last executing test programs:

1.707937181s ago: executing program 2 (id=7499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000480)="01b08971b0d5f78699f7efa15342d4c1091acdd9fa2b9e2db8cd97d1895925b4146fb49510a52a81bb499bcc0fbf6590348404aa18b3b923a613b374f770e34ca81c6b7a8e3041959c7af6895671666bc8b80e7b7db5419a686a1e00382795714bb529de2bca3fe02ee85c296b482cafcb91d1de9ee3900aaf275d773b59b54f85fe0d55cc9b9f61e1cd18add6aabc0e18ba7a3160f90cb0e29f9fff23a701847c6d", &(0x7f0000000640)=""/246, &(0x7f0000002780)="3ff6d0881dd6fc8e6861c2d12051d43e203730d9c8c2f8167747a3e7f3a2b0d722eae74d04c08530d6ecfa1e7bd2f5d664a630b36dadeae24d3edad29d434c60f61a90e2068064e28cbe7b8a0f3ce336cb2c310ec6880178125b7475d1726d12d8a409655de3c04a6eb1b4d088a8964ffe246e9495b7fe8560eef944fb1cd192f1d336671a31584dc0d0c24332f01a82387ba4740f0471565f5b60dc10299c0ea9e2e62e40bb3f7269cad3df96e703557148e294befcd0a8f59ba8abc4c3ed9634e8c43def3c222f55984abcf62ceab67af3c1263534be3eb04cda51b2253fc90fa8fb5ff983c75f5d04a6b3e9ec", &(0x7f0000002880)="8463b60a188e33d02d13eb666c22e9b6baf2e9e3fa32682d3365fb67d9e6796c529cfd813b675c8516666d42d1937479b3d6ab862bed2da6e76c7702b4aa130381ab315bf74d25ed985b0e12ec26cdcb66f2df163e46504ff5f8b2644c30c419ceb07b040dc016ded5", 0x4}, 0x38)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0xe4, 0x12, 0xff05, 0x40000, 0x4, {0x0, 0x0, 0x4a00, 0x0, 0x20025}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x8}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x9}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x3}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x8}]}}}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'vlan1\x00'}]}]}, 0xe4}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="481f0000", @ANYRES16=r3, @ANYBLOB="863cd27acbc3cf8f1c22b6741c59d214dcac689d34a65e4289d3ef9c4945375599805a1fef03fa9ae34d94921701207799c4d8ca0bc8751200804880d3865c3904f9d30181486da90e7fa7a5941f9f3b08a295", @ANYRES32=r6, @ANYBLOB="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"], 0x1f48}, 0x1, 0x0, 0x0, 0x8044}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r9, 0x1, 0x70bd27, 0x2000004, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}], 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2)
sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r12, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

1.559982565s ago: executing program 0 (id=7501):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r2=>0x0})
socketpair(0x11, 0x80000, 0x2, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc040006)

1.558796312s ago: executing program 0 (id=7502):
r0 = socket(0x10, 0x2, 0x7) (async)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x807fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x566}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000900000008000500", @ANYRES64=r0, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x24004050) (async, rerun: 32)
socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x80000}, 0xc)

1.479917826s ago: executing program 2 (id=7503):
socket$inet6(0xa, 0x2, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000050000f535b9900004005358fbfbb3c8c2dc000000"], 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000280), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8, 0x0, 0x4}, 0x18)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r10 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
recvmmsg$unix(r10, &(0x7f0000012b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {0x0}], 0x2}}], 0x1, 0x60, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b0008000100010000000f6a02d5b1ed4c2b472ed789c8e16fb93900944afee4e9d1ebe61a73338763c48514ddd87ca22aef3a27b825ca64838018e95043918cb58855cfe6fa90501c98361290a7ae06f87eb9fb2900eba0dc71daa100624d31d74d7444ba5d974fdc4fabb2da2b698b63615289fa2934243816b4e079debcbac135ae8ca0afc2d561d203082bfcd2424b91e3e69a9679830f8b5743786bf6c07fbeae45a353d1308c998d22c81c098adc916e7165e99428d86e5962886bf2e8059e743fd79f5e9bf9cec09b3261f900448a24"], 0x24}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001240)={0x0, "610a6e0f104a6a2e310eb909d7ae1e7a"})

1.479416118s ago: executing program 0 (id=7504):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x7c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10)
socket$kcm(0x2, 0x1, 0x84) (async)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000000), 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f0000000180)=""/120, &(0x7f0000000340)="4013072e", &(0x7f00000003c0), 0xffffffff, 0x1, 0x4}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000140), &(0x7f0000000180)=""/120, &(0x7f0000000340)="4013072e", &(0x7f00000003c0), 0xffffffff, 0x1, 0x4}, 0x38)
setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1)
getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x5d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='xen_mmu_set_pud\x00', r4, 0x0, 0x80000000000}, 0x18)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async)
ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000))
socket$alg(0x26, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

999.172504ms ago: executing program 2 (id=7507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYRES16=r1], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20100}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x40880)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x6c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800000200000000000000000a0000002800000031ff0500", @ANYRES32=0x0, @ANYBLOB="ee07c3fcb37aaf958ffcd8f0882a855a14bd434bccf3a3e492c52ea81aa5ee1202a0"], 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000480)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f100"], 0x0)
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r11, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
splice(r7, 0x0, r10, 0x0, 0x10d00, 0xf)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000080001000200000004000b"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x0, 0x4, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6ea"], 0x1c}}, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0)

909.807573ms ago: executing program 0 (id=7509):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000800)='bic\x00', 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r8, @ANYRES32=0x0, @ANYRES64=r8], 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)

788.377304ms ago: executing program 2 (id=7511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x30}, 0x94) (async)
sendmsg$nl_route(r1, 0x0, 0x804) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6b9a212f420d3b21) (async)
syz_emit_ethernet(0x1f, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4140)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="800000000001010400000000000000001400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001406000000000100e000000108000200ac1e000108000740000000001c001080080003400000013308000240000000cd08000140000005ff"], 0x80}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa}}, 0xffffffffffffffe1}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x1ff) (async)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a000105fefdffffffdbdf250100040000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4)
setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0)
r8 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r8, 0x29, 0x1e, &(0x7f0000000280)=0x100, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff018}, {0x6}]}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf251600000005000300015aa400050004000100000005000300040000000500021000050003000100"/62], 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4000050)

729.784244ms ago: executing program 2 (id=7512):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400) (async)
setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0), 0x10) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={<r4=>r3}) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r4) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c791", 0x19}], 0x1}, 0x0) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, <r9=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r9, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r8})

679.539187ms ago: executing program 2 (id=7513):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x2, 0x24000045)
bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf251500000008002c000400000014002b800500020002000000080001000200000008002a000100000008000300", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
unshare(0x22020600)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r6, 0x3a, 0x7, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
recvfrom$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0xa, 0x4e29, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x0, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x0, 0x14, 0xce}, @IPSET_ATTR_MAXELEM, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x0, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0xff}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x50}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004000}, 0x40814)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070600000094100008800c000100000000000000000908000500", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0)

489.609213ms ago: executing program 1 (id=7516):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) (async, rerun: 32)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) (rerun: 32)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async, rerun: 32)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x2) (async, rerun: 32)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={<r9=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={0xe0, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) (async)
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async)
clock_gettime(0x0, &(0x7f0000000200)) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

298.054654ms ago: executing program 1 (id=7517):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) (async)
r0 = socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x20000000)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r4, 0x0) (async)
ioctl$int_in(r4, 0x5421, &(0x7f00000012c0)=0xe) (async)
accept4(r4, 0x0, 0x0, 0x80000)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

240.267677ms ago: executing program 1 (id=7518):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r5], 0x20}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcd8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r9, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async, rerun: 64)
sendmsg$inet(r9, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x1e8}, 0x80) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) (async, rerun: 64)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) (rerun: 64)

169.554261ms ago: executing program 1 (id=7519):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b40)=ANY=[@ANYBLOB="200000006a00dd8700000000000000c0de4b450000000000080009"], 0x20}}, 0x0)

169.159056ms ago: executing program 1 (id=7520):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x5, @remote})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000645d84dfac13026e8a8c00c10c0500fc99a8098a63116b43085b2d1000000020c5bd6193", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000180)="65f1f25712ca", 0x0}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
close(0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000645d84dfac13026e8a8c00c10c0500fc99a8098a63116b43085b2d1000000020c5bd6193", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000180)="65f1f25712ca", 0x0}, 0x20) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async)
close(0x4) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) (async)

99.849323ms ago: executing program 1 (id=7521):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r2, &(0x7f00000002c0)="17", 0x1, 0x804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001214010029bd7000fedbdf2508000100671c7cf308004b0013000000"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x20080042)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0)
unshare(0x6020480)
unshare(0x26020480)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r6, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1, 0x0, 0xa}, {0x1, 0x1, 0xffffffff}, {0x0, 0x80004, 0x810104, 0x4}], 0x10, 0x1}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000011c0)={'syztnl1\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x3, 0x3, {{0x1e, 0x4, 0x0, 0x4, 0x78, 0x67, 0x0, 0x7e, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, {[@cipso={0x86, 0x1b, 0x0, [{0x6, 0xb, "43daca862f0c6f8b38"}, {0x1, 0xa, "4b3859758566c882"}]}, @timestamp_addr={0x44, 0x14, 0xee, 0x1, 0x9, [{@empty, 0x5}, {@multicast2, 0xd}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1f, 0x3, [{0x7, 0xd, "a4fd3efe7482ec972ccdaa"}, {0x2, 0x8, "7e9019dfb453"}, {0x7, 0x4, "f45f"}]}, @end, @lsrr={0x83, 0xf, 0x62, [@loopback, @loopback, @local]}]}}}}})

49.585028ms ago: executing program 0 (id=7522):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40810}}], 0x1, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000000)=0x894, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VF_PORTS={0x4}, @IFLA_VFINFO_LIST={0x4}]}, 0x3c}}, 0x0)

0s ago: executing program 0 (id=7523):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x5)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333a", 0x84}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0x1a}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09", 0x22}], 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xf0}}], 0x3, 0x24000045)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
accept(r2, &(0x7f0000000080)=@can, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e2e2564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000000200002e2e2000000000000000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x2a0f5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x30000000, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000240), 0x0}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1004, &(0x7f0000002fc0)=""/4100, 0x41100, 0xd}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000780)=""/195, 0xc3}], 0x7}, 0x40002102)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_emit_ethernet(0x7ff, &(0x7f0000000780)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x7c9, 0x3a, 0xff, @local, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xb, 0x5, "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"}}}}}}, 0x0)
recvmmsg(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40000020, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x4, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0xa502}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x7b, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20004}}}}}}]}, 0xffffffffffffffde}}, 0x0)

kernel console output (not intermixed with test programs):

7042] syzkaller0: entered promiscuous mode
[  433.650010][T27042] syzkaller0: entered allmulticast mode
[  433.693915][T27045] netlink: 'syz.1.5705': attribute type 1 has an invalid length.
[  433.714504][T27042] tipc: Resetting bearer <eth:syzkaller0>
[  433.722292][T27040] tipc: Resetting bearer <eth:syzkaller0>
[  433.739322][T27040] tipc: Disabling bearer <eth:syzkaller0>
[  433.752582][T27049] bond0: entered promiscuous mode
[  433.757446][T27049] bond0: left promiscuous mode
[  433.824829][T27055] wg1 speed is unknown, defaulting to 1000
[  433.908317][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  433.910286][T27063] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  433.913049][T27057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.300733][T27097] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  434.304014][T27097] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  434.662163][T27126] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  434.667584][T27125] IPVS: stopping backup sync thread 27126 ...
[  434.902112][T27145] bond46: (slave wlan0): Releasing active interface
[  434.911645][T27145] bond35: (slave veth27): Releasing active interface
[  434.919422][T27145] bond0: (slave bond40): Releasing active interface
[  434.924381][T27145] lo: Caught tx_queue_len zero misconfig
[  435.014260][T27152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.079973][T27152] gretap0: refused to change device tx_queue_len
[  435.082210][T27152] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  435.156236][T27162] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  435.160555][T27161] IPVS: stopping backup sync thread 27162 ...
[  435.351592][T27184] !: left promiscuous mode
[  435.370597][T27184] veth0_to_bridge: left promiscuous mode
[  435.378216][T27184] gretap2: left promiscuous mode
[  435.384332][T27184] bond37: left promiscuous mode
[  435.390823][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  435.394276][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  435.400516][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  435.410185][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  435.419176][T27183] wg1 speed is unknown, defaulting to 1000
[  435.446623][T27186] wg1 speed is unknown, defaulting to 1000
[  435.658385][T27202] 8021q: adding VLAN 0 to HW filter on device bond41
[  435.742228][T27208] 8021q: adding VLAN 0 to HW filter on device bond47
[  435.744791][T27208] bridge0: port 1(bond47) entered blocking state
[  435.747594][T27208] bridge0: port 1(bond47) entered disabled state
[  435.749801][T27208] bond47: entered allmulticast mode
[  435.754081][T27208] bridge0: port 1(bond47) entered blocking state
[  435.756754][T27208] bridge0: port 1(bond47) entered forwarding state
[  435.789476][T27211] 8021q: adding VLAN 0 to HW filter on device bond48
[  435.792513][T27211] bridge0: port 2(bond48) entered blocking state
[  435.797526][T27211] bridge0: port 2(bond48) entered disabled state
[  435.799837][T27211] bond48: entered allmulticast mode
[  435.802938][T27211] bond48: entered promiscuous mode
[  435.805062][T27211] bond47: entered promiscuous mode
[  435.808109][T27211] bridge0: port 2(bond48) entered blocking state
[  435.810538][T27211] bridge0: port 2(bond48) entered forwarding state
[  435.859763][T27225] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  435.863782][T27213] wg1 speed is unknown, defaulting to 1000
[  436.009066][   T27] bridge0: port 1(bond47) entered disabled state
[  436.015039][   T27] bridge0: port 2(bond48) entered disabled state
[  436.043409][T27240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.111006][T27247] 8021q: adding VLAN 0 to HW filter on device bond42
[  436.378131][T27256] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  436.390744][T27264] sctp: [Deprecated]: syz.1.5766 (pid 27264) Use of int in max_burst socket option deprecated.
[  436.390744][T27264] Use struct sctp_assoc_value instead
[  436.615073][T27278] __nla_validate_parse: 54 callbacks suppressed
[  436.615088][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5770'.
[  436.629805][T27280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5771'.
[  436.684515][T27282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5772'.
[  436.688292][T27282] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5772'.
[  436.694579][T27287] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5773'.
[  436.786891][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5777'.
[  436.922770][T27313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5779'.
[  436.993190][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5782'.
[  437.093052][T27327] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  437.098448][T27326] IPVS: stopping backup sync thread 27327 ...
[  437.101077][T27329] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5785'.
[  437.212036][T27333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5786'.
[  437.387629][T27351] smc: adding net device rose0 with user defined pnetid SYZ1
[  437.399454][T27351] smc: removing net device rose0 with user defined pnetid SYZ1
[  437.436447][ T5910] hid-generic 0005:0007:0008.0007: unknown main item tag 0x0
[  437.440270][ T5910] hid-generic 0005:0007:0008.0007: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  437.452919][T27358] gtp3: entered promiscuous mode
[  437.454567][T27358] gtp3: entered allmulticast mode
[  437.488778][T27362] IPVS: stopping backup sync thread 27364 ...
[  437.556078][T27375] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  437.559510][T27374] IPVS: stopping backup sync thread 27375 ...
[  437.826586][T27401] sctp: [Deprecated]: syz.0.5808 (pid 27401) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.826586][T27401] Use struct sctp_sack_info instead
[  437.870935][T27406] IPv6: sit6: Disabled Multicast RS
[  437.962510][T27413] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  438.133880][T27428] wg1 speed is unknown, defaulting to 1000
[  438.492417][T27466] validate_nla: 8 callbacks suppressed
[  438.492434][T27466] netlink: 'syz.0.5826': attribute type 1 has an invalid length.
[  438.516800][T27466] bond40: entered promiscuous mode
[  438.519260][T27466] 8021q: adding VLAN 0 to HW filter on device bond40
[  438.538773][T27466] 8021q: adding VLAN 0 to HW filter on device bond40
[  438.541876][T27466] bond40: (slave wireguard0): The slave device specified does not support setting the MAC address
[  438.548529][T27466] bond40: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  438.557271][T27466] bond40: (slave wireguard0): making interface the new active one
[  438.561304][T27466] wireguard0: entered promiscuous mode
[  438.564916][T27466] bond40: (slave wireguard0): Enslaving as an active interface with an up link
[  438.598782][T27466] wg1 speed is unknown, defaulting to 1000
[  438.631834][T27479] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  438.631935][T27478] IPVS: stopping backup sync thread 27479 ...
[  438.793991][T27490] netlink: 'syz.0.5832': attribute type 1 has an invalid length.
[  438.940810][T27502] xfrm1: entered allmulticast mode
[  439.031246][T27505] wg1 speed is unknown, defaulting to 1000
[  439.128397][T27512] netlink: 'syz.0.5838': attribute type 39 has an invalid length.
[  439.237072][T27517] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  439.241453][T27516] IPVS: stopping backup sync thread 27517 ...
[  439.329724][T27522] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  439.333417][T27521] IPVS: stopping backup sync thread 27522 ...
[  439.491283][T27539] bond47: left allmulticast mode
[  439.493547][T27539] bond47: left promiscuous mode
[  439.495953][T27539] bridge0: port 1(bond47) entered disabled state
[  439.499762][T27539] bond48: left promiscuous mode
[  439.503851][T27539] bond48: left allmulticast mode
[  439.507950][T27539] bridge0: port 2(bond48) entered disabled state
[  439.523022][T27539] netlink: 'syz.2.5847': attribute type 10 has an invalid length.
[  439.528002][T27539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  439.531122][T27539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  439.620014][T27547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.664237][T27547] tipc: Resetting bearer <eth:syzkaller0>
[  439.951952][T27561] wg1 speed is unknown, defaulting to 1000
[  439.995536][ T6034] Bluetooth: hci0: command tx timeout
[  440.248019][T27568] wg1 speed is unknown, defaulting to 1000
[  440.466004][T27546] tipc: Disabling bearer <eth:syzkaller0>
[  440.511065][T27586] ip6tnl0: Caught tx_queue_len zero misconfig
[  440.600772][T27587] netlink: 'syz.1.5855': attribute type 6 has an invalid length.
[  440.809737][T27611] wg1 speed is unknown, defaulting to 1000
[  441.099395][T27617] netlink: 'syz.2.5868': attribute type 3 has an invalid length.
[  441.528356][T27650] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  441.528405][T27648] IPVS: stopping backup sync thread 27650 ...
[  441.561099][T27653] netlink: 'syz.0.5878': attribute type 12 has an invalid length.
[  441.564209][T27653] netlink: 'syz.0.5878': attribute type 12 has an invalid length.
[  441.632422][T27659] __nla_validate_parse: 30 callbacks suppressed
[  441.632431][T27659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5880'.
[  441.700092][T27667] netlink: 'syz.0.5881': attribute type 1 has an invalid length.
[  441.703462][T27667] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.5881'.
[  441.731425][T27669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5883'.
[  441.744282][T27669] netlink: 'syz.1.5883': attribute type 10 has an invalid length.
[  441.763650][T27669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5883'.
[  441.770238][T27674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5885'.
[  441.881042][T27684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5889'.
[  441.894998][T27684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5889'.
[  441.919386][T27681] tipc: Resetting bearer <eth:syzkaller0>
[  442.348373][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'.
[  442.434307][T27743] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5904'.
[  442.519046][T27745] bridge0: failed insert local address into bridge forwarding table
[  442.523246][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5906'.
[  442.771248][T27765] wg1 speed is unknown, defaulting to 1000
[  443.308359][T27785] tipc: Failed to remove unknown binding: 66,1,1/134353152:2980202302/2980202304
[  443.922121][T27796] wg1 speed is unknown, defaulting to 1000
[  444.016966][T27809] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  444.080884][T27815] sctp: [Deprecated]: syz.2.5921 (pid 27815) Use of int in max_burst socket option deprecated.
[  444.080884][T27815] Use struct sctp_assoc_value instead
[  444.126671][T27818] wg1 speed is unknown, defaulting to 1000
[  444.288874][T27830] validate_nla: 4 callbacks suppressed
[  444.288891][T27830] netlink: 'syz.2.5924': attribute type 10 has an invalid length.
[  444.295077][T27830] netlink: 'syz.2.5924': attribute type 10 has an invalid length.
[  444.336273][T27835] netlink: 'syz.0.5922': attribute type 6 has an invalid length.
[  444.620410][T27841] sctp: [Deprecated]: syz.1.5926 (pid 27841) Use of struct sctp_assoc_value in delayed_ack socket option.
[  444.620410][T27841] Use struct sctp_sack_info instead
[  445.082289][T27851] lo speed is unknown, defaulting to 1000
[  445.085143][T27851] lo speed is unknown, defaulting to 1000
[  445.086859][T27853] openvswitch: netlink: Flow key attr not present in new flow.
[  445.089426][T27851] lo speed is unknown, defaulting to 1000
[  445.106983][T27853] pim6reg1: entered allmulticast mode
[  445.113389][T27851] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  445.138085][T27851] lo speed is unknown, defaulting to 1000
[  445.141180][T27851] lo speed is unknown, defaulting to 1000
[  445.144240][T27851] lo speed is unknown, defaulting to 1000
[  445.807189][T27899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  445.810356][T27899] IPv6: NLM_F_CREATE should be set when creating new route
[  445.813358][T27899] IPv6: NLM_F_CREATE should be set when creating new route
[  445.820083][T27899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  446.065896][ T6034] Bluetooth: hci0: command tx timeout
[  446.193681][T27911] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  446.309943][T27917] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  446.314519][T27916] IPVS: stopping backup sync thread 27917 ...
[  446.353951][T27920] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  446.359005][T27919] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  446.513307][T27930] wg1 speed is unknown, defaulting to 1000
[  446.527118][T27930] lo speed is unknown, defaulting to 1000
[  446.813278][T27949] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  446.946636][T27951] wg1 speed is unknown, defaulting to 1000
[  446.952313][T27951] lo speed is unknown, defaulting to 1000
[  447.212882][T27978] IPVS: stopping backup sync thread 27979 ...
[  447.215535][T27979] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  447.245028][T27976] wg1 speed is unknown, defaulting to 1000
[  447.256875][T27976] lo speed is unknown, defaulting to 1000
[  448.062703][T27995] wg1 speed is unknown, defaulting to 1000
[  448.073185][T27999] __nla_validate_parse: 15 callbacks suppressed
[  448.073200][T27999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5964'.
[  448.073349][T27995] lo speed is unknown, defaulting to 1000
[  448.079784][T27999] netlink: 'syz.1.5964': attribute type 83 has an invalid length.
[  448.248819][T28011] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  448.378481][T28020] netlink: 'syz.0.5968': attribute type 11 has an invalid length.
[  448.499856][T28024] IPVS: stopping backup sync thread 28011 ...
[  449.081593][T28036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5973'.
[  449.179827][T28039] tunl0: Caught tx_queue_len zero misconfig
[  449.276372][   T11] block nbd0: Possible stuck request ffff88801feb0000: control (read@0,1024B). Runtime 360 seconds
[  449.280916][   T11] block nbd0: Possible stuck request ffff88801feb0200: control (read@1024,1024B). Runtime 360 seconds
[  449.285991][   T11] block nbd0: Possible stuck request ffff88801feb0400: control (read@2048,1024B). Runtime 360 seconds
[  449.290454][   T11] block nbd0: Possible stuck request ffff88801feb0600: control (read@3072,1024B). Runtime 360 seconds
[  449.440023][T28046] netlink: 'syz.0.5976': attribute type 33 has an invalid length.
[  449.443628][T28046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5976'.
[  449.588276][T28058] IPVS: stopping backup sync thread 27911 ...
[  449.706413][T28070] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.809761][T28076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5987'.
[  450.277517][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5988'.
[  450.669559][T28108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5995'.
[  450.685904][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5995'.
[  450.793293][T28123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6001'.
[  450.798905][T28123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6001'.
[  450.822591][T28120] wg1 speed is unknown, defaulting to 1000
[  450.830045][T28120] lo speed is unknown, defaulting to 1000
[  450.879121][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6000'.
[  450.933229][T28137] wg1 speed is unknown, defaulting to 1000
[  450.939932][T28140] netlink: 'syz.1.6006': attribute type 1 has an invalid length.
[  450.954607][T28137] lo speed is unknown, defaulting to 1000
[  451.130787][T28154] netlink: 'syz.2.6010': attribute type 1 has an invalid length.
[  451.188121][T28154] bond49: (slave vcan0): The slave device specified does not support setting the MAC address
[  451.192307][T28154] bond49: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  451.199034][T28154] bond49: (slave vcan0): making interface the new active one
[  451.202456][T28154] bond49: (slave vcan0): Enslaving as an active interface with an up link
[  451.218816][T28154] bond49: (slave vcan1): The slave device specified does not support setting the MAC address
[  451.224442][T28154] bond49: (slave vcan1): Enslaving as a backup interface with an up link
[  451.228833][T28154] 8021q: adding VLAN 0 to HW filter on device bond49
[  451.299887][ T6034] Bluetooth: hci2: link tx timeout
[  451.301775][ T6034] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.369341][T28137] netlink: 'syz.0.6005': attribute type 6 has an invalid length.
[  451.466205][T28176] netlink: 'syz.2.6017': attribute type 6 has an invalid length.
[  451.487041][T28178] vlan0: entered promiscuous mode
[  451.489069][T28178] geneve1: entered promiscuous mode
[  451.515766][T28181] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  451.515870][T28180] IPVS: stopping backup sync thread 28181 ...
[  451.563658][T28191] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  451.569205][T28189] IPVS: stopping backup sync thread 28191 ...
[  451.636907][T28194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  451.639878][T28195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  451.831719][T28209] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  451.833412][T28208] IPVS: stopping backup sync thread 28209 ...
[  452.260886][T28234] wg1 speed is unknown, defaulting to 1000
[  452.266414][T28234] lo speed is unknown, defaulting to 1000
[  452.563981][T28245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  452.575041][T28242] netlink: 'syz.1.6036': attribute type 6 has an invalid length.
[  452.763170][T28249] wg1 speed is unknown, defaulting to 1000
[  452.772141][T28249] lo speed is unknown, defaulting to 1000
[  452.841900][T28251] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  453.182174][T28265] __nla_validate_parse: 12 callbacks suppressed
[  453.182185][T28265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6044'.
[  453.210733][T28269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6043'.
[  453.214327][T28269] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6043'.
[  453.222362][T28269] netlink: 'syz.2.6043': attribute type 5 has an invalid length.
[  453.245486][T28269] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6043'.
[  453.258764][T28269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6043'.
[  453.264861][T28262] vlan1: entered promiscuous mode
[  453.345768][   T54] Bluetooth: hci2: command 0x040f tx timeout
[  453.374653][T28260] wg1 speed is unknown, defaulting to 1000
[  453.398393][T28260] lo speed is unknown, defaulting to 1000
[  453.463625][T28277] wg1 speed is unknown, defaulting to 1000
[  453.476143][T28277] lo speed is unknown, defaulting to 1000
[  453.576994][T28288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6049'.
[  453.633826][T28291] netlink: 'syz.1.6051': attribute type 13 has an invalid length.
[  453.637910][T28291] netlink: 'syz.1.6051': attribute type 17 has an invalid length.
[  453.676845][T28291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  453.714062][T28291] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6051'.
[  453.744929][T28291] wg1 speed is unknown, defaulting to 1000
[  453.759618][T28299] veth1_to_team: entered promiscuous mode
[  453.766836][T28299] veth1_to_team: left promiscuous mode
[  453.775252][T28291] lo speed is unknown, defaulting to 1000
[  453.780392][T28300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6051'.
[  453.867882][T28302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6055'.
[  453.952129][T28305] wg1 speed is unknown, defaulting to 1000
[  453.984859][T28305] lo speed is unknown, defaulting to 1000
[  453.995182][T28302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6055'.
[  454.288056][T28329] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  454.288190][T28328] IPVS: stopping backup sync thread 28329 ...
[  454.519959][T28339] netlink: 'syz.0.6064': attribute type 3 has an invalid length.
[  454.622542][T28346] IPVS: stopping backup sync thread 28348 ...
[  454.624110][T28348] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  454.704441][T28354] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  455.025217][T28390] netlink: 'syz.0.6080': attribute type 11 has an invalid length.
[  455.082751][T28395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.090269][T28395] syzkaller0: entered promiscuous mode
[  455.092347][T28395] syzkaller0: entered allmulticast mode
[  455.107378][T28395] tipc: Resetting bearer <eth:syzkaller0>
[  455.137533][T28394] tipc: Resetting bearer <eth:syzkaller0>
[  455.151146][T28394] tipc: Disabling bearer <eth:syzkaller0>
[  455.539719][T28420] atomic_op ffff8881247e1198 conn xmit_atomic 0000000000000000
[  455.542862][T28419] atomic_op ffff8881247e0198 conn xmit_atomic 0000000000000000
[  455.946503][T28445] 8021q: adding VLAN 0 to HW filter on device bond41
[  455.970501][T28445] macvlan5: entered promiscuous mode
[  455.973265][T28445] macvlan5: entered allmulticast mode
[  455.975251][T28451] netlink: 'syz.1.6097': attribute type 10 has an invalid length.
[  455.978699][T28445] bond41: entered promiscuous mode
[  455.980538][T28445] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  455.984588][T28450] netlink: 'syz.1.6097': attribute type 10 has an invalid length.
[  455.994609][T28445] bond41: left promiscuous mode
[  456.052172][T28458] bond49: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  456.102397][T28464] netlink: 'syz.1.6099': attribute type 5 has an invalid length.
[  456.120659][T28464] geneve8: entered promiscuous mode
[  456.122790][T28464] geneve8: entered allmulticast mode
[  456.130584][ T5897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  456.134355][ T5897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  456.138320][ T5897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  456.141690][ T5897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  456.189673][T28467] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  456.464046][T28498] netlink: 'syz.2.6113': attribute type 1 has an invalid length.
[  456.483768][T28499] netlink: 'syz.0.6114': attribute type 8 has an invalid length.
[  456.518442][T28506] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  456.520003][T28502] IPVS: stopping backup sync thread 28506 ...
[  456.750570][T28529] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  456.798724][T28538] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  456.798871][T28539] IPVS: stopping backup sync thread 28538 ...
[  456.922760][T28553] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  456.936951][T28551] IPVS: stopping backup sync thread 28553 ...
[  457.022819][T28560] bond49: (slave vcan0): Releasing backup interface
[  457.030320][T28560] bond49: (slave vcan1): making interface the new active one
[  457.055161][T28567] wg1 speed is unknown, defaulting to 1000
[  457.062778][T28567] lo speed is unknown, defaulting to 1000
[  457.350918][T28597] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  457.354864][T28595] IPVS: stopping backup sync thread 28597 ...
[  457.619086][T28626] netlink: 'syz.0.6147': attribute type 1 has an invalid length.
[  457.663212][T28629] IPVS: stopping backup sync thread 28245 ...
[  457.675111][T28626] bond42: (slave bridge0): making interface the new active one
[  457.680215][T28626] bond42: (slave bridge0): Enslaving as an active interface with an up link
[  457.726308][T28631] netlink: 'syz.2.6150': attribute type 1 has an invalid length.
[  457.729651][T28631] netlink: 'syz.2.6150': attribute type 2 has an invalid length.
[  457.771281][T28637] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  457.848164][T28647] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  457.848270][T28646] IPVS: stopping backup sync thread 28647 ...
[  457.870479][T28649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.954128][T28651] wg1 speed is unknown, defaulting to 1000
[  457.978111][T28651] lo speed is unknown, defaulting to 1000
[  457.999141][T28655] netlink: 'syz.2.6155': attribute type 10 has an invalid length.
[  458.204252][T28668] __nla_validate_parse: 30 callbacks suppressed
[  458.204262][T28668] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6159'.
[  458.302002][T28672] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6161'.
[  458.305067][T28672] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.430211][T28687] wg1 speed is unknown, defaulting to 1000
[  458.442320][T28687] lo speed is unknown, defaulting to 1000
[  458.468531][T28693] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6168'.
[  458.478896][T28693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6168'.
[  458.491403][T28693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6168'.
[  458.663386][T28708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6172'.
[  458.666978][T28708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6172'.
[  458.670800][T28708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6172'.
[  458.861920][T28719] wg1 speed is unknown, defaulting to 1000
[  458.866130][T28719] lo speed is unknown, defaulting to 1000
[  459.145260][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'.
[  459.151805][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'.
[  459.661219][T28746] bond0 (unregistering): Released all slaves
[  459.730322][T28766] IPVS: stopping backup sync thread 28637 ...
[  460.078210][T28801] IPVS: stopping backup sync thread 28804 ...
[  460.078884][T28804] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  460.463097][T28835] validate_nla: 4 callbacks suppressed
[  460.463111][T28835] netlink: 'syz.2.6207': attribute type 1 has an invalid length.
[  460.532923][T28836] wg1 speed is unknown, defaulting to 1000
[  460.538352][T28836] lo speed is unknown, defaulting to 1000
[  460.802633][T28845] netlink: 'syz.1.6210': attribute type 5 has an invalid length.
[  460.923393][T28855] netlink: 'syz.1.6210': attribute type 10 has an invalid length.
[  461.633406][T28845] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  461.636994][T28845] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  461.645853][T28845] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  461.648366][T28845] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  461.654189][T28845] tipc: Resetting bearer <eth:syzkaller0>
[  461.857333][T28881] netlink: 'syz.2.6220': attribute type 4 has an invalid length.
[  461.861488][T28881] netlink: 'syz.2.6220': attribute type 4 has an invalid length.
[  461.949965][T28898] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  461.952193][T28897] netlink: 'syz.0.6225': attribute type 10 has an invalid length.
[  461.965398][T28896] IPVS: stopping backup sync thread 28898 ...
[  462.507925][T28927] syz.2.6235: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  462.513463][T28927] CPU: 0 UID: 0 PID: 28927 Comm: syz.2.6235 Not tainted syzkaller #0 PREEMPT(full) 
[  462.513475][T28927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  462.513480][T28927] Call Trace:
[  462.513484][T28927]  <TASK>
[  462.513488][T28927]  dump_stack_lvl+0x189/0x250
[  462.513503][T28927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.513512][T28927]  ? __pfx__printk+0x10/0x10
[  462.513523][T28927]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.513533][T28927]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  462.513542][T28927]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  462.513552][T28927]  warn_alloc+0x214/0x310
[  462.513566][T28927]  ? __pfx_warn_alloc+0x10/0x10
[  462.513581][T28927]  ? __get_vm_area_node+0x28f/0x300
[  462.513592][T28927]  ? xskq_create+0xbf/0x170
[  462.513602][T28927]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  462.513625][T28927]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  462.513637][T28927]  ? xskq_create+0x56/0x170
[  462.513645][T28927]  ? __kasan_kmalloc+0x93/0xb0
[  462.513657][T28927]  vmalloc_user_noprof+0xad/0xf0
[  462.513668][T28927]  ? xskq_create+0xbf/0x170
[  462.513676][T28927]  xskq_create+0xbf/0x170
[  462.513684][T28927]  xsk_init_queue+0xb0/0x110
[  462.513692][T28927]  xsk_setsockopt+0x57b/0x8d0
[  462.513704][T28927]  ? __pfx_xsk_setsockopt+0x10/0x10
[  462.513716][T28927]  ? __pfx_aa_sk_perm+0x10/0x10
[  462.513729][T28927]  ? __fget_files+0x2a/0x420
[  462.513735][T28927]  ? aa_sock_opt_perm+0xff/0x1b0
[  462.513744][T28927]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  462.513753][T28927]  ? __pfx_xsk_setsockopt+0x10/0x10
[  462.513764][T28927]  do_sock_setsockopt+0x17c/0x1b0
[  462.513776][T28927]  __x64_sys_setsockopt+0x13f/0x1b0
[  462.513787][T28927]  do_syscall_64+0xfa/0x3b0
[  462.513795][T28927]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.513803][T28927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.513810][T28927]  ? exc_page_fault+0x9f/0xf0
[  462.513818][T28927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.513825][T28927] RIP: 0033:0x7f3f4b58eba9
[  462.513833][T28927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.513840][T28927] RSP: 002b:00007f3f4c353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  462.513849][T28927] RAX: ffffffffffffffda RBX: 00007f3f4b7d6090 RCX: 00007f3f4b58eba9
[  462.513855][T28927] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  462.513860][T28927] RBP: 00007f3f4b611e19 R08: 0000000000000004 R09: 0000000000000000
[  462.513864][T28927] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  462.513869][T28927] R13: 00007f3f4b7d6128 R14: 00007f3f4b7d6090 R15: 00007ffeb15400f8
[  462.513881][T28927]  </TASK>
[  462.513884][T28927] Mem-Info:
[  462.612544][T28927] active_anon:27754 inactive_anon:0 isolated_anon:0
[  462.612544][T28927]  active_file:1629 inactive_file:38397 isolated_file:0
[  462.612544][T28927]  unevictable:1768 dirty:88 writeback:0
[  462.612544][T28927]  slab_reclaimable:12107 slab_unreclaimable:106885
[  462.612544][T28927]  mapped:18454 shmem:2418 pagetables:1068
[  462.612544][T28927]  sec_pagetables:0 bounce:0
[  462.612544][T28927]  kernel_misc_reclaimable:0
[  462.612544][T28927]  free:210522 free_pcp:23020 free_cma:0
[  462.627773][T28927] Node 0 active_anon:10632kB inactive_anon:0kB active_file:4560kB inactive_file:25136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40344kB dirty:252kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7164kB pagetables:2392kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  462.638481][T28927] Node 1 active_anon:100384kB inactive_anon:0kB active_file:1956kB inactive_file:128452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33472kB dirty:100kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7952kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  462.649314][T28927] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  462.659544][T28927] lowmem_reserve[]: 0 811 811 811 811
[  462.661542][T28927] Node 0 DMA32 free:212956kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10632kB inactive_anon:0kB active_file:4560kB inactive_file:25136kB unevictable:3536kB writepending:252kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:28996kB local_pcp:10748kB free_cma:0kB
[  462.673642][T28927] lowmem_reserve[]: 0 0 0 0 0
[  462.675847][T28927] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  462.687447][T28927] lowmem_reserve[]: 0 0 854 854 854
[  462.689253][T28927] Node 1 Normal free:155280kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100384kB inactive_anon:0kB active_file:1956kB inactive_file:128452kB unevictable:3536kB writepending:100kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:62968kB local_pcp:16196kB free_cma:0kB
[  462.699689][T28927] lowmem_reserve[]: 0 0 0 0 0
[  462.701262][T28927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  462.706572][T28927] Node 0 DMA32: 399*4kB (UM) 1414*8kB (UME) 781*16kB (UME) 687*32kB (UME) 213*64kB (UME) 51*128kB (UM) 22*256kB (UME) 15*512kB (UME) 23*1024kB (UME) 11*2048kB (UME) 21*4096kB (UM) = 212956kB
[  462.713245][T28927] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  462.719435][T28927] Node 1 Normal: 180*4kB (UM) 771*8kB (UME) 931*16kB (UME) 101*32kB (UME) 262*64kB (UME) 113*128kB (UM) 57*256kB (UME) 21*512kB (UME) 8*1024kB (UM) 12*2048kB (UME) 10*4096kB (UM) = 155320kB
[  462.725816][T28927] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.729044][T28927] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.732564][T28927] 42444 total pagecache pages
[  462.734218][T28927] 0 pages in swap cache
[  462.735982][T28927] Free swap  = 124996kB
[  462.737518][T28927] Total swap = 124996kB
[  462.739106][T28927] 786301 pages RAM
[  462.740620][T28927] 0 pages HighMem/MovableOnly
[  462.742481][T28927] 241346 pages reserved
[  462.744120][T28927] 0 pages cma reserved
[  462.806944][T28931] vlan1: entered promiscuous mode
[  462.809089][T28931] hsr_slave_1: entered promiscuous mode
[  462.811696][T28931] vlan1: entered allmulticast mode
[  462.813904][T28931] hsr_slave_1: entered allmulticast mode
[  462.910339][T28934] netlink: 'syz.1.6237': attribute type 1 has an invalid length.
[  462.979236][T28934] 8021q: adding VLAN 0 to HW filter on device bond43
[  463.004987][T28941] bond43: (slave veth25): Enslaving as an active interface with a down link
[  463.045192][T28943] netlink: 'syz.0.6239': attribute type 1 has an invalid length.
[  463.051733][T28934] macvlan0: entered promiscuous mode
[  463.054066][T28934] macvlan0: entered allmulticast mode
[  463.057304][T28934] bond43: entered promiscuous mode
[  463.060191][T28934] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  463.064883][T28934] bond43: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  463.070967][T28934] bond43: left promiscuous mode
[  463.212655][T28954] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.286577][T28959] netlink: 'syz.2.6243': attribute type 2 has an invalid length.
[  463.286613][T28960] netlink: 'syz.2.6243': attribute type 2 has an invalid length.
[  463.457700][T28966] vti1: entered promiscuous mode
[  463.663493][T28978] wg1 speed is unknown, defaulting to 1000
[  463.669354][T28978] lo speed is unknown, defaulting to 1000
[  464.004828][T28988] __nla_validate_parse: 20 callbacks suppressed
[  464.004842][T28988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6250'.
[  464.034836][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6251'.
[  464.039662][T28994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6251'.
[  464.050086][T28994] !: entered promiscuous mode
[  464.052472][T28994] macsec3: entered promiscuous mode
[  464.054964][T28994] macsec3: entered allmulticast mode
[  464.059429][T28994] !: entered allmulticast mode
[  464.222272][T29015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6256'.
[  464.307903][T29021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6259'.
[  464.350288][T29025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6260'.
[  464.364508][T29025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6260'.
[  464.419315][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6261'.
[  464.498528][T29031] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  464.600211][T29043] wg1 speed is unknown, defaulting to 1000
[  464.603953][T29043] lo speed is unknown, defaulting to 1000
[  464.680206][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'.
[  464.688966][T29048] tipc: Resetting bearer <eth:syzkaller0>
[  464.693643][T29048] syzkaller0: left promiscuous mode
[  464.696112][T29048] syzkaller0: left allmulticast mode
[  464.719840][T29048] gtp3: left promiscuous mode
[  464.721528][T29048] gtp3: left allmulticast mode
[  464.739031][  T974] syz2: Port: 1 Link DOWN
[  464.740562][ T5875] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.744370][ T5875] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.752991][ T5875] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.756206][ T5875] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.771016][T29048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6265'.
[  465.213355][T29060] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.219773][T29060] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  465.271874][T29060] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.275447][T29060] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  465.332188][T29060] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.343577][T29060] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  465.375556][T29060] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  465.378688][T29060] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  465.546859][ T5875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  465.553900][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  465.569105][ T5875] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  465.578186][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  465.640440][ T5746] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  465.644021][ T5746] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  465.649416][ T5746] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  465.652950][ T5746] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  465.660495][T29074] IPVS: stopping backup sync thread 29031 ...
[  465.738882][T29078] validate_nla: 1 callbacks suppressed
[  465.738894][T29078] netlink: 'syz.1.6271': attribute type 1 has an invalid length.
[  465.793533][T29078] bond44: entered promiscuous mode
[  465.796777][T29078] 8021q: adding VLAN 0 to HW filter on device bond44
[  465.819301][T29078] bond44: (slave bridge0): making interface the new active one
[  465.823327][T29078] bridge0: entered promiscuous mode
[  465.828510][T29078] bond44: (slave bridge0): Enslaving as an active interface with an up link
[  465.963994][T29097] netlink: 'syz.2.6277': attribute type 1 has an invalid length.
[  466.088362][T29104] syzkaller1: entered promiscuous mode
[  466.090733][T29104] syzkaller1: entered allmulticast mode
[  466.097837][T29104] netlink: 'syz.2.6280': attribute type 10 has an invalid length.
[  466.280935][T29110] netlink: 'syz.2.6283': attribute type 1 has an invalid length.
[  467.049065][T29167] bridge17: entered allmulticast mode
[  467.071477][T29169] netlink: 'syz.0.6298': attribute type 10 has an invalid length.
[  467.306501][T29185] wg1 speed is unknown, defaulting to 1000
[  467.310457][T29185] lo speed is unknown, defaulting to 1000
[  467.597379][T29194] netlink: 'syz.0.6305': attribute type 4 has an invalid length.
[  467.743814][T29202] wg1 speed is unknown, defaulting to 1000
[  467.757142][T29202] lo speed is unknown, defaulting to 1000
[  468.224526][T29226] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  468.785258][T29237] bond49: option mode: unable to set because the bond device has slaves
[  468.850651][T29237] bond49: (slave vcan1): Releasing backup interface
[  468.953838][T29255] netlink: 'syz.2.6324': attribute type 1 has an invalid length.
[  468.981208][T29255] 8021q: adding VLAN 0 to HW filter on device bond51
[  468.988840][T29258] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode
[  468.991279][T29258] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  469.004563][T29252] wg1 speed is unknown, defaulting to 1000
[  469.027215][T29255] 8021q: adding VLAN 0 to HW filter on device bond51
[  469.030421][T29255] bond51: (slave vxcan3): The slave device specified does not support setting the MAC address
[  469.036830][T29255] bond51: (slave vxcan3): Error -95 calling set_mac_address
[  469.051818][T29252] lo speed is unknown, defaulting to 1000
[  469.053794][T29264] __nla_validate_parse: 26 callbacks suppressed
[  469.053807][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'.
[  469.074323][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6326'.
[  469.278839][T29289] netlink: 'syz.0.6333': attribute type 12 has an invalid length.
[  469.412306][T29291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'.
[  469.474091][T29298] wg1 speed is unknown, defaulting to 1000
[  469.479233][T29298] lo speed is unknown, defaulting to 1000
[  469.661584][T29301] bond40: (slave wireguard0): Releasing backup interface
[  469.664509][T29301] wireguard0: left promiscuous mode
[  469.673720][T29301] bond42: (slave bridge0): Releasing active interface
[  469.724523][T29309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'.
[  469.809610][T29319] netlink: 'syz.1.6341': attribute type 9 has an invalid length.
[  469.814100][T29321] netlink: 'syz.1.6341': attribute type 9 has an invalid length.
[  469.990139][T29341] IPVS: stopping backup sync thread 29343 ...
[  469.990407][T29343] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  470.040828][T29347] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  470.052657][T29345] IPVS: stopping backup sync thread 29347 ...
[  470.152258][T29357] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6352'.
[  470.163213][T29357] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6352'.
[  470.236766][T29363] sctp: [Deprecated]: syz.2.6354 (pid 29363) Use of int in max_burst socket option deprecated.
[  470.236766][T29363] Use struct sctp_assoc_value instead
[  470.437259][T29387] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  470.438713][T29386] IPVS: stopping backup sync thread 29387 ...
[  470.587140][T29393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6362'.
[  470.632522][T29395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6363'.
[  470.637018][T29395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6363'.
[  470.943671][T29409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6368'.
[  470.950388][T29409] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  470.982264][T29410] syzkaller1: entered promiscuous mode
[  470.985682][T29410] syzkaller1: entered allmulticast mode
[  471.073501][T29416] wg1 speed is unknown, defaulting to 1000
[  471.077434][T29416] lo speed is unknown, defaulting to 1000
[  471.386221][T29433] validate_nla: 1 callbacks suppressed
[  471.386238][T29433] netlink: 'syz.0.6374': attribute type 3 has an invalid length.
[  471.964883][T29433] syzkaller1: entered promiscuous mode
[  471.968619][T29433] syzkaller1: entered allmulticast mode
[  472.114919][T29453] netlink: 'syz.1.6378': attribute type 11 has an invalid length.
[  472.258942][T29465] ip6gre0: entered allmulticast mode
[  472.422854][T29489] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  472.429101][T29486] IPVS: stopping backup sync thread 29489 ...
[  472.883471][T29551] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  472.883658][T29548] IPVS: stopping backup sync thread 29551 ...
[  472.977674][T29554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.986220][T29554] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  472.993098][T29554] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  473.023163][T29554] tipc: Resetting bearer <eth:syzkaller0>
[  473.108501][T29561] netlink: 'syz.2.6407': attribute type 5 has an invalid length.
[  473.126906][T29561] geneve8: entered promiscuous mode
[  473.129127][T29561] geneve8: entered allmulticast mode
[  473.136825][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  473.143891][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  473.153870][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  473.159206][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  473.461869][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  473.465865][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  473.469336][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  473.472181][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  473.546029][T29593] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  473.549383][T29593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  473.608059][T29602] veth0_to_bond: entered allmulticast mode
[  473.694340][T29606] netlink: 'syz.1.6418': attribute type 1 has an invalid length.
[  473.718766][T29604] netlink: 'syz.0.6417': attribute type 10 has an invalid length.
[  473.722447][T29604] team0: entered promiscuous mode
[  473.727051][T29604] 8021q: adding VLAN 0 to HW filter on device team0
[  473.742786][T29606] bond45: (slave bridge18): making interface the new active one
[  473.746054][T29606] bond45: (slave bridge18): Enslaving as an active interface with an up link
[  473.913419][T29622] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  473.918776][T29621] IPVS: stopping backup sync thread 29622 ...
[  473.983378][T29624] wg1 speed is unknown, defaulting to 1000
[  473.990371][T29624] lo speed is unknown, defaulting to 1000
[  474.205863][T29643] __nla_validate_parse: 28 callbacks suppressed
[  474.205874][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6431'.
[  474.318055][T29651] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6432'.
[  474.332555][T29651] batadv0: entered promiscuous mode
[  474.334935][T29651] batadv0: entered allmulticast mode
[  475.211679][T29664] wg1 speed is unknown, defaulting to 1000
[  475.228345][T29664] lo speed is unknown, defaulting to 1000
[  475.328797][T29671] netlink: 'syz.2.6438': attribute type 1 has an invalid length.
[  475.331389][T29671] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.6438'.
[  475.529313][T29664] netlink: 'syz.0.6436': attribute type 6 has an invalid length.
[  475.544353][T29692] netlink: 'syz.1.6441': attribute type 1 has an invalid length.
[  475.564936][T29692] 8021q: adding VLAN 0 to HW filter on device bond46
[  475.583213][T29692] vlan1: entered allmulticast mode
[  475.589020][T29692] bond46: (slave vlan1): Opening slave failed
[  475.720419][T29703] tap0: tun_chr_ioctl cmd 1074025680
[  475.725108][T29703] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  475.733201][T29703] D: renamed from syzkaller0
[  475.737206][T29703] tipc: Disabling bearer <eth:syzkaller0>
[  476.030547][T29719] netlink: 'syz.2.6446': attribute type 1 has an invalid length.
[  476.059033][T29719] 8021q: adding VLAN 0 to HW filter on device bond52
[  476.089253][T29719] veth35: entered promiscuous mode
[  476.094349][T29719] bond52: (slave veth35): Enslaving as an active interface with a down link
[  476.106258][T29719] erspan0: entered allmulticast mode
[  476.116931][T29722] IPVS: Scheduler module ip_vs_sip not found
[  476.203157][T29731] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  476.203182][T29730] IPVS: stopping backup sync thread 29731 ...
[  476.246636][T29730] wg1 speed is unknown, defaulting to 1000
[  476.250020][T29730] lo speed is unknown, defaulting to 1000
[  476.333170][T29730] netlink: 'syz.2.6450': attribute type 10 has an invalid length.
[  476.357658][T29736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6452'.
[  476.374352][T29744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6453'.
[  476.581043][T29759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.584427][T29759] syzkaller0: entered promiscuous mode
[  476.595994][T29759] syzkaller0: entered allmulticast mode
[  476.643365][T29759] tipc: Resetting bearer <eth:syzkaller0>
[  476.651935][T29758] tipc: Resetting bearer <eth:syzkaller0>
[  476.679309][T29758] tipc: Disabling bearer <eth:syzkaller0>
[  476.783303][T29773] 8021q: adding VLAN 0 to HW filter on device bond53
[  476.829189][T29781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6469'.
[  476.871252][T29783] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6470'.
[  477.753307][T29796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6474'.
[  477.814240][T29802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'.
[  477.840564][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6472'.
[  478.038637][T29808] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  478.218704][T29817] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  478.427033][T29829] !: left allmulticast mode
[  478.449575][ T5875] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.452675][ T5875] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  478.455961][ T5875] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.458619][ T5875] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  478.461567][ T5875] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.464879][ T5875] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  478.468781][ T5875] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.472045][ T5875] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  478.476361][T29833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.479845][T29833] syzkaller0: entered promiscuous mode
[  478.482168][T29833] syzkaller0: entered allmulticast mode
[  478.501384][T29833] tipc: Resetting bearer <eth:syzkaller0>
[  478.507955][T29832] tipc: Resetting bearer <eth:syzkaller0>
[  478.519555][T29832] tipc: Disabling bearer <eth:syzkaller0>
[  478.587803][T29839] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  478.591599][T29837] IPVS: stopping backup sync thread 29839 ...
[  478.662479][T29844] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  478.662588][T29843] IPVS: stopping backup sync thread 29844 ...
[  478.733373][T29847] bond52: (slave veth35): Releasing active interface
[  478.741802][T29847] validate_nla: 1 callbacks suppressed
[  478.741812][T29847] netlink: 'syz.2.6485': attribute type 10 has an invalid length.
[  478.749622][T29847] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  478.752847][T29847] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  479.178660][T29857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.231381][T29859] __nla_validate_parse: 7 callbacks suppressed
[  479.231390][T29859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6489'.
[  479.291190][T29859] netlink: 'syz.1.6489': attribute type 10 has an invalid length.
[  479.346661][   T11] block nbd0: Possible stuck request ffff88801feb0000: control (read@0,1024B). Runtime 390 seconds
[  479.351022][   T11] block nbd0: Possible stuck request ffff88801feb0200: control (read@1024,1024B). Runtime 390 seconds
[  479.358532][   T11] block nbd0: Possible stuck request ffff88801feb0400: control (read@2048,1024B). Runtime 390 seconds
[  479.363152][   T11] block nbd0: Possible stuck request ffff88801feb0600: control (read@3072,1024B). Runtime 390 seconds
[  479.622263][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6490'.
[  479.644304][T29868] lo: entered allmulticast mode
[  479.653029][T29868] lo: left allmulticast mode
[  479.782363][T29873] syzkaller0: entered promiscuous mode
[  479.784738][T29873] syzkaller0: entered allmulticast mode
[  479.808036][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6497'.
[  479.812393][T29882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6497'.
[  481.144300][T29905] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  481.152429][T29902] IPVS: stopping backup sync thread 29905 ...
[  481.158210][T29897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6502'.
[  481.192082][T29907] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6503'.
[  481.311437][T29916] netlink: 'syz.2.6507': attribute type 2 has an invalid length.
[  481.316210][T29916] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6507'.
[  481.597399][T29930] wg1 speed is unknown, defaulting to 1000
[  481.600874][T29930] lo speed is unknown, defaulting to 1000
[  481.714302][T29936] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  481.718302][T29937] IPVS: stopping backup sync thread 29936 ...
[  481.830705][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6514'.
[  481.929971][T29930] netlink: 'syz.2.6511': attribute type 6 has an invalid length.
[  482.301995][   T33] audit: type=1804 audit(1758475019.649:5): pid=29952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6516" name="/newroot/2051/cgroup.controllers" dev="tmpfs" ino=10450 res=1 errno=0
[  482.317740][T29954] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.339846][   T33] audit: type=1800 audit(1758475019.669:6): pid=29952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6516" name="cgroup.controllers" dev="tmpfs" ino=10450 res=0 errno=0
[  482.528163][T29968] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  482.544037][T29968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6522'.
[  482.620342][T29976] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  482.750367][T29986] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  482.863238][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6533'.
[  483.479735][T30008] gretap0: entered promiscuous mode
[  483.484752][T30008] gretap0: left promiscuous mode
[  483.606044][T30013] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  483.609593][T30012] IPVS: stopping backup sync thread 30013 ...
[  483.682082][T30015] netlink: 'syz.2.6537': attribute type 10 has an invalid length.
[  483.906675][T30023] wg1 speed is unknown, defaulting to 1000
[  483.910460][T30023] lo speed is unknown, defaulting to 1000
[  484.055922][T30025] wg1 speed is unknown, defaulting to 1000
[  484.062915][T30025] lo speed is unknown, defaulting to 1000
[  484.081800][T30023] vlan1: entered promiscuous mode
[  484.084674][T30023] bond0: entered promiscuous mode
[  484.087633][T30023] vlan1: entered allmulticast mode
[  484.090028][T30023] bond0: entered allmulticast mode
[  484.632920][T30029] __nla_validate_parse: 34 callbacks suppressed
[  484.632930][T30029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6541'.
[  484.731127][T30036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6544'.
[  484.738254][T30034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'.
[  484.738553][T30036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6544'.
[  484.776713][T30034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'.
[  484.779647][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  484.782929][T30037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'.
[  484.789253][T30037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6542'.
[  484.792064][T30037] netlink: 'syz.1.6542': attribute type 14 has an invalid length.
[  484.794571][T30037] netlink: 'syz.1.6542': attribute type 11 has an invalid length.
[  484.794658][T30034] netlink: 'syz.1.6542': attribute type 14 has an invalid length.
[  484.800051][T30034] netlink: 'syz.1.6542': attribute type 11 has an invalid length.
[  484.834046][T30041] netlink: 'syz.2.6545': attribute type 10 has an invalid length.
[  484.837308][T30046] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6546'.
[  485.072285][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6552'.
[  485.281129][T30088] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  485.285925][T30087] IPVS: stopping backup sync thread 30088 ...
[  485.286163][T30085] wg1 speed is unknown, defaulting to 1000
[  485.293126][T30085] lo speed is unknown, defaulting to 1000
[  485.659932][T30112] netlink: 'syz.2.6563': attribute type 20 has an invalid length.
[  485.680996][T30112] sctp: [Deprecated]: syz.2.6563 (pid 30112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.680996][T30112] Use struct sctp_sack_info instead
[  485.841514][T30121] ipvlan0: entered promiscuous mode
[  485.844261][T30121] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  486.763708][T30141] xt_l2tp: invalid flags combination: 8
[  486.768445][T30141] xt_l2tp: invalid flags combination: 8
[  486.771352][T30141] xt_l2tp: invalid flags combination: 8
[  486.774137][T30141] xt_l2tp: invalid flags combination: 8
[  486.781428][T30141] xt_l2tp: invalid flags combination: 8
[  486.784463][T30141] xt_l2tp: invalid flags combination: 8
[  486.790464][T30141] xt_l2tp: invalid flags combination: 8
[  486.794362][T30141] xt_l2tp: invalid flags combination: 8
[  486.798197][T30141] xt_l2tp: invalid flags combination: 8
[  486.803286][T30141] xt_l2tp: invalid flags combination: 8
[  486.808649][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.808649][T30145] Use struct sctp_assoc_value instead
[  486.815406][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.815406][T30145] Use struct sctp_assoc_value instead
[  486.821495][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.821495][T30145] Use struct sctp_assoc_value instead
[  486.827773][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.827773][T30145] Use struct sctp_assoc_value instead
[  486.834391][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.834391][T30145] Use struct sctp_assoc_value instead
[  486.841830][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.841830][T30145] Use struct sctp_assoc_value instead
[  486.854912][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.854912][T30145] Use struct sctp_assoc_value instead
[  486.888821][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.888821][T30145] Use struct sctp_assoc_value instead
[  486.904735][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.904735][T30145] Use struct sctp_assoc_value instead
[  486.910844][T30145] sctp: [Deprecated]: syz.2.6574 (pid 30145) Use of int in max_burst socket option deprecated.
[  486.910844][T30145] Use struct sctp_assoc_value instead
[  486.942993][T30149] wg1 speed is unknown, defaulting to 1000
[  486.946259][T30151] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  486.949293][T30151] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  486.951653][T30149] lo speed is unknown, defaulting to 1000
[  487.258602][T30172] wg1 speed is unknown, defaulting to 1000
[  487.268342][T30172] lo speed is unknown, defaulting to 1000
[  487.531776][T30176] syzkaller1: entered promiscuous mode
[  487.533780][T30176] syzkaller1: entered allmulticast mode
[  487.626891][T30189] bridge19: entered promiscuous mode
[  487.629046][T30189] bridge19: entered allmulticast mode
[  487.737248][T30194] veth0_to_bond: left allmulticast mode
[  488.022666][T30214] team0: left promiscuous mode
[  488.030119][T30214] macvlan0: left allmulticast mode
[  488.049565][T30214] mac80211_hwsim hwsim46 wlan0: left promiscuous mode
[  488.052931][T30214] gretap2: left allmulticast mode
[  488.055139][T30214] bond37: left allmulticast mode
[  488.058670][T30214] bond40: left promiscuous mode
[  488.062274][T30214] xfrm1: left allmulticast mode
[  488.076285][T30214] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  488.078706][T30214] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  488.091620][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.094655][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.107816][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.114410][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  488.263809][T30244] netlink: 'syz.2.6603': attribute type 1 has an invalid length.
[  488.345020][T30251] netlink: 'syz.2.6606': attribute type 10 has an invalid length.
[  488.463255][T30261] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  488.470317][T30260] IPVS: stopping backup sync thread 30261 ...
[  488.561826][T30268] 0X: renamed from caif0
[  488.568185][T30268] 0X: entered allmulticast mode
[  488.569869][T30268] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  488.642954][T30274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  488.666756][T30274] bridge19: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  488.703219][T30277] syzkaller1: entered promiscuous mode
[  488.710002][T30277] syzkaller1: entered allmulticast mode
[  488.757947][T30282] netlink: 'syz.1.6615': attribute type 1 has an invalid length.
[  488.790328][T30282] bond47: entered promiscuous mode
[  488.793065][T30282] 8021q: adding VLAN 0 to HW filter on device bond47
[  488.840462][T30282] 8021q: adding VLAN 0 to HW filter on device bond47
[  488.842915][T30282] bond47: (slave wireguard2): The slave device specified does not support setting the MAC address
[  488.848985][T30282] bond47: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  488.853819][T30282] bond47: (slave wireguard2): making interface the new active one
[  488.857360][T30282] wireguard2: entered promiscuous mode
[  488.860891][T30282] bond47: (slave wireguard2): Enslaving as an active interface with an up link
[  488.872994][T30282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  488.875831][T30282] IPv6: NLM_F_CREATE should be set when creating new route
[  488.878605][T30282] IPv6: NLM_F_CREATE should be set when creating new route
[  488.883089][T30282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  488.926526][T30296] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  488.963564][ T5875] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.967507][ T5875] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.970899][ T5875] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.974311][ T5875] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.008125][T30299] erspan0: left allmulticast mode
[  489.010608][T30299] 0X: left allmulticast mode
[  489.019259][T30299] geneve8: left promiscuous mode
[  489.021522][T30299] geneve8: left allmulticast mode
[  489.032787][T30299] veth35: left promiscuous mode
[  489.037913][T30299] vlan1: left promiscuous mode
[  489.039988][T30299] bond0: left promiscuous mode
[  489.043282][T30299] vlan1: left allmulticast mode
[  489.045480][T30299] bond0: left allmulticast mode
[  489.051265][T30299] ipvlan0: left promiscuous mode
[  489.057348][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  489.066013][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  489.069953][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  489.083381][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  489.110093][T30311] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  489.114526][T30310] IPVS: stopping backup sync thread 30311 ...
[  489.458973][T30334] wg1 speed is unknown, defaulting to 1000
[  489.462677][T30334] lo speed is unknown, defaulting to 1000
[  489.787560][T30339] wg1 speed is unknown, defaulting to 1000
[  489.793574][T30339] lo speed is unknown, defaulting to 1000
[  489.836240][T30340] __nla_validate_parse: 21 callbacks suppressed
[  489.836249][T30340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6633'.
[  489.854624][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'.
[  490.044529][T30345] netlink: 'syz.2.6635': attribute type 12 has an invalid length.
[  490.298949][T30359] netlink: 'syz.1.6639': attribute type 1 has an invalid length.
[  490.302173][T30359] netlink: 'syz.1.6639': attribute type 1 has an invalid length.
[  490.369935][T30368] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6642'.
[  490.426484][T30370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6643'.
[  490.463043][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6642'.
[  490.471222][T30374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6642'.
[  490.542431][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6646'.
[  490.654878][T30392] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  490.659839][T30391] IPVS: stopping backup sync thread 30392 ...
[  490.699724][T30394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  490.703053][T30394] syzkaller0: entered promiscuous mode
[  490.707475][T30394] syzkaller0: entered allmulticast mode
[  490.719798][T30394] tipc: Resetting bearer <eth:syzkaller0>
[  490.722908][T30393] tipc: Resetting bearer <eth:syzkaller0>
[  490.732597][T30393] tipc: Disabling bearer <eth:syzkaller0>
[  491.100469][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6654'.
[  491.104521][T30413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6654'.
[  491.153207][T30414] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  491.157944][T30414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6654'.
[  491.441300][T30436] wg1 speed is unknown, defaulting to 1000
[  491.446351][T30436] lo speed is unknown, defaulting to 1000
[  491.601027][T30451] netlink: 'syz.1.6665': attribute type 1 has an invalid length.
[  491.641685][T30451] 8021q: adding VLAN 0 to HW filter on device bond48
[  491.656693][T30451] ipvlan0: entered allmulticast mode
[  491.658907][T30451] bond48: entered allmulticast mode
[  491.730002][T30461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.824259][T30476] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  491.833042][T30477] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  491.833863][T30473] IPVS: stopping backup sync thread 30476 ...
[  491.838301][T30475] IPVS: stopping backup sync thread 30477 ...
[  491.939479][T30486] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  491.943522][T30483] IPVS: stopping backup sync thread 30486 ...
[  491.949307][T30488] 8021q: VLANs not supported on sit0
[  492.069523][T30492] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  492.144253][T30505] wg1 speed is unknown, defaulting to 1000
[  492.148500][T30505] lo speed is unknown, defaulting to 1000
[  492.171421][T30500] wg1 speed is unknown, defaulting to 1000
[  492.174754][T30500] lo speed is unknown, defaulting to 1000
[  492.255222][T30512] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  492.256680][T30510] wg1 speed is unknown, defaulting to 1000
[  492.283434][T30510] lo speed is unknown, defaulting to 1000
[  492.288644][T30511] IPVS: stopping backup sync thread 30512 ...
[  492.466790][T30520] netlink: 'syz.0.6684': attribute type 1 has an invalid length.
[  492.670356][T30536] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  492.674300][T30535] IPVS: stopping backup sync thread 30536 ...
[  492.796613][T30541] veth0_to_bridge: left promiscuous mode
[  492.809172][T30541] vlan0: left promiscuous mode
[  492.811219][T30541] geneve1: left promiscuous mode
[  492.819238][T30541] geneve7: left allmulticast mode
[  492.822746][T30541] bond36: left promiscuous mode
[  492.824760][T30541] bond36: left allmulticast mode
[  492.829376][T30541] veth21: left promiscuous mode
[  492.831757][T30541] veth23: left promiscuous mode
[  492.834584][T30541] geneve8: left promiscuous mode
[  492.837977][T30541] geneve8: left allmulticast mode
[  492.841747][T30541] vti1: left promiscuous mode
[  492.844933][T30541] macsec3: left promiscuous mode
[  492.847357][T30541] macsec3: left allmulticast mode
[  492.850077][T30541] bond44: left promiscuous mode
[  492.852203][T30541] bridge0: left promiscuous mode
[  492.854555][T30541] bridge17: left allmulticast mode
[  492.861241][T30541] bond47: left promiscuous mode
[  492.863295][T30541] wireguard2: left promiscuous mode
[  492.877248][T30541] ipvlan0: left allmulticast mode
[  492.879247][T30541] bond48: left allmulticast mode
[  492.993572][T30564] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  492.997764][T30563] IPVS: stopping backup sync thread 30564 ...
[  493.116283][T30581] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  493.496759][T30611] 8021q: VLANs not supported on wg1
[  493.499082][T30611] 8021q: VLANs not supported on wg1
[  493.647571][T30626] wg1 speed is unknown, defaulting to 1000
[  493.652363][T30626] lo speed is unknown, defaulting to 1000
[  493.661054][T30631] wg1 speed is unknown, defaulting to 1000
[  493.683840][T30631] lo speed is unknown, defaulting to 1000
[  493.701349][T30635] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.038049][T30646] bond44: (slave bridge0): Releasing backup interface
[  494.312223][T30675] wg1 speed is unknown, defaulting to 1000
[  494.319592][T30678] wg1 speed is unknown, defaulting to 1000
[  494.324598][T30675] lo speed is unknown, defaulting to 1000
[  494.330127][T30678] lo speed is unknown, defaulting to 1000
[  494.464549][T30686] netlink: 'syz.1.6730': attribute type 1 has an invalid length.
[  494.498728][T30686] bond49: (slave vxcan1): The slave device specified does not support setting the MAC address
[  494.502945][T30686] bond49: (slave vxcan1): Error -95 calling set_mac_address
[  494.593861][T30692] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  494.599813][T30690] IPVS: stopping backup sync thread 30692 ...
[  494.722358][T30698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  494.730043][T30698] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  494.733212][T30698] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  494.748672][T30698] netem: change failed
[  494.855715][T30708] netlink: 'syz.0.6737': attribute type 1 has an invalid length.
[  494.858575][T30708] __nla_validate_parse: 20 callbacks suppressed
[  494.858583][T30708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'.
[  494.863717][T30709] netlink: 'syz.0.6737': attribute type 1 has an invalid length.
[  494.874689][T30709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6737'.
[  494.880934][T30708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6737'.
[  494.959668][T30712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6739'.
[  495.061812][T30718] netlink: 'syz.1.6742': attribute type 7 has an invalid length.
[  495.065242][T30718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6742'.
[  495.128651][T30718] 8021q: adding VLAN 0 to HW filter on device bond50
[  495.199509][T30725] sctp: [Deprecated]: syz.0.6744 (pid 30725) Use of int in maxseg socket option.
[  495.199509][T30725] Use struct sctp_assoc_value instead
[  495.229303][T30718] bond50 (unregistering): Released all slaves
[  495.246685][T30726] veth0_to_bridge: entered promiscuous mode
[  495.285481][T30731] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  495.290059][T30729] IPVS: stopping backup sync thread 30731 ...
[  495.330397][T30734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6747'.
[  495.384748][T30736] netlink: 'syz.0.6748': attribute type 1 has an invalid length.
[  495.400978][T30738] IPVS: stopping backup sync thread 30740 ...
[  495.414818][T30742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'.
[  495.445653][T30745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  495.448156][T30745] IPv6: NLM_F_CREATE should be set when creating new route
[  495.451026][T30745] IPv6: NLM_F_CREATE should be set when creating new route
[  495.458004][T30738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6749'.
[  495.462581][T30745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  495.521145][T30748] wg1 speed is unknown, defaulting to 1000
[  495.524424][T30748] lo speed is unknown, defaulting to 1000
[  495.658424][T30754] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  495.661308][T30754] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  495.674910][T30758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6753'.
[  495.695844][T30758] netlink: 'syz.0.6753': attribute type 1 has an invalid length.
[  495.698345][T30758] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6753'.
[  495.794724][T30766] netlink: 'syz.0.6755': attribute type 1 has an invalid length.
[  495.932415][T30772] IPVS: stopping backup sync thread 30773 ...
[  495.944311][T30775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.947335][T30775] syzkaller0: entered promiscuous mode
[  495.949006][T30775] syzkaller0: entered allmulticast mode
[  495.985193][T30779] tipc: Resetting bearer <eth:syzkaller0>
[  495.989578][T30774] tipc: Resetting bearer <eth:syzkaller0>
[  496.007888][T30774] tipc: Disabling bearer <eth:syzkaller0>
[  496.026218][T30781] wg1 speed is unknown, defaulting to 1000
[  496.029707][T30781] lo speed is unknown, defaulting to 1000
[  496.101909][T30784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.123950][T30784] syzkaller0: entered promiscuous mode
[  496.127357][T30784] syzkaller0: entered allmulticast mode
[  496.129674][T30784] tipc: Resetting bearer <eth:syzkaller0>
[  496.142704][T30783] tipc: Resetting bearer <eth:syzkaller0>
[  496.329268][T30787] netlink: 'syz.0.6761': attribute type 6 has an invalid length.
[  497.393144][T30783] tipc: Disabling bearer <eth:syzkaller0>
[  497.555994][T30793] wg1 speed is unknown, defaulting to 1000
[  497.560414][T30793] lo speed is unknown, defaulting to 1000
[  497.740311][T30822] : renamed from vlan0
[  498.229015][T30876] netlink: 'syz.2.6783': attribute type 13 has an invalid length.
[  498.231994][T30876] netlink: 'syz.2.6783': attribute type 17 has an invalid length.
[  498.281342][T30876] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  498.306498][T30876] wg1 speed is unknown, defaulting to 1000
[  498.309927][T30876] lo speed is unknown, defaulting to 1000
[  498.482626][T30890] wg1 speed is unknown, defaulting to 1000
[  498.489517][T30890] lo speed is unknown, defaulting to 1000
[  499.686395][T30932] netlink: 'syz.2.6803': attribute type 4 has an invalid length.
[  499.698215][T30930] wg1 speed is unknown, defaulting to 1000
[  499.713502][T30930] lo speed is unknown, defaulting to 1000
[  499.752672][T30941] netlink: 'syz.2.6805': attribute type 5 has an invalid length.
[  500.445078][T30953] IPVS: stopping backup sync thread 30960 ...
[  500.445511][T30960] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  500.502557][T30967] netlink: 'syz.0.6809': attribute type 2 has an invalid length.
[  500.506660][T30967] __nla_validate_parse: 11 callbacks suppressed
[  500.506673][T30967] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.6809'.
[  500.584446][T30973] wg1 speed is unknown, defaulting to 1000
[  500.595175][T30973] lo speed is unknown, defaulting to 1000
[  500.610209][T30971] wg1 speed is unknown, defaulting to 1000
[  500.650319][T30971] lo speed is unknown, defaulting to 1000
[  500.729942][T30976] wg1 speed is unknown, defaulting to 1000
[  500.759062][T30976] lo speed is unknown, defaulting to 1000
[  500.782065][T30974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6809'.
[  501.410264][T30991] pim6reg: entered allmulticast mode
[  501.791832][T31025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6825'.
[  501.852156][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6826'.
[  501.857504][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6823'.
[  502.029828][T31045] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  502.206524][T31057] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6834'.
[  502.212173][T31057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6834'.
[  502.291498][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6836'.
[  502.312563][T31061] bond43: entered promiscuous mode
[  502.315109][T31061] 8021q: adding VLAN 0 to HW filter on device bond43
[  502.334485][T31061] 8021q: adding VLAN 0 to HW filter on device bond43
[  502.339867][T31061] bond43: (slave vcan0): The slave device specified does not support setting the MAC address
[  502.345735][T31061] bond43: (slave vcan0): Error -95 calling set_mac_address
[  502.681271][T31079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6840'.
[  502.989201][ T5897] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.992726][ T5897] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.998287][ T5897] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.001750][ T5897] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.208167][T31123] syz.1.6850 uses old SIOCAX25GETINFO
[  503.211913][T31123] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6850'.
[  503.253091][T31127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  503.258649][T31127] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  503.261258][T31127] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  503.295743][T31131] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  503.296529][T31130] IPVS: stopping backup sync thread 31131 ...
[  503.329124][T31129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  503.385765][T31142] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  503.389928][T31140] IPVS: stopping backup sync thread 31142 ...
[  503.482929][T31150] netlink: 'syz.1.6859': attribute type 13 has an invalid length.
[  503.498000][T31150] netlink: 'syz.1.6859': attribute type 17 has an invalid length.
[  503.511717][T31150] !: left promiscuous mode
[  503.517525][T31150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  503.541397][T31150] wg1 speed is unknown, defaulting to 1000
[  503.545197][T31150] lo speed is unknown, defaulting to 1000
[  504.372040][T31199] netlink: 'syz.1.6874': attribute type 1 has an invalid length.
[  504.583617][T31207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  504.644282][T31214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.733128][T31224] IPVS: stopping backup sync thread 31225 ...
[  504.733432][T31225] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  505.010284][T31244] 8021q: adding VLAN 0 to HW filter on device team0
[  505.015191][T31244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  505.020877][T28041] lo speed is unknown, defaulting to 1000
[  505.022826][T28041] syz1: Port: 1 Link ACTIVE
[  505.096690][T31249] wg1 speed is unknown, defaulting to 1000
[  505.100659][T31249] lo speed is unknown, defaulting to 1000
[  505.216367][T31253] wg1 speed is unknown, defaulting to 1000
[  505.220954][T31253] lo speed is unknown, defaulting to 1000
[  505.488047][T31264] wg1 speed is unknown, defaulting to 1000
[  505.493029][T31264] lo speed is unknown, defaulting to 1000
[  505.690124][T31276] __nla_validate_parse: 9 callbacks suppressed
[  505.690140][T31276] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6894'.
[  505.700558][T31276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  505.946767][T31293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6899'.
[  506.104576][T31297] bond43: (slave veth25): Releasing active interface
[  506.110181][T31297] bond45: (slave bridge18): Releasing active interface
[  506.128258][T31297] bond47: (slave wireguard2): Releasing backup interface
[  506.334896][T31324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6907'.
[  506.357653][T31324] netlink: 'syz.1.6907': attribute type 7 has an invalid length.
[  506.371583][T31324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6907'.
[  506.429516][T31334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6908'.
[  506.440384][T31324] 8021q: adding VLAN 0 to HW filter on device bond50
[  506.447222][T31324] bridge23: port 1(bond50) entered blocking state
[  506.450057][T31324] bridge23: port 1(bond50) entered disabled state
[  506.455654][T31324] bond50: entered allmulticast mode
[  506.460672][T31324] bridge23: port 1(bond50) entered blocking state
[  506.463523][T31324] bridge23: port 1(bond50) entered forwarding state
[  506.470895][T31329] wg1 speed is unknown, defaulting to 1000
[  506.482329][T31329] lo speed is unknown, defaulting to 1000
[  506.557857][T31336] netlink: 'syz.1.6910': attribute type 1 has an invalid length.
[  506.648607][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6912'.
[  506.668763][T31344] bond51: entered promiscuous mode
[  506.670690][T31344] 8021q: adding VLAN 0 to HW filter on device bond51
[  506.762409][T31356] wg1 speed is unknown, defaulting to 1000
[  506.769184][T31356] lo speed is unknown, defaulting to 1000
[  506.800762][T31365] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  506.800831][T31364] IPVS: stopping backup sync thread 31365 ...
[  506.920041][T31369] wg1 speed is unknown, defaulting to 1000
[  506.923382][T31369] lo speed is unknown, defaulting to 1000
[  506.954286][ T1094] bridge23: port 1(bond50) entered disabled state
[  507.084407][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6920'.
[  507.099139][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6920'.
[  507.109701][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6920'.
[  507.113758][T31375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6920'.
[  507.238409][T31383] netlink: 'syz.0.6921': attribute type 1 has an invalid length.
[  507.271966][T31383] 8021q: adding VLAN 0 to HW filter on device bond45
[  507.422333][T31397] syzkaller0: entered promiscuous mode
[  507.424612][T31397] syzkaller0: entered allmulticast mode
[  507.575065][T31411] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  507.632330][T31421] IPVS: stopping backup sync thread 31422 ...
[  507.633117][T31422] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  507.697646][T31429] 8021q: adding VLAN 0 to HW filter on device bond23
[  507.711200][T31429] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  507.716899][T31429] bond23: (slave macvlan7): Enslaving as a backup interface with a down link
[  507.728197][T31429] bond23: (slave macvlan7): Releasing backup interface
[  508.030234][   T56] block nbd6: Receive control failed (result -11)
[  508.144891][T31454] veth0_to_bridge: left promiscuous mode
[  508.174114][T31454] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  508.451651][T31480] Unsupported ieee802154 address type: 0
[  508.598092][T31499] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  508.602137][T31498] IPVS: stopping backup sync thread 31499 ...
[  508.730940][T31508] wg1 speed is unknown, defaulting to 1000
[  508.738060][T31508] lo speed is unknown, defaulting to 1000
[  508.820496][T31522] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  508.896165][T31528] sctp: [Deprecated]: syz.0.6959 (pid 31528) Use of int in max_burst socket option.
[  508.896165][T31528] Use struct sctp_assoc_value instead
[  509.030594][T31534] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  509.435710][   T11] block nbd0: Possible stuck request ffff88801feb0000: control (read@0,1024B). Runtime 420 seconds
[  509.440094][   T11] block nbd0: Possible stuck request ffff88801feb0200: control (read@1024,1024B). Runtime 420 seconds
[  509.444563][   T11] block nbd0: Possible stuck request ffff88801feb0400: control (read@2048,1024B). Runtime 420 seconds
[  509.449145][   T11] block nbd0: Possible stuck request ffff88801feb0600: control (read@3072,1024B). Runtime 420 seconds
[  509.711262][T31535] wg1 speed is unknown, defaulting to 1000
[  509.716031][T31535] lo speed is unknown, defaulting to 1000
[  509.812536][T31556] netlink: 'syz.0.6968': attribute type 18 has an invalid length.
[  510.091390][T31580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.100833][T31582] netlink: 'syz.1.6976': attribute type 4 has an invalid length.
[  510.208276][T31592] netlink: 'syz.0.6979': attribute type 1 has an invalid length.
[  510.237870][T31592] netlink: 'syz.0.6979': attribute type 2 has an invalid length.
[  510.244676][T31592] ave_0: entered promiscuous mode
[  510.252115][T31592] bond46: entered promiscuous mode
[  510.254326][T31592] bond46: entered allmulticast mode
[  510.257990][T31592] 8021q: adding VLAN 0 to HW filter on device bond46
[  510.659107][T31642] syzkaller1: entered promiscuous mode
[  510.661376][T31642] syzkaller1: entered allmulticast mode
[  510.671187][T31642] IPVS: stopping backup sync thread 31643 ...
[  510.724253][T31647] __nla_validate_parse: 70 callbacks suppressed
[  510.724267][T31647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6991'.
[  510.857434][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6993'.
[  510.864280][T31657] netlink: 'syz.2.6993': attribute type 30 has an invalid length.
[  510.873717][T31657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6993'.
[  511.057722][T31665] 8021q: adding VLAN 0 to HW filter on device bond55
[  511.202057][T31674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6999'.
[  511.206665][T31674] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6999'.
[  511.211003][T31674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6999'.
[  511.309537][T31687] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  511.407161][T31694] netlink: 'syz.2.7005': attribute type 1 has an invalid length.
[  511.420169][T31694] netlink: 'syz.2.7005': attribute type 11 has an invalid length.
[  511.422809][T31694] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7005'.
[  511.478298][T31700] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7006'.
[  511.563126][T31702] wg1 speed is unknown, defaulting to 1000
[  511.577882][T31702] lo speed is unknown, defaulting to 1000
[  511.680867][T31710] netlink: 'syz.0.7010': attribute type 1 has an invalid length.
[  511.914109][T31733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7013'.
[  512.039112][T31740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7016'.
[  512.283650][T31764] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  512.288345][T31763] IPVS: stopping backup sync thread 31764 ...
[  512.319779][T31760] block nbd7: server does not support multiple connections per device.
[  512.323412][T31760] block nbd7: shutting down sockets
[  512.508400][T31781] syzkaller1: entered promiscuous mode
[  512.514346][T31781] syzkaller1: entered allmulticast mode
[  512.624794][T31791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  512.739911][T31801] netlink: 'syz.1.7033': attribute type 1 has an invalid length.
[  512.751850][T31801] dvmrp1: tun_chr_ioctl cmd 1074025677
[  512.754535][T31801] dvmrp1: linktype set to 773
[  512.867247][T31806] vlan4: entered allmulticast mode
[  512.869339][T31806] bridge0: entered allmulticast mode
[  512.873348][T31806] bridge0: port 1(vlan4) entered blocking state
[  512.877296][T31806] bridge0: port 1(vlan4) entered disabled state
[  513.709502][T31869] netlink: 'syz.1.7050': attribute type 1 has an invalid length.
[  513.724265][T31868] syzkaller0: entered promiscuous mode
[  513.726933][T31868] syzkaller0: entered allmulticast mode
[  515.300676][T31885] wg1 speed is unknown, defaulting to 1000
[  515.306603][T31885] lo speed is unknown, defaulting to 1000
[  515.540925][T31908] wg1 speed is unknown, defaulting to 1000
[  515.551751][T31906] sctp: [Deprecated]: syz.0.7064 (pid 31906) Use of struct sctp_assoc_value in delayed_ack socket option.
[  515.551751][T31906] Use struct sctp_sack_info instead
[  515.573864][T31906] sctp: [Deprecated]: syz.0.7064 (pid 31906) Use of struct sctp_assoc_value in delayed_ack socket option.
[  515.573864][T31906] Use struct sctp_sack_info instead
[  515.582749][T31908] lo speed is unknown, defaulting to 1000
[  515.670011][T31915] wg1 speed is unknown, defaulting to 1000
[  515.719687][T31915] lo speed is unknown, defaulting to 1000
[  515.922938][T31938] __nla_validate_parse: 15 callbacks suppressed
[  515.922948][T31938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7069'.
[  515.990789][T31942] netlink: 'syz.2.7072': attribute type 1 has an invalid length.
[  516.123574][T31956] pimreg: entered allmulticast mode
[  516.135951][T31958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7075'.
[  516.138679][T31955] wg1 speed is unknown, defaulting to 1000
[  516.140869][T31957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7075'.
[  516.146360][T31955] lo speed is unknown, defaulting to 1000
[  516.154412][T31956] pimreg: left allmulticast mode
[  516.323474][T31963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7077'.
[  516.330473][T31963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7077'.
[  516.443755][T31970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7079'.
[  516.511767][T31973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7079'.
[  516.711570][T31977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7081'.
[  516.768244][T31988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7083'.
[  517.241565][T32029] wg1 speed is unknown, defaulting to 1000
[  517.248643][T32029] lo speed is unknown, defaulting to 1000
[  517.674203][T32074] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.678779][T32074] syzkaller0: mtu less than device minimum
[  517.808122][T32081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7103'.
[  517.824428][T32083] bond49: (slave vcan0): The slave device specified does not support setting the MAC address
[  517.830562][T32083] bond49: (slave vcan0): Error -95 calling set_mac_address
[  517.878395][T32084] bond49: (slave vcan0): The slave device specified does not support setting the MAC address
[  517.883850][T32084] bond49: (slave vcan0): Error -95 calling set_mac_address
[  517.953300][T32093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  518.012966][T32095] netlink: 'syz.1.7105': attribute type 21 has an invalid length.
[  518.031561][T32093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  518.036739][T32093] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  518.040990][T32093] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  518.492810][T32137] wg1 speed is unknown, defaulting to 1000
[  518.508164][T32137] lo speed is unknown, defaulting to 1000
[  519.223130][T32144] IPVS: stopping backup sync thread 31522 ...
[  520.098993][T32188] netlink: 'syz.2.7125': attribute type 1 has an invalid length.
[  520.880412][T32223] netlink: 'syz.1.7138': attribute type 1 has an invalid length.
[  520.899489][T32223] bond52: (slave geneve9): making interface the new active one
[  520.902343][T32223] bond52: (slave geneve9): Enslaving as an active interface with an up link
[  520.908161][ T5897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  520.911990][ T5897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  520.914980][ T5897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  520.920962][ T5897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  520.979614][T32230] __nla_validate_parse: 14 callbacks suppressed
[  520.979624][T32230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7139'.
[  521.149337][T32252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7145'.
[  521.242327][T32260] smc: net device bond0 applied user defined pnetid SYZ2
[  521.247904][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7148'.
[  521.252479][T32260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7148'.
[  521.275627][T32260] bond56: entered promiscuous mode
[  521.278104][T32260] 8021q: adding VLAN 0 to HW filter on device bond56
[  521.336075][T32267] netlink: 'syz.2.7149': attribute type 15 has an invalid length.
[  521.611236][T32272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7151'.
[  521.882045][T32289] warn_alloc: 1 callbacks suppressed
[  521.882060][T32289] syz.2.7155: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  521.892059][T32289] CPU: 0 UID: 0 PID: 32289 Comm: syz.2.7155 Not tainted syzkaller #0 PREEMPT(full) 
[  521.892076][T32289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  521.892083][T32289] Call Trace:
[  521.892090][T32289]  <TASK>
[  521.892095][T32289]  dump_stack_lvl+0x189/0x250
[  521.892117][T32289]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.892131][T32289]  ? __pfx__printk+0x10/0x10
[  521.892148][T32289]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  521.892163][T32289]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  521.892178][T32289]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  521.892194][T32289]  warn_alloc+0x214/0x310
[  521.892219][T32289]  ? __pfx_warn_alloc+0x10/0x10
[  521.892245][T32289]  ? __get_vm_area_node+0x28f/0x300
[  521.892263][T32289]  ? xskq_create+0xbf/0x170
[  521.892278][T32289]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  521.892318][T32289]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  521.892337][T32289]  ? xskq_create+0x56/0x170
[  521.892351][T32289]  ? __kasan_kmalloc+0x93/0xb0
[  521.892370][T32289]  vmalloc_user_noprof+0xad/0xf0
[  521.892388][T32289]  ? xskq_create+0xbf/0x170
[  521.892402][T32289]  xskq_create+0xbf/0x170
[  521.892416][T32289]  xsk_init_queue+0xb0/0x110
[  521.892430][T32289]  xsk_setsockopt+0x57b/0x8d0
[  521.892450][T32289]  ? __pfx_xsk_setsockopt+0x10/0x10
[  521.892469][T32289]  ? __pfx_aa_sk_perm+0x10/0x10
[  521.892490][T32289]  ? __fget_files+0x2a/0x420
[  521.892500][T32289]  ? aa_sock_opt_perm+0xff/0x1b0
[  521.892515][T32289]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  521.892529][T32289]  ? __pfx_xsk_setsockopt+0x10/0x10
[  521.892548][T32289]  do_sock_setsockopt+0x17c/0x1b0
[  521.892568][T32289]  __x64_sys_setsockopt+0x13f/0x1b0
[  521.892586][T32289]  do_syscall_64+0xfa/0x3b0
[  521.892599][T32289]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.892612][T32289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.892624][T32289]  ? exc_page_fault+0x9f/0xf0
[  521.892639][T32289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.892650][T32289] RIP: 0033:0x7f3f4b58eba9
[  521.892663][T32289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.892673][T32289] RSP: 002b:00007f3f4c353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  521.892685][T32289] RAX: ffffffffffffffda RBX: 00007f3f4b7d6090 RCX: 00007f3f4b58eba9
[  521.892693][T32289] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  521.892701][T32289] RBP: 00007f3f4b611e19 R08: 0000000000000004 R09: 0000000000000000
[  521.892708][T32289] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  521.892715][T32289] R13: 00007f3f4b7d6128 R14: 00007f3f4b7d6090 R15: 00007ffeb15400f8
[  521.892735][T32289]  </TASK>
[  521.892741][T32289] Mem-Info:
[  522.010746][T32289] active_anon:29361 inactive_anon:0 isolated_anon:0
[  522.010746][T32289]  active_file:1629 inactive_file:38421 isolated_file:0
[  522.010746][T32289]  unevictable:1768 dirty:31 writeback:0
[  522.010746][T32289]  slab_reclaimable:12193 slab_unreclaimable:164309
[  522.010746][T32289]  mapped:20040 shmem:4016 pagetables:1093
[  522.010746][T32289]  sec_pagetables:0 bounce:0
[  522.010746][T32289]  kernel_misc_reclaimable:0
[  522.010746][T32289]  free:138076 free_pcp:27960 free_cma:0
[  522.030072][T32289] Node 0 active_anon:10768kB inactive_anon:0kB active_file:4548kB inactive_file:25136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40284kB dirty:84kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7356kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  522.043197][T32289] Node 1 active_anon:108988kB inactive_anon:0kB active_file:1968kB inactive_file:128548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42256kB dirty:40kB writeback:0kB shmem:13572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8424kB pagetables:1860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  522.056728][T32289] Node 0 DMA free:7168kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  522.068650][T32289] lowmem_reserve[]: 0 811 811 811 811
[  522.070963][T32289] Node 0 DMA32 free:79720kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10768kB inactive_anon:0kB active_file:4548kB inactive_file:25136kB unevictable:3536kB writepending:84kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:49932kB local_pcp:36884kB free_cma:0kB
[  522.084567][T32289] lowmem_reserve[]: 0 0 0 0 0
[  522.087140][T32289] Node 1 DMA32 free:381204kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:11868kB local_pcp:304kB free_cma:0kB
[  522.100014][T32289] lowmem_reserve[]: 0 0 854 854 854
[  522.102604][T32289] Node 1 Normal free:80200kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111844kB inactive_anon:0kB active_file:1968kB inactive_file:128548kB unevictable:3536kB writepending:40kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49052kB local_pcp:21644kB free_cma:0kB
[  522.116360][T32289] lowmem_reserve[]: 0 0 0 0 0
[  522.118517][T32289] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 1*4096kB (M) = 7168kB
[  522.123548][T32289] Node 0 DMA32: 107*4kB (M) 171*8kB (UME) 345*16kB (UME) 39*32kB (UME) 306*64kB (UME) 127*128kB (UME) 48*256kB (UME) 7*512kB (UM) 7*1024kB (UME) 6*2048kB (U) 0*4096kB = 79732kB
[  522.130804][T32289] Node 1 DMA32: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 1*2048kB (M) 92*4096kB (M) = 381204kB
[  522.138487][T32289] Node 1 Normal: 1707*4kB (UE) 662*8kB (UME) 337*16kB (UE) 67*32kB (UME) 95*64kB (U) 147*128kB (UM) 67*256kB (UME) 18*512kB (UME) 7*1024kB (UM) 1*2048kB (M) 0*4096kB = 80140kB
[  522.145922][T32289] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  522.149634][T32289] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  522.153222][T32289] 44661 total pagecache pages
[  522.155157][T32289] 0 pages in swap cache
[  522.157466][T32289] Free swap  = 124996kB
[  522.159241][T32289] Total swap = 124996kB
[  522.160917][T32289] 786301 pages RAM
[  522.162519][T32289] 0 pages HighMem/MovableOnly
[  522.164227][T32289] 241346 pages reserved
[  522.165997][T32289] 0 pages cma reserved
[  522.239626][T32306] IPVS: stopping backup sync thread 32308 ...
[  522.239626][T32308] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  522.453868][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7166'.
[  522.482187][T32330] IPVS: stopping backup sync thread 32331 ...
[  522.528437][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'.
[  522.532368][T32337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7170'.
[  522.545171][T32337] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.195141][T32384] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7186'.
[  523.287008][T32390] netlink: 'syz.2.7189': attribute type 1 has an invalid length.
[  523.306953][T32390] gretap6: entered allmulticast mode
[  523.310355][T32390] bond57: (slave gretap6): making interface the new active one
[  523.313196][T32390] bond57: (slave gretap6): Enslaving as an active interface with an up link
[  523.349661][T32393] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  523.489857][T32408] bond57: (slave gretap6): Releasing active interface
[  523.632424][T32419] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  523.669658][T32415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7195'.
[  523.712898][T32422] netlink: 'syz.0.7196': attribute type 3 has an invalid length.
[  524.018110][T32442] netlink: 'syz.1.7200': attribute type 62 has an invalid length.
[  524.044134][T32442] vlan0: entered promiscuous mode
[  524.051947][T32442] !: entered promiscuous mode
[  524.640418][T32471] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  524.643740][T32470] IPVS: stopping backup sync thread 32471 ...
[  525.073340][T32502] netlink: 'syz.0.7217': attribute type 1 has an invalid length.
[  525.144643][T32506] wg1 speed is unknown, defaulting to 1000
[  525.151046][T32506] lo speed is unknown, defaulting to 1000
[  525.354872][T32521] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  525.354874][T32520] IPVS: stopping backup sync thread 32521 ...
[  525.650226][T32548] netlink: 'syz.0.7228': attribute type 1 has an invalid length.
[  525.693962][T32554] smc: adding net device rose0 with user defined pnetid SYZ1
[  525.754712][T32552] smc: removing net device rose0 with user defined pnetid SYZ1
[  525.981378][   T33] audit: type=1800 audit(1758475063.329:7): pid=32583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7237" name=CB dev="tmpfs" ino=12342 res=0 errno=0
[  525.990121][T32583] IPVS: set_ctl: invalid protocol: 0 68.237.54.189:44567
[  526.027254][T32588] __nla_validate_parse: 12 callbacks suppressed
[  526.027268][T32588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7239'.
[  526.039037][T32588] netlink: 'syz.0.7239': attribute type 8 has an invalid length.
[  526.123708][T32592] syzkaller1: entered promiscuous mode
[  526.126171][T32592] syzkaller1: entered allmulticast mode
[  526.254037][T32599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7242'.
[  526.285154][T32606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7244'.
[  526.442341][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7248'.
[  526.544029][T32626] bond47: entered promiscuous mode
[  526.549088][T32626] 8021q: adding VLAN 0 to HW filter on device bond47
[  526.611293][T32633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7254'.
[  526.627142][T32636] netlink: 'syz.0.7253': attribute type 1 has an invalid length.
[  526.662039][T32641] wg1 speed is unknown, defaulting to 1000
[  526.663884][T32643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7255'.
[  526.668696][T32641] lo speed is unknown, defaulting to 1000
[  526.675697][T32643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7255'.
[  526.809516][T32653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7258'.
[  526.891979][T32662] wg1 speed is unknown, defaulting to 1000
[  526.901817][T32662] lo speed is unknown, defaulting to 1000
[  526.979159][T32670] wg1 speed is unknown, defaulting to 1000
[  526.983056][T32670] lo speed is unknown, defaulting to 1000
[  527.220197][T32682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7265'.
[  527.364176][T32684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7266'.
[  527.672136][T32705] 8021q: adding VLAN 0 to HW filter on device bond48
[  527.748423][T32709] wg1 speed is unknown, defaulting to 1000
[  527.753372][T32709] lo speed is unknown, defaulting to 1000
[  527.799736][T32710] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  527.905345][T32713] 8021q: adding VLAN 0 to HW filter on device bond49
[  527.924432][T32713] macvlan8: entered promiscuous mode
[  527.938171][T32713] macvlan8: entered allmulticast mode
[  527.940557][T32713] bond49: entered promiscuous mode
[  527.942804][T32713] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  527.958113][T32713] bond49: left promiscuous mode
[  528.075182][T32735] netlink: 'syz.2.7278': attribute type 13 has an invalid length.
[  528.090144][T32735] veth36: entered allmulticast mode
[  528.175036][T32746] netlink: 'syz.2.7280': attribute type 1 has an invalid length.
[  528.373811][T32759] wg1 speed is unknown, defaulting to 1000
[  528.378043][T32759] lo speed is unknown, defaulting to 1000
[  528.450201][T32765] sctp: [Deprecated]: syz.0.7285 (pid 32765) Use of int in maxseg socket option.
[  528.450201][T32765] Use struct sctp_assoc_value instead
[  528.731030][  T323] wg1 speed is unknown, defaulting to 1000
[  528.742148][  T323] lo speed is unknown, defaulting to 1000
[  529.344053][  T379] wg1 speed is unknown, defaulting to 1000
[  529.354695][  T379] lo speed is unknown, defaulting to 1000
[  529.392792][  T385] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  529.572363][  T396] wg1 speed is unknown, defaulting to 1000
[  529.578339][  T396] lo speed is unknown, defaulting to 1000
[  529.639288][  T407] wg1 speed is unknown, defaulting to 1000
[  529.642721][  T407] lo speed is unknown, defaulting to 1000
[  530.069474][  T437] openvswitch: netlink: IP tunnel dst address not specified
[  530.089379][  T437] wg1 speed is unknown, defaulting to 1000
[  530.093097][  T437] lo speed is unknown, defaulting to 1000
[  530.364954][  T448] netlink: 'syz.1.7319': attribute type 10 has an invalid length.
[  530.423334][  T454] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  530.620122][  T476] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  530.767483][  T489] Unsupported ieee802154 address type: 0
[  530.771557][  T482] wg1 speed is unknown, defaulting to 1000
[  530.776702][  T482] lo speed is unknown, defaulting to 1000
[  530.899208][  T499] netlink: 'syz.0.7334': attribute type 1 has an invalid length.
[  531.172874][  T519] __nla_validate_parse: 13 callbacks suppressed
[  531.172888][  T519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7341'.
[  531.283549][  T528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.288726][  T528] syzkaller0: entered promiscuous mode
[  531.290612][  T528] syzkaller0: entered allmulticast mode
[  531.304441][  T528] tipc: Resetting bearer <eth:syzkaller0>
[  531.310844][  T527] tipc: Resetting bearer <eth:syzkaller0>
[  531.323613][  T527] tipc: Disabling bearer <eth:syzkaller0>
[  531.469186][  T532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7344'.
[  531.473180][  T533] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7344'.
[  531.494670][  T532] wg1 speed is unknown, defaulting to 1000
[  531.501968][  T532] lo speed is unknown, defaulting to 1000
[  531.779162][  T548] netlink: 'syz.2.7349': attribute type 1 has an invalid length.
[  531.859700][  T561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7354'.
[  531.868510][  T566] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  531.872631][  T565] IPVS: stopping backup sync thread 566 ...
[  532.034548][  T581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7360'.
[  532.053467][  T587] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  532.054783][  T585] IPVS: stopping backup sync thread 587 ...
[  532.062180][  T581] wg1 speed is unknown, defaulting to 1000
[  532.068757][  T581] lo speed is unknown, defaulting to 1000
[  532.148030][  T597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7362'.
[  532.179310][  T601] netlink: 'syz.0.7364': attribute type 10 has an invalid length.
[  532.182539][  T600] netlink: 'syz.0.7364': attribute type 10 has an invalid length.
[  532.212711][  T604] netlink: 'syz.2.7360': attribute type 6 has an invalid length.
[  532.224160][  T607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'.
[  532.229923][  T606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7365'.
[  532.233685][  T606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7365'.
[  532.237604][  T607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7365'.
[  532.485203][  T627] netlink: 'syz.0.7370': attribute type 1 has an invalid length.
[  532.663862][  T636] wg1 speed is unknown, defaulting to 1000
[  532.670070][  T636] lo speed is unknown, defaulting to 1000
[  532.972287][  T645] : left promiscuous mode
[  533.639516][  T647] netlink: 'syz.0.7374': attribute type 1 has an invalid length.
[  533.642232][  T647] netlink: 'syz.0.7374': attribute type 2 has an invalid length.
[  533.653843][  T647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  533.657559][  T647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  536.018916][  T683] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  536.252477][  T708] __nla_validate_parse: 93 callbacks suppressed
[  536.252492][  T708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7390'.
[  536.260974][  T708] netlink: 'syz.1.7390': attribute type 1 has an invalid length.
[  536.442012][  T713] wg1 speed is unknown, defaulting to 1000
[  536.451512][  T713] lo speed is unknown, defaulting to 1000
[  536.591820][  T723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7394'.
[  536.622952][  T723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7394'.
[  536.739417][  T727] netlink: 'syz.1.7396': attribute type 1 has an invalid length.
[  536.782642][  T727] 8021q: adding VLAN 0 to HW filter on device bond53
[  536.829953][  T727] bond53: (slave veth27): Enslaving as an active interface with a down link
[  536.845081][  T727] netlink: 'syz.1.7396': attribute type 1 has an invalid length.
[  536.880261][  T734] bond53: (slave veth29): Enslaving as an active interface with a down link
[  536.912386][  T731] netlink: 'syz.2.7397': attribute type 1 has an invalid length.
[  536.914871][  T731] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.7397'.
[  537.000974][  T747] netlink: 'syz.1.7400': attribute type 1 has an invalid length.
[  537.004462][  T747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7400'.
[  537.077111][  T754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7401'.
[  537.183598][  T759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7403'.
[  537.409717][  T771] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  537.414266][  T770] IPVS: stopping backup sync thread 771 ...
[  537.504172][  T779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7407'.
[  537.514291][  T776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7407'.
[  537.559140][  T781] openvswitch: netlink: Invalid VLAN frame
[  537.649982][  T789] wg1 speed is unknown, defaulting to 1000
[  537.655449][  T789] lo speed is unknown, defaulting to 1000
[  537.767337][  T797] wireguard3: entered promiscuous mode
[  537.769707][  T797] wireguard3: entered allmulticast mode
[  537.971022][  T807] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7414'.
[  537.978237][  T807] netlink: 'syz.1.7414': attribute type 39 has an invalid length.
[  538.832222][  T844] wg1 speed is unknown, defaulting to 1000
[  538.841773][  T844] lo speed is unknown, defaulting to 1000
[  538.882839][  T848] nbd: must specify a size in bytes for the device
[  539.340176][  T878] wg1 speed is unknown, defaulting to 1000
[  539.346004][  T878] lo speed is unknown, defaulting to 1000
[  539.359415][  T880] netlink: 'syz.1.7433': attribute type 1 has an invalid length.
[  539.403459][  T880] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  539.411732][  T880] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  539.497571][  T880] macvlan0: entered promiscuous mode
[  539.499446][  T880] macvlan0: entered allmulticast mode
[  539.502338][  T880] bond54: entered promiscuous mode
[  539.505118][  T880] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  539.508750][   T11] block nbd0: Possible stuck request ffff88801feb0000: control (read@0,1024B). Runtime 450 seconds
[  539.513377][   T11] block nbd0: Possible stuck request ffff88801feb0200: control (read@1024,1024B). Runtime 450 seconds
[  539.518533][   T11] block nbd0: Possible stuck request ffff88801feb0400: control (read@2048,1024B). Runtime 450 seconds
[  539.522964][   T11] block nbd0: Possible stuck request ffff88801feb0600: control (read@3072,1024B). Runtime 450 seconds
[  539.528954][  T880] bond54: left promiscuous mode
[  539.949478][  T892] wg1 speed is unknown, defaulting to 1000
[  539.954922][  T892] lo speed is unknown, defaulting to 1000
[  540.844840][  T935] IPVS: stopping backup sync thread 936 ...
[  540.846961][  T936] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  540.903111][  T945] netlink: 'syz.2.7447': attribute type 1 has an invalid length.
[  540.926447][  T945] 8021q: adding VLAN 0 to HW filter on device bond59
[  540.945907][  T945] bond59: (slave veth37): Enslaving as an active interface with a down link
[  540.961294][  T945] macvlan0: entered promiscuous mode
[  540.963324][  T945] macvlan0: entered allmulticast mode
[  540.965952][  T945] bond59: entered promiscuous mode
[  540.968414][  T945] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  540.971090][  T945] bond59: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  540.980285][  T945] bond59: left promiscuous mode
[  541.026302][  T951] wg1 speed is unknown, defaulting to 1000
[  541.041271][  T951] lo speed is unknown, defaulting to 1000
[  541.619298][  T990] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  541.643005][  T981] __nla_validate_parse: 7 callbacks suppressed
[  541.643020][  T981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7455'.
[  541.788469][ T1001] wg1 speed is unknown, defaulting to 1000
[  541.793353][ T1001] lo speed is unknown, defaulting to 1000
[  541.838453][ T1005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7458'.
[  541.894577][ T1006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7458'.
[  541.983118][ T1016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7460'.
[  542.019239][ T1023] bond50: left allmulticast mode
[  542.021122][ T1023] bridge23: port 1(bond50) entered disabled state
[  542.037364][ T1023] bond52: (slave geneve9): Releasing active interface
[  542.044882][ T1023] bond53: (slave veth27): Releasing active interface
[  542.048033][ T1023] bond53: (slave veth27): the permanent HWaddr of slave - 5e:21:1b:e3:2e:8a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  542.060527][ T1023] bond53: (slave veth29): Releasing active interface
[  542.066230][ T5897] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.069111][ T5897] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.071970][ T5897] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.079779][ T5897] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.141356][ T1023] netlink: 'syz.1.7462': attribute type 10 has an invalid length.
[  542.151755][ T1023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  542.160154][ T1023] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  542.234699][ T1040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7466'.
[  542.267380][ T1042] nbd: must specify a device to reconfigure
[  542.270134][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7467'.
[  542.321531][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7467'.
[  542.324770][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7467'.
[  542.328334][ T1042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7467'.
[  542.331396][ T1042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7467'.
[  542.393407][ T1047] netlink: 'syz.2.7468': attribute type 2 has an invalid length.
[  542.464132][ T1055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  542.468850][ T1055] syzkaller0: entered promiscuous mode
[  542.471939][ T1055] syzkaller0: entered allmulticast mode
[  542.491439][ T1058] tipc: Resetting bearer <eth:syzkaller0>
[  542.510245][ T1058] tipc: Disabling bearer <eth:syzkaller0>
[  542.532992][ T1062] sctp: [Deprecated]: syz.0.7471 (pid 1062) Use of int in maxseg socket option.
[  542.532992][ T1062] Use struct sctp_assoc_value instead
[  542.723020][ T1091] macvlan8: entered allmulticast mode
[  542.726719][ T1091] bond0: entered allmulticast mode
[  542.729270][ T1091] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  542.738348][ T1097] macvlan9: entered allmulticast mode
[  542.741159][ T1097] 8021q: adding VLAN 0 to HW filter on device macvlan9
[  542.803151][ T1102] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  542.887249][ T1111] IPVS: stopping backup sync thread 1115 ...
[  542.887527][ T1115] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  542.932572][ T1119] IPVS: Unknown mcast interface: dvmrp1
[  543.523173][ T1157] netlink: 'syz.2.7494': attribute type 1 has an invalid length.
[  543.638326][ T1162] wg1 speed is unknown, defaulting to 1000
[  543.643309][ T1162] lo speed is unknown, defaulting to 1000
[  544.132450][ T1194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.266866][ T1198] openvswitch: netlink: Duplicate or invalid key (type 0).
[  544.269703][ T1198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.678949][ T1215] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  544.717662][ T1214] IPVS: stopping backup sync thread 1215 ...
[  544.819734][ T1228] 8021q: adding VLAN 0 to HW filter on device team0
[  544.828874][ T1228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  545.039935][ T1251] wg1 speed is unknown, defaulting to 1000
[  545.044793][ T1251] lo speed is unknown, defaulting to 1000
[  545.368051][ T1270] bond55: entered promiscuous mode
[  545.592516][ T1288] netlink: 'syz.1.7521': attribute type 10 has an invalid length.
[  545.604027][ T1288] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  545.843207][ T1296] 
[  545.844280][ T1296] ======================================================
[  545.847061][ T1296] WARNING: possible circular locking dependency detected
[  545.849879][ T1296] syzkaller #0 Not tainted
[  545.852026][ T1296] ------------------------------------------------------
[  545.855683][ T1296] syz.2.7524/1296 is trying to acquire lock:
[  545.858237][ T1296] ffffffff8f68f658 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  545.862015][ T1296] 
[  545.862015][ T1296] but task is already holding lock:
[  545.865119][ T1296] ffff888112b00f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  545.868890][ T1296] 
[  545.868890][ T1296] which lock already depends on the new lock.
[  545.868890][ T1296] 
[  545.873066][ T1296] 
[  545.873066][ T1296] the existing dependency chain (in reverse order) is:
[  545.876747][ T1296] 
[  545.876747][ T1296] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  545.879880][ T1296]        lock_acquire+0x120/0x360
[  545.881667][ T1296]        _raw_spin_lock_bh+0x36/0x50
[  545.883590][ T1296]        nr_rt_ioctl+0x193/0xd50
[  545.885319][ T1296]        sock_do_ioctl+0xdc/0x300
[  545.886915][ T1296]        sock_ioctl+0x576/0x790
[  545.888404][ T1296]        __se_sys_ioctl+0xfc/0x170
[  545.890136][ T1296]        do_syscall_64+0xfa/0x3b0
[  545.891712][ T1296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.893714][ T1296] 
[  545.893714][ T1296] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  545.896243][ T1296]        lock_acquire+0x120/0x360
[  545.897927][ T1296]        _raw_spin_lock_bh+0x36/0x50
[  545.899751][ T1296]        nr_rt_device_down+0xa9/0x720
[  545.901496][ T1296]        nr_device_event+0x137/0x150
[  545.903214][ T1296]        notifier_call_chain+0x1b6/0x3e0
[  545.905048][ T1296]        netif_close_many+0x29c/0x410
[  545.906803][ T1296]        netif_close+0x158/0x210
[  545.908400][ T1296]        dev_close+0x10a/0x220
[  545.910201][ T1296]        bpq_device_event+0x377/0x6a0
[  545.912273][ T1296]        notifier_call_chain+0x1b6/0x3e0
[  545.914385][ T1296]        __dev_notify_flags+0x18d/0x2e0
[  545.916354][ T1296]        netif_change_flags+0xe8/0x1a0
[  545.918269][ T1296]        dev_change_flags+0x130/0x260
[  545.920075][ T1296]        dev_ioctl+0x7b4/0x1150
[  545.921696][ T1296]        sock_do_ioctl+0x22c/0x300
[  545.923545][ T1296]        sock_ioctl+0x576/0x790
[  545.925302][ T1296]        __se_sys_ioctl+0xfc/0x170
[  545.927091][ T1296]        do_syscall_64+0xfa/0x3b0
[  545.928918][ T1296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.931266][ T1296] 
[  545.931266][ T1296] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  545.934173][ T1296]        validate_chain+0xb9b/0x2140
[  545.936117][ T1296]        __lock_acquire+0xab9/0xd20
[  545.938246][ T1296]        lock_acquire+0x120/0x360
[  545.940035][ T1296]        _raw_spin_lock_bh+0x36/0x50
[  545.941834][ T1296]        nr_rt_ioctl+0x390/0xd50
[  545.943788][ T1296]        sock_do_ioctl+0xdc/0x300
[  545.945533][ T1296]        sock_ioctl+0x576/0x790
[  545.947274][ T1296]        __se_sys_ioctl+0xfc/0x170
[  545.949046][ T1296]        do_syscall_64+0xfa/0x3b0
[  545.950646][ T1296]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.952641][ T1296] 
[  545.952641][ T1296] other info that might help us debug this:
[  545.952641][ T1296] 
[  545.955925][ T1296] Chain exists of:
[  545.955925][ T1296]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  545.955925][ T1296] 
[  545.960957][ T1296]  Possible unsafe locking scenario:
[  545.960957][ T1296] 
[  545.964071][ T1296]        CPU0                    CPU1
[  545.966217][ T1296]        ----                    ----
[  545.968494][ T1296]   lock(&nr_node->node_lock);
[  545.970539][ T1296]                                lock(nr_node_list_lock);
[  545.973438][ T1296]                                lock(&nr_node->node_lock);
[  545.976529][ T1296]   lock(nr_neigh_list_lock);
[  545.978553][ T1296] 
[  545.978553][ T1296]  *** DEADLOCK ***
[  545.978553][ T1296] 
[  545.981962][ T1296] 2 locks held by syz.2.7524/1296:
[  545.984145][ T1296]  #0: ffffffff8f68f6b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  545.987867][ T1296]  #1: ffff888112b00f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  545.991622][ T1296] 
[  545.991622][ T1296] stack backtrace:
[  545.994141][ T1296] CPU: 0 UID: 0 PID: 1296 Comm: syz.2.7524 Not tainted syzkaller #0 PREEMPT(full) 
[  545.994159][ T1296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.994168][ T1296] Call Trace:
[  545.994177][ T1296]  <TASK>
[  545.994184][ T1296]  dump_stack_lvl+0x189/0x250
[  545.994206][ T1296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.994221][ T1296]  ? __pfx__printk+0x10/0x10
[  545.994238][ T1296]  ? stack_trace_save+0x9c/0xe0
[  545.994258][ T1296]  print_circular_bug+0x2ee/0x310
[  545.994274][ T1296]  check_noncircular+0x134/0x160
[  545.994291][ T1296]  validate_chain+0xb9b/0x2140
[  545.994305][ T1296]  ? stack_trace_save+0x9c/0xe0
[  545.994318][ T1296]  ? __pfx_stack_trace_save+0x10/0x10
[  545.994333][ T1296]  ? stack_depot_save_flags+0x40/0x860
[  545.994356][ T1296]  __lock_acquire+0xab9/0xd20
[  545.994376][ T1296]  ? nr_rt_ioctl+0x390/0xd50
[  545.994394][ T1296]  lock_acquire+0x120/0x360
[  545.994419][ T1296]  ? nr_rt_ioctl+0x390/0xd50
[  545.994438][ T1296]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  545.994454][ T1296]  ? nr_rt_ioctl+0x390/0xd50
[  545.994472][ T1296]  _raw_spin_lock_bh+0x36/0x50
[  545.994493][ T1296]  ? nr_rt_ioctl+0x390/0xd50
[  545.994511][ T1296]  nr_rt_ioctl+0x390/0xd50
[  545.994532][ T1296]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  545.994553][ T1296]  ? apparmor_capable+0x137/0x1b0
[  545.994570][ T1296]  ? capable+0x89/0xe0
[  545.994583][ T1296]  ? nr_ioctl+0x1b1/0x3b0
[  545.994628][ T1296]  sock_do_ioctl+0xdc/0x300
[  545.994649][ T1296]  ? __pfx_sock_do_ioctl+0x10/0x10
[  545.994666][ T1296]  ? __lock_acquire+0xab9/0xd20
[  545.994688][ T1296]  sock_ioctl+0x576/0x790
[  545.994706][ T1296]  ? __pfx_sock_ioctl+0x10/0x10
[  545.994723][ T1296]  ? __fget_files+0x2a/0x420
[  545.994734][ T1296]  ? __fget_files+0x3a0/0x420
[  545.994744][ T1296]  ? __fget_files+0x2a/0x420
[  545.994755][ T1296]  ? bpf_lsm_file_ioctl+0x9/0x20
[  545.994771][ T1296]  ? __pfx_sock_ioctl+0x10/0x10
[  545.994788][ T1296]  __se_sys_ioctl+0xfc/0x170
[  545.994804][ T1296]  do_syscall_64+0xfa/0x3b0
[  545.994818][ T1296]  ? lockdep_hardirqs_on+0x9c/0x150
[  545.994831][ T1296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.994843][ T1296]  ? exc_page_fault+0x9f/0xf0
[  545.994856][ T1296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.994869][ T1296] RIP: 0033:0x7f3f4b58eba9
[  545.994882][ T1296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  545.994894][ T1296] RSP: 002b:00007f3f4c374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  545.994914][ T1296] RAX: ffffffffffffffda RBX: 00007f3f4b7d5fa0 RCX: 00007f3f4b58eba9
[  545.994923][ T1296] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008
[  545.994932][ T1296] RBP: 00007f3f4b611e19 R08: 0000000000000000 R09: 0000000000000000
[  545.994940][ T1296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.994948][ T1296] R13: 00007f3f4b7d6038 R14: 00007f3f4b7d5fa0 R15: 00007ffeb15400f8
[  545.994963][ T1296]  </TASK>

VM DIAGNOSIS:
17:18:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001327 RDI=0000000000001328 RBP=00000000000003f8 RSP=ffffc900039cf150
R8 =ffff888108ad8237 R9 =1ffff1102115b046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008cb R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f4c3746c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c291fcb CR3=000000003567a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3f4b7a7498 00007f3f4b7a7470 XMM03=00007f3f4b7a74a8 00007f3f4b7a74a0
XMM04=00007f3f4c30d100 00007f3f4b7a7460 XMM05=00007f3f4b7a7478 00007f3f4b7a74c0
XMM06=00007f3f4b7a74b8 00007f3f4b7a74b0 XMM07=00007f3f4b7a74a8 00007f3f4b7a74a0
XMM08=0000000000000000 00007f3f4b612ee7 XMM09=0000000000000000 00007f3f4b612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=24b289c25b518600 RBX=ffffffff819693f8 RCX=24b289c25b518600 RDX=0000000000000001
RSI=ffffffff8be33be0 RDI=ffffffff819693f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562ee696d000 CR3=0000000022fd0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=de10fe05ba6c1c50 a9aa746d300a13f5
XMM02=a455c93927630222 b034dd6ebc462969 XMM03=d3fc41fd4b8cd97d 5f4f8ed5bd380dbe
XMM04=279365483723d276 84508760ff7e76ca XMM05=aef3788a7dfe7fb1 7bc970375ce75e21
XMM06=a4bc563ec2e2fa1e 14c639e74e9d439b XMM07=74cf0ca54609f4eb 12aa19d19cf6ffee
XMM08=2f0bc86fbf5cbcc5 688062d7c2270427 XMM09=0000000000000000 00007f1cf3a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
