last executing test programs:

2.610454588s ago: executing program 0 (id=1874):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000bf00054000000003580000000c0a01020000000000000000010000000900020473797a32000000002c0003802800008008000640000000001c000b801800018007000100637400000c00028008000140000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xdc}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r4], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000010000001e000100a46fc741af4bc0eb1074b78f978e"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000044007370616e0000003000028014000600200100000000eb57d20a00000000000214000700fc040012e9ff00"/65], 0x64}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r8, 0xffffc000)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r8, 0x913e0000)
r9 = openat$cgroup_ro(r8, &(0x7f0000001480)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0xa2ec9000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r10, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
socket$nl_route(0x10, 0x3, 0x0)

1.749114626s ago: executing program 0 (id=1880):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={<r9=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xa8, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
clock_gettime(0x0, &(0x7f0000000200))
socket$inet_sctp(0x2, 0x1, 0x84)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000240), 0x4)

1.409226508s ago: executing program 2 (id=1883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]})
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r5, 0x10, 0xc0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x10, 0x80000)
preadv(r10, &(0x7f0000000900)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000000880)=""/81, 0x51}], 0x5, 0x0, 0x3)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x8000}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x1, 0x3}, 0x28)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94)
getpeername$unix(r8, &(0x7f00000002c0), &(0x7f0000000340)=0x6e)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f00000000c0)={'wlan1\x00', 0x2000})
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)

1.210046777s ago: executing program 2 (id=1886):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'batadv_slave_0\x00', 0x1fe}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=<r4=>0x0)
bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2b}, 0x60)
close(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0xffffffffffffffdc, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x440048d4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_type(r7, 0x0, 0x0)

1.077882149s ago: executing program 1 (id=1888):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
connect$pppl2tp(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d160200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

1.018829496s ago: executing program 1 (id=1889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES32=<r2=>r1], 0x6c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r1, @ANYBLOB="db5675ed23e4ac0d7acd1d708f713c0581ebc703245787848a62119dde451fea6a17007c980cd8b1a0b3c6bf77835246"], 0x20}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x6, 0x1}, @timestamp, @window={0x3, 0x8, 0x3}, @sack_perm, @window={0x3, 0x882, 0x8e5}], 0x5)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002200)=ANY=[@ANYBLOB="c84f2c2e4bf61f4b18bb1a02fe01cc182c8a11d976d56caf15ee53713a239b3dddd0b521615deab7b5790c4bc2e8ba966f1962c0863f0cb1e061624d84701197fab6d5354f6eca8e80450a6ac07a81bf3626f196f1bf31110cbcb92d1b1465d5e78782863220a5c7b092e99a8ba9ae671e75403694ff93233062f985f804cc90a73c104638ac11ae20b624910c35ead523e83e76e1bd2942b414bd789aca19be1da33f24359a48c8f1c8d14851b808866f805f17", @ANYRES32=r2, @ANYRES8=r2, @ANYRES64=r4, @ANYRES8=r6, @ANYBLOB="86aaefda0c36913dae1963f4fceb5b6236c46483f61d7fa7d3e5a429f81c5a9a2feacb885377d53d7b8db22e349a2d7b959977bc1831b3f126a3e5b6ecb4f10aa3d87b3052a03c746054fdd97b2553f7421933da4b500530a1a7192c26a0684fd5a244c0853dc485924d5edfad9b37c8ae3851d0ee55eea0c252949c45d3c1f4cda87e2679430eb7251a937ca6c53b9e583d51030f0eb5de96fd5535821326b2b3e3fddb37a1bebc94f7483709c14446f01baa13a1a2715957e864c6a427fafe4a8fecc796ccfd69249cac66f4abeddbf4d4fa82e74edb3ba7afe94c128123a36e262a492e10a8b8f9e54030190243e7b9005b0f10f642081faebba6ff0cdaa82ad7f1c49d586880042db0ab344fbc79d3ece4101caa9502a2f1d07ac6c49a3db08bb5e90faf338738bba93b1b2026f60e83e1d070109fac92a1323c88c6c8ea5e3f2dac9e23869b02ce83c1cf86d9783f8d77137eb4fb4707d01f497c4dda78bc9a2634f989f92c78c8ee66fffdec876270b0a955aa568adaeff25c18b36c0def806cc612a8d85347cb5c8f8dfa27f288cf906a57b1ecab9886e24845f6f269e94f5c9c1bca28b8dd98ca6e620d24ff29894fadf026f42ff7b7928615d97766a84d0562c81bafbc1b40a3fa36be8abb848a9b9ea7f72e4bee94ad4360ab80222a629e88022d5846fc2131a8823872b9952e573b55ebc9d5d30e4a1617a084c919daa623c0a3dfdd94c85c23c5754c113d2a6a14f50051ed7808fa4152716003b280fd9231d2cf260ed7dba59daf03111f6eb4f79d246cab2203d56758bf604a2ca9cbaac138e1e8fd4baab8ac0825e0fef2a74ed878e8c58f03051d72aaf65f222f6784490ff2aa616ac41c35d8af113d201e1d517931cd121df1e7835a981c712df903212be7d2178d1d27f7462f02a7673d84f7c699fff72d8148437e04cacb03ffe20b93264d00955f5d6e99ed35821d29a8ed20fbca5ff7c4f10eca5cfaa26e4ad4ebb5ac867d559740214ca2259ffa1df3b7b6bb720eafdce8cdf7b2586302b014e1b5af5465821154099b4ad9607c65ae97b80cef435157b3bca8eb269c930a8fdc13a75dcc1b4554d85ce775e4c4ed48c531fc37c6f88f014bbf7397a029f101e0f36a7689246feeec3f4d54d7ac02e5e00c0e77d5f723ed26c052723849b7e30745dd66906233ee6a9ca6194b88b9dca004400196b9f2a9c486b150b8efb645a640f8ecf33faf3a6d2e24ca4c063f832fde11949b31e58ae1d015609cf2092ecc85016a89bc580d07a951a79f53fe6913c1d87a7449c9a6edbf318d41d414dba87d619bcd7aee51cf1cf6435742177d9606da2e1d1fdfdcaa4812aacfa9512331e74d73924e5ec4eefb52bf6b52189f7f413f867570b2aff38d5991a50bc0309c9009023d6a3f69e2f4ea3b27f46d07c6ce6147da48ca574afb053428bc198179bf70e9870ec0b9c0e0a814afeb40fbb6d1439f155fa25b2d4fc28fc3ea26b56374ed187769f3c5c0d57af8213cc899f90e3e580b3768d09a6c6277b77635051239520a9906a0a625997ae8a090850dced11ab074db794b8fef65c0f4f1ab797f7fe1d5caf3ddb71f1198ee7a2304ac45f82e71f5ed8001accd32d64a4a997056fe051f6c76d6833ae4e134ce51eaa7523930236d5f24b1cc67f47d506afec0a1f5a9d6c61e0275af12a0307fe922ec539043f09fd39761fbc67c1972bfc7608d89b03b99e23c14b45a5a4fcaedc6a39c63b55f908435e11e8717c3ec645539cb661457139397a9f6228f00f8e390b7f6368f002fbfb382e7e6bfb53e27d6799bec1c61dd39a539f137308851526407a1748ad0e14b00ce841ddb4a82f9c02bb06258c1f4aca0c3a7cf75618ae0dede6c1ee6fcc85451c0bd722edefbd151aa4fa863a4da1c8b716ce546c2f41d25ccbd1e29965cf0ba5c4e11bf167baa1f6220762ee7ccba3051a776644a84e23970ab7bb7a8cd5af5287792a839186c24e49faf6eb89664dc6d41f92209824d2f7a7d6575db168f64fd448d561a7e8635f2ec2f9fc186a14e8e4d73813f0509469ec4e2f7408fb8c8c7fc60635820352ec92d4c7d37304f0d04901f90c920b243f63f9e1d4c6d7e6d1ee4c9bbf742d41b93289ecd3e1ce9913c8a6f2eb617ebce68fba3e188a0dd3a856928b0d1d50dbe383557d25c7b1e10829fde2a16f855a56d7f751a3a81bc16508103e1ff31a37596efeee81d1e3f10efcad6dc469c9a993f6df0e8ce31a65c935100611b6d4a117a6e7621246607bd33b4a8ad56d268d91779b0ef3deca574d56c711a6f7f0e9e9e8c2d08b0a51caa7b3df7256f02bca5d533641543476e155ea16a062735ab989de599932e11c020b5fdf28ac975e0061ef3dd0879effe3477d9a471d980b75242b4cf6f0ee1b7358a96be75f7aa039303c307e0149d00ecdd7eb3347630b083c61ea6b7c1346c6fe7d8944fdd7b24e273c15cbe7224b150b9d2c2f5da13ba239af444bd8ac34301a703c6fe8a482c7c6ecc59c13a9e409a5ea47eed7f2015ab6f5ea479a7a6a353e99709582fbaf7fa12c87848722f127f0b491cf79dd6bfb632f630b1b31cbed1caaadc53acecf84612f9a44e79a153202e76e19ac9abf1d464a68147fc62c94f52b6e1015afefd0208b1fe7750e31a89a51a745eec7da9e174049511cd7791de650d9cf96cc1e3153f1316fde9fca5eb2f981841a769c3e856378c250aefe732bd2e16cc9008138904bccc955b826381de282bd1859bc68a55c65681e2967a70a05d206665f7a5830f61dd65cbff9c13849b56d5f1a2c965b47af1efaccfcd519453e3feb9586a212e41d54e851c2995e77981cd674aa00881232f1454d6011e92b3f4cc78284334a0ff6a1fd419274046355ae07d107e1f689e6c1b48dbeccee8d226bdf38967b46f5255e509606e6a4f4afa627965e8c0275f45af79c13d170f2bd9e5175019b6f5d1147c1e328adcb69465d39581088b6eb0c6e36a62338fab9ea597b2b4795acf08880ae8d99c4eb97b67b2d767bc363760845bf26ff49d2983458a5742231761ea1fd092898de26069ef9c2b0f377a042efb331b280c94b506755fde4102025546205a57b04b7b83be8f313ada1a8ef87addf0fc6340973686d582a3ee75de0405b6936e880a50dd12778fe5739544103c698d0be7aa17507bc0c5d7ad489f99189034371ae52bf3ff5a0a3364f00707c7d50460463dde93d9044b434850befc5f2ba803530b78f83624ce4c307a85e8706e79018b4fb2d604ab518b81a381e2707e80b849c8c94d9b069ceea30c2dd31609171976cf5643e499d8dd9d475c82831db8d42b12f7e9d121b4f8d173b3aa3a8e9f3f623332df7d93f01cc2fd7657c8720181aafd9234298b25b8c85fe9b9748230b08b2d86e6c2d4966dce61ceffb0a8f68b05eeffe6457be36116f8550e929cd2ed505b578c3dbc9c8923554974a97d74d56f493b0a96a13e0bd01567a9d78e1dbc20009e3264bfe92f38dc223ff6f12ed416ece6b2aae4c2ff4dd0eae29917830b0067705e790be351c989d557263a538ab0d2dab069bd672e9b969ed7253e9a241f4ca25909ccea1346eef4c4d35c3187c4c71b06bfaa89e60ad3a58452e00e3f7ec3acd5199d8ac5f2b489e6c6d63a799d9fd44d2cd99cf455e658fcd4602a50869b5d1d309ac0f459c53b6fa8658f34430bb7cfc4b201227ea6c87fb198728fd54aa5aade9d9adc3b0614b2155a63b967a27a673a5e10009ae26615c3e3bbdd6d79e5645ae77eae1f7dcf3b0e598b901ff67cd1e1244dfb558f892e455f22b8c81cfe2bc02a93337acdee26230fbb05772d11ebf211521d91afc4f93a8ce7d708fff4d9b02e53f3842ae47031e177f7596fb91999179751ec6e1482c451e39dc8b4166af7353b04226432d4016aaa0d98e2c8d94e1536f288438e04535a567c964488e025c99ba9319eebe5f880964a6f9ad060e93a06c52dd4e66fa1c45994c75bfea2dc414e775ce8d7ab3be64f964acea0be4da882fe5b36c4c65054e12223b5f0500ef2b14a3cf480718c09984535b18e5c773acd24e561cc0344acc5d571219e90d30ff649723ca227ab5a9bc59a4e42dbcfaceaca57c1ef85218e5bef0819797e128ce991a41cc4d793449b04a537c6816bf6d622bb4d50e54526730260753a616ab902ea43b2120d4cfd344dcac006d04c752364a72e7829b5c24f1d39a90d8e7fe22d151b08078c6c3c0e92d49a331e65d5e61c526ee358f261920224df557ced2f8566b3bb6dc42bbadce88cc89a5ce6db9652fd7872c471d457fb68f06f0596ea9f5a48d1b83781c82fc5c5d24f1e8164d56bbe9947c273153db74b0ecd3520d36a3ea24f14dc60cf987081ae0da8869e409b4846cb71c3bff14ffeba2c1ac930fa4c87308eea01a3de92f5fe65590d76204ce0dacca6b0262db792d70b9728624e1412d925a06075338a9d8c285d3b5df6001d18c1f508b999198946245c795972dc7ee0a7b55b5c08f98edd67a658ae803e78fc189837be94219f0254f71b2beb30e8f7bcf84ad45ab60d1745fe146cdc80910c32c3a5be8c09976f6be46ee6525f6bbbe18d83197bb6c0b31147ed8fe3c8f7811dcb7027197b0cbaff8d06e384069922a9f2b27df2b1f9a1b036a13b2bdaf53ce9b2244d72a5058af35b87790e1020ec9f96d32cd9cf297adc6216e80830090ccbf2c368a038c4baab004cd5585996a30979a4eb0c96260528664db72456adb6d2d82d446d6024971905ddc2a363007a1bcddb6dcc8a31c6947b30ff2382901534e244571f75d67dde8b23a91f52eacbbfc42646719d516237f4d22f277be9f848c664b90afbe59b2e059e89d552e9f4c4fddc5850e3e82a047105fb57cd1342a7f7093d7e2caf7e2d759809f9bc33f86da5a1cf04cad32d5fcc32e850d091b5fa00a510aacbd8aca8190e0ab64fbd3434dd1e40842658da4b3a9158b1a9205a41021cdf0884d0393123d3d62087e5bc58b10f0c2bbeb3d23b6a84dd064053e907ee19257f522733021bf0a4266e8d074935b0589b3d650c5a40d0aaddb53e98155558224a127936085b4544fe23391099372ed2fb74d3f8d810d633f2abc87afcfbdb36ee30767c821696d21dd7111b7afd930a2df929bff4ffe07415a0dc733e8ca23269347aa1cb2a65cf5a6b54484db5aa741de547269b60f0f814deeb328e33d963fdbdab1e9758c73c6ec9cbfed5a996fc298baaf343b5a3df251d99b56587bccda74e9e1545cda1ff48dffea22ca89be7cf732a14d83becb956d997ff9f1dcccf8696a1dec5872e80fd62aab6555a76d99a4758000ae376050bd3687f293c97b85a0e6d7c36c49304352f89c7109d5f24d9976137df89d253159984fe54906fa42ecbc107c956966f0def370fe252c373dc8d696c321788cd25b77bbfcbeef43c6133add0f0c827220949712025996ed3d90ac58a7ef6ea280df5a556db095f474e072fd386dff45a398bcd716dae78cde8e7d127b32351c2ac1313fbce9e4b06af33841c1a7b78ef84358c7b0912b97b0292af5603e2136e006378203a111e4bade2a0f227e8364852ab81f4ac331fe6fa24c2d485e40feb931b809dd603ed035d4e23c3f9217847432698b48241f58857d915329076cdc482d8f532847100bb5da6f008a0fce40b0c41a556c4c5643d6cd8f8d9d297b656fce65bf27dba1380d580e28705a96d4c58f5c82c7c0595e79c423971ed3bc0ebd1497131bf19dbdd5088168fad7893cb104892f1a3f660736e01f820d4fb3fe6409e", @ANYRES16=r4, @ANYRES16=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b0002000000000000010002000000cbbfdd3035373ca53feebba9fdb60b9e63663921419d5e746442b617d2c8afe14e54f0848cb8150891e8c396f227099c7453f704e7bd27d65525a58959912ebce2a97535e10b54e710a8dfdb18"], 0x20}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x1c}}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034)
connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffd2c, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

950.357905ms ago: executing program 1 (id=1890):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@initdev, @broadcast, <r2=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x9, @vifc_lcl_ifindex=r2, @multicast1}, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a3931100e4ffffffffffffff080001"], 0x20}}, 0x0) (async, rerun: 64)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x61, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', <r5=>r2, 0x8000, 0x700, 0x81, 0xd52, {{0x6, 0x4, 0x3, 0x36, 0x18, 0x64, 0x0, 0x69, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}, {[@ra={0x94, 0x4}]}}}}}) (async, rerun: 32)
r6 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x400000008000f28, 0x0) (async, rerun: 64)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64)
pipe(&(0x7f0000000480)={<r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x33, '\x00', r1, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x9, 0x18}, 0xc) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_MON_GET(r12, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x1e4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x274463a6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xcca}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7dfd}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe49}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe4000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb5e}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x552}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x99f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6425}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1c00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4b}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x4880)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0xa7, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x81, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4f6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x0, 0x0, 0x4, 0x5, 0x20, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xf, &(0x7f00000001c0)=""/15, 0x41000, 0x2, '\x00', r5, 0x25, r7, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x2, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r9, r10, r11, r13, r14], &(0x7f0000000680)=[{0x5, 0x3, 0x4, 0x5}], 0x10, 0x8}, 0x94) (async)
close(r8)

890.292675ms ago: executing program 0 (id=1891):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$x25(0xffffffffffffffff, 0x0, 0x0) (async)
bind$x25(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x2000000}, 0x0)

820.34265ms ago: executing program 1 (id=1892):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x68, 0x68, 0x10, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x33}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {}, {0x2, 0xf7}, {0x2, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = accept4(r1, &(0x7f0000000000)=@llc, &(0x7f0000000180)=0x80, 0x80000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000100000000000c000200010000000500000004acf6fbc210000400"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x68, 0x68, 0x10, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x33}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_GROUP={0x2c, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {}, {0x2, 0xf7}, {0x2, 0x5}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x68}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
accept4(r1, &(0x7f0000000000)=@llc, &(0x7f0000000180)=0x80, 0x80000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000100000000000c000200010000000500000004acf6fbc210000400"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) (async)

819.579608ms ago: executing program 1 (id=1893):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0x11, 0x401, {0x9, @hdata="b187c4617487b13138834843d6dfb3248c14907fea12590fe47241718881b76b9a5f23a1592f31d9182fb8040737bb479237fd9f", {0x0, @empty, 0x0, 0x19ed, [0x10, 0x80000000]}, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, 0x0, 0x3, 0x1, 0x4}, {0x0, @remote, 0x1, 0x9, [0x4, 0x5]}, 0x5, 0x5}}}) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004301}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}]}, 0x24}, 0x1, 0x0, 0x0, 0xaa4e7565cd318a49}, 0x4002041)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700102c00fe80000000000000000000000000fd00ff0200000000000000000000000000013c4b"], 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$sock(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1}, 0x0)
writev(r5, &(0x7f0000000480)=[{&(0x7f0000000240)="3400754ed3", 0x5}], 0x1) (async)
recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x2140) (async)
setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="08001300e0000001"], 0x2c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000001780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)={0x141c, r8, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x11fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "db2c7c0df3b01e913012b97111111090ea192e2d4e74dc8f9bff732685"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf453}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x16\xf2\x92\b\xfb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'LX-+\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']^$\xb7-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96c3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']^#!\\}@\x19%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd01}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']^#!\\}@\x19%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-\\(-&\xd9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\v-^C%&@*}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "fe2fa12497f13d6cbf16e317f342826d5237eee8799779d91b9f5ea269e9382b598fce8d0fff622df831274aeac7a684908c91548be0"}, @ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "b572dcc625fe0234e67a37d929e595da0e30f5ae88fba5af3a53c01e618ab6f9acbf825d671e750b67ca08ab1959917ce32ac8a64d3052c23ccede6b50642ce85afe111949fbb6b00d78e7c8a38c96810db774762ceb5bbfa4"}]}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x141c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40801)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b004000"/24], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

710.509234ms ago: executing program 0 (id=1894):
socket$nl_route(0x10, 0x3, 0x0)

649.241249ms ago: executing program 0 (id=1895):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
connect$pppl2tp(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d200200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

590.12375ms ago: executing program 1 (id=1896):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040005)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
close(0xffffffffffffffff)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20)
close(0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000002180))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0xfff7, 0x0, @mcast2}, 0x1c)
r6 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r9, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

588.038434ms ago: executing program 0 (id=1897):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0xa}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000800)
r3 = socket$packet(0x11, 0x2, 0x300)
accept$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000760a900b26bd70000000000003000000000200000000000000000000b542dfdfa63fcc57b79fee610d250aebb04cafbf4176da277de584dceb91cfcbb09f576245002fa9b2e8c70ec7293e0bd000b3bc1cd942efdb3b9889c989039bf6d53aa7ece1200fd04b8173e0023c08df85"], 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

190.397528ms ago: executing program 2 (id=1898):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x2}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007600"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x0)

138.930361ms ago: executing program 2 (id=1899):
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9e43522028e06143}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="04002cbd7000fbdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990004010000000000000000580027000000000000000c0058007a000000000000000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000002b00000000000100000000000000cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)

659.996µs ago: executing program 2 (id=1900):
r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
read(r0, &(0x7f0000000140)=""/226, 0xe2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)

0s ago: executing program 2 (id=1901):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=0x4)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in=@multicast1, {0x0, 0x40, 0x0, 0x0, 0x80000000, 0x1f6}, {0x0, 0x4, 0x1}, {0x0, 0x1}, 0x0, 0x3505, 0xa, 0x1, 0x0, 0x55}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {r1, 0x1}}]}, 0x144}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a1700fe", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000000)="556faeeb108a68a0379c0d332dc22c19891d31237089547707c950f7fd2d555324c6cffda67c7e2396a0d15c359960c62ffb1ccf22d3c4ac2a94f3c8a178c69b971a0aa4ec6fabd5ac0d344ee08ade9ea2dcc13cc48c29050f79b057fa6f874b62", &(0x7f00000001c0)=""/12, &(0x7f0000000240)="67689ad7ae7045167689f3d6adaaac112a762b", &(0x7f0000000280)="3cfb675bfdea78829553a687c88681cf40945f00f4dcdc6c9bd424485fabb58dea97f4bb6fcd2c0e56c2c93818165cddf4cf1066fcb3b4516b9c45b243022666b78b9ec54db96eec12d8d48f833e7acb60ad6cc7d6f94b", 0x4, r4, 0x4}, 0x38) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) (async)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r7], 0x6c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, 0x0, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svcrdma_decode_wseg\x00', r10, 0x0, 0xacf}, 0x18)

kernel console output (not intermixed with test programs):

 -22
[   84.268804][ T7318] bond3: (slave gretap1): making interface the new active one
[   84.291931][ T7318] gretap1: entered allmulticast mode
[   84.317331][ T7318] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   84.323416][ T7336] __nla_validate_parse: 7 callbacks suppressed
[   84.323427][ T7336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.367'.
[   84.517691][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'.
[   84.593206][ T7354] tipc: New replicast peer: 0.0.0.0
[   84.595539][ T7354] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.598013][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.374'.
[   84.787245][ T7356] vxcan1 speed is unknown, defaulting to 1000
[   84.833415][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.864218][ T7374] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.909031][ T7381] netlink: 44 bytes leftover after parsing attributes in process `syz.2.378'.
[   84.981731][ T7384] vxcan1 speed is unknown, defaulting to 1000
[   85.056592][ T7386] Illegal XDP return value 4294967294 on prog  (id 93) dev N/A, expect packet loss!
[   85.363276][ T7404] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   85.366659][ T7400] IPVS: stopping backup sync thread 7404 ...
[   85.427016][ T7393] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   85.574705][ T7415] netlink: 'syz.1.387': attribute type 8 has an invalid length.
[   85.592509][   T51] tipc: Node number set to 3560943796
[   85.620426][ T7418] netlink: 'syz.1.388': attribute type 21 has an invalid length.
[   85.623737][ T7418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.388'.
[   85.651699][ T7418] vlan2: entered promiscuous mode
[   85.661253][ T7418] vlan2: entered allmulticast mode
[   85.666901][ T7418] hsr_slave_1: entered allmulticast mode
[   85.675648][ T7418] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   85.678692][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.734131][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[   85.806710][ T7426] IPVS: stopping backup sync thread 7374 ...
[   85.861526][ T7433] ip6tnl0: Caught tx_queue_len zero misconfig
[   85.871274][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'.
[   85.929522][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'.
[   85.935700][ T7438] bridge0: port 2(macvlan2) entered blocking state
[   85.938590][ T7438] bridge0: port 2(macvlan2) entered disabled state
[   85.941250][ T7438] macvlan2: entered allmulticast mode
[   85.948325][ T7438] bridge0: entered allmulticast mode
[   85.951525][ T7438] macvlan2: left allmulticast mode
[   85.953819][ T7438] bridge0: left allmulticast mode
[   85.988453][ T7444] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   85.988522][ T7443] IPVS: stopping backup sync thread 7444 ...
[   86.279296][ T7465] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   86.292668][ T7464] IPVS: stopping backup sync thread 7465 ...
[   86.298640][ T7467] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   86.303873][ T7462] IPVS: stopping backup sync thread 7467 ...
[   86.333797][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[   86.586478][ T7480] tipc: Resetting bearer <eth:syzkaller0>
[   86.594016][ T7480] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   86.613782][ T7480] xfrm1: left promiscuous mode
[   86.616209][ T7480] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   86.631432][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[   86.637168][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[   86.644347][ T7488] batman_adv: batadv0: Adding interface: ip6gretap2
[   86.646622][ T7488] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[   86.651238][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[   86.659499][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[   86.719642][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.410'.
[   86.770796][ T7494] netlink: 'syz.2.412': attribute type 4 has an invalid length.
[   86.783107][ T7496] vlan0: entered promiscuous mode
[   86.786109][ T7496] tipc: Enabled bearer <eth:team0>, priority 0
[   86.811214][ T7494] netlink: 'syz.2.412': attribute type 4 has an invalid length.
[   86.842457][ T7500] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   86.913006][ T7504] vxcan1 speed is unknown, defaulting to 1000
[   86.957111][ T7509] netlink: 'syz.0.416': attribute type 10 has an invalid length.
[   87.476676][ T7530] netlink: 'syz.0.424': attribute type 11 has an invalid length.
[   87.775424][ T7553] IPv6: sit1: Disabled Multicast RS
[   87.777887][ T7553] sit1: entered allmulticast mode
[   87.813444][ T7546] openvswitch: netlink: IP tunnel dst address not specified
[   87.817097][ T7546] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[   88.085285][ T7589] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   88.120540][ T7595] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   88.125115][ T7595] tipc: Resetting bearer <eth:syzkaller0>
[   88.145486][ T7589] syz1: rxe_newlink: already configured on syz_tun
[   88.283882][ T5887] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.288137][ T5887] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.297616][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.301957][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.365500][ T7619] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   88.369058][ T7618] IPVS: stopping backup sync thread 7619 ...
[   88.574220][ T7646] vxcan1 speed is unknown, defaulting to 1000
[   89.359124][ T7656] __nla_validate_parse: 14 callbacks suppressed
[   89.359138][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   89.366830][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[   89.402353][ T5879] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[   89.406799][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   89.410529][ T5879] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[   89.434838][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[   89.473756][ T7664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   89.477824][ T7663] IPVS: stopping backup sync thread 7664 ...
[   89.479881][ T5879] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[   89.483008][ T5879] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[   89.488408][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   89.587578][ T7666] netem: change failed
[   89.751766][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[   89.766482][ T7679] vxcan1 speed is unknown, defaulting to 1000
[   89.879464][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   89.930774][ T7692] pim6reg1: entered promiscuous mode
[   89.942733][ T7692] pim6reg1: entered allmulticast mode
[   90.011823][ T7699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'.
[   90.205286][ T7711] vxcan1 speed is unknown, defaulting to 1000
[   90.388939][ T7716] vxcan1 speed is unknown, defaulting to 1000
[   90.621701][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[   90.633621][ T7721] vlan0: left promiscuous mode
[   90.636683][ T7721] tipc: Resetting bearer <eth:syzkaller0>
[   90.659040][ T7721] xfrm1: left allmulticast mode
[   90.661545][ T7721] macsec1: left allmulticast mode
[   90.673831][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[   90.677471][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[   90.681166][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[   90.690510][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[   90.695593][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[   90.699854][ T7721] hsr_slave_0: left promiscuous mode
[   91.089392][ T7728] validate_nla: 5 callbacks suppressed
[   91.089405][ T7728] netlink: 'syz.2.477': attribute type 1 has an invalid length.
[   91.172956][ T7730] bond3: (slave gretap2): making interface the new active one
[   91.179229][ T7730] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   91.319743][ T7739] vxcan1 speed is unknown, defaulting to 1000
[   91.368370][ T7743] xt_limit: Overflow, try lower: 271964/0
[   91.408603][ T7751] *: renamed from dummy0 (while UP)
[   91.675741][ T7765] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   91.704807][ T7757] vxcan1 speed is unknown, defaulting to 1000
[   91.771759][ T7754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.968742][ T7771] vxcan1 speed is unknown, defaulting to 1000
[   92.196703][ T7774] netlink: 'syz.1.490': attribute type 1 has an invalid length.
[   92.266984][ T7774] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   92.270904][ T7774] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   92.278236][ T7774] bond2: (slave vcan1): making interface the new active one
[   92.281528][ T7774] bond2: (slave vcan1): Enslaving as an active interface with an up link
[   92.290031][ T7774] bond2: (slave vcan2): The slave device specified does not support setting the MAC address
[   92.303922][ T7774] bond2: (slave vcan2): Enslaving as a backup interface with an up link
[   92.309801][ T7775] bond2: (slave vcan3): The slave device specified does not support setting the MAC address
[   92.325709][ T7775] bond2: (slave vcan3): Enslaving as a backup interface with an up link
[   92.331839][ T7774] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.847824][ T7784] xt_socket: unknown flags 0x50
[   92.880602][ T7784] ieee802154 phy0 wpan0: encryption failed: -22
[   93.024117][ T7802] vxcan1 speed is unknown, defaulting to 1000
[   93.058611][ T7803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.063258][ T7803] syzkaller0: entered promiscuous mode
[   93.065464][ T7803] syzkaller0: entered allmulticast mode
[   93.303397][ T7812] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.307680][ T7812] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   93.364754][ T7814] macvlan4: entered promiscuous mode
[   93.369235][ T7814] macvlan4: entered allmulticast mode
[   93.377547][ T7814] bond3: (slave macvlan4): Error -98 calling set_mac_address
[   93.551746][ T7822] : entered promiscuous mode
[   93.643918][ T7830] netlink: 'syz.1.505': attribute type 5 has an invalid length.
[   93.653338][ T7800] tipc: Resetting bearer <eth:syzkaller0>
[   93.667851][ T7800] tipc: Disabling bearer <eth:syzkaller0>
[   93.692970][ T7830] geneve4: entered promiscuous mode
[   93.695989][ T7830] geneve4: entered allmulticast mode
[   93.698858][ T5887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   93.708617][ T5887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   93.752936][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   93.766405][ T7828] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   93.781544][ T7833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.792524][ T7833] syzkaller0: entered promiscuous mode
[   93.795327][ T7833] syzkaller0: entered allmulticast mode
[   93.809226][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.812450][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.821318][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.824715][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.850758][ T7828] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   93.970212][ T7828] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   93.999870][ T7848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.006982][ T7848] syzkaller0: entered promiscuous mode
[   94.009713][ T7848] syzkaller0: entered allmulticast mode
[   94.091050][ T7848] tipc: Resetting bearer <eth:syzkaller0>
[   94.110251][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   94.119331][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[   94.135507][ T7847] tipc: Disabling bearer <eth:syzkaller0>
[   94.154160][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   94.171194][ T5887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   94.180377][ T5887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   94.231703][ T7854] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   94.304496][ T7860] netlink: 'syz.2.514': attribute type 13 has an invalid length.
[   94.307829][ T7860] netlink: 'syz.2.514': attribute type 17 has an invalid length.
[   94.314859][ T7860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.339502][ T7860] vxcan1 speed is unknown, defaulting to 1000
[   94.390015][ T7863] IPVS: stopping backup sync thread 7854 ...
[   94.398441][ T7863] __nla_validate_parse: 16 callbacks suppressed
[   94.398453][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.418254][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.423950][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'.
[   94.583648][ T7832] tipc: Resetting bearer <eth:syzkaller0>
[   94.595789][ T7832] tipc: Disabling bearer <eth:syzkaller0>
[   94.702828][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   94.871223][ T7891] !: renamed from dummy0
[   95.080852][ T7915] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.139151][ T7914] IPVS: stopping backup sync thread 7915 ...
[   95.169186][ T7919] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.170668][ T7918] IPVS: stopping backup sync thread 7919 ...
[   95.440207][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.537'.
[   95.579838][ T7953] netlink: 'syz.2.542': attribute type 1 has an invalid length.
[   95.675201][ T7964] syz_tun: left allmulticast mode
[   95.677537][ T7964] syz_tun: left promiscuous mode
[   95.679964][ T7964] bridge0: port 1(syz_tun) entered disabled state
[   95.691623][ T7964] bond3: (slave gretap1): Releasing active interface
[   95.696156][ T7964] gretap1: left allmulticast mode
[   95.703124][ T7964] batman_adv: batadv0: Removing interface: ip6gretap2
[   95.719709][ T7964] netlink: 'syz.0.545': attribute type 10 has an invalid length.
[   95.722208][ T7965] vxcan1 speed is unknown, defaulting to 1000
[   95.729827][ T7964] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   95.738696][ T7964] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.742782][ T7964] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.284711][ T7976] sctp: [Deprecated]: syz.1.549 (pid 7976) Use of int in max_burst socket option.
[   96.284711][ T7976] Use struct sctp_assoc_value instead
[   96.367757][ T7981] netlink: 'syz.1.550': attribute type 29 has an invalid length.
[   96.711566][ T8002] ip6gre0: Caught tx_queue_len zero misconfig
[   96.738120][ T8002] wg1: left promiscuous mode
[   96.739786][ T8002] : left promiscuous mode
[   96.762761][ T8002] gtp0: left promiscuous mode
[   96.785819][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'.
[   96.794322][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.797191][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[   96.824322][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.829536][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[   96.835158][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.838432][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[   96.856686][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.860711][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[   96.868963][ T8006] vxcan1 speed is unknown, defaulting to 1000
[   97.064880][ T8031] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.071425][ T8029] netlink: 27 bytes leftover after parsing attributes in process `syz.0.566'.
[   97.111692][ T8034] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   97.119544][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[   97.126549][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'.
[   97.144223][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'.
[   97.218231][ T8045] netlink: 'syz.0.571': attribute type 4 has an invalid length.
[   97.284573][ T8043] vxcan1 speed is unknown, defaulting to 1000
[   97.327218][ T8054] netlink: 'syz.0.573': attribute type 3 has an invalid length.
[   97.721520][ T8060] netlink: 'syz.1.570': attribute type 6 has an invalid length.
[   98.243812][ T8088] netlink: 'syz.2.583': attribute type 1 has an invalid length.
[   98.299214][ T8088] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.413934][ T8089] bond4: (slave ip6gretap1): making interface the new active one
[   98.418992][ T8089] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[   98.436948][ T8088] veth7: entered promiscuous mode
[   98.440118][ T8088] bond4: (slave veth7): Enslaving as an active interface with a down link
[   98.447218][ T8096] erspan0: entered allmulticast mode
[   98.458714][ T8096] bond4: (slave erspan0): Enslaving as an active interface with an up link
[   98.590550][ T8108] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   98.709677][ T8111] vxcan1 speed is unknown, defaulting to 1000
[   99.025779][ T8121] nbd: couldn't find device at index 536870912
[   99.226149][ T8132] vxcan1 speed is unknown, defaulting to 1000
[   99.403794][ T8131] vxcan1 speed is unknown, defaulting to 1000
[   99.658453][ T8136] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   99.668139][ T8136] __nla_validate_parse: 7 callbacks suppressed
[   99.668149][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'.
[  100.330178][ T5856] Bluetooth: hci1: command tx timeout
[  100.388287][ T8172] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  100.450498][ T8181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'.
[  100.457917][ T8179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.605'.
[  100.560029][ T8194] syz_tun: entered allmulticast mode
[  100.566641][ T8194] dvmrp8: entered allmulticast mode
[  100.569398][ T8194] syz_tun: left allmulticast mode
[  100.571578][ T8194] dvmrp8: left allmulticast mode
[  100.611918][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'.
[  100.617765][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'.
[  100.623061][ T8198] wg1: left allmulticast mode
[  100.628439][ T8198] vlan3: left allmulticast mode
[  100.630502][ T8198] veth1: left allmulticast mode
[  100.633981][ T8198] gtp0: left allmulticast mode
[  100.637038][ T8198] ipvlan2: left allmulticast mode
[  100.638793][ T8198] bond3: left allmulticast mode
[  100.661532][ T8194] vxcan1 speed is unknown, defaulting to 1000
[  100.697411][ T8199] netlink: 'syz.2.610': attribute type 23 has an invalid length.
[  100.706291][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'.
[  100.712996][ T8200] hsr_slave_0: left promiscuous mode
[  100.716440][ T8200] hsr_slave_1: left promiscuous mode
[  100.733296][ T8202] netlink: 300 bytes leftover after parsing attributes in process `syz.1.612'.
[  100.748661][ T8203] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  100.754630][ T8199] IPVS: stopping backup sync thread 8203 ...
[  101.313786][ T8216] pim6reg: entered allmulticast mode
[  101.317902][ T8216] pim6reg: left allmulticast mode
[  101.665403][ T8238] netlink: 48 bytes leftover after parsing attributes in process `syz.0.623'.
[  101.866783][ T8242] vxcan1 speed is unknown, defaulting to 1000
[  102.046977][ T8256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.629'.
[  102.099364][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.102436][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.111050][ T8256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.122904][ T8256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.405431][ T8267] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  102.588331][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.633'.
[  102.604502][ T8276] vxcan1 speed is unknown, defaulting to 1000
[  103.327964][ T8293] pim6reg99999999: entered allmulticast mode
[  103.434645][ T8307] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  103.546029][ T8310] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  103.551429][ T8310] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  103.580013][ T8313] macvlan2: entered promiscuous mode
[  103.585291][ T8313] macvlan2: entered allmulticast mode
[  103.589794][ T8313] bond5: (slave macvlan2): Error -98 calling set_mac_address
[  103.677183][ T8321] vxcan1 speed is unknown, defaulting to 1000
[  103.750734][ T8332] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.876560][ T8344] vxcan1 speed is unknown, defaulting to 1000
[  103.978786][ T8346] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  104.037874][ T8355] IPVS: stopping backup sync thread 8332 ...
[  104.115013][ T8363] netlink: 'syz.2.657': attribute type 3 has an invalid length.
[  104.665626][ T8393] netlink: 'syz.2.666': attribute type 1 has an invalid length.
[  104.801572][ T8405] vxcan1 speed is unknown, defaulting to 1000
[  104.837138][ T8411] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  104.907057][ T8419] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  104.907144][ T8417] IPVS: stopping backup sync thread 8419 ...
[  105.215439][ T8426] __nla_validate_parse: 9 callbacks suppressed
[  105.215447][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[  105.235149][ T8426] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  105.238240][ T8426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.462431][ T8442] netlink: 'syz.2.680': attribute type 21 has an invalid length.
[  105.472799][ T8442] netlink: 128 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.503613][ T8442] netlink: 'syz.2.680': attribute type 4 has an invalid length.
[  105.516111][ T8442] netlink: 3 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.642452][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.670468][ T8443] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  105.680455][ T8443] macvtap1: entered promiscuous mode
[  105.754871][ T8443] netlink: 'syz.2.680': attribute type 6 has an invalid length.
[  105.790756][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[  105.933718][ T8450] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.937402][ T8451] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  105.940409][ T8451] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  105.990118][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  106.009030][ T8459] pim6reg: entered allmulticast mode
[  106.019385][ T8458] bridge0: entered allmulticast mode
[  106.023014][ T8460] bridge_slave_1: left allmulticast mode
[  106.025161][ T8460] bridge_slave_1: left promiscuous mode
[  106.027293][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.049350][ T8460] bridge_slave_0: left allmulticast mode
[  106.051416][ T8460] bridge_slave_0: left promiscuous mode
[  106.057742][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.083003][ T8460] bridge0 (unregistering): left allmulticast mode
[  106.297422][ T8483] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  106.319695][ T8483] bond5: entered promiscuous mode
[  106.325068][ T8483] 8021q: adding VLAN 0 to HW filter on device bond5
[  106.340293][ T8487] vxcan1: Master is either lo or non-ether device
[  106.379869][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[  106.427538][ T8501] netlink: 'syz.0.695': attribute type 1 has an invalid length.
[  106.428875][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'.
[  106.434620][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'.
[  106.447057][ T8501] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  106.570784][ T8523] netlink: 1288 bytes leftover after parsing attributes in process `syz.0.701'.
[  106.595767][ T8525] netlink: 'syz.1.702': attribute type 3 has an invalid length.
[  107.600538][ T8552] vxcan1 speed is unknown, defaulting to 1000
[  107.644657][ T8556] bridge0: port 1(veth5) entered blocking state
[  107.647135][ T8556] bridge0: port 1(veth5) entered disabled state
[  107.649800][ T8556] veth5: entered allmulticast mode
[  107.654084][ T8556] veth5: entered promiscuous mode
[  107.993791][ T8570] validate_nla: 3 callbacks suppressed
[  107.993806][ T8570] netlink: 'syz.0.711': attribute type 6 has an invalid length.
[  108.000549][ T8557] vxcan1 speed is unknown, defaulting to 1000
[  108.320251][ T8579] vlan0: entered promiscuous mode
[  108.323334][ T8579] macvtap0: entered promiscuous mode
[  108.523017][ T8586] team0: No ports can be present during mode change
[  108.948417][ T8595] veth5: left allmulticast mode
[  108.950065][ T8595] veth5: left promiscuous mode
[  108.951862][ T8595] bridge0: port 1(veth5) entered disabled state
[  109.175939][ T8612] netlink: 'syz.2.723': attribute type 5 has an invalid length.
[  109.217724][ T8607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.320630][ T8620] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  109.325032][ T8613] IPVS: stopping backup sync thread 8620 ...
[  109.327773][ T5842] vxcan1 speed is unknown, defaulting to 1000
[  109.330329][ T5842] syz2: Port: 1 Link DOWN
[  109.333398][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.336236][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.339293][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.342529][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.345455][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.348165][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.351542][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.354919][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.358722][ T5842] vxcan1 speed is unknown, defaulting to 1000
[  109.402412][ T8624] netlink: 'syz.1.727': attribute type 6 has an invalid length.
[  109.405997][ T8624] netlink: 'syz.1.727': attribute type 1 has an invalid length.
[  109.445184][   T13] tipc: Subscription rejected, illegal request
[  110.009797][ T8635] netlink: 'syz.0.730': attribute type 5 has an invalid length.
[  110.060852][ T8642] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  110.062616][ T8641] IPVS: stopping backup sync thread 8642 ...
[  110.141337][ T8654] : entered promiscuous mode
[  110.151181][ T8654] openvswitch: netlink: Flow actions attr not present in new flow.
[  110.160788][ T8654] team0: Caught tx_queue_len zero misconfig
[  110.164884][ T8654] netlink: 'syz.0.733': attribute type 3 has an invalid length.
[  110.355561][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.176258][ T8718] sit0: Caught tx_queue_len zero misconfig
[  111.273075][ T8723] bond4: (slave erspan0): Releasing active interface
[  111.275489][ T8723] ip6gretap1: entered promiscuous mode
[  111.285406][ T8723] bond0: (slave bond_slave_0): Releasing backup interface
[  111.292509][ T8723] bond0: (slave bond_slave_1): Releasing backup interface
[  111.299813][ T8723] team0: Port device team_slave_0 removed
[  111.307340][ T8723] team0: Port device team_slave_1 removed
[  111.310048][ T8723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.314946][ T8723] bond3: (slave gretap2): Releasing active interface
[  111.319552][ T8723] bond4: (slave ip6gretap1): Releasing active interface
[  111.323961][ T8723] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 66:31:68:d3:9b:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  111.331110][ T8723] ip6gretap1: left promiscuous mode
[  111.333788][ T8728] __nla_validate_parse: 12 callbacks suppressed
[  111.333798][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  111.341541][ T8723] bond4: (slave veth7): Releasing active interface
[  111.404730][ T8734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.750'.
[  111.516778][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  111.550846][ T8759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.755'.
[  111.580324][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  111.586270][ T8775] netlink: 92 bytes leftover after parsing attributes in process `syz.2.754'.
[  111.590753][ T8775] erspan0: left allmulticast mode
[  111.598204][ T8775] gretap1: left allmulticast mode
[  111.600008][ T8775] bridge1: left allmulticast mode
[  111.603107][ T8775] veth7: left promiscuous mode
[  111.605062][ T8775] macvtap1: left promiscuous mode
[  111.607044][ T8775] bond5: left promiscuous mode
[  111.726369][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'.
[  111.781219][ T8792] vlan0: entered promiscuous mode
[  111.784349][ T8792] hsr_slave_1: entered promiscuous mode
[  111.786539][ T8792] vlan0: entered allmulticast mode
[  111.788620][ T8792] hsr_slave_1: entered allmulticast mode
[  111.812955][ T8794] pim6reg: entered allmulticast mode
[  111.815755][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  111.830757][ T8794] pim6reg: left allmulticast mode
[  111.838788][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'.
[  111.977928][ T8800] IPVS: set_ctl: invalid protocol: 108 172.20.20.6:20004
[  112.040982][ T8802] syz.0.764: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  112.049014][ T8802] CPU: 1 UID: 0 PID: 8802 Comm: syz.0.764 Not tainted syzkaller #0 PREEMPT(full) 
[  112.049031][ T8802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.049038][ T8802] Call Trace:
[  112.049043][ T8802]  <TASK>
[  112.049049][ T8802]  dump_stack_lvl+0x189/0x250
[  112.049071][ T8802]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.049086][ T8802]  ? __pfx__printk+0x10/0x10
[  112.049103][ T8802]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  112.049145][ T8802]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  112.049160][ T8802]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  112.049176][ T8802]  warn_alloc+0x214/0x310
[  112.049199][ T8802]  ? __pfx_warn_alloc+0x10/0x10
[  112.049224][ T8802]  ? __get_vm_area_node+0x28f/0x300
[  112.049240][ T8802]  ? xskq_create+0xbf/0x170
[  112.049255][ T8802]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  112.049289][ T8802]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  112.049311][ T8802]  ? __kasan_kmalloc+0x93/0xb0
[  112.049329][ T8802]  vmalloc_user_noprof+0xad/0xf0
[  112.049345][ T8802]  ? xskq_create+0xbf/0x170
[  112.049357][ T8802]  xskq_create+0xbf/0x170
[  112.049370][ T8802]  xsk_init_queue+0xb0/0x110
[  112.049384][ T8802]  xsk_setsockopt+0x57b/0x8d0
[  112.049403][ T8802]  ? __pfx_xsk_setsockopt+0x10/0x10
[  112.049421][ T8802]  ? __pfx_aa_sk_perm+0x10/0x10
[  112.049442][ T8802]  ? __fget_files+0x2a/0x420
[  112.049452][ T8802]  ? aa_sock_opt_perm+0xff/0x1b0
[  112.049466][ T8802]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  112.049479][ T8802]  ? __pfx_xsk_setsockopt+0x10/0x10
[  112.049498][ T8802]  do_sock_setsockopt+0x17c/0x1b0
[  112.049517][ T8802]  __x64_sys_setsockopt+0x13f/0x1b0
[  112.049536][ T8802]  do_syscall_64+0xfa/0x3b0
[  112.049549][ T8802]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.049561][ T8802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.049573][ T8802]  ? exc_page_fault+0x9f/0xf0
[  112.049586][ T8802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.049597][ T8802] RIP: 0033:0x7fbf8f78eba9
[  112.049609][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.049618][ T8802] RSP: 002b:00007fbf8d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  112.049631][ T8802] RAX: ffffffffffffffda RBX: 00007fbf8f9d5fa0 RCX: 00007fbf8f78eba9
[  112.049640][ T8802] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  112.049647][ T8802] RBP: 00007fbf8f811e19 R08: 0000000000000004 R09: 0000000000000000
[  112.049654][ T8802] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  112.049660][ T8802] R13: 00007fbf8f9d6038 R14: 00007fbf8f9d5fa0 R15: 00007ffe8cda6958
[  112.049682][ T8802]  </TASK>
[  112.049687][ T8802] Mem-Info:
[  112.161017][ T8802] active_anon:6775 inactive_anon:0 isolated_anon:0
[  112.161017][ T8802]  active_file:1323 inactive_file:38260 isolated_file:0
[  112.161017][ T8802]  unevictable:1768 dirty:66 writeback:0
[  112.161017][ T8802]  slab_reclaimable:10238 slab_unreclaimable:68113
[  112.161017][ T8802]  mapped:19313 shmem:3399 pagetables:987
[  112.161017][ T8802]  sec_pagetables:0 bounce:0
[  112.161017][ T8802]  kernel_misc_reclaimable:0
[  112.161017][ T8802]  free:267211 free_pcp:19400 free_cma:0
[  112.196640][ T8802] Node 0 active_anon:20692kB inactive_anon:0kB active_file:4380kB inactive_file:6992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49516kB dirty:228kB writeback:0kB shmem:12204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6748kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  112.209526][ T8802] Node 1 active_anon:10012kB inactive_anon:0kB active_file:912kB inactive_file:146048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31272kB dirty:36kB writeback:0kB shmem:4928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5676kB pagetables:1936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  112.222567][ T8802] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  112.251680][ T8802] lowmem_reserve[]: 0 811 811 811 811
[  112.254236][ T8802] Node 0 DMA32 free:309832kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24704kB inactive_anon:0kB active_file:4380kB inactive_file:6992kB unevictable:3536kB writepending:228kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:32968kB local_pcp:14876kB free_cma:0kB
[  112.281639][ T8802] lowmem_reserve[]: 0 0 0 0 0
[  112.283739][ T8802] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  112.293943][ T8802] lowmem_reserve[]: 0 0 854 854 854
[  112.296007][ T8802] Node 1 Normal free:307260kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10012kB inactive_anon:0kB active_file:912kB inactive_file:146048kB unevictable:3536kB writepending:36kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41388kB local_pcp:18524kB free_cma:0kB
[  112.307202][ T8802] lowmem_reserve[]: 0 0 0 0 0
[  112.308953][ T8802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  112.313338][ T8802] Node 0 DMA32: 436*4kB (UME) 322*8kB (UE) 205*16kB (UM) 370*32kB (UE) 44*64kB (UE) 3*128kB (UM) 8*256kB (UME) 5*512kB (UME) 6*1024kB (UM) 5*2048kB (UM) 65*4096kB (UM) = 309872kB
[  112.319614][ T8802] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  112.325672][ T8802] Node 1 Normal: 823*4kB (UME) 256*8kB (UME) 290*16kB (UME) 344*32kB (UME) 108*64kB (UME) 49*128kB (UM) 28*256kB (UME) 7*512kB (UM) 8*1024kB (UME) 8*2048kB (UM) 60*4096kB (M) = 315260kB
[  112.331891][ T8802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  112.335428][ T8802] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  112.347445][ T8802] 44104 total pagecache pages
[  112.349303][ T8802] 0 pages in swap cache
[  112.350713][ T8802] Free swap  = 124996kB
[  112.352713][ T8802] Total swap = 124996kB
[  112.354244][ T8802] 786301 pages RAM
[  112.355766][ T8802] 0 pages HighMem/MovableOnly
[  112.357664][ T8802] 241346 pages reserved
[  112.359290][ T8802] 0 pages cma reserved
[  112.527081][ T8828] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  112.528017][ T8823] vxcan1 speed is unknown, defaulting to 1000
[  112.531212][ T8827] IPVS: stopping backup sync thread 8828 ...
[  112.801701][ T8848] vxcan1 speed is unknown, defaulting to 1000
[  112.827648][ T8847] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.776'.
[  112.831342][ T8852] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  112.840003][ T8847] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  112.990639][ T8857] vxcan1 speed is unknown, defaulting to 1000
[  113.821504][ T8881] IPVS: stopping backup sync thread 8882 ...
[  113.828488][ T8881] sctp: [Deprecated]: syz.2.785 (pid 8881) Use of int in maxseg socket option.
[  113.828488][ T8881] Use struct sctp_assoc_value instead
[  114.163983][ T8891] team0: Port device 0! removed
[  114.200076][ T8891] team0: Port device team_slave_0 removed
[  114.209467][ T8891] team0: Port device team_slave_1 removed
[  114.217807][ T8891] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.224771][ T8891] bond0: (slave ip6gretap1): Removing an active aggregator
[  114.229586][ T8891] bond0: (slave ip6gretap1): Releasing backup interface
[  114.238462][ T8891] bond2: (slave vcan1): Releasing backup interface
[  114.248506][ T8891] bond2: (slave vcan2): making interface the new active one
[  114.261460][ T8891] bond2: (slave vcan2): Releasing backup interface
[  114.285421][ T8891] bond2: (slave vcan3): making interface the new active one
[  114.291835][ T8891] bond2: (slave vcan3): Releasing backup interface
[  114.521845][ T8902] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  114.803231][ T8918] netlink: 'syz.2.797': attribute type 10 has an invalid length.
[  114.807597][ T8918] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.811354][ T8918] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.053013][ T8930] IPVS: stopping backup sync thread 8902 ...
[  115.208358][ T8936] netlink: 'syz.1.803': attribute type 4 has an invalid length.
[  115.208603][ T8937] netlink: 'syz.1.803': attribute type 4 has an invalid length.
[  115.216789][ T8937] netlink: 'syz.1.803': attribute type 1 has an invalid length.
[  115.219779][ T8937] netlink: 'syz.1.803': attribute type 4 has an invalid length.
[  115.220701][ T8936] netlink: 'syz.1.803': attribute type 1 has an invalid length.
[  116.427517][ T8963] vxcan1 speed is unknown, defaulting to 1000
[  116.675359][ T8987] !: renamed from dummy0
[  116.761233][ T8988] vxcan1 speed is unknown, defaulting to 1000
[  116.919016][ T8993] __nla_validate_parse: 13 callbacks suppressed
[  116.919025][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'.
[  116.993432][ T8993] hsr_slave_1 (unregistering): left promiscuous mode
[  117.359286][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'.
[  117.372357][ T9005] netlink: 56 bytes leftover after parsing attributes in process `syz.2.822'.
[  117.381001][ T9005] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.471785][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'.
[  117.528714][ T9016] syzkaller1: entered promiscuous mode
[  117.530532][ T9016] syzkaller1: entered allmulticast mode
[  117.567254][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  117.570530][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'.
[  117.638079][ T9028] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  117.701823][ T9034] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.831'.
[  117.751987][ T9037] IPVS: stopping backup sync thread 9038 ...
[  117.755355][ T9038] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.857367][ T9050] netlink: 572 bytes leftover after parsing attributes in process `syz.2.836'.
[  117.928263][ T9069] IPVS: stopping backup sync thread 9068 ...
[  117.929122][ T9068] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.939118][ T9071] ieee802154 phy0 wpan0: encryption failed: -22
[  117.941429][ T9071] ieee802154 phy0 wpan0: encryption failed: -22
[  118.030293][ T9077] syzkaller1: entered promiscuous mode
[  118.037938][ T9077] syzkaller1: entered allmulticast mode
[  118.041008][ T9076] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  118.059903][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'.
[  118.202919][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'.
[  118.259003][ T9099] bond0: (slave wlan1): Releasing backup interface
[  118.322103][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  118.330454][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  118.343787][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  118.347222][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  119.248253][ T9119] netlink: 'syz.1.858': attribute type 1 has an invalid length.
[  119.251286][ T9121] nbd: must specify a size in bytes for the device
[  119.274232][ T9119] bond4: (slave gretap1): making interface the new active one
[  119.276982][ T9119] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  119.419611][ T9140] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  119.423791][ T9140] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  119.428484][ T9140] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  119.437165][ T9131] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  119.471817][ T9140] 8021q: adding VLAN 0 to HW filter on device bond6
[  119.578435][ T9155] bridge2: entered allmulticast mode
[  119.745736][ T9175] bond4: (slave gretap1): Releasing active interface
[  120.040161][ T9198] IPVS: stopping backup sync thread 8031 ...
[  120.618699][ T9221] sctp: [Deprecated]: syz.1.892 (pid 9221) Use of int in max_burst socket option.
[  120.618699][ T9221] Use struct sctp_assoc_value instead
[  120.681794][ T9229] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  120.685466][ T9226] IPVS: stopping backup sync thread 9229 ...
[  120.805067][ T9242] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  120.805226][ T9241] IPVS: stopping backup sync thread 9242 ...
[  120.826387][ T9241] pim6reg: entered allmulticast mode
[  120.830762][ T9244] sctp: [Deprecated]: syz.0.901 (pid 9244) Use of int in max_burst socket option.
[  120.830762][ T9244] Use struct sctp_assoc_value instead
[  120.862831][ T9248] geneve3: entered promiscuous mode
[  120.865970][ T5887] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  120.868811][ T5887] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  120.874246][ T5887] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  120.883590][ T5887] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  120.889574][ T9253] netlink: 'syz.0.905': attribute type 13 has an invalid length.
[  120.898439][ T9253] netlink: 'syz.0.905': attribute type 17 has an invalid length.
[  120.901060][ T9254] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  120.905323][ T9250] IPVS: stopping backup sync thread 9254 ...
[  120.941470][ T9253] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.947817][ T9253] 8021q: adding VLAN 0 to HW filter on device team0
[  120.954621][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.960922][   T24] syz1: Port: 1 Link ACTIVE
[  120.992849][ T9252] vxcan1 speed is unknown, defaulting to 1000
[  121.041453][ T9261] macvtap1: entered promiscuous mode
[  121.045317][ T9261] macvtap1: entered allmulticast mode
[  121.047817][ T9261] bond0: entered allmulticast mode
[  121.049958][ T9261] bond0: entered promiscuous mode
[  121.054993][ T9261] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  121.059139][ T9261] team0: Device macvtap1 failed to register rx_handler
[  121.070215][ T9261] bond0: left allmulticast mode
[  121.073455][ T9261] bond0: left promiscuous mode
[  121.234233][ T9264] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.344558][ T9280] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.347506][ T9274] IPVS: stopping backup sync thread 9280 ...
[  121.357979][ T9253] syz.0.905 (9253) used greatest stack depth: 19776 bytes left
[  121.530522][ T9296] batadv_slave_0: entered promiscuous mode
[  121.740306][ T9320] netlink: 'syz.0.921': attribute type 7 has an invalid length.
[  121.860847][ T9326] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.866264][ T9325] IPVS: stopping backup sync thread 9326 ...
[  121.974969][ T9335] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.978891][ T9334] IPVS: stopping backup sync thread 9335 ...
[  122.245051][ T9343] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  122.300825][ T9343] __nla_validate_parse: 25 callbacks suppressed
[  122.300841][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  122.410068][ T9352] block nbd0: not configured, cannot reconfigure
[  122.454703][ T9362] netlink: 71 bytes leftover after parsing attributes in process `syz.2.934'.
[  122.458804][ T9362] netlink: 'syz.2.934': attribute type 39 has an invalid length.
[  122.547065][ T9364] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.936'.
[  122.600410][ T9368] vlan0: entered promiscuous mode
[  122.616358][ T9369] vlan0: entered promiscuous mode
[  122.652176][ T9370] netlink: 96 bytes leftover after parsing attributes in process `syz.1.937'.
[  122.665593][ T9373] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  122.670190][ T9372] IPVS: stopping backup sync thread 9373 ...
[  122.675899][ T9372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'.
[  122.711406][ T9375] bond2: option mode: unable to set because the bond device is up
[  122.720319][ T9375] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  122.725836][ T9375] bond2: (slave macvlan0): making interface the new active one
[  122.729124][ T9375] bond2: (slave macvlan0): Enslaving as an active interface with an up link
[  122.738206][ T9375] bond2: (slave macvlan0): Releasing backup interface
[  122.800250][ T9381] 8021q: adding VLAN 0 to HW filter on device bond7
[  122.866334][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[  122.871477][ T9399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.897302][ T9398] delete_channel: no stack
[  122.925485][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'.
[  122.929240][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'.
[  123.037165][ T9418] netlink: 'syz.1.951': attribute type 5 has an invalid length.
[  123.131556][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'.
[  123.191566][ T9444] vxcan1 speed is unknown, defaulting to 1000
[  123.324452][ T9443] vxcan1 speed is unknown, defaulting to 1000
[  123.436382][   T33] audit: type=1804 audit(1758472332.234:2): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.964" name="/newroot/364/cgroup.controllers" dev="tmpfs" ino=1873 res=1 errno=0
[  123.453811][   T33] audit: type=1800 audit(1758472332.234:3): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.964" name="cgroup.controllers" dev="tmpfs" ino=1873 res=0 errno=0
[  124.518514][ T9517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.969'.
[  124.717068][ T9533] vxcan1 speed is unknown, defaulting to 1000
[  125.209111][ T9555] tap0: tun_chr_ioctl cmd 1074025677
[  125.214773][ T9555] tap0: linktype set to 776
[  125.222075][ T9557] tipc: Can't bind to reserved service type 1
[  125.227527][ T9557] netlink: 'syz.1.981': attribute type 39 has an invalid length.
[  125.238412][ T9555] vlan0: entered allmulticast mode
[  125.240627][ T9555] bridge_slave_0: entered allmulticast mode
[  125.288442][ T9558] netlink: 'syz.1.981': attribute type 5 has an invalid length.
[  125.305917][ T9558] vlan0: entered allmulticast mode
[  125.411306][ T9565] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  125.419416][ T9564] IPVS: stopping backup sync thread 9565 ...
[  125.515724][ T9567] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  125.616385][ T9579] vxcan1 speed is unknown, defaulting to 1000
[  125.927433][ T9595] 8021q: adding VLAN 0 to HW filter on device bond9
[  125.935400][ T9595] bond0: (slave bond9): Enslaving as an active interface with an up link
[  125.951621][ T9586] vxcan1 speed is unknown, defaulting to 1000
[  126.670867][ T9633] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.322845][ T9644] netlink: 'syz.1.1004': attribute type 8 has an invalid length.
[  127.413375][ T9653] netlink: 'syz.2.1007': attribute type 5 has an invalid length.
[  127.474118][ T9662] netlink: 'syz.2.1007': attribute type 39 has an invalid length.
[  127.515158][ T9664] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.682150][ T9674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.096722][ T9684] netlink: 'syz.1.1015': attribute type 13 has an invalid length.
[  128.108287][ T9684] netlink: 'syz.1.1015': attribute type 17 has an invalid length.
[  128.265076][ T9684] 8021q: adding VLAN 0 to HW filter on device team0
[  128.267786][ T9684] tipc: Resetting bearer <eth:team0>
[  128.270274][ T9684] tipc: Resetting bearer <eth:team0>
[  128.275348][ T9684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.337348][ T9687] __nla_validate_parse: 11 callbacks suppressed
[  128.337359][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1016'.
[  128.411775][ T9693] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1018'.
[  128.419704][ T9693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.426740][ T9696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1019'.
[  128.438181][ T9696] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.486811][ T9696] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.530814][ T9703] vxcan1 speed is unknown, defaulting to 1000
[  128.539743][ T9696] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.602833][ T9696] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.697800][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  128.701648][ T9704] can: request_module (can-proto-0) failed.
[  128.715309][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  128.728446][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  128.739192][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  128.883927][ T9719] netlink: 'syz.1.1023': attribute type 1 has an invalid length.
[  129.219136][ T9729] netlink: 'syz.0.1026': attribute type 1 has an invalid length.
[  129.566506][ T9743] vxcan1 speed is unknown, defaulting to 1000
[  129.899077][ T9753] netlink: 'syz.1.1033': attribute type 58 has an invalid length.
[  129.901818][ T9753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'.
[  129.967395][ T9754] netlink: 'syz.0.1032': attribute type 6 has an invalid length.
[  130.389253][ T9776] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1039'.
[  130.410211][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'.
[  130.508260][ T9781] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1041'.
[  130.517242][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1041'.
[  130.524122][ T9781] vlan0: entered promiscuous mode
[  130.567189][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'.
[  130.606511][ T9785] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  130.610557][ T9784] IPVS: stopping backup sync thread 9785 ...
[  130.668389][ T9787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.671467][ T9788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.675971][ T9787] syzkaller0: entered promiscuous mode
[  130.678439][ T9787] syzkaller0: entered allmulticast mode
[  130.695289][ T9787] tipc: Resetting bearer <eth:syzkaller0>
[  130.701376][ T9786] tipc: Resetting bearer <eth:syzkaller0>
[  130.711248][ T9786] tipc: Disabling bearer <eth:syzkaller0>
[  130.806445][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  131.115029][ T9814] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  131.157315][ T9820] net veth1_virt_wifi : renamed from virt_wifi0
[  131.226073][ T9824] vxcan1 speed is unknown, defaulting to 1000
[  131.349194][ T9833] pimreg3: entered allmulticast mode
[  131.517216][ T9845] syz_tun: entered allmulticast mode
[  131.522878][ T9844] syz_tun: left allmulticast mode
[  131.619772][ T9852] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  131.643413][ T9852] bond10 (unregistering): Released all slaves
[  132.193774][ T9874] xt_policy: too many policy elements
[  132.579099][ T9884] vxcan1 speed is unknown, defaulting to 1000
[  132.646150][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.613273][ T9916] __nla_validate_parse: 13 callbacks suppressed
[  133.613284][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  133.967697][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'.
[  134.102391][ T9924] validate_nla: 1 callbacks suppressed
[  134.102401][ T9924] netlink: 'syz.2.1081': attribute type 2 has an invalid length.
[  134.120312][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'.
[  134.149203][ T9924] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  134.285371][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'.
[  134.466534][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'.
[  134.510057][ T9934] netlink: 'syz.0.1085': attribute type 10 has an invalid length.
[  134.529608][ T9934] bond0: (slave wlan1): Opening slave failed
[  134.533404][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'.
[  134.608624][ T9934] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  134.677027][ T9958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1092'.
[  134.696137][ T9956] vxcan1 speed is unknown, defaulting to 1000
[  134.818640][ T9963] vxcan1 speed is unknown, defaulting to 1000
[  135.160591][ T9991] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  135.187830][ T9991] bond10: entered promiscuous mode
[  135.190458][ T9991] 8021q: adding VLAN 0 to HW filter on device bond10
[  135.218056][ T9991] 8021q: adding VLAN 0 to HW filter on device bond10
[  135.221228][ T9991] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  135.227847][ T9991] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  135.254279][ T9991] bond10: (slave wireguard0): making interface the new active one
[  135.266191][ T9991] wireguard0: entered promiscuous mode
[  135.273823][ T9991] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  135.440030][T10009] bond11: entered promiscuous mode
[  135.453116][T10009] 8021q: adding VLAN 0 to HW filter on device bond11
[  135.627377][T10036] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  135.660226][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.669403][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  135.785244][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[  135.795770][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'.
[  135.866089][T10060] syzkaller1: entered promiscuous mode
[  135.868038][T10060] syzkaller1: entered allmulticast mode
[  136.146664][T10069] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  136.148650][T10070] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  136.157496][T10070] sctp: [Deprecated]: syz.2.1121 (pid 10070) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.157496][T10070] Use struct sctp_sack_info instead
[  136.165541][T10069] sctp: [Deprecated]: syz.2.1121 (pid 10069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.165541][T10069] Use struct sctp_sack_info instead
[  136.678161][T10084] netlink: 'syz.0.1125': attribute type 2 has an invalid length.
[  136.687495][T10084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.814584][T10092] vxcan1 speed is unknown, defaulting to 1000
[  137.090774][T10101] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  137.091331][T10100] IPVS: stopping backup sync thread 10101 ...
[  137.163960][T10106] vxcan1 speed is unknown, defaulting to 1000
[  137.578660][T10122] vxcan1 speed is unknown, defaulting to 1000
[  137.615103][T10111] netlink: 'syz.0.1131': attribute type 6 has an invalid length.
[  137.826673][T10131] IPVS: stopping backup sync thread 10036 ...
[  138.103603][T10143] IPVS: stopping backup sync thread 10148 ...
[  138.226024][T10149] vxcan1 speed is unknown, defaulting to 1000
[  138.657413][T10166] __nla_validate_parse: 7 callbacks suppressed
[  138.657423][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'.
[  138.712890][T10156] netlink: 'syz.0.1143': attribute type 6 has an invalid length.
[  138.840223][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'.
[  139.093170][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'.
[  139.263941][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'.
[  139.267945][T10188] : renamed from bond_slave_0
[  139.421097][T10191] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1152'.
[  139.495582][T10193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.572815][T10195] sctp: [Deprecated]: syz.2.1154 (pid 10195) Use of int in max_burst socket option deprecated.
[  139.572815][T10195] Use struct sctp_assoc_value instead
[  139.617082][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'.
[  139.650524][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  139.700127][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'.
[  139.835184][T10211] unsupported nlmsg_type 40
[  139.919791][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'.
[  140.007036][T10223] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  140.228033][T10242] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.304359][T10246] vxcan1 speed is unknown, defaulting to 1000
[  141.137640][T10259] vxcan1 speed is unknown, defaulting to 1000
[  141.888990][T10271] vxcan1 speed is unknown, defaulting to 1000
[  142.204506][T10279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1175'.
[  142.481868][T10292] netlink: 'syz.2.1180': attribute type 21 has an invalid length.
[  142.648628][T10296] netlink: 'syz.0.1181': attribute type 5 has an invalid length.
[  142.743145][T10303] vxcan1 speed is unknown, defaulting to 1000
[  143.316712][T10313] netlink: 'syz.1.1186': attribute type 1 has an invalid length.
[  143.353572][T10313] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.453425][T10313] bond6: (slave veth9): Enslaving as an active interface with a down link
[  143.486933][T10313] macvlan1: entered promiscuous mode
[  143.489327][T10313] macvlan1: entered allmulticast mode
[  143.495369][T10313] bond6: entered promiscuous mode
[  143.498023][T10313] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  143.501703][T10313] bond6: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  143.514325][T10313] bond6: left promiscuous mode
[  143.640757][T10320] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  143.640944][T10319] IPVS: stopping backup sync thread 10320 ...
[  143.728170][T10323] vxcan1 speed is unknown, defaulting to 1000
[  143.917281][T10335] __nla_validate_parse: 2 callbacks suppressed
[  143.917294][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'.
[  143.944096][T10335] tipc: Resetting bearer <eth:team0>
[  143.950103][T10335] tipc: Resetting bearer <eth:syzkaller0>
[  143.957140][T10335] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  143.960083][T10335] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  143.968736][T10335] geneve4: left promiscuous mode
[  143.970936][T10335] geneve4: left allmulticast mode
[  143.977567][T10335] bridge2: left allmulticast mode
[  143.988118][ T5879] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  143.991655][ T5879] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  143.997933][ T5879] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  144.001421][ T5879] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  144.484542][T10357] vxcan1 speed is unknown, defaulting to 1000
[  144.538371][T10359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.767042][T10365] vxcan1 speed is unknown, defaulting to 1000
[  145.035619][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'.
[  145.048986][T10371] hsr_slave_0: left promiscuous mode
[  145.248074][T10386] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.252938][T10386] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  145.262920][T10386] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  145.266373][T10386] tipc: Resetting bearer <eth:syzkaller0>
[  145.400374][T10392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.507162][T10405] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1212'.
[  145.747992][T10415] vxcan1 speed is unknown, defaulting to 1000
[  145.992448][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'.
[  145.996266][T10439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'.
[  146.089990][T10446] bond_slave_0: mtu greater than device maximum
[  146.098022][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'.
[  146.174901][T10453] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  146.174924][T10448] IPVS: stopping backup sync thread 10453 ...
[  146.205681][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  146.289444][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1228'.
[  146.369752][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'.
[  146.490902][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'.
[  147.011944][T10482] syz.2.1234: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  147.099153][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.2.1234 Not tainted syzkaller #0 PREEMPT(full) 
[  147.099167][T10482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.099171][T10482] Call Trace:
[  147.099175][T10482]  <TASK>
[  147.099179][T10482]  dump_stack_lvl+0x189/0x250
[  147.099194][T10482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.099203][T10482]  ? __pfx__printk+0x10/0x10
[  147.099213][T10482]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  147.099222][T10482]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  147.099231][T10482]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  147.099241][T10482]  warn_alloc+0x214/0x310
[  147.099255][T10482]  ? __pfx_warn_alloc+0x10/0x10
[  147.099270][T10482]  ? __get_vm_area_node+0x28f/0x300
[  147.099281][T10482]  ? xskq_create+0xbf/0x170
[  147.099289][T10482]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  147.099312][T10482]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  147.099325][T10482]  ? __kasan_kmalloc+0x93/0xb0
[  147.099337][T10482]  vmalloc_user_noprof+0xad/0xf0
[  147.099348][T10482]  ? xskq_create+0xbf/0x170
[  147.099355][T10482]  xskq_create+0xbf/0x170
[  147.099363][T10482]  xsk_init_queue+0xb0/0x110
[  147.099371][T10482]  xsk_setsockopt+0x57b/0x8d0
[  147.099383][T10482]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.099399][T10482]  ? __pfx_aa_sk_perm+0x10/0x10
[  147.099418][T10482]  ? __fget_files+0x2a/0x420
[  147.099425][T10482]  ? aa_sock_opt_perm+0xff/0x1b0
[  147.099434][T10482]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  147.099442][T10482]  ? __pfx_xsk_setsockopt+0x10/0x10
[  147.099453][T10482]  do_sock_setsockopt+0x17c/0x1b0
[  147.099465][T10482]  __x64_sys_setsockopt+0x13f/0x1b0
[  147.099476][T10482]  do_syscall_64+0xfa/0x3b0
[  147.099484][T10482]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.099491][T10482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.099498][T10482]  ? exc_page_fault+0x9f/0xf0
[  147.099506][T10482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.099513][T10482] RIP: 0033:0x7fb6ea18eba9
[  147.099521][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.099527][T10482] RSP: 002b:00007fb6eb09a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  147.099535][T10482] RAX: ffffffffffffffda RBX: 00007fb6ea3d6090 RCX: 00007fb6ea18eba9
[  147.099540][T10482] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000017
[  147.099544][T10482] RBP: 00007fb6ea211e19 R08: 0000000000000004 R09: 0000000000000000
[  147.099554][T10482] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  147.099559][T10482] R13: 00007fb6ea3d6128 R14: 00007fb6ea3d6090 R15: 00007ffe119a19e8
[  147.099570][T10482]  </TASK>
[  147.099573][T10482] Mem-Info:
[  147.203695][T10482] active_anon:7481 inactive_anon:0 isolated_anon:0
[  147.203695][T10482]  active_file:1424 inactive_file:38274 isolated_file:0
[  147.203695][T10482]  unevictable:1768 dirty:149 writeback:0
[  147.203695][T10482]  slab_reclaimable:10608 slab_unreclaimable:96283
[  147.203695][T10482]  mapped:18067 shmem:2428 pagetables:929
[  147.203695][T10482]  sec_pagetables:0 bounce:0
[  147.203695][T10482]  kernel_misc_reclaimable:0
[  147.203695][T10482]  free:248230 free_pcp:22105 free_cma:0
[  147.219839][T10482] Node 0 active_anon:12844kB inactive_anon:0kB active_file:4296kB inactive_file:6992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41764kB dirty:372kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6884kB pagetables:1728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.231369][T10482] Node 1 active_anon:17080kB inactive_anon:0kB active_file:1400kB inactive_file:146104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30504kB dirty:224kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5536kB pagetables:1988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.242377][T10482] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.269452][T10482] lowmem_reserve[]: 0 811 811 811 811
[  147.271313][T10482] Node 0 DMA32 free:327164kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12844kB inactive_anon:0kB active_file:4296kB inactive_file:6992kB unevictable:3536kB writepending:372kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:38376kB local_pcp:17896kB free_cma:0kB
[  147.284352][T10482] lowmem_reserve[]: 0 0 0 0 0
[  147.286440][T10482] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  147.306183][T10482] lowmem_reserve[]: 0 0 854 854 854
[  147.308846][T10482] Node 1 Normal free:192288kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17284kB inactive_anon:0kB active_file:1400kB inactive_file:146104kB unevictable:3536kB writepending:224kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50400kB local_pcp:22364kB free_cma:0kB
[  147.335951][T10482] lowmem_reserve[]: 0 0 0 0 0
[  147.340007][T10482] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  147.350097][T10482] Node 0 DMA32: 1143*4kB (UME) 664*8kB (UME) 162*16kB (UME) 119*32kB (UME) 267*64kB (UM) 95*128kB (UME) 32*256kB (UME) 10*512kB (UM) 8*1024kB (UM) 3*2048kB (UM) 62*4096kB (M) = 327132kB
[  147.362287][T10482] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  147.376120][T10482] Node 1 Normal: 62*4kB (UME) 447*8kB (UME) 509*16kB (UME) 527*32kB (UME) 114*64kB (UME) 48*128kB (UME) 14*256kB (UM) 12*512kB (U) 9*1024kB (UME) 4*2048kB (U) 30*4096kB (M) = 192288kB
[  147.384199][T10482] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.388236][T10482] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  147.393242][T10482] 42126 total pagecache pages
[  147.395449][T10482] 0 pages in swap cache
[  147.397236][T10482] Free swap  = 124996kB
[  147.399200][T10482] Total swap = 124996kB
[  147.400916][T10482] 786301 pages RAM
[  147.403099][T10482] 0 pages HighMem/MovableOnly
[  147.405101][T10482] 241346 pages reserved
[  147.407079][T10482] 0 pages cma reserved
[  148.177349][T10553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.180708][T10553] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  148.185061][T10553] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  148.237199][T10553] tipc: Resetting bearer <eth:syzkaller0>
[  148.271880][T10557] netlink: 'syz.2.1256': attribute type 5 has an invalid length.
[  148.395192][T10565] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  148.560395][T10569] vxcan1 speed is unknown, defaulting to 1000
[  148.565063][T10571] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  148.570000][T10571] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  149.034628][T10612] __nla_validate_parse: 6 callbacks suppressed
[  149.034642][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  149.074510][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'.
[  149.135793][T10618] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  149.143033][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[  149.154501][T10621] ieee802154 phy0 wpan0: encryption failed: -22
[  149.165928][T10621] team0: Mode changed to "loadbalance"
[  149.301102][T10622] tipc: Resetting bearer <eth:syzkaller0>
[  149.317887][T10624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1277'.
[  149.427955][T10631] vxcan1 speed is unknown, defaulting to 1000
[  149.557229][T10633] vxcan1 speed is unknown, defaulting to 1000
[  150.201066][T10648] pim6reg1: entered promiscuous mode
[  150.205033][T10648] pim6reg1: entered allmulticast mode
[  150.658925][T10683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1294'.
[  150.964008][T10713] vxcan1 speed is unknown, defaulting to 1000
[  150.984948][T10715] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1302'.
[  151.004937][T10717] IPVS: stopping backup sync thread 10223 ...
[  151.074156][T10723] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  151.074312][T10722] IPVS: stopping backup sync thread 10723 ...
[  151.312863][T10742] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1311'.
[  151.396604][T10749] gretap0: refused to change device tx_queue_len
[  151.398724][T10749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.472139][T10750] syzkaller0: entered promiscuous mode
[  151.475203][T10750] syzkaller0: entered allmulticast mode
[  151.531944][T10754] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  151.534845][T10752] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  151.628802][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'.
[  151.868898][T10770] netlink: 'syz.1.1318': attribute type 23 has an invalid length.
[  151.994932][T10776] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1321'.
[  152.063182][T10782] vxcan1 speed is unknown, defaulting to 1000
[  152.300149][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  152.307212][T10794] netlink: 'syz.1.1325': attribute type 66 has an invalid length.
[  152.383954][T10796] netlink: 'syz.1.1326': attribute type 29 has an invalid length.
[  152.387395][T10796] netlink: 'syz.1.1326': attribute type 29 has an invalid length.
[  152.390602][T10796] unsupported nla_type 59
[  152.588091][T10803] netlink: 'syz.1.1329': attribute type 13 has an invalid length.
[  152.591359][T10803] netlink: 'syz.1.1329': attribute type 17 has an invalid length.
[  152.633239][T10803] 8021q: adding VLAN 0 to HW filter on device team0
[  152.636579][T10803] tipc: Resetting bearer <eth:team0>
[  152.639232][T10803] tipc: Resetting bearer <eth:team0>
[  152.648608][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.898747][T10812] ip6tnl2: entered promiscuous mode
[  152.901001][T10812] ip6tnl2: entered allmulticast mode
[  152.905066][T10812] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  153.273664][T10828] netlink: 'syz.1.1338': attribute type 7 has an invalid length.
[  153.346396][T10830] vxcan1 speed is unknown, defaulting to 1000
[  153.615833][T10844] netlink: 'syz.1.1344': attribute type 9 has an invalid length.
[  153.734248][T10852] IPVS: Unknown mcast interface: ipvlan1
[  153.947307][T10877] netlink: 'syz.0.1353': attribute type 1 has an invalid length.
[  154.056954][T10890] __nla_validate_parse: 6 callbacks suppressed
[  154.056964][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  154.129434][T10890] bridge4: port 1(veth3) entered blocking state
[  154.131872][T10890] bridge4: port 1(veth3) entered disabled state
[  154.139061][T10890] veth3: entered allmulticast mode
[  154.141531][T10890] veth3: entered promiscuous mode
[  154.144553][T10883] vxcan1 speed is unknown, defaulting to 1000
[  154.153269][T10890] bridge4: port 2(veth0_to_bond) entered blocking state
[  154.155596][T10890] bridge4: port 2(veth0_to_bond) entered disabled state
[  154.157884][T10890] veth0_to_bond: entered allmulticast mode
[  154.161648][T10890] veth0_to_bond: entered promiscuous mode
[  154.257488][T10906] netlink: 'syz.1.1361': attribute type 1 has an invalid length.
[  154.265102][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.365637][T10921] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  154.401343][T10920] bond9: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  154.502869][T10934] netlink: 'syz.0.1366': attribute type 1 has an invalid length.
[  154.519987][T10934] 8021q: adding VLAN 0 to HW filter on device bond10
[  154.539772][T10934] bond10: (slave veth5): Enslaving as an active interface with a down link
[  154.553083][T10934] macvlan2: entered promiscuous mode
[  154.554948][T10934] macvlan2: entered allmulticast mode
[  154.864736][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'.
[  154.938417][T10950] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1371'.
[  155.565518][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'.
[  155.612636][T10957] netlink: 'syz.0.1372': attribute type 4 has an invalid length.
[  156.307252][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'.
[  156.310302][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'.
[  156.316022][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'.
[  156.319741][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'.
[  156.470195][T11005] IPVS: stopping backup sync thread 11007 ...
[  156.477090][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'.
[  156.566541][T11010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1382'.
[  156.570175][T11010] tc_dump_action: action bad kind
[  156.667065][T11018] batman_adv: batadv0: Adding interface: ipvlan3
[  156.690972][T11018] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  156.703441][T11018] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  156.767066][T11027] netlink: 'syz.0.1384': attribute type 10 has an invalid length.
[  156.771798][T11027] team0: Port device geneve0 added
[  156.776562][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.780065][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.784132][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.789596][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.833176][T11035] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  156.943120][T11049] netlink: 'syz.2.1389': attribute type 3 has an invalid length.
[  156.945449][T11049] netlink: 'syz.2.1389': attribute type 1 has an invalid length.
[  157.055455][T11059] xt_l2tp: invalid flags combination: 0
[  157.058096][T11059] xt_l2tp: invalid flags combination: 0
[  157.063163][T11059] xt_l2tp: invalid flags combination: 0
[  157.066985][T11059] xt_l2tp: invalid flags combination: 0
[  157.070196][T11059] xt_l2tp: invalid flags combination: 0
[  157.083761][T11059] xt_l2tp: invalid flags combination: 0
[  157.086254][T11059] xt_l2tp: invalid flags combination: 0
[  157.094067][T11059] xt_l2tp: invalid flags combination: 0
[  157.100158][T11059] xt_l2tp: invalid flags combination: 0
[  157.105408][T11059] xt_l2tp: invalid flags combination: 0
[  157.154767][T11065] vxcan1 speed is unknown, defaulting to 1000
[  157.285915][T11070] 8021q: adding VLAN 0 to HW filter on device bond11
[  157.389636][T11069] veth7: entered promiscuous mode
[  157.426850][T11070] veth9: entered promiscuous mode
[  157.481103][T11079] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  157.487686][T11077] IPVS: stopping backup sync thread 11079 ...
[  157.537157][T11084] vlan0: entered allmulticast mode
[  157.665796][T11092] vxcan1 speed is unknown, defaulting to 1000
[  157.717540][T11097] pim6reg: entered allmulticast mode
[  157.729453][T11097] pim6reg: left allmulticast mode
[  158.284906][T11123] validate_nla: 3 callbacks suppressed
[  158.284921][T11123] netlink: 'syz.1.1410': attribute type 9 has an invalid length.
[  158.394761][T11131] netlink: 'syz.1.1414': attribute type 4 has an invalid length.
[  158.400960][T11131] netlink: 'syz.1.1414': attribute type 12 has an invalid length.
[  158.486916][T11139] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  158.586381][T11147] netlink: 'syz.1.1421': attribute type 1 has an invalid length.
[  158.685640][T11158] netlink: 'syz.1.1423': attribute type 1 has an invalid length.
[  158.740059][T11162] tipc: Resetting bearer <eth:team0>
[  158.746910][T11162] tipc: Resetting bearer <eth:syzkaller0>
[  158.760757][T11162] bond6: (slave veth9): Releasing active interface
[  158.771271][T11164] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  158.792219][T11164] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  158.844203][T11162] team0: Mode changed to "activebackup"
[  158.854937][T11165] batadv_slave_0: left promiscuous mode
[  158.863930][T11165] geneve3: left promiscuous mode
[  158.886200][T11165] bond10: left promiscuous mode
[  158.891070][T11165] wireguard0: left promiscuous mode
[  158.895634][T11165] bond11: left promiscuous mode
[  158.898207][T11165] tipc: Resetting bearer <eth:syzkaller0>
[  158.911614][T11165] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  158.914419][T11165] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  158.923418][ T5887] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  158.926148][ T5887] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.929133][ T5887] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  158.931810][ T5887] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.935006][T11170] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  158.937418][T11170] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  158.940028][T11170] tipc: Resetting bearer <eth:syzkaller0>
[  158.943416][ T5887] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  158.946230][ T5887] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.949170][ T5887] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  158.953368][ T5887] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  159.018916][T11181] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.026707][T11180] IPVS: stopping backup sync thread 11181 ...
[  159.088841][T11191] __nla_validate_parse: 18 callbacks suppressed
[  159.088850][T11191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'.
[  159.095865][T11191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1434'.
[  159.341797][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'.
[  159.515586][T11207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.521308][T11207] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  159.524606][T11207] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1439'.
[  159.644536][T11217] netlink: 'syz.2.1443': attribute type 1 has an invalid length.
[  159.772464][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1445'.
[  159.915869][T11233] netlink: 'syz.2.1448': attribute type 13 has an invalid length.
[  159.996075][T11235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1449'.
[  160.050741][T11238] tipc: Resetting bearer <eth:syzkaller0>
[  160.138136][T11245] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1452'.
[  160.268757][T11253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1454'.
[  160.274985][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'.
[  160.315522][T11257] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  160.315696][T11256] IPVS: stopping backup sync thread 11257 ...
[  160.425480][T11265] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1458'.
[  160.894841][T11281] vxcan1 speed is unknown, defaulting to 1000
[  160.917842][T11283] netlink: 'syz.0.1462': attribute type 33 has an invalid length.
[  160.947832][T11289] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  160.947873][T11288] IPVS: stopping backup sync thread 11289 ...
[  160.957438][T11288] netlink: 'syz.0.1463': attribute type 29 has an invalid length.
[  161.192920][T11303] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  161.196620][T11302] IPVS: stopping backup sync thread 11303 ...
[  161.267212][T11307] vxcan1 speed is unknown, defaulting to 1000
[  161.322600][T11309] 8021q: adding VLAN 0 to HW filter on device bond13
[  162.120210][T11309] bond13: entered promiscuous mode
[  162.155424][T11318] vxcan1 speed is unknown, defaulting to 1000
[  162.334014][T11323] vxcan1 speed is unknown, defaulting to 1000
[  162.411586][T11325] syz_tun: entered promiscuous mode
[  162.414487][T11325] syz_tun: entered allmulticast mode
[  162.472315][ T6082] syz1: Port: 1 Link DOWN
[  162.630011][T11342] !: entered promiscuous mode
[  162.634350][T11342] !: left promiscuous mode
[  162.695963][ T2987] smc: removing ib device syz1
[  162.989781][T11357] vxcan1 speed is unknown, defaulting to 1000
[  163.458658][T11383] ip6tnl3: entered promiscuous mode
[  163.462897][T11383] ip6tnl3: entered allmulticast mode
[  163.467339][T11383] team0: Refused to change device type
[  163.687053][T11394] vlan0: entered promiscuous mode
[  163.689064][T11394] bond0: entered promiscuous mode
[  163.695521][T11394] vlan0: entered allmulticast mode
[  163.700566][T11394] bond0: entered allmulticast mode
[  163.978786][T11410] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  163.981865][   T24] IPVS: starting estimator thread 0...
[  164.076085][T11412] IPVS: using max 79 ests per chain, 189600 per kthread
[  164.100769][T11420] vxcan1 speed is unknown, defaulting to 1000
[  164.651877][T11420] validate_nla: 3 callbacks suppressed
[  164.651888][T11420] netlink: 'syz.1.1500': attribute type 6 has an invalid length.
[  164.711416][T11446] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.717703][T11450] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  164.720829][T11450] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  164.734769][T11450] tipc: Resetting bearer <eth:syzkaller0>
[  164.801924][T11444] __nla_validate_parse: 8 callbacks suppressed
[  164.801934][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'.
[  165.314112][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1511'.
[  165.409962][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1512'.
[  165.414486][T11469] netlink: 432 bytes leftover after parsing attributes in process `syz.0.1512'.
[  165.512250][T11477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.515077][T11477] IPv6: NLM_F_CREATE should be set when creating new route
[  165.517488][T11477] IPv6: NLM_F_CREATE should be set when creating new route
[  165.531938][T11477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  165.739401][T11480] vxcan1 speed is unknown, defaulting to 1000
[  165.756409][T11481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1515'.
[  165.799574][T11492] netlink: 'syz.1.1520': attribute type 1 has an invalid length.
[  165.846504][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'.
[  166.057393][T11516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.061423][T11516] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  166.066031][T11516] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  166.068546][T11516] tipc: Resetting bearer <eth:syzkaller0>
[  166.074806][T11516] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  166.141539][T11516] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  166.158316][T11519] vxcan1 speed is unknown, defaulting to 1000
[  166.328672][T11518] vxcan1 speed is unknown, defaulting to 1000
[  166.430255][T11536] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  166.435791][T11535] IPVS: stopping backup sync thread 11536 ...
[  166.509945][T11538] vlan0: entered allmulticast mode
[  166.511726][T11538] batadv0: entered allmulticast mode
[  166.540633][T11540] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.1533'.
[  166.548819][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  166.553003][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  166.793836][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[  166.816841][T11546] tipc: Resetting bearer <eth:team0>
[  166.835466][T11546] tipc: Resetting bearer <eth:syzkaller0>
[  166.845991][T11546] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  166.849090][T11546] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  166.861951][T11546] vlan0: left allmulticast mode
[  166.864787][T11546] batadv0: left allmulticast mode
[  166.976745][T11555] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  167.745040][T11603] netlink: 'syz.2.1552': attribute type 1 has an invalid length.
[  167.835154][T11615] netlink: 'syz.1.1557': attribute type 13 has an invalid length.
[  167.838654][T11615] netlink: 'syz.1.1557': attribute type 17 has an invalid length.
[  168.046208][T11633] netlink: 'syz.1.1563': attribute type 1 has an invalid length.
[  168.269510][T11654] vxcan1 speed is unknown, defaulting to 1000
[  168.280448][T11658] netlink: 'syz.0.1569': attribute type 30 has an invalid length.
[  168.648887][T11673] dvmrp0: entered allmulticast mode
[  168.880087][T11686] vxcan1 speed is unknown, defaulting to 1000
[  169.091166][T11708] netlink: 'syz.0.1583': attribute type 1 has an invalid length.
[  169.148474][T11714] 8021q: VLANs not supported on team0
[  169.691815][T11745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.769897][T11748] vxcan1 speed is unknown, defaulting to 1000
[  170.355507][T11762] IPVS: stopping backup sync thread 11763 ...
[  170.357835][T11763] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  170.443432][T11773] tipc: Resetting bearer <eth:syzkaller0>
[  170.446288][T11773] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.449510][T11773] netlink: 'syz.1.1601': attribute type 1 has an invalid length.
[  170.454693][T11773] netlink: 'syz.1.1601': attribute type 11 has an invalid length.
[  170.458067][T11773] __nla_validate_parse: 14 callbacks suppressed
[  170.458078][T11773] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1601'.
[  170.477191][T11773] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1601'.
[  170.671647][T11788] sctp: [Deprecated]: syz.0.1608 (pid 11788) Use of int in maxseg socket option.
[  170.671647][T11788] Use struct sctp_assoc_value instead
[  170.778921][T11802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'.
[  170.783129][T11802] netlink: 'syz.0.1612': attribute type 18 has an invalid length.
[  170.811302][T11804] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1613'.
[  170.816913][T11804] netlink: 'syz.2.1613': attribute type 1 has an invalid length.
[  170.888423][T11814] bond0: (slave bond9): Releasing backup interface
[  170.893259][T11814] bond10: (slave wireguard0): Releasing backup interface
[  170.916229][T11814] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1616'.
[  171.503895][T11828] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  171.890412][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'.
[  171.998139][T11866] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  172.161268][T11880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.454441][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'.
[  172.605207][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[  172.692292][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'.
[  172.889152][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'.
[  173.012207][T11927] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.023947][T11927] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  173.146077][T11937] pim6reg1: entered promiscuous mode
[  173.148655][T11937] pim6reg1: entered allmulticast mode
[  173.275178][T11946] netlink: 'syz.0.1660': attribute type 10 has an invalid length.
[  173.286006][T11946] !: entered promiscuous mode
[  173.287865][T11946] !: entered allmulticast mode
[  173.290488][T11946] bond0: (slave 0!): Enslaving as an active interface with an up link
[  173.342561][T11953] vlan1: entered allmulticast mode
[  173.365860][T11955] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004
[  173.380750][T11957] netlink: 'syz.0.1665': attribute type 30 has an invalid length.
[  173.496175][T11967] netlink: 'syz.0.1669': attribute type 10 has an invalid length.
[  173.632239][T11970] ieee802154 phy0 wpan0: encryption failed: -22
[  173.655144][T11976] netlink: 'syz.1.1671': attribute type 1 has an invalid length.
[  173.701045][T11976] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  173.714629][T11976] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  173.772865][T11976] bond8: (slave bridge6): Enslaving as an active interface with a down link
[  173.781592][T11976] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode
[  173.787963][T11977] macvlan1: entered promiscuous mode
[  173.789872][T11977] macvlan1: entered allmulticast mode
[  173.829135][T11989] nbd: must specify at least one socket
[  173.849004][T11992] IPVS: stopping backup sync thread 11828 ...
[  174.310651][T12027] vxcan1 speed is unknown, defaulting to 1000
[  174.893168][T12053] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  174.952403][T12057] vxcan1 speed is unknown, defaulting to 1000
[  175.101272][T12058] vxcan1 speed is unknown, defaulting to 1000
[  175.381643][T12085] IPVS: dh: TCP 172.20.20.170:0 - no destination available
[  175.787473][T12097] netlink: 'syz.2.1692': attribute type 2 has an invalid length.
[  175.807665][T12097] k*: entered promiscuous mode
[  175.878295][T12097] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.887015][T12097] 8021q: adding VLAN 0 to HW filter on device team0
[  175.896796][T12097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.035470][T12114] __nla_validate_parse: 18 callbacks suppressed
[  176.035485][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'.
[  176.042644][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'.
[  176.046864][T12112] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  176.085840][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'.
[  176.089861][T12119] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  176.106355][T12118] IPVS: stopping backup sync thread 12119 ...
[  176.171227][T12121] sctp: [Deprecated]: syz.2.1699 (pid 12121) Use of int in max_burst socket option deprecated.
[  176.171227][T12121] Use struct sctp_assoc_value instead
[  176.261444][T12125] sctp: [Deprecated]: syz.2.1701 (pid 12125) Use of int in maxseg socket option.
[  176.261444][T12125] Use struct sctp_assoc_value instead
[  176.303626][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'.
[  176.611975][T12159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1710'.
[  176.625177][T12163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1710'.
[  176.629517][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'.
[  176.642525][T12163] vxcan1 speed is unknown, defaulting to 1000
[  176.661705][T12165] dvmrp0: entered allmulticast mode
[  176.764398][T12173] netlink: 'syz.1.1714': attribute type 13 has an invalid length.
[  176.907361][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'.
[  176.921957][T12194] bond9: entered promiscuous mode
[  176.924097][T12194] 8021q: adding VLAN 0 to HW filter on device bond9
[  176.927053][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'.
[  176.930660][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'.
[  177.070778][T12206] vxcan1 speed is unknown, defaulting to 1000
[  177.200874][T12210] vxcan1 speed is unknown, defaulting to 1000
[  177.323997][T12219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.548919][T12228] netlink: 'syz.0.1728': attribute type 13 has an invalid length.
[  177.618384][T12234] dvmrp1: entered allmulticast mode
[  177.896221][T12255] vxcan1 speed is unknown, defaulting to 1000
[  177.931449][T12260] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  178.062713][T12277] IPVS: stopping backup sync thread 12260 ...
[  179.022963][T12307] netlink: 'syz.0.1749': attribute type 1 has an invalid length.
[  179.060301][T12307] bond14: entered promiscuous mode
[  179.062638][T12307] bond14: entered allmulticast mode
[  179.064658][T12307] 8021q: adding VLAN 0 to HW filter on device bond14
[  179.096511][T12307] 8021q: adding VLAN 0 to HW filter on device bond15
[  179.100904][T12307] bond15: entered promiscuous mode
[  179.103222][T12307] bond15: entered allmulticast mode
[  179.105414][T12307] bond14: (slave bond15): Enslaving as a backup interface with a down link
[  179.175901][T12320] netlink: 'syz.0.1751': attribute type 13 has an invalid length.
[  179.226516][T12322] delete_channel: no stack
[  179.234495][T12322] delete_channel: no stack
[  179.259749][T12331] bond0: entered promiscuous mode
[  179.264024][T12331] bond0: left promiscuous mode
[  179.269755][T12335] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  179.291080][T12335] syzkaller1: entered promiscuous mode
[  179.299844][T12335] syzkaller1: entered allmulticast mode
[  179.321222][T12341] netlink: 'syz.1.1758': attribute type 1 has an invalid length.
[  179.347046][T12341] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  179.351161][T12341] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  179.354850][T12341] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  179.361198][T12341] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  179.374582][T12347] netlink: 'syz.2.1760': attribute type 13 has an invalid length.
[  179.391229][T12349] netlink: 'syz.0.1761': attribute type 4 has an invalid length.
[  179.491411][T12363] gretap0: refused to change device tx_queue_len
[  179.493797][T12363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  179.522134][ T5856] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  179.577947][T12372] vxcan1 speed is unknown, defaulting to 1000
[  179.616640][T12375] bond11: entered promiscuous mode
[  179.618826][T12375] 8021q: adding VLAN 0 to HW filter on device bond11
[  179.655537][T12375] 8021q: adding VLAN 0 to HW filter on device bond11
[  179.657934][T12375] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  179.661297][T12375] bond11: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  179.667697][T12375] bond11: (slave wireguard1): making interface the new active one
[  179.670325][T12375] wireguard1: entered promiscuous mode
[  179.674298][T12375] bond11: (slave wireguard1): Enslaving as an active interface with an up link
[  179.717113][T12375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.719617][T12375] IPv6: NLM_F_CREATE should be set when creating new route
[  179.721936][T12375] IPv6: NLM_F_CREATE should be set when creating new route
[  179.732348][T12375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  179.740887][T12375] bond11: (slave wireguard2): The slave device specified does not support setting the MAC address
[  179.747655][T12375] bond11: (slave wireguard2): Enslaving as a backup interface with an up link
[  179.886510][T12392] vxcan5: entered allmulticast mode
[  180.071881][T12413] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  180.077759][T12412] IPVS: stopping backup sync thread 12413 ...
[  180.181696][T12423] vxcan1 speed is unknown, defaulting to 1000
[  180.393560][T12430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.397171][T12430] tipc: Resetting bearer <eth:syzkaller0>
[  180.401271][T12429] tipc: Disabling bearer <eth:syzkaller0>
[  180.796813][T12455] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  180.800433][T12453] IPVS: stopping backup sync thread 12455 ...
[  180.804159][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  180.849014][T12457] vxcan1 speed is unknown, defaulting to 1000
[  180.940177][T12458] vxcan1 speed is unknown, defaulting to 1000
[  181.089722][T12463] raw_sendmsg: syz.0.1794 forgot to set AF_INET. Fix it!
[  181.458597][T12487] validate_nla: 4 callbacks suppressed
[  181.458607][T12487] netlink: 'syz.2.1802': attribute type 13 has an invalid length.
[  181.463487][T12487] __nla_validate_parse: 23 callbacks suppressed
[  181.463494][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'.
[  181.570179][T12497] vxcan1 speed is unknown, defaulting to 1000
[  181.639982][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  181.708205][T12498] tipc: Resetting bearer <eth:syzkaller0>
[  181.716555][T12498] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  181.718989][T12498] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  181.719089][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'.
[  181.723308][T12503] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  181.758811][T12505] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  181.762376][T12505] bond2: (slave macvlan2): making interface the new active one
[  181.766224][T12505] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  181.780581][T12503] bridge0: port 1(syz_tun) entered blocking state
[  181.783117][T12503] bridge0: port 1(syz_tun) entered disabled state
[  181.785355][T12503] syz_tun: entered allmulticast mode
[  181.792427][T12503] syz_tun: entered promiscuous mode
[  181.977223][T12503] infiniband syz1: set down
[  181.979830][T12503] infiniband syz1: added syz_tun
[  181.999781][T12503] RDS/IB: syz1: added
[  182.001356][T12503] smc: adding ib device syz1 with port count 1
[  182.003813][T12503] smc:    ib device syz1 port 1 has pnetid 
[  182.471769][T12526] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  182.475902][T12523] IPVS: stopping backup sync thread 12526 ...
[  182.530344][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'.
[  182.548970][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1812'.
[  182.582458][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  182.818610][T12549] vxcan1 speed is unknown, defaulting to 1000
[  182.829678][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'.
[  183.029663][T12560] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  183.105391][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'.
[  183.140819][T12552] vxcan1 speed is unknown, defaulting to 1000
[  183.628530][T12588] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  183.632218][T12587] IPVS: stopping backup sync thread 12588 ...
[  183.679581][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'.
[  183.975530][T12619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1831'.
[  184.017901][T12619] vxcan1 speed is unknown, defaulting to 1000
[  184.367035][T12634] vxcan1 speed is unknown, defaulting to 1000
[  184.387323][T12628] netlink: 'syz.1.1831': attribute type 6 has an invalid length.
[  185.266738][T12685] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  185.314691][T12685] macvlan2: left promiscuous mode
[  185.319315][T12685] macvlan2: left allmulticast mode
[  185.335613][T12685] veth7: left promiscuous mode
[  185.337386][T12685] veth9: left promiscuous mode
[  185.339354][T12685] bond13: left promiscuous mode
[  185.359235][T12685] bond14: left promiscuous mode
[  185.361656][T12685] bond15: left promiscuous mode
[  185.364661][T12685] bond14: left allmulticast mode
[  185.366375][T12685] bond15: left allmulticast mode
[  185.369595][T12685] vxcan5: left allmulticast mode
[  185.371795][ T5879] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.375361][T12700] netlink: 'syz.2.1847': attribute type 14 has an invalid length.
[  185.375531][T12693] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.384990][ T5879] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.384999][T12700] netlink: 'syz.2.1847': attribute type 14 has an invalid length.
[  185.397493][ T5879] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.400547][ T5879] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.627205][T12720] 8021q: adding VLAN 0 to HW filter on device bond13
[  185.631982][T12725] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  185.635456][T12725] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  185.638990][T12725] tipc: Resetting bearer <eth:syzkaller0>
[  185.660862][T12723] netlink: 'syz.0.1854': attribute type 21 has an invalid length.
[  186.032503][T12743] syzkaller1: entered promiscuous mode
[  186.034955][T12743] syzkaller1: entered allmulticast mode
[  186.616535][T12757] vxcan1 speed is unknown, defaulting to 1000
[  186.681695][T12767] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  186.688104][T12765] IPVS: stopping backup sync thread 12767 ...
[  186.689108][T12768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  186.989106][T12782] syz.0.1871: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  186.998064][T12782] CPU: 0 UID: 0 PID: 12782 Comm: syz.0.1871 Not tainted syzkaller #0 PREEMPT(full) 
[  186.998075][T12782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.998080][T12782] Call Trace:
[  186.998084][T12782]  <TASK>
[  186.998088][T12782]  dump_stack_lvl+0x189/0x250
[  186.998101][T12782]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.998110][T12782]  ? __pfx__printk+0x10/0x10
[  186.998121][T12782]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  186.998131][T12782]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  186.998140][T12782]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  186.998150][T12782]  warn_alloc+0x214/0x310
[  186.998164][T12782]  ? __pfx_warn_alloc+0x10/0x10
[  186.998188][T12782]  ? __get_vm_area_node+0x28f/0x300
[  186.998199][T12782]  ? xskq_create+0xbf/0x170
[  186.998208][T12782]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  186.998231][T12782]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  186.998244][T12782]  ? __kasan_kmalloc+0x93/0xb0
[  186.998256][T12782]  vmalloc_user_noprof+0xad/0xf0
[  186.998267][T12782]  ? xskq_create+0xbf/0x170
[  186.998274][T12782]  xskq_create+0xbf/0x170
[  186.998282][T12782]  xsk_init_queue+0xb0/0x110
[  186.998290][T12782]  xsk_setsockopt+0x57b/0x8d0
[  186.998319][T12782]  ? __pfx_xsk_setsockopt+0x10/0x10
[  186.998331][T12782]  ? __pfx_aa_sk_perm+0x10/0x10
[  186.998344][T12782]  ? __fget_files+0x2a/0x420
[  186.998350][T12782]  ? aa_sock_opt_perm+0xff/0x1b0
[  186.998359][T12782]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  186.998367][T12782]  ? __pfx_xsk_setsockopt+0x10/0x10
[  186.998379][T12782]  do_sock_setsockopt+0x17c/0x1b0
[  186.998412][T12782]  __x64_sys_setsockopt+0x13f/0x1b0
[  186.998424][T12782]  do_syscall_64+0xfa/0x3b0
[  186.998432][T12782]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.998439][T12782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.998446][T12782]  ? exc_page_fault+0x9f/0xf0
[  186.998454][T12782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.998461][T12782] RIP: 0033:0x7fbf8f78eba9
[  186.998469][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.998475][T12782] RSP: 002b:00007fbf8d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  186.998484][T12782] RAX: ffffffffffffffda RBX: 00007fbf8f9d5fa0 RCX: 00007fbf8f78eba9
[  186.998490][T12782] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  186.998494][T12782] RBP: 00007fbf8f811e19 R08: 0000000000000004 R09: 0000000000000000
[  186.998499][T12782] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  186.998503][T12782] R13: 00007fbf8f9d6038 R14: 00007fbf8f9d5fa0 R15: 00007ffe8cda6958
[  186.998515][T12782]  </TASK>
[  186.998551][T12782] Mem-Info:
[  187.105060][T12782] active_anon:7518 inactive_anon:0 isolated_anon:0
[  187.105060][T12782]  active_file:1582 inactive_file:38294 isolated_file:0
[  187.105060][T12782]  unevictable:1768 dirty:68 writeback:0
[  187.105060][T12782]  slab_reclaimable:10738 slab_unreclaimable:103083
[  187.105060][T12782]  mapped:19342 shmem:2442 pagetables:924
[  187.105060][T12782]  sec_pagetables:0 bounce:0
[  187.105060][T12782]  kernel_misc_reclaimable:0
[  187.105060][T12782]  free:240427 free_pcp:21925 free_cma:0
[  187.123882][T12782] Node 0 active_anon:13168kB inactive_anon:0kB active_file:4456kB inactive_file:7004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46384kB dirty:228kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6920kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.136259][T12782] Node 1 active_anon:16904kB inactive_anon:0kB active_file:1872kB inactive_file:146172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30984kB dirty:44kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6096kB pagetables:1572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.146967][T12782] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.157464][T12782] lowmem_reserve[]: 0 811 811 811 811
[  187.159246][T12782] Node 0 DMA32 free:319348kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13168kB inactive_anon:0kB active_file:4456kB inactive_file:7004kB unevictable:3536kB writepending:228kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:31680kB local_pcp:18508kB free_cma:0kB
[  187.169707][T12782] lowmem_reserve[]: 0 0 0 0 0
[  187.171279][T12782] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  187.181014][T12782] lowmem_reserve[]: 0 0 854 854 854
[  187.183125][T12782] Node 1 Normal free:168508kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16904kB inactive_anon:0kB active_file:1872kB inactive_file:146172kB unevictable:3536kB writepending:44kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:55944kB local_pcp:19120kB free_cma:0kB
[  187.193869][T12782] lowmem_reserve[]: 0 0 0 0 0
[  187.195463][T12782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  187.199726][T12782] Node 0 DMA32: 1269*4kB (UME) 1500*8kB (UME) 532*16kB (UME) 260*32kB (UM) 58*64kB (UME) 43*128kB (UME) 29*256kB (UM) 7*512kB (M) 3*1024kB (M) 2*2048kB (UM) 63*4096kB (M) = 319348kB
[  187.205683][T12782] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  187.211580][T12782] Node 1 Normal: 833*4kB (UME) 161*8kB (UE) 291*16kB (UME) 160*32kB (UME) 125*64kB (UME) 11*128kB (UE) 3*256kB (UM) 1*512kB (U) 6*1024kB (UE) 7*2048kB (UM) 30*4096kB (UM) = 168444kB
[  187.217708][T12782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.220894][T12782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.224199][T12782] 42318 total pagecache pages
[  187.225788][T12782] 0 pages in swap cache
[  187.227177][T12782] Free swap  = 124996kB
[  187.228569][T12782] Total swap = 124996kB
[  187.229974][T12782] 786301 pages RAM
[  187.231274][T12782] 0 pages HighMem/MovableOnly
[  187.232955][T12782] 241346 pages reserved
[  187.234308][T12782] 0 pages cma reserved
[  187.303494][T12787] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  187.306968][T12787] bond8: (slave macvlan3): making interface the new active one
[  187.309544][T12787] bond8: (slave macvlan3): Enslaving as an active interface with an up link
[  187.315904][T12787] bond0: (slave 0!): Releasing backup interface
[  187.319876][T12787] !: left promiscuous mode
[  187.321407][T12787] !: left allmulticast mode
[  187.332927][T12787] veth0_to_bond: left allmulticast mode
[  187.334755][T12787] veth0_to_bond: left promiscuous mode
[  187.336629][T12787] bridge4: port 2(veth0_to_bond) entered disabled state
[  187.346251][T12787] team0: Port device geneve0 removed
[  187.348729][T12787] veth3: left allmulticast mode
[  187.350339][T12787] veth3: left promiscuous mode
[  187.352705][T12787] bridge4: port 1(veth3) entered disabled state
[  187.358886][T12787] bond9: (slave ip6gretap3): Releasing backup interface
[  187.363677][T12787] bond10: (slave veth5): Releasing active interface
[  187.367612][T12787] batman_adv: batadv0: Removing interface: ipvlan3
[  187.370737][T12787] bond14: (slave bond15): Releasing backup interface
[  187.377142][T12787] bond8: (slave macvlan3): Releasing backup interface
[  187.432654][T12793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.474260][T12796] __nla_validate_parse: 11 callbacks suppressed
[  187.474270][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'.
[  187.539474][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'.
[  187.569182][T12801] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  187.571844][T12801] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  187.574647][T12801] tipc: Resetting bearer <eth:syzkaller0>
[  187.660841][T12804] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  187.665454][T12804] CPU: 0 UID: 0 PID: 12804 Comm: syz.1.1878 Not tainted syzkaller #0 PREEMPT(full) 
[  187.665465][T12804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.665470][T12804] Call Trace:
[  187.665473][T12804]  <TASK>
[  187.665477][T12804]  dump_stack_lvl+0x189/0x250
[  187.665491][T12804]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.665500][T12804]  ? __pfx__printk+0x10/0x10
[  187.665513][T12804]  ? kernfs_path_from_node+0x2f/0x290
[  187.665521][T12804]  ? kernfs_path_from_node+0x250/0x290
[  187.665529][T12804]  ? kernfs_path_from_node+0x2f/0x290
[  187.665538][T12804]  sysfs_warn_dup+0x8e/0xa0
[  187.665546][T12804]  sysfs_do_create_link_sd+0xc0/0x110
[  187.665555][T12804]  device_add_class_symlinks+0x1cf/0x240
[  187.665567][T12804]  device_add+0x475/0xb50
[  187.665578][T12804]  wiphy_register+0x1ba6/0x28d0
[  187.665593][T12804]  ? __pfx_wiphy_register+0x10/0x10
[  187.665600][T12804]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  187.665614][T12804]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  187.665625][T12804]  ieee80211_register_hw+0x3484/0x4100
[  187.665642][T12804]  ? ieee80211_register_hw+0x1461/0x4100
[  187.665656][T12804]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  187.665667][T12804]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.665683][T12804]  ? __hrtimer_setup+0x187/0x210
[  187.665690][T12804]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  187.665699][T12804]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  187.665723][T12804]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  187.665733][T12804]  ? trace_kmalloc+0x1f/0xd0
[  187.665742][T12804]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  187.665752][T12804]  ? kstrndup+0xbf/0x160
[  187.665765][T12804]  hwsim_new_radio_nl+0xea4/0x1b10
[  187.665777][T12804]  ? __pfx___nla_validate_parse+0x10/0x10
[  187.665791][T12804]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.665807][T12804]  ? __nla_parse+0x40/0x60
[  187.665816][T12804]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  187.665850][T12804]  genl_family_rcv_msg_doit+0x215/0x300
[  187.665864][T12804]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  187.665879][T12804]  ? bpf_lsm_capable+0x9/0x20
[  187.665889][T12804]  ? security_capable+0x7e/0x2e0
[  187.665904][T12804]  genl_rcv_msg+0x60e/0x790
[  187.665916][T12804]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.665926][T12804]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  187.665943][T12804]  netlink_rcv_skb+0x208/0x470
[  187.665950][T12804]  ? __lock_acquire+0xab9/0xd20
[  187.665961][T12804]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.665971][T12804]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.665987][T12804]  ? down_read+0x1ad/0x2e0
[  187.665997][T12804]  genl_rcv+0x28/0x40
[  187.666005][T12804]  netlink_unicast+0x82f/0x9e0
[  187.666021][T12804]  ? __pfx_netlink_unicast+0x10/0x10
[  187.666033][T12804]  ? netlink_sendmsg+0x642/0xb30
[  187.666040][T12804]  ? skb_put+0x11b/0x210
[  187.666050][T12804]  netlink_sendmsg+0x805/0xb30
[  187.666062][T12804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.666071][T12804]  ? aa_sock_msg_perm+0xf1/0x1d0
[  187.666080][T12804]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  187.666088][T12804]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.666096][T12804]  __sock_sendmsg+0x21c/0x270
[  187.666108][T12804]  ____sys_sendmsg+0x505/0x830
[  187.666120][T12804]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.666134][T12804]  ? import_iovec+0x74/0xa0
[  187.666145][T12804]  ___sys_sendmsg+0x21f/0x2a0
[  187.666161][T12804]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.666186][T12804]  ? __fget_files+0x2a/0x420
[  187.666193][T12804]  ? __fget_files+0x3a0/0x420
[  187.666204][T12804]  __x64_sys_sendmsg+0x19b/0x260
[  187.666214][T12804]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.666229][T12804]  ? do_user_addr_fault+0xc8a/0x1390
[  187.666243][T12804]  ? do_syscall_64+0xbe/0x3b0
[  187.666253][T12804]  do_syscall_64+0xfa/0x3b0
[  187.666261][T12804]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.666268][T12804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.666275][T12804]  ? exc_page_fault+0x9f/0xf0
[  187.666283][T12804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.666290][T12804] RIP: 0033:0x7fe41c18eba9
[  187.666298][T12804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.666304][T12804] RSP: 002b:00007fe41a3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.666314][T12804] RAX: ffffffffffffffda RBX: 00007fe41c3d6090 RCX: 00007fe41c18eba9
[  187.666319][T12804] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  187.666324][T12804] RBP: 00007fe41c211e19 R08: 0000000000000000 R09: 0000000000000000
[  187.666328][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.666332][T12804] R13: 00007fe41c3d6128 R14: 00007fe41c3d6090 R15: 00007ffd0680e5c8
[  187.666345][T12804]  </TASK>
[  188.462301][T12829] tipc: Resetting bearer <eth:syzkaller0>
[  188.740344][T12845] netlink: 'syz.2.1883': attribute type 5 has an invalid length.
[  188.751252][T12845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1883'.
[  188.785817][T12849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1884'.
[  188.880145][T12859] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 510, id = 0
[  188.886037][T12858] IPVS: stopping backup sync thread 12859 ...
[  188.889761][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'.
[  188.900576][T12856] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1887'.
[  189.019299][T12871] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  189.023497][T12870] IPVS: stopping backup sync thread 12871 ...
[  189.027054][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  189.208465][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'.
[  189.507249][T12911] vxcan1 speed is unknown, defaulting to 1000
[  189.845894][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'.
[  189.848809][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'.
[  190.085840][T12941] ==================================================================
[  190.088684][T12941] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  190.091534][T12941] Read of size 1 at addr ffff88802962b930 by task syz.2.1901/12941
[  190.095198][T12941] 
[  190.096133][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) 
[  190.096145][T12941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.096151][T12941] Call Trace:
[  190.096157][T12941]  <TASK>
[  190.096162][T12941]  dump_stack_lvl+0x189/0x250
[  190.096180][T12941]  ? __virt_addr_valid+0x1c8/0x5c0
[  190.096194][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.096206][T12941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.096218][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.096227][T12941]  ? lock_release+0x4b/0x3e0
[  190.096239][T12941]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  190.096257][T12941]  ? __virt_addr_valid+0x1c8/0x5c0
[  190.096271][T12941]  ? __virt_addr_valid+0x4a5/0x5c0
[  190.096285][T12941]  print_report+0xca/0x240
[  190.096296][T12941]  ? __xfrm_state_insert+0x8af/0x1450
[  190.096309][T12941]  kasan_report+0x118/0x150
[  190.096321][T12941]  ? __xfrm_state_insert+0x8af/0x1450
[  190.096337][T12941]  __xfrm_state_insert+0x8af/0x1450
[  190.096386][T12941]  xfrm_state_insert+0x54/0x60
[  190.096399][T12941]  ipcomp6_init_state+0x655/0x900
[  190.096416][T12941]  __xfrm_init_state+0xa76/0x13f0
[  190.096429][T12941]  ? __xfrm_init_state+0x7ef/0x13f0
[  190.096443][T12941]  xfrm_add_sa+0x2f5b/0x4070
[  190.096461][T12941]  ? __pfx_xfrm_add_sa+0x10/0x10
[  190.096474][T12941]  ? apparmor_capable+0x137/0x1b0
[  190.096489][T12941]  ? __nla_parse+0x40/0x60
[  190.096501][T12941]  xfrm_user_rcv_msg+0x7a3/0xab0
[  190.096516][T12941]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  190.096537][T12941]  ? __pfx___mutex_trylock_common+0x10/0x10
[  190.096551][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.096561][T12941]  ? trace_contention_end+0x39/0x120
[  190.096573][T12941]  ? __mutex_lock+0x335/0x1350
[  190.096586][T12941]  netlink_rcv_skb+0x208/0x470
[  190.096598][T12941]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  190.096609][T12941]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.096624][T12941]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.096635][T12941]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.096646][T12941]  xfrm_netlink_rcv+0x79/0x90
[  190.096660][T12941]  netlink_unicast+0x82f/0x9e0
[  190.096679][T12941]  ? __pfx_netlink_unicast+0x10/0x10
[  190.096691][T12941]  ? netlink_sendmsg+0x642/0xb30
[  190.096701][T12941]  ? skb_put+0x11b/0x210
[  190.096715][T12941]  netlink_sendmsg+0x805/0xb30
[  190.096729][T12941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.096741][T12941]  ? aa_sock_msg_perm+0xf1/0x1d0
[  190.096753][T12941]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.096765][T12941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.096774][T12941]  __sock_sendmsg+0x21c/0x270
[  190.096789][T12941]  ____sys_sendmsg+0x505/0x830
[  190.096804][T12941]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.096820][T12941]  ? import_iovec+0x74/0xa0
[  190.096834][T12941]  ___sys_sendmsg+0x21f/0x2a0
[  190.096848][T12941]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.096865][T12941]  ? __fget_files+0x2a/0x420
[  190.096875][T12941]  ? __fget_files+0x3a0/0x420
[  190.096887][T12941]  __x64_sys_sendmsg+0x19b/0x260
[  190.096901][T12941]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.096918][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.096930][T12941]  ? do_syscall_64+0xbe/0x3b0
[  190.096941][T12941]  do_syscall_64+0xfa/0x3b0
[  190.096949][T12941]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.096960][T12941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.096971][T12941]  ? exc_page_fault+0x9f/0xf0
[  190.096982][T12941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.096993][T12941] RIP: 0033:0x7fb6ea18eba9
[  190.097004][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.097014][T12941] RSP: 002b:00007fb6eb0bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.097025][T12941] RAX: ffffffffffffffda RBX: 00007fb6ea3d5fa0 RCX: 00007fb6ea18eba9
[  190.097030][T12941] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  190.097037][T12941] RBP: 00007fb6ea211e19 R08: 0000000000000000 R09: 0000000000000000
[  190.097044][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.097051][T12941] R13: 00007fb6ea3d6038 R14: 00007fb6ea3d5fa0 R15: 00007ffe119a19e8
[  190.097064][T12941]  </TASK>
[  190.097069][T12941] 
[  190.231548][T12941] Allocated by task 12763:
[  190.233003][T12941]  kasan_save_track+0x3e/0x80
[  190.234557][T12941]  __kasan_slab_alloc+0x6c/0x80
[  190.236125][T12941]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  190.237926][T12941]  xfrm_state_alloc+0x24/0x2f0
[  190.239504][T12941]  xfrm_state_find+0x37d4/0x5400
[  190.241110][T12941]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  190.243146][T12941]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  190.244905][T12941]  xfrm_lookup_route+0x3c/0x1c0
[  190.246500][T12941]  udp_sendmsg+0x142e/0x2170
[  190.248065][T12941]  __sock_sendmsg+0x19c/0x270
[  190.249652][T12941]  ____sys_sendmsg+0x52d/0x830
[  190.251276][T12941]  ___sys_sendmsg+0x21f/0x2a0
[  190.252871][T12941]  __sys_sendmmsg+0x227/0x430
[  190.254440][T12941]  __x64_sys_sendmmsg+0xa0/0xc0
[  190.255994][T12941]  do_syscall_64+0xfa/0x3b0
[  190.257471][T12941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.259344][T12941] 
[  190.260144][T12941] Freed by task 51:
[  190.261515][T12941]  kasan_save_track+0x3e/0x80
[  190.263281][T12941]  kasan_save_free_info+0x46/0x50
[  190.264949][T12941]  __kasan_slab_free+0x5b/0x80
[  190.266566][T12941]  kmem_cache_free+0x18f/0x400
[  190.268114][T12941]  xfrm_state_gc_task+0x52d/0x6b0
[  190.269782][T12941]  process_scheduled_works+0xae1/0x17b0
[  190.271636][T12941]  worker_thread+0x8a0/0xda0
[  190.273317][T12941]  kthread+0x711/0x8a0
[  190.274704][T12941]  ret_from_fork+0x439/0x7d0
[  190.276210][T12941]  ret_from_fork_asm+0x1a/0x30
[  190.277803][T12941] 
[  190.278589][T12941] The buggy address belongs to the object at ffff88802962b600
[  190.278589][T12941]  which belongs to the cache xfrm_state of size 928
[  190.283329][T12941] The buggy address is located 816 bytes inside of
[  190.283329][T12941]  freed 928-byte region [ffff88802962b600, ffff88802962b9a0)
[  190.288241][T12941] 
[  190.289048][T12941] The buggy address belongs to the physical page:
[  190.291123][T12941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802962ad00 pfn:0x29628
[  190.294711][T12941] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  190.297714][T12941] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  190.300665][T12941] page_type: f5(slab)
[  190.302115][T12941] raw: 00fff00000000240 ffff88801bb89c80 ffff88801c753708 ffffea0000ec4910
[  190.304868][T12941] raw: ffff88802962ad00 00000000000e000b 00000000f5000000 0000000000000000
[  190.307580][T12941] head: 00fff00000000240 ffff88801bb89c80 ffff88801c753708 ffffea0000ec4910
[  190.310258][T12941] head: ffff88802962ad00 00000000000e000b 00000000f5000000 0000000000000000
[  190.313098][T12941] head: 00fff00000000002 ffffea0000a58a01 00000000ffffffff 00000000ffffffff
[  190.315862][T12941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  190.318685][T12941] page dumped because: kasan: bad access detected
[  190.321241][T12941] page_owner tracks the page as allocated
[  190.323325][T12941] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8736, tgid 8735 (syz.1.751), ts 111449649906, free_ts 110357887676
[  190.329955][T12941]  post_alloc_hook+0x240/0x2a0
[  190.331597][T12941]  get_page_from_freelist+0x21e4/0x22c0
[  190.333425][T12941]  __alloc_frozen_pages_noprof+0x181/0x370
[  190.335373][T12941]  alloc_pages_mpol+0x232/0x4a0
[  190.337058][T12941]  allocate_slab+0x8a/0x370
[  190.338826][T12941]  ___slab_alloc+0xbeb/0x1420
[  190.340636][T12941]  kmem_cache_alloc_noprof+0x283/0x3c0
[  190.342448][T12941]  xfrm_state_alloc+0x24/0x2f0
[  190.343990][T12941]  pfkey_add+0x6e4/0x2e00
[  190.345420][T12941]  pfkey_sendmsg+0xbfe/0x1090
[  190.346930][T12941]  __sock_sendmsg+0x21c/0x270
[  190.348682][T12941]  ____sys_sendmsg+0x505/0x830
[  190.350298][T12941]  ___sys_sendmsg+0x21f/0x2a0
[  190.352157][T12941]  __x64_sys_sendmsg+0x19b/0x260
[  190.354251][T12941]  do_syscall_64+0xfa/0x3b0
[  190.355875][T12941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.357814][T12941] page last free pid 8660 tgid 8659 stack trace:
[  190.359895][T12941]  __free_frozen_pages+0xbc4/0xd30
[  190.361726][T12941]  vfree+0x25a/0x400
[  190.362916][T12941]  __vmalloc_node_range_noprof+0x100d/0x12f0
[  190.364921][T12941]  vmalloc_user_noprof+0xad/0xf0
[  190.366512][T12941]  xskq_create+0xbf/0x170
[  190.367956][T12941]  xsk_init_queue+0xb0/0x110
[  190.369500][T12941]  xsk_setsockopt+0x57b/0x8d0
[  190.371066][T12941]  do_sock_setsockopt+0x17c/0x1b0
[  190.372972][T12941]  __x64_sys_setsockopt+0x13f/0x1b0
[  190.374689][T12941]  do_syscall_64+0xfa/0x3b0
[  190.376157][T12941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.378151][T12941] 
[  190.378961][T12941] Memory state around the buggy address:
[  190.380840][T12941]  ffff88802962b800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.383429][T12941]  ffff88802962b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.386021][T12941] >ffff88802962b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.388696][T12941]                                      ^
[  190.390554][T12941]  ffff88802962b980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  190.393523][T12941]  ffff88802962ba00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  190.396141][T12941] ==================================================================
[  190.398950][T12941] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  190.401466][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.2.1901 Not tainted syzkaller #0 PREEMPT(full) 
[  190.404510][T12941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.407984][T12941] Call Trace:
[  190.409343][T12941]  <TASK>
[  190.410580][T12941]  dump_stack_lvl+0x99/0x250
[  190.412504][T12941]  ? __asan_memcpy+0x40/0x70
[  190.414001][T12941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.415702][T12941]  ? __pfx__printk+0x10/0x10
[  190.417378][T12941]  vpanic+0x281/0x750
[  190.418722][T12941]  ? __pfx_vpanic+0x10/0x10
[  190.420227][T12941]  ? irqentry_exit+0x74/0x90
[  190.421844][T12941]  panic+0xb9/0xc0
[  190.423078][T12941]  ? __pfx_panic+0x10/0x10
[  190.424551][T12941]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  190.426513][T12941]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.428485][T12941]  ? is_module_address+0x17/0xf0
[  190.430126][T12941]  ? __xfrm_state_insert+0x8af/0x1450
[  190.432241][T12941]  check_panic_on_warn+0x89/0xb0
[  190.433875][T12941]  ? __xfrm_state_insert+0x8af/0x1450
[  190.435599][T12941]  end_report+0x78/0x160
[  190.436995][T12941]  kasan_report+0x129/0x150
[  190.438470][T12941]  ? __xfrm_state_insert+0x8af/0x1450
[  190.440171][T12941]  __xfrm_state_insert+0x8af/0x1450
[  190.441902][T12941]  xfrm_state_insert+0x54/0x60
[  190.443468][T12941]  ipcomp6_init_state+0x655/0x900
[  190.445069][T12941]  __xfrm_init_state+0xa76/0x13f0
[  190.446675][T12941]  ? __xfrm_init_state+0x7ef/0x13f0
[  190.448372][T12941]  xfrm_add_sa+0x2f5b/0x4070
[  190.449867][T12941]  ? __pfx_xfrm_add_sa+0x10/0x10
[  190.451620][T12941]  ? apparmor_capable+0x137/0x1b0
[  190.453385][T12941]  ? __nla_parse+0x40/0x60
[  190.454823][T12941]  xfrm_user_rcv_msg+0x7a3/0xab0
[  190.456440][T12941]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  190.458230][T12941]  ? __pfx___mutex_trylock_common+0x10/0x10
[  190.460457][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.462124][T12941]  ? trace_contention_end+0x39/0x120
[  190.463823][T12941]  ? __mutex_lock+0x335/0x1350
[  190.465369][T12941]  netlink_rcv_skb+0x208/0x470
[  190.466895][T12941]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  190.468673][T12941]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  190.470344][T12941]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.471996][T12941]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.473750][T12941]  xfrm_netlink_rcv+0x79/0x90
[  190.475630][T12941]  netlink_unicast+0x82f/0x9e0
[  190.477542][T12941]  ? __pfx_netlink_unicast+0x10/0x10
[  190.479666][T12941]  ? netlink_sendmsg+0x642/0xb30
[  190.481559][T12941]  ? skb_put+0x11b/0x210
[  190.482914][T12941]  netlink_sendmsg+0x805/0xb30
[  190.484571][T12941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.486533][T12941]  ? aa_sock_msg_perm+0xf1/0x1d0
[  190.488220][T12941]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  190.490268][T12941]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.492170][T12941]  __sock_sendmsg+0x21c/0x270
[  190.493899][T12941]  ____sys_sendmsg+0x505/0x830
[  190.495617][T12941]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.497280][T12941]  ? import_iovec+0x74/0xa0
[  190.498766][T12941]  ___sys_sendmsg+0x21f/0x2a0
[  190.500280][T12941]  ? __pfx____sys_sendmsg+0x10/0x10
[  190.501998][T12941]  ? __fget_files+0x2a/0x420
[  190.503509][T12941]  ? __fget_files+0x3a0/0x420
[  190.505028][T12941]  __x64_sys_sendmsg+0x19b/0x260
[  190.506644][T12941]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  190.508421][T12941]  ? rcu_is_watching+0x15/0xb0
[  190.509951][T12941]  ? do_syscall_64+0xbe/0x3b0
[  190.511594][T12941]  do_syscall_64+0xfa/0x3b0
[  190.513030][T12941]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.514807][T12941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.517041][T12941]  ? exc_page_fault+0x9f/0xf0
[  190.518672][T12941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.520563][T12941] RIP: 0033:0x7fb6ea18eba9
[  190.522029][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.528231][T12941] RSP: 002b:00007fb6eb0bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.530942][T12941] RAX: ffffffffffffffda RBX: 00007fb6ea3d5fa0 RCX: 00007fb6ea18eba9
[  190.533489][T12941] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  190.536028][T12941] RBP: 00007fb6ea211e19 R08: 0000000000000000 R09: 0000000000000000
[  190.538585][T12941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.541117][T12941] R13: 00007fb6ea3d6038 R14: 00007fb6ea3d5fa0 R15: 00007ffe119a19e8
[  190.544153][T12941]  </TASK>
[  190.545884][T12941] Kernel Offset: disabled
[  190.547449][T12941] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:33:19  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043de9f0
R8 =ffff888021a40237 R9 =1ffff11004348046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008f3 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb6eb0bb6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=0000000122b46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb6ea3a7498 00007fb6ea3a7470 XMM03=00007fb6ea3a74a8 00007fb6ea3a74a0
XMM04=00007fb6eaf0d100 00007fb6ea3a7460 XMM05=00007fb6ea3a7478 00007fb6ea3a74c0
XMM06=00007fb6ea3a74b8 00007fb6ea3a74b0 XMM07=00007fb6ea3a74a8 00007fb6ea3a74a0
XMM08=0000000000000000 00007fb6ea212ee7 XMM09=0000000000000000 00007fb6ea212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021245227 RBX=1ffff920008abf84 RCX=ffff88802014b980 RDX=ffff888109229000
RSI=0000000000000118 RDI=ffff888109229128 RBP=ffffc9000455fcf0 RSP=ffffc9000455fae0
R8 =ffff88802014b987 R9 =1ffff11004029730 R10=dffffc0000000000 R11=ffffed1004029731
R12=dffffc0000000000 R13=0000000000000248 R14=0000000000003dc0 R15=000055ace32b5000
RIP=ffffffff82510ecd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f73f7fbc380 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c1f42a1000 CR3=0000000121198000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6f3e5b057e557d9f f7bdba97090dd9a6
XMM06=f472775f9c6686c0 d821dbba18332254 XMM07=e3a0e2fee2e744f9 783e6d54233e5602
XMM08=0000000000000000 00007fb6ea212ee7 XMM09=0000000000000000 00007fb6ea212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
