last executing test programs:

3.940096146s ago: executing program 1 (id=1840):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) (async)
getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e)
sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r7, &(0x7f0000000340)="18000000", 0x4) (async)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x50, r1, 0x209, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

3.93980512s ago: executing program 1 (id=1841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000140000000090800034000000000080002400000008408000140000000000900020073797a32000000000900010073797a31000000001d0007"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000020100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000043c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80)

3.869952441s ago: executing program 1 (id=1842):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000014c0), 0x4) (async)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000014c0), 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) (async)
sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x16}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001300), 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r6, 0x402, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bb98c157c5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xe7e4f29346952575}]}, 0x44}, 0x1, 0x0, 0x0, 0x48081}, 0x4000) (async)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001300), 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, r6, 0x402, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x49}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bb98c157c5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xe7e4f29346952575}]}, 0x44}, 0x1, 0x0, 0x0, 0x48081}, 0x4000)
setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f00000007c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) (async)
getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030f00000000000000000800000014000621fe80000000000000000000000000003c"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0)

3.86847847s ago: executing program 1 (id=1844):
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r0=>0xffffffffffffffff, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x4010)

3.819978771s ago: executing program 1 (id=1845):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r1, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
r2 = socket(0xa, 0x2400000001, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf4e)
writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
r6 = accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r6)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x3, 0x20}, &(0x7f00000004c0)=0xc)

3.819309118s ago: executing program 1 (id=1846):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r4)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x34000}], 0x1)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x3c, 0x0, 0x801, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "521e04b77a"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4091}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x44000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_IFNAME={0x14}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r8, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf253000000008000300", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x24040000)

797.595203ms ago: executing program 0 (id=1859):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xc, 0x6, 0x6, 0x20, 0x1ff, 0x8]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)

797.01238ms ago: executing program 0 (id=1860):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

796.630221ms ago: executing program 0 (id=1861):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0)
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "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"}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0xc03, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7})
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40)

498.728219ms ago: executing program 2 (id=1864):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x60a, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800)

440.125969ms ago: executing program 2 (id=1865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xa, 0x3, 0x87)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="210000001600010a0000b54b91f5bdb09c7b00000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0805}, 0x40000) (async)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="210000001600010a0000b54b91f5bdb09c7b00000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0805}, 0x40000)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0x400c0)

439.984833ms ago: executing program 2 (id=1866):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="1d01", @ANYBLOB="deb1347c9c19397c4cf076723ad993cf6aadeeeb99f420c646bfe9cefda6b5", @ANYBLOB="24002d00040001"], 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0x0)

370.18699ms ago: executing program 2 (id=1867):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = accept4$llc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800)
sendto$llc(r5, &(0x7f0000000240)="1427848dcef0c2e8cb48008cbc168ee9157a0882e3747bb98b1e497bb375aa39928bc1edd0e31ee4cc4cade9408e701a9c7429a538d9ec3c6e9001193edce4fd", 0x40, 0x800, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt(r7, 0xc, 0x7, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100"], 0x74}}, 0x0)

249.60018ms ago: executing program 0 (id=1868):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x720, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8b81c520d4f41291}, 0x40800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000}, 0x640040c0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000280)=0x28)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000480)={'gre0\x00', <r9=>0x0, 0x80, 0x80, 0x8, 0x0, {{0xd, 0x4, 0x1, 0x2f, 0x34, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @private=0xa010100, {[@end, @ra={0x94, 0x4, 0x1}, @noop, @end, @lsrr={0x83, 0xb, 0x5b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @generic={0x0, 0xc, "5846dafad776be3f6b77"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', <r11=>0x0, 0x0, 0x2, 0x9, 0x9, 0x45, @mcast2, @empty, 0x40, 0x7800, 0x2d6b, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000680)={'gre0\x00', <r13=>0x0, 0x47, 0xc8, 0xab, 0x7, {{0x43, 0x4, 0x0, 0x3e, 0x10c, 0x66, 0x0, 0x6, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xbd, 0x3, 0xb, [{@multicast2, 0x4c08}, {@local, 0x2afe6644}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xaa6d}]}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0x4, "e051"}, {0x5, 0x12, "1cedd495601de378525630032495ade6"}, {0x0, 0x10, "367672352b84c9b0e8d6550fb662"}, {0x2, 0x6, "3246aeab"}, {0x6, 0xd, "1b37540131c3847ea77a38"}]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x12, "a40fc6b353c9d38a9822450650cc86cd"}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x8, "ec7e5968efeb"}, {0x7, 0x9, "9a17f6c1ef2e98"}, {0x7, 0x3, "f1"}, {0x7, 0x4, "d364"}]}, @timestamp_prespec={0x44, 0xc, 0x2f, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x12339644}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x2, [{@multicast2, 0x101}, {@empty, 0xb3}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x87, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @loopback, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x75, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}, {@remote, 0x3}, {@multicast2, 0x3}, {@rand_addr=0x64010100, 0x8}, {@multicast1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl2\x00', <r14=>0x0, 0x20, 0x10, 0x5, 0x5, {{0xd, 0x4, 0x2, 0x24, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}, {[@rr={0x7, 0x17, 0x13, [@broadcast, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102]}, @rr={0x7, 0x7, 0xb, [@broadcast]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000008c0)={'team0\x00', <r15=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vcan0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000940)={'team0\x00', <r17=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_1\x00', <r18=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl1\x00', <r19=>0x0, 0x4, 0x8, 0x6, 0x9, 0x1, @mcast1, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x10001, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a80)={'team0\x00', <r20=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', <r21=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', <r22=>0x0, 0x20, 0x80, 0xb, 0x3, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x65, 0x0, 0x8, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x1c, 0xa9, 0x0, 0x7, [0x9, 0x7, 0x52, 0x0, 0x81, 0x1]}, @rr={0x7, 0xb, 0x2a, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', <r23=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c00)={'team0\x00', <r24=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'syztnl2\x00', <r25=>0x0, 0x2f, 0x9, 0xc, 0x6, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x80, 0x8000, 0x401, 0xfffffffa}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r26=>0x0}}, 0x10)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b00)={&(0x7f0000000f00)={0xbd8, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0xff, 0x1, 0x3}, {0xfff, 0x2, 0x5, 0x4}, {0x0, 0x4, 0xfe, 0xa9f1}, {0x5, 0x1, 0x8, 0x9}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6235}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r15}, {0x27c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r26}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x138c8ad0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x890}}}]}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x40000000}, 0x40)

149.835769ms ago: executing program 0 (id=1869):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000001380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000318e00383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40080, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x8, 0x8, 0x5, 0x3, 0x40040, 0xffffffffffffffff, 0x4d5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x4}, 0x38)
r3 = socket(0x2, 0xa, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r3, 0x0, 0x4080)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, 0x0, &(0x7f0000001480))
getsockname$packet(r3, &(0x7f00000014c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001500)=0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b40)={@map=<r5=>r2, 0xf, 0x0, 0x8000, &(0x7f0000001a40)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xf, &(0x7f0000001bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001cc0)='syzkaller\x00', 0xe5, 0x7c, &(0x7f0000001d00)=""/124, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d80)={0x5, 0x8, 0x8, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[0x1, r2, r2, r3, r2, r2], 0x0, 0x10, 0x8}, 0x94)
pipe(&(0x7f0000001f00)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001f40)={0xffffffffffffffff, r6})
syz_genetlink_get_family_id$l2tp(&(0x7f0000002100), r7)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000002280)={r4, 0x1, 0x6}, 0x10)
sendto(r3, &(0x7f00000022c0)="6e6a8165fd", 0x5, 0x364711ac20cefca3, &(0x7f0000002300)=@sco, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002400)={'syztnl0\x00', &(0x7f0000002380)={'syztnl2\x00', r4, 0x2f, 0x20, 0x9, 0x9, 0x0, @loopback, @remote, 0x20, 0x8000, 0x2, 0x774b}})
syz_genetlink_get_family_id$tipc2(&(0x7f0000002480), r6)
getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000002800), &(0x7f0000002840)=0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x6, 0x28, &(0x7f00000028c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfcf7, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x6, 0x2, 0x9, 0x40, 0x8b707131d5951b10}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @jmp={0x5, 0x1, 0x9, 0x6, 0x2, 0x1, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xb, 0x2, 0x1, 0x50, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @alu={0x7, 0x0, 0x9, 0x5, 0x7, 0x80, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call]}, &(0x7f0000002a00)='syzkaller\x00', 0x0, 0x42, &(0x7f0000002a40)=""/66, 0x40f00, 0x2, '\x00', r4, 0x25, r7, 0x8, &(0x7f0000002ac0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002b00)={0x4, 0x10, 0x390, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002b40)=[r5, r2, r2], &(0x7f0000002b80)=[{0x0, 0x2, 0xb, 0x7}, {0x4, 0x4, 0x7, 0xb}, {0x0, 0x1, 0xe, 0xb}, {0x1, 0x5, 0xa, 0xc}, {0x1, 0x4, 0x8, 0x6}], 0x10, 0x4}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0x3}, {0xffe0}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

149.521266ms ago: executing program 0 (id=1870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) (async)
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @null}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4040010)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x6, 0xfff2}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) (async)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

55.878276ms ago: executing program 2 (id=1871):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000001000000000001000000000000000000000000000033"], 0xfdef)

0s ago: executing program 2 (id=1872):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x25dfdbfc, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
bind$netlink(r11, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0xa0, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10809}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_VF_PORTS={0x54, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x23}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "93ab620f4964558827d3aab3c3f24cd2"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0xfffffffffffffff4, 0x4, "010d61a6d7996778cce7a057eea3ad75"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a0feff13f0ffa5ff7afad66789b41fd"}]}]}, @IFLA_MASTER={0x0, 0xa, r15}]}, 0xa0}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r14, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x68, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x890)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

mily 0 port 8472 - 0
[   71.358871][ T8435] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.402481][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.409461][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.415695][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.420866][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.566388][ T8442] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.569195][ T8442] block nbd0: shutting down sockets
[   71.600767][ T8444] IPVS: persistence engine module ip_vs_pe_ not found
[   71.683609][ T8453] : entered promiscuous mode
[   71.706785][ T8455] nbd: illegal input index -1
[   72.639565][ T8488] __nla_validate_parse: 75 callbacks suppressed
[   72.639581][ T8488] netlink: 128 bytes leftover after parsing attributes in process `syz.2.707'.
[   72.646610][ T8488] netlink: 3 bytes leftover after parsing attributes in process `syz.2.707'.
[   72.834065][ T8498] gretap1: entered promiscuous mode
[   73.013795][ T8508] bond2: option mode: unable to set because the bond device is up
[   73.500391][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.717'.
[   73.528253][ T8530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   73.532245][ T8530] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   73.535475][ T8530] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   73.539453][ T8530] tipc: Resetting bearer <eth:syzkaller0>
[   73.938614][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'.
[   73.947191][ T8542] netlink: 216 bytes leftover after parsing attributes in process `syz.1.722'.
[   74.201449][ T8570] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.729'.
[   74.230759][ T8571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.727'.
[   74.235050][ T8571] netlink: 68 bytes leftover after parsing attributes in process `syz.0.727'.
[   74.239775][ T8576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.730'.
[   74.263014][ T8578] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.267339][ T8578] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.288106][ T8578] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.291302][ T8578] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.315297][ T8579] validate_nla: 37 callbacks suppressed
[   74.315308][ T8579] netlink: 'syz.1.731': attribute type 10 has an invalid length.
[   74.329957][ T8578] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.334113][ T8578] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.378078][ T8578] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.381178][ T8578] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.391658][ T8581] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[   74.395088][ T8581] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   74.400965][ T8581] erspan0: entered promiscuous mode
[   74.403346][ T8581] erspan0: left promiscuous mode
[   74.448359][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.451353][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.459321][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.462230][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.474130][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.477096][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.483390][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.489565][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.546639][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'.
[   74.792344][ T8648] netlink: 'syz.1.745': attribute type 83 has an invalid length.
[   74.839797][ T8657] tipc: Failed to remove unknown binding: 66,1,1/134418688:3448893524/3448893526
[   74.842813][ T8656] tipc: Failed to remove unknown binding: 66,1,1/134418688:3448893524/3448893526
[   74.847553][ T8657] tipc: Failed to remove unknown binding: 66,1,1/134418688:3448893524/3448893526
[   74.850496][ T8657] tipc: Failed to remove unknown binding: 66,1,1/134418688:3448893524/3448893526
[   74.865197][ T8660] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[   74.895594][ T8660] trusted_key: syz.1.749 sent an empty control message without MSG_MORE.
[   74.925532][ T8676] pim6reg: entered allmulticast mode
[   74.928549][ T8676] vxcan1: left allmulticast mode
[   74.930334][ T8676] pim6reg: left allmulticast mode
[   74.985452][ T8684] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.988767][ T8684] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.993418][ T8682] smc: net device bond0 applied user defined pnetid SYZ2
[   75.004057][ T8682] smc: removing net device bond0 with user defined pnetid SYZ2
[   75.008821][ T8682] bond0 (unregistering): (slave bridge0): Releasing backup interface
[   75.014687][ T8682] bond0 (unregistering): Released all slaves
[   75.029623][ T8684] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.033003][ T8684] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.106893][ T8687] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   75.118148][ T8684] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.121118][ T8684] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.148555][ T8684] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.151663][ T8684] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.155422][ T8689] netlink: 'syz.2.757': attribute type 10 has an invalid length.
[   75.213479][ T8695] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   75.271563][ T5866] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[   76.192565][ T8714] netlink: 'syz.2.765': attribute type 14 has an invalid length.
[   77.183466][ T8731] net_ratelimit: 17 callbacks suppressed
[   77.183480][ T8731] openvswitch: netlink: Flow actions attr not present in new flow.
[   77.307780][ T8743] netlink: 'syz.2.774': attribute type 1 has an invalid length.
[   77.332349][ T8750] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.368792][ T8750] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.408173][ T8750] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.447774][ T8750] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   77.493501][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.499938][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.505473][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.511040][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.901541][ T5865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.905057][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.911843][ T5865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.915316][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.923576][ T5865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.927184][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.933323][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.936600][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.004176][ T8761] __nla_validate_parse: 27 callbacks suppressed
[   78.004190][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[   78.010822][ T8761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.040429][ T8764] GUP no longer grows the stack in syz.1.782 (8764): 200000003000-20000000a000 (200000001000)
[   78.044073][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.1.782 Not tainted syzkaller #0 PREEMPT(full) 
[   78.044084][ T8764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.044088][ T8764] Call Trace:
[   78.044092][ T8764]  <TASK>
[   78.044095][ T8764]  dump_stack_lvl+0x189/0x250
[   78.044108][ T8764]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.044117][ T8764]  ? __pfx__printk+0x10/0x10
[   78.044125][ T8764]  ? find_vma+0xe7/0x160
[   78.044135][ T8764]  ? unwind_next_frame+0xa5/0x2390
[   78.044144][ T8764]  __get_user_pages+0x24d0/0x2ce0
[   78.044153][ T8764]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   78.044164][ T8764]  ? __gup_longterm_locked+0xc68/0x1660
[   78.044174][ T8764]  ? rcu_is_watching+0x15/0xb0
[   78.044182][ T8764]  __gup_longterm_locked+0xde9/0x1660
[   78.044192][ T8764]  ? sanity_check_pinned_pages+0x123a/0x1300
[   78.044201][ T8764]  gup_fast_fallback+0x1e6a/0x2010
[   78.044214][ T8764]  ? __pfx_gup_fast_fallback+0x10/0x10
[   78.044221][ T8764]  ? stack_trace_save+0x9c/0xe0
[   78.044231][ T8764]  ? pin_user_pages_fast+0x4d/0xb0
[   78.044260][ T8764]  iov_iter_extract_pages+0x35a/0x5e0
[   78.044277][ T8764]  extract_iter_to_sg+0xe46/0x24e0
[   78.044295][ T8764]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   78.044309][ T8764]  ? __asan_memset+0x22/0x50
[   78.044317][ T8764]  af_alg_get_rsgl+0x436/0x810
[   78.044328][ T8764]  aead_recvmsg+0x4cc/0x13f0
[   78.044339][ T8764]  ? rcu_is_watching+0x15/0xb0
[   78.044346][ T8764]  ? __pfx_aead_recvmsg+0x10/0x10
[   78.044355][ T8764]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   78.044363][ T8764]  ? security_socket_recvmsg+0x7e/0x2e0
[   78.044371][ T8764]  ? __pfx_aead_recvmsg+0x10/0x10
[   78.044379][ T8764]  sock_recvmsg_nosec+0x186/0x1c0
[   78.044390][ T8764]  ____sys_recvmsg+0x3aa/0x460
[   78.044398][ T8764]  ? __pfx_____sys_recvmsg+0x10/0x10
[   78.044407][ T8764]  ? import_iovec+0x74/0xa0
[   78.044415][ T8764]  ___sys_recvmsg+0x1b5/0x510
[   78.044422][ T8764]  ? __pfx____sys_recvmsg+0x10/0x10
[   78.044428][ T8764]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   78.044438][ T8764]  ? __fget_files+0x2a/0x420
[   78.044451][ T8764]  ? rcu_is_watching+0x15/0xb0
[   78.044457][ T8764]  ? lock_release+0x4b/0x3e0
[   78.044466][ T8764]  ? __might_fault+0xcc/0x130
[   78.044476][ T8764]  do_recvmmsg+0x307/0x770
[   78.044484][ T8764]  ? __pfx_do_recvmmsg+0x10/0x10
[   78.044492][ T8764]  ? __pfx_do_futex+0x10/0x10
[   78.044501][ T8764]  ? __local_bh_enable_ip+0x12d/0x1c0
[   78.044509][ T8764]  __x64_sys_recvmmsg+0x190/0x240
[   78.044517][ T8764]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   78.044525][ T8764]  ? rcu_is_watching+0x15/0xb0
[   78.044531][ T8764]  do_syscall_64+0xfa/0x3b0
[   78.044542][ T8764]  ? rcu_is_watching+0x15/0xb0
[   78.044547][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.044555][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.044561][ T8764] RIP: 0033:0x7f5ac1d8ebe9
[   78.044568][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.044574][ T8764] RSP: 002b:00007f5abfff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   78.044583][ T8764] RAX: ffffffffffffffda RBX: 00007f5ac1fc6090 RCX: 00007f5ac1d8ebe9
[   78.044588][ T8764] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[   78.044592][ T8764] RBP: 00007f5ac1e11e19 R08: 0000000000000000 R09: 0000000000000000
[   78.044596][ T8764] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   78.044600][ T8764] R13: 00007f5ac1fc6128 R14: 00007f5ac1fc6090 R15: 00007ffe0b3bd468
[   78.044608][ T8764]  </TASK>
[   78.251833][ T8782] netlink: 44 bytes leftover after parsing attributes in process `syz.2.786'.
[   78.354952][ T8794] netlink: 'syz.2.790': attribute type 2 has an invalid length.
[   78.366727][ T8794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.419853][ T8796] ieee802154 phy1 wpan1: encryption failed: -22
[   78.456636][ T8810] netlink: 84 bytes leftover after parsing attributes in process `syz.2.796'.
[   78.480069][ T8813] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.795'.
[   78.539706][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.799'.
[   78.543816][ T8825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.799'.
[   78.555721][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'.
[   78.556022][ T8828] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[   78.576713][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'.
[   78.580531][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'.
[   78.613890][ T8835] netlink: 'syz.2.802': attribute type 10 has an invalid length.
[   78.733518][ T8859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.807'.
[   78.762137][ T8862] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   78.765030][ T8862] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   78.784401][ T8849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.837746][ T8872] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.841346][ T8872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.874088][ T8876] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.902711][ T8872] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.907222][ T8872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.949674][ T8876] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.984206][ T8872] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.987687][ T8872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.994302][ T8876] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.030669][ T8872] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.033706][ T8872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.078201][ T8876] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.135433][ T5739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.143716][ T5739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.148741][ T5739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.158459][ T5739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.286575][ T8929] netlink: 'syz.2.821': attribute type 10 has an invalid length.
[   79.311494][ T8937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.311687][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.763363][ T8993] netlink: 'syz.0.828': attribute type 4 has an invalid length.
[   79.799183][ T8995] bond0: left promiscuous mode
[   79.800837][ T8995] vxcan3: left promiscuous mode
[   79.847823][ T9001] netlink: 'syz.2.827': attribute type 12 has an invalid length.
[   80.434666][ T9012] blkio.reset_stats is deprecated
[   81.063927][   T33] audit: type=1800 audit(1756672091.430:2): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.841" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1402 res=0 errno=0
[   81.268157][ T9048] netlink: 'syz.0.844': attribute type 2 has an invalid length.
[   81.312793][ T9053] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[   81.315278][ T9053] netlink: 'syz.0.845': attribute type 2 has an invalid length.
[   81.318644][ T9053] netlink: 'syz.0.845': attribute type 8 has an invalid length.
[   81.333631][ T9055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   81.336665][ T5739] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.339766][ T5739] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.350001][ T5739] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.352811][ T5739] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.362022][ T5739] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.368396][ T5739] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.371824][ T5739] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.375091][ T5739] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.539292][ T9069] batman_adv: batadv0: Adding interface: ip6gretap2
[   81.541898][ T9069] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   81.549571][ T9069] batman_adv: batadv0: Interface activated: ip6gretap2
[   81.575161][ T9076] bridge4: port 1(veth5) entered blocking state
[   81.578058][ T9076] bridge4: port 1(veth5) entered disabled state
[   81.580596][ T9076] veth5: entered allmulticast mode
[   81.583119][ T9076] veth5: entered promiscuous mode
[   81.587825][ T9076] bridge4: port 2(veth0_to_bond) entered blocking state
[   81.590430][ T9076] bridge4: port 2(veth0_to_bond) entered disabled state
[   81.593075][ T9076] veth0_to_bond: entered allmulticast mode
[   81.595761][ T9076] veth0_to_bond: entered promiscuous mode
[   81.602340][ T9076] vlan2: entered allmulticast mode
[   81.604291][ T9076] veth1: entered allmulticast mode
[   81.606563][ T9076] bridge4: port 3(vlan2) entered blocking state
[   81.609026][ T9076] bridge4: port 3(vlan2) entered disabled state
[   81.615550][ T9076] vlan2: entered promiscuous mode
[   81.625705][ T9076] veth1: entered promiscuous mode
[   82.588374][ T9132] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[   82.624343][ T9132] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.785852][ T9146] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   82.912783][ T9157] netlink: 'syz.1.871': attribute type 10 has an invalid length.
[   82.972164][ T9163] netlink: 'syz.1.874': attribute type 1 has an invalid length.
[   83.002327][ T9163] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.030071][ T9163] bond3: (slave veth5): Enslaving as an active interface with a down link
[   83.042832][ T9163] gretap2: entered promiscuous mode
[   83.055668][ T9168] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   83.115480][ T9173] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   83.260110][ T9180] veth1_macvtap: left promiscuous mode
[   83.262026][ T9180] macsec0: entered promiscuous mode
[   83.264166][ T9180] macsec0: entered allmulticast mode
[   83.272769][ T9179] veth1_macvtap: entered promiscuous mode
[   83.275119][ T9179] veth1_macvtap: entered allmulticast mode
[   83.277773][ T9179] macsec0: left promiscuous mode
[   83.279890][ T9179] macsec0: left allmulticast mode
[   83.281920][ T9179] veth1_macvtap: left allmulticast mode
[   83.361973][ T9183] netlink: 'syz.1.879': attribute type 3 has an invalid length.
[   83.364753][ T9183] __nla_validate_parse: 26 callbacks suppressed
[   83.364761][ T9183] netlink: 220 bytes leftover after parsing attributes in process `syz.1.879'.
[   83.386565][ T9185] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   83.546180][ T9197] bond2: option mode: unable to set because the bond device is up
[   83.562076][ T9197] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   83.564969][ T9197] batman_adv: batadv0: Removing interface: ip6gretap2
[   83.569712][ T9197] bond3: (slave veth5): Releasing active interface
[   83.806802][ T9206] netlink: 44 bytes leftover after parsing attributes in process `syz.2.888'.
[   83.981892][ T9278] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   84.028127][ T9289] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.070604][ T9289] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.109313][ T9289] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.158106][ T9289] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.203710][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.213717][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.221070][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.226733][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.400231][ T9461] netlink: 284 bytes leftover after parsing attributes in process `syz.1.897'.
[   84.609602][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[   84.638688][ T9487] netlink: 224 bytes leftover after parsing attributes in process `syz.0.901'.
[   84.672063][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[   84.681816][ T9490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.883374][   T55] block nbd0: Receive control failed (result -32)
[   84.928575][ T9512] validate_nla: 1 callbacks suppressed
[   84.928629][ T9512] netlink: 'syz.1.906': attribute type 1 has an invalid length.
[   85.013829][ T9521] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.910'.
[   85.017854][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'.
[   85.104501][ T9544] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   85.130427][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.913'.
[   85.162496][ T9555] netlink: 'syz.2.918': attribute type 12 has an invalid length.
[   85.163825][ T9561] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[   85.165489][ T9555] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.918'.
[   85.181340][ T9560] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   85.205275][ T9559] netlink: 'syz.1.920': attribute type 62 has an invalid length.
[   85.494038][ T9586] netlink: 'syz.1.928': attribute type 2 has an invalid length.
[   85.499687][ T9586] : entered promiscuous mode
[   85.570838][ T9600] team0: left allmulticast mode
[   85.572740][ T9600] 8021q: adding VLAN 0 to HW filter on device team0
[   85.575372][ T9600] tipc: Resetting bearer <eth:team0>
[   85.579224][ T9600] tipc: Resetting bearer <eth:team0>
[   85.582291][ T9600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.596306][ T9600] veth0_to_team: entered promiscuous mode
[   85.598764][ T9600] veth0_to_team: entered allmulticast mode
[   85.601925][ T9603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.604626][ T9603] syzkaller0: entered promiscuous mode
[   85.607028][ T9603] syzkaller0: entered allmulticast mode
[   85.627611][ T9603] tipc: Resetting bearer <eth:syzkaller0>
[   85.632383][ T9603] tipc: Disabling bearer <eth:syzkaller0>
[   85.637137][ T9605] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   85.731599][ T9610] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[   85.774885][ T9615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.091494][ T9629] erspan0: entered promiscuous mode
[   86.093977][ T9629] erspan0: left promiscuous mode
[   86.309668][ T9649] _Z`Ԁ@S!: entered promiscuous mode
[   86.393190][ T9653] IPVS: Error connecting to the multicast addr
[   86.397342][ T9653] openvswitch: netlink: Key type 4106 is out of range max 32
[   86.543061][ T9662] netlink: 'syz.0.950': attribute type 1 has an invalid length.
[   86.555054][ T9662] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.888553][ T9693] netlink: 'syz.0.958': attribute type 2 has an invalid length.
[   87.891991][ T9693] netlink: 'syz.0.958': attribute type 2 has an invalid length.
[   87.991365][ T9704] openvswitch: netlink: Flow key attr not present in new flow.
[   88.056858][ T9708] syz_tun: entered allmulticast mode
[   88.105279][ T9714] netlink: 'syz.1.965': attribute type 1 has an invalid length.
[   88.111581][ T9707] syz_tun: left allmulticast mode
[   88.207385][ T9724] veth0_to_bridge: entered promiscuous mode
[   88.209623][ T9724] veth0_to_bridge: left promiscuous mode
[   88.291045][ T9741] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.325754][ T9737] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.341432][ T9741] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.390441][ T9741] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.459312][ T9741] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.504572][ T5866] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.522274][ T5866] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.529762][ T5866] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.529834][ T9756] netlink: 'syz.1.977': attribute type 10 has an invalid length.
[   88.535480][ T5866] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.538058][ T9756] __nla_validate_parse: 17 callbacks suppressed
[   88.538065][ T9756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.977'.
[   88.549680][ T9756] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.553370][ T9756] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.915266][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'.
[   88.920180][ T9775] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   88.923344][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.332217][ T9793] vxcan1: entered allmulticast mode
[   89.335453][ T9793] vxcan1: left allmulticast mode
[   89.354170][ T9796] tipc: Resetting bearer <eth:team0>
[   89.464553][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'.
[   89.469557][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.990'.
[   89.643886][ T9818] openvswitch: netlink: Message has 4 unknown bytes.
[   90.300645][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.994'.
[   90.318552][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'.
[   90.475226][ T9835] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1000'.
[   90.479407][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1000'.
[   90.483350][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1000'.
[   90.856319][ T9842] : renamed from vlan1 (while UP)
[   90.956802][ T9853] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1005'.
[   91.057330][ T9856] validate_nla: 1 callbacks suppressed
[   91.057340][ T9856] netlink: 'syz.1.1006': attribute type 10 has an invalid length.
[   91.063656][ T9856] netlink: 'syz.1.1006': attribute type 10 has an invalid length.
[   91.124930][ T9858] bridge0: port 1(erspan0) entered blocking state
[   91.128792][ T9858] bridge0: port 1(erspan0) entered disabled state
[   91.131876][ T9858] erspan0: entered allmulticast mode
[   91.135422][ T9858] erspan0: entered promiscuous mode
[   91.140349][ T9858] bridge0: port 1(erspan0) entered blocking state
[   91.143177][ T9858] bridge0: port 1(erspan0) entered forwarding state
[   91.153324][ T9858] erspan0: left allmulticast mode
[   91.155456][ T9858] erspan0: left promiscuous mode
[   91.170285][ T9862] netlink: 'syz.2.1009': attribute type 2 has an invalid length.
[   91.174306][ T9858] bridge0: port 1(erspan0) entered disabled state
[   91.189436][ T9862] : entered promiscuous mode
[   91.850506][ T9882] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.893781][ T9884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.997209][ T9897] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.038312][ T9897] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.059174][ T9907] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.063180][ T9907] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.101534][ T9897] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.140313][ T9907] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.144542][ T9907] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.168177][ T9897] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.198767][ T9907] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.202459][ T9907] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.230190][ T9920] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   92.233324][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.266979][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.274925][ T5739] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.283246][ T5739] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.293930][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.301695][ T9898] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.310796][ T9907] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.314298][ T9907] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.338528][ T9898] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.373541][ T5865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.377041][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.384719][ T5865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.388712][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.395500][ T5865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.398843][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.402751][ T9898] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.412603][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.417296][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.448663][ T9898] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.558786][ T9940] netlink: 'syz.1.1033': attribute type 1 has an invalid length.
[   92.585395][ T9946] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   93.009942][ T9970] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   93.520597][T10014] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[   93.523928][T10014] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[   93.639798][T10021] syz.2.1056: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   93.653273][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.2.1056 Not tainted syzkaller #0 PREEMPT(full) 
[   93.653290][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.653296][T10021] Call Trace:
[   93.653301][T10021]  <TASK>
[   93.653306][T10021]  dump_stack_lvl+0x189/0x250
[   93.653325][T10021]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.653337][T10021]  ? __pfx__printk+0x10/0x10
[   93.653350][T10021]  ? lock_release+0x4b/0x3e0
[   93.653366][T10021]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   93.653379][T10021]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   93.653390][T10021]  warn_alloc+0x214/0x310
[   93.653408][T10021]  ? __pfx_warn_alloc+0x10/0x10
[   93.653427][T10021]  ? __get_vm_area_node+0x28f/0x300
[   93.653442][T10021]  ? nf_tables_newset+0x132b/0x2530
[   93.653455][T10021]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   93.653476][T10021]  ? alloc_pages_mpol+0x3cd/0x4a0
[   93.653491][T10021]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   93.653507][T10021]  ? rcu_is_watching+0x15/0xb0
[   93.653517][T10021]  ? nf_tables_newset+0x132b/0x2530
[   93.653528][T10021]  ? nf_tables_newset+0x132b/0x2530
[   93.653537][T10021]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   93.653552][T10021]  ? nf_tables_newset+0x132b/0x2530
[   93.653562][T10021]  ? nft_table_lookup+0x211/0x230
[   93.653572][T10021]  ? nft_set_lookup+0x128/0x150
[   93.653584][T10021]  ? nft_hash_privsize+0x9f/0xf0
[   93.653600][T10021]  nf_tables_newset+0x132b/0x2530
[   93.653616][T10021]  ? __pfx_nf_tables_newset+0x10/0x10
[   93.653629][T10021]  ? nfnl_pernet+0x23/0x240
[   93.653641][T10021]  ? rcu_is_watching+0x15/0xb0
[   93.653653][T10021]  ? lock_release+0x4b/0x3e0
[   93.653669][T10021]  ? __nla_parse+0x40/0x60
[   93.653685][T10021]  nfnetlink_rcv+0x1132/0x2520
[   93.653704][T10021]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   93.653720][T10021]  ? ref_tracker_free+0x63a/0x7d0
[   93.653741][T10021]  ? __netlink_deliver_tap+0x807/0x850
[   93.653756][T10021]  ? netlink_deliver_tap+0x2e/0x1b0
[   93.653771][T10021]  ? lock_release+0x4b/0x3e0
[   93.653789][T10021]  netlink_unicast+0x82f/0x9e0
[   93.653805][T10021]  ? __pfx_netlink_unicast+0x10/0x10
[   93.653820][T10021]  ? netlink_sendmsg+0x642/0xb30
[   93.653834][T10021]  ? skb_put+0x11b/0x210
[   93.653845][T10021]  netlink_sendmsg+0x805/0xb30
[   93.653862][T10021]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.653878][T10021]  ? aa_sock_msg_perm+0xf1/0x1d0
[   93.653889][T10021]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.653901][T10021]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.653915][T10021]  __sock_sendmsg+0x21c/0x270
[   93.653931][T10021]  ____sys_sendmsg+0x505/0x830
[   93.653944][T10021]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.653958][T10021]  ? import_iovec+0x74/0xa0
[   93.653971][T10021]  ___sys_sendmsg+0x21f/0x2a0
[   93.653983][T10021]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.654005][T10021]  ? __fget_files+0x2a/0x420
[   93.654019][T10021]  ? __fget_files+0x3a0/0x420
[   93.654037][T10021]  __x64_sys_sendmsg+0x19b/0x260
[   93.654050][T10021]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.654064][T10021]  ? rcu_is_watching+0x15/0xb0
[   93.654081][T10021]  ? trace_sys_enter+0x25/0x100
[   93.654126][T10021]  do_syscall_64+0xfa/0x3b0
[   93.654145][T10021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.654155][T10021]  ? exc_page_fault+0x9f/0xf0
[   93.654169][T10021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.654179][T10021] RIP: 0033:0x7f588898ebe9
[   93.654190][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.654199][T10021] RSP: 002b:00007f5889799038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.654212][T10021] RAX: ffffffffffffffda RBX: 00007f5888bc6180 RCX: 00007f588898ebe9
[   93.654220][T10021] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[   93.654227][T10021] RBP: 00007f5888a11e19 R08: 0000000000000000 R09: 0000000000000000
[   93.654234][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.654241][T10021] R13: 00007f5888bc6218 R14: 00007f5888bc6180 R15: 00007ffecde47338
[   93.654253][T10021]  </TASK>
[   93.654259][T10021] Mem-Info:
[   93.801677][T10021] active_anon:5985 inactive_anon:0 isolated_anon:0
[   93.801677][T10021]  active_file:1412 inactive_file:38243 isolated_file:0
[   93.801677][T10021]  unevictable:1768 dirty:77 writeback:0
[   93.801677][T10021]  slab_reclaimable:11091 slab_unreclaimable:85368
[   93.801677][T10021]  mapped:18395 shmem:2424 pagetables:1066
[   93.801677][T10021]  sec_pagetables:0 bounce:0
[   93.801677][T10021]  kernel_misc_reclaimable:0
[   93.801677][T10021]  free:258268 free_pcp:23925 free_cma:0
[   93.817433][T10021] Node 0 active_anon:16896kB inactive_anon:0kB active_file:2184kB inactive_file:23012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45800kB dirty:48kB writeback:0kB shmem:4676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4976kB pagetables:2500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.828631][T10021] Node 1 active_anon:7044kB inactive_anon:0kB active_file:3464kB inactive_file:129960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27780kB dirty:260kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7084kB pagetables:1764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   93.839461][T10021] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   93.849663][T10021] lowmem_reserve[]: 0 811 811 811 811
[   93.851802][T10021] Node 0 DMA32 free:302832kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16896kB inactive_anon:0kB active_file:2184kB inactive_file:23012kB unevictable:3536kB writepending:48kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:56208kB local_pcp:37056kB free_cma:0kB
[   93.863211][T10021] lowmem_reserve[]: 0 0 0 0 0
[   93.865085][T10021] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   93.875409][T10021] lowmem_reserve[]: 0 0 854 854 854
[   93.877831][T10021] Node 1 Normal free:256388kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7044kB inactive_anon:0kB active_file:3464kB inactive_file:129960kB unevictable:3536kB writepending:260kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:39536kB local_pcp:21836kB free_cma:0kB
[   93.889065][T10021] lowmem_reserve[]: 0 0 0 0 0
[   93.890833][T10021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   93.895086][T10021] Node 0 DMA32: 2*4kB (UM) 8*8kB (E) 2*16kB (ME) 11*32kB (UME) 98*64kB (UE) 29*128kB (UE) 8*256kB (U) 7*512kB (UE) 2*1024kB (U) 1*2048kB (U) 69*4096kB (UM) = 302792kB
[   93.901139][T10021] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   93.907482][T10021] Node 1 Normal: 577*4kB (UME) 468*8kB (UME) 178*16kB (UME) 126*32kB (UM) 80*64kB (UME) 40*128kB (UM) 25*256kB (UM) 15*512kB (UM) 8*1024kB (UM) 9*2048kB (UME) 47*4096kB (M) = 256388kB
[   93.914061][T10021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.918068][T10021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   93.921981][T10021] 42079 total pagecache pages
[   93.924001][T10021] 0 pages in swap cache
[   93.925576][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.925747][T10021] Free swap  = 124996kB
[   93.925755][T10021] Total swap = 124996kB
[   93.925761][T10021] 786301 pages RAM
[   93.925766][T10021] 0 pages HighMem/MovableOnly
[   93.925771][T10021] 241335 pages reserved
[   93.925775][T10021] 0 pages cma reserved
[   93.949182][ T5865] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.966246][ T5865] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.984049][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.121440][T10036] netlink: 'syz.0.1059': attribute type 2 has an invalid length.
[   94.185843][T10039] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[   94.192632][T10040] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[   94.197740][T10039] __nla_validate_parse: 21 callbacks suppressed
[   94.197749][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   94.213496][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'.
[   94.355545][T10048] netlink: 'syz.2.1065': attribute type 3 has an invalid length.
[   94.463659][T10059] tipc: Enabled bearer <eth:team0>, priority 10
[   94.558559][T10073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1074'.
[   95.210560][T10082] block nbd1: Unsupported socket: shutdown callout must be supported.
[   95.239913][T10085] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1078'.
[   95.327523][T10093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1081'.
[   95.438647][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'.
[   95.682191][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'.
[   95.687799][T10107] tipc: Enabling <ib:lo> not permitted
[   95.690291][T10107] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   95.847493][T10112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.917602][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'.
[   95.922999][T10116] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1090'.
[   96.012725][T10119] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1091'.
[   96.089003][T10130] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   96.151248][T10135] pim6reg: entered allmulticast mode
[   96.154293][T10135] pim6reg: left allmulticast mode
[   96.241943][T10138] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.287765][T10138] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.346655][T10138] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.403789][T10138] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.455225][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.463470][ T5865] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.471253][ T5865] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.480341][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.619377][T10146] openvswitch: netlink: IPv4 frag type 128 is out of range max 2
[   96.877574][T10151] validate_nla: 5 callbacks suppressed
[   96.877589][T10151] netlink: 'syz.2.1098': attribute type 2 has an invalid length.
[   97.100774][T10163] netlink: 'syz.1.1101': attribute type 11 has an invalid length.
[   97.130167][T10165] can: request_module (can-proto-0) failed.
[   97.132752][T10165] openvswitch: netlink: IP tunnel dst address not specified
[   97.169319][T10169] openvswitch: netlink: Key type 29 is not supported
[   97.220654][T10175] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.470863][T10183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   97.503468][T10193] netlink: 'syz.0.1110': attribute type 10 has an invalid length.
[   97.507034][T10193] netlink: 'syz.0.1110': attribute type 10 has an invalid length.
[   97.509662][T10193] batadv0: entered promiscuous mode
[   97.511389][T10193] batadv0: entered allmulticast mode
[   97.513272][T10193] bridge0: port 1(batadv0) entered blocking state
[   97.515407][T10193] bridge0: port 1(batadv0) entered disabled state
[   97.521034][T10194] netlink: 'syz.0.1110': attribute type 10 has an invalid length.
[   97.523927][T10194] batadv0: left allmulticast mode
[   97.525792][T10194] batadv0: left promiscuous mode
[   97.527788][T10194] bridge0: port 1(batadv0) entered disabled state
[   97.589459][T10208] netlink: 'syz.2.1115': attribute type 11 has an invalid length.
[   97.592284][T10208] netlink: 'syz.2.1115': attribute type 11 has an invalid length.
[   97.619617][T10211] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   97.622504][T10211] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.629842][T10211] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[   97.633037][T10211] tipc: Bearer <udp:syz0>: trying with adjusted priority
[   97.635844][T10211] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[   97.756026][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   98.025982][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   98.119940][T10239] openvswitch: netlink: Flow actions attr not present in new flow.
[   98.435147][T10266] netlink: 'syz.0.1126': attribute type 1 has an invalid length.
[   98.447717][T10266] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[   98.553827][T10273] netlink: 'syz.2.1127': attribute type 1 has an invalid length.
[   98.556018][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   98.560684][T10278] netlink: 'syz.0.1128': attribute type 10 has an invalid length.
[   98.571405][T10278] team0: Device hsr_slave_0 failed to register rx_handler
[   98.660832][T10289] netlink: 'syz.2.1131': attribute type 4 has an invalid length.
[   98.688749][T10290] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[   98.700427][T10292] openvswitch: netlink: IPv6 tunnel dst address is zero
[   98.720849][T10294] netlink: 'syz.2.1131': attribute type 142 has an invalid length.
[   99.490306][T10303] __nla_validate_parse: 16 callbacks suppressed
[   99.490321][T10303] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1135'.
[   99.528853][T10307] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1137'.
[   99.553909][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1139'.
[   99.614800][T10327] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1144'.
[   99.636083][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   99.664321][T10336] bond4: entered promiscuous mode
[   99.668815][T10336] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.697822][T10336] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.700494][T10336] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[   99.704616][T10336] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[   99.707488][T10341] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1149'.
[   99.713891][T10336] bond4: (slave vxcan5): making interface the new active one
[   99.717376][T10336] vxcan5: entered promiscuous mode
[   99.720186][T10336] bond4: (slave vxcan5): Enslaving as an active interface with an up link
[   99.743858][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1149'.
[   99.749623][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'.
[   99.786906][T10352] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.1151'.
[   99.863675][T10366] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1156'.
[   99.908993][T10375] veth0_to_bond: left allmulticast mode
[   99.910789][T10375] veth0_to_bond: left promiscuous mode
[   99.912728][T10375] bridge4: port 2(veth0_to_bond) entered disabled state
[   99.916834][T10375] bond0: (slave vxcan3): Releasing backup interface
[   99.921555][T10375] veth5: left allmulticast mode
[   99.923226][T10375] veth5: left promiscuous mode
[   99.924873][T10375] bridge4: port 1(veth5) entered disabled state
[   99.930776][T10375] vlan2: left promiscuous mode
[   99.933019][T10375] veth1: left promiscuous mode
[   99.935597][T10375] bridge4: port 3(vlan2) entered disabled state
[   99.942708][T10375] bond4: (slave vxcan5): Releasing backup interface
[   99.945023][T10375] vxcan5: left promiscuous mode
[  100.668809][T10387] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  100.676126][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  100.736297][T10387] nbd1: detected capacity change from 0 to 127
[  100.740413][   T55] block nbd1: Receive control failed (result -104)
[  100.746080][ T6077] block nbd1: Dead connection, failed to find a fallback
[  100.750021][ T6077] block nbd1: shutting down sockets
[  100.752858][ T6077] blk_print_req_error: 138 callbacks suppressed
[  100.752865][ T6077] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.760428][ T6077] buffer_io_error: 138 callbacks suppressed
[  100.760435][ T6077] Buffer I/O error on dev nbd1, logical block 2, async page read
[  100.769737][ T6077] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  100.773234][ T6077] Buffer I/O error on dev nbd1, logical block 3, async page read
[  100.783246][T10400] sctp: [Deprecated]: syz.2.1162 (pid 10400) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.783246][T10400] Use struct sctp_sack_info instead
[  100.810672][T10405] sch_tbf: burst 19872 is lower than device lo mtu (65503) !
[  100.881709][T10421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1168'.
[  101.044898][T10448] veth1: mtu less than device minimum
[  101.146392][T10443] sctp: [Deprecated]: syz.1.1173 (pid 10443) Use of int in max_burst socket option deprecated.
[  101.146392][T10443] Use struct sctp_assoc_value instead
[  101.161917][T10458] bond5: option mode: unable to set because the bond device is up
[  101.332083][T10491] tipc: Resetting bearer <eth:team0>
[  101.403421][T10493] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.407319][T10493] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  101.716295][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  101.939956][T10507] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.944105][T10507] bond0: (slave bond4): Enslaving as an active interface with a down link
[  102.290053][T10526] netlink: 'syz.1.1196': attribute type 11 has an invalid length.
[  102.353585][T10536] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  102.434237][T10554] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.441960][T10556] validate_nla: 10 callbacks suppressed
[  102.441969][T10556] netlink: 'syz.1.1208': attribute type 142 has an invalid length.
[  103.062262][T10567] netlink: 'syz.2.1211': attribute type 2 has an invalid length.
[  103.068672][T10567] ave_0: entered promiscuous mode
[  103.318633][T10573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  103.326598][T10575] netlink: 'syz.1.1214': attribute type 1 has an invalid length.
[  103.344697][T10575] bond5: (slave veth9): Enslaving as an active interface with a down link
[  103.351980][T10576] 8021q: adding VLAN 0 to HW filter on device bond5
[  103.379850][T10585] net_ratelimit: 3 callbacks suppressed
[  103.379863][T10585] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  103.391924][T10585] tunl0: entered promiscuous mode
[  103.401318][T10585] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  103.405564][T10588] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.409961][T10588] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.438785][T10588] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.442923][T10588] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.489111][T10588] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.493241][T10588] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.538678][T10588] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.542703][T10588] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.583570][T10570] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.587224][T10570] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.591864][T10570] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.594618][T10570] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.600879][T10570] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.604138][T10570] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.609916][T10570] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.612879][T10570] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.618339][T10589] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.621657][T10589] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.658213][T10589] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.661583][T10589] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.708209][T10589] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.711662][T10589] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.748257][T10589] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.751599][T10589] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.796043][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  104.167153][T10623] netlink: 'syz.2.1226': attribute type 23 has an invalid length.
[  104.281610][T10629] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  104.320524][T10632] batadv_slave_1: entered promiscuous mode
[  104.361168][T10631] batadv_slave_1: left promiscuous mode
[  104.365584][T10627] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  104.489852][T10656] netlink: 'syz.0.1236': attribute type 8 has an invalid length.
[  104.518065][T10659] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.578455][T10659] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.648876][T10659] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.689120][T10662] warn_alloc: 1 callbacks suppressed
[  104.689129][T10662] syz.2.1238: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  104.698281][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.2.1238 Not tainted syzkaller #0 PREEMPT(full) 
[  104.698292][T10662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.698297][T10662] Call Trace:
[  104.698300][T10662]  <TASK>
[  104.698303][T10662]  dump_stack_lvl+0x189/0x250
[  104.698315][T10662]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.698324][T10662]  ? __pfx__printk+0x10/0x10
[  104.698333][T10662]  ? lock_release+0x4b/0x3e0
[  104.698344][T10662]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  104.698352][T10662]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  104.698360][T10662]  warn_alloc+0x214/0x310
[  104.698372][T10662]  ? __pfx_warn_alloc+0x10/0x10
[  104.698383][T10662]  ? __get_vm_area_node+0x28f/0x300
[  104.698392][T10662]  ? hash_netportnet_create+0x354/0xf90
[  104.698404][T10662]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  104.698418][T10662]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  104.698428][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.698436][T10662]  ? hash_netportnet_create+0x354/0xf90
[  104.698446][T10662]  ? hash_netportnet_create+0x354/0xf90
[  104.698455][T10662]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  104.698465][T10662]  ? hash_netportnet_create+0x354/0xf90
[  104.698475][T10662]  ? hash_netportnet_create+0x2fa/0xf90
[  104.698485][T10662]  hash_netportnet_create+0x354/0xf90
[  104.698495][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.698502][T10662]  ? __nla_parse+0x40/0x60
[  104.698513][T10662]  ? __pfx_hash_netportnet_create+0x10/0x10
[  104.698523][T10662]  ip_set_create+0xa97/0x1940
[  104.698531][T10662]  ? ip_set_create+0x4a2/0x1940
[  104.698540][T10662]  ? __pfx_ip_set_create+0x10/0x10
[  104.698551][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.698557][T10662]  ? lock_release+0x4b/0x3e0
[  104.698566][T10662]  ? __nla_parse+0x40/0x60
[  104.698576][T10662]  nfnetlink_rcv_msg+0xb4d/0x1130
[  104.698585][T10662]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  104.698596][T10662]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  104.698604][T10662]  ? kasan_save_free_info+0x46/0x50
[  104.698618][T10662]  netlink_rcv_skb+0x208/0x470
[  104.698628][T10662]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  104.698636][T10662]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  104.698647][T10662]  ? bpf_lsm_capable+0x9/0x20
[  104.698657][T10662]  ? security_capable+0x7e/0x2e0
[  104.698668][T10662]  nfnetlink_rcv+0x26a/0x2520
[  104.698676][T10662]  ? __dev_queue_xmit+0x1d79/0x3b50
[  104.698686][T10662]  ? __dev_queue_xmit+0x27b/0x3b50
[  104.698695][T10662]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  104.698703][T10662]  ? __pfx___dev_queue_xmit+0x10/0x10
[  104.698712][T10662]  ? ref_tracker_free+0x63a/0x7d0
[  104.698722][T10662]  ? __asan_memcpy+0x40/0x70
[  104.698729][T10662]  ? __pfx_ref_tracker_free+0x10/0x10
[  104.698741][T10662]  ? skb_clone+0x246/0x3a0
[  104.698748][T10662]  ? __netlink_deliver_tap+0x807/0x850
[  104.698758][T10662]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.698768][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.698773][T10662]  ? netlink_deliver_tap+0x2e/0x1b0
[  104.698783][T10662]  ? lock_release+0x4b/0x3e0
[  104.698794][T10662]  netlink_unicast+0x82f/0x9e0
[  104.698803][T10662]  ? __pfx_netlink_unicast+0x10/0x10
[  104.698812][T10662]  ? netlink_sendmsg+0x642/0xb30
[  104.698821][T10662]  ? skb_put+0x11b/0x210
[  104.698828][T10662]  netlink_sendmsg+0x805/0xb30
[  104.698839][T10662]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.698848][T10662]  ? futex_unqueue+0x22/0x240
[  104.698856][T10662]  ? aa_sock_msg_perm+0xf1/0x1d0
[  104.698862][T10662]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  104.698869][T10662]  ? __pfx_netlink_sendmsg+0x10/0x10
[  104.698879][T10662]  __sock_sendmsg+0x21c/0x270
[  104.698888][T10662]  ____sys_sendmsg+0x505/0x830
[  104.698895][T10662]  ? __pfx_____sys_sendmsg+0x10/0x10
[  104.698903][T10662]  ? import_iovec+0x74/0xa0
[  104.698911][T10662]  ___sys_sendmsg+0x21f/0x2a0
[  104.698918][T10662]  ? __pfx____sys_sendmsg+0x10/0x10
[  104.698926][T10662]  ? futex_wait+0x285/0x360
[  104.698939][T10662]  ? __fget_files+0x2a/0x420
[  104.698949][T10662]  ? __fget_files+0x3a0/0x420
[  104.698960][T10662]  __x64_sys_sendmsg+0x19b/0x260
[  104.698967][T10662]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  104.698975][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.698982][T10662]  ? rcu_is_watching+0x15/0xb0
[  104.699021][T10662]  do_syscall_64+0xfa/0x3b0
[  104.699033][T10662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.699040][T10662]  ? exc_page_fault+0x9f/0xf0
[  104.699049][T10662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.699055][T10662] RIP: 0033:0x7f588898ebe9
[  104.699062][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.699069][T10662] RSP: 002b:00007f58897db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  104.699077][T10662] RAX: ffffffffffffffda RBX: 00007f5888bc5fa0 RCX: 00007f588898ebe9
[  104.699082][T10662] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  104.699087][T10662] RBP: 00007f5888a11e19 R08: 0000000000000000 R09: 0000000000000000
[  104.699091][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.699096][T10662] R13: 00007f5888bc6038 R14: 00007f5888bc5fa0 R15: 00007ffecde47338
[  104.699103][T10662]  </TASK>
[  104.699106][T10662] Mem-Info:
[  104.836077][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  104.880809][T10662] active_anon:6014 inactive_anon:0 isolated_anon:0
[  104.880809][T10662]  active_file:1412 inactive_file:38248 isolated_file:0
[  104.880809][T10662]  unevictable:1768 dirty:75 writeback:0
[  104.880809][T10662]  slab_reclaimable:11175 slab_unreclaimable:86306
[  104.880809][T10662]  mapped:18379 shmem:2437 pagetables:1073
[  104.880809][T10662]  sec_pagetables:0 bounce:0
[  104.880809][T10662]  kernel_misc_reclaimable:0
[  104.880809][T10662]  free:266091 free_pcp:16768 free_cma:0
[  104.881699][T10659] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.898914][T10662] Node 0 active_anon:16944kB inactive_anon:0kB active_file:2184kB inactive_file:23016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45840kB dirty:32kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5088kB pagetables:2544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.913856][T10662] Node 1 active_anon:7112kB inactive_anon:0kB active_file:3464kB inactive_file:129976kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27676kB dirty:268kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6984kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  104.926733][T10662] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.938233][T10662] lowmem_reserve[]: 0 811 811 811 811
[  104.940361][T10662] Node 0 DMA32 free:328788kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16944kB inactive_anon:0kB active_file:2184kB inactive_file:23016kB unevictable:3536kB writepending:32kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:38276kB local_pcp:17176kB free_cma:0kB
[  104.951264][T10662] lowmem_reserve[]: 0 0 0 0 0
[  104.952905][T10662] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  104.963022][T10662] lowmem_reserve[]: 0 0 854 854 854
[  104.965277][T10662] Node 1 Normal free:261724kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7112kB inactive_anon:0kB active_file:3464kB inactive_file:129976kB unevictable:3536kB writepending:268kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29084kB local_pcp:12268kB free_cma:0kB
[  104.977500][T10662] lowmem_reserve[]: 0 0 0 0 0
[  104.979517][T10662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  104.984673][T10662] Node 0 DMA32: 443*4kB (UM) 227*8kB (M) 223*16kB (UM) 292*32kB (UM) 116*64kB (UM) 46*128kB (UME) 18*256kB (UM) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 70*4096kB (UM) = 328820kB
[  104.990889][T10662] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  104.997097][T10662] Node 1 Normal: 397*4kB (UME) 324*8kB (UM) 186*16kB (UME) 301*32kB (UME) 105*64kB (UME) 45*128kB (UM) 26*256kB (UM) 15*512kB (ME) 9*1024kB (UME) 8*2048kB (UM) 47*4096kB (M) = 261716kB
[  105.001556][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.002886][T10662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.002894][T10662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  105.002900][T10662] 42097 total pagecache pages
[  105.002903][T10662] 0 pages in swap cache
[  105.002906][T10662] Free swap  = 124996kB
[  105.002909][T10662] Total swap = 124996kB
[  105.002913][T10662] 786301 pages RAM
[  105.002915][T10662] 0 pages HighMem/MovableOnly
[  105.002918][T10662] 241335 pages reserved
[  105.002921][T10662] 0 pages cma reserved
[  105.028916][T10570] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.034718][T10570] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.044399][T10570] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.150157][T10683] netlink: 'syz.2.1243': attribute type 1 has an invalid length.
[  105.152923][T10683] __nla_validate_parse: 14 callbacks suppressed
[  105.152931][T10683] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1243'.
[  105.177829][T10685] netlink: 'syz.2.1244': attribute type 3 has an invalid length.
[  105.180718][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'.
[  105.876276][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  105.956766][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.979406][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  105.982793][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'.
[  106.253476][T10731] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  106.408320][T10737] netlink: 'syz.2.1259': attribute type 2 has an invalid length.
[  106.412059][T10737] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1259'.
[  106.437879][T10739] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  106.449796][T10739] smc: adding net device bond0 with user defined pnetid SYZ2
[  106.459731][T10739] bond0: (slave bridge3): making interface the new active one
[  106.463275][T10739] bond0: (slave bridge3): Enslaving as an active interface with an up link
[  106.582783][T10746] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  106.593909][T10746] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.602261][T10746] erspan0: entered allmulticast mode
[  106.611156][T10746] bond6: (slave erspan0): making interface the new active one
[  106.615526][T10746] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  106.855824][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1266'.
[  106.861807][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'.
[  106.866467][T10763] vlan0: entered promiscuous mode
[  106.871373][T10763] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  106.916053][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  107.203839][ T5865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.207282][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.217820][ T5865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.220700][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.237728][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.240408][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.243077][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.247138][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.283279][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1276'.
[  107.450986][T10813] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20004
[  107.491911][T10815] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1284'.
[  107.575294][T10828] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  107.579513][T10828] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1288'.
[  107.583079][T10831] netlink: 'syz.0.1289': attribute type 3 has an invalid length.
[  107.589993][T10831] netlink: 'syz.0.1289': attribute type 1 has an invalid length.
[  107.594571][T10831] NCSI netlink: No device for ifindex 0
[  107.643241][T10837] netlink: 'syz.1.1292': attribute type 2 has an invalid length.
[  107.667722][T10839] 8021q: VLANs not supported on sit0
[  107.956099][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  108.479150][T10858] _Z`Ԁ@S!: entered promiscuous mode
[  108.504278][T10863] netlink: 'syz.0.1299': attribute type 1 has an invalid length.
[  108.517431][T10863] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.534742][T10863] bond5: (slave veth7): Enslaving as an active interface with a down link
[  108.551430][T10863] macvlan2: entered promiscuous mode
[  108.558583][T10863] macvlan2: entered allmulticast mode
[  108.561278][T10863] bond5: entered promiscuous mode
[  108.563734][T10863] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.568355][T10863] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  108.575107][T10863] bond5: left promiscuous mode
[  108.767511][T10888] tipc: New replicast peer: 255.255.255.255
[  108.769655][T10888] tipc: Enabled bearer <udp:s>, priority 10
[  108.791989][T10890] tipc: Enabled bearer <udp:syz0>, priority 10
[  108.856979][T10896] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.860232][T10896] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.888405][T10896] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.891768][T10896] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.908534][ T5235] Bluetooth: hci2: link tx timeout
[  108.910446][ T5235] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  108.913073][ T5235] Bluetooth: hci2: link tx timeout
[  108.914769][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.938267][T10896] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.941392][T10896] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.979839][T10896] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.984003][T10896] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.996090][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  109.170057][T10899] vxlan0: entered promiscuous mode
[  109.172066][T10899] team0: Port device vxlan0 added
[  109.174116][ T5866] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.178186][ T5866] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.183463][ T5866] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.187876][ T5866] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.214078][T10901] netlink: ct family unspecified
[  109.215777][T10901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.314193][T10908] netlink: 'syz.2.1310': attribute type 10 has an invalid length.
[  109.322429][T10908] dummy0: entered promiscuous mode
[  109.324513][T10908] team0: Port device dummy0 added
[  109.330168][T10908] netlink: 'syz.2.1310': attribute type 10 has an invalid length.
[  109.335427][T10908] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.341352][T10908] team0: Failed to send options change via netlink (err -105)
[  109.344441][T10908] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.348761][T10908] team0: Port device dummy0 removed
[  110.046175][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  110.214087][T10932] __nla_validate_parse: 12 callbacks suppressed
[  110.214103][T10932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1316'.
[  110.236344][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  110.239191][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'.
[  110.242194][T10932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'.
[  110.245124][T10932] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1316'.
[  110.248930][T10932] netlink: 'syz.2.1316': attribute type 10 has an invalid length.
[  110.348262][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'.
[  110.352043][T10936] openvswitch: netlink: Missing valid actions attribute.
[  110.355013][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.394414][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'.
[  110.398036][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'.
[  110.402627][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'.
[  110.424823][T10945] vxcan1: entered allmulticast mode
[  110.428227][T10945] vxcan1: left allmulticast mode
[  110.499688][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'.
[  110.531977][   T33] audit: type=1800 audit(1756672120.900:3): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1323" name="memory.events" dev="tmpfs" ino=2254 res=0 errno=0
[  110.567055][T10956] bpq0: left promiscuous mode
[  110.573503][T10956] nbd: must specify at least one socket
[  110.710015][ T5865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.713483][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.720264][ T5865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.723667][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.731568][ T5865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.734996][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.741625][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.744685][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.782674][T10971] netlink: 'syz.0.1328': attribute type 1 has an invalid length.
[  110.795637][T10978] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  110.996008][ T5235] Bluetooth: hci2: command 0x0419 tx timeout
[  111.007293][T10982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.076076][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.176366][T10997] netlink: 'syz.2.1335': attribute type 10 has an invalid length.
[  111.198191][T10999] bond0: option coupled_control: mode dependency failed, not supported in mode balance-tlb(5)
[  111.218054][T11001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.221059][T11001] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  111.223421][T11001] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  111.307669][T11008] openvswitch: netlink: Flow key attr not present in new flow.
[  111.437582][T11017] veth1_to_bond: entered allmulticast mode
[  111.450421][T11017] veth1_to_bond (unregistering): left allmulticast mode
[  111.516328][T11021] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.551354][T11021] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.578587][T11021] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.630881][T11021] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.688992][T10570] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.697142][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.704567][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.712341][T10570] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.754655][T11050] NCSI netlink: No device for ifindex 0
[  111.952031][T11095] : entered promiscuous mode
[  112.176985][T11112] tipc: Resetting bearer <eth:syzkaller0>
[  112.323345][T11128] netlink: 'syz.0.1366': attribute type 11 has an invalid length.
[  112.450656][T11147] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  112.505239][T11163] netlink: 'syz.0.1370': attribute type 11 has an invalid length.
[  112.561434][T11169] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  112.564611][T11169] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  112.728740][T11189] block nbd2: not configured, cannot reconfigure
[  112.993095][T11225] validate_nla: 7 callbacks suppressed
[  112.993110][T11225] netlink: 'syz.1.1387': attribute type 1 has an invalid length.
[  113.020321][T11225] 8021q: adding VLAN 0 to HW filter on device bond6
[  113.028269][T11225] vlan1: entered promiscuous mode
[  113.030351][T11225] bond6: entered promiscuous mode
[  113.032416][T11225] vlan1: entered allmulticast mode
[  113.034530][T11225] bond6: entered allmulticast mode
[  113.070383][T11231] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  113.076409][ T6348] Bluetooth: hci2: command 0x0419 tx timeout
[  113.089988][T11231] gretap2: entered allmulticast mode
[  113.093657][T11231] bond8: (slave gretap2): making interface the new active one
[  113.097384][T11231] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  113.180786][T11252] vlan0: entered promiscuous mode
[  113.224927][T11259] netlink: 'syz.1.1396': attribute type 13 has an invalid length.
[  113.227962][T11259] netlink: 'syz.1.1396': attribute type 17 has an invalid length.
[  113.261771][T11266] netlink: 'syz.1.1398': attribute type 1 has an invalid length.
[  114.131784][T11314] net_ratelimit: 11 callbacks suppressed
[  114.131797][T11314] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  114.196125][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  114.278730][T11324] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  114.281736][T11324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.675765][T11347] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  114.680234][T11347] tipc: Bearer <udp:s>: trying with adjusted priority
[  114.683331][T11347] tipc: Enabled bearer <udp:s>, priority 9
[  114.685288][T11348] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  115.176308][T11383] netlink: 'syz.0.1430': attribute type 1 has an invalid length.
[  115.198671][T11384] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  115.201418][T11384] dummy0: left promiscuous mode
[  115.204619][T11384] dummy0: entered promiscuous mode
[  115.212834][T11384] team0: Port device dummy0 added
[  115.217782][T11384] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  115.225203][T11384] team0: Port device dummy0 removed
[  115.236089][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  115.265587][T11390] __nla_validate_parse: 37 callbacks suppressed
[  115.265600][T11390] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1432'.
[  115.278268][T11390] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  115.291030][T11390] 8021q: adding VLAN 0 to HW filter on device bond9
[  115.293830][T11390] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  115.305030][T11390] 8021q: adding VLAN 0 to HW filter on device bond10
[  115.313763][T11390] 8021q: adding VLAN 0 to HW filter on device bond11
[  115.428213][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'.
[  115.433710][T11406] bridge6: entered promiscuous mode
[  115.435520][T11406] bridge6: entered allmulticast mode
[  115.440009][T11406] team0: Port device bridge6 added
[  115.664935][T11408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1436'.
[  115.692209][T11413] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  116.033779][T11423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.276088][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  116.371010][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1446'.
[  116.540876][T11483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'.
[  116.571549][T11487] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  116.575596][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz.1.1449 Not tainted syzkaller #0 PREEMPT(full) 
[  116.575608][T11487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.575613][T11487] Call Trace:
[  116.575616][T11487]  <TASK>
[  116.575620][T11487]  dump_stack_lvl+0x189/0x250
[  116.575634][T11487]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.575653][T11487]  ? __pfx__printk+0x10/0x10
[  116.575667][T11487]  ? kernfs_root+0x1c/0x230
[  116.575681][T11487]  ? kernfs_path_from_node+0x2f/0x290
[  116.575694][T11487]  ? kernfs_path_from_node+0x250/0x290
[  116.575708][T11487]  ? kernfs_path_from_node+0x2f/0x290
[  116.575722][T11487]  sysfs_warn_dup+0x8e/0xa0
[  116.575737][T11487]  sysfs_do_create_link_sd+0xc0/0x110
[  116.575749][T11487]  device_add_class_symlinks+0x1cf/0x240
[  116.575765][T11487]  device_add+0x475/0xb50
[  116.575777][T11487]  wiphy_register+0x1ba6/0x28d0
[  116.575799][T11487]  ? __pfx_wiphy_register+0x10/0x10
[  116.575814][T11487]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  116.575825][T11487]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  116.575833][T11487]  ieee80211_register_hw+0x3425/0x4080
[  116.575843][T11487]  ? ieee80211_register_hw+0x1461/0x4080
[  116.575852][T11487]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  116.575897][T11487]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.575911][T11487]  ? __hrtimer_setup+0x187/0x210
[  116.575919][T11487]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  116.575930][T11487]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  116.575945][T11487]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  116.575953][T11487]  ? trace_kmalloc+0x1f/0xd0
[  116.575961][T11487]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  116.575971][T11487]  ? kstrndup+0xbf/0x160
[  116.575980][T11487]  hwsim_new_radio_nl+0xea4/0x1b10
[  116.575989][T11487]  ? __pfx___nla_validate_parse+0x10/0x10
[  116.576003][T11487]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  116.576013][T11487]  ? __nla_parse+0x40/0x60
[  116.576024][T11487]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  116.576034][T11487]  genl_family_rcv_msg_doit+0x215/0x300
[  116.576044][T11487]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  116.576058][T11487]  ? bpf_lsm_capable+0x9/0x20
[  116.576072][T11487]  ? security_capable+0x7e/0x2e0
[  116.576088][T11487]  genl_rcv_msg+0x60e/0x790
[  116.576100][T11487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  116.576110][T11487]  ? __kasan_slab_alloc+0x6c/0x80
[  116.576123][T11487]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  116.576135][T11487]  ? __netlink_lookup+0xbd/0x810
[  116.576143][T11487]  ? rcu_is_watching+0x15/0xb0
[  116.576156][T11487]  netlink_rcv_skb+0x208/0x470
[  116.576173][T11487]  ? __pfx_genl_rcv_msg+0x10/0x10
[  116.576185][T11487]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  116.576202][T11487]  ? lock_release+0x4b/0x3e0
[  116.576221][T11487]  ? down_read+0x1ad/0x2e0
[  116.576229][T11487]  genl_rcv+0x28/0x40
[  116.576236][T11487]  netlink_unicast+0x82f/0x9e0
[  116.576246][T11487]  ? __pfx_netlink_unicast+0x10/0x10
[  116.576255][T11487]  ? netlink_sendmsg+0x642/0xb30
[  116.576264][T11487]  ? skb_put+0x11b/0x210
[  116.576271][T11487]  netlink_sendmsg+0x805/0xb30
[  116.576283][T11487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.576293][T11487]  ? aa_sock_msg_perm+0xf1/0x1d0
[  116.576300][T11487]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  116.576307][T11487]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.576317][T11487]  __sock_sendmsg+0x21c/0x270
[  116.576326][T11487]  ____sys_sendmsg+0x505/0x830
[  116.576334][T11487]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.576342][T11487]  ? import_iovec+0x74/0xa0
[  116.576351][T11487]  ___sys_sendmsg+0x21f/0x2a0
[  116.576358][T11487]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.576365][T11487]  ? futex_wake+0x4b2/0x560
[  116.576379][T11487]  ? __fget_files+0x2a/0x420
[  116.576389][T11487]  ? __fget_files+0x3a0/0x420
[  116.576401][T11487]  __x64_sys_sendmsg+0x19b/0x260
[  116.576408][T11487]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  116.576416][T11487]  ? rcu_is_watching+0x15/0xb0
[  116.576423][T11487]  ? rcu_is_watching+0x15/0xb0
[  116.576430][T11487]  do_syscall_64+0xfa/0x3b0
[  116.576441][T11487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.576448][T11487]  ? exc_page_fault+0x9f/0xf0
[  116.576457][T11487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.576465][T11487] RIP: 0033:0x7f5ac1d8ebe9
[  116.576473][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.576480][T11487] RSP: 002b:00007f5ac2b26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.576489][T11487] RAX: ffffffffffffffda RBX: 00007f5ac1fc5fa0 RCX: 00007f5ac1d8ebe9
[  116.576496][T11487] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  116.576503][T11487] RBP: 00007f5ac1e11e19 R08: 0000000000000000 R09: 0000000000000000
[  116.576510][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.576517][T11487] R13: 00007f5ac1fc6038 R14: 00007f5ac1fc5fa0 R15: 00007ffe0b3bd468
[  116.576530][T11487]  </TASK>
[  116.777224][T11492] tipc: Bearer <eth:gre0>: already 2 bearers with priority 10
[  116.779823][T11492] tipc: Bearer <eth:gre0>: trying with adjusted priority
[  116.782500][T11492] tipc: Enabling of bearer <eth:gre0> rejected, max 3 bearers permitted
[  116.807053][T11496] netlink: del zone limit has 4 unknown bytes
[  116.810830][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1451'.
[  116.814847][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'.
[  116.915561][T11506] bond2: option mode: unable to set because the bond device is up
[  116.928469][T11506] bond0: (slave bond4): Releasing active interface
[  116.933913][T11506] bond5: (slave veth9): Releasing active interface
[  117.019013][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'.
[  117.156959][T11518] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  117.297705][T11526] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1456'.
[  117.300954][T11526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1456'.
[  117.341635][T11528] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  117.347425][T11528] 8021q: adding VLAN 0 to HW filter on device bond12
[  117.354408][T11528] bond12 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  117.357841][T11528] bond12 (unregistering): (slave ip6gretap2): Releasing backup interface
[  117.361868][T11528] bond12 (unregistering): Released all slaves
[  117.427023][T11531] syz_tun: entered allmulticast mode
[  117.432910][T11531] dvmrp8: entered allmulticast mode
[  117.512140][T11530] syz_tun: left allmulticast mode
[  117.514453][T11530] dvmrp8: left allmulticast mode
[  117.584419][T11535] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.642441][T11535] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.691663][T11535] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.758801][T11535] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.850332][T10929] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.856501][T10929] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.862339][T10929] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.868675][T10929] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.047774][T11559] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  118.054317][T11576] validate_nla: 6 callbacks suppressed
[  118.054327][T11576] netlink: 'syz.2.1470': attribute type 11 has an invalid length.
[  118.097455][T11578] Bluetooth: MGMT ver 1.23
[  118.176709][T11589] geneve2: entered promiscuous mode
[  118.290224][T11607] netlink: 'syz.1.1480': attribute type 10 has an invalid length.
[  118.298120][T11607] netlink: 'syz.1.1480': attribute type 10 has an invalid length.
[  118.330168][T11608] netlink: 'syz.0.1479': attribute type 12 has an invalid length.
[  119.131431][T11629] netlink: 'syz.0.1485': attribute type 7 has an invalid length.
[  119.133959][T11628] netlink: 'syz.0.1485': attribute type 7 has an invalid length.
[  119.145287][T11631] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  119.159525][T11631] net_ratelimit: 6 callbacks suppressed
[  119.159534][T11631] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  119.161824][T11633] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  119.220627][T11650] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  119.278493][T11655] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.282334][T11655] bond0: (slave bond8): Enslaving as an active interface with a down link
[  119.318054][T11664] netlink: 'syz.0.1493': attribute type 13 has an invalid length.
[  119.322666][T11664] netlink: 'syz.0.1493': attribute type 17 has an invalid length.
[  119.338014][T11664] tunl0: left promiscuous mode
[  119.396056][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.487407][T11664] 8021q: adding VLAN 0 to HW filter on device team0
[  119.497344][T11664] tipc: Resetting bearer <eth:team0>
[  119.527827][T11664] tipc: Resetting bearer <eth:team0>
[  119.541003][T11664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.108391][T11694] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  120.249812][T11707] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  120.267181][T11710] __nla_validate_parse: 10 callbacks suppressed
[  120.267192][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'.
[  120.436087][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  120.465580][T11734] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.1510'.
[  120.473147][T11734] netlink: 'syz.2.1510': attribute type 10 has an invalid length.
[  120.513307][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'.
[  120.528339][T11741] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  120.560735][T11747] netlink: 'syz.2.1514': attribute type 1 has an invalid length.
[  120.566215][T11747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'.
[  120.601394][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1516'.
[  120.619639][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'.
[  120.622620][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1516'.
[  120.625538][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1516'.
[  120.629574][T11752] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1516'.
[  120.637354][T11753] tipc: Resetting bearer <eth:team0>
[  120.641784][T11753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.684978][T11757] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1518'.
[  120.946746][T11776] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  121.088208][T11797] netlink: ct family unspecified
[  121.090168][T11797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.160466][T11805] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  122.060691][T11823] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  122.064976][T11823] syzkaller0: entered promiscuous mode
[  122.067939][T11823] syzkaller0: entered allmulticast mode
[  122.392453][T11852] 8021q: adding VLAN 0 to HW filter on device bond8
[  122.401146][T11852] veth17: entered promiscuous mode
[  122.404403][T11852] bond8: (slave veth17): Enslaving as a backup interface with a down link
[  122.409439][T11852] bond6: (slave erspan0): Releasing active interface
[  122.419038][T11852] bond0: (slave bridge3): Releasing active interface
[  122.423097][T11852] vxlan0: left promiscuous mode
[  122.428180][T11852] team0: Port device vxlan0 removed
[  122.430643][T11852] bond8: (slave veth17): Releasing backup interface
[  122.435183][   T26] tipc: Resetting bearer <eth:team0>
[  122.437737][T11855] block nbd2: server does not support multiple connections per device.
[  122.442418][ T5866] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.443848][T11855] block nbd2: shutting down sockets
[  122.446645][ T5866] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.450872][ T5866] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.454897][ T5866] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.490525][T11858] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.495300][T11858] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.004226][T11870] syz_tun: entered allmulticast mode
[  123.010608][T11870] dvmrp8: entered allmulticast mode
[  123.015112][T11870] syz_tun: left allmulticast mode
[  123.125593][T11878] gtp0: entered promiscuous mode
[  123.379840][T11895] validate_nla: 12 callbacks suppressed
[  123.379880][T11895] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  123.384761][T11896] netlink: 'syz.2.1564': attribute type 13 has an invalid length.
[  123.388276][T11896] netlink: 'syz.2.1564': attribute type 17 has an invalid length.
[  123.392867][T11896] erspan0: left allmulticast mode
[  123.402779][T11896] tipc: Resetting bearer <eth:team0>
[  123.404948][T11896] tipc: Resetting bearer <eth:team0>
[  123.407614][T11896] dummy0: left promiscuous mode
[  123.411279][T11898] netlink: 'syz.0.1568': attribute type 1 has an invalid length.
[  123.424493][T11895] netlink: 'syz.1.1567': attribute type 21 has an invalid length.
[  123.432129][T11895] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  123.438847][T11898] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  123.443836][T11898] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  123.448353][T11898] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  123.627005][T11919] erspan0: entered promiscuous mode
[  123.630696][T11919] erspan0: left promiscuous mode
[  123.776800][T11933] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  123.782340][T11933] netlink: 'syz.1.1578': attribute type 10 has an invalid length.
[  123.917058][T11941] tipc: Resetting bearer <eth:team0>
[  123.983036][T11943] netlink: 'syz.2.1581': attribute type 10 has an invalid length.
[  123.989521][T11943] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.993267][T11943] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.497631][T11946] bond0 (unregistering): Released all slaves
[  124.577657][T11951] tipc: Bearer <eth:team0>: already 2 bearers with priority 10
[  124.580696][T11951] tipc: Bearer <eth:team0>: trying with adjusted priority
[  124.583474][T11951] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  124.596040][    C1] net_ratelimit: 30 callbacks suppressed
[  124.596048][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  124.630443][T11953] netlink: 'syz.1.1584': attribute type 3 has an invalid length.
[  124.693359][T11958] tipc: Enabling of bearer <ib:caif0> rejected, max 3 bearers permitted
[  124.709509][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.713705][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.730731][T11970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.751482][T11972] openvswitch: netlink: Missing valid actions attribute.
[  124.754342][T11972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.969669][T11993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.998290][T11993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.059927][T11993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.098021][T11993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.153497][ T5866] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.161193][ T5739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.167448][T10929] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.173655][T10929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.635993][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  125.812377][T10929] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.816715][T10929] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.820244][T10929] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.823769][T10929] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.828613][T10929] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.831669][T10929] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.834673][T10929] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.838133][T10929] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.917968][T12017] __nla_validate_parse: 32 callbacks suppressed
[  125.917979][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  125.935555][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  125.962404][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  125.980679][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  125.991644][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  126.011214][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  126.028883][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  126.042536][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  126.064966][T12017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1602'.
[  126.077995][T12026] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1603'.
[  126.348412][T12037] dvmrp8: entered allmulticast mode
[  126.600435][T12036] dvmrp8: left allmulticast mode
[  126.676022][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  126.698614][T12058] 8021q: adding VLAN 0 to HW filter on device bond9
[  126.702401][T12058] bond0: (slave bond9): Enslaving as an active interface with a down link
[  126.817478][T12079] nbd: nbd0 already in use
[  126.824163][T12079] block nbd0: NBD_DISCONNECT
[  126.829717][T12079] block nbd0: Send disconnect failed -32
[  126.833388][T12079] block nbd0: shutting down sockets
[  126.934488][T12095] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.020304][T12095] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.089337][T12095] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.160874][T12095] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.247496][T12120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.268775][T10570] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.274533][T10570] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.280893][T10570] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.284803][T10570] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.313273][T12128] bond0 (unregistering): (slave bond8): Releasing active interface
[  127.323171][T12128] bond0 (unregistering): (slave bond9): Releasing active interface
[  127.329859][T12128] bond0 (unregistering): Released all slaves
[  127.716015][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  128.257317][T12243] openvswitch: netlink: IP tunnel dst address not specified
[  128.756027][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  129.795986][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  130.836025][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  131.156300][   T60] block nbd1: Possible stuck request ffff888022b00000: control (read@0,1024B). Runtime 30 seconds
[  131.159650][   T60] block nbd1: Possible stuck request ffff888022b00200: control (read@1024,1024B). Runtime 30 seconds
[  131.473334][T12279] __nla_validate_parse: 35 callbacks suppressed
[  131.473344][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'.
[  131.571288][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1649'.
[  131.574956][T12293] nbd: must specify at least one socket
[  131.611228][T12295] _Z`Ԁ@: entered promiscuous mode
[  131.641561][T12297] netlink: 'syz.1.1651': attribute type 11 has an invalid length.
[  131.713473][T12300] can: request_module (can-proto-5) failed.
[  131.717003][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  131.757653][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  131.792399][T12307] openvswitch: netlink: Key type 151 is out of range max 32
[  131.834097][T12312] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  131.839268][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.1.1656 Not tainted syzkaller #0 PREEMPT(full) 
[  131.839285][T12312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.839293][T12312] Call Trace:
[  131.839298][T12312]  <TASK>
[  131.839303][T12312]  dump_stack_lvl+0x189/0x250
[  131.839324][T12312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.839340][T12312]  ? __pfx__printk+0x10/0x10
[  131.839355][T12312]  ? kernfs_root+0x1c/0x230
[  131.839371][T12312]  ? kernfs_path_from_node+0x2f/0x290
[  131.839383][T12312]  ? kernfs_path_from_node+0x250/0x290
[  131.839395][T12312]  ? kernfs_path_from_node+0x2f/0x290
[  131.839408][T12312]  sysfs_warn_dup+0x8e/0xa0
[  131.839421][T12312]  sysfs_do_create_link_sd+0xc0/0x110
[  131.839434][T12312]  device_add_class_symlinks+0x1cf/0x240
[  131.839449][T12312]  device_add+0x475/0xb50
[  131.839462][T12312]  wiphy_register+0x1ba6/0x28d0
[  131.839484][T12312]  ? __pfx_wiphy_register+0x10/0x10
[  131.839500][T12312]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  131.839522][T12312]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  131.839537][T12312]  ieee80211_register_hw+0x3425/0x4080
[  131.839555][T12312]  ? ieee80211_register_hw+0x1461/0x4080
[  131.839570][T12312]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  131.839585][T12312]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  131.839604][T12312]  ? __hrtimer_setup+0x187/0x210
[  131.839615][T12312]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  131.839633][T12312]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  131.839657][T12312]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  131.839672][T12312]  ? trace_kmalloc+0x1f/0xd0
[  131.839686][T12312]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  131.839703][T12312]  ? kstrndup+0xbf/0x160
[  131.839718][T12312]  hwsim_new_radio_nl+0xea4/0x1b10
[  131.839762][T12312]  ? __pfx___nla_validate_parse+0x10/0x10
[  131.839787][T12312]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  131.839805][T12312]  ? __nla_parse+0x40/0x60
[  131.839823][T12312]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  131.839840][T12312]  genl_family_rcv_msg_doit+0x215/0x300
[  131.839856][T12312]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  131.839873][T12312]  ? bpf_lsm_capable+0x9/0x20
[  131.839889][T12312]  ? security_capable+0x7e/0x2e0
[  131.839908][T12312]  genl_rcv_msg+0x60e/0x790
[  131.839923][T12312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.839935][T12312]  ? __kasan_slab_alloc+0x6c/0x80
[  131.839950][T12312]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  131.839964][T12312]  ? __netlink_lookup+0xbd/0x810
[  131.839973][T12312]  ? rcu_is_watching+0x15/0xb0
[  131.839985][T12312]  netlink_rcv_skb+0x208/0x470
[  131.840001][T12312]  ? __pfx_genl_rcv_msg+0x10/0x10
[  131.840015][T12312]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  131.840032][T12312]  ? lock_release+0x4b/0x3e0
[  131.840050][T12312]  ? down_read+0x1ad/0x2e0
[  131.840061][T12312]  genl_rcv+0x28/0x40
[  131.840071][T12312]  netlink_unicast+0x82f/0x9e0
[  131.840087][T12312]  ? __pfx_netlink_unicast+0x10/0x10
[  131.840101][T12312]  ? netlink_sendmsg+0x642/0xb30
[  131.840117][T12312]  ? skb_put+0x11b/0x210
[  131.840128][T12312]  netlink_sendmsg+0x805/0xb30
[  131.840146][T12312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.840162][T12312]  ? futex_unqueue+0x22/0x240
[  131.840174][T12312]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.840185][T12312]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.840197][T12312]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.840214][T12312]  __sock_sendmsg+0x21c/0x270
[  131.840229][T12312]  ____sys_sendmsg+0x505/0x830
[  131.840242][T12312]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.840256][T12312]  ? import_iovec+0x74/0xa0
[  131.840269][T12312]  ___sys_sendmsg+0x21f/0x2a0
[  131.840280][T12312]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.840293][T12312]  ? futex_wait+0x285/0x360
[  131.840314][T12312]  ? __fget_files+0x2a/0x420
[  131.840331][T12312]  ? __fget_files+0x3a0/0x420
[  131.840350][T12312]  __x64_sys_sendmsg+0x19b/0x260
[  131.840363][T12312]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  131.840379][T12312]  ? rcu_is_watching+0x15/0xb0
[  131.840392][T12312]  do_syscall_64+0xfa/0x3b0
[  131.840410][T12312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.840422][T12312]  ? exc_page_fault+0x9f/0xf0
[  131.840438][T12312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  131.840450][T12312] RIP: 0033:0x7f5ac1d8ebe9
[  131.840463][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  131.840473][T12312] RSP: 002b:00007f5ac2b26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  131.840488][T12312] RAX: ffffffffffffffda RBX: 00007f5ac1fc5fa0 RCX: 00007f5ac1d8ebe9
[  131.840498][T12312] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  131.840506][T12312] RBP: 00007f5ac1e11e19 R08: 0000000000000000 R09: 0000000000000000
[  131.840522][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  131.840529][T12312] R13: 00007f5ac1fc6038 R14: 00007f5ac1fc5fa0 R15: 00007ffe0b3bd468
[  131.840544][T12312]  </TASK>
[  132.044561][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  132.063405][T12314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1657'.
[  132.089894][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'.
[  132.093687][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'.
[  132.152963][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'.
[  132.158915][T12322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'.
[  132.162875][T12322] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.487336][T12324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.510463][T12326] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  132.530191][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'.
[  132.951519][T12334] netlink: zone id is out of range
[  132.953303][T12334] netlink: zone id is out of range
[  132.955048][T12334] netlink: zone id is out of range
[  132.964575][T12334] netlink: zone id is out of range
[  132.967267][T12334] netlink: zone id is out of range
[  133.033371][T12354] syz_tun: entered allmulticast mode
[  133.130367][T12367] validate_nla: 38 callbacks suppressed
[  133.130380][T12367] netlink: 'syz.2.1672': attribute type 6 has an invalid length.
[  133.199384][T12376] vlan0: left promiscuous mode
[  133.201494][T12376] ip6gre1: left promiscuous mode
[  133.203169][T12376] gretap1: left promiscuous mode
[  133.205050][T12376] vlan1: left promiscuous mode
[  133.207166][T12376] bond6: left promiscuous mode
[  133.208819][T12376] geneve2: left promiscuous mode
[  133.210579][T12352] syz_tun: left allmulticast mode
[  133.213560][T12376] netlink: 'syz.1.1676': attribute type 10 has an invalid length.
[  133.217165][T12376] !: entered promiscuous mode
[  133.219141][T12376] bridge0: port 1(0!) entered blocking state
[  133.226783][T12376] bridge0: port 1(0!) entered disabled state
[  133.229184][T12376] !: entered allmulticast mode
[  133.232380][T12376] bridge0: port 1(0!) entered blocking state
[  133.234465][T12376] bridge0: port 1(0!) entered forwarding state
[  133.261792][T12384] dvmrp8: entered allmulticast mode
[  134.084618][T12382] dvmrp8: left allmulticast mode
[  134.187898][T12402] netlink: 'syz.2.1685': attribute type 1 has an invalid length.
[  134.196776][T12402] 8021q: adding VLAN 0 to HW filter on device bond9
[  134.206284][T12402] 8021q: adding VLAN 0 to HW filter on device bond9
[  134.208646][T12402] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  134.215460][T12402] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  134.261987][T12402] veth21: entered promiscuous mode
[  134.265159][T12402] bond9: (slave veth21): Enslaving as an active interface with a down link
[  134.274263][T12402] erspan0: entered allmulticast mode
[  134.280336][T12402] bond9: (slave erspan0): making interface the new active one
[  134.283155][T12402] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  134.371763][T12413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.420094][T12413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.488983][T12413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.544343][T12413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.621207][ T5739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.626419][ T5739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.634395][ T5739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.641858][ T5739] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.738690][T12435] IPVS: Scheduler module ip_vs_sip not found
[  134.785083][T12438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.827780][T12442] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  134.865390][T12445] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  135.027274][T12458] net_ratelimit: 23 callbacks suppressed
[  135.027288][T12458] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  135.489102][T12490] netlink: 'syz.0.1713': attribute type 2 has an invalid length.
[  135.573678][T12501] netlink: 'syz.0.1717': attribute type 2 has an invalid length.
[  135.597992][T12504] netlink: 'syz.0.1718': attribute type 1 has an invalid length.
[  135.601268][T12505] netlink: 'syz.0.1718': attribute type 1 has an invalid length.
[  135.609793][T12504] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.614597][T12504] ipvlan2: entered allmulticast mode
[  135.616686][T12504] bond0: entered allmulticast mode
[  135.621936][T12504] bond0: (slave gretap4): making interface the new active one
[  135.624393][T12504] gretap4: entered allmulticast mode
[  135.627175][T12504] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  135.655462][T12510] netlink: 'syz.0.1720': attribute type 9 has an invalid length.
[  135.694436][T12518] netlink: 'syz.0.1722': attribute type 23 has an invalid length.
[  135.726938][T12520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.764652][T12526] netlink: 'syz.0.1725': attribute type 2 has an invalid length.
[  135.810180][T12536] tipc: Disabling bearer <udp:syz2>
[  135.839920][T12544] policy can only be matched on NF_INET_PRE_ROUTING
[  135.839930][T12544] unable to load match
[  136.038000][T12576] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode
[  136.043292][T12576] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode
[  136.794388][T12580] __nla_validate_parse: 280 callbacks suppressed
[  136.794397][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1741'.
[  136.799222][T12580] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1741'.
[  136.815831][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1742'.
[  136.842317][T12582] : entered promiscuous mode
[  136.844267][T12582] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1742'.
[  136.848625][T12584] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1742'.
[  136.862484][T12587] : entered promiscuous mode
[  136.882032][T12592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1746'.
[  136.910194][T12599] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  136.938945][T12603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1750'.
[  136.942241][T12603] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1750'.
[  136.945260][T12603] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1750'.
[  136.963603][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'.
[  136.967359][T12606] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  136.969732][T12606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.042297][T12616] bond0: entered promiscuous mode
[  137.044146][T12616] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.050441][T12617] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.052760][T12617] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  137.056768][T12617] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  137.060864][T12617] bond0: (slave wireguard0): making interface the new active one
[  137.063387][T12617] wireguard0: entered promiscuous mode
[  137.065601][T12617] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  137.070018][T12616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.072518][T12616] IPv6: NLM_F_CREATE should be set when creating new route
[  137.074875][T12616] IPv6: NLM_F_CREATE should be set when creating new route
[  137.078033][T12616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.082355][T12616] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address
[  137.087950][T12616] bond0: (slave wireguard1): Enslaving as a backup interface with an up link
[  137.827485][T12635] netlink: ct family unspecified
[  137.829328][T12635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.845844][T12637] netlink: 'syz.0.1758': attribute type 11 has an invalid length.
[  137.993847][T12647] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  137.998060][T12647] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  138.050988][T12655] 8021q: adding VLAN 0 to HW filter on device bond13
[  138.059971][T12655] ip6erspan0: entered promiscuous mode
[  138.153534][T12662] validate_nla: 11 callbacks suppressed
[  138.153548][T12662] netlink: 'syz.0.1768': attribute type 1 has an invalid length.
[  138.210176][T12665] tipc: Resetting bearer <eth:team0>
[  138.213556][T12665] bond5: (slave veth7): Releasing active interface
[  138.219852][T12665] bond8: (slave gretap2): Releasing active interface
[  138.226768][T12665] team0: Port device bridge6 removed
[  138.229486][T12665] bond0: (slave gretap4): Releasing active interface
[  138.231619][T12665] gretap4: left allmulticast mode
[  138.300801][T12669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.304790][T12669] tipc: Failed to remove unknown binding: 66,1,1/11578026:2660045566/2660045568
[  138.308818][T12669] tipc: Failed to remove unknown binding: 66,1,1/11578026:2660045566/2660045568
[  138.311619][T12669] tipc: Failed to remove unknown binding: 66,1,1/11578026:2660045566/2660045568
[  138.509659][T12681] netlink: del zone limit has 4 unknown bytes
[  138.515764][T12680] netlink: del zone limit has 4 unknown bytes
[  138.597257][T12692] netlink: 'syz.2.1778': attribute type 13 has an invalid length.
[  138.600484][T12692] netlink: 'syz.2.1778': attribute type 17 has an invalid length.
[  138.604560][T12692] erspan0: left allmulticast mode
[  138.610282][T12692] tipc: Resetting bearer <eth:team0>
[  138.624062][T12698] netlink: 'syz.1.1780': attribute type 2 has an invalid length.
[  138.999189][T12733] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  139.062806][T12744] "syz.0.1791" (12744) uses obsolete ecb(arc4) skcipher
[  139.671652][T12778] sch_fq: defrate 0 ignored.
[  139.742768][T12780] netlink: 'syz.1.1804': attribute type 1 has an invalid length.
[  139.901620][T12793] netlink: 'syz.0.1808': attribute type 4 has an invalid length.
[  140.015703][T12803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.019452][T12803] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  140.022690][T12803] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  140.613727][T12817] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.667729][T12820] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  140.668189][T12817] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.698403][T12817] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.704472][T12822] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  140.708070][T12822] tipc: Bearer <ib:lo>: trying with adjusted priority
[  140.710412][T12822] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  140.727640][T12817] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.762356][ T5739] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.768876][ T5739] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.774295][ T5739] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.780964][ T5739] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.795410][T12827] !: left allmulticast mode
[  140.797775][T12827] bridge0: port 1(0!) entered disabled state
[  140.801860][T12827] bond0: (slave wireguard0): Releasing backup interface
[  140.804080][T12827] wireguard0: left promiscuous mode
[  140.805742][T12827] bond0: (slave wireguard1): making interface the new active one
[  140.808395][T12827] wireguard1: entered promiscuous mode
[  140.812274][T12827] bond0: (slave wireguard1): Releasing backup interface
[  140.814460][T12827] wireguard1: left promiscuous mode
[  140.862271][T12835] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  140.866909][T12835] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  140.940833][T12842] unknown channel width for channel at 909000KHz?
[  141.164139][T12857] netlink: 'syz.2.1827': attribute type 2 has an invalid length.
[  141.524922][T12884] tipc: Resetting bearer <eth:team0>
[  141.585585][T12889] netlink: 'syz.0.1835': attribute type 10 has an invalid length.
[  141.589174][T12889] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.592599][T12889] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.459765][T12899] __nla_validate_parse: 31 callbacks suppressed
[  142.459780][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'.
[  142.496286][T12904] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1841'.
[  142.704522][T12925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1846'.
[  143.092730][T12933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1848'.
[  144.918791][T12944] net_ratelimit: 6 callbacks suppressed
[  144.918804][T12944] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.965817][T12951] netlink: 'syz.2.1854': attribute type 10 has an invalid length.
[  144.969548][T12951] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  144.971913][T12951] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  144.987687][T12953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1855'.
[  145.107578][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'.
[  145.110448][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  145.113485][T12957] netlink: 'syz.2.1856': attribute type 5 has an invalid length.
[  145.602106][T12964] openvswitch: netlink: IP tunnel dst address not specified
[  145.855185][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'.
[  145.882204][T12970] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1862'.
[  146.035941][T12989] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.089410][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'.
[  146.093076][T12990] netlink: 'syz.2.1867': attribute type 5 has an invalid length.
[  146.098486][T12990] geneve4: entered promiscuous mode
[  146.100226][T12990] geneve4: entered allmulticast mode
[  146.102580][ T5739] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  146.105379][ T5739] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  146.109843][ T5739] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  146.114169][T12989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.118385][T12989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.169906][T12989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.173370][T12989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.219328][T12989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.223057][T12989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  146.257801][T13002] openvswitch: netlink: IPv4 tun info is not correct
[  146.279792][ T5739] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  146.282910][ T5739] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  146.289787][ T5739] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  146.292786][ T5739] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  146.297910][ T5739] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  146.301223][ T5739] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  146.307731][T10929] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  146.310336][T10929] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  146.374459][T13004] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  146.374519][T13008] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  146.378719][T13004] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.381653][T13008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.453669][T13015] bond5: option mode: unable to set because the bond device is up
[  146.458110][T13015] bond9: (slave erspan0): Releasing active interface
[  146.463014][T13015] tipc: Resetting bearer <eth:team0>
[  146.470517][T13015] bond9: (slave veth21): Releasing active interface
[  147.119656][T13005] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  147.123572][T13005] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  147.127041][T13005] CPU: 1 UID: 0 PID: 13005 Comm: syz.0.1870 Not tainted syzkaller #0 PREEMPT(full) 
[  147.130402][T13005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.133791][T13005] RIP: 0010:rose_transmit_link+0x32/0x740
[  147.135841][T13005] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 b9 1c 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  147.142439][T13005] RSP: 0018:ffffc90008517910 EFLAGS: 00010206
[  147.144921][T13005] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8880231a3980
[  147.148083][T13005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810f1c2900
[  147.151265][T13005] RBP: 0000000000000000 R08: ffff8880231a3980 R09: 0000000000000008
[  147.154375][T13005] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810f1c2900
[  147.157434][T13005] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  147.160511][T13005] FS:  00007f62bdfd56c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  147.163745][T13005] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.165925][T13005] CR2: 00007f1bd9882d1b CR3: 00000001114fa000 CR4: 00000000000006f0
[  147.168555][T13005] Call Trace:
[  147.169825][T13005]  <TASK>
[  147.171056][T13005]  ? skb_put+0x11b/0x210
[  147.172833][T13005]  rose_write_internal+0x11dc/0x1ac0
[  147.174992][T13005]  ? __pfx_rose_write_internal+0x10/0x10
[  147.177299][T13005]  ? __timer_delete+0x5d/0x390
[  147.179256][T13005]  rose_release+0x24e/0x520
[  147.181080][T13005]  sock_close+0xc3/0x240
[  147.182645][T13005]  ? __pfx_sock_close+0x10/0x10
[  147.184391][T13005]  __fput+0x44c/0xa70
[  147.185776][T13005]  task_work_run+0x1d4/0x260
[  147.187323][T13005]  ? __pfx_task_work_run+0x10/0x10
[  147.189051][T13005]  ? task_work_add+0x377/0x420
[  147.190616][T13005]  ? __pfx_task_work_add+0x10/0x10
[  147.192401][T13005]  get_signal+0x11ed/0x1340
[  147.194253][T13005]  ? __might_fault+0xb0/0x130
[  147.196153][T13005]  arch_do_signal_or_restart+0x9a/0x750
[  147.198012][T13005]  ? count_memcg_event_mm+0x21/0x260
[  147.199771][T13005]  ? __pfx___sys_connect+0x10/0x10
[  147.201415][T13005]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  147.203545][T13005]  ? rcu_is_watching+0x15/0xb0
[  147.205460][T13005]  exit_to_user_mode_loop+0x75/0x110
[  147.207724][T13005]  do_syscall_64+0x2bd/0x3b0
[  147.209674][T13005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.212172][T13005]  ? exc_page_fault+0x9f/0xf0
[  147.214069][T13005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.216494][T13005] RIP: 0033:0x7f62bfd8ebe9
[  147.218275][T13005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.226031][T13005] RSP: 002b:00007f62bdfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  147.229442][T13005] RAX: 0000000000000000 RBX: 00007f62bffc6090 RCX: 00007f62bfd8ebe9
[  147.232432][T13005] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005
[  147.235012][T13005] RBP: 00007f62bfe11e19 R08: 0000000000000000 R09: 0000000000000000
[  147.237548][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  147.240126][T13005] R13: 00007f62bffc6128 R14: 00007f62bffc6090 R15: 00007ffd8f118d38
[  147.242901][T13005]  </TASK>
[  147.244073][T13005] Modules linked in:
[  147.246633][T13005] ---[ end trace 0000000000000000 ]---
[  147.251113][T13005] RIP: 0010:rose_transmit_link+0x32/0x740
[  147.253149][T13005] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 b9 1c 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  147.260854][T13005] RSP: 0018:ffffc90008517910 EFLAGS: 00010206
[  147.263057][T13005] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff8880231a3980
[  147.265829][T13005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810f1c2900
[  147.268684][T13005] RBP: 0000000000000000 R08: ffff8880231a3980 R09: 0000000000000008
[  147.271458][T13005] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810f1c2900
[  147.274445][T13005] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  147.278369][T13005] FS:  00007f62bdfd56c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  147.281794][T13005] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  147.284323][T13005] CR2: 0000557ed1d9e000 CR3: 00000001114fa000 CR4: 00000000000006f0
[  147.287730][T13005] Kernel panic - not syncing: Fatal exception
[  147.290927][T13005] Kernel Offset: disabled
[  147.292631][T13005] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:29:17  Registers:
info registers vcpu 0

CPU#0
RAX=468ce2151e20e300 RBX=ffffffff819683b8 RCX=468ce2151e20e300 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7993f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f58897b8fb8 CR3=0000000023264000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f62bfe12e53
XMM06=0000000000000000 00007f62bfe12e4d XMM07=0000000000000000 00007f62bfe12e61
XMM08=0000000000000000 00007f62bfe12ee7 XMM09=0000000000000000 00007f62bfe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc90008517050
R8 =ffff888021450237 R9 =1ffff1100428a046 R10=dffffc0000000000 R11=ffffffff854f1db0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1e27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f62bdfd56c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1bd9882d1b CR3=00000001114fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000600068001000c 8042000400007c01
XMM02=188017001c800200 2000000a80000600 XMM03=068001000c804200 0400007c01000000
XMM04=00007f62c0afd100 00007f62bff97460 XMM05=00007f62bff97478 00007f62bff974c0
XMM06=00007f62bff974b8 00007f62bff974b0 XMM07=00007f62bff974a8 00007f62bff974a0
XMM08=0000000000000000 00007f62bfe12ee7 XMM09=0000000000000000 00007f62bfe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
