last executing test programs:

2.759721184s ago: executing program 0 (id=3609):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x20, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x32}, 0x28)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xb, '\x00', r5, r4, 0x3, 0x1, 0x2}, 0x50)
sendmsg$kcm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x20, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x32}, 0x28) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xb, '\x00', r5, r4, 0x3, 0x1, 0x2}, 0x50) (async)
sendmsg$kcm(r3, 0x0, 0x0) (async)

1.480409931s ago: executing program 0 (id=3612):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x2c020400)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0)
r3 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote, @default, 0x0, [@default, @null, @bcast, @default, @default, @netrom]}, &(0x7f0000000140)=0x40, 0x800)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r4=>0x0)
bind(r3, &(0x7f00000002c0)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x34, 0x4, "9f429702da3ba9e3ea9ec245ad2e1e288e62e1954cd4033c5725cce4a51c987bd65677b381b09ec3a54afec6caef6fe1c53ad322076ad6060eb3276a2ca49a", 0x1a}, 0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000404}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffcc9, 0xf}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.406828345s ago: executing program 0 (id=3614):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
r1 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x8, 0x2, 0xc, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x721, 0x8, 0xfffffffe, 0x1}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x10000000, <r7=>0x0}, 0x8)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000640)={'wg0\x00', <r10=>0x0})
sendmmsg$inet6(r9, &(0x7f0000002940)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88b52dfc750a3f5567cc3c3c6edb5aae7239c2b34961ce9038c44556772929a92e59683a0832e1326d262f5bd8bfaa163079913fde64522721bffba4654b2673ef7d60a3d32526c5de8dd71960627e1696c8ff8412672c01eb97f6c62156ab609a27a53f19a1581398c755eea2b423f89167c6aa4b4aee55", 0x78}, {&(0x7f0000000300)}, {&(0x7f00000004c0)="4bf12cc52c6584c4e84a7892332e635a37aea5f738f66ac72eb86adcc8de7a4e686d969d24162248c26be4d8ece0245d07a3142e296ae787e9cef0b2c0547969ed490609793217bd8e3b315e7942be96261523323b8e73040040f0901409e560337ccf6685d55d88d16271790256e8ef382475cca7ca22", 0x77}, {&(0x7f0000000540)="5051cc55e46caa7d688851e729e246c8c6dc37fb4c8cc41808844870c901deaa4777e05091b93680f6c520b051455327f58799f3a019fd346103afd2c95f8085dc25477843be0be62a919ba15912ff58bb3ac86e113f3106b6b3a42077cd86a2f1e438c24d482fe37440f20b8a2010716b123fed15a9e2128242629acd60efeeb586dfe19c41bb2763d16fbaa08b624bbacd077c0308f2581ae5213159279092e47ae10a5d43b81bb742a4a057d4b65cdd4bc5d54d2dfb565dcd82c79f7556", 0xbf}], 0x4, &(0x7f00000006c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1ff}}, @dstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}, @pad1]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xf9}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x16, 0x2, 0x1, 0x6, 0x0, [@loopback]}}}, @rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x2, 0x0, [@loopback, @remote]}}}], 0xc0}}, {{&(0x7f0000000400)={0xa, 0x4e24, 0xc1b, @private2, 0x113}, 0x1c, &(0x7f0000000600), 0x0, &(0x7f0000001e40)=[@hopopts_2292={{0xa8, 0x29, 0x36, {0x73, 0x11, '\x00', [@generic={0x40, 0x4b, "2c3ade41d1c1c211e572b89e75cbba8c3359bf7b4ada9166b01bbcf3352e07f0f4a0234c9ae613e23a163306e6bd497bdfdf6beade4ba8b2d0110056fce06722d62450fa38107aab4c2c51"}, @ra={0x5, 0x2, 0x86}, @jumbo={0xc2, 0x4, 0x3ba0}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x0, [0xfc]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0xf5, 0xf9ba, [0x701, 0x100, 0xa3]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x6}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r10}}}], 0xe8}}], 0x2, 0x8090)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1ce, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r12, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1c, 0x8, 0x6, 0x6, 0x7, 0x80, 0xe, 0x5b, 0x2, 0x2, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x2, 0x200]}})
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0xfffffffd}, 0xc)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r15, &(0x7f0000000240), 0x0}, 0x20)
r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='memory.swap.current\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0xc, 0x6, 0x6, 0x30}, @jmp={0x5, 0x1, 0xd, 0x9, 0x9, 0x50, 0x8}, @alu={0x7, 0x0, 0x6, 0x3, 0x1, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0xf2, &(0x7f00000004c0)=""/242, 0x41000, 0x68, '\x00', r5, @fallback=0x23, r6, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xb, 0x2, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x2, &(0x7f0000000780)=[r9, r11, r12, r14, 0xffffffffffffffff, r15, r16], &(0x7f00000007c0)=[{0x1, 0x3, 0xb, 0x5}, {0x2, 0x5, 0x10, 0xc7f016738a638fd7}], 0x10, 0xe638c515}, 0x94)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="050000000000000000fb03eb37c152e8"], 0x14}}, 0x2000c094)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)

1.40493726s ago: executing program 2 (id=3616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae1e0246a1d20bbebb8fe0622c28aab44621eeef42eaf8341706a764855009edc485f98900b5420db424c0d5aab2ac7c6ec291fe879390f5a1ab12aea2e1682beeedc2e7ac0d1195a526efe1fcc4604b8c57919540ba0b767c3c7e587b"], 0x20}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000280)=0x5, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r7, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
sendto(r7, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r9, 0x25, 0x1c, @void}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r10=>0xffffffffffffffff})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r13, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r11, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

1.227330839s ago: executing program 2 (id=3619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
epoll_create1(0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000008400088080000080580009801c000080060001000200000008000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a0101020500030020000000240001000000000000000000000000000000000000000000000000000000000000000000080005000100000014000200776731"], 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)

1.097799961s ago: executing program 2 (id=3620):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x7fff, 0x4)
sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESOCT], 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket(0x22, 0x2, 0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000001200050926bd7000fedb01090b004e224e26fcffffff2309981ae7fd7c95390d00000104000004009a8528f219fab06099000d000003000100010000000000", @ANYRES32=0x0, @ANYBLOB="000001000520000006000000040000001400010005b014000a209cf06cc29523be37f351"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x158, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7958e7b1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xdf, 0xc, "19b2102a6c01c36b7eba868746335b33f86145be3a584abe22400e1e334901217549c1c9233619b9a5449067d1f42588b192f4e8ab9ac4511ba543d91497c7d61f1cbde3bde08657b1593d7d5135cbba35bdce183e46610634e7e21a4139fd16f3745a22b094c20d8ecf616c9c043dd0df77f988bd5629e674744f772342b4dc1b5f2d543c03bcf2d951d335c9a3ed3d72e487fe5a38f56f5b4b2284724ffad829416a2766732c790ecfc344d6eb483e2ebf8116d2673454a678a4ba6b6c1648b9a8be2a72e84a93ebac51b00041e64b57711478b302455075f7e8"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1a0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_NAME={0x9, 0x1, 'snmp\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x2f}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x84}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0xae}]}}, @NFT_MSG_NEWCHAIN={0x11c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x63, 0xc, "c075e49c4b0e72d90113477655aa1ebb77856fcef8e4ea36db3c6d7d8934c732eb7040952ac646231e576b1a8628067416b5ea62df33dee1a15382714f5da43dd36ec30d1145725b8f8063a8f4fa018700547497a55d361076e12924a82776"}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x710326b4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51f89e08}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x889ee47}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20048840)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="a0", 0x1}, {&(0x7f0000000580)='|', 0x1}, {&(0x7f0000000540)="27b7", 0x2}, {&(0x7f0000001f80)="4135dae4b494a8a5c0d8a49cfa8adaa7fe6ee3ced175b56ec890979e8f0609e9bb2a6da629565f307cd798b282e0eb6c6243612354e9a6708eb326898bf082c980000039059093c8fadc1c4b75e96f7c712a3b7c82dbe905e1cd0ea8e212ab4f5397363d7682095fe3f91761b48f47f3e6e7967a4cc20d755ed314434b2b313366", 0x81}, {&(0x7f0000002040)='b', 0x1}, {&(0x7f0000002100)='P', 0x1}, {&(0x7f0000000780)='j', 0x1}], 0x7, 0x0)
vmsplice(r5, &(0x7f0000000680)=[{&(0x7f00000004c0)="cf", 0x1}, {&(0x7f0000000500)="8b", 0x1}, {&(0x7f0000000600)=']', 0x1}, {&(0x7f0000000640)="fa", 0x1}, {&(0x7f0000000440)='\"', 0x1}, {&(0x7f0000000a40)="cb48eb0b02f247", 0x7}, {&(0x7f00000009c0)="fdacc564", 0x4}, {&(0x7f0000000c00)="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", 0x401}], 0x8, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001900010025bd7000fbcbdfa50a102000ff02fe01aa3ca15408001e0006000400"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008010)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000100)={0x0, 0x1, 0x2})
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0)

928.397153ms ago: executing program 1 (id=3622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) (async, rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={&(0x7f0000000200)="28853212e8091a14e1a9e2b8ea43522b1ab2bfb63dd10bb349c4ce2a11c9", &(0x7f0000000f40)=""/4096, &(0x7f0000000c00)="875d7daf4f143c9e8f65bf5c7d9827219c5cf311137c364b8b0fe750d21971cb83cb17899b2066fead4351cca0849af31173a37cada207cf7781be886aea0186b823b7a0b9c024749ec1dc9b26a05fbb1d75d0e58c20cfd5f33f8ecce92bd9cc64b75ea586f3debc3b100723ec2071169dc05b0804d2ff", &(0x7f0000000c80)="060151f4e4f2849af9749d6053888c866d9631b45e9f418baddeb0d3b8d1d731b028ada221a78468e8e2438e84c573784fdac03b808d034acdca9889db2a2180de19e1aa0cd4aa5f649342a65b292ca0e7f70feb0d65d4342ef91d55969be6ce5fba68d0c89dcb78c65cebfddd83610b2d6aa088420764381231df2e5695b4d7ad834e8f7e5d05600a32b717310e6c1f35bd7b6504753eb95ea6a40075e074ddb962902e0ec95830dcf19ddbdc76dd2187479733f3fe64f8594d58cde5b0582d6929b077a503e9fe4122bb44fc09e96578a807a80b8ee31e158a8260a6c160bb", 0x9f, 0x1, 0x4}, 0x38) (rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x61, 0x2e, 0x30]}}, &(0x7f0000000340)=""/8, 0x1e, 0x8}, 0x28) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async)
unshare(0x68040200) (async)
r4 = socket(0x2a, 0x2, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0xc, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadd2db8662", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x3}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)

525.709076ms ago: executing program 0 (id=3623):
r0 = socket$inet6(0xa, 0x4, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000000c0), 0x0)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000100)="5800141ee100001400192340834b80040d8c560a117436c3790000006351a59bf90000000058000b4824ca945f6400940f6a0325010ebc0000000100"/76, 0x4c}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={<r9=>0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x74fe}}, 0x2, 0x0, 0x9, 0x80f, 0x2, 0x1, 0x6}, &(0x7f0000000280)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r9, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x3, 0x7, 0x5, 0x8, 0x4, 0x2}, 0x9c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

309.938293ms ago: executing program 1 (id=3624):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc319}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x40}}, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r2, &(0x7f0000000000)="3f000000010000", 0x7) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

309.025688ms ago: executing program 1 (id=3625):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r1=>0x0})
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r5, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r7=>0x0, &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_route(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="080005000705f7e20800050000fe04801500040002000060920000006c7cf2346f5b8a9a0300000008000e00f0d30874fe5f712a6d32db4a012b1bfcea73109a7a636b15c1fe7b29927000102b993cb1fb51b8e17d6b50f845dad70b6d9934109dd28b90979c23e365da5d9772ee33b064e2155559b72e61f8fda1105c3ff482a6a7167bd695e06c13dee36eb26a2d4dcd2115f095cd3948fba44d05f458e93b1fc5890c3513391d2a871f380f92e3316733e643b4d33e1e427ba2093c7a17d797b0b6e615b823b1310573d0f6db9d05e614fd42e8ea05beed33bdaedbefacfb6f474bd30677fe1f2c300adb7246eded1b8a65abea3670631769fa", @ANYRES32=r8, @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xc0694e5161ee9556}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=@newsa={0x120, 0x10, 0x10, 0x70bd2a, 0x25dfdbfd, {{@in6=@private2, @in=@local, 0x4e23, 0x8000, 0x4e21, 0x6, 0xa, 0x80, 0x20, 0x6, 0x0, r8}, {@in6=@loopback, 0x4d5, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x401, 0x6, 0x28, 0x238000000, 0x7, 0x1, 0x4, 0xff}, {0x7, 0x6, 0x9, 0x8}, {0x3, 0xd619, 0x4}, 0x70bd2d, 0x3505, 0xa, 0x0, 0x10}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd28, 0x70bd28, 0x70bd28, 0xd671, [0x100, 0x5, 0x81, 0x1, 0x7fff]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8054}, 0x40800)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r9, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x0, 0x6, 0x8, 0x8, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xb3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb751fa5d26e11f49}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x16, &(0x7f0000000200)=""/22, 0x41100, 0x14, '\x00', r1, 0x25, r3, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x1, 0x6df, 0x1ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r4, r9], &(0x7f0000000380)=[{0x4, 0x1, 0xe, 0x3}], 0x10, 0x6}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r10, 0x8b22, &(0x7f0000000040))

215.605004ms ago: executing program 2 (id=3626):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, 0x0, 0x60)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000000"], 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="700000001000030429bd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128008000100677265004400028008000100", @ANYRES32=0x0, @ANYBLOB="06000e00030000000600030010000000050008000000000008000100", @ANYRES32=0x0, @ANYBLOB="0500170001000000080004287e075f997778d921ea9e455a06f2d60b33aef5034db8bbbfea128333fc261c94f85b28da636f986018d436e97353d2b8c8f29e78d4d746703d0520fec319bd507c0b98168068eca1e728602e324af691f8e6213a9ea91534cee119651629c64effa29fad605c52a4f25e513e56df768201641cae09b4f40a25e044788a667e9516d7e1a6af9d32e63abf698233349d428a9026b40d5846787a42aff2f48c415d1a374b2ea2ce2e01f497e27ae70f2208648bad2e4a6b432683db368cc79bb214"], 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000580)="c725e395312d4e1a5df95256a640a7570000000087eeb182", 0x18)
r11 = accept4(r8, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmmsg$alg(r12, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000f00)="be520b39ee0eec58dea2bf1efa027df3646094995c1194dfd8e1640e7aef69e5978d8ca658bc98fe3984e39be1d393650084302062687d35b3373223efbbba58f8e01a1b687a950d358232ba4a17ef5c541991b959794208f29eba4c0a27d0facaa937dfc8bd5813d59397afb9835cdef72582a2fd3d0f3d8d931bf19367f7ffe09f7ecad3944a52236d88e726742bfb28425a03595dd1f82063204d5745d52c4dc039ebca2e74cd4edce0770ba2246d8aaeaefc672d05f7b230e7c29040e2af1c677c9930b87a96ee509824c80a5b461f3a18762ba3fd8c38ef234a2474e79d4384c13a08f92674607852232e", 0xed}, {&(0x7f0000000200)="35d23d54d84d0d3c46509b5f068cc04702aed26ba2d81fc46fff24a43acce8cdee822cee5287f4c72034c5666b7e41237b348bf94d33ff5766e85954b94dd2a9528381ceadd9c080cbc680790cd52cd087318a4fd9911092329736a99031f76b2cb1c704c0e8e79c6a5f9fec5a4258a48401d76547b1788dbdae9577f3138864efd058922d184ac5b1d270de9e881287cfd803ed5c69ebee069d58ac84c11d89eacbe5a00c", 0xa5}, {&(0x7f0000000400)="c079b09883300562afbf1441dbd9e2cb3b2d929be5e00e7937ab448971a7dbfbad61ba07cdde07016f83f55456781949444f1eabd5d8f4cdc37a5dd070b25657a585906c3c53ccee5bf5a5152e1b4acdb6a446a4978a4e689272e8dcf8ba762082ab129c855a23fb", 0x68}, {&(0x7f0000000480)="b7d645662f88dd7f3a188182d4deb411b6427b3ace83a0f01176f533b148e925fa3389246f9748be5c6f69fe8c20966997c4bba3eabfc3656911d17b6898d33648eb56721e3c5e6a6d200176cfa37b08ca04b880b046124483df87efdaea48f1a82099a1fee2862910cb08eb23a22972b2ecd05f61eca925cb385e8ee62bf952a41a3f1b458f8c7f652c6b24a67f2156e5ec873f920a3e626af30ea3ebc246e41adfc63f35", 0xa5}, {&(0x7f00000005c0)="393d8c923b54352e545748e732e8dac9d2f37ca999e0a3e06c3038202be0caaa61d2c27cb2a65308cbfb167befac4f66f85dfa9964e38374d0285cadb61aaa5ef5b8ae241a8434d7349789e1b507d7f366778d195d10fdefd1c0e2f95f584cf5c76c0c7c90ef3e2986e37fa3b341c1d7ee578456c4c9bf7817aeccd2c0382f6010053b1a3eaec998f8f647aa885c1f3bb4524e4fd7c3cca2", 0x98}, {&(0x7f0000000540)="e02dd6102ed38e2199c9752ce07053d4bf1585004b48f1d9214eab877f302c852fe45a06eddab0040f92fc36a80e2ab711254d3fd1edd48b40b39eb7c23f0350", 0x40}, {&(0x7f0000000680)="21f590dc23b63ea13f5aafc8047c214914532b22ae3cf65cc7a540b8c20dd10bc89d6f4ef8cc1b5539dc2ee24c99332c9fb1f7942f375082555afaf3d04df4ed54743b06984ffd6783e5ba40c5501fec97609e9265b93919bbe6fddd75d6f49f44d397fdc0a95979255f4eb2f497db48b58f3e04", 0x74}], 0x7, &(0x7f00000007c0)=[@op={0x18}, @iv={0x18}, @op={0x18}, @op={0x18}], 0x60, 0x4001}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000840)}, {&(0x7f00000008c0)="4b7cb955af7d007f53da7af50846ca52323a9d121fad99947e7af7ba2700fa5c0ae0ab6bfd8d0ab70b395b6fa1d3851c07e03301afc7a6a1ac6b9f5e3f3e15f229bff7e1efcdcb976e39058d62fcc7f8c51f1d39e2984e1712dd4033d285a10b3508132765f49038ed764af68baaf2582ad078aaa55b2555aac3cfdfaf16ef0f329c21", 0x83}, {&(0x7f0000000980)="99838852c0febf58dc4fcdd22d8e5f1c23f1aa36e6d1b4fb2236d3c46e140666d575beb88e8fa1c7365a6d440ac9f391e8213977bf7bd4ed8e7e278de1e55b1ca0ea226420141a272342d782c8a9c0ee8fa6aadb2cecbae3c7dad3116b4de01929fb21017bf248dc1ac550a8b9cbfd734c4ee62966f195bf2f281dcc5a", 0x7d}, {&(0x7f0000000a00)="05d0d0ed0b560db3d9a998bc8a4284084033f1913c340b9666aeda5b93a2fbd14fd31fba5269f005777e54f4fe971f3b46ad680000b05a9592ee13a9d071fec073", 0x41}, {&(0x7f0000000ac0)="2e2e600a87eb7a52b1a2d6b17e54e760667dcfec12923de1d260ce96208ffd9c3a3aa0054a7f51c790e2c2a1a66cac773d6b7e035b83b1f208f4afd28b009a56ad0f36f62e6aa7d0ba8a6e774aefe167893fed99727b6d3f983bb48f8cbe672cf65734fcf1506416d847f24a871c5ea9fe951e0d0000000000000001e9e6a5b3412684dba2187135fbe0375d4cf21de7ee5cd98116a458ca995720a07df9e0c32eb2d1c1cde7e69a04535d9ee4f743986f2b2830fe097572c4b7b9251ecd92aaaa9307e6d162f54d673c", 0xca}, {&(0x7f0000000bc0)="af180d348826e86f54d1d68d9d01d0ae6683cd76d304798427a97fccc513e844c83a4e82286d43543446e25b427e6d6d1fb85a75c26245c7b132b076c46aae", 0x3f}, {&(0x7f0000000c40)="e6eb755e73624e2c2bf86a0657caec4e06aad817bd25e0580363170ca18519e920720e65ba9241c04d11bc87738ed5e5039c7d610c450b31345c4abf64465a4002fccd6ab3c48b0885e32d1ac7ffc4ff745f1ad73f1fb3347cd0eaca06e8be139ee28c0f6251d9d3b1d440a38df1cf6d0d63172b9f942b2d4e6ee769ed932e1836416e9e19a43db956da", 0x8a}, {&(0x7f0000000d00)="8e105f50cfd25f9d792b5feda9c5d524bd3d165bce84cd272d9a0c723a52503dc3d35c00cadfca0e4af8f17989a58b34c57b70550f48bafd182f59b464a642ebad9a4cfb225ef61f810acdd65cf3073f24dfbe6c954fe8966b0727", 0x5b}], 0x8, &(0x7f0000000e00)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x890}], 0x2, 0x20048080)
sendfile(r12, r11, 0x0, 0x5)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="380000003abcf662683b9d7528ab40b5374db4a23ab10324560534a90cfe2348d7df3c4cbc7f3f3ca797372b521b0313dfa6ddeba2dc7fb99f312a14af75085725a28207bcec19ccf5b62aa64e0353e2d2f41489ecab060724fe7b8fea48592e572e25232f99047bc13ef4ad0a9a6bfab12a7930e9498821", @ANYRES16=r5, @ANYBLOB="00042abd7000ffdbdf25180000000c009900f4040000000c00000a001a00ffffffffffff00000a001a00ffffffffffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4)

139.872094ms ago: executing program 1 (id=3627):
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
unshare(0x22020600)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$netlink(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000023e956afaa2682d5e8b3c42a62b1c6e6d163b8240cf5c9bb399dc1a99dfee1932", @ANYRES16=r7, @ANYBLOB="3fcb00000000000000000d000000"], 0x14}}, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffc98}, 0x34004811)
setsockopt$sock_attach_bpf(r8, 0x6, 0x25, &(0x7f0000000040), 0x4)
sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b40)="f8", 0x1}], 0x1}, 0x4000000)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendto$inet6(r4, &(0x7f0000000040)='n\"', 0x2, 0x24004055, &(0x7f0000000140)={0xa, 0x4e21, 0x9e11, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x2, r10}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={<r11=>0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r11, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90)

138.908607ms ago: executing program 0 (id=3628):
unshare(0x24020400)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x4, 0x5e8, 0xffffffff, 0x118, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x518, 0x518, 0x518, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xff000000, 0xff000000, 0xff], [0x0, 0x0, 0xffffff00, 0xff000000], 'geneve1\x00', 'veth0_virt_wifi\x00', {}, {0x80}, 0x3b, 0x7f, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x1, 0x1, [0x4ed0, 0x9, 0x0, 0x2, 0x101, 0x3, 0x9840, 0x9, 0xfff, 0x6, 0x6, 0x8, 0x5, 0x0, 0x4, 0x800], 0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e23, 0x4e21], [0x7, 0x4, 0x8, 0x1, 0x9, 0x1, 0x93b, 0x811, 0xf20, 0x3, 0x8, 0x1, 0x8, 0x7, 0xffffffc0, 0x4, 0x4, 0x5, 0x8, 0xfffffffb, 0xb, 0x101, 0xff, 0x4, 0x7, 0x1346, 0x5, 0x3, 0x7, 0xb0cf, 0xffff, 0x80000001, 0x101, 0x9, 0x8, 0x6f6, 0xff, 0x200, 0x7, 0x2, 0x1, 0x70b, 0x3, 0x1, 0x3, 0x9, 0x7, 0x8, 0x81, 0x4, 0x4, 0x7, 0x6, 0x401, 0x5, 0x4, 0x5, 0x1, 0xe6, 0x10, 0x2f, 0x75, 0x9, 0xf], 0x2, [{0x6, 0x1, 0x5}, {0x1, 0xde, 0x4}, {0xe, 0x39, 0x2}, {0xf3, 0x80, 0x3}], 0x3, 0x2}}, @common=@inet=@recent1={{0x108}, {0xe, 0x1d2, 0x1, 0x1, 'syz0\x00', 0x95, [0x0, 0xff000000, 0xff, 0xffffff00]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x80, 0x52, 0x1}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xffffffff, 0xff], [0xffffffff], 'dummy0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2f, 0x8, 0xbec4e60ef4c8bbb2, 0x12}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x0, 0x818b16b8c1cb36e5}, {0x4, 0x3, 0x1}, {0x4, 0x3, 0x4}, 0x7, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100))
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockname$packet(r2, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14}}, 0x64}}, 0x4000000)
write(r3, &(0x7f0000000240)="94", 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r6, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18b0ff004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfa, &(0x7f0000000140)=""/250}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020603000000000000600000050000000c0007800800080088dbda64000000400900020073797a32000000000500040000000000050005000a000000749e67c474b3050001000600000014000300686173683a69"], 0x58}}, 0x80)

138.528984ms ago: executing program 2 (id=3629):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x8001af84, &(0x7f0000000340)={0x7, 0x88, "56f3df2da3a4e62491026fe734453c310cc7abec0d9786357ec472656c525caa78f124a66e43546f61df5c760b613bdaf592eb3b406f17fb40ad8f4d9dcf172bfddd891ac79fab8f0de96300868cdc05788d35adbedf29e5987c1ce8d8f0365f8a02d68a68e67b656c942faa4b1476d8502eebd3c17b999fe1149821bd71489676da24c0607b6594"})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
r2 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0)

75.551345ms ago: executing program 1 (id=3630):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}]}, 0x44}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x223}], 0x1}}], 0x1, 0x400c0)
sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'tunl0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

74.463272ms ago: executing program 1 (id=3631):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1d", 0x80, 0x0, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800)
unshare(0x6a040000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000120"], 0x104}}, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={<r6=>0x0, @dev, @broadcast}, &(0x7f0000000240)=0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@union={0xf, 0x1, 0x0, 0x5, 0x0, 0x400, [{0x7, 0x2, 0x5}]}, @union={0x2, 0x2, 0x0, 0x5, 0x1, 0x5, [{0xe, 0x2, 0xb}, {0xd, 0x0, 0x6}]}, @fwd={0x10}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x10, 0x30, 0x30, 0x61, 0x30, 0x30, 0x5f]}}, &(0x7f0000000500)=""/154, 0x81, 0x9a, 0x1, 0x8}, 0x28)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r10, &(0x7f0000000180)=0xffffffffffffffff, r9, 0x0, 0x4, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x3, 0x1, 0x0, 0xb, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @map_val={0x18, 0xa, 0x2, 0x0, r1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x101, 0x12, &(0x7f0000000140)=""/18, 0x41000, 0x10, '\x00', r6, 0x17, r8, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x8, r10, 0x2, 0x0, &(0x7f0000000600)=[{0x4, 0x1, 0x5}, {0x0, 0x3, 0xa, 0x2}], 0x10, 0x1}, 0x94)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x14c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x4d2, 0x33}, @in6=@empty, {0x0, 0x0, 0x129b, 0xfffffffffffffffc, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1a0b1}, [@algo_auth_trunc={0x4c, 0x14, {{'wp512-generic\x00'}, 0x0, 0x40}}, @extra_flags={0x8, 0x18, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x5010}, 0x4000)
sendmsg$nl_xfrm(r11, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2028c81}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@flushpolicy={0x18, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@etimer_thresh={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xc0c0)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r13 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r13, 0x4008af00, &(0x7f00000004c0)=0x8000)

62.597991ms ago: executing program 0 (id=3632):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r2, 0x100) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async, rerun: 32)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
ioctl$sock_bt_hci(r2, 0x800448f0, 0x0) (async, rerun: 64)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async, rerun: 64)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async, rerun: 64)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00')

0s ago: executing program 2 (id=3633):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)={0x1, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @random="faffffff00", @random="412d007f2c16", @multicast, @empty, @empty, @empty, @link_local]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x2}]}}, 0x0, 0x2a}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)=@newneigh={0x24, 0x1c, 0x601, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x8, 0x9, 0x5}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

kernel console output (not intermixed with test programs):

2998][T13107] __nla_validate_parse: 29 callbacks suppressed
[  194.453012][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1999'.
[  194.453423][T13111] syzkaller1: entered promiscuous mode
[  194.460077][T13111] syzkaller1: entered allmulticast mode
[  194.463180][T13107] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1999'.
[  194.554467][T13107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1999'.
[  194.671194][T13120] IPVS: Scheduler module ip_vs_sip not found
[  194.719439][   T56] block nbd0: Receive control failed (result -32)
[  194.837003][T13135] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  194.913475][ T5864] lo speed is unknown, defaulting to 1000
[  194.915401][ T5864] syz0: Port: 1 Link DOWN
[  194.926087][ T5864] lo speed is unknown, defaulting to 1000
[  194.928406][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  194.933573][T13135] ieee802154 phy0 wpan0: encryption failed: -126
[  194.937182][T13141] IPv6: NLM_F_REPLACE set, but no existing node found!
[  195.052279][T13147] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  195.085140][T13149] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2011'.
[  195.170747][T13155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'.
[  195.701322][T13163] lo speed is unknown, defaulting to 1000
[  195.705612][T13163] lo speed is unknown, defaulting to 1000
[  195.708506][T13163] lo speed is unknown, defaulting to 1000
[  195.726148][T13163] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  195.746722][T13163] lo speed is unknown, defaulting to 1000
[  195.751228][T13163] lo speed is unknown, defaulting to 1000
[  195.757484][T13163] lo speed is unknown, defaulting to 1000
[  195.809819][T13170] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2016'.
[  195.865466][T13178] lo speed is unknown, defaulting to 1000
[  195.869064][T13178] lo speed is unknown, defaulting to 1000
[  196.017040][T13178] lo speed is unknown, defaulting to 1000
[  196.155351][T13168] lo speed is unknown, defaulting to 1000
[  196.158119][T13168] lo speed is unknown, defaulting to 1000
[  196.341351][T13168] lo speed is unknown, defaulting to 1000
[  196.385903][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2022'.
[  196.429237][T13198] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2022'.
[  196.627647][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2025'.
[  196.707784][T13209] 8021q: adding VLAN 0 to HW filter on device bond12
[  197.200291][T13263] ieee802154 phy0 wpan0: encryption failed: -126
[  197.365028][T13281] validate_nla: 7 callbacks suppressed
[  197.365040][T13281] netlink: 'syz.0.2044': attribute type 1 has an invalid length.
[  197.395445][T13281] lo speed is unknown, defaulting to 1000
[  197.402622][T13284] batman_adv: batadv0: Adding interface: ip6gretap3
[  197.404846][T13284] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.412938][T13284] batman_adv: batadv0: Interface activated: ip6gretap3
[  197.416663][T13281] lo speed is unknown, defaulting to 1000
[  197.520302][T13281] lo speed is unknown, defaulting to 1000
[  197.715282][T13300] syzkaller0: entered promiscuous mode
[  197.717510][T13300] syzkaller0: entered allmulticast mode
[  197.731109][T13299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.764767][T13300] tipc: Resetting bearer <eth:syzkaller0>
[  197.784300][T13298] tipc: Resetting bearer <eth:syzkaller0>
[  197.788399][T13303] netlink: 'syz.1.2050': attribute type 1 has an invalid length.
[  197.791535][T13303] netlink: 'syz.1.2050': attribute type 1 has an invalid length.
[  197.823117][T13298] tipc: Disabling bearer <eth:syzkaller0>
[  197.948364][T13314] netlink: 'syz.2.2053': attribute type 12 has an invalid length.
[  198.021075][T13323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.336636][T13350] netlink: 'syz.1.2064': attribute type 1 has an invalid length.
[  198.362655][T13356] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  198.420802][T13350] veth17: entered promiscuous mode
[  198.476679][T13365] tipc: Resetting bearer <eth:team0>
[  198.483485][T13365] unknown channel width for channel at 909000KHz?
[  198.591326][T13372] ieee802154 phy0 wpan0: encryption failed: -126
[  198.708633][T13387] netlink: 'syz.2.2075': attribute type 16 has an invalid length.
[  198.713824][T13387] netlink: 'syz.2.2075': attribute type 17 has an invalid length.
[  198.714463][T13364] netlink: 'syz.0.2067': attribute type 13 has an invalid length.
[  198.793470][T13387] tipc: Resetting bearer <eth:syzkaller0>
[  198.804807][T13387] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  198.818995][T13387] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  198.851184][T13364] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.857288][T13364] 8021q: adding VLAN 0 to HW filter on device team0
[  198.865738][T13364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.878452][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.882328][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.885028][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.887626][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.891887][ T5883] lo speed is unknown, defaulting to 1000
[  198.893715][ T5883] syz2: Port: 1 Link ACTIVE
[  199.001548][T13410] netlink: 'syz.0.2082': attribute type 2 has an invalid length.
[  199.239325][T13434] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  199.242917][T13432] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  199.481311][T13443] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  199.517918][T13445] __nla_validate_parse: 21 callbacks suppressed
[  199.517931][T13445] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2093'.
[  199.530711][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2093'.
[  199.768755][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'.
[  199.786033][T13461] nbd: must specify at least one socket
[  199.788775][T13461] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.793242][T13461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.796910][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.811411][T13461] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.819650][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.824890][T13461] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2100'.
[  199.917574][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'.
[  199.929696][T13465] sctp: [Deprecated]: syz.2.2102 (pid 13465) Use of struct sctp_assoc_value in delayed_ack socket option.
[  199.929696][T13465] Use struct sctp_sack_info instead
[  199.955960][T13468] netlink: 'syz.1.2101': attribute type 4 has an invalid length.
[  199.966451][T13465] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  199.981965][T13465] CPU: 0 UID: 0 PID: 13465 Comm: syz.2.2102 Not tainted syzkaller #0 PREEMPT(full) 
[  199.981980][T13465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.981987][T13465] Call Trace:
[  199.981992][T13465]  <TASK>
[  199.981997][T13465]  dump_stack_lvl+0x189/0x250
[  199.982014][T13465]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.982026][T13465]  ? __pfx__printk+0x10/0x10
[  199.982041][T13465]  ? kernfs_path_from_node+0x2f/0x290
[  199.982052][T13465]  ? kernfs_path_from_node+0x250/0x290
[  199.982061][T13465]  ? kernfs_path_from_node+0x2f/0x290
[  199.982071][T13465]  sysfs_warn_dup+0x8e/0xa0
[  199.982087][T13465]  sysfs_do_create_link_sd+0xc0/0x110
[  199.982097][T13465]  device_add_class_symlinks+0x1cf/0x240
[  199.982109][T13465]  device_add+0x475/0xb50
[  199.982119][T13465]  wiphy_register+0x1ba6/0x28d0
[  199.982141][T13465]  ? __pfx_wiphy_register+0x10/0x10
[  199.982151][T13465]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  199.982165][T13465]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  199.982206][T13465]  ieee80211_register_hw+0x3425/0x4080
[  199.982226][T13465]  ? ieee80211_register_hw+0x1411/0x4080
[  199.982239][T13465]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  199.982250][T13465]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.982265][T13465]  ? __hrtimer_setup+0x187/0x210
[  199.982273][T13465]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  199.982286][T13465]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  199.982312][T13465]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  199.982322][T13465]  ? trace_kmalloc+0x1f/0xd0
[  199.982332][T13465]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  199.982342][T13465]  ? kstrndup+0xbf/0x160
[  199.982356][T13465]  hwsim_new_radio_nl+0xea4/0x1b10
[  199.982368][T13465]  ? __pfx___nla_validate_parse+0x10/0x10
[  199.982387][T13465]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  199.982404][T13465]  ? __nla_parse+0x40/0x60
[  199.982417][T13465]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  199.982432][T13465]  genl_family_rcv_msg_doit+0x215/0x300
[  199.982445][T13465]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  199.982460][T13465]  ? bpf_lsm_capable+0x9/0x20
[  199.982471][T13465]  ? security_capable+0x7e/0x2e0
[  199.982486][T13465]  genl_rcv_msg+0x60e/0x790
[  199.982498][T13465]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.982507][T13465]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  199.982524][T13465]  netlink_rcv_skb+0x208/0x470
[  199.982534][T13465]  ? __lock_acquire+0xab9/0xd20
[  199.982563][T13465]  ? __pfx_genl_rcv_msg+0x10/0x10
[  199.982572][T13465]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.982594][T13465]  ? down_read+0x1ad/0x2e0
[  199.982608][T13465]  genl_rcv+0x28/0x40
[  199.982616][T13465]  netlink_unicast+0x82f/0x9e0
[  199.982631][T13465]  ? __pfx_netlink_unicast+0x10/0x10
[  199.982643][T13465]  ? netlink_sendmsg+0x642/0xb30
[  199.982653][T13465]  ? skb_put+0x11b/0x210
[  199.982663][T13465]  netlink_sendmsg+0x805/0xb30
[  199.982679][T13465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.982692][T13465]  ? aa_sock_msg_perm+0xf1/0x1d0
[  199.982705][T13465]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.982714][T13465]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.982726][T13465]  __sock_sendmsg+0x21c/0x270
[  199.982738][T13465]  ____sys_sendmsg+0x505/0x830
[  199.982749][T13465]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.982763][T13465]  ? import_iovec+0x74/0xa0
[  199.982774][T13465]  ___sys_sendmsg+0x21f/0x2a0
[  199.982783][T13465]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.982810][T13465]  ? __fget_files+0x2a/0x420
[  199.982822][T13465]  ? __fget_files+0x3a0/0x420
[  199.982839][T13465]  __x64_sys_sendmsg+0x19b/0x260
[  199.982848][T13465]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.982866][T13465]  ? do_syscall_64+0xbe/0x3b0
[  199.982879][T13465]  do_syscall_64+0xfa/0x3b0
[  199.982889][T13465]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.982900][T13465]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.982908][T13465]  ? exc_page_fault+0x9f/0xf0
[  199.982919][T13465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.982927][T13465] RIP: 0033:0x7fa3f138ebe9
[  199.982936][T13465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.982943][T13465] RSP: 002b:00007fa3f22a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.982953][T13465] RAX: ffffffffffffffda RBX: 00007fa3f15b5fa0 RCX: 00007fa3f138ebe9
[  199.982960][T13465] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  199.982965][T13465] RBP: 00007fa3f1411e19 R08: 0000000000000000 R09: 0000000000000000
[  199.982970][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.982975][T13465] R13: 00007fa3f15b6038 R14: 00007fa3f15b5fa0 R15: 00007fff275023e8
[  199.982993][T13465]  </TASK>
[  199.983383][   T10] lo speed is unknown, defaulting to 1000
[  200.130765][   T10] syz1: Port: 1 Link DOWN
[  200.247135][T13479] ieee802154 phy0 wpan0: encryption failed: -126
[  200.335246][T13484] tipc: New replicast peer: 255.255.255.255
[  200.337530][T13484] tipc: Enabled bearer <udp:syz2>, priority 10
[  200.450082][T13498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.500743][T13504] ieee802154 phy0 wpan0: encryption failed: -126
[  200.538476][   T33] audit: type=1107 audit(1755593975.427:4): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  200.635391][T13522] pim6reg1: entered promiscuous mode
[  200.637203][T13522] pim6reg1: entered allmulticast mode
[  200.682458][T13525] dvmrp1: left allmulticast mode
[  200.728290][T13527] macvlan7: entered allmulticast mode
[  200.730573][T13527] veth1_vlan: entered allmulticast mode
[  200.736472][T13527] veth1_vlan: left allmulticast mode
[  200.740327][T13531] rdma_rxe: rxe_newlink: failed to add lo
[  201.174888][T13576] lo speed is unknown, defaulting to 1000
[  201.178703][T13576] lo speed is unknown, defaulting to 1000
[  201.308669][T13576] lo speed is unknown, defaulting to 1000
[  201.331898][  T793] tipc: Node number set to 1797638639
[  202.163172][T13609] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  202.409159][T13626] sctp: [Deprecated]: syz.0.2147 (pid 13626) Use of int in max_burst socket option.
[  202.409159][T13626] Use struct sctp_assoc_value instead
[  202.418922][T13626] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  202.441463][T13628] validate_nla: 2 callbacks suppressed
[  202.441477][T13628] netlink: 'syz.2.2149': attribute type 8 has an invalid length.
[  202.632466][T13652] tipc: Resetting bearer <eth:team0>
[  202.640716][T13652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  202.767288][T13666] netlink: 'syz.1.2161': attribute type 10 has an invalid length.
[  202.777390][T13666] team0: Port device geneve0 added
[  202.781633][ T5910] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.790305][ T5910] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.797554][ T5910] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.815235][ T5910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.889685][T13680] siw: device registration error -23
[  203.022424][T13695] netlink: 'syz.0.2170': attribute type 30 has an invalid length.
[  203.025588][T13695] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  203.028873][T13695] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  203.371446][T13729] syzkaller0: entered promiscuous mode
[  203.374338][T13729] syzkaller0: entered allmulticast mode
[  203.420246][T13739] IPv6: sit4: Disabled Multicast RS
[  203.423725][T13739] sit4: entered allmulticast mode
[  203.454147][T13742] ieee802154 phy0 wpan0: encryption failed: -126
[  203.492364][T13740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  203.626189][T13749] ieee802154 phy0 wpan0: encryption failed: -126
[  203.686830][T13753] netlink: 'syz.2.2191': attribute type 9 has an invalid length.
[  203.740045][T13758] batman_adv: batadv0: Removing interface: ip6gretap3
[  203.854189][T13758] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  204.169424][T13776] ieee802154 phy0 wpan0: encryption failed: -126
[  204.203139][T13779] netlink: 'syz.1.2198': attribute type 23 has an invalid length.
[  204.721298][ T5864] lo speed is unknown, defaulting to 1000
[  204.723680][ T5864] syz2: Port: 1 Link DOWN
[  205.170926][T13797] __nla_validate_parse: 29 callbacks suppressed
[  205.170942][T13797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2203'.
[  205.214655][T13803] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  205.375239][T13826] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  205.394468][T13827] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  205.421129][T13820] bond11: left promiscuous mode
[  205.425739][T13820] wireguard0: left promiscuous mode
[  205.444967][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'.
[  205.477431][T13836] ieee802154 phy0 wpan0: encryption failed: -126
[  205.530168][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'.
[  205.541648][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'.
[  205.547920][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'.
[  205.580896][T13844] lo speed is unknown, defaulting to 1000
[  205.584879][T13844] lo speed is unknown, defaulting to 1000
[  205.635197][T13850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2221'.
[  205.700467][T13855] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  205.706191][T13844] lo speed is unknown, defaulting to 1000
[  205.731915][T13856] netlink: 'syz.2.2222': attribute type 13 has an invalid length.
[  205.734551][T13856] netlink: 'syz.2.2222': attribute type 17 has an invalid length.
[  205.775857][T13856] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.786602][T13856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.824705][T13854] lo speed is unknown, defaulting to 1000
[  205.827865][T13854] lo speed is unknown, defaulting to 1000
[  205.971309][T13854] lo speed is unknown, defaulting to 1000
[  205.988754][T13865] openvswitch: netlink: IP tunnel TTL not specified.
[  206.152191][T13869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2225'.
[  206.155716][T13869] netlink: 'syz.2.2225': attribute type 32 has an invalid length.
[  206.159029][T13869] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  206.240863][T13874] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  206.335321][T13880] netlink: 'syz.2.2228': attribute type 21 has an invalid length.
[  206.339400][T13880] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2228'.
[  206.483236][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'.
[  206.551983][T13887] only policy match revision 0 supported
[  206.551997][T13887] unable to load match
[  206.653051][T13897] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2235'.
[  206.728101][T13905] ieee802154 phy0 wpan0: encryption failed: -126
[  206.879121][T13921] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  206.889959][T13928] ieee802154 phy0 wpan0: encryption failed: -126
[  207.000578][T13941] bridge0: port 1(erspan0) entered blocking state
[  207.006015][T13941] bridge0: port 1(erspan0) entered disabled state
[  207.008135][T13941] erspan0: entered allmulticast mode
[  207.010644][T13941] erspan0: entered promiscuous mode
[  207.082553][T13956] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  207.085013][T13956] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  207.157208][T13968] ieee802154 phy0 wpan0: encryption failed: -126
[  207.189874][T13971] netlink: 'syz.2.2258': attribute type 1 has an invalid length.
[  207.205194][T13973] bond0: option arp_validate: invalid value (18446744073491447809)
[  207.389512][T13996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.393178][T14001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.406181][T14006] syzkaller0: left promiscuous mode
[  207.411322][T14006] syzkaller0: left allmulticast mode
[  207.443454][T14008] validate_nla: 1 callbacks suppressed
[  207.443465][T14008] netlink: 'syz.0.2268': attribute type 1 has an invalid length.
[  207.447683][T14008] netlink: 'syz.0.2268': attribute type 2 has an invalid length.
[  207.455332][T14008] macsec1: entered promiscuous mode
[  207.457002][T14008] team0: entered promiscuous mode
[  207.510198][T14010] netlink: 'syz.1.2269': attribute type 1 has an invalid length.
[  207.525811][T14010] bond15: entered promiscuous mode
[  207.528495][T14010] 8021q: adding VLAN 0 to HW filter on device bond15
[  207.570959][T14010] bond15: (slave bridge9): making interface the new active one
[  207.576938][T14010] bridge9: entered promiscuous mode
[  207.582291][T14010] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  207.646386][T14021] netlink: 'syz.1.2272': attribute type 2 has an invalid length.
[  207.657204][T14021] veth0_to_team: entered promiscuous mode
[  207.659835][T14021] veth0_to_team: entered allmulticast mode
[  207.697902][T14025] syzkaller0: entered promiscuous mode
[  207.700326][T14025] syzkaller0: entered allmulticast mode
[  207.924797][T14046] ieee802154 phy0 wpan0: encryption failed: -126
[  207.983778][T14050] ieee802154 phy0 wpan0: encryption failed: -126
[  208.039637][T14054] netlink: 'syz.1.2284': attribute type 4 has an invalid length.
[  208.073879][T14059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  208.528784][T14092] netlink: 'syz.2.2296': attribute type 1 has an invalid length.
[  208.565305][T14092] bond19: (slave geneve0): making interface the new active one
[  208.568090][T14092] bond19: (slave geneve0): Enslaving as an active interface with an up link
[  208.570858][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  208.574393][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  208.576904][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  208.580872][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  208.691859][T14098] ieee802154 phy0 wpan0: encryption failed: -126
[  208.737854][T14100] openvswitch: netlink: Flow actions attr not present in new flow.
[  208.981587][T14121] netlink: 'syz.2.2307': attribute type 10 has an invalid length.
[  209.402661][T14154] lo speed is unknown, defaulting to 1000
[  209.411220][T14154] lo speed is unknown, defaulting to 1000
[  209.540529][T14159] netlink: 'syz.1.2318': attribute type 13 has an invalid length.
[  209.545197][T14159] netlink: 'syz.1.2318': attribute type 17 has an invalid length.
[  209.569691][T14159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.576168][ T5864] lo speed is unknown, defaulting to 1000
[  209.577761][T14154] lo speed is unknown, defaulting to 1000
[  209.578528][ T5864] syz1: Port: 1 Link ACTIVE
[  209.695263][T14172] netlink: 'syz.0.2321': attribute type 16 has an invalid length.
[  209.745722][T14176] ip6_vti0: mtu less than device minimum
[  210.540131][T14184] __nla_validate_parse: 20 callbacks suppressed
[  210.540144][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2324'.
[  210.547155][T14184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2324'.
[  210.581801][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2325'.
[  210.609018][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2327'.
[  210.615764][T14193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.648441][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2330'.
[  210.651386][T14198] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2328'.
[  210.655789][T14200] ieee802154 phy0 wpan0: encryption failed: -126
[  210.658534][T14199] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  210.716626][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'.
[  210.721063][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'.
[  210.767073][T14206] bond19: (slave geneve0): Releasing active interface
[  210.787839][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  210.791268][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  210.797427][T14217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2335'.
[  210.800313][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  210.806221][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  210.869180][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  210.887410][T14225] geneve0: entered promiscuous mode
[  210.889119][T14225] geneve0: entered allmulticast mode
[  210.900883][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  210.909587][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  210.928007][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  210.932609][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  210.956366][T14232] ieee802154 phy0 wpan0: encryption failed: -126
[  210.998234][   T10] lo speed is unknown, defaulting to 1000
[  211.000166][   T10] syz1: Port: 1 Link DOWN
[  211.048081][T14240] 8021q: adding VLAN 0 to HW filter on device bond16
[  211.196916][T14256] ieee802154 phy0 wpan0: encryption failed: -126
[  211.253195][T14264] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  211.305859][T14270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  211.367195][T14270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  211.456054][T14274] tipc: Resetting bearer <eth:team0>
[  211.466816][T14274] veth0_to_team: left promiscuous mode
[  211.468520][T14274] veth0_to_team: left allmulticast mode
[  211.480658][T14274] tipc: Resetting bearer <eth:syzkaller0>
[  211.487025][T14274] veth15: left promiscuous mode
[  211.491127][T14274] veth17: left promiscuous mode
[  211.500575][T14274] sit4: left allmulticast mode
[  211.512279][T14274] bond15: left promiscuous mode
[  211.516456][T14274] bridge9: left promiscuous mode
[  211.534115][T14270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  211.540042][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.543066][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.545581][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.561959][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.571450][T14270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  211.644572][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  211.656934][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  211.667517][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  211.677505][ T5910] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  211.707215][T14293] batadv_slave_1: entered promiscuous mode
[  211.710429][T14292] batadv_slave_1: left promiscuous mode
[  211.761312][T14296] tipc: Resetting bearer <eth:team0>
[  211.766488][T14296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  211.771045][ T5883] lo speed is unknown, defaulting to 1000
[  211.773249][ T5883] syz1: Port: 1 Link ACTIVE
[  211.822886][   T26] tipc: Resetting bearer <eth:team0>
[  211.961258][T14314] bond20 (unregistering): Released all slaves
[  212.134964][T14318] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  212.457344][T14352] nbd: must specify at least one socket
[  212.615765][T14360] validate_nla: 9 callbacks suppressed
[  212.615779][T14360] netlink: 'syz.0.2384': attribute type 2 has an invalid length.
[  212.630789][T14360] k*]: entered promiscuous mode
[  212.643590][T14360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.650321][  T793] lo speed is unknown, defaulting to 1000
[  212.654999][  T793] syz2: Port: 1 Link ACTIVE
[  212.657699][T14360] veth0_to_team: entered promiscuous mode
[  212.659830][T14360] veth0_to_team: entered allmulticast mode
[  212.690053][T14366] ieee802154 phy0 wpan0: encryption failed: -126
[  212.718820][T14370] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  212.979284][T14394] ieee802154 phy0 wpan0: encryption failed: -126
[  212.990843][T14396] pim6reg1: entered promiscuous mode
[  212.995894][T14396] pim6reg1: entered allmulticast mode
[  213.228316][T14418] tipc: Resetting bearer <eth:team0>
[  213.236587][ T5864] lo speed is unknown, defaulting to 1000
[  213.238330][ T5864] syz1: Port: 1 Link DOWN
[  213.323729][T14438] lo speed is unknown, defaulting to 1000
[  213.326413][T14438] lo speed is unknown, defaulting to 1000
[  213.440568][T14444] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  213.447459][T14444] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  213.489828][T14438] lo speed is unknown, defaulting to 1000
[  213.616306][T14451] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  213.637034][T14451] : entered promiscuous mode
[  213.735206][T14468] vlan0: entered promiscuous mode
[  213.746702][T14468] hsr_slave_1: entered promiscuous mode
[  213.748772][T14468] vlan0: entered allmulticast mode
[  213.750703][T14468] hsr_slave_1: entered allmulticast mode
[  213.847109][T14464] tipc: Resetting bearer <eth:syzkaller0>
[  213.875505][T14473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.898352][ T5857] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  213.901371][ T5857] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  213.907926][ T5857] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  213.911467][ T5857] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  214.967956][T14486] veth0_to_team: left promiscuous mode
[  214.969788][T14486] veth0_to_team: left allmulticast mode
[  214.976423][T14486] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  214.981636][T14486] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  214.984483][T14486] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  214.988941][T14486] macvtap1: left allmulticast mode
[  214.991296][T14486] veth11: left promiscuous mode
[  214.994697][T14486] macsec0: left promiscuous mode
[  214.996484][T14486] macsec0: left allmulticast mode
[  214.999576][T14486] geneve0: left promiscuous mode
[  215.001344][T14486] geneve0: left allmulticast mode
[  215.009958][ T5857] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  215.039634][T14502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.048013][T14502] team0: Device gtp2 is up. Set it down before adding it as a team port
[  215.071643][T14491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  215.173324][T14509] syzkaller1: entered promiscuous mode
[  215.175038][T14509] syzkaller1: entered allmulticast mode
[  215.219517][T14512] netlink: 'syz.0.2420': attribute type 13 has an invalid length.
[  215.365861][T14522] syzkaller1: entered promiscuous mode
[  215.368038][T14522] syzkaller1: entered allmulticast mode
[  215.574672][T14535] veth0_to_team: left promiscuous mode
[  215.576804][T14535] veth0_to_team: left allmulticast mode
[  215.590177][  T794] lo speed is unknown, defaulting to 1000
[  215.597998][  T794] syz2: Port: 1 Link DOWN
[  215.607497][T14535] __nla_validate_parse: 36 callbacks suppressed
[  215.607506][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'.
[  216.113898][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'.
[  216.121846][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2434'.
[  216.226428][T14568] ieee802154 phy0 wpan0: encryption failed: -126
[  216.251462][T14571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'.
[  216.260682][T14573] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2437'.
[  216.262153][T14571] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2437'.
[  216.264875][T14573] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  216.266847][T14571] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  216.266861][T14571] openvswitch: netlink: Message has 1 unknown bytes.
[  216.275909][T14573] openvswitch: netlink: Message has 1 unknown bytes.
[  216.294784][T14571] netlink: 'syz.1.2437': attribute type 1 has an invalid length.
[  216.495964][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'.
[  216.515397][T14583] team1: entered promiscuous mode
[  216.516972][T14583] team1: entered allmulticast mode
[  216.519000][T14583] 8021q: adding VLAN 0 to HW filter on device team1
[  216.656582][T14599] ieee802154 phy0 wpan0: encryption failed: -126
[  216.760315][T14606] IPVS: set_ctl: invalid protocol: 17614 100.1.1.0:20000
[  217.110980][T14621] ieee802154 phy0 wpan0: encryption failed: -126
[  217.166510][T14623] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2452'.
[  217.209063][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2454'.
[  217.365199][T14631] openvswitch: netlink: Key type 251 is out of range max 32
[  217.486597][T14640] ieee802154 phy0 wpan0: encryption failed: -126
[  217.498432][T14634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2456'.
[  217.565710][T14651] IPVS: Unknown mcast interface: veth1_to_bridge
[  217.683215][T14664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.685814][T14664] syzkaller0: entered promiscuous mode
[  217.687561][T14664] syzkaller0: entered allmulticast mode
[  217.712438][T14664] tipc: Resetting bearer <eth:syzkaller0>
[  217.717284][T14662] tipc: Resetting bearer <eth:syzkaller0>
[  217.730068][T14662] tipc: Disabling bearer <eth:syzkaller0>
[  217.788437][T14670] netlink: 'syz.0.2466': attribute type 16 has an invalid length.
[  217.790888][T14670] netlink: 'syz.0.2466': attribute type 3 has an invalid length.
[  217.814638][T14672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.817872][T14672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  218.302529][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  218.818508][T14691] netlink: 'syz.0.2473': attribute type 9 has an invalid length.
[  218.870814][T14697] netlink: 'syz.0.2475': attribute type 5 has an invalid length.
[  218.898125][T14699] IPVS: set_ctl: invalid protocol: 110 100.1.1.1:20001
[  218.993592][T14705] netlink: 'syz.0.2480': attribute type 11 has an invalid length.
[  218.996058][T14705] netlink: 'syz.0.2480': attribute type 11 has an invalid length.
[  219.007245][T14707] lo speed is unknown, defaulting to 1000
[  219.010080][T14707] lo speed is unknown, defaulting to 1000
[  219.179111][T14707] lo speed is unknown, defaulting to 1000
[  219.660613][T14596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.703383][T14736] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.712708][T14736] syzkaller0: entered promiscuous mode
[  219.714443][T14736] syzkaller0: entered allmulticast mode
[  219.717616][T14736] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  219.815685][T14747] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  219.819511][T14747] netlink: 'syz.2.2490': attribute type 1 has an invalid length.
[  219.951135][T14755] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  220.135172][T14771] openvswitch: netlink: Message has 8 unknown bytes.
[  220.155080][T14774] openvswitch: netlink: Message has 20 unknown bytes.
[  220.160205][T14774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.308478][T14786] lo speed is unknown, defaulting to 1000
[  220.311203][T14786] lo speed is unknown, defaulting to 1000
[  220.392366][T14796] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  220.511318][T14798] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  220.528860][T14799] netlink: 'syz.2.2503': attribute type 13 has an invalid length.
[  220.531348][T14799] netlink: 'syz.2.2503': attribute type 17 has an invalid length.
[  220.563298][T14799] gretap0: refused to change device tx_queue_len
[  220.565431][T14799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  220.577784][T14786] lo speed is unknown, defaulting to 1000
[  220.623344][T14803] : entered promiscuous mode
[  220.703317][T14803] __nla_validate_parse: 28 callbacks suppressed
[  220.703330][T14803] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2508'.
[  220.716600][T14805] netlink: 'syz.0.2510': attribute type 83 has an invalid length.
[  220.810368][T14819] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  220.820141][T14819] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  220.856056][T14821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.860081][T14821] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  220.864487][T14821] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  220.875107][T14821] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2513'.
[  220.879956][T14823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2514'.
[  221.253123][T14849] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2520'.
[  221.304407][T14850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2516'.
[  221.815027][T14874] team0: Device gtp1 is of different type
[  222.895243][T14904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2535'.
[  222.980628][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'.
[  222.985983][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2538'.
[  223.155558][T14924] bond13: (slave erspan0): Releasing active interface
[  223.166303][T14924] team0: Port device geneve0 removed
[  223.175355][T14924] bond13: (slave veth15): Releasing active interface
[  223.180651][T14924] bond15: (slave bridge9): Releasing backup interface
[  223.369187][T14938] : entered promiscuous mode
[  223.475515][T14945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2547'.
[  223.488897][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'.
[  223.546292][T14952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.927180][T14960] netlink: 'syz.0.2551': attribute type 2 has an invalid length.
[  223.938050][T14960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.945966][  T794] lo speed is unknown, defaulting to 1000
[  223.948225][  T794] syz2: Port: 1 Link ACTIVE
[  224.121345][T14974] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  224.127180][T14974] bond4: (slave macvlan7): Enslaving as a backup interface with an up link
[  225.210096][T15012] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  225.217081][T15012] tipc: Resetting bearer <eth:syzkaller0>
[  225.223520][T15012] syzkaller0: left promiscuous mode
[  225.225192][T15012] syzkaller0: left allmulticast mode
[  225.230643][T15012] team1: left promiscuous mode
[  225.232738][T15012] team1: left allmulticast mode
[  225.314543][T15019] netlink: 'syz.1.2565': attribute type 1 has an invalid length.
[  225.338945][T15019] 8021q: adding VLAN 0 to HW filter on device bond17
[  225.404655][T15019] veth21: entered promiscuous mode
[  225.409130][T15019] bond17: (slave veth21): Enslaving as a backup interface with a down link
[  225.414766][T15024] bond17: (slave veth21): Releasing backup interface
[  225.687432][T15041] openvswitch: netlink: Message has 5 unknown bytes.
[  225.705738][T15045] netlink: 'syz.2.2573': attribute type 8 has an invalid length.
[  225.739970][T15047] netlink: 'syz.2.2574': attribute type 1 has an invalid length.
[  225.770621][T15047] 8021q: adding VLAN 0 to HW filter on device bond21
[  225.785790][T15047] veth19: entered promiscuous mode
[  225.789777][T15047] bond21: (slave veth19): Enslaving as a backup interface with a down link
[  225.800946][T15047] erspan0: left allmulticast mode
[  225.803370][T15047] erspan0: left promiscuous mode
[  225.805540][T15047] bridge0: port 1(erspan0) entered disabled state
[  225.814099][T15047] bond21: (slave veth19): Releasing backup interface
[  225.859250][T15050] __nla_validate_parse: 10 callbacks suppressed
[  225.859265][T15050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2575'.
[  225.964998][T15057] netlink: 'syz.2.2578': attribute type 10 has an invalid length.
[  226.054422][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2581'.
[  226.172461][T15068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  226.223519][T15082] syzkaller1: entered promiscuous mode
[  226.225730][T15082] syzkaller1: entered allmulticast mode
[  226.250992][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2586'.
[  226.255375][T15084] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  226.260947][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2586'.
[  226.370405][T15090] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  226.400752][T15090] veth21: entered promiscuous mode
[  226.505476][T15097] vlan0: entered promiscuous mode
[  226.507050][T15097] bridge0: entered promiscuous mode
[  226.605786][T15116] netlink: 'syz.2.2595': attribute type 10 has an invalid length.
[  226.708305][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'.
[  226.783411][T15140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'.
[  226.811460][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  226.819250][T15155] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  226.846220][T15158] netlink: 'syz.1.2609': attribute type 9 has an invalid length.
[  226.848736][T15158] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2609'.
[  226.913577][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2611'.
[  226.949181][T15170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2612'.
[  227.006033][T15175] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  227.009812][T15173] IPVS: stopping backup sync thread 15175 ...
[  227.080633][T15184] lo speed is unknown, defaulting to 1000
[  227.085944][T15184] lo speed is unknown, defaulting to 1000
[  227.195544][T15195] netlink: 'syz.2.2618': attribute type 1 has an invalid length.
[  227.221051][T15195] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  227.226007][T15195] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  227.240073][T15184] lo speed is unknown, defaulting to 1000
[  227.439900][T15204] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  227.641337][T15216] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  227.835038][T15230] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  227.954394][T15247] tun0: tun_chr_ioctl cmd 2147767520
[  227.967868][T15249] netlink: zone id is out of range
[  227.969883][T15249] netlink: zone id is out of range
[  227.971952][T15249] netlink: zone id is out of range
[  227.973541][T15249] netlink: zone id is out of range
[  227.975105][T15249] netlink: zone id is out of range
[  228.077666][T15260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.578272][T15272] net_ratelimit: 33 callbacks suppressed
[  228.578285][T15272] openvswitch: netlink: Key type 161 is out of range max 32
[  228.587748][T15272] tipc: Failed to remove unknown binding: 66,1,1/1797638639:3266596786/3266596788
[  228.591502][T15272] tipc: Failed to remove unknown binding: 66,1,1/1797638639:3266596786/3266596788
[  228.594715][T15272] tipc: Failed to remove unknown binding: 66,1,1/1797638639:3266596786/3266596788
[  228.910312][T15277] netlink: 'syz.2.2641': attribute type 13 has an invalid length.
[  228.946192][T15277] tipc: Resetting bearer <eth:syzkaller0>
[  228.964510][T15278] sctp: [Deprecated]: syz.2.2641 (pid 15278) Use of int in max_burst socket option deprecated.
[  228.964510][T15278] Use struct sctp_assoc_value instead
[  229.883249][T15297] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.888404][T15297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.497040][T15318] veth13: entered promiscuous mode
[  230.502805][T15318] erspan0: entered allmulticast mode
[  231.065143][T15333] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  231.067484][T15333] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  231.156037][T15337] __nla_validate_parse: 21 callbacks suppressed
[  231.156048][T15337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'.
[  231.163681][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'.
[  231.167443][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2657'.
[  231.281385][T15341] netlink: 'syz.0.2658': attribute type 2 has an invalid length.
[  231.290068][T15341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.299498][T15342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.308839][T15341] veth0_to_team: entered promiscuous mode
[  231.310780][T15341] veth0_to_team: entered allmulticast mode
[  231.434795][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  231.438392][T15354] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2661'.
[  231.671413][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'.
[  231.675316][T15366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2665'.
[  231.688410][T15366] netlink: 'syz.0.2665': attribute type 12 has an invalid length.
[  231.691678][T15366] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2665'.
[  231.878836][T15368] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2666'.
[  231.894698][T15368] netlink: zone id is out of range
[  231.898268][T15368] netlink: zone id is out of range
[  231.903643][T15368] netlink: zone id is out of range
[  231.905708][T15368] netlink: zone id is out of range
[  231.907751][T15368] netlink: zone id is out of range
[  231.914706][T15368] netlink: zone id is out of range
[  231.948522][T15371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2667'.
[  232.132153][T15392] netlink: 'syz.2.2672': attribute type 8 has an invalid length.
[  232.147272][T15390] syz.1.2671: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  232.172909][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.1.2671 Not tainted syzkaller #0 PREEMPT(full) 
[  232.172933][T15390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.172943][T15390] Call Trace:
[  232.172951][T15390]  <TASK>
[  232.172958][T15390]  dump_stack_lvl+0x189/0x250
[  232.172983][T15390]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.172997][T15390]  ? __pfx__printk+0x10/0x10
[  232.173018][T15390]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.173064][T15390]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  232.173083][T15390]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  232.173103][T15390]  warn_alloc+0x214/0x310
[  232.173126][T15390]  ? stack_depot_save_flags+0x40/0x860
[  232.173148][T15390]  ? __pfx_warn_alloc+0x10/0x10
[  232.173172][T15390]  ? kasan_save_track+0x4f/0x80
[  232.173218][T15390]  ? xskq_create+0x56/0x170
[  232.173234][T15390]  ? xsk_init_queue+0xb0/0x110
[  232.173250][T15390]  ? xsk_setsockopt+0x4dc/0x8d0
[  232.173265][T15390]  ? do_sock_setsockopt+0x17c/0x1b0
[  232.173278][T15390]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  232.173290][T15390]  ? do_syscall_64+0xfa/0x3b0
[  232.173310][T15390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173331][T15390]  __vmalloc_node_range_noprof+0x125/0x12f0
[  232.173377][T15390]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  232.173404][T15390]  ? __kasan_kmalloc+0x93/0xb0
[  232.173426][T15390]  vmalloc_user_noprof+0xad/0xf0
[  232.173446][T15390]  ? xskq_create+0xbf/0x170
[  232.173465][T15390]  xskq_create+0xbf/0x170
[  232.173487][T15390]  xsk_init_queue+0xb0/0x110
[  232.173506][T15390]  xsk_setsockopt+0x4dc/0x8d0
[  232.173526][T15390]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.173543][T15390]  ? __pfx_aa_sk_perm+0x10/0x10
[  232.173564][T15390]  ? aa_sock_opt_perm+0xff/0x1b0
[  232.173580][T15390]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  232.173596][T15390]  ? __pfx_xsk_setsockopt+0x10/0x10
[  232.173613][T15390]  do_sock_setsockopt+0x17c/0x1b0
[  232.173625][T15390]  __x64_sys_setsockopt+0x13f/0x1b0
[  232.173636][T15390]  do_syscall_64+0xfa/0x3b0
[  232.173647][T15390]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.173658][T15390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173666][T15390]  ? exc_page_fault+0x9f/0xf0
[  232.173678][T15390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.173686][T15390] RIP: 0033:0x7fa9c078ebe9
[  232.173696][T15390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.173703][T15390] RSP: 002b:00007fa9c1678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  232.173713][T15390] RAX: ffffffffffffffda RBX: 00007fa9c09b5fa0 RCX: 00007fa9c078ebe9
[  232.173719][T15390] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  232.173724][T15390] RBP: 00007fa9c0811e19 R08: 0000000000000004 R09: 0000000000000000
[  232.173730][T15390] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.173735][T15390] R13: 00007fa9c09b6038 R14: 00007fa9c09b5fa0 R15: 00007fffde8e1738
[  232.173749][T15390]  </TASK>
[  232.174110][T15390] Mem-Info:
[  232.290000][T15390] active_anon:4569 inactive_anon:0 isolated_anon:0
[  232.290000][T15390]  active_file:1443 inactive_file:38283 isolated_file:0
[  232.290000][T15390]  unevictable:1768 dirty:141 writeback:0
[  232.290000][T15390]  slab_reclaimable:10745 slab_unreclaimable:168787
[  232.290000][T15390]  mapped:18159 shmem:2441 pagetables:921
[  232.290000][T15390]  sec_pagetables:0 bounce:0
[  232.290000][T15390]  kernel_misc_reclaimable:0
[  232.290000][T15390]  free:175076 free_pcp:24254 free_cma:0
[  232.308302][T15390] Node 0 active_anon:8780kB inactive_anon:0kB active_file:3156kB inactive_file:10128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19740kB dirty:116kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6772kB pagetables:1976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.319070][T15390] Node 1 active_anon:9496kB inactive_anon:0kB active_file:2616kB inactive_file:143004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52896kB dirty:448kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6656kB pagetables:1708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.333797][T15390] Node 0 DMA free:14620kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:620kB local_pcp:272kB free_cma:0kB
[  232.345923][T15390] lowmem_reserve[]: 0 811 811 811 811
[  232.351234][T15390] Node 0 DMA32 free:218440kB boost:18432kB min:52092kB low:60504kB high:68916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8848kB inactive_anon:0kB active_file:3156kB inactive_file:10128kB unevictable:3536kB writepending:116kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:42180kB local_pcp:14044kB free_cma:0kB
[  232.364392][T15390] lowmem_reserve[]: 0 0 0 0 0
[  232.366769][T15390] Node 1 DMA32 free:411672kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:12824kB local_pcp:12824kB free_cma:0kB
[  232.378812][T15390] lowmem_reserve[]: 0 0 854 854 854
[  232.381200][T15390] Node 1 Normal free:55236kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9564kB inactive_anon:0kB active_file:2616kB inactive_file:143004kB unevictable:3536kB writepending:448kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41652kB local_pcp:22348kB free_cma:0kB
[  232.393474][T15390] lowmem_reserve[]: 0 0 0 0 0
[  232.395613][T15390] Node 0 DMA: 5*4kB (UM) 5*8kB (UM) 2*16kB (UM) 4*32kB (UME) 1*64kB (M) 4*128kB (UME) 2*256kB (ME) 4*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 1*4096kB (M) = 14620kB
[  232.402679][T15390] Node 0 DMA32: 671*4kB (UME) 652*8kB (UME) 472*16kB (UME) 419*32kB (UME) 209*64kB (UME) 67*128kB (UME) 29*256kB (U) 13*512kB (UM) 12*1024kB (UME) 9*2048kB (UME) 30*4096kB (UM) = 218492kB
[  232.410227][T15390] Node 1 DMA32: 2*4kB (UM) 2*8kB (UM) 2*16kB (ME) 1*32kB (M) 1*64kB (M) 3*128kB (UME) 4*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 4*2048kB (UME) 97*4096kB (M) = 411672kB
[  232.418343][T15390] Node 1 Normal: 595*4kB (UME) 357*8kB (UME) 211*16kB (UME) 349*32kB (UME) 39*64kB (UME) 28*128kB (UM) 7*256kB (UME) 16*512kB (UME) 5*1024kB (UME) 7*2048kB (UM) 0*4096kB = 55300kB
[  232.424296][T15390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.427192][T15390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  232.430314][T15390] 42167 total pagecache pages
[  232.432976][T15390] 0 pages in swap cache
[  232.434829][T15390] Free swap  = 124996kB
[  232.436571][T15390] Total swap = 124996kB
[  232.438293][T15390] 786301 pages RAM
[  232.439803][T15390] 0 pages HighMem/MovableOnly
[  232.442957][T15390] 241331 pages reserved
[  232.444639][T15390] 0 pages cma reserved
[  232.548215][T15409] syzkaller1: entered promiscuous mode
[  232.550037][T15409] syzkaller1: entered allmulticast mode
[  232.791286][T15418] netlink: 'syz.1.2681': attribute type 4 has an invalid length.
[  232.796495][    T9] lo speed is unknown, defaulting to 1000
[  232.799512][    T9] syz1: Port: 1 Link ACTIVE
[  232.964316][T15433] netlink: 'syz.0.2686': attribute type 4 has an invalid length.
[  232.967115][T15434] netlink: 'syz.0.2686': attribute type 4 has an invalid length.
[  232.972283][  T794] lo speed is unknown, defaulting to 1000
[  232.974501][  T794] syz2: Port: 1 Link DOWN
[  233.035880][T15435] veth21: left promiscuous mode
[  233.038600][   T10] lo speed is unknown, defaulting to 1000
[  233.041324][   T10] syz1: Port: 1 Link DOWN
[  233.205885][T15452] netlink: 'syz.0.2692': attribute type 12 has an invalid length.
[  233.378605][T15464] veth0_to_team: entered promiscuous mode
[  233.380792][T15464] veth0_to_team: entered allmulticast mode
[  233.405552][T15466] netlink: 'syz.0.2697': attribute type 1 has an invalid length.
[  233.427490][T15468] netlink: 'syz.2.2698': attribute type 1 has an invalid length.
[  233.456640][T15468] 8021q: adding VLAN 0 to HW filter on device bond23
[  233.463388][T15468] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  233.473417][T15468] vlan0: entered allmulticast mode
[  233.475375][T15468] veth1: entered allmulticast mode
[  233.544014][T15472] erspan0: left allmulticast mode
[  233.546209][T15472] veth0_to_team: left promiscuous mode
[  233.547974][T15472] veth0_to_team: left allmulticast mode
[  233.552490][T15472] veth13: left promiscuous mode
[  233.613199][T15482] net_ratelimit: 33 callbacks suppressed
[  233.613211][T15482] openvswitch: netlink: Flow key attr not present in new flow.
[  233.861596][T15495] ieee802154 phy0 wpan0: encryption failed: -22
[  233.879761][T15495] ieee802154 phy0 wpan0: encryption failed: -22
[  233.888442][T15495] ieee802154 phy0 wpan0: encryption failed: -22
[  233.896288][T15495] ieee802154 phy0 wpan0: encryption failed: -22
[  233.912215][T15495] ieee802154 phy0 wpan0: encryption failed: -22
[  233.986015][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  234.040090][T15508] bond0: Device is already in use.
[  234.107600][T15515] netlink: 'syz.1.2714': attribute type 9 has an invalid length.
[  234.330336][T15534] 8021q: adding VLAN 0 to HW filter on device bond18
[  234.385068][T15534] bond18: (slave veth23): Enslaving as an active interface with a down link
[  234.406249][T15534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.409203][T15534] bond18: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  234.529514][T15559] IPVS: persistence engine module ip_vs_pe_ not found
[  234.561181][T15558] IPVS: persistence engine module ip_vs_pe_ not found
[  234.564352][T15557] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.572271][T15557] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  234.574926][T15557] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  234.580174][T15557] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  234.857262][T15609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.946456][T15619] ieee802154 phy0 wpan0: encryption failed: -126
[  235.015801][T15629] team1: entered promiscuous mode
[  235.017510][T15629] team1: entered allmulticast mode
[  235.019336][T15629] 8021q: adding VLAN 0 to HW filter on device team1
[  235.134224][T15639] pim6reg: entered allmulticast mode
[  235.137050][T15639] pim6reg: left allmulticast mode
[  235.781080][T15649] lo speed is unknown, defaulting to 1000
[  235.788884][T15649] lo speed is unknown, defaulting to 1000
[  235.999513][T15649] lo speed is unknown, defaulting to 1000
[  236.210999][T15677] __nla_validate_parse: 33 callbacks suppressed
[  236.211015][T15677] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2759'.
[  236.220736][T15679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2760'.
[  236.247146][T15677] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2759'.
[  236.273664][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2761'.
[  236.343803][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'.
[  236.349241][T15691] validate_nla: 6 callbacks suppressed
[  236.349251][T15691] netlink: 'syz.2.2763': attribute type 1 has an invalid length.
[  236.354832][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  236.358240][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2763'.
[  236.361276][T15691] openvswitch: netlink: Flow actions attr not present in new flow.
[  236.454858][T15692] netlink: 'syz.0.2762': attribute type 11 has an invalid length.
[  236.458093][T15692] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2762'.
[  236.570681][T15702] siw: device registration error -23
[  236.600361][T15701] lo speed is unknown, defaulting to 1000
[  236.611887][T15701] lo speed is unknown, defaulting to 1000
[  236.616887][T15705] netlink: 'syz.2.2767': attribute type 74 has an invalid length.
[  236.679838][T15711] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2768'.
[  236.744646][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2769'.
[  236.749690][T15714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.759511][T15714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.850061][T15701] lo speed is unknown, defaulting to 1000
[  237.625799][T15729] lo speed is unknown, defaulting to 1000
[  237.628443][T15729] lo speed is unknown, defaulting to 1000
[  237.814912][T15738] lo speed is unknown, defaulting to 1000
[  237.839698][T15745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.851994][   T10] lo speed is unknown, defaulting to 1000
[  237.853847][   T10] syz1: Port: 1 Link ACTIVE
[  237.857331][T15745] veth0_to_team: entered promiscuous mode
[  237.859157][T15745] veth0_to_team: entered allmulticast mode
[  237.863267][T15738] lo speed is unknown, defaulting to 1000
[  237.873316][T15729] lo speed is unknown, defaulting to 1000
[  237.990108][T15738] lo speed is unknown, defaulting to 1000
[  238.136405][T15763] netlink: 'syz.1.2777': attribute type 6 has an invalid length.
[  238.152755][T15761] dvmrp1: entered allmulticast mode
[  238.178009][T15763] netlink: 'syz.1.2777': attribute type 6 has an invalid length.
[  238.189554][T15763] netem: incorrect gi model size
[  238.191455][T15763] netem: change failed
[  238.496740][T15775] IPVS: Error connecting to the multicast addr
[  238.518156][T15776] IPVS: Error connecting to the multicast addr
[  238.526208][T15776] IPVS: Error connecting to the multicast addr
[  238.528382][T15776] IPVS: Error connecting to the multicast addr
[  238.531547][T15776] IPVS: Error connecting to the multicast addr
[  238.536027][T15776] IPVS: Error connecting to the multicast addr
[  238.539402][T15776] IPVS: Error connecting to the multicast addr
[  238.543734][T15776] IPVS: Error connecting to the multicast addr
[  238.545982][T15776] IPVS: Error connecting to the multicast addr
[  238.548408][T15776] IPVS: Error connecting to the multicast addr
[  238.550669][T15776] IPVS: Error connecting to the multicast addr
[  238.555904][T15776] IPVS: Error connecting to the multicast addr
[  238.558227][T15776] IPVS: Error connecting to the multicast addr
[  238.560934][T15776] IPVS: Error connecting to the multicast addr
[  238.564972][T15776] IPVS: Error connecting to the multicast addr
[  238.569558][T15776] IPVS: Error connecting to the multicast addr
[  238.579157][T15776] IPVS: Error connecting to the multicast addr
[  238.588265][T15776] IPVS: Error connecting to the multicast addr
[  238.600827][T15776] IPVS: Error connecting to the multicast addr
[  238.604348][T15776] IPVS: Error connecting to the multicast addr
[  238.607016][T15776] IPVS: Error connecting to the multicast addr
[  238.609588][T15776] IPVS: Error connecting to the multicast addr
[  238.612290][T15776] IPVS: Error connecting to the multicast addr
[  238.615338][T15776] IPVS: Error connecting to the multicast addr
[  238.621495][T15776] IPVS: Error connecting to the multicast addr
[  238.624358][T15776] IPVS: Error connecting to the multicast addr
[  239.284997][T15795] netlink: 'syz.1.2787': attribute type 8 has an invalid length.
[  239.327048][T15798] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  240.367409][T15826] ieee802154 phy0 wpan0: encryption failed: -22
[  240.401307][T15826] ieee802154 phy0 wpan0: encryption failed: -22
[  240.660322][T15852] @: renamed from veth0_vlan
[  240.796710][T15859] sctp: [Deprecated]: syz.0.2804 (pid 15859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.796710][T15859] Use struct sctp_sack_info instead
[  240.824354][T15863] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  240.828130][T15862] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  241.120687][T15891] can: request_module (can-proto-0) failed.
[  241.124172][T15891] netlink: 'syz.2.2815': attribute type 1 has an invalid length.
[  241.394503][T15915] netlink: 'syz.2.2822': attribute type 2 has an invalid length.
[  241.397706][T15915] __nla_validate_parse: 20 callbacks suppressed
[  241.397715][T15915] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2822'.
[  241.406171][T15915] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2822'.
[  241.814604][T15932] tipc: Can't bind to reserved service type 0
[  241.819692][T15932] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.977689][T15938] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.994674][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'.
[  242.002161][T15939] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  242.035844][T15942] netlink: 'syz.0.2825': attribute type 2 has an invalid length.
[  242.038321][T15942] netlink: 'syz.0.2825': attribute type 1 has an invalid length.
[  242.195343][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'.
[  242.224879][T15915] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  242.227482][T15915] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  242.236948][T15915] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  242.239283][T15915] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  242.265688][T15915] tipc: Resetting bearer <eth:syzkaller0>
[  242.363366][T15955] vxcan0: entered promiscuous mode
[  242.412697][T15959] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  242.434336][T15959] bond15: entered promiscuous mode
[  242.436323][T15959] bond15: entered allmulticast mode
[  242.438568][T15959] 8021q: adding VLAN 0 to HW filter on device bond15
[  242.511237][T15967] netlink: 'syz.2.2830': attribute type 1 has an invalid length.
[  242.583863][T15967] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  242.589673][T15967] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  242.842862][T15976] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2831'.
[  242.907818][T16000] _Z`Ԁ@: entered promiscuous mode
[  243.004606][T16018] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2838'.
[  243.060721][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'.
[  243.096410][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'.
[  243.157111][T16036] netlink: 'syz.0.2844': attribute type 1 has an invalid length.
[  243.174475][T16036] 8021q: adding VLAN 0 to HW filter on device bond16
[  243.287958][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'.
[  243.298679][T16045] netlink: 'syz.0.2847': attribute type 4 has an invalid length.
[  243.302430][T16045] netlink: 'syz.0.2847': attribute type 4 has an invalid length.
[  243.311571][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2847'.
[  243.316476][   T10] lo speed is unknown, defaulting to 1000
[  243.318808][   T10] syz2: Port: 1 Link ACTIVE
[  243.364448][T16057] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.368559][T16057] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  243.409146][T16061] netlink: 'syz.1.2851': attribute type 11 has an invalid length.
[  243.592630][T16077] netlink: 'syz.0.2854': attribute type 29 has an invalid length.
[  243.596679][T16077] netlink: 'syz.0.2854': attribute type 29 has an invalid length.
[  243.819274][   T33] audit: type=1800 audit(1755594018.707:5): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2855" name="memory.events" dev="tmpfs" ino=4990 res=0 errno=0
[  244.335881][T16109] lo speed is unknown, defaulting to 1000
[  244.338616][T16109] lo speed is unknown, defaulting to 1000
[  244.564198][T16109] lo speed is unknown, defaulting to 1000
[  244.585503][T16128] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  244.793147][T16149] erspan0: entered promiscuous mode
[  244.797760][T16149] batman_adv: batadv0: Adding interface: macvlan0
[  244.800360][T16149] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.825220][T16149] batman_adv: batadv0: Interface activated: macvlan0
[  245.207284][T16183] bond0: entered promiscuous mode
[  245.209951][T16183] bond0: left promiscuous mode
[  245.376491][T16194] vlan0: entered promiscuous mode
[  245.378610][T16194] 1{X: entered promiscuous mode
[  245.889926][T16203] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  245.894011][T16203] bond3: (slave macvlan4): Enslaving as a backup interface with a down link
[  246.070762][T16222] bridge: RTM_NEWNEIGH with invalid ether address
[  246.085435][T16223] lo speed is unknown, defaulting to 1000
[  246.088154][T16223] lo speed is unknown, defaulting to 1000
[  246.208953][T16230] lo speed is unknown, defaulting to 1000
[  246.212126][T16233] lo speed is unknown, defaulting to 1000
[  246.230785][T16233] lo speed is unknown, defaulting to 1000
[  246.242282][T16223] lo speed is unknown, defaulting to 1000
[  246.286993][T16234] veth0_to_team: left promiscuous mode
[  246.288829][T16234] veth0_to_team: left allmulticast mode
[  246.291199][T16234] tipc: Resetting bearer <eth:syzkaller0>
[  246.310208][T16234] vlan0: left promiscuous mode
[  246.315856][T16234] 1{X: left promiscuous mode
[  246.336382][ T5864] lo speed is unknown, defaulting to 1000
[  246.338218][ T5864] syz1: Port: 1 Link DOWN
[  246.360147][T16230] lo speed is unknown, defaulting to 1000
[  246.392123][T16233] lo speed is unknown, defaulting to 1000
[  246.409158][T16240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.503538][T16240] syzkaller0: entered promiscuous mode
[  246.505820][T16240] syzkaller0: entered allmulticast mode
[  246.607656][T16230] lo speed is unknown, defaulting to 1000
[  246.691399][T16246] validate_nla: 8 callbacks suppressed
[  246.691415][T16246] netlink: 'syz.1.2902': attribute type 12 has an invalid length.
[  246.697550][T16246] __nla_validate_parse: 20 callbacks suppressed
[  246.697565][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'.
[  246.759808][T16246] tipc: Resetting bearer <eth:syzkaller0>
[  246.779671][T16246] syzkaller0: left promiscuous mode
[  246.853795][T16249] 8021q: adding VLAN 0 to HW filter on device bond19
[  246.862313][T16249] team0: Port device bond19 added
[  247.138712][T16261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2907'.
[  247.180747][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'.
[  247.244591][T16277] netlink: 'syz.0.2913': attribute type 2 has an invalid length.
[  247.247033][T16277] netlink: 'syz.0.2913': attribute type 8 has an invalid length.
[  247.249426][T16277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2913'.
[  247.329486][T16273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2910'.
[  247.335627][T16273] ieee802154 phy0 wpan0: encryption failed: -126
[  247.374898][T16294] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  247.379723][T16294] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  247.549696][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'.
[  248.497032][T16302] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  248.501277][T16302] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  248.604992][T16324] lo speed is unknown, defaulting to 1000
[  248.609419][T16324] lo speed is unknown, defaulting to 1000
[  248.887106][T16343] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode
[  248.890055][T16343] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  248.967873][T16324] lo speed is unknown, defaulting to 1000
[  249.004595][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'.
[  249.011300][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'.
[  249.020304][T16333] netlink: 'syz.2.2926': attribute type 13 has an invalid length.
[  249.023879][T16333] netlink: 'syz.2.2926': attribute type 17 has an invalid length.
[  249.073783][T16333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.200037][T16351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2932'.
[  249.231897][T16351] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  249.416536][T16356] sctp: [Deprecated]: syz.2.2934 (pid 16356) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.416536][T16356] Use struct sctp_sack_info instead
[  249.476855][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'.
[  249.587360][T16370] lo speed is unknown, defaulting to 1000
[  249.589932][T16370] lo speed is unknown, defaulting to 1000
[  249.693470][T16370] lo speed is unknown, defaulting to 1000
[  250.225448][T16392] lo speed is unknown, defaulting to 1000
[  250.228231][T16392] lo speed is unknown, defaulting to 1000
[  250.357005][T16392] lo speed is unknown, defaulting to 1000
[  250.678232][   T33] audit: type=1800 audit(1755594025.567:6): pid=16406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2947" name="cgroup.controllers" dev="tmpfs" ino=4858 res=0 errno=0
[  250.852961][T16410] netlink: 'syz.1.2948': attribute type 13 has an invalid length.
[  250.855651][T16410] netlink: 'syz.1.2948': attribute type 17 has an invalid length.
[  250.879508][T16410] tipc: Resetting bearer <eth:team0>
[  250.881322][T16410] tipc: Resetting bearer <eth:team0>
[  250.886058][T16410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.891098][ T5864] lo speed is unknown, defaulting to 1000
[  250.893539][ T5864] syz1: Port: 1 Link ACTIVE
[  250.917481][T16409] lo speed is unknown, defaulting to 1000
[  250.920323][T16409] lo speed is unknown, defaulting to 1000
[  251.012588][T16409] lo speed is unknown, defaulting to 1000
[  251.869313][T16484] __nla_validate_parse: 5 callbacks suppressed
[  251.869325][T16484] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2969'.
[  251.890900][T16486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2972'.
[  251.899807][T16477] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2971'.
[  251.959136][T16489] vlan5: entered promiscuous mode
[  251.960917][T16489] vlan5: entered allmulticast mode
[  251.962897][T16489] bridge0: entered allmulticast mode
[  251.995511][T16498] netlink: 'syz.2.2976': attribute type 1 has an invalid length.
[  251.998193][T16498] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2976'.
[  252.110777][T16510] netlink: 'syz.2.2980': attribute type 9 has an invalid length.
[  252.123981][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2980'.
[  252.199128][T16513] bond0 (unregistering): Released all slaves
[  252.214158][T16515] syzkaller1: entered promiscuous mode
[  252.216693][T16515] syzkaller1: entered allmulticast mode
[  252.310213][T16520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2983'.
[  252.601290][T16542] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  252.668997][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2994'.
[  252.740527][T16559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2995'.
[  252.745359][T16559] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2995'.
[  252.748263][T16559] netlink: 'syz.2.2995': attribute type 6 has an invalid length.
[  252.750961][T16559] netlink: 'syz.2.2995': attribute type 5 has an invalid length.
[  252.754237][T16559] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2995'.
[  252.766214][T16560] bridge11: entered promiscuous mode
[  252.767954][T16560] bridge11: entered allmulticast mode
[  252.932814][T16572] 8021q: VLANs not supported on geneve0
[  253.564421][T16603] IPv6: NLM_F_REPLACE set, but no existing node found!
[  253.763375][T16614] tunl0: entered promiscuous mode
[  253.766356][T16614] tunl0: entered allmulticast mode
[  253.854093][T16625] netlink: 'syz.1.3018': attribute type 1 has an invalid length.
[  254.004196][T16642] netlink: 'syz.1.3022': attribute type 1 has an invalid length.
[  254.128420][T16645] openvswitch: netlink: Flow key attr not present in new flow.
[  254.132077][T16645] openvswitch: netlink: Flow key attr not present in new flow.
[  254.213052][T16654] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  254.367899][T16667] netlink: 'syz.0.3031': attribute type 1 has an invalid length.
[  254.387833][T16667] 8021q: adding VLAN 0 to HW filter on device bond17
[  254.408334][T16667] bond17: (slave geneve3): making interface the new active one
[  254.412926][T16667] bond17: (slave geneve3): Enslaving as an active interface with an up link
[  254.415844][ T5910] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.422436][ T5910] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.426386][ T5910] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.429658][ T5910] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.435592][T16670] gretap0: entered promiscuous mode
[  254.441506][T16670] 0{X: renamed from gretap0
[  254.447826][T16670] 0{X: left promiscuous mode
[  254.455662][T16670] 0{X: entered allmulticast mode
[  254.459138][T16670] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  254.583441][T16678] 8021q: VLANs not supported on sit0
[  254.615459][T16679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.880505][T16703] netlink: 'syz.2.3041': attribute type 9 has an invalid length.
[  255.057466][T16728] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  255.117662][T16737] netlink: 'syz.0.3049': attribute type 1 has an invalid length.
[  255.174306][T16737] lo speed is unknown, defaulting to 1000
[  255.183363][T16738] lo speed is unknown, defaulting to 1000
[  255.185679][T16737] lo speed is unknown, defaulting to 1000
[  255.313201][T16755] lo speed is unknown, defaulting to 1000
[  255.317390][T16737] lo speed is unknown, defaulting to 1000
[  255.317413][T16738] lo speed is unknown, defaulting to 1000
[  255.415987][T16753] IPv6: sit4: Disabled Multicast RS
[  255.435031][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.448312][T16738] lo speed is unknown, defaulting to 1000
[  255.448451][T16755] lo speed is unknown, defaulting to 1000
[  255.604658][T16755] lo speed is unknown, defaulting to 1000
[  255.700625][T16762] pimreg: entered allmulticast mode
[  255.814594][T16774] lo speed is unknown, defaulting to 1000
[  255.817424][T16774] lo speed is unknown, defaulting to 1000
[  256.020906][T16774] lo speed is unknown, defaulting to 1000
[  256.069203][T16783] bond0: (slave ip_vti0): refused to change device type
[  256.188021][T16789] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  256.234908][T16793] sctp: [Deprecated]: syz.2.3067 (pid 16793) Use of int in max_burst socket option deprecated.
[  256.234908][T16793] Use struct sctp_assoc_value instead
[  256.330429][T16799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.663894][T16829] netlink: 'syz.1.3076': attribute type 1 has an invalid length.
[  256.734046][T16831] lo speed is unknown, defaulting to 1000
[  256.740037][T16831] lo speed is unknown, defaulting to 1000
[  256.819178][   T57] block nbd1: Receive control failed (result -32)
[  256.906571][T16831] lo speed is unknown, defaulting to 1000
[  257.007920][T16841] tun0: tun_chr_ioctl cmd 1074025675
[  257.009620][T16841] tun0: persist enabled
[  257.012595][T16841] tun0: tun_chr_ioctl cmd 1074025675
[  257.014335][T16841] tun0: persist enabled
[  257.016795][T16841] __nla_validate_parse: 47 callbacks suppressed
[  257.016803][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'.
[  257.060870][T16849] veth0_vlan: left promiscuous mode
[  257.065407][T16849] veth0_vlan: entered promiscuous mode
[  257.095054][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'.
[  257.217666][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'.
[  257.289425][T16863] tipc: Resetting bearer <eth:team0>
[  257.309753][T16863] syzkaller0: left allmulticast mode
[  257.315943][T16863] vlan5: left promiscuous mode
[  257.317938][T16863] vlan5: left allmulticast mode
[  257.319841][T16863] bridge0: left allmulticast mode
[  257.322080][T16863] bridge11: left promiscuous mode
[  257.324174][T16863] bridge11: left allmulticast mode
[  257.336973][   T10] lo speed is unknown, defaulting to 1000
[  257.339173][   T10] syz1: Port: 1 Link DOWN
[  258.747587][T16902] netlink: 'syz.2.3094': attribute type 22 has an invalid length.
[  258.802947][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'.
[  258.805727][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'.
[  258.894997][T16925] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.898205][T16925] syzkaller0: entered promiscuous mode
[  258.900011][T16925] syzkaller0: entered allmulticast mode
[  258.939175][T16933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3103'.
[  258.989556][T16941] netlink: 'syz.1.3105': attribute type 4 has an invalid length.
[  259.091998][T16945] syzkaller1: entered allmulticast mode
[  259.160124][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  259.228276][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'.
[  259.307217][T16958] netlink: 'syz.2.3110': attribute type 11 has an invalid length.
[  259.318607][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'.
[  259.359273][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'.
[  259.709050][T16986] syzkaller1: entered promiscuous mode
[  259.711507][T16986] syzkaller1: entered allmulticast mode
[  259.834817][T16986] syzkaller1: left promiscuous mode
[  259.836597][T16986] syzkaller1: left allmulticast mode
[  259.941045][T17003] netlink: 'syz.0.3124': attribute type 2 has an invalid length.
[  260.647576][T17013] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  260.650604][T17013] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  260.929793][T17034] syzkaller1: entered promiscuous mode
[  260.936198][T17034] syzkaller1: entered allmulticast mode
[  261.066036][T17043] syzkaller0: left promiscuous mode
[  261.067706][T17043] syzkaller0: left allmulticast mode
[  261.195996][T17051] lo speed is unknown, defaulting to 1000
[  261.201287][T17051] lo speed is unknown, defaulting to 1000
[  261.208453][T17057] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.346247][T17051] lo speed is unknown, defaulting to 1000
[  261.374092][T17066] lo speed is unknown, defaulting to 1000
[  261.377625][T17066] lo speed is unknown, defaulting to 1000
[  261.503614][T17066] lo speed is unknown, defaulting to 1000
[  261.547606][T17079] vlan3: entered promiscuous mode
[  261.550074][T17079] hsr_slave_1: entered promiscuous mode
[  261.558477][T17079] vlan3: entered allmulticast mode
[  261.562560][T17079] hsr_slave_1: entered allmulticast mode
[  261.722801][T17088] sch_fq: defrate 0 ignored.
[  261.779128][T17092] netlink: 'syz.1.3150': attribute type 1 has an invalid length.
[  261.826322][T17096] netlink: 'syz.1.3152': attribute type 1 has an invalid length.
[  261.849984][T17096] bond23: (slave vxcan1): The slave device specified does not support setting the MAC address
[  261.855416][T17096] bond23: (slave vxcan1): Error -95 calling set_mac_address
[  261.875893][T17102] pimreg: left allmulticast mode
[  262.038012][T17117] syzkaller0: entered promiscuous mode
[  262.040237][T17117] syzkaller0: entered allmulticast mode
[  262.090426][T17125] __nla_validate_parse: 17 callbacks suppressed
[  262.090439][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'.
[  262.135673][T17128] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  262.140025][T17128] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  262.330068][T17139] syzkaller1: entered promiscuous mode
[  262.332452][T17139] syzkaller1: entered allmulticast mode
[  262.539857][T17149] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3168'.
[  262.711147][T17157] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3172'.
[  262.765213][T17159] netlink: 'syz.1.3173': attribute type 1 has an invalid length.
[  262.769316][T17159] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3173'.
[  263.069550][T17162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3174'.
[  263.189960][T17166] netlink: 'syz.0.3175': attribute type 1 has an invalid length.
[  263.194970][T17166] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3175'.
[  263.200377][T17166] ieee802154 phy0 wpan0: encryption failed: -126
[  263.525959][T17172] netlink: 'syz.0.3177': attribute type 12 has an invalid length.
[  263.528664][T17172] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3177'.
[  263.635769][T17176] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3179'.
[  263.645636][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  263.890985][T17193] bond18: (slave veth23): Releasing active interface
[  263.898480][T17193] bond3: (slave macvlan4): Releasing backup interface
[  263.903841][T17193] team0: Port device bond19 removed
[  264.073066][T17205] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.192544][T17207] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3187'.
[  264.266028][T17210] lo speed is unknown, defaulting to 1000
[  264.269763][T17210] lo speed is unknown, defaulting to 1000
[  264.315683][T17211] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  264.486296][T17210] lo speed is unknown, defaulting to 1000
[  264.837690][T17231] syzkaller1: entered allmulticast mode
[  264.983472][T17234] rose0: entered promiscuous mode
[  264.986449][T17234] rose0: entered allmulticast mode
[  265.115026][T17247] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[  265.134109][T17247] 8021q: adding VLAN 0 to HW filter on device bond0
[  265.188964][T17254] netlink: 'syz.0.3202': attribute type 1 has an invalid length.
[  265.701230][T17283] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  266.077838][T17311] netlink: 'syz.1.3219': attribute type 3 has an invalid length.
[  266.324362][T17333] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  266.784273][T17350] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  266.789055][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.2.3233 Not tainted syzkaller #0 PREEMPT(full) 
[  266.789075][T17350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.789085][T17350] Call Trace:
[  266.789091][T17350]  <TASK>
[  266.789102][T17350]  dump_stack_lvl+0x189/0x250
[  266.789130][T17350]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.789147][T17350]  ? __pfx__printk+0x10/0x10
[  266.789176][T17350]  ? kernfs_path_from_node+0x2f/0x290
[  266.789192][T17350]  ? kernfs_path_from_node+0x250/0x290
[  266.789209][T17350]  ? kernfs_path_from_node+0x2f/0x290
[  266.789231][T17350]  sysfs_warn_dup+0x8e/0xa0
[  266.789246][T17350]  sysfs_do_create_link_sd+0xc0/0x110
[  266.789263][T17350]  device_add_class_symlinks+0x1cf/0x240
[  266.789281][T17350]  device_add+0x475/0xb50
[  266.789298][T17350]  wiphy_register+0x1ba6/0x28d0
[  266.789331][T17350]  ? __pfx_wiphy_register+0x10/0x10
[  266.789348][T17350]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  266.789371][T17350]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  266.789396][T17350]  ieee80211_register_hw+0x3425/0x4080
[  266.789426][T17350]  ? ieee80211_register_hw+0x1411/0x4080
[  266.789447][T17350]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  266.789465][T17350]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.789491][T17350]  ? __hrtimer_setup+0x187/0x210
[  266.789504][T17350]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.789525][T17350]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  266.789564][T17350]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  266.789580][T17350]  ? trace_kmalloc+0x1f/0xd0
[  266.789596][T17350]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  266.789614][T17350]  ? kstrndup+0xbf/0x160
[  266.789646][T17350]  hwsim_new_radio_nl+0xea4/0x1b10
[  266.789665][T17350]  ? __pfx___nla_validate_parse+0x10/0x10
[  266.789699][T17350]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.789727][T17350]  ? __nla_parse+0x40/0x60
[  266.789749][T17350]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  266.789777][T17350]  genl_family_rcv_msg_doit+0x215/0x300
[  266.789799][T17350]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  266.789826][T17350]  ? bpf_lsm_capable+0x9/0x20
[  266.789843][T17350]  ? security_capable+0x7e/0x2e0
[  266.789868][T17350]  genl_rcv_msg+0x60e/0x790
[  266.789893][T17350]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.789908][T17350]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.789940][T17350]  netlink_rcv_skb+0x208/0x470
[  266.789959][T17350]  ? __lock_acquire+0xab9/0xd20
[  266.789978][T17350]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.789995][T17350]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.790060][T17350]  ? down_read+0x1ad/0x2e0
[  266.790084][T17350]  genl_rcv+0x28/0x40
[  266.790098][T17350]  netlink_unicast+0x82f/0x9e0
[  266.790124][T17350]  ? __pfx_netlink_unicast+0x10/0x10
[  266.790144][T17350]  ? netlink_sendmsg+0x642/0xb30
[  266.790166][T17350]  ? skb_put+0x11b/0x210
[  266.790188][T17350]  netlink_sendmsg+0x805/0xb30
[  266.790219][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.790242][T17350]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.790265][T17350]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.790280][T17350]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.790300][T17350]  __sock_sendmsg+0x21c/0x270
[  266.790324][T17350]  ____sys_sendmsg+0x505/0x830
[  266.790348][T17350]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.790371][T17350]  ? import_iovec+0x74/0xa0
[  266.790390][T17350]  ___sys_sendmsg+0x21f/0x2a0
[  266.790407][T17350]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.790457][T17350]  ? __fget_files+0x2a/0x420
[  266.790478][T17350]  ? __fget_files+0x3a0/0x420
[  266.790507][T17350]  __x64_sys_sendmsg+0x19b/0x260
[  266.790525][T17350]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.790549][T17350]  ? rcu_is_watching+0x15/0xb0
[  266.790570][T17350]  ? do_syscall_64+0xbe/0x3b0
[  266.790592][T17350]  do_syscall_64+0xfa/0x3b0
[  266.790611][T17350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.790623][T17350]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  266.790642][T17350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.790655][T17350] RIP: 0033:0x7fa3f138ebe9
[  266.790668][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.790684][T17350] RSP: 002b:00007fa3f2281038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.790699][T17350] RAX: ffffffffffffffda RBX: 00007fa3f15b6090 RCX: 00007fa3f138ebe9
[  266.790708][T17350] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  266.790717][T17350] RBP: 00007fa3f1411e19 R08: 0000000000000000 R09: 0000000000000000
[  266.790725][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.790732][T17350] R13: 00007fa3f15b6128 R14: 00007fa3f15b6090 R15: 00007fff275023e8
[  266.790757][T17350]  </TASK>
[  267.022309][T17354] lo speed is unknown, defaulting to 1000
[  267.025307][T17354] lo speed is unknown, defaulting to 1000
[  267.190851][T17354] lo speed is unknown, defaulting to 1000
[  267.268997][T17354] __nla_validate_parse: 11 callbacks suppressed
[  267.269039][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3234'.
[  267.274703][T17354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3234'.
[  267.279697][T17354] netlink: 'syz.2.3234': attribute type 13 has an invalid length.
[  267.282349][T17354] netlink: 'syz.2.3234': attribute type 17 has an invalid length.
[  267.289977][T17354] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  267.558769][T17389] netlink: 'syz.1.3246': attribute type 4 has an invalid length.
[  267.591575][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.597486][T17389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3246'.
[  267.614304][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.618624][T17400] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0
[  267.618679][T17397] tun0: tun_chr_ioctl cmd 2147767520
[  267.625385][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.628787][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.633503][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.636344][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.639142][T17399] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3247'.
[  267.677719][T17403] pim6reg: entered allmulticast mode
[  267.680142][T17403] pim6reg: left allmulticast mode
[  267.784679][T17407] netlink: 'syz.1.3251': attribute type 1 has an invalid length.
[  267.801951][T17407] 8021q: adding VLAN 0 to HW filter on device bond24
[  267.815717][T17407] bond24: entered promiscuous mode
[  268.694737][T17483] bond11: (slave wireguard0): Releasing backup interface
[  268.699548][T17483] bond4: (slave macvlan7): Releasing backup interface
[  268.710431][T17483] bond17: (slave geneve3): Releasing active interface
[  268.721287][ T5868] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.725082][ T5868] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.728558][ T5868] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.739965][T17482] team0: Mode changed to "broadcast"
[  268.746032][T17483] vlan0: entered promiscuous mode
[  268.749547][ T5868] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.761263][T17483] tap0: tun_chr_ioctl cmd 1074025673
[  268.775944][T17482] tap0: tun_chr_ioctl cmd 1074025675
[  268.790774][T17482] tap0: persist disabled
[  268.885875][T17489] ip6tnl4: entered promiscuous mode
[  268.887951][T17489] ip6tnl4: entered allmulticast mode
[  269.875999][T17512] 8021q: adding VLAN 0 to HW filter on device bond18
[  269.880365][T17519] bridge0: entered allmulticast mode
[  269.885449][T17519] pim6reg: entered allmulticast mode
[  269.935806][T17525] 8021q: adding VLAN 0 to HW filter on device bond19
[  270.008887][T17536] netlink: 'syz.1.3281': attribute type 1 has an invalid length.
[  270.042505][T17536] bond25: (slave bridge14): making interface the new active one
[  270.046067][T17536] bond25: (slave bridge14): Enslaving as an active interface with an up link
[  270.183386][T17542] tipc: Resetting bearer <eth:syzkaller0>
[  270.186151][T17542] syzkaller0: left promiscuous mode
[  270.188403][T17542] syzkaller0: left allmulticast mode
[  270.200137][T17542] bond24: left promiscuous mode
[  270.257519][T17547] bond25: (slave bridge14): Releasing active interface
[  270.275413][T17547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.327467][T17550] netlink: 'syz.1.3286': attribute type 1 has an invalid length.
[  270.344656][   T57] block nbd2: Receive control failed (result -32)
[  270.539532][T17563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.547457][T17564] pim6reg: entered allmulticast mode
[  270.550379][T17563] syzkaller0: entered promiscuous mode
[  270.552672][T17563] syzkaller0: entered allmulticast mode
[  270.555406][T17564] pim6reg: left allmulticast mode
[  271.816712][T17596] netlink: 'syz.2.3301': attribute type 1 has an invalid length.
[  271.966121][T17611] bond0: Device is already in use.
[  272.497203][   T56] block nbd3: Receive control failed (result -32)
[  272.636577][T17631] __nla_validate_parse: 76 callbacks suppressed
[  272.636588][T17631] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3309'.
[  272.691895][T17635] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3311'.
[  272.695086][T17635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3311'.
[  272.725409][T17640] syzkaller1: entered promiscuous mode
[  272.727280][T17640] syzkaller1: entered allmulticast mode
[  272.735197][T17637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3312'.
[  272.897417][T17649] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3315'.
[  272.901291][T17649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.912274][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'.
[  273.579075][T17691] lo speed is unknown, defaulting to 1000
[  273.583348][T17691] lo speed is unknown, defaulting to 1000
[  273.652786][T17696] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3328'.
[  273.656427][T17696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3328'.
[  273.660754][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'.
[  273.692996][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3328'.
[  273.751987][T17691] lo speed is unknown, defaulting to 1000
[  273.859301][T17709] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  274.313166][T17742] netlink: 'syz.1.3341': attribute type 1 has an invalid length.
[  274.464836][T17749] syzkaller0: Caught tx_queue_len zero misconfig
[  274.503769][T17751] netlink: 'syz.1.3344': attribute type 29 has an invalid length.
[  274.506810][T17751] netlink: 'syz.1.3344': attribute type 29 has an invalid length.
[  274.650125][T17766] smc: net device bond0 applied user defined pnetid SYZ2
[  274.654891][T17766] smc: net device bond0 erased user defined pnetid SYZ2
[  274.657822][T17766] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1
[  274.691420][T17763] lo speed is unknown, defaulting to 1000
[  274.703071][T17763] lo speed is unknown, defaulting to 1000
[  274.835928][T17763] lo speed is unknown, defaulting to 1000
[  274.910470][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.918020][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.920568][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.925067][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.928167][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.930701][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.933634][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  274.936240][T17789] openvswitch: netlink: IP tunnel dst address not specified
[  275.087910][T17806] dvmrp1: left allmulticast mode
[  275.126057][T17812] netlink: 'syz.0.3361': attribute type 3 has an invalid length.
[  275.163232][T17815] rdma_rxe: rxe_newlink: failed to add lo
[  275.168538][T17814] netlink: 'syz.1.3362': attribute type 9 has an invalid length.
[  275.192694][T17806] tunl0: left promiscuous mode
[  275.194213][T17806] tunl0: left allmulticast mode
[  275.196344][T17806] 0{X: left allmulticast mode
[  275.388875][T17834] netlink: 'syz.1.3369': attribute type 10 has an invalid length.
[  275.411338][T17834] bridge0 (unregistering): left allmulticast mode
[  276.030434][T17844] netlink: 'syz.0.3372': attribute type 5 has an invalid length.
[  276.147356][T17849] netlink: 'syz.0.3374': attribute type 1 has an invalid length.
[  276.291109][T17864] C: renamed from team_slave_0
[  276.294259][T17864] netlink: 'syz.0.3378': attribute type 2 has an invalid length.
[  276.345792][T17867] sctp: [Deprecated]: syz.2.3379 (pid 17867) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.345792][T17867] Use struct sctp_sack_info instead
[  276.369299][T17868] lo speed is unknown, defaulting to 1000
[  276.377827][T17868] lo speed is unknown, defaulting to 1000
[  276.460917][T17874] sctp: [Deprecated]: syz.0.3380 (pid 17874) Use of int in max_burst socket option.
[  276.460917][T17874] Use struct sctp_assoc_value instead
[  276.491143][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.495383][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.497891][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.500616][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.504515][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.509284][T17880] netlink: 'syz.1.3384': attribute type 2 has an invalid length.
[  276.538176][T17876] "syz.2.3382" (17876) uses obsolete ecb(arc4) skcipher
[  276.547134][T17884] NCSI netlink: No device for ifindex 0
[  276.628876][T17876] veth0_to_team: left promiscuous mode
[  276.631190][T17876] veth0_to_team: left allmulticast mode
[  276.640979][T17876] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  276.644081][T17876] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  276.655935][T17876] veth19: left promiscuous mode
[  276.662748][T17876] batman_adv: batadv0: Interface deactivated: macvlan0
[  276.696375][T17868] lo speed is unknown, defaulting to 1000
[  277.316984][T17901] bridge1: entered allmulticast mode
[  277.334894][T17897] bridge1: left allmulticast mode
[  277.462992][T17902] lo speed is unknown, defaulting to 1000
[  277.466783][T17902] lo speed is unknown, defaulting to 1000
[  277.490697][   T57] block nbd4: Receive control failed (result -32)
[  277.683871][T17902] lo speed is unknown, defaulting to 1000
[  277.844732][T17942] __nla_validate_parse: 34 callbacks suppressed
[  277.844749][T17942] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3403'.
[  277.996994][T17956] net_ratelimit: 27 callbacks suppressed
[  277.997011][T17956] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  278.047561][T17961] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3407'.
[  278.180580][T17968] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3408'.
[  278.303225][T17972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.305519][T17972] IPv6: NLM_F_CREATE should be set when creating new route
[  278.728423][T17994] siw: device registration error -23
[  278.769676][T17997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3417'.
[  278.863203][T17993] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3416'.
[  278.908923][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3420'.
[  278.911655][T18007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3420'.
[  278.916216][T18007] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  278.923779][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3421'.
[  278.927503][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3421'.
[  278.975186][T18022] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  278.977943][T18022] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  279.048083][T18029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'.
[  279.663836][T18076] 8021q: VLANs not supported on gre0
[  280.201763][T18095] openvswitch: netlink: Flow actions attr not present in new flow.
[  280.240284][   T33] audit: type=1107 audit(1755594055.127:7): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  280.281380][   T56] block nbd5: Receive control failed (result -32)
[  280.390701][T18110] 8021q: adding VLAN 0 to HW filter on device bond27
[  280.397763][T18110] bond26: (slave bond27): making interface the new active one
[  280.400930][T18110] bond26: (slave bond27): Enslaving as an active interface with an up link
[  280.420041][T18110] bond26: (slave gretap3): Enslaving as a backup interface with an up link
[  280.430234][T18110] 8021q: adding VLAN 0 to HW filter on device bond26
[  280.548564][T18129] IPVS: set_ctl: invalid protocol: 4 172.30.1.2:19999
[  280.688343][T18138] lo speed is unknown, defaulting to 1000
[  280.708812][T18138] lo speed is unknown, defaulting to 1000
[  280.816696][T18147] validate_nla: 35 callbacks suppressed
[  280.816708][T18147] netlink: 'syz.0.3460': attribute type 20 has an invalid length.
[  280.821102][T18147] netlink: 'syz.0.3460': attribute type 20 has an invalid length.
[  280.869068][T18145] netlink: 'syz.2.3459': attribute type 10 has an invalid length.
[  280.869129][T18152] netlink: 'syz.2.3459': attribute type 10 has an invalid length.
[  280.931531][T18155] ieee802154 phy0 wpan0: encryption failed: -126
[  280.957980][T18138] lo speed is unknown, defaulting to 1000
[  281.180695][T18179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.202678][T18179] syzkaller1: entered promiscuous mode
[  281.204418][T18179] syzkaller1: entered allmulticast mode
[  281.308756][T18187] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  281.341235][T18189] netlink: 'syz.1.3474': attribute type 2 has an invalid length.
[  281.349869][T18189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.357730][    T9] lo speed is unknown, defaulting to 1000
[  281.360040][    T9] syz1: Port: 1 Link ACTIVE
[  281.375909][T18189] veth0_to_team: entered promiscuous mode
[  281.377839][T18189] veth0_to_team: entered allmulticast mode
[  281.570601][T18202] netlink: 'syz.1.3478': attribute type 10 has an invalid length.
[  281.693417][   T57] block nbd6: Receive control failed (result -32)
[  281.852597][T18209] veth0_to_team: left promiscuous mode
[  281.854784][T18209] veth0_to_team: left allmulticast mode
[  281.857409][T18209] tipc: Resetting bearer <eth:syzkaller0>
[  281.859982][T18209] syzkaller0: left promiscuous mode
[  281.864695][T18209] syzkaller0: left allmulticast mode
[  281.880385][    T9] lo speed is unknown, defaulting to 1000
[  281.883433][    T9] syz1: Port: 1 Link DOWN
[  282.300829][T18237] netlink: 'syz.0.3490': attribute type 10 has an invalid length.
[  282.304520][T18243] sctp: [Deprecated]: syz.2.3492 (pid 18243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  282.304520][T18243] Use struct sctp_sack_info instead
[  283.276404][T18277] __nla_validate_parse: 20 callbacks suppressed
[  283.276415][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'.
[  283.310406][T18280] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.3501'.
[  283.310421][T18281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3501'.
[  283.317188][T18280] netlink: 'syz.0.3501': attribute type 2 has an invalid length.
[  283.319724][T18280] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3501'.
[  283.324282][T18280] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3501'.
[  283.417679][T18286] lo speed is unknown, defaulting to 1000
[  283.420433][T18286] lo speed is unknown, defaulting to 1000
[  283.503566][T18295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3506'.
[  283.506454][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'.
[  283.539024][T18303] netlink: 'syz.0.3507': attribute type 7 has an invalid length.
[  283.563479][T18286] lo speed is unknown, defaulting to 1000
[  283.568743][T18309] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3508'.
[  283.571594][T18309] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3508'.
[  283.593905][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'.
[  283.738630][T18323] IPv6: sit3: Disabled Multicast RS
[  283.741561][T18323] sit3: entered allmulticast mode
[  283.871069][T18330] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  283.914556][T18335] netlink: 'syz.1.3516': attribute type 1 has an invalid length.
[  283.953909][T18338] bond28: (slave geneve5): making interface the new active one
[  283.956852][T18338] bond28: (slave geneve5): Enslaving as an active interface with an up link
[  283.959766][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  283.963164][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  283.965891][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  283.969946][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  284.016994][T18348] pimreg: entered allmulticast mode
[  284.030641][T18348] pimreg: left allmulticast mode
[  284.148185][T17800] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.150829][T17800] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.157653][T17800] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.162559][T17800] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  284.188502][T18362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.348075][T18382] syzkaller0: entered promiscuous mode
[  284.349859][T18382] syzkaller0: entered allmulticast mode
[  284.420291][T18391] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  284.515181][T18401] tipc: Resetting bearer <eth:syzkaller0>
[  284.688325][T18427] bridge1: entered allmulticast mode
[  284.701309][T18427] bridge1: left allmulticast mode
[  284.780874][T18432] lo speed is unknown, defaulting to 1000
[  284.787676][T18432] lo speed is unknown, defaulting to 1000
[  284.920409][T18437] ieee802154 phy0 wpan0: encryption failed: -22
[  284.927381][T18432] lo speed is unknown, defaulting to 1000
[  285.051528][T18457] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  285.056893][T18457] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  285.295286][T18484] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  285.401936][T18495] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  285.433944][T18497] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  285.816745][T18515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.820064][T18515] syzkaller0: entered promiscuous mode
[  285.822704][T18515] syzkaller0: entered allmulticast mode
[  285.829986][T18514] tipc: Resetting bearer <eth:syzkaller0>
[  285.847962][T18514] tipc: Disabling bearer <eth:syzkaller0>
[  285.943025][T18517] validate_nla: 6 callbacks suppressed
[  285.943042][T18517] netlink: 'syz.0.3567': attribute type 1 has an invalid length.
[  286.451280][T18547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  286.645896][T18564] lo speed is unknown, defaulting to 1000
[  286.648614][T18564] lo speed is unknown, defaulting to 1000
[  286.726883][T18570] netlink: 'syz.2.3582': attribute type 13 has an invalid length.
[  286.732050][T18570] netlink: 'syz.2.3582': attribute type 17 has an invalid length.
[  286.751529][T18570] erspan0: left promiscuous mode
[  286.776083][T18570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.786870][T18564] lo speed is unknown, defaulting to 1000
[  286.827092][T18570] lo speed is unknown, defaulting to 1000
[  286.829709][T18570] lo speed is unknown, defaulting to 1000
[  286.994211][T18570] lo speed is unknown, defaulting to 1000
[  287.848588][T18612] pim6reg: entered allmulticast mode
[  288.463587][T18642] rose0: left promiscuous mode
[  288.465192][T18642] rose0: left allmulticast mode
[  288.491396][T18642] syzkaller1: entered promiscuous mode
[  288.494003][T18642] syzkaller1: entered allmulticast mode
[  288.992761][T18656] lo speed is unknown, defaulting to 1000
[  288.995897][T18656] lo speed is unknown, defaulting to 1000
[  289.099940][T18656] lo speed is unknown, defaulting to 1000
[  289.284801][T18674] __nla_validate_parse: 25 callbacks suppressed
[  289.284814][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'.
[  289.289786][T18673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'.
[  289.965206][T18689] batman_adv: batadv0: Removing interface: macvlan0
[  290.025420][T18692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3610'.
[  290.153501][T18680] Can't find ip_set type bitmap:ip,mac
[  290.177374][T18681] syz.0.3609: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  290.185849][T18681] CPU: 0 UID: 0 PID: 18681 Comm: syz.0.3609 Not tainted syzkaller #0 PREEMPT(full) 
[  290.185867][T18681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  290.185875][T18681] Call Trace:
[  290.185881][T18681]  <TASK>
[  290.185888][T18681]  dump_stack_lvl+0x189/0x250
[  290.185909][T18681]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.185925][T18681]  ? __pfx__printk+0x10/0x10
[  290.185945][T18681]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  290.185961][T18681]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  290.185978][T18681]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  290.185995][T18681]  warn_alloc+0x214/0x310
[  290.186019][T18681]  ? __pfx_warn_alloc+0x10/0x10
[  290.186045][T18681]  ? __get_vm_area_node+0x28f/0x300
[  290.186064][T18681]  ? hash_ip_create+0x741/0x1410
[  290.186087][T18681]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  290.186126][T18681]  ? alloc_pages_mpol+0x3cd/0x4a0
[  290.186171][T18681]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  290.186194][T18681]  ? rcu_is_watching+0x15/0xb0
[  290.186210][T18681]  ? hash_ip_create+0x741/0x1410
[  290.186229][T18681]  ? hash_ip_create+0x741/0x1410
[  290.186244][T18681]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  290.186264][T18681]  ? hash_ip_create+0x741/0x1410
[  290.186283][T18681]  ? hash_ip_create+0x6d5/0x1410
[  290.186305][T18681]  hash_ip_create+0x741/0x1410
[  290.186323][T18681]  ? __lock_acquire+0xab9/0xd20
[  290.186353][T18681]  ? __pfx_hash_ip_create+0x10/0x10
[  290.186375][T18681]  ? __nla_parse+0x40/0x60
[  290.186395][T18681]  ? __pfx_hash_ip_create+0x10/0x10
[  290.186413][T18681]  ip_set_create+0xa97/0x1940
[  290.186430][T18681]  ? ip_set_create+0x4a2/0x1940
[  290.186455][T18681]  ? __pfx_ip_set_create+0x10/0x10
[  290.186468][T18681]  ? __mutex_lock+0x5b6/0x1360
[  290.186515][T18681]  nfnetlink_rcv_msg+0xb4d/0x1130
[  290.186531][T18681]  ? __lock_acquire+0xab9/0xd20
[  290.186550][T18681]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  290.186611][T18681]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  290.186651][T18681]  ? bsearch+0x95/0xc0
[  290.186666][T18681]  ? __pfx_cmp_ex_search+0x10/0x10
[  290.186684][T18681]  ? __get_user_4+0x14/0x20
[  290.186713][T18681]  netlink_rcv_skb+0x208/0x470
[  290.186734][T18681]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  290.186752][T18681]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  290.186790][T18681]  ? bpf_lsm_capable+0x9/0x20
[  290.186807][T18681]  ? security_capable+0x7e/0x2e0
[  290.186833][T18681]  nfnetlink_rcv+0x26a/0x2520
[  290.186851][T18681]  ? is_bpf_text_address+0x26/0x2b0
[  290.186873][T18681]  ? kernel_text_address+0xa5/0xe0
[  290.186892][T18681]  ? __kernel_text_address+0xd/0x40
[  290.186909][T18681]  ? unwind_get_return_address+0x4d/0x90
[  290.186924][T18681]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  290.186941][T18681]  ? arch_stack_walk+0xfc/0x150
[  290.186970][T18681]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  290.186988][T18681]  ? stack_depot_save_flags+0x40/0x860
[  290.187010][T18681]  ? __lock_acquire+0xab9/0xd20
[  290.187051][T18681]  ? __lock_acquire+0xab9/0xd20
[  290.187078][T18681]  ? netlink_deliver_tap+0x2e/0x1b0
[  290.187102][T18681]  ? netlink_deliver_tap+0x2e/0x1b0
[  290.187128][T18681]  netlink_unicast+0x82f/0x9e0
[  290.187152][T18681]  ? __pfx_netlink_unicast+0x10/0x10
[  290.187171][T18681]  ? netlink_sendmsg+0x642/0xb30
[  290.187188][T18681]  ? skb_put+0x11b/0x210
[  290.187204][T18681]  netlink_sendmsg+0x805/0xb30
[  290.187231][T18681]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.187254][T18681]  ? aa_sock_msg_perm+0xf1/0x1d0
[  290.187276][T18681]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  290.187291][T18681]  ? __pfx_netlink_sendmsg+0x10/0x10
[  290.187310][T18681]  __sock_sendmsg+0x21c/0x270
[  290.187328][T18681]  ____sys_sendmsg+0x505/0x830
[  290.187345][T18681]  ? __pfx_____sys_sendmsg+0x10/0x10
[  290.187367][T18681]  ? import_iovec+0x74/0xa0
[  290.187384][T18681]  ___sys_sendmsg+0x21f/0x2a0
[  290.187399][T18681]  ? __pfx____sys_sendmsg+0x10/0x10
[  290.187440][T18681]  ? __fget_files+0x2a/0x420
[  290.187459][T18681]  ? __fget_files+0x3a0/0x420
[  290.187486][T18681]  __x64_sys_sendmsg+0x19b/0x260
[  290.187502][T18681]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  290.187524][T18681]  ? fput+0xa0/0xd0
[  290.187539][T18681]  ? do_syscall_64+0xbe/0x3b0
[  290.187561][T18681]  do_syscall_64+0xfa/0x3b0
[  290.187608][T18681]  ? lockdep_hardirqs_on+0x9c/0x150
[  290.187626][T18681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.187639][T18681]  ? exc_page_fault+0x9f/0xf0
[  290.187658][T18681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.187670][T18681] RIP: 0033:0x7ff79e98ebe9
[  290.187683][T18681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.187695][T18681] RSP: 002b:00007ff79f7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  290.187710][T18681] RAX: ffffffffffffffda RBX: 00007ff79ebb6090 RCX: 00007ff79e98ebe9
[  290.187719][T18681] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000005
[  290.187728][T18681] RBP: 00007ff79ea11e19 R08: 0000000000000000 R09: 0000000000000000
[  290.187735][T18681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  290.187743][T18681] R13: 00007ff79ebb6128 R14: 00007ff79ebb6090 R15: 00007ffd527ff478
[  290.187775][T18681]  </TASK>
[  290.187923][T18681] Mem-Info:
[  290.361532][T18681] active_anon:4585 inactive_anon:0 isolated_anon:0
[  290.361532][T18681]  active_file:1443 inactive_file:38305 isolated_file:0
[  290.361532][T18681]  unevictable:1768 dirty:112 writeback:0
[  290.361532][T18681]  slab_reclaimable:11061 slab_unreclaimable:219731
[  290.361532][T18681]  mapped:20205 shmem:2454 pagetables:890
[  290.361532][T18681]  sec_pagetables:0 bounce:0
[  290.361532][T18681]  kernel_misc_reclaimable:0
[  290.361532][T18681]  free:120646 free_pcp:25760 free_cma:0
[  290.380676][T18681] Node 0 active_anon:8832kB inactive_anon:0kB active_file:3152kB inactive_file:10216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27880kB dirty:132kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7108kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  290.396088][T18681] Node 1 active_anon:9508kB inactive_anon:0kB active_file:2620kB inactive_file:143004kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52940kB dirty:316kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7280kB pagetables:1560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  290.407735][T18681] Node 0 DMA free:14696kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:544kB local_pcp:196kB free_cma:0kB
[  290.418403][T18681] lowmem_reserve[]: 0 811 811 811 811
[  290.420124][T18681] Node 0 DMA32 free:190552kB boost:18432kB min:52092kB low:60504kB high:68916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8832kB inactive_anon:0kB active_file:3152kB inactive_file:10216kB unevictable:3536kB writepending:132kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:36092kB local_pcp:13548kB free_cma:0kB
[  290.430607][T18681] lowmem_reserve[]: 0 0 0 0 0
[  290.432448][T18681] Node 1 DMA32 free:210264kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:28028kB local_pcp:17672kB free_cma:0kB
[  290.442738][T18681] lowmem_reserve[]: 0 0 854 854 854
[  290.444720][T18681] Node 1 Normal free:67072kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9508kB inactive_anon:0kB active_file:2620kB inactive_file:143004kB unevictable:3536kB writepending:316kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38376kB local_pcp:20556kB free_cma:0kB
[  290.457203][T18681] lowmem_reserve[]: 0 0 0 0 0
[  290.458784][T18681] Node 0 DMA: 4*4kB (U) 5*8kB (UM) 1*16kB (U) 3*32kB (UE) 1*64kB (M) 3*128kB (UME) 1*256kB (E) 3*512kB (UME) 2*1024kB (ME) 3*2048kB (ME) 1*4096kB (M) = 14696kB
[  290.464645][T18681] Node 0 DMA32: 482*4kB (ME) 362*8kB (UME) 225*16kB (M) 285*32kB (UME) 153*64kB (UME) 63*128kB (UME) 24*256kB (UME) 11*512kB (ME) 12*1024kB (UME) 4*2048kB (M) 30*4096kB (UM) = 190536kB
[  290.470535][T18681] Node 1 DMA32: 2*4kB (UM) 3*8kB (U) 3*16kB (UME) 3*32kB (UM) 5*64kB (UM) 5*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 4*2048kB (UE) 48*4096kB (UM) = 210288kB
[  290.476185][T18681] Node 1 Normal: 529*4kB (ME) 296*8kB (UME) 130*16kB (ME) 224*32kB (UME) 273*64kB (UME) 104*128kB (UM) 30*256kB (UME) 13*512kB (UM) 6*1024kB (UME) 1*2048kB (M) 0*4096kB = 67044kB
[  290.482582][T18681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.485512][T18681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.488530][T18681] 42202 total pagecache pages
[  290.490046][T18681] 0 pages in swap cache
[  290.491390][T18681] Free swap  = 124996kB
[  290.493171][T18681] Total swap = 124996kB
[  290.494827][T18681] 786301 pages RAM
[  290.496042][T18681] 0 pages HighMem/MovableOnly
[  290.497600][T18681] 241331 pages reserved
[  290.498944][T18681] 0 pages cma reserved
[  290.641545][T18695] netlink: 'syz.2.3611': attribute type 5 has an invalid length.
[  290.678900][T18652] Set syz1 is full, maxelem 65536 reached
[  290.715393][T18698] unknown channel width for channel at 909000KHz?
[  290.722621][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'.
[  290.742725][T18700] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3613'.
[  290.786673][T18706] netlink: 'syz.1.3615': attribute type 2 has an invalid length.
[  290.791652][T18706] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3615'.
[  290.796702][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'.
[  290.839808][T18708] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  290.855873][T18711] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3617'.
[  291.298743][T18742] lo speed is unknown, defaulting to 1000
[  291.301483][T18742] lo speed is unknown, defaulting to 1000
[  291.443494][T18742] lo speed is unknown, defaulting to 1000
[  291.936253][T18733] delete_channel: no stack
[  292.030161][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'.
[  292.065276][T18761] netlink: 'syz.2.3626': attribute type 4 has an invalid length.
[  292.121576][T18766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3628'.
[  292.125867][T18770] netlink: 'syz.1.3630': attribute type 29 has an invalid length.
[  292.240652][T18772] lo speed is unknown, defaulting to 1000
[  292.245584][T18772] lo speed is unknown, defaulting to 1000
[  292.263245][T18785] ==================================================================
[  292.266252][T18785] BUG: KASAN: slab-out-of-bounds in xfrm_alloc_spi+0x570/0xf30
[  292.269040][T18785] Read of size 4 at addr ffff88801ee564c4 by task syz.1.3631/18785
[  292.272416][T18785] 
[  292.273646][T18785] CPU: 1 UID: 0 PID: 18785 Comm: syz.1.3631 Not tainted syzkaller #0 PREEMPT(full) 
[  292.273663][T18785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.273672][T18785] Call Trace:
[  292.273678][T18785]  <TASK>
[  292.273684][T18785]  dump_stack_lvl+0x189/0x250
[  292.273704][T18785]  ? __kasan_check_byte+0x12/0x40
[  292.273724][T18785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.273740][T18785]  ? lock_release+0x4b/0x3e0
[  292.273761][T18785]  ? __virt_addr_valid+0x4a5/0x5c0
[  292.273780][T18785]  print_report+0xca/0x240
[  292.273792][T18785]  ? xfrm_alloc_spi+0x570/0xf30
[  292.273806][T18785]  kasan_report+0x118/0x150
[  292.273824][T18785]  ? xfrm_alloc_spi+0x570/0xf30
[  292.273841][T18785]  xfrm_alloc_spi+0x570/0xf30
[  292.273855][T18785]  ? xfrm_alloc_spi+0x2a0/0xf30
[  292.273875][T18785]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  292.273888][T18785]  ? xfrm_find_acq+0x87/0xa0
[  292.273904][T18785]  xfrm_alloc_userspi+0x70b/0xc90
[  292.273924][T18785]  ? apparmor_capable+0x137/0x1b0
[  292.273938][T18785]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  292.273954][T18785]  ? __nla_parse+0x40/0x60
[  292.273974][T18785]  xfrm_user_rcv_msg+0x7a3/0xab0
[  292.273990][T18785]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.274017][T18785]  ? __pfx___mutex_trylock_common+0x10/0x10
[  292.274033][T18785]  ? rcu_is_watching+0x15/0xb0
[  292.274046][T18785]  ? trace_contention_end+0x39/0x120
[  292.274059][T18785]  ? __mutex_lock+0x335/0x1360
[  292.274079][T18785]  netlink_rcv_skb+0x208/0x470
[  292.274098][T18785]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.274113][T18785]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.274136][T18785]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.274153][T18785]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.274171][T18785]  xfrm_netlink_rcv+0x79/0x90
[  292.274186][T18785]  netlink_unicast+0x82f/0x9e0
[  292.274205][T18785]  ? __pfx_netlink_unicast+0x10/0x10
[  292.274221][T18785]  ? netlink_sendmsg+0x642/0xb30
[  292.274238][T18785]  ? skb_put+0x11b/0x210
[  292.274251][T18785]  netlink_sendmsg+0x805/0xb30
[  292.274272][T18785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.274291][T18785]  ? aa_sock_msg_perm+0xf1/0x1d0
[  292.274317][T18785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.274332][T18785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.274351][T18785]  __sock_sendmsg+0x21c/0x270
[  292.274369][T18785]  ____sys_sendmsg+0x505/0x830
[  292.274384][T18785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.274400][T18785]  ? import_iovec+0x74/0xa0
[  292.274415][T18785]  ___sys_sendmsg+0x21f/0x2a0
[  292.274428][T18785]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.274479][T18785]  ? __fget_files+0x2a/0x420
[  292.274500][T18785]  ? __fget_files+0x3a0/0x420
[  292.274523][T18785]  __x64_sys_sendmsg+0x19b/0x260
[  292.274537][T18785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.274554][T18785]  ? rcu_is_watching+0x15/0xb0
[  292.274567][T18785]  ? do_syscall_64+0xbe/0x3b0
[  292.274587][T18785]  do_syscall_64+0xfa/0x3b0
[  292.274604][T18785]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.274621][T18785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.274634][T18785]  ? exc_page_fault+0x9f/0xf0
[  292.274650][T18785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.274662][T18785] RIP: 0033:0x7fa9c078ebe9
[  292.274674][T18785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.274686][T18785] RSP: 002b:00007fa9c1657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.274700][T18785] RAX: ffffffffffffffda RBX: 00007fa9c09b6090 RCX: 00007fa9c078ebe9
[  292.274711][T18785] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 000000000000000c
[  292.274719][T18785] RBP: 00007fa9c0811e19 R08: 0000000000000000 R09: 0000000000000000
[  292.274728][T18785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.274736][T18785] R13: 00007fa9c09b6128 R14: 00007fa9c09b6090 R15: 00007fffde8e1738
[  292.274752][T18785]  </TASK>
[  292.274757][T18785] 
[  292.414991][T18785] Allocated by task 18652:
[  292.416705][T18785]  kasan_save_track+0x3e/0x80
[  292.418488][T18785]  __kasan_kmalloc+0x93/0xb0
[  292.420222][T18785]  __kmalloc_noprof+0x27a/0x4f0
[  292.422061][T18785]  hash_ipport4_resize+0xa20/0x1a50
[  292.424027][T18785]  call_ad+0x54d/0xb00
[  292.425580][T18785]  ip_set_ad+0x791/0x930
[  292.427164][T18785]  nfnetlink_rcv_msg+0xb4d/0x1130
[  292.429051][T18785]  netlink_rcv_skb+0x208/0x470
[  292.430854][T18785]  nfnetlink_rcv+0x26a/0x2520
[  292.432746][T18785]  netlink_unicast+0x82f/0x9e0
[  292.434558][T18785]  netlink_sendmsg+0x805/0xb30
[  292.436352][T18785]  __sock_sendmsg+0x21c/0x270
[  292.438133][T18785]  ____sys_sendmsg+0x505/0x830
[  292.439929][T18785]  ___sys_sendmsg+0x21f/0x2a0
[  292.441687][T18785]  __x64_sys_sendmsg+0x19b/0x260
[  292.443507][T18785]  do_syscall_64+0xfa/0x3b0
[  292.445195][T18785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.447401][T18785] 
[  292.448308][T18785] Freed by task 18652:
[  292.449851][T18785]  kasan_save_track+0x3e/0x80
[  292.451621][T18785]  kasan_save_free_info+0x46/0x50
[  292.453485][T18785]  __kasan_slab_free+0x5b/0x80
[  292.455257][T18785]  kfree+0x18e/0x440
[  292.456744][T18785]  hash_ipport4_resize+0xbef/0x1a50
[  292.458703][T18785]  call_ad+0x54d/0xb00
[  292.460231][T18785]  ip_set_ad+0x791/0x930
[  292.461842][T18785]  nfnetlink_rcv_msg+0xb4d/0x1130
[  292.463671][T18785]  netlink_rcv_skb+0x208/0x470
[  292.465418][T18785]  nfnetlink_rcv+0x26a/0x2520
[  292.467193][T18785]  netlink_unicast+0x82f/0x9e0
[  292.468995][T18785]  netlink_sendmsg+0x805/0xb30
[  292.470777][T18785]  __sock_sendmsg+0x21c/0x270
[  292.472488][T18785]  ____sys_sendmsg+0x505/0x830
[  292.474245][T18785]  ___sys_sendmsg+0x21f/0x2a0
[  292.476013][T18785]  __x64_sys_sendmsg+0x19b/0x260
[  292.477876][T18785]  do_syscall_64+0xfa/0x3b0
[  292.479765][T18785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.481998][T18785] 
[  292.482917][T18785] The buggy address belongs to the object at ffff88801ee56480
[  292.482917][T18785]  which belongs to the cache kmalloc-64 of size 64
[  292.487990][T18785] The buggy address is located 4 bytes to the right of
[  292.487990][T18785]  allocated 64-byte region [ffff88801ee56480, ffff88801ee564c0)
[  292.493259][T18785] 
[  292.494172][T18785] The buggy address belongs to the physical page:
[  292.496562][T18785] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ee56
[  292.499814][T18785] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  292.502456][T18785] page_type: f5(slab)
[  292.503965][T18785] raw: 00fff00000000000 ffff88801a4418c0 dead000000000122 0000000000000000
[  292.507140][T18785] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000
[  292.510272][T18785] page dumped because: kasan: bad access detected
[  292.512589][T18785] page_owner tracks the page as allocated
[  292.514637][T18785] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 18652, tgid 18651 (syz.1.3603), ts 289143163214, free_ts 281511442422
[  292.521686][T18785]  post_alloc_hook+0x240/0x2a0
[  292.523529][T18785]  get_page_from_freelist+0x21e4/0x22c0
[  292.525624][T18785]  __alloc_frozen_pages_noprof+0x181/0x370
[  292.527825][T18785]  alloc_pages_mpol+0x232/0x4a0
[  292.529673][T18785]  allocate_slab+0x8a/0x370
[  292.531371][T18785]  ___slab_alloc+0xbeb/0x1410
[  292.533169][T18785]  __kmalloc_noprof+0x305/0x4f0
[  292.535348][T18785]  hash_ipport4_resize+0xa20/0x1a50
[  292.537451][T18785]  call_ad+0x54d/0xb00
[  292.538937][T18785]  ip_set_ad+0x791/0x930
[  292.540499][T18785]  nfnetlink_rcv_msg+0xb4d/0x1130
[  292.542384][T18785]  netlink_rcv_skb+0x208/0x470
[  292.544177][T18785]  nfnetlink_rcv+0x26a/0x2520
[  292.545948][T18785]  netlink_unicast+0x82f/0x9e0
[  292.547723][T18785]  netlink_sendmsg+0x805/0xb30
[  292.549457][T18785]  __sock_sendmsg+0x21c/0x270
[  292.551180][T18785] page last free pid 28 tgid 28 stack trace:
[  292.553374][T18785]  __free_frozen_pages+0xbc4/0xd30
[  292.555299][T18785]  vfree+0x25a/0x400
[  292.556778][T18785]  bpf_map_free_deferred+0x113/0x140
[  292.558756][T18785]  process_scheduled_works+0xae1/0x17b0
[  292.560809][T18785]  worker_thread+0x8a0/0xda0
[  292.562552][T18785]  kthread+0x711/0x8a0
[  292.564075][T18785]  ret_from_fork+0x3fc/0x770
[  292.565801][T18785]  ret_from_fork_asm+0x1a/0x30
[  292.567612][T18785] 
[  292.568523][T18785] Memory state around the buggy address:
[  292.570591][T18785]  ffff88801ee56380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  292.573516][T18785]  ffff88801ee56400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  292.576371][T18785] >ffff88801ee56480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  292.579186][T18785]                                            ^
[  292.581485][T18785]  ffff88801ee56500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  292.584354][T18785]  ffff88801ee56580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  292.587328][T18785] ==================================================================
[  292.590665][T18785] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  292.593357][T18785] CPU: 1 UID: 0 PID: 18785 Comm: syz.1.3631 Not tainted syzkaller #0 PREEMPT(full) 
[  292.596786][T18785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.600529][T18785] Call Trace:
[  292.601788][T18785]  <TASK>
[  292.602913][T18785]  dump_stack_lvl+0x99/0x250
[  292.604667][T18785]  ? __asan_memcpy+0x40/0x70
[  292.606398][T18785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.608356][T18785]  ? __pfx__printk+0x10/0x10
[  292.610118][T18785]  vpanic+0x281/0x750
[  292.611641][T18785]  ? __pfx_vpanic+0x10/0x10
[  292.613350][T18785]  ? irqentry_exit+0x74/0x90
[  292.615100][T18785]  panic+0xb9/0xc0
[  292.616521][T18785]  ? __pfx_panic+0x10/0x10
[  292.618185][T18785]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  292.620392][T18785]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.622580][T18785]  ? xfrm_alloc_spi+0x570/0xf30
[  292.624320][T18785]  check_panic_on_warn+0x89/0xb0
[  292.626127][T18785]  ? xfrm_alloc_spi+0x570/0xf30
[  292.627948][T18785]  end_report+0x78/0x160
[  292.629562][T18785]  kasan_report+0x129/0x150
[  292.631304][T18785]  ? xfrm_alloc_spi+0x570/0xf30
[  292.633157][T18785]  xfrm_alloc_spi+0x570/0xf30
[  292.634926][T18785]  ? xfrm_alloc_spi+0x2a0/0xf30
[  292.636752][T18785]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  292.638691][T18785]  ? xfrm_find_acq+0x87/0xa0
[  292.640416][T18785]  xfrm_alloc_userspi+0x70b/0xc90
[  292.642337][T18785]  ? apparmor_capable+0x137/0x1b0
[  292.644200][T18785]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  292.646265][T18785]  ? __nla_parse+0x40/0x60
[  292.647945][T18785]  xfrm_user_rcv_msg+0x7a3/0xab0
[  292.649800][T18785]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.651834][T18785]  ? __pfx___mutex_trylock_common+0x10/0x10
[  292.654041][T18785]  ? rcu_is_watching+0x15/0xb0
[  292.655829][T18785]  ? trace_contention_end+0x39/0x120
[  292.657812][T18785]  ? __mutex_lock+0x335/0x1360
[  292.659612][T18785]  netlink_rcv_skb+0x208/0x470
[  292.661443][T18785]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.663494][T18785]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.665484][T18785]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.667417][T18785]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.669373][T18785]  xfrm_netlink_rcv+0x79/0x90
[  292.671181][T18785]  netlink_unicast+0x82f/0x9e0
[  292.672999][T18785]  ? __pfx_netlink_unicast+0x10/0x10
[  292.674971][T18785]  ? netlink_sendmsg+0x642/0xb30
[  292.676827][T18785]  ? skb_put+0x11b/0x210
[  292.678418][T18785]  netlink_sendmsg+0x805/0xb30
[  292.680226][T18785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.682222][T18785]  ? aa_sock_msg_perm+0xf1/0x1d0
[  292.684091][T18785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.686055][T18785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.688037][T18785]  __sock_sendmsg+0x21c/0x270
[  292.689803][T18785]  ____sys_sendmsg+0x505/0x830
[  292.691605][T18785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.693598][T18785]  ? import_iovec+0x74/0xa0
[  292.695294][T18785]  ___sys_sendmsg+0x21f/0x2a0
[  292.697046][T18785]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.698998][T18785]  ? __fget_files+0x2a/0x420
[  292.700738][T18785]  ? __fget_files+0x3a0/0x420
[  292.702522][T18785]  __x64_sys_sendmsg+0x19b/0x260
[  292.704337][T18785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.706374][T18785]  ? rcu_is_watching+0x15/0xb0
[  292.708176][T18785]  ? do_syscall_64+0xbe/0x3b0
[  292.709947][T18785]  do_syscall_64+0xfa/0x3b0
[  292.711675][T18785]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.713639][T18785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.715918][T18785]  ? exc_page_fault+0x9f/0xf0
[  292.717713][T18785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.719909][T18785] RIP: 0033:0x7fa9c078ebe9
[  292.721526][T18785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.728401][T18785] RSP: 002b:00007fa9c1657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.731370][T18785] RAX: ffffffffffffffda RBX: 00007fa9c09b6090 RCX: 00007fa9c078ebe9
[  292.734219][T18785] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 000000000000000c
[  292.736784][T18785] RBP: 00007fa9c0811e19 R08: 0000000000000000 R09: 0000000000000000
[  292.739095][T18785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.741402][T18785] R13: 00007fa9c09b6128 R14: 00007fa9c09b6090 R15: 00007fffde8e1738
[  292.743729][T18785]  </TASK>
[  292.745206][T18785] Kernel Offset: disabled
[  292.746518][T18785] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:01:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000020007 RBX=0000000000000000 RCX=000000000006075a RDX=0000000000000003
RSI=0000000000000000 RDI=ffff88801c2f5640 RBP=0000000000000000 RSP=ffffc900000f78f0
R8 =0000000000000000 R9 =ffffffff8b46e4e2 R10=dffffc0000000000 R11=ffffffff8b46e410
R12=0000000000000000 R13=0000000000000001 R14=ffff88801c2f6180 R15=0000000000000001
RIP=ffffffff819d63cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004a80 CR3=0000000122406000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fa9c0812e53
XMM06=0000000000000000 00007fa9c0812e4d XMM07=0000000000000000 00007fa9c0812e61
XMM08=0000000000000000 00007fa9c0812ee7 XMM09=0000000000000000 00007fa9c0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000013b2 RDI=00000000000013b3 RBP=ffffffff99dee630 RSP=ffffc900078e6990
R8 =ffff888020ff0237 R9 =1ffff110041fe046 R10=dffffc0000000000 R11=ffffffff854efea0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa9c16576c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555871c5808 CR3=00000000326e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa9c0987498 00007fa9c0987470 XMM03=00007fa9c09874a8 00007fa9c09874a0
XMM04=00007fa9c14ed100 00007fa9c0987460 XMM05=00007fa9c0987478 00007fa9c09874c0
XMM06=00007fa9c09874b8 00007fa9c09874b0 XMM07=00007fa9c09874a8 00007fa9c09874a0
XMM08=0000000000000000 00007fa9c0812ee7 XMM09=0000000000000000 00007fa9c0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
