: mtu less than device minimum
[  345.681004][T20311] bridge0: entered promiscuous mode
[  345.685148][T20311] bridge0: port 1(macvlan4) entered blocking state
[  345.689611][T20311] bridge0: port 1(macvlan4) entered disabled state
[  345.695249][T20311] macvlan4: entered allmulticast mode
[  345.697171][T20311] bridge0: entered allmulticast mode
[  345.705692][T20311] macvlan4: left allmulticast mode
[  345.707783][T20311] bridge0: left allmulticast mode
[  345.714717][T20311] bridge0: left promiscuous mode
[  345.885239][T20331] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.891525][T20331] tipc: Resetting bearer <eth:syzkaller0>
[  346.167027][T20346] kthread_run failed with err -4
[  346.189046][T20342] lo speed is unknown, defaulting to 1000
[  346.200708][T20356] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  346.210573][T20355] IPVS: stopping backup sync thread 20356 ...
[  347.420135][T20371] __nla_validate_parse: 23 callbacks suppressed
[  347.420145][T20371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3875'.
[  347.460992][T20374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3876'.
[  347.554686][T20379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  347.581456][T20383] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3879'.
[  347.635863][T20390] IPVS: stopping backup sync thread 20393 ...
[  347.639967][T20390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3881'.
[  347.694935][T20397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3883'.
[  347.722522][T20401] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3885'.
[  347.726768][T20401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3885'.
[  347.764904][T20401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'.
[  347.809536][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'.
[  347.827419][T20416] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  347.830894][T20415] IPVS: stopping backup sync thread 20416 ...
[  347.869135][T20412] netlink: 'syz.1.3889': attribute type 10 has an invalid length.
[  347.882304][T20412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  347.886551][T20412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  347.981230][T20431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3893'.
[  348.525813][T20441] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  348.635309][T20453] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  348.776913][T20464] lo speed is unknown, defaulting to 1000
[  348.837772][T20469] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  348.842420][T20468] IPVS: stopping backup sync thread 20469 ...
[  348.945601][T20472] team0: No ports can be present during mode change
[  348.948672][T20472] tipc: Enabled bearer <eth:team0>, priority 0
[  349.059720][T20481] netlink: 'syz.0.3907': attribute type 10 has an invalid length.
[  349.332817][T20496] IPVS: Scheduler module ip_vs_sip not found
[  349.735785][T20519] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  349.738893][T20519] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  349.743671][T20519] vti1: left promiscuous mode
[  349.747843][ T5862] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 256 - 0
[  349.751200][ T5862] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 256 - 0
[  349.760149][ T5862] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 256 - 0
[  349.763845][ T5862] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 256 - 0
[  350.021133][T20527] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  350.028228][T20526] netlink: 'syz.1.3920': attribute type 29 has an invalid length.
[  350.032128][T20526] netlink: 'syz.1.3920': attribute type 29 has an invalid length.
[  350.546025][T20536] netlink: 'syz.0.3923': attribute type 4 has an invalid length.
[  350.556595][T20536] netlink: 'syz.0.3923': attribute type 4 has an invalid length.
[  350.562352][  T790] lo speed is unknown, defaulting to 1000
[  350.564854][  T790] syz1: Port: 1 Link ACTIVE
[  350.566749][  T790] lo speed is unknown, defaulting to 1000
[  350.711625][T20554] netlink: 'syz.0.3929': attribute type 30 has an invalid length.
[  350.820015][T20563] netlink: 'syz.2.3931': attribute type 1 has an invalid length.
[  350.985621][T20581] netlink: 'syz.2.3936': attribute type 9 has an invalid length.
[  350.988284][T20581] openvswitch: netlink: Message has 5 unknown bytes.
[  351.168432][T20597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.201996][T20599] netlink: 'syz.1.3942': attribute type 9 has an invalid length.
[  351.446865][T20627] IPVS: stopping backup sync thread 20527 ...
[  351.471351][T20624] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  351.617316][T20636] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  351.736708][T20641] bond37: entered promiscuous mode
[  351.738645][T20641] 8021q: adding VLAN 0 to HW filter on device bond37
[  351.750254][T20641] 8021q: adding VLAN 0 to HW filter on device bond37
[  351.752648][T20641] bond37: (slave vcan0): The slave device specified does not support setting the MAC address
[  351.756861][T20641] bond37: (slave vcan0): Error -95 calling set_mac_address
[  351.828899][T20653] dvmrp8: entered allmulticast mode
[  351.853562][T20653] lo speed is unknown, defaulting to 1000
[  352.003801][T20652] dvmrp8: left allmulticast mode
[  352.421364][T20669] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  352.487930][T20677] __nla_validate_parse: 24 callbacks suppressed
[  352.487944][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'.
[  352.518259][T20671] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.522603][T20671] 8021q: adding VLAN 0 to HW filter on device team0
[  352.529345][T20671] tipc: Resetting bearer <eth:team0>
[  352.531231][T20671] tipc: Resetting bearer <eth:team0>
[  352.535332][T20671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  352.602501][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3969'.
[  352.616919][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'.
[  352.626008][T20682] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  352.629187][T20682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.639715][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'.
[  352.686222][T20685] syzkaller1: entered promiscuous mode
[  352.688682][T20685] syzkaller1: entered allmulticast mode
[  352.711140][T20685] lo speed is unknown, defaulting to 1000
[  352.918515][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'.
[  352.925765][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'.
[  352.975663][T20699] IPVS: stopping backup sync thread 20453 ...
[  353.036516][T20701] validate_nla: 5 callbacks suppressed
[  353.036530][T20701] netlink: 'syz.0.3975': attribute type 4 has an invalid length.
[  353.053903][T20702] netlink: 'syz.0.3975': attribute type 4 has an invalid length.
[  353.057380][T20702] netlink: 'syz.0.3975': attribute type 4 has an invalid length.
[  353.066067][T20701] netlink: 'syz.0.3975': attribute type 4 has an invalid length.
[  353.077366][ T1278] lo speed is unknown, defaulting to 1000
[  353.079986][ T5893] lo speed is unknown, defaulting to 1000
[  353.083310][ T1278] lo speed is unknown, defaulting to 1000
[  353.096104][ T5893] lo speed is unknown, defaulting to 1000
[  353.098523][ T5893] syz1: Port: 1 Link DOWN
[  353.103466][ T5893] lo speed is unknown, defaulting to 1000
[  353.222598][T20714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3978'.
[  353.280228][T20715] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3978'.
[  353.299312][T20715] lo speed is unknown, defaulting to 1000
[  353.725652][T20748] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  353.728242][T20748] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  353.918230][T20770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.927655][ T5893] lo speed is unknown, defaulting to 1000
[  353.929910][ T5893] syz1: Port: 1 Link ACTIVE
[  353.931138][T20773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3996'.
[  353.931825][ T5893] lo speed is unknown, defaulting to 1000
[  354.001761][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'.
[  354.104333][T20786] netlink: 'syz.2.3999': attribute type 1 has an invalid length.
[  354.355564][T20808] netlink: 'syz.0.4005': attribute type 6 has an invalid length.
[  354.362377][T20808] netlink: 'syz.0.4005': attribute type 25 has an invalid length.
[  354.365069][T20808] netlink: 'syz.0.4005': attribute type 27 has an invalid length.
[  354.367560][T20808] netlink: 'syz.0.4005': attribute type 28 has an invalid length.
[  354.370145][T20808] netlink: 'syz.0.4005': attribute type 29 has an invalid length.
[  354.557569][T20830] lo speed is unknown, defaulting to 1000
[  354.768524][T20844] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  354.768887][T20843] IPVS: stopping backup sync thread 20844 ...
[  355.121085][T20864] lo speed is unknown, defaulting to 1000
[  355.280602][T20869] lo speed is unknown, defaulting to 1000
[  356.112742][T20899] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  356.112757][T20894] IPVS: stopping backup sync thread 20899 ...
[  356.240024][T20908] rdma_op ffff8881120749f0 conn xmit_rdma 0000000000000000
[  356.429916][T20935] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  356.444256][T20930] IPVS: stopping backup sync thread 20935 ...
[  357.469771][T20969] IPVS: stopping backup sync thread 20972 ...
[  357.472104][T20972] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  357.490166][T20971] tipc: Resetting bearer <eth:syzkaller0>
[  357.503337][T20971] bond18: (slave geneve4): Releasing active interface
[  357.517403][T20971] bond25: (slave bridge9): Releasing backup interface
[  357.522097][T20971] batman_adv: batadv0: Removing interface: ip6gretap2
[  357.527019][T20971] bond27: (slave gretap5): Releasing active interface
[  357.531670][T20979] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.539419][T20979] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  357.542160][T20979] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  357.697482][T20997] __nla_validate_parse: 12 callbacks suppressed
[  357.697496][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'.
[  357.772259][T21008] batadv_slave_0: entered promiscuous mode
[  357.784284][T21008] batadv_slave_0: left promiscuous mode
[  357.991907][T21027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4059'.
[  358.167406][T21005] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  358.314680][T21042] 8021q: adding VLAN 0 to HW filter on device bond36
[  358.481908][T21049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4064'.
[  358.716156][T21076] validate_nla: 3 callbacks suppressed
[  358.716165][T21076] netlink: 'syz.0.4070': attribute type 1 has an invalid length.
[  358.720765][T21076] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4070'.
[  358.725845][T21078] netlink: 'syz.0.4070': attribute type 1 has an invalid length.
[  358.730582][T21078] netlink: 600 bytes leftover after parsing attributes in process `syz.0.4070'.
[  358.749821][T21077] lo speed is unknown, defaulting to 1000
[  359.102381][T21093] 8021q: adding VLAN 0 to HW filter on device bond4
[  359.120693][T21093] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  359.135721][T21093] bond4: (slave macvlan6): Enslaving as an active interface with an up link
[  359.147080][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4075'.
[  359.155236][T21087] netlink: 'syz.1.4071': attribute type 6 has an invalid length.
[  359.298807][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'.
[  359.327878][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4076'.
[  359.732437][T21103] openvswitch: netlink: IPv4 tun info is not correct
[  359.888498][T21110] lo speed is unknown, defaulting to 1000
[  360.051234][T21116] netlink: 'syz.0.4080': attribute type 10 has an invalid length.
[  360.170077][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'.
[  360.191162][T21130] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  360.191196][T21129] IPVS: stopping backup sync thread 21130 ...
[  360.271340][T21132] lo speed is unknown, defaulting to 1000
[  360.315420][T21137] netlink: 'syz.2.4085': attribute type 4 has an invalid length.
[  360.542516][T21143] netlink: 'syz.1.4088': attribute type 83 has an invalid length.
[  360.637905][T21146] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  360.643315][T21146] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4089'.
[  360.948599][T21173] netlink: 'syz.1.4097': attribute type 1 has an invalid length.
[  360.952120][T21174] netlink: 'syz.1.4097': attribute type 1 has an invalid length.
[  361.339453][T21201] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  361.345912][T21200] IPVS: stopping backup sync thread 21201 ...
[  361.456480][T21203] lo speed is unknown, defaulting to 1000
[  362.135670][T21239] 8021q: adding VLAN 0 to HW filter on device bond37
[  362.140798][T21239] bond0: (slave bond37): Enslaving as an active interface with an up link
[  362.385476][T21276] netlink: 'syz.1.4127': attribute type 18 has an invalid length.
[  362.468336][T21269] netlink: 'syz.0.4125': attribute type 2 has an invalid length.
[  362.513653][T21289] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  362.520079][T21287] IPVS: stopping backup sync thread 21289 ...
[  362.544695][T21293] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  362.545333][T21294] IPVS: stopping backup sync thread 21293 ...
[  363.093485][    C0] ------------[ cut here ]------------
[  363.095591][    C0] ODEBUG: free active (active state 0) object: ffff888028658090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[  363.100553][    C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  363.104189][    C0] Modules linked in:
[  363.106116][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  363.109993][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.113436][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  363.115587][    C0] Code: 4c 89 ff e8 17 93 52 fd 4d 8b 0f 48 c7 c7 a0 45 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba bb b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b7 38 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  363.122863][    C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292
[  363.125161][    C0] RAX: a1e7c37cc49cdc00 RBX: dffffc0000000000 RCX: ffffffff8de95100
[  363.128320][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  363.131491][    C0] RBP: 0000000000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  363.134743][    C0] R10: dffffc0000000000 R11: ffffed100960484b R12: ffffffff8a6d3470
[  363.137627][    C0] R13: ffffffff8be34720 R14: ffff888028658090 R15: ffffffff8b8ce260
[  363.140706][    C0] FS:  0000000000000000(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  363.144327][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.146875][    C0] CR2: 000000110c3d2c52 CR3: 000000000df36000 CR4: 00000000000006f0
[  363.150073][    C0] Call Trace:
[  363.151380][    C0]  <IRQ>
[  363.152496][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  363.154860][    C0]  ? do_raw_spin_lock+0x121/0x290
[  363.156850][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  363.158763][    C0]  kfree+0x112/0x440
[  363.160353][    C0]  rose_timer_expiry+0x4cb/0x600
[  363.162320][    C0]  call_timer_fn+0x17e/0x5f0
[  363.164043][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  363.165969][    C0]  ? call_timer_fn+0xbe/0x5f0
[  363.167855][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  363.169840][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.171826][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.173963][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  363.176035][    C0]  __run_timer_base+0x61a/0x860
[  363.177945][    C0]  ? ktime_get+0x3e/0x1f0
[  363.179569][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  363.181654][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  363.184203][    C0]  run_timer_softirq+0xb7/0x180
[  363.186087][    C0]  handle_softirqs+0x286/0x870
[  363.187970][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  363.189850][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  363.191947][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  363.194019][    C0]  __irq_exit_rcu+0xca/0x1f0
[  363.195839][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  363.197894][    C0]  irq_exit_rcu+0x9/0x30
[  363.199548][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  363.201761][    C0]  </IRQ>
[  363.202976][    C0]  <TASK>
[  363.204253][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  363.206555][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  363.208520][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  363.214560][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  363.216404][    C0] RAX: a1e7c37cc49cdc00 RBX: ffffffff819693f8 RCX: a1e7c37cc49cdc00
[  363.219040][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d49 RDI: ffffffff8be33c00
[  363.222056][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  363.224852][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a630
[  363.227879][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  363.230376][    C0]  ? do_idle+0x1e8/0x510
[  363.231685][    C0]  default_idle+0x13/0x20
[  363.233076][    C0]  default_idle_call+0x74/0xb0
[  363.234609][    C0]  do_idle+0x1e8/0x510
[  363.235867][    C0]  ? __pfx_do_idle+0x10/0x10
[  363.237352][    C0]  ? do_idle+0x5/0x510
[  363.238949][    C0]  cpu_startup_entry+0x44/0x60
[  363.240849][    C0]  rest_init+0x2de/0x300
[  363.242279][    C0]  start_kernel+0x3a9/0x410
[  363.243990][    C0]  x86_64_start_reservations+0x24/0x30
[  363.245702][    C0]  x86_64_start_kernel+0x143/0x1c0
[  363.247413][    C0]  common_startup_64+0x13e/0x147
[  363.249067][    C0]  </TASK>
[  363.250104][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  363.252464][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  363.255412][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  363.258654][    C0] Call Trace:
[  363.259764][    C0]  <IRQ>
[  363.260949][    C0]  dump_stack_lvl+0x99/0x250
[  363.262834][    C0]  ? __asan_memcpy+0x40/0x70
[  363.264732][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.266819][    C0]  ? __pfx__printk+0x10/0x10
[  363.268703][    C0]  vpanic+0x281/0x750
[  363.270332][    C0]  ? __pfx__printk+0x10/0x10
[  363.272175][    C0]  ? __pfx_vpanic+0x10/0x10
[  363.273953][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  363.276071][    C0]  panic+0xb9/0xc0
[  363.277594][    C0]  ? __pfx_panic+0x10/0x10
[  363.279389][    C0]  __warn+0x31b/0x4b0
[  363.281024][    C0]  ? debug_print_object+0x16b/0x1e0
[  363.283096][    C0]  ? debug_print_object+0x16b/0x1e0
[  363.285175][    C0]  report_bug+0x2be/0x4f0
[  363.286863][    C0]  ? debug_print_object+0x16b/0x1e0
[  363.288978][    C0]  ? debug_print_object+0x16b/0x1e0
[  363.291050][    C0]  ? debug_print_object+0x16d/0x1e0
[  363.293117][    C0]  handle_bug+0x84/0x160
[  363.294829][    C0]  exc_invalid_op+0x1a/0x50
[  363.296610][    C0]  asm_exc_invalid_op+0x1a/0x20
[  363.298515][    C0] RIP: 0010:debug_print_object+0x16b/0x1e0
[  363.300832][    C0] Code: 4c 89 ff e8 17 93 52 fd 4d 8b 0f 48 c7 c7 a0 45 e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba bb b2 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b7 38 d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  363.308238][    C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010292
[  363.310653][    C0] RAX: a1e7c37cc49cdc00 RBX: dffffc0000000000 RCX: ffffffff8de95100
[  363.313784][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  363.316838][    C0] RBP: 0000000000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  363.319801][    C0] R10: dffffc0000000000 R11: ffffed100960484b R12: ffffffff8a6d3470
[  363.322954][    C0] R13: ffffffff8be34720 R14: ffff888028658090 R15: ffffffff8b8ce260
[  363.326040][    C0]  ? __pfx_rose_t0timer_expiry+0x10/0x10
[  363.328316][    C0]  debug_check_no_obj_freed+0x3a2/0x470
[  363.330515][    C0]  ? do_raw_spin_lock+0x121/0x290
[  363.332541][    C0]  ? rose_timer_expiry+0x4cb/0x600
[  363.334607][    C0]  kfree+0x112/0x440
[  363.336233][    C0]  rose_timer_expiry+0x4cb/0x600
[  363.338251][    C0]  call_timer_fn+0x17e/0x5f0
[  363.340170][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  363.342369][    C0]  ? call_timer_fn+0xbe/0x5f0
[  363.344246][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  363.346232][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.348306][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.350358][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  363.352482][    C0]  __run_timer_base+0x61a/0x860
[  363.354303][    C0]  ? ktime_get+0x3e/0x1f0
[  363.356013][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  363.358146][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  363.360616][    C0]  run_timer_softirq+0xb7/0x180
[  363.362583][    C0]  handle_softirqs+0x286/0x870
[  363.364493][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  363.366395][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  363.368513][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  363.370567][    C0]  __irq_exit_rcu+0xca/0x1f0
[  363.372425][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  363.374380][    C0]  irq_exit_rcu+0x9/0x30
[  363.375969][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  363.378031][    C0]  </IRQ>
[  363.379241][    C0]  <TASK>
[  363.380438][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  363.382750][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  363.385022][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  363.392566][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  363.394953][    C0] RAX: a1e7c37cc49cdc00 RBX: ffffffff819693f8 RCX: a1e7c37cc49cdc00
[  363.397983][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d49 RDI: ffffffff8be33c00
[  363.401055][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  363.404188][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a630
[  363.407300][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  363.410392][    C0]  ? do_idle+0x1e8/0x510
[  363.412057][    C0]  default_idle+0x13/0x20
[  363.413743][    C0]  default_idle_call+0x74/0xb0
[  363.415669][    C0]  do_idle+0x1e8/0x510
[  363.417345][    C0]  ? __pfx_do_idle+0x10/0x10
[  363.418816][    C0]  ? do_idle+0x5/0x510
[  363.420114][    C0]  cpu_startup_entry+0x44/0x60
[  363.422015][    C0]  rest_init+0x2de/0x300
[  363.423464][    C0]  start_kernel+0x3a9/0x410
[  363.425013][    C0]  x86_64_start_reservations+0x24/0x30
[  363.426838][    C0]  x86_64_start_kernel+0x143/0x1c0
[  363.428880][    C0]  common_startup_64+0x13e/0x147
[  363.431040][    C0]  </TASK>
[  363.433171][    C0] Kernel Offset: disabled
[  363.435039][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:19:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000071b0
R8 =ffff888106730237 R9 =1ffff11020ce6046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008df R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d2c52 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f7b8c5a7d20
XMM02=0008000100000408 060a010bb003d008 XMM03=100000040c0141ce 0004178004220800
XMM04=0002080626100020 80808a100001c080 XMM05=010a80040fffffff ffffff040c080004
XMM06=a008000100000008 060a0108f201a208 XMM07=000a800300100001 0000020806261000
XMM08=2080808a100001c0 80100000040c0141 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=bbed69607be6d100 RBX=ffffffff819693f8 RCX=bbed69607be6d100 RDX=0000000000000001
RSI=ffffffff8d9b9d49 RDI=ffffffff8be33c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561159c577e8 CR3=000000010f3e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000ffff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
