last executing test programs:

2.132202322s ago: executing program 2 (id=3098):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007037ef21cd08ba66e68fea804b2ac35647ce7ebd623eb83c78be424ad31b90ff35750a8c92dbcafe4aea1e500f8a908f3c767788e4f7c412f217", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)={0x40, r4, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r7}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r7, 0x4}}]}, 0xc4}}, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, 0x0)
recvfrom$llc(r2, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0)
listen(r2, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xbbab, 0x4, 0x8001, 0x10, 0x4, 0xfffffff9, 0x5}, 0x9c)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000480))
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="463fa56163dd", 0x6}], 0x1}}], 0x2, 0x4000000)

1.480802794s ago: executing program 1 (id=3112):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000090000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x96, &(0x7f00000015c0)=""/150}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r3, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'], 0x70}}], 0x1, 0x4)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20824200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="84040000130000022abd7000ffdbdf252503030c4e234e20ff010000010000000000280094e20000f50400000f0000000b00000001000000", @ANYRES32=r4, @ANYBLOB="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"], 0x484}, 0x1, 0x0, 0x0, 0x4}, 0x100)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0)

1.389645883s ago: executing program 1 (id=3114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000030000000090a010400000000000000000700000008000a40000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a3100000000100003800c00008008000340000000030900110073797a3000000000140000001000010000000000000000000084000a"], 0xb4}}, 0x40000)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)={0x34, r5, 0x1, 0x70b528, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x4)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x3c}}, 0x20040051)

1.33309791s ago: executing program 0 (id=3115):
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x29}], "fb36eeca6fad50b3"}}}}}}}, 0x0) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0)

1.332166679s ago: executing program 1 (id=3116):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r1=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)={@local, <r2=>0x0}, &(0x7f0000000200)=0x14)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0xf2, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000600)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2ba65, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001780)=[{0x3, 0x1, 0x5, 0xb}], 0x10, 0x400}, 0x94)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000018c0)=@generic={&(0x7f0000001880)='./file0\x00', 0x0, 0x10}, 0x18)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x7, 0x3, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], 0x0, 0x52d5bc3f, 0xac, &(0x7f0000000100)=""/172, 0x41000, 0x28, '\x00', r2, @fallback=0x1f, r3, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x80000001, 0x5}, 0x10, r4, r5, 0x0, &(0x7f0000001980)=[r6, r7], 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0x9, &(0x7f0000002000)=@raw=[@alu={0x4, 0x0, 0x7, 0x6, 0xa, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa60}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000002080)='GPL\x00', 0x0, 0x92, &(0x7f00000020c0)=""/146, 0x41100, 0x1e, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002180)={0x4, 0x0, 0x5, 0xd}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000021c0)=[{0x5, 0x67, 0x8, 0xb}, {0x4, 0x5, 0x1, 0x9}, {0x0, 0x1, 0x4, 0xc}, {0x4, 0x3, 0x6, 0x7}], 0x10, 0x3ff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond0\x00'})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r10=>0x0})
r11 = socket(0xa, 0x2, 0x0)
getpeername$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0}, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, <r14=>0x0, 0x0}}, 0x10)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r16, &(0x7f00000000c0), 0x9)
sendfile(r16, r15, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r13}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r10, 0x25, 0x1, @val=@target_btf_id=r14}, 0x14)
r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x20, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9a}, @call={0x85, 0x0, 0x0, 0x40}, @call={0x85, 0x0, 0x0, 0x92}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x0, 0x9, 0x5, 0xb, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x97, &(0x7f0000000400)=""/151, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x6ab0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000500)=[{0x2, 0x81, 0x1, 0x1}, {0x2, 0x3, 0xd, 0x2}, {0x0, 0x2, 0x7, 0x1}, {0x0, 0x4, 0x4, 0x7}, {0x1, 0x4, 0xc, 0xc}], 0x10, 0x7bc6bfdf}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x1a, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000800000000000000ff01000018400000f8ffffff000000000000000018410000040000000000000000000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000577d2912179c392100b70500000800000085000000a500000039144000f0ffffff85100000faffffff18310000030000000000000000000000180000000004000000000000010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, @fallback=0x6, r3, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r14, r17, 0x2, 0x0, &(0x7f0000000640)=[{0x2, 0x3, 0x4, 0x5}, {0x3, 0x2, 0x0, 0x2}], 0x10, 0x8}, 0x94)
r18 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x88000008, 0x6}, 0x4}}]}, {0x2}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0)

1.252806772s ago: executing program 0 (id=3117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000000000", 0x58}], 0x1) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x0, 0xbf, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000600), 0x8, 0x25, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000006c0)={<r4=>r0, 0x5, 0xff, 0x3})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0, 0x20, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async)
pipe(&(0x7f0000000c00)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=@raw=[@generic={0xb7, 0xb, 0x7, 0x200, 0x25b21c15}], &(0x7f00000002c0)='syzkaller\x00', 0xffffffff, 0xbb, &(0x7f0000000380)=""/187, 0x41000, 0x1, '\x00', r3, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x0, 0x1, &(0x7f0000000c40)=[0xffffffffffffffff, r6], &(0x7f0000000c80)=[{0x0, 0x2, 0x10, 0x4}], 0x10, 0x7}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x12, 0x20, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000ff000000000000008ade0000b7080000000000007b8a65f9e0b2f8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400004f3b065bef474cdb8dab022348f0ffffffb70200000800000018230000f03f4fa752bbe74eb69b81ec5c240c173ec2cdfe60a732f23c91df74585764265008210bf09505426653555ac5b50675c62a43de11a262574d64546b87f084409b5537e494639e0eb910a4a904df26eb90f226cb393e433bddb5a8316aa4fedbf72debc41bbf63607a41e71b5202691e207ce21e88452a52584ac7167cdee5302f62ff6d089bc700554457a36faae687b006c852d77c26081f368c94200d5d262d3c69f4bcb7c53015bb9da2f1b9cbea939c17", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800002d2900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000851000000400000085100000f8ffffff950000000000000018000000000800000000000080c0a349180000000000008000000000070000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x5dfe, 0x40, &(0x7f0000000ec0)=""/64, 0x40f00, 0x33, '\x00', r3, @fallback=0x36, r4, 0x8, &(0x7f0000000f00)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000f40)=[r4, 0x1, r4, r4, r6, r7, r6], 0x0, 0x10, 0xe}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, <r10=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r9}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.251924102s ago: executing program 2 (id=3118):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3}, 0xe)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0)

1.203540685s ago: executing program 0 (id=3119):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r1, 0x46a8}], 0x1, 0x400)
shutdown(r1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8004"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
socket(0x2b, 0x1, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX=r4, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000380)='initcall_finish\x00', r9}, 0x18)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031400042abd7000fedbdf250900020073797a070000edff0700410073697700140233006c697980cb310000000000000000000068da1fb09c7ff09546953261d816090b818af85da1dfe50e1332c062eb93d303972ee97649a89fe08e823309030925f1180d7fa8aa3182ee145f18d4d9eb3b01e7904e546cd6f2a4e01f1dcb7690f4fc42f796fff900171b1b599fe1"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)

311.706412ms ago: executing program 0 (id=3120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0)
r5 = socket(0x10, 0x80003, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000000}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x31, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000100180001801400020076657468315f746f5f62617461647600200003801c000180"], 0x4c}}, 0x0)

310.850618ms ago: executing program 1 (id=3121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom$ax25(0xffffffffffffffff, &(0x7f00000000c0)=""/101, 0x65, 0x40000002, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0x280}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (rerun: 32)

233.169004ms ago: executing program 0 (id=3122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000b80)=ANY=[@ANYRESDEC, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="c88583a23644016dbb256f34ff162595e4858df6be5075a940979f9b2cb202dc1d093200ec3973bbee27a52190d0ccfb782b735de7ce9c3d0518f3c8f95e3f64415dedd9132f6d1c33306acf639ba218c518cf789705a2b485d604615d585ac84c108c9f793a0c12f132ff996174e02eb5d38654092d2a7ae4d353b94a46535dc558cdb533cff660d28ed7d490a11db3bdb4bba66ad8b993b0baf25653"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, &(0x7f0000000b40))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x6}, 0x18)
r4 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x7c9ce320e12d300)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c11ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0)

232.494649ms ago: executing program 2 (id=3123):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x3, 0x8}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x5, &(0x7f0000000040)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000080)='GPL\x00', 0x1, 0x34, &(0x7f00000000c0)=""/52, 0x41000, 0x9, '\x00', r4, @cgroup_sockopt=0x2a, r5, 0x8, &(0x7f00000005c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000600)=[{0x5, 0x4, 0x2}, {0x0, 0x2, 0xb, 0xf}, {0x0, 0x1, 0xf, 0x7}, {0x5, 0x2, 0xb, 0x6}], 0x10, 0x3}, 0x94) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)

170.402455ms ago: executing program 0 (id=3124):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000000000000700000082"], 0x18}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x3, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x8004)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/17, 0x11}, 0xfffffffe}], 0x1, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0xa, 0x100, 0x80000002, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}})
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4)
sendto$inet(r7, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0))
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

168.957323ms ago: executing program 2 (id=3125):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1, {0x2}, {0xffe2, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa, 0x2, 0x1, 0x6, 0x1, 0x811b}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x21, 0xae, &(0x7f0000000180)="576adb2fcf8005b8d7eec4e1cbe1284608e89a8f2ee088f1261da7c69b4da88d7c", &(0x7f0000000380)=""/174, 0x6e, 0x0, 0x69, 0x93, &(0x7f0000000240)="8312ab4069f90ae57ae11832f5d251f7c439a355b66e06a333b99e6ce9ce2f4cb3e8a34f30a808fa57cb42fc1b77232883f0f7721666276f2284ff9141d364e167d5942d8b34fb91e2e1dc055f5b435157083598c52b049f1f062b7e98189c3b9c410cad02feab6de6", &(0x7f0000000480)="07fdd92814f16f3aec47ddc6857ca760642180b1ba345e611001d8f4797851dbdb9df658861bba4fa41c6330eaf5c9616404294fa7ac132b7ad95d2fc3d37fff881b91af4b41ecad1472c813e232e308db1d430e275bc09d07ce7153dcf6dc466799b69de7ecd5c4a1b080e9c808160a73487e83a3cbd8a8f76edc6bdacccb8151d76821212b0fa3fbb33102dda80b9c3ac710", 0x5, 0x0, 0xc}, 0x50)

113.629628ms ago: executing program 1 (id=3126):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000000)=""/30, 0x1e)
r2 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000c40)="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", 0x427}, {&(0x7f0000000380)="3c8ca6e2b508e02021562b5a6ed6d4ae4cb3b6e5f44b21250e0d3e9756893ba770a233", 0x23}], 0x2, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x38}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x54}}, 0x0)

52.964895ms ago: executing program 1 (id=3127):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000cdf605efe7b5ece9accfbb00006d1b742936000000dbc2b11b49c374e5bef5373d3d78cdf1cfee8387ba6e71ab28ee523c95dec40351897161e06a574a52f71847ed54eea733c3323f8fabf12f45a970d46c1474553d681bcee88656dd9bf14a6db9120bab3e6a3fee8fe19d3e1a56804c4c5b46dfbd"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
unshare(0x2c020400)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$vsock_stream(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@deltaction={0x34, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000115711c72e5e40a85b3dfeb2d88bd3870001166e753468de7a077a3da3184cd16cb0c0bd6c45ac28f50d08f56628aaabce41c7a0669caa31d7fa5980defccb8e865fd9acf33ca9880814411c78a5510c6bdfa953bfaacdbc8fb4798d66b5dbf0713e96a2ada195807cf6e370dbaf1b8095665e7e15cab08fe0a52cc9626784adaccf2c5f36561a001bb539da6732696eb96b88362cf274c93e520941f14ef05908906392d02a1d84d3ab6afaa60945a827ebbf950500"/209, @ANYRES32=0x0, @ANYBLOB="0000080008200000140035006970766c616e300000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', <r7=>0x0, 0x8, 0x96, 0x77, 0x2984, {{0x37, 0x4, 0x1, 0x0, 0x12a, 0x64, 0x200, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x25, 0x3, 0x1, [{@rand_addr=0x64010100, 0x8000}, {@multicast2, 0x4}]}, @generic={0x44, 0xf, "e1dc2294779eece324373a55e9"}, @rr={0x7, 0x1b, 0x98, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @loopback]}, @rr={0x7, 0x2b, 0x5b, [@multicast2, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @local, @local, @multicast2, @empty]}, @timestamp_prespec={0x44, 0x3c, 0xdf, 0x3, 0x3, [{@private=0xa010101}, {@multicast1, 0x4}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x3ff}, {@remote, 0xfff}, {@private=0xa010101, 0x4e2fb876}]}, @ssrr={0x89, 0x1f, 0x5a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newchain={0x34, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xe}, {0x7}, {0xfffc, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x6}, 0x40004)

52.702498ms ago: executing program 2 (id=3128):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x24048194}, 0x4) (async)
r1 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 2 (id=3129):
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054ec1f783d84cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683fe7eb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cabf1f41a1321a83222a9ecbee5de68ee5e923ac9ed3e1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x20000008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000005400000124bd70010000000007000000", @ANYRES32=r3, @ANYBLOB="200001003d14cde98985b35065f128c8d02a21261c672b9593d6175bf7f3e072b48737acfc9394356e3aae0e390f72c8b9ee04ad3bc4cf551dd9a4fa9958546066c0b0830efe3237ead7ed7c6f48a32a59424a57eea732dd0bf304d69ff0779fdbcdca77ba83e1c6427ebd2ea17d3c412a2acb9c1caef712f77e7adcf26bc94d8463288046c20e84f13575ed0253b3e0f1e294fe5328141765233edfa11e60402d6656108e65183d28839b21af603894c2ad9f4bbbc29b1be31781d29942011d", @ANYRES32=r3, @ANYBLOB="01000380ff01000000000000000000000000000100000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008055}, 0x4040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="ed4d000000000000000031000000080003", @ANYRES32=r6, @ANYBLOB="02005200", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppl2tp(r7, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x1, 0x1}}, 0x2e)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES8=r0], 0x2c}}, 0x0)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]})
ioctl$sock_netrom_SIOCADDRT(r9, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r7, 0x5c2a7000)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x28011, r10, 0xac9d4000)

kernel console output (not intermixed with test programs):

edium
[  159.971326][T10737] syz.1.1281 (10737) used greatest stack depth: 19488 bytes left
[  160.002217][T10786] netlink: 'syz.0.1296': attribute type 1 has an invalid length.
[  160.539194][T10833] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.543028][T10833] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.599133][T10837] netlink: 'syz.0.1310': attribute type 21 has an invalid length.
[  160.777873][T10858] netlink: 'syz.0.1315': attribute type 2 has an invalid length.
[  160.954377][T10876] veth0_to_bond: left allmulticast mode
[  160.956938][T10876] veth0_to_bond: left promiscuous mode
[  160.959344][T10876] bridge0: port 2(veth0_to_bond) entered disabled state
[  161.310320][T10907] syzkaller0: entered promiscuous mode
[  161.312204][T10907] syzkaller0: entered allmulticast mode
[  161.430401][T10915] nbd: must specify a size in bytes for the device
[  161.437774][T10915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.463993][T10915] netlink: 'syz.2.1334': attribute type 14 has an invalid length.
[  161.497240][T10915] netlink: 'syz.2.1334': attribute type 14 has an invalid length.
[  161.506263][T10920] syzkaller1: entered allmulticast mode
[  161.506324][T10918] xt_time: unknown flags 0xf4
[  161.682105][T10942] netlink: 'syz.1.1343': attribute type 2 has an invalid length.
[  161.704121][T10947] netlink: 'syz.0.1342': attribute type 2 has an invalid length.
[  161.725342][T10940] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  161.727583][T10940] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  161.823099][T10947] bond37 (unregistering): Released all slaves
[  161.847418][T10963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  161.921027][T10970] __nla_validate_parse: 21 callbacks suppressed
[  161.921075][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  162.243124][T10963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  162.269307][T10990] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1347'.
[  162.309631][T10963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  162.373868][T10963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  162.412243][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'.
[  162.457704][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  162.460270][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  162.473796][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  162.482378][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  162.592543][T11020] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1352'.
[  162.599202][T11020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  162.602878][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1352'.
[  162.858237][T11051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1355'.
[  162.872463][T11051] tipc: Resetting bearer <eth:team0>
[  162.876772][T11051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.886551][T11051] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1355'.
[  162.890476][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'.
[  162.904635][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'.
[  163.079918][T11065] pimreg3: entered allmulticast mode
[  163.268535][T11080] xt_policy: neither incoming nor outgoing policy selected
[  163.402771][T11099] team0: Mode changed to "activebackup"
[  163.507421][T11102] tipc: Resetting bearer <eth:team0>
[  163.512278][T11102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.799972][T11119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.806000][T11119] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  163.809709][T11119] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  163.812511][T11119] tipc: Resetting bearer <eth:syzkaller0>
[  163.820918][T11121] netem: change failed
[  163.828179][T11119] tipc: Resetting bearer <eth:syzkaller0>
[  163.881736][T11128] block nbd0: Unsupported socket: shutdown callout must be supported.
[  164.120083][T11160] validate_nla: 5 callbacks suppressed
[  164.120094][T11160] netlink: 'syz.2.1385': attribute type 1 has an invalid length.
[  164.147904][T11160] 8021q: adding VLAN 0 to HW filter on device bond18
[  164.161743][T11160] bond18: (slave gretap4): making interface the new active one
[  164.174330][T11160] bond18: (slave gretap4): Enslaving as an active interface with an up link
[  164.246941][T11170] netlink: 'syz.2.1388': attribute type 2 has an invalid length.
[  164.758749][T11203] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.770883][T11203] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  164.775116][T11203] bond2: (slave macvlan1): Enslaving as a backup interface with a down link
[  164.785635][T11203] bond2: (slave macvlan1): Releasing backup interface
[  164.937669][T11209] bridge0: port 2(syz_tun) entered blocking state
[  164.940353][T11209] bridge0: port 2(syz_tun) entered disabled state
[  164.942729][T11209] syz_tun: entered allmulticast mode
[  164.948721][T11209] syz_tun: entered promiscuous mode
[  165.124377][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  165.181682][T11228] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  165.185056][T11228] team0: Device macvtap1 is already an upper device of the team interface
[  165.332234][T11245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  165.337203][T11244] IPVS: stopping backup sync thread 11245 ...
[  165.361215][T11247] sctp: [Deprecated]: syz.1.1408 (pid 11247) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.361215][T11247] Use struct sctp_sack_info instead
[  165.367135][T11247] sctp: [Deprecated]: syz.1.1408 (pid 11247) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.367135][T11247] Use struct sctp_sack_info instead
[  165.464463][T11253] netlink: 'syz.2.1410': attribute type 18 has an invalid length.
[  165.578411][T11262] netlink: 'syz.2.1412': attribute type 3 has an invalid length.
[  165.581989][T11262] netlink: 'syz.2.1412': attribute type 3 has an invalid length.
[  165.765805][T11285] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  165.802346][T11282] netlink: 'syz.0.1418': attribute type 10 has an invalid length.
[  165.807373][T11282] bond0: (slave wlan1): refused to change device type
[  165.909154][T11300] netlink: 'syz.2.1421': attribute type 1 has an invalid length.
[  166.440964][T11337] vlan6: entered promiscuous mode
[  166.443045][T11337] bridge0: entered promiscuous mode
[  166.608415][T11356] netlink: 'syz.0.1441': attribute type 2 has an invalid length.
[  166.619862][T11358] netlink: 'syz.2.1439': attribute type 16 has an invalid length.
[  166.688097][T11358] tipc: Resetting bearer <eth:team0>
[  166.753077][T11358] tipc: Resetting bearer <eth:syzkaller0>
[  166.826009][ T9184] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.830845][ T9184] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.839404][ T9184] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.842827][ T9184] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  167.099095][T11378] 8021q: adding VLAN 0 to HW filter on device bond19
[  167.148403][T11382] __nla_validate_parse: 20 callbacks suppressed
[  167.148419][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'.
[  167.339241][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'.
[  167.643024][T11424] can: request_module (can-proto-0) failed.
[  167.695144][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  167.708387][T11431] team0: Device gtp1 is up. Set it down before adding it as a team port
[  167.889001][T11441] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.896920][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.896920][T11439] Use struct sctp_assoc_value instead
[  167.902368][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.902368][T11439] Use struct sctp_assoc_value instead
[  167.909394][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.909394][T11439] Use struct sctp_assoc_value instead
[  167.925624][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  167.932776][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.932776][T11439] Use struct sctp_assoc_value instead
[  167.939145][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.939145][T11439] Use struct sctp_assoc_value instead
[  167.944670][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.944670][T11439] Use struct sctp_assoc_value instead
[  167.949792][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.949792][T11439] Use struct sctp_assoc_value instead
[  167.962878][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.962878][T11439] Use struct sctp_assoc_value instead
[  167.968286][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.968286][T11439] Use struct sctp_assoc_value instead
[  167.975340][T11439] sctp: [Deprecated]: syz.0.1464 (pid 11439) Use of int in maxseg socket option.
[  167.975340][T11439] Use struct sctp_assoc_value instead
[  168.082325][T11456] tipc: Resetting bearer <eth:syzkaller0>
[  168.459161][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'.
[  168.459183][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'.
[  168.507477][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1478'.
[  168.606558][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'.
[  168.616136][T11507] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  168.778008][T11515] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1482'.
[  168.783054][T11515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1482'.
[  169.377360][T11547] validate_nla: 4 callbacks suppressed
[  169.377379][T11547] netlink: 'syz.0.1493': attribute type 1 has an invalid length.
[  169.387671][T11547] bond2: (slave vcan3): The slave device specified does not support setting the MAC address
[  169.391737][T11547] bond2: (slave vcan3): Error -95 calling set_mac_address
[  169.407219][T11549] syz.1.1494 (11549) used greatest stack depth: 19440 bytes left
[  169.469960][T11541] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  169.510107][T11541] 8021q: adding VLAN 0 to HW filter on device bond20
[  170.171673][ T5879] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  171.120778][T11619] netlink: 'syz.2.1510': attribute type 8 has an invalid length.
[  171.158862][T11635] netlink: 'syz.1.1514': attribute type 13 has an invalid length.
[  171.161476][T11635] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  171.277011][T11645] tipc: Failed to remove unknown binding: 66,1,1/11578026:2772310469/2772310471
[  171.280546][T11645] tipc: Failed to remove unknown binding: 66,1,1/11578026:2772310469/2772310471
[  172.058983][T11648] veth1_to_bond: entered allmulticast mode
[  172.110759][T11648] veth1_to_bond (unregistering): left allmulticast mode
[  172.184812][T11658] __nla_validate_parse: 7 callbacks suppressed
[  172.184824][T11658] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1520'.
[  172.375574][T11674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.378558][T11674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.608123][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1528'.
[  173.182611][T11699] sctp: [Deprecated]: syz.2.1531 (pid 11699) Use of int in max_burst socket option deprecated.
[  173.182611][T11699] Use struct sctp_assoc_value instead
[  173.206354][T11699] ksmbd: Unknown IPC event: 3, ignore.
[  173.230598][T11702] netlink: 'syz.1.1532': attribute type 1 has an invalid length.
[  173.237992][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'.
[  173.246050][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1532'.
[  173.260027][T11703] bridge0: port 1(batadv1) entered blocking state
[  173.262876][T11703] bridge0: port 1(batadv1) entered disabled state
[  173.266524][T11703] batadv1: entered allmulticast mode
[  173.270236][T11703] batadv1: entered promiscuous mode
[  173.282593][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'.
[  173.358134][T11708] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1534'.
[  173.368959][T11708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1534'.
[  173.397044][T11710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.401551][T11710] tipc: Resetting bearer <eth:syzkaller0>
[  173.614213][T11730] batadv_slave_0: entered promiscuous mode
[  173.620982][T11729] batadv_slave_0: left promiscuous mode
[  173.690071][T11734] syzkaller0: entered promiscuous mode
[  173.691895][T11734] syzkaller0: entered allmulticast mode
[  173.764658][ T5879] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  173.769116][ T5879] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  173.844359][T11745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.900982][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1548'.
[  174.072285][T11756] tipc: Resetting bearer <eth:syzkaller0>
[  174.086613][T11756] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  174.089611][T11756] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  174.151683][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'.
[  174.157695][T11760] nbd0: detected capacity change from 0 to 63
[  174.194951][T11760] bond37: entered promiscuous mode
[  174.197539][T11760] 8021q: adding VLAN 0 to HW filter on device bond37
[  174.204001][   T56] block nbd0: Receive control failed (result -104)
[  174.216354][T11766] vxcan0: entered promiscuous mode
[  174.421500][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.688869][ T5858] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  175.518857][T11819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.529041][T11819] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  175.531869][T11819] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  175.535339][T11819] tipc: Resetting bearer <eth:syzkaller0>
[  175.771065][T11833] mac80211_hwsim hwsim4 ;: left allmulticast mode
[  175.774217][T11833] mac80211_hwsim hwsim4 ;: left promiscuous mode
[  175.796453][T11835] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.828783][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'.
[  176.045875][T11847] netlink: 'syz.1.1577': attribute type 1 has an invalid length.
[  176.115227][   T33] audit: type=1804 audit(1757361598.271:3): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1580" name="/newroot/560/cgroup.controllers" dev="tmpfs" ino=2877 res=1 errno=0
[  176.137297][   T33] audit: type=1800 audit(1757361598.271:4): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1580" name="cgroup.controllers" dev="tmpfs" ino=2877 res=0 errno=0
[  176.229795][T11880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.232211][T11879] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.237555][T11879] syzkaller0: entered promiscuous mode
[  176.239430][T11879] syzkaller0: entered allmulticast mode
[  176.245425][T11879] tipc: Resetting bearer <eth:syzkaller0>
[  176.283646][T11878] tipc: Resetting bearer <eth:syzkaller0>
[  176.304530][T11878] tipc: Disabling bearer <eth:syzkaller0>
[  176.538672][T11905] netlink: 'syz.2.1593': attribute type 3 has an invalid length.
[  176.543027][T11905] netlink: 'syz.2.1593': attribute type 3 has an invalid length.
[  176.558621][T11905] netlink: 'syz.2.1593': attribute type 1 has an invalid length.
[  176.575259][T11915] netlink: 'syz.0.1594': attribute type 1 has an invalid length.
[  176.766127][T11934] netlink: 'syz.1.1600': attribute type 26 has an invalid length.
[  177.422366][T11958] netlink: 'syz.0.1608': attribute type 1 has an invalid length.
[  177.426322][T11958] netlink: 'syz.0.1608': attribute type 2 has an invalid length.
[  177.430014][T11958] netlink: 'syz.0.1608': attribute type 1 has an invalid length.
[  177.433011][T11958] netlink: 'syz.0.1608': attribute type 2 has an invalid length.
[  177.471920][T11960] __nla_validate_parse: 140 callbacks suppressed
[  177.471937][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'.
[  177.511719][T11960] gretap0: left promiscuous mode
[  177.535339][T11960] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.539212][T11960] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  177.560428][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1609'.
[  178.024181][T11974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1615'.
[  178.110112][T11979] batadv0: entered promiscuous mode
[  178.145250][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'.
[  178.239196][T11979] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.1616'.
[  178.262640][T11981] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  178.349016][T11994] Bluetooth: MGMT ver 1.23
[  178.452951][T12002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1621'.
[  178.488648][T11993] 8021q: adding VLAN 0 to HW filter on device bond38
[  178.521117][T12003] bond38: (slave gretap4): making interface the new active one
[  178.528803][T12003] bond38: (slave gretap4): Enslaving as an active interface with an up link
[  178.577654][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1622'.
[  178.580792][T12008] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1622'.
[  178.723468][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  178.800711][T12018] tipc: Resetting bearer <eth:syzkaller0>
[  178.806503][T12018] bond16: (slave geneve3): Releasing active interface
[  178.810755][T12018] bond18: (slave gretap4): Releasing active interface
[  178.825799][T12020] ip6tnl4: entered promiscuous mode
[  179.201277][T12030] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  179.248634][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'.
[  179.374780][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.422162][T12042] syzkaller1: entered promiscuous mode
[  179.425409][T12042] syzkaller1: entered allmulticast mode
[  179.515682][T12048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1633'.
[  179.638390][T12052] tipc: Resetting bearer <eth:syzkaller0>
[  180.556042][T12075] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  180.560604][T12075] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  180.886816][T12109] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  181.128894][T12135] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  181.173566][T12137] Bluetooth: MGMT ver 1.23
[  181.191355][T12140] pim6reg99999999: entered allmulticast mode
[  181.366481][T12155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.589977][T12163] batadv_slave_1: entered promiscuous mode
[  181.597007][T12162] batadv_slave_1: left promiscuous mode
[  181.809562][T12178] validate_nla: 6 callbacks suppressed
[  181.809578][T12178] netlink: 'syz.0.1672': attribute type 3 has an invalid length.
[  181.969838][T12193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.042682][T12199] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  182.232205][T12210] syzkaller1: entered promiscuous mode
[  182.234421][T12210] syzkaller1: entered allmulticast mode
[  182.477455][T12227] __nla_validate_parse: 25 callbacks suppressed
[  182.477466][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1687'.
[  182.500461][T12227] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1687'.
[  182.515087][T12233] netlink: 'syz.2.1688': attribute type 12 has an invalid length.
[  182.528744][T12232] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  182.555438][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'.
[  182.562457][T12240] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1690'.
[  182.724455][T12249] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.746400][T12254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.832555][T12263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'.
[  182.837895][T12263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1695'.
[  182.841338][T12263] netlink: 'syz.2.1695': attribute type 1 has an invalid length.
[  182.847151][T12263] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  182.849990][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1695'.
[  182.969967][T12276] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1699'.
[  182.979075][T12278] netlink: 'syz.0.1698': attribute type 1 has an invalid length.
[  182.982983][T12276] netlink: zone id is out of range
[  182.993501][T12276] netlink: zone id is out of range
[  182.995634][T12276] netlink: zone id is out of range
[  182.997684][T12276] netlink: zone id is out of range
[  182.999714][T12276] netlink: zone id is out of range
[  183.001822][T12276] netlink: zone id is out of range
[  183.016880][T12276] netlink: zone id is out of range
[  183.019130][T12278] bond40: (slave vxcan5): The slave device specified does not support setting the MAC address
[  183.024292][T12278] bond40: (slave vxcan5): Error -95 calling set_mac_address
[  183.060993][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'.
[  183.078244][T12283] gretap5: entered promiscuous mode
[  183.082438][T12283] bond40: (slave gretap5): making interface the new active one
[  183.086458][T12283] bond40: (slave gretap5): Enslaving as an active interface with an up link
[  183.178199][T12289] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  183.186571][T12288] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  183.199437][T12289] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  183.208495][T12289] bond17: (slave vcan0): Error -95 calling set_mac_address
[  183.235338][T12288] batadv_slave_0: entered promiscuous mode
[  183.239586][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  183.263908][T12289] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  183.273179][T12289] bond17: (slave vcan0): Error -95 calling set_mac_address
[  183.308211][T12295] 8021q: adding VLAN 0 to HW filter on device bond17
[  183.398151][T12306] netlink: 'syz.0.1707': attribute type 1 has an invalid length.
[  183.452247][T12312] "syz.2.1708" (12312) uses obsolete ecb(arc4) skcipher
[  183.456361][T12310] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.501587][T12306] bond41: entered promiscuous mode
[  183.505471][T12306] 8021q: adding VLAN 0 to HW filter on device bond41
[  183.528831][T12310] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  183.532305][T12310] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  183.556350][T12310] syz_tun: left allmulticast mode
[  183.557944][T12310] syz_tun: left promiscuous mode
[  183.559642][T12310] bridge0: port 2(syz_tun) entered disabled state
[  183.565507][T12310] veth9: left allmulticast mode
[  183.567050][T12310] veth9: left promiscuous mode
[  183.568669][T12310] bridge0: port 1(veth9) entered disabled state
[  183.583828][T12310] bond1: (slave macvlan1): Releasing backup interface
[  184.025198][T12368] batadv_slave_1: entered promiscuous mode
[  184.058965][T12369] batadv_slave_1: left promiscuous mode
[  184.262351][T12387] netlink: 'syz.1.1727': attribute type 1 has an invalid length.
[  184.297045][T12387] 8021q: adding VLAN 0 to HW filter on device bond11
[  184.307833][T12387] vlan0: entered promiscuous mode
[  184.309690][T12387] bond11: entered promiscuous mode
[  184.312152][T12387] vlan0: entered allmulticast mode
[  184.314830][T12387] bond11: entered allmulticast mode
[  184.331215][T12387] bond11: (slave gretap2): making interface the new active one
[  184.337611][T12387] gretap2: entered promiscuous mode
[  184.343806][T12387] gretap2: entered allmulticast mode
[  184.357040][T12387] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  184.544774][T12409] vlan0: entered allmulticast mode
[  184.546944][T12409] bridge_slave_0: entered allmulticast mode
[  184.888307][T12419] xt_socket: unknown flags 0xd0
[  185.000170][T12426] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8
[  185.038707][T12428] netlink: 'syz.2.1740': attribute type 1 has an invalid length.
[  185.573114][T12464] netlink: 'syz.1.1749': attribute type 1 has an invalid length.
[  185.591919][T12464] bond12 (unregistering): Released all slaves
[  186.354735][T12479] GUP no longer grows the stack in syz.2.1753 (12479): 200000006000-20000000a000 (200000005000)
[  186.358386][T12479] CPU: 0 UID: 0 PID: 12479 Comm: syz.2.1753 Not tainted syzkaller #0 PREEMPT(full) 
[  186.358399][T12479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.358405][T12479] Call Trace:
[  186.358410][T12479]  <TASK>
[  186.358415][T12479]  dump_stack_lvl+0x189/0x250
[  186.358432][T12479]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.358442][T12479]  ? __pfx__printk+0x10/0x10
[  186.358453][T12479]  ? find_vma+0xe7/0x160
[  186.358470][T12479]  __get_user_pages+0x24d0/0x2ce0
[  186.358479][T12479]  ? __lock_acquire+0xab9/0xd20
[  186.358504][T12479]  ? __gup_longterm_locked+0xc68/0x1660
[  186.358518][T12479]  __gup_longterm_locked+0xde9/0x1660
[  186.358531][T12479]  ? try_grab_folio_fast+0x1be/0x4f0
[  186.358546][T12479]  ? gup_fast_fallback+0x195f/0x2010
[  186.358558][T12479]  gup_fast_fallback+0x1e6a/0x2010
[  186.358583][T12479]  ? __pfx_gup_fast_fallback+0x10/0x10
[  186.358592][T12479]  ? __mutex_lock+0x335/0x1350
[  186.358604][T12479]  ? futex_unqueue+0x22/0x240
[  186.358613][T12479]  ? futex_unqueue+0x22/0x240
[  186.358621][T12479]  ? futex_unqueue+0x22/0x240
[  186.358630][T12479]  ? is_valid_gup_args+0x11f/0x200
[  186.358641][T12479]  ? get_user_pages_fast+0x4d/0xb0
[  186.358653][T12479]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  186.358666][T12479]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  186.358674][T12479]  ? wait_for_space+0x24d/0x2d0
[  186.358727][T12479]  iov_iter_get_pages2+0x5e/0xa0
[  186.358740][T12479]  __se_sys_vmsplice+0x548/0x10d0
[  186.358761][T12479]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  186.358774][T12479]  ? __pfx_futex_wait+0x10/0x10
[  186.358793][T12479]  ? __lock_acquire+0xab9/0xd20
[  186.358820][T12479]  ? do_pipe2+0xf7/0x170
[  186.358833][T12479]  ? do_syscall_64+0xbe/0x3b0
[  186.358845][T12479]  do_syscall_64+0xfa/0x3b0
[  186.358853][T12479]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.358862][T12479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.358871][T12479]  ? exc_page_fault+0x9f/0xf0
[  186.358881][T12479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.358889][T12479] RIP: 0033:0x7fb89a58ebe9
[  186.358898][T12479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.358905][T12479] RSP: 002b:00007fb89b4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  186.358915][T12479] RAX: ffffffffffffffda RBX: 00007fb89a7c5fa0 RCX: 00007fb89a58ebe9
[  186.358922][T12479] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010
[  186.358929][T12479] RBP: 00007fb89a611e19 R08: 0000000000000000 R09: 0000000000000000
[  186.358934][T12479] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  186.358938][T12479] R13: 00007fb89a7c6038 R14: 00007fb89a7c5fa0 R15: 00007ffe12d196e8
[  186.358953][T12479]  </TASK>
[  186.608901][T12489] netlink: 'syz.1.1756': attribute type 11 has an invalid length.
[  186.722029][T12497] 8021q: adding VLAN 0 to HW filter on device bond17
[  186.724848][T12497] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  186.729239][T12497] bond17: (slave vcan0): Error -95 calling set_mac_address
[  186.745347][T12498] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  186.750127][T12498] bond17: (slave vcan0): Error -95 calling set_mac_address
[  186.777928][T12497] bond17: (slave vcan0): The slave device specified does not support setting the MAC address
[  186.782291][T12497] bond17: (slave vcan0): Error -95 calling set_mac_address
[  186.910533][T12509] validate_nla: 2 callbacks suppressed
[  186.910549][T12509] netlink: 'syz.2.1760': attribute type 4 has an invalid length.
[  186.947004][T12513] netlink: 'syz.1.1761': attribute type 1 has an invalid length.
[  186.999831][T12513] 8021q: adding VLAN 0 to HW filter on device bond12
[  187.290685][T12535] netlink: 'syz.0.1768': attribute type 1 has an invalid length.
[  187.335527][T12536] bond42: (slave geneve0): making interface the new active one
[  187.340757][T12536] bond42: (slave geneve0): Enslaving as an active interface with an up link
[  187.345210][ T5858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  187.348387][ T5858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  187.351472][ T5858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  187.364397][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  187.457391][T12546] 8021q: adding VLAN 0 to HW filter on device bond44
[  187.461944][T12546] bond43: (slave bond44): Enslaving as an active interface with an up link
[  187.546912][T12546] __nla_validate_parse: 19 callbacks suppressed
[  187.546928][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  187.558508][T12546] bond43 (unregistering): (slave bond44): Releasing backup interface
[  187.581079][T12546] bond43 (unregistering): Released all slaves
[  188.545675][T12560] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  188.743517][T12599] bridge0: port 2(batadv2) entered blocking state
[  188.746056][T12599] bridge0: port 2(batadv2) entered disabled state
[  188.748695][T12599] batadv2: entered allmulticast mode
[  188.751939][T12599] batadv2: entered promiscuous mode
[  189.040572][T12611] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  189.137859][T12616] tipc: Resetting bearer <eth:syzkaller0>
[  189.147192][T12616] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  189.149533][T12616] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  189.153722][T12616] vlan5: left allmulticast mode
[  189.155346][T12616] veth1: left allmulticast mode
[  189.243489][ T9184] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  189.246264][ T9184] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  189.291890][T12618] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  189.296523][T12618] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1787'.
[  189.320168][T12620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1788'.
[  189.324083][T12620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1788'.
[  189.329085][T12620] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1788'.
[  189.360679][T12622] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1789'.
[  189.383025][T12624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  189.528278][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'.
[  189.607429][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'.
[  189.682050][T12654] netlink: 'syz.2.1797': attribute type 21 has an invalid length.
[  189.689975][T12654] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1797'.
[  189.716072][T12656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.719586][T12656] syzkaller0: entered promiscuous mode
[  189.721775][T12656] syzkaller0: entered allmulticast mode
[  189.747276][T12656] tipc: Resetting bearer <eth:syzkaller0>
[  189.752697][T12655] tipc: Resetting bearer <eth:syzkaller0>
[  189.775901][T12655] tipc: Disabling bearer <eth:syzkaller0>
[  189.879241][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1800'.
[  189.970220][T12669] netlink: 'syz.1.1803': attribute type 1 has an invalid length.
[  189.986517][T12671] netlink: 'syz.0.1804': attribute type 11 has an invalid length.
[  190.446854][T12684] syzkaller0: entered promiscuous mode
[  190.448689][T12684] syzkaller0: entered allmulticast mode
[  190.973796][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  191.061520][T12730] tipc: Enabled bearer <udp:syz0>, priority 10
[  191.066058][T12732] netlink: 'syz.2.1820': attribute type 1 has an invalid length.
[  191.092726][T12732] bond22: entered promiscuous mode
[  191.096280][T12732] 8021q: adding VLAN 0 to HW filter on device bond22
[  191.110039][T12735] netlink: 'syz.1.1821': attribute type 1 has an invalid length.
[  191.113055][T12735] netlink: 'syz.1.1821': attribute type 2 has an invalid length.
[  191.118187][T12735] netlink: 'syz.1.1821': attribute type 1 has an invalid length.
[  191.268579][T12743] hsr_slave_1 (unregistering): left promiscuous mode
[  191.354627][T12750] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  191.377493][T12750] syzkaller1: entered promiscuous mode
[  191.381954][T12750] syzkaller1: entered allmulticast mode
[  191.395044][T12750] (unnamed net_device) (uninitialized): option coupled_control: invalid value (88)
[  191.760031][T12776] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  191.780023][T12778] vlan1: entered promiscuous mode
[  191.782104][T12778] vlan1: entered allmulticast mode
[  191.801685][T11039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.805387][T11039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.811319][T12776] vlan0: entered promiscuous mode
[  192.063294][T10019] tipc: Node number set to 3870269942
[  192.346961][T12797] bond43: entered promiscuous mode
[  192.594607][T12819] vcan0: tx drop: invalid da for name 0x0000000000000003
[  192.685609][T12826] __nla_validate_parse: 20 callbacks suppressed
[  192.685621][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1850'.
[  192.690545][T12826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'.
[  192.695319][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1850'.
[  192.698233][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1850'.
[  193.289263][T12850] validate_nla: 1 callbacks suppressed
[  193.289276][T12850] netlink: 'syz.2.1855': attribute type 1 has an invalid length.
[  193.294913][T12850] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1855'.
[  193.328633][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'.
[  193.628424][T12866] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1860'.
[  193.685172][T12870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  193.724533][T12869] block nbd1: server does not support multiple connections per device.
[  193.727652][T12869] block nbd1: shutting down sockets
[  193.746026][T12873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1862'.
[  193.825919][T12876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1863'.
[  194.007470][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.372981][T12881] netlink: 'syz.2.1865': attribute type 1 has an invalid length.
[  194.401248][T12881] bond23: entered promiscuous mode
[  194.404326][T12881] 8021q: adding VLAN 0 to HW filter on device bond23
[  194.410145][T12881] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1865'.
[  194.420749][T12881] batadv2: entered promiscuous mode
[  194.423075][T12881] batadv2: entered allmulticast mode
[  194.428441][T12881] 8021q: adding VLAN 0 to HW filter on device batadv2
[  194.433040][T12881] bond23: (slave batadv2): making interface the new active one
[  194.439016][T12881] bond23: (slave batadv2): Enslaving as an active interface with an up link
[  194.766166][T12903] netlink: 'syz.1.1870': attribute type 1 has an invalid length.
[  194.768644][T12903] netlink: 'syz.1.1870': attribute type 2 has an invalid length.
[  194.969620][T12908] erspan0: entered promiscuous mode
[  194.972018][T12908] macvtap1: entered promiscuous mode
[  194.975504][T12908] macvtap1: entered allmulticast mode
[  194.977731][T12908] erspan0: entered allmulticast mode
[  194.996016][T12910] netlink: 'syz.0.1873': attribute type 2 has an invalid length.
[  194.999656][T12910] netlink: 'syz.0.1873': attribute type 2 has an invalid length.
[  195.027585][T12910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.040027][T12910] syzkaller0: entered promiscuous mode
[  195.042168][T12910] syzkaller0: entered allmulticast mode
[  195.078688][T12910] tipc: Resetting bearer <eth:syzkaller0>
[  195.109657][T12910] tipc: Resetting bearer <eth:syzkaller0>
[  195.126395][T12910] tipc: Disabling bearer <eth:syzkaller0>
[  195.412747][T12938] bond23: (slave batadv2): Releasing active interface
[  195.471530][T12940] can: request_module (can-proto-0) failed.
[  195.670428][T12947] netlink: 'syz.1.1883': attribute type 23 has an invalid length.
[  196.176254][T12958] netlink: 'syz.2.1887': attribute type 6 has an invalid length.
[  196.388051][T12978] netlink: 'syz.1.1893': attribute type 3 has an invalid length.
[  197.364542][T13014] batadv1: left allmulticast mode
[  197.366721][T13014] batadv1: left promiscuous mode
[  197.369027][T13014] bridge0: port 1(batadv1) entered disabled state
[  197.380263][T13014] bond38: (slave gretap4): Releasing active interface
[  197.390666][T13014] bond40: (slave gretap5): Releasing active interface
[  197.400677][T13014] bond42: (slave geneve0): Releasing active interface
[  197.409145][T13014] batadv2: left allmulticast mode
[  197.411401][T13014] batadv2: left promiscuous mode
[  197.414691][T13014] bridge0: port 2(batadv2) entered disabled state
[  197.431778][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  197.435051][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  197.438318][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  197.442036][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  197.558462][T13023] netlink: 'syz.2.1904': attribute type 4 has an invalid length.
[  197.681438][T13034] net_ratelimit: 19 callbacks suppressed
[  197.681456][T13034] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  197.746646][T13038] openvswitch: netlink: Multiple metadata blocks provided
[  197.749855][T13038] __nla_validate_parse: 34 callbacks suppressed
[  197.749870][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'.
[  197.756308][T13038] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  197.847857][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1914'.
[  197.901113][T13055] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  198.009729][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'.
[  198.159729][T13064] tipc: Disabling bearer <eth:team0>
[  198.482342][T13091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1924'.
[  198.589390][T13100] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004
[  198.639070][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1929'.
[  198.652253][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1925'.
[  198.743692][T13107] validate_nla: 2 callbacks suppressed
[  198.743708][T13107] netlink: 'syz.2.1929': attribute type 30 has an invalid length.
[  198.834004][T13097] netlink: 'syz.0.1927': attribute type 2 has an invalid length.
[  199.054683][T13118] netlink: 'syz.0.1931': attribute type 10 has an invalid length.
[  199.058015][T13118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1931'.
[  199.061987][T13118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.098544][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'.
[  199.102158][T13123] netlink: 'syz.2.1934': attribute type 2 has an invalid length.
[  199.106098][T13123] netlink: 'syz.2.1934': attribute type 1 has an invalid length.
[  199.109099][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'.
[  199.118606][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1934'.
[  199.387962][T13130] bridge8: port 1(veth13) entered blocking state
[  199.390296][T13130] bridge8: port 1(veth13) entered disabled state
[  199.393076][T13130] veth13: entered allmulticast mode
[  199.396501][T13130] veth13: entered promiscuous mode
[  199.409362][T13130] bridge8: port 2(veth0_to_bond) entered blocking state
[  199.414784][T13130] bridge8: port 2(veth0_to_bond) entered disabled state
[  199.417662][T13130] veth0_to_bond: entered allmulticast mode
[  199.420920][T13130] veth0_to_bond: entered promiscuous mode
[  199.434317][T13131] vlan1: entered allmulticast mode
[  199.436043][T13131] veth1: entered allmulticast mode
[  199.437887][T13131] bridge8: port 3(vlan1) entered blocking state
[  199.440029][T13131] bridge8: port 3(vlan1) entered disabled state
[  199.443629][T13131] vlan1: entered promiscuous mode
[  199.445363][T13131] veth1: entered promiscuous mode
[  199.664797][T13146] netlink: 'syz.1.1939': attribute type 1 has an invalid length.
[  199.691764][T13146] bond13: (slave geneve2): making interface the new active one
[  199.696735][T13146] bond13: (slave geneve2): Enslaving as an active interface with an up link
[  199.700935][ T5869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  199.713798][ T5869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  199.716645][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  199.720425][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  199.727720][T13146] 8021q: adding VLAN 0 to HW filter on device bond13
[  199.749413][T13146] syz.1.1939 (13146) used greatest stack depth: 18776 bytes left
[  199.995570][T13175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.065167][T13163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.167322][T13173] macvlan1 (unregistering): left allmulticast mode
[  200.329229][T13200] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  200.417900][T13208] openvswitch: netlink: Message has 37 unknown bytes.
[  201.005204][T13233] ipvlan0: entered promiscuous mode
[  201.072831][T13244] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  201.076786][T13244] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.267956][T13262] pim6reg1: entered promiscuous mode
[  201.270224][T13262] pim6reg1: entered allmulticast mode
[  201.290513][T13267] netlink: 'syz.0.1972': attribute type 1 has an invalid length.
[  201.292909][T13267] netlink: 'syz.0.1972': attribute type 1 has an invalid length.
[  201.375695][T13267] netlink: 'syz.0.1972': attribute type 1 has an invalid length.
[  201.400886][T13267] 8021q: adding VLAN 0 to HW filter on device bond45
[  201.411105][T13267] bond45: (slave wlan0): Enslaving as an active interface with a down link
[  201.452967][T13274] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.462534][T13274] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  201.467477][T13274] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  201.470590][T13274] tipc: Resetting bearer <eth:syzkaller0>
[  202.025297][T13316] sctp: [Deprecated]: syz.2.1987 (pid 13316) Use of int in max_burst socket option deprecated.
[  202.025297][T13316] Use struct sctp_assoc_value instead
[  202.040413][T13317] ..1: renamed from ..0
[  202.049204][T13317] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  202.053011][T13317] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  202.516480][T13322] openvswitch: netlink: IP tunnel dst address not specified
[  202.820211][T13332] __nla_validate_parse: 19 callbacks suppressed
[  202.820226][T13332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'.
[  202.828076][T13335] netlink: 'syz.0.1993': attribute type 1 has an invalid length.
[  202.859687][T13335] 8021q: adding VLAN 0 to HW filter on device bond46
[  202.892812][T13338] syzkaller1: entered promiscuous mode
[  202.897122][T13338] syzkaller1: entered allmulticast mode
[  202.914818][T13335] 8021q: adding VLAN 0 to HW filter on device bond46
[  202.918431][T13335] bond46: (slave vxcan5): The slave device specified does not support setting the MAC address
[  202.924462][T13335] bond46: (slave vxcan5): Error -95 calling set_mac_address
[  202.945997][T13339] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.964311][T13338] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1994'.
[  203.039416][T13338] bond0 (unregistering): Released all slaves
[  203.115493][T13347] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1996'.
[  203.160554][T13347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'.
[  203.167148][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'.
[  203.186632][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1997'.
[  203.190216][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1997'.
[  203.203546][T13349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1997'.
[  203.258762][T13356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'.
[  203.268143][T13356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1999'.
[  203.359195][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.362222][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.636041][T13384] : entered promiscuous mode
[  203.638913][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.873124][T13398] vlan2: entered promiscuous mode
[  203.877028][T13398] macvtap0: entered promiscuous mode
[  203.911754][T13403] validate_nla: 5 callbacks suppressed
[  203.911770][T13403] netlink: 'syz.2.2016': attribute type 4 has an invalid length.
[  204.033468][T13411] Unsupported ieee802154 address type: 0
[  204.255813][   T60] block nbd0: Possible stuck request ffff8880201c8e00: control (read@0,1024B). Runtime 30 seconds
[  204.259899][   T60] block nbd0: Possible stuck request ffff8880201c9000: control (read@1024,1024B). Runtime 30 seconds
[  204.264429][   T60] block nbd0: Possible stuck request ffff8880201c9200: control (read@2048,1024B). Runtime 30 seconds
[  204.268528][   T60] block nbd0: Possible stuck request ffff8880201c9400: control (read@3072,1024B). Runtime 30 seconds
[  204.280538][T13434] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  204.345594][T13441] netlink: 'syz.2.2028': attribute type 10 has an invalid length.
[  204.389597][T13436] raw_sendmsg: syz.1.2026 forgot to set AF_INET. Fix it!
[  204.611889][T13459] netlink: 'syz.2.2034': attribute type 4 has an invalid length.
[  204.796836][T13465] veth0_to_team: left promiscuous mode
[  204.798740][T13465] veth0_to_team: left allmulticast mode
[  204.801004][T13465] batadv_slave_0: left promiscuous mode
[  204.803075][T13465] xfrm0: left promiscuous mode
[  204.807094][T13465] xfrm0: left allmulticast mode
[  204.809281][T13465] ..1: left allmulticast mode
[  204.810978][T13465] hsr_slave_0: left allmulticast mode
[  204.817557][T13465] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  204.826966][T13465] ip6tnl1: left promiscuous mode
[  204.829144][T13465] gretap1: left promiscuous mode
[  204.830927][T13465] vxlan0: left promiscuous mode
[  204.832605][T13465] vxlan0: left allmulticast mode
[  204.834665][T13465] ip6tnl2: left promiscuous mode
[  204.837339][T13465] ip6erspan0: left promiscuous mode
[  204.839166][T13465] ip6tnl4: left promiscuous mode
[  204.840844][T13465] ip6tnl4: left allmulticast mode
[  204.843034][T13465] ipvlan0: left allmulticast mode
[  204.846028][T13465] bond9: left allmulticast mode
[  204.847775][T13465] geneve0: left promiscuous mode
[  204.849598][T13465] geneve0: left allmulticast mode
[  204.875117][T13465] vlan0: left promiscuous mode
[  204.876810][T13465] bond11: left promiscuous mode
[  204.878575][T13465] gretap2: left promiscuous mode
[  204.880399][T13465] vlan0: left allmulticast mode
[  204.882146][T13465] bond11: left allmulticast mode
[  204.884362][T13465] gretap2: left allmulticast mode
[  204.897770][T13465] erspan0: left allmulticast mode
[  204.900081][T13465] macvtap1: left promiscuous mode
[  204.902253][T13465] macvtap1: left allmulticast mode
[  204.939114][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.948248][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.951463][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  204.954912][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  205.059421][T13481] netlink: 'syz.0.2037': attribute type 10 has an invalid length.
[  205.061982][T13481] dummy0: entered promiscuous mode
[  205.068725][T13481] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  205.105033][T13469] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  205.332076][T13510] netlink: 'syz.1.2041': attribute type 5 has an invalid length.
[  205.438508][T13522] netlink: 'syz.0.2045': attribute type 5 has an invalid length.
[  205.459411][T13518] netlink: 'syz.2.2044': attribute type 1 has an invalid length.
[  205.466465][T13524] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  205.574416][T13531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.577639][T13531] syzkaller0: entered promiscuous mode
[  205.579937][T13531] syzkaller0: entered allmulticast mode
[  205.590192][T13539] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  205.596374][T13531] tipc: Resetting bearer <eth:syzkaller0>
[  205.617975][T13531] tipc: Disabling bearer <eth:syzkaller0>
[  205.635751][T13541] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.775702][T13549] netlink: 'syz.2.2053': attribute type 1 has an invalid length.
[  205.851170][T13559] openvswitch: netlink: IPv4 tun info is not correct
[  205.892872][T13564] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.965911][T13575] openvswitch: netlink: Flow actions attr not present in new flow.
[  206.130198][T13586] netlink: 'syz.2.2065': attribute type 2 has an invalid length.
[  206.132685][T13586] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  206.295488][T13594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.299205][T13594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.877206][T13606] bridge0: port 1(erspan0) entered blocking state
[  206.880606][T13606] bridge0: port 1(erspan0) entered disabled state
[  206.884996][T13606] erspan0: entered allmulticast mode
[  206.887637][T13606] erspan0: left allmulticast mode
[  207.182788][T13627] netlink: 'syz.2.2075': attribute type 2 has an invalid length.
[  207.216407][T13629] openvswitch: netlink: IP tunnel dst address not specified
[  207.434031][T13646] wg1 speed is unknown, defaulting to 1000
[  207.436446][T13646] wg1 speed is unknown, defaulting to 1000
[  207.439219][T13646] wg1 speed is unknown, defaulting to 1000
[  207.463811][T13646] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  207.551802][T13646] wg1 speed is unknown, defaulting to 1000
[  207.616913][T13650] 8021q: adding VLAN 0 to HW filter on device bond48
[  207.620487][T13650] bond0: (slave bond48): Enslaving as an active interface with an up link
[  207.624919][T13646] wg1 speed is unknown, defaulting to 1000
[  207.713069][T13646] wg1 speed is unknown, defaulting to 1000
[  207.794999][T13660] wg1 speed is unknown, defaulting to 1000
[  207.927088][T13675] __nla_validate_parse: 40 callbacks suppressed
[  207.927099][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'.
[  207.961256][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  208.058253][T13682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2090'.
[  208.068157][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2087'.
[  208.072571][T13683] vlan2: entered promiscuous mode
[  208.074983][T13683] bond0: entered promiscuous mode
[  208.288475][T13691] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2093'.
[  208.540011][T13714] netlink: 5572 bytes leftover after parsing attributes in process `syz.2.2099'.
[  208.542922][T13714] openvswitch: netlink: Flow key attr not present in new flow.
[  208.629316][T13723] batadv3: entered promiscuous mode
[  208.853180][T13747] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  208.855591][T13741] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2105'.
[  208.873448][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2106'.
[  208.875176][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'.
[  208.885983][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'.
[  208.907945][T13749] netlink: 'syz.1.2107': attribute type 11 has an invalid length.
[  208.972492][T13753] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  209.180369][T13779] x9: renamed from bridge_slave_0
[  209.596933][T13816] validate_nla: 6 callbacks suppressed
[  209.596945][T13816] netlink: 'syz.2.2125': attribute type 2 has an invalid length.
[  209.635313][   T54] Bluetooth: hci2: link tx timeout
[  209.638808][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.275764][   T33] audit: type=1800 audit(1757361632.451:5): pid=13865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2134" name="cgroup.controllers" dev="tmpfs" ino=3467 res=0 errno=0
[  210.433080][T13900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.434868][T13898] netlink: 'syz.1.2144': attribute type 1 has an invalid length.
[  210.947017][ T5853] Bluetooth: hci2: link tx timeout
[  210.949045][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  210.968752][T13962] veth15: entered promiscuous mode
[  211.685373][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  211.726991][T14011] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  211.777280][T14017] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  211.959577][T14038] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  212.048170][T14039] batadv_slave_0: entered promiscuous mode
[  212.082844][T14048] netlink: 'syz.1.2185': attribute type 10 has an invalid length.
[  212.385901][T14063] netlink: 'syz.2.2189': attribute type 4 has an invalid length.
[  212.480592][T14063] tipc: Resetting bearer <eth:syzkaller0>
[  212.882669][T14094] xfrm0: entered promiscuous mode
[  212.889266][T14094] xfrm0: entered allmulticast mode
[  212.950241][T14094] wg1 speed is unknown, defaulting to 1000
[  213.012951][T14116] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  213.038697][T14113] wg1 speed is unknown, defaulting to 1000
[  213.698467][T14126] __nla_validate_parse: 59 callbacks suppressed
[  213.698484][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'.
[  213.709240][T14126] chnl_net:caif_netlink_parms(): no params data found
[  213.809974][T14129] bridge0: failed insert local address into bridge forwarding table
[  213.819505][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'.
[  213.887191][T14132] netlink: 328 bytes leftover after parsing attributes in process `syz.0.2205'.
[  213.924282][T14132] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2205'.
[  213.929129][T14132] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2205'.
[  214.075723][T14142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2209'.
[  214.082972][T14142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2209'.
[  214.245312][T14155] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  214.396328][T14172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.399572][T14172] syzkaller0: entered promiscuous mode
[  214.401690][T14172] syzkaller0: entered allmulticast mode
[  214.415342][T14172] tipc: Resetting bearer <eth:syzkaller0>
[  214.427741][T14175] netlink: 'syz.2.2217': attribute type 1 has an invalid length.
[  214.432097][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  214.435181][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2217'.
[  214.484928][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  214.599485][T14187] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  214.602450][T14187] netlink: 'syz.2.2220': attribute type 11 has an invalid length.
[  214.666975][T14192] netlink: 'syz.1.2219': attribute type 16 has an invalid length.
[  214.669493][T14192] netlink: 'syz.1.2219': attribute type 17 has an invalid length.
[  214.672942][T14192] IPv6: NLM_F_REPLACE set, but no existing node found!
[  215.159967][T14165] tipc: Resetting bearer <eth:syzkaller0>
[  215.172232][T14165] tipc: Disabling bearer <eth:syzkaller0>
[  215.388770][T14240] netlink: 'syz.2.2234': attribute type 13 has an invalid length.
[  215.391265][T14240] netlink: 'syz.2.2234': attribute type 17 has an invalid length.
[  215.410087][T14240] tipc: Resetting bearer <ib:ip6gre0>
[  215.415254][T14240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.455747][T14247] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  215.459379][T14247] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  215.537538][T14253] tipc: Resetting bearer <ib:ip6gre0>
[  215.615943][T14260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.618679][T14260] syzkaller0: entered promiscuous mode
[  215.620465][T14260] syzkaller0: entered allmulticast mode
[  215.643043][T14260] tipc: Resetting bearer <eth:syzkaller0>
[  215.647661][T14259] tipc: Resetting bearer <eth:syzkaller0>
[  215.658989][T14259] tipc: Disabling bearer <eth:syzkaller0>
[  215.812284][T14278] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.818298][T14278] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  215.820608][T14278] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  215.823921][T14278] tipc: Resetting bearer <eth:syzkaller0>
[  215.885889][T14272] sctp: [Deprecated]: syz.1.2246 (pid 14272) Use of int in maxseg socket option.
[  215.885889][T14272] Use struct sctp_assoc_value instead
[  216.114623][T14297] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  216.117409][T14297] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  216.120358][T14297] tipc: Resetting bearer <eth:syzkaller0>
[  216.522481][T14333] netlink: 'syz.0.2263': attribute type 2 has an invalid length.
[  216.529268][T14333] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  216.532730][T14333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.541542][T14333] tunl0: entered promiscuous mode
[  216.587385][T14335] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  216.591196][T14335] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  217.499578][T14394] syz.1.2278: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  217.507589][T14394] CPU: 1 UID: 0 PID: 14394 Comm: syz.1.2278 Not tainted syzkaller #0 PREEMPT(full) 
[  217.507603][T14394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.507624][T14394] Call Trace:
[  217.507630][T14394]  <TASK>
[  217.507636][T14394]  dump_stack_lvl+0x189/0x250
[  217.507653][T14394]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.507663][T14394]  ? __pfx__printk+0x10/0x10
[  217.507697][T14394]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.507709][T14394]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  217.507719][T14394]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  217.507730][T14394]  warn_alloc+0x214/0x310
[  217.507745][T14394]  ? __pfx_warn_alloc+0x10/0x10
[  217.507761][T14394]  ? __get_vm_area_node+0x28f/0x300
[  217.507773][T14394]  ? hash_ipportip_create+0x358/0xfe0
[  217.507786][T14394]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  217.507798][T14394]  ? do_syscall_64+0xfa/0x3b0
[  217.507821][T14394]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  217.507835][T14394]  ? rcu_is_watching+0x15/0xb0
[  217.507844][T14394]  ? hash_ipportip_create+0x358/0xfe0
[  217.507854][T14394]  ? hash_ipportip_create+0x358/0xfe0
[  217.507863][T14394]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  217.507875][T14394]  ? hash_ipportip_create+0x358/0xfe0
[  217.507885][T14394]  ? hash_ipportip_create+0x2fe/0xfe0
[  217.507897][T14394]  hash_ipportip_create+0x358/0xfe0
[  217.507911][T14394]  ? __nla_parse+0x40/0x60
[  217.507919][T14394]  ? __pfx_hash_ipportip_create+0x10/0x10
[  217.507930][T14394]  ip_set_create+0xa97/0x1940
[  217.507943][T14394]  ? ip_set_create+0x4a2/0x1940
[  217.507959][T14394]  ? __pfx_ip_set_create+0x10/0x10
[  217.507993][T14394]  nfnetlink_rcv_msg+0xb4d/0x1130
[  217.508002][T14394]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  217.508018][T14394]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  217.508037][T14394]  ? __asan_memcpy+0x40/0x70
[  217.508048][T14394]  ? sched_balance_rq+0x19a0/0x57a0
[  217.508059][T14394]  ? __lock_acquire+0xab9/0xd20
[  217.508079][T14394]  netlink_rcv_skb+0x208/0x470
[  217.508089][T14394]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  217.508097][T14394]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  217.508111][T14394]  ? bpf_lsm_capable+0x9/0x20
[  217.508123][T14394]  ? security_capable+0x7e/0x2e0
[  217.508139][T14394]  nfnetlink_rcv+0x26a/0x2520
[  217.508146][T14394]  ? is_bpf_text_address+0x26/0x2b0
[  217.508160][T14394]  ? kernel_text_address+0xa5/0xe0
[  217.508171][T14394]  ? __kernel_text_address+0xd/0x40
[  217.508182][T14394]  ? unwind_get_return_address+0x4d/0x90
[  217.508192][T14394]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  217.508202][T14394]  ? arch_stack_walk+0xfc/0x150
[  217.508219][T14394]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  217.508232][T14394]  ? stack_depot_save_flags+0x40/0x860
[  217.508245][T14394]  ? __lock_acquire+0xab9/0xd20
[  217.508268][T14394]  ? __lock_acquire+0xab9/0xd20
[  217.508284][T14394]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.508296][T14394]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.508308][T14394]  netlink_unicast+0x82f/0x9e0
[  217.508319][T14394]  ? __pfx_netlink_unicast+0x10/0x10
[  217.508328][T14394]  ? netlink_sendmsg+0x642/0xb30
[  217.508336][T14394]  ? skb_put+0x11b/0x210
[  217.508347][T14394]  netlink_sendmsg+0x805/0xb30
[  217.508360][T14394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.508371][T14394]  ? aa_sock_msg_perm+0xf1/0x1d0
[  217.508380][T14394]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  217.508388][T14394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.508398][T14394]  __sock_sendmsg+0x21c/0x270
[  217.508412][T14394]  ____sys_sendmsg+0x505/0x830
[  217.508426][T14394]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.508440][T14394]  ? import_iovec+0x74/0xa0
[  217.508452][T14394]  ___sys_sendmsg+0x21f/0x2a0
[  217.508463][T14394]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.508489][T14394]  ? __fget_files+0x2a/0x420
[  217.508496][T14394]  ? __fget_files+0x3a0/0x420
[  217.508507][T14394]  __x64_sys_sendmsg+0x19b/0x260
[  217.508519][T14394]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  217.508534][T14394]  ? rcu_is_watching+0x15/0xb0
[  217.508543][T14394]  ? do_syscall_64+0xbe/0x3b0
[  217.508555][T14394]  do_syscall_64+0xfa/0x3b0
[  217.508564][T14394]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.508572][T14394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.508580][T14394]  ? exc_page_fault+0x9f/0xf0
[  217.508590][T14394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.508598][T14394] RIP: 0033:0x7f81d5d8ebe9
[  217.508607][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.508614][T14394] RSP: 002b:00007f81d6c09038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.508623][T14394] RAX: ffffffffffffffda RBX: 00007f81d5fc5fa0 RCX: 00007f81d5d8ebe9
[  217.508629][T14394] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  217.508634][T14394] RBP: 00007f81d5e11e19 R08: 0000000000000000 R09: 0000000000000000
[  217.508638][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.508643][T14394] R13: 00007f81d5fc6038 R14: 00007f81d5fc5fa0 R15: 00007fff555116f8
[  217.508656][T14394]  </TASK>
[  217.508704][T14394] Mem-Info:
[  217.676782][T14394] active_anon:5748 inactive_anon:0 isolated_anon:0
[  217.676782][T14394]  active_file:1324 inactive_file:38315 isolated_file:0
[  217.676782][T14394]  unevictable:1768 dirty:160 writeback:0
[  217.676782][T14394]  slab_reclaimable:10929 slab_unreclaimable:86073
[  217.676782][T14394]  mapped:18359 shmem:2460 pagetables:1014
[  217.676782][T14394]  sec_pagetables:0 bounce:0
[  217.676782][T14394]  kernel_misc_reclaimable:0
[  217.676782][T14394]  free:256076 free_pcp:20138 free_cma:0
[  217.692881][T14394] Node 0 active_anon:11236kB inactive_anon:0kB active_file:3880kB inactive_file:10988kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:292kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6640kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.708900][T14394] Node 1 active_anon:11756kB inactive_anon:0kB active_file:1416kB inactive_file:142272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38532kB dirty:348kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8112kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  217.720546][T14394] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.732389][T14394] lowmem_reserve[]: 0 811 811 811 811
[  217.734767][T14394] Node 0 DMA32 free:310400kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11168kB inactive_anon:0kB active_file:3880kB inactive_file:10988kB unevictable:3536kB writepending:292kB present:1556484kB managed:830836kB mlocked:0kB bounce:0kB free_pcp:25260kB local_pcp:15024kB free_cma:0kB
[  217.747179][T14394] lowmem_reserve[]: 0 0 0 0 0
[  217.749125][T14394] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  217.760612][T14394] lowmem_reserve[]: 0 0 854 854 854
[  217.762794][T14394] Node 1 Normal free:240056kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11756kB inactive_anon:0kB active_file:1416kB inactive_file:142272kB unevictable:3536kB writepending:348kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:55624kB local_pcp:34492kB free_cma:0kB
[  217.776932][T14394] lowmem_reserve[]: 0 0 0 0 0
[  217.779095][T14394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB
[  217.784321][T14394] Node 0 DMA32: 1236*4kB (UM) 1026*8kB (UM) 490*16kB (UME) 342*32kB (UME) 224*64kB (UME) 90*128kB (UM) 41*256kB (UME) 21*512kB (UM) 16*1024kB (UME) 7*2048kB (UM) 49*4096kB (UM) = 310464kB
[  217.792880][T14394] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  217.799371][T14394] Node 1 Normal: 418*4kB (UME) 372*8kB (UME) 649*16kB (UME) 294*32kB (UE) 197*64kB (UM) 140*128kB (UME) 47*256kB (UM) 24*512kB (UM) 15*1024kB (UM) 3*2048kB (UME) 34*4096kB (UM) = 240056kB
[  217.806945][T14394] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.810680][T14394] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  217.814457][T14394] 42104 total pagecache pages
[  217.816551][T14394] 5 pages in swap cache
[  217.818384][T14394] Free swap  = 124976kB
[  217.820116][T14394] Total swap = 124996kB
[  217.821828][T14394] 786301 pages RAM
[  217.823438][T14394] 0 pages HighMem/MovableOnly
[  217.825376][T14394] 241360 pages reserved
[  217.827054][T14394] 0 pages cma reserved
[  217.952885][T14410] netlink: 'syz.1.2281': attribute type 5 has an invalid length.
[  217.957305][T14410] netlink: 'syz.1.2281': attribute type 7 has an invalid length.
[  217.967344][T14410] : entered promiscuous mode
[  218.232661][T14415] sctp: [Deprecated]: syz.1.2284 (pid 14415) Use of int in max_burst socket option deprecated.
[  218.232661][T14415] Use struct sctp_assoc_value instead
[  218.405134][T14428] batadv3: entered promiscuous mode
[  218.407348][T14428] batadv3: entered allmulticast mode
[  219.219074][T14478] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  219.252811][T14480] __nla_validate_parse: 33 callbacks suppressed
[  219.252826][T14480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'.
[  219.322462][T14486] netlink: 'syz.1.2297': attribute type 1 has an invalid length.
[  219.325845][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'.
[  219.354693][T14486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2297'.
[  219.447987][T14495] netlink: 'syz.2.2299': attribute type 1 has an invalid length.
[  219.521440][T14503] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2301'.
[  219.528406][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'.
[  219.572263][T14508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2304'.
[  219.575937][T14508] netlink: 'syz.2.2304': attribute type 4 has an invalid length.
[  219.670384][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  219.675337][T14514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2304'.
[  219.741940][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'.
[  219.760215][T14526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2310'.
[  219.936399][T14542] netlink: 'syz.2.2313': attribute type 1 has an invalid length.
[  220.075380][T14549] bridge0: port 1(erspan0) entered blocking state
[  220.078756][T14549] bridge0: port 1(erspan0) entered disabled state
[  220.081540][T14549] erspan0: entered allmulticast mode
[  220.084954][T14549] erspan0: left allmulticast mode
[  220.459838][T14573] wg1 speed is unknown, defaulting to 1000
[  220.474330][T14574] wg1 speed is unknown, defaulting to 1000
[  220.870921][T14608] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  220.980485][T14623] netlink: 'syz.1.2336': attribute type 1 has an invalid length.
[  221.161865][T14641] batman_adv: batadv0: Adding interface: ip6gretap0
[  221.164092][T14641] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.173646][T14641] batman_adv: batadv0: Interface activated: ip6gretap0
[  221.393606][T14677] netlink: 'syz.2.2350': attribute type 1 has an invalid length.
[  221.402580][T14678] batadv3: entered promiscuous mode
[  221.404871][T14678] batadv3: entered allmulticast mode
[  221.422131][T14677] bond27: entered promiscuous mode
[  221.424179][T14677] 8021q: adding VLAN 0 to HW filter on device bond27
[  222.072123][T14723] wg1 speed is unknown, defaulting to 1000
[  222.119637][T14723] netlink: 'syz.2.2363': attribute type 5 has an invalid length.
[  222.124758][T14723] ieee802154 phy0 wpan0: encryption failed: -22
[  222.127207][ T5912] IPVS: starting estimator thread 0...
[  222.134032][T14723] IPVS: set_ctl: invalid protocol: 54 172.20.20.187:20000
[  222.229755][T14726] IPVS: using max 64 ests per chain, 153600 per kthread
[  222.316643][   T13] IPVS: stop unused estimator thread 0...
[  222.488126][T14757] netlink: 'syz.1.2368': attribute type 1 has an invalid length.
[  222.495656][T14757] netlink: 'syz.1.2368': attribute type 2 has an invalid length.
[  222.577155][T14760] tipc: Resetting bearer <ib:ip6gre0>
[  222.589409][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  222.603932][T14760] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  222.619728][T14757] macsec1: entered promiscuous mode
[  222.621965][T14757] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  222.625123][T14757] macsec1: entered allmulticast mode
[  222.626888][T14757] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  222.777143][T14784] netlink: 'syz.0.2376': attribute type 20 has an invalid length.
[  222.857624][T14794] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  222.908881][T14794] bond49: (slave vxcan5): The slave device specified does not support setting the MAC address
[  222.912781][T14794] bond49: (slave vxcan5): Error -95 calling set_mac_address
[  223.054260][T14798] wg1 speed is unknown, defaulting to 1000
[  223.359024][T14839] syzkaller1: entered promiscuous mode
[  223.361366][T14839] syzkaller1: entered allmulticast mode
[  223.362050][T14834] netlink: 'syz.1.2387': attribute type 10 has an invalid length.
[  223.462833][T14845] wg1 speed is unknown, defaulting to 1000
[  223.743933][T14849] xt_limit: Overflow, try lower: 604147548/4200216962
[  226.479493][T14857] __nla_validate_parse: 25 callbacks suppressed
[  226.479504][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  226.485488][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'.
[  226.488675][T14857] netlink: 'syz.1.2391': attribute type 18 has an invalid length.
[  226.500871][T14855] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2392'.
[  226.623779][T14868] tc_dump_action: action bad kind
[  226.626536][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2394'.
[  226.943487][T14888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.948660][T14888] tipc: Resetting bearer <eth:syzkaller0>
[  227.433518][T14904] tipc: Resetting bearer <eth:syzkaller0>
[  227.435614][T14904] batman_adv: batadv0: Removing interface: ip6gretap0
[  227.487935][T14912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2406'.
[  227.488454][T14913] netlink: 'syz.1.2407': attribute type 9 has an invalid length.
[  227.497000][T14912] macsec1: entered promiscuous mode
[  227.498742][T14912] macsec1: entered allmulticast mode
[  227.501512][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2406'.
[  227.511057][T14914] netlink: 'syz.2.2404': attribute type 10 has an invalid length.
[  227.520979][T14914] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  227.586288][T14921] wg1 speed is unknown, defaulting to 1000
[  227.656680][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'.
[  227.850206][T14939] netlink: 4964 bytes leftover after parsing attributes in process `syz.0.2414'.
[  228.055489][T14951] syzkaller0: entered promiscuous mode
[  228.057679][T14951] syzkaller0: entered allmulticast mode
[  228.061223][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2416'.
[  228.396064][T14982] tipc: Resetting bearer <eth:syzkaller0>
[  228.435731][T14986] bond0: entered promiscuous mode
[  228.437339][T14986] bond48: entered promiscuous mode
[  228.439728][T14986] bond0: left promiscuous mode
[  228.441216][T14986] bond48: left promiscuous mode
[  228.452585][T14988] netlink: 'syz.2.2419': attribute type 10 has an invalid length.
[  228.657480][T15007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.660782][T15007] syzkaller0: entered promiscuous mode
[  228.662499][T15007] syzkaller0: entered allmulticast mode
[  228.670619][T15007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  228.682304][T15007] tipc: Resetting bearer <eth:syzkaller0>
[  228.686460][T15006] tipc: Resetting bearer <eth:syzkaller0>
[  228.698343][T15006] tipc: Disabling bearer <eth:syzkaller0>
[  228.895909][T15020] veth0: entered promiscuous mode
[  228.898436][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'.
[  228.901964][T15019] veth0 (unregistering): left promiscuous mode
[  228.907876][T15019] vlan1 (unregistering): left allmulticast mode
[  228.909854][T15019] veth1 (unregistering): left allmulticast mode
[  228.911819][T15019] vlan1 (unregistering): left promiscuous mode
[  228.913819][T15019] veth1 (unregistering): left promiscuous mode
[  228.915685][T15019] bridge8: port 3(vlan1) entered disabled state
[  229.062728][T15026] netlink: 'syz.1.2434': attribute type 3 has an invalid length.
[  229.067891][T15028] netlink: 'syz.1.2434': attribute type 3 has an invalid length.
[  229.293984][T15040] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  229.297131][T15040] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  229.317498][T15042] batadv_slave_0: entered promiscuous mode
[  229.332991][T15042] batadv_slave_0: left promiscuous mode
[  229.571704][T15068] tunl0: left promiscuous mode
[  229.645908][T15068] dummy0: left promiscuous mode
[  229.652064][T15068] batadv0: left promiscuous mode
[  229.654060][T15068] batadv0: left allmulticast mode
[  229.657022][T15068] batadv_slave_0: left promiscuous mode
[  229.658768][T15068] xfrm0: left promiscuous mode
[  229.660354][T15068] xfrm0: left allmulticast mode
[  229.665642][T15068] gtp1: left promiscuous mode
[  229.669590][T15068] vcan2: left allmulticast mode
[  229.671358][T15068] vlan2: left allmulticast mode
[  229.672829][T15068] veth1: left allmulticast mode
[  229.675112][T15068] macsec0: left promiscuous mode
[  229.677056][T15068] macsec0: left allmulticast mode
[  229.687195][T15068] bond37: left promiscuous mode
[  229.695753][T15068] ip6tnl4: left promiscuous mode
[  229.697758][T15068] gretap5: left promiscuous mode
[  229.701207][T15068] bond41: left promiscuous mode
[  229.709380][T15068] bond43: left promiscuous mode
[  229.741215][T15068] macsec1: left promiscuous mode
[  229.742912][T15068] macsec1: left allmulticast mode
[  229.749876][T15076] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.760867][T15073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.763617][T15073] syzkaller0: entered promiscuous mode
[  229.765624][T15073] syzkaller0: entered allmulticast mode
[  229.770013][T15073] tipc: Resetting bearer <eth:syzkaller0>
[  229.775894][T15072] tipc: Resetting bearer <eth:syzkaller0>
[  229.794513][T15072] tipc: Disabling bearer <eth:syzkaller0>
[  229.817261][T15081] bridge0: failed insert local address into bridge forwarding table
[  229.859028][T15089] bridge0: entered allmulticast mode
[  230.051176][T15109] veth15: left promiscuous mode
[  230.077747][T15109] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  230.080442][T15109] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  230.087571][T15109] macsec1: left promiscuous mode
[  230.089503][T15109] macsec1: left allmulticast mode
[  230.207414][T15131] netlink: 'syz.0.2460': attribute type 16 has an invalid length.
[  230.210184][T15131] netlink: 'syz.0.2460': attribute type 17 has an invalid length.
[  230.214201][T15131] IPv6: NLM_F_REPLACE set, but no existing node found!
[  230.359711][T15137] syzkaller1: entered promiscuous mode
[  230.361473][T15137] syzkaller1: entered allmulticast mode
[  230.368182][T15137] veth0_to_bond: left allmulticast mode
[  230.370029][T15137] veth0_to_bond: left promiscuous mode
[  230.371893][T15137] bridge8: port 2(veth0_to_bond) entered disabled state
[  230.380411][T15137] bond11: (slave gretap2): Releasing active interface
[  230.387019][T15137] veth13: left allmulticast mode
[  230.388560][T15137] veth13: left promiscuous mode
[  230.391216][T15137] bridge8: port 1(veth13) entered disabled state
[  230.398950][T15137] bond13: (slave geneve2): Releasing active interface
[  230.422401][T15144] wg1 speed is unknown, defaulting to 1000
[  231.916347][T15217] __nla_validate_parse: 12 callbacks suppressed
[  231.916360][T15217] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2479'.
[  231.950933][T15223] wg1 speed is unknown, defaulting to 1000
[  232.036724][T15231] netlink: 'syz.2.2483': attribute type 7 has an invalid length.
[  232.039060][T15231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2483'.
[  232.062976][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'.
[  232.073625][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2481'.
[  232.105317][T15223] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2481'.
[  232.164024][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'.
[  232.340198][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  232.345414][T15250] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.348329][T15250] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.536489][T15265] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  232.707531][T15274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.710466][T15276] syzkaller0: entered promiscuous mode
[  232.712451][T15276] syzkaller0: entered allmulticast mode
[  232.735320][T15276] tipc: Resetting bearer <eth:syzkaller0>
[  232.752848][T15276] tipc: Disabling bearer <eth:syzkaller0>
[  232.830258][T15279] netlink: 'syz.0.2495': attribute type 1 has an invalid length.
[  232.854753][T15279] bond50: entered promiscuous mode
[  232.858642][T15279] 8021q: adding VLAN 0 to HW filter on device bond50
[  232.864463][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'.
[  232.963566][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  233.141625][T15304] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2501'.
[  233.228827][T15312] bond0: default FDB implementation only supports local addresses
[  233.402202][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'.
[  233.650867][T15348] openvswitch: netlink: EtherType a is less than min 600
[  233.742905][T15356] netlink: 'syz.2.2514': attribute type 1 has an invalid length.
[  233.772916][T15356] 8021q: adding VLAN 0 to HW filter on device bond28
[  233.782941][T15356] bond28: (slave wlan0): Enslaving as an active interface with a down link
[  233.843470][T15367] sctp: [Deprecated]: syz.2.2514 (pid 15367) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.843470][T15367] Use struct sctp_sack_info instead
[  233.923048][T15374] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  233.970222][T15374] bond14: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  233.976882][ T5869] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  233.977939][T15374] 8021q: adding VLAN 0 to HW filter on device bond14
[  234.008054][T15374] veth1: entered promiscuous mode
[  234.013747][T15374] bond14: (slave veth1): Enslaving as a backup interface with a down link
[  234.059144][T15377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.062002][T15377] syzkaller0: entered promiscuous mode
[  234.064688][T15377] syzkaller0: entered allmulticast mode
[  234.081433][T15377] tipc: Resetting bearer <eth:syzkaller0>
[  234.083729][ T5879] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  234.098625][T15376] tipc: Resetting bearer <eth:syzkaller0>
[  234.112810][T15376] tipc: Disabling bearer <eth:syzkaller0>
[  234.269420][T15386] netlink: 'syz.1.2521': attribute type 13 has an invalid length.
[  234.272710][T15386] netlink: 'syz.1.2521': attribute type 17 has an invalid length.
[  234.292927][T15386] erspan0: left promiscuous mode
[  234.321232][T15386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.335396][   T60] block nbd0: Possible stuck request ffff8880201c8e00: control (read@0,1024B). Runtime 60 seconds
[  234.338787][   T60] block nbd0: Possible stuck request ffff8880201c9000: control (read@1024,1024B). Runtime 60 seconds
[  234.342144][   T60] block nbd0: Possible stuck request ffff8880201c9200: control (read@2048,1024B). Runtime 60 seconds
[  234.345546][   T60] block nbd0: Possible stuck request ffff8880201c9400: control (read@3072,1024B). Runtime 60 seconds
[  234.718796][T15399] veth21: entered promiscuous mode
[  234.741439][T15396] netlink: 'syz.0.2524': attribute type 29 has an invalid length.
[  234.876583][T15409] tipc: Resetting bearer <eth:syzkaller0>
[  235.192319][T15441] syzkaller0: entered promiscuous mode
[  235.196727][T15441] syzkaller0: entered allmulticast mode
[  235.392128][T15456] netlink: 'syz.1.2538': attribute type 2 has an invalid length.
[  235.491515][T15461] netlink: 'syz.0.2541': attribute type 16 has an invalid length.
[  235.717775][T15484] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.732469][T15484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.751764][T15489] wg1 speed is unknown, defaulting to 1000
[  235.766127][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.809837][T15494] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  235.821053][T15484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.944352][T15505] vlan1: entered allmulticast mode
[  235.946522][T15505] bridge_slave_0: entered allmulticast mode
[  235.990110][T15511] vlan1: entered allmulticast mode
[  236.208055][T15524] 8021q: adding VLAN 0 to HW filter on device bond29
[  236.278386][T15532] ieee802154 phy0 wpan0: encryption failed: -90
[  236.339449][T15536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.449880][T15542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.452643][T15542] syzkaller0: entered promiscuous mode
[  236.463455][T15542] syzkaller0: entered allmulticast mode
[  236.481294][T15541] tipc: Resetting bearer <eth:syzkaller0>
[  236.498470][T15541] tipc: Disabling bearer <eth:syzkaller0>
[  236.691629][T15558] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  236.699426][T15560] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  237.907019][T15621] sctp: [Deprecated]: syz.0.2586 (pid 15621) Use of int in max_burst socket option.
[  237.907019][T15621] Use struct sctp_assoc_value instead
[  237.913096][T15621] __nla_validate_parse: 40 callbacks suppressed
[  237.913114][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'.
[  237.927212][T15623] validate_nla: 12 callbacks suppressed
[  237.927226][T15623] netlink: 'syz.2.2587': attribute type 1 has an invalid length.
[  237.973605][T15623] 8021q: adding VLAN 0 to HW filter on device bond30
[  237.984028][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2586'.
[  238.169835][T15642] syz.1.2592 (15642) used obsolete PPPIOCDETACH ioctl
[  238.175412][T15644] netlink: 'syz.2.2593': attribute type 1 has an invalid length.
[  238.178572][T15644] netlink: 'syz.2.2593': attribute type 1 has an invalid length.
[  238.193152][T15644] bridge10: the hash_elasticity option has been deprecated and is always 16
[  238.232182][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  238.235951][T15646] vlan0: entered promiscuous mode
[  238.237958][T15646] bond11: entered promiscuous mode
[  238.248602][T15648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2594'.
[  238.342305][T15650] netlink: 'syz.2.2595': attribute type 1 has an invalid length.
[  238.380797][T15650] 8021q: adding VLAN 0 to HW filter on device bond31
[  238.430849][T15652] syzkaller0: entered promiscuous mode
[  238.433187][T15652] syzkaller0: entered allmulticast mode
[  238.451026][T15652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.461957][T15651] tipc: Resetting bearer <eth:syzkaller0>
[  238.797167][T15659] netlink: 'syz.2.2597': attribute type 10 has an invalid length.
[  239.444446][ T5912] tipc: Node number set to 983724354
[  240.333718][T15651] tipc: Disabling bearer <eth:syzkaller0>
[  240.359699][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  240.365233][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  240.427007][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2600'.
[  240.471348][T15671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.484029][T15671] syzkaller0: entered promiscuous mode
[  240.485878][T15671] syzkaller0: entered allmulticast mode
[  240.520231][T15675] vlan0: entered promiscuous mode
[  240.522217][T15675] bond0: entered promiscuous mode
[  240.528870][T15675] bond48: entered promiscuous mode
[  240.536903][T15671] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.551107][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.554472][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.561395][T15677] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  240.567140][T15671] tipc: Resetting bearer <eth:syzkaller0>
[  240.588928][T15677] bond32: entered promiscuous mode
[  240.590975][T15677] 8021q: adding VLAN 0 to HW filter on device bond32
[  240.597720][T15677] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2602'.
[  240.597745][T15670] tipc: Resetting bearer <eth:syzkaller0>
[  240.618927][T15670] tipc: Disabling bearer <eth:syzkaller0>
[  240.627119][T15677] batadv3: entered promiscuous mode
[  240.628859][T15677] batadv3: entered allmulticast mode
[  240.631741][T15677] 8021q: adding VLAN 0 to HW filter on device batadv3
[  240.635956][T15677] bond32: (slave batadv3): making interface the new active one
[  240.639613][T15677] bond32: (slave batadv3): Enslaving as an active interface with an up link
[  240.699048][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.702012][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.758608][T15677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2602'.
[  240.878128][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'.
[  241.016153][T15703] openvswitch: netlink: Flow key attribute not present in set flow.
[  241.019578][T15702] openvswitch: netlink: Flow key attribute not present in set flow.
[  241.072108][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.077700][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.086810][T15705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.289693][T15715] netlink: 'syz.0.2611': attribute type 32 has an invalid length.
[  241.293045][T15715] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  241.637144][T15755] unknown channel width for channel at 909000KHz?
[  241.742271][T15763] netlink: 'syz.1.2622': attribute type 10 has an invalid length.
[  241.926715][T15786] xfrm0: left promiscuous mode
[  241.937730][T15786] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  241.946148][T15786] bond22: left promiscuous mode
[  241.948211][T15786] bond23: left promiscuous mode
[  241.950144][T15786] batadv2: left promiscuous mode
[  241.956391][T15786] ipvlan0: left promiscuous mode
[  241.958935][T15786] bond27: left promiscuous mode
[  241.966951][T15786] bond32: left promiscuous mode
[  241.969948][T15786] batadv3: left promiscuous mode
[  241.976387][T15786] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  241.990038][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  242.168086][T15803] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  242.187151][T15803] vlan0: entered allmulticast mode
[  242.195115][T15803] bridge11: port 1(vlan0) entered blocking state
[  242.197701][T15803] bridge11: port 1(vlan0) entered disabled state
[  242.201818][T15803] vlan0: entered promiscuous mode
[  242.208042][T15803] bridge0: entered promiscuous mode
[  242.248521][T15803] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode
[  242.383784][T15818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.387844][T15818] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  242.398183][T15818] netem: change failed
[  242.616709][T15824] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  242.619506][T15824] netlink: 'syz.1.2637': attribute type 1 has an invalid length.
[  242.698716][T15824] 8021q: adding VLAN 0 to HW filter on device bond15
[  242.708118][T15824] vlan1: entered allmulticast mode
[  242.709697][T15824] veth1: entered allmulticast mode
[  242.714510][T15824] bond15: (slave vlan1): Enslaving as an active interface with a down link
[  242.982099][T15831] pimreg: entered allmulticast mode
[  243.017141][T15831] pimreg: left allmulticast mode
[  243.177802][T15834] __nla_validate_parse: 15 callbacks suppressed
[  243.177818][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  243.186405][T15834] validate_nla: 3 callbacks suppressed
[  243.186416][T15834] netlink: 'syz.0.2640': attribute type 5 has an invalid length.
[  243.191085][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2640'.
[  243.219554][T15834] geneve3: entered promiscuous mode
[  243.228085][T15834] geneve3: entered allmulticast mode
[  243.232135][ T5858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  243.236145][ T5858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  243.240856][T15838] veth0_to_bond: entered allmulticast mode
[  243.248722][ T5858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  243.252803][ T5858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  243.431509][T15847] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  243.651883][T15886] syzkaller0: entered allmulticast mode
[  243.805923][T15897] netlink: 'syz.0.2657': attribute type 1 has an invalid length.
[  243.833979][T15902] syzkaller0: entered promiscuous mode
[  243.840527][T15902] syzkaller0: entered allmulticast mode
[  243.854208][T15901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.871338][T15901] tipc: Resetting bearer <eth:syzkaller0>
[  243.887505][T15901] tipc: Disabling bearer <eth:syzkaller0>
[  244.029324][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'.
[  244.067923][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'.
[  244.209380][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'.
[  244.256723][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'.
[  244.297184][T15935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'.
[  244.349680][T15942] netlink: 'syz.2.2671': attribute type 12 has an invalid length.
[  244.498409][T15960] batadv4: entered promiscuous mode
[  244.549892][T15961] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2675'.
[  244.556371][T15961] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2675'.
[  244.769326][T15974] netlink: 'syz.2.2678': attribute type 2 has an invalid length.
[  244.772356][T15974] netlink: 'syz.2.2678': attribute type 8 has an invalid length.
[  244.776072][T15974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2678'.
[  244.829311][T15976] 8021q: adding VLAN 0 to HW filter on device bond33
[  244.932273][T15980] netlink: 'syz.2.2680': attribute type 11 has an invalid length.
[  245.261723][T16016] netlink: 'syz.2.2690': attribute type 1 has an invalid length.
[  245.315732][T16016] 8021q: adding VLAN 0 to HW filter on device bond34
[  245.439814][T16013] IPv6: Can't replace route, no match found
[  245.480159][T16035] netlink: 'syz.0.2693': attribute type 2 has an invalid length.
[  245.490408][T16035] x: entered promiscuous mode
[  245.513761][T16035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.614843][T16044] netlink: 'syz.1.2696': attribute type 1 has an invalid length.
[  245.641483][T16044] 8021q: adding VLAN 0 to HW filter on device bond16
[  245.651692][T16044] ipvlan1: entered allmulticast mode
[  245.654921][T16044] bond16: entered allmulticast mode
[  245.658690][T16047] netlink: 'syz.2.2697': attribute type 21 has an invalid length.
[  245.779549][T16050] netlink: 'syz.1.2698': attribute type 1 has an invalid length.
[  245.819894][T16055] 8021q: adding VLAN 0 to HW filter on device bond17
[  245.831008][T16055] bond28: (slave wlan0): Releasing active interface
[  245.839859][T16055] bond32: (slave batadv3): Releasing active interface
[  245.847292][T16055] vlan0: left promiscuous mode
[  245.850526][T16055] bridge0: left promiscuous mode
[  245.854932][T16055] bridge11: port 1(vlan0) entered disabled state
[  245.946489][T16065] vxcan2: entered promiscuous mode
[  246.629249][T16113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.635348][T16113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.471198][T16152] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  247.476315][T16152] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  247.492032][T16152] 8021q: VLANs not supported on ip6gre0
[  247.554369][T16156] tipc: Resetting bearer <ib:ip6gre0>
[  247.556446][T16156] tipc: Resetting bearer <ib:ip6gre0>
[  247.561297][T16156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.586803][T16156] sit5: entered promiscuous mode
[  247.635701][T16156] wg1 speed is unknown, defaulting to 1000
[  247.895526][T16169] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  247.950115][T16169] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  248.001543][T16169] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  248.058947][T16169] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  248.143455][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  248.150985][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  248.161187][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  248.174704][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  248.188458][T16190] IPv6: sit6: Disabled Multicast RS
[  248.200277][T16191] __nla_validate_parse: 30 callbacks suppressed
[  248.200289][T16191] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2742'.
[  248.317534][T16204] validate_nla: 6 callbacks suppressed
[  248.317545][T16204] netlink: 'syz.0.2746': attribute type 2 has an invalid length.
[  248.319872][T16208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2747'.
[  248.341548][T16204] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2746'.
[  248.347012][T16204] veth0_to_team: entered promiscuous mode
[  248.349202][T16204] veth0_to_team: entered allmulticast mode
[  248.353442][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'.
[  248.387879][T16211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2749'.
[  248.427746][T16213] bond14: (slave ip6gretap3): Removing an active aggregator
[  248.432627][T16213] bond14: (slave ip6gretap3): Releasing backup interface
[  248.438049][T16213] bond14: (slave ip6gretap3): the permanent HWaddr of slave - f6:e2:05:a4:c4:fb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  248.448432][T16213] bond14: (slave veth1): Releasing backup interface
[  248.459330][T16213] bond15: (slave vlan1): Releasing active interface
[  248.615862][T16221] wg1 speed is unknown, defaulting to 1000
[  248.660446][T16221] geneve0: entered promiscuous mode
[  248.662326][T16221] geneve0: entered allmulticast mode
[  249.342576][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2755'.
[  249.513536][T16252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.559460][T16253] syzkaller0: entered promiscuous mode
[  249.563931][T16253] syzkaller0: entered allmulticast mode
[  249.598568][T16250] tipc: Resetting bearer <eth:syzkaller0>
[  249.637019][T16250] tipc: Disabling bearer <eth:syzkaller0>
[  249.763065][T16263] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2759'.
[  249.805474][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.810371][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.815089][T16269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.829232][T16273] syzkaller0: entered promiscuous mode
[  249.830940][T16273] syzkaller0: entered allmulticast mode
[  249.834000][T16272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.839698][T16274] tipc: Resetting bearer <eth:syzkaller0>
[  249.855167][T16274] tipc: Resetting bearer <eth:syzkaller0>
[  249.866807][T16274] tipc: Disabling bearer <eth:syzkaller0>
[  249.915698][T16277] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.918843][T16277] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  250.162756][T16284] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  250.169688][T16285] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  250.378103][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'.
[  250.380951][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'.
[  250.556566][T16293] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2769'.
[  250.626628][T16296] netlink: 'syz.2.2770': attribute type 3 has an invalid length.
[  251.482661][T16301] netlink: 'syz.0.2771': attribute type 1 has an invalid length.
[  251.572182][T16311] netlink: 'syz.1.2776': attribute type 4 has an invalid length.
[  251.579738][T16311] netlink: 'syz.1.2776': attribute type 4 has an invalid length.
[  251.867483][T16347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.928262][T16347] netem: change failed
[  252.187516][T16367] netlink: 'syz.0.2794': attribute type 4 has an invalid length.
[  252.218851][T16374] netlink: 'syz.2.2796': attribute type 10 has an invalid length.
[  252.221590][T16374] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  252.643875][T16393] netlink: 'syz.1.2803': attribute type 5 has an invalid length.
[  252.911572][T16413] 8021q: adding VLAN 0 to HW filter on device bond17
[  252.932854][T16413] 8021q: adding VLAN 0 to HW filter on device bond17
[  252.935973][T16413] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  252.940160][T16413] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  252.991316][T16413] bond17: (slave bridge10): Enslaving as an active interface with a down link
[  253.052751][T16419] : renamed from veth0_to_bond
[  253.245301][T16432] wg1 speed is unknown, defaulting to 1000
[  253.253788][T16436] __nla_validate_parse: 13 callbacks suppressed
[  253.253799][T16436] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2817'.
[  253.258346][T16436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2817'.
[  253.648856][T16462] vlan2: entered promiscuous mode
[  253.698806][T16464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.702095][T16467] syzkaller0: entered promiscuous mode
[  253.704868][T16467] syzkaller0: entered allmulticast mode
[  253.795736][T16467] tipc: Resetting bearer <eth:syzkaller0>
[  253.906356][T16467] tipc: Disabling bearer <eth:syzkaller0>
[  253.915355][T16473] validate_nla: 2 callbacks suppressed
[  253.915365][T16473] netlink: 'syz.1.2828': attribute type 1 has an invalid length.
[  253.922644][T16473] netlink: 'syz.1.2828': attribute type 3 has an invalid length.
[  253.932617][T16473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2828'.
[  253.937377][T16473] NCSI netlink: No device for ifindex 246
[  254.247696][T16505] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  254.361205][T16506] netlink: 'syz.0.2836': attribute type 83 has an invalid length.
[  254.386919][T16515] bond0 (unregistering): (slave bond48): Releasing backup interface
[  254.389947][T16515] bond48: left promiscuous mode
[  254.391900][T16515] bond0 (unregistering): Released all slaves
[  254.447090][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'.
[  254.479574][T16523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2839'.
[  254.489023][T16523] netlink: 'syz.2.2839': attribute type 30 has an invalid length.
[  254.568210][T16529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2840'.
[  254.627635][T16537] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  254.727789][T16537] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  254.769030][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'.
[  254.777163][T16549] ipvlan1: entered promiscuous mode
[  254.829128][T16537] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  254.848290][T16552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.859033][T16552] syzkaller0: entered promiscuous mode
[  254.860937][T16552] syzkaller0: entered allmulticast mode
[  254.867738][T16555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2847'.
[  254.880677][T16550] tipc: Resetting bearer <eth:syzkaller0>
[  254.900459][T16550] tipc: Disabling bearer <eth:syzkaller0>
[  254.909959][T16537] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  255.009276][T16564] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2849'.
[  255.016411][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  255.060429][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  255.062985][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  255.066425][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  255.142987][T16575] syzkaller1: entered promiscuous mode
[  255.149289][T16575] syzkaller1: entered allmulticast mode
[  255.295541][T16588] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2855'.
[  255.446109][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.749852][T16609] syzkaller0: entered promiscuous mode
[  255.751600][T16609] syzkaller0: entered allmulticast mode
[  257.408054][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.509903][T16627] netlink: 'syz.1.2869': attribute type 11 has an invalid length.
[  257.561796][T16627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.636371][T16641] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  257.671207][T16648] netlink: 'syz.1.2875': attribute type 1 has an invalid length.
[  257.676268][T16648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.759307][T16655] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  257.759329][T16653] IPVS: stopping backup sync thread 16655 ...
[  257.795293][T16652] wg1 speed is unknown, defaulting to 1000
[  258.117332][T16690] netlink: 'syz.0.2885': attribute type 10 has an invalid length.
[  258.121804][T16690] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  258.167711][T16691] lo speed is unknown, defaulting to 1000
[  258.169913][T16691] lo speed is unknown, defaulting to 1000
[  258.176941][T16691] lo speed is unknown, defaulting to 1000
[  258.190053][T16691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  258.215190][T16691] lo speed is unknown, defaulting to 1000
[  258.219145][T16691] lo speed is unknown, defaulting to 1000
[  258.225711][T16691] lo speed is unknown, defaulting to 1000
[  258.230687][T16691] lo speed is unknown, defaulting to 1000
[  258.247047][T16697] netlink: 'syz.1.2886': attribute type 4 has an invalid length.
[  258.287832][T16705] __nla_validate_parse: 10 callbacks suppressed
[  258.287874][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'.
[  258.336182][T16717] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  258.376221][T16717] bond0: entered promiscuous mode
[  258.378112][T16717] bond0: entered allmulticast mode
[  258.381423][T16717] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.395065][T16717] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.617548][T16656] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  258.691405][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'.
[  258.837556][T16755] netlink: 'syz.2.2900': attribute type 4 has an invalid length.
[  258.860836][T16758] netlink: ct family unspecified
[  258.862852][T16758] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.199835][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'.
[  259.250319][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'.
[  259.661843][T16797] validate_nla: 1 callbacks suppressed
[  259.661854][T16797] netlink: 'syz.2.2914': attribute type 1 has an invalid length.
[  259.667946][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'.
[  259.719024][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'.
[  259.830064][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2921'.
[  259.863967][T16802] veth0_to_team: left promiscuous mode
[  259.865781][T16802] veth0_to_team: left allmulticast mode
[  259.877395][T16802] bond50: left promiscuous mode
[  259.881803][T16802] geneve3: left promiscuous mode
[  259.884877][T16802] geneve3: left allmulticast mode
[  259.897676][T16816] netlink: 9368 bytes leftover after parsing attributes in process `syz.1.2921'.
[  259.912392][T16802] bond0: left promiscuous mode
[  259.914098][T16802] bond0: left allmulticast mode
[  259.916061][T16816] netlink: 16236 bytes leftover after parsing attributes in process `syz.1.2921'.
[  259.933295][ T5869] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  259.936155][ T5869] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  259.953505][ T5869] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  259.956943][ T5869] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  259.989303][T16815] netlink: 'syz.2.2922': attribute type 1 has an invalid length.
[  259.992535][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'.
[  260.227174][T16838] netlink: 'syz.0.2927': attribute type 13 has an invalid length.
[  260.230172][T16838] netlink: 'syz.0.2927': attribute type 17 has an invalid length.
[  260.293784][T16838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.390581][T16853] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  260.451002][T16858] netlink: 'syz.2.2935': attribute type 27 has an invalid length.
[  260.453932][T16858] netlink: 'syz.2.2935': attribute type 27 has an invalid length.
[  260.872027][T16887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.879476][T16887] syzkaller0: entered promiscuous mode
[  260.886807][T16887] syzkaller0: entered allmulticast mode
[  260.909447][T16887] tipc: Resetting bearer <eth:syzkaller0>
[  260.926055][T16886] tipc: Resetting bearer <eth:syzkaller0>
[  260.932076][T16890] netlink: 'syz.2.2945': attribute type 1 has an invalid length.
[  260.944797][T16886] tipc: Disabling bearer <eth:syzkaller0>
[  261.127118][T16901] wg1 speed is unknown, defaulting to 1000
[  261.129920][T16901] lo speed is unknown, defaulting to 1000
[  261.225154][T16910] syzkaller0: entered promiscuous mode
[  261.227425][T16910] syzkaller0: entered allmulticast mode
[  261.562252][T16932] netlink: 'syz.0.2956': attribute type 16 has an invalid length.
[  261.579592][T16932] IPv6: NLM_F_REPLACE set, but no existing node found!
[  261.624719][T16939] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  261.632680][T16939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.719859][T16951] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  261.727493][T16951] netlink: 'syz.2.2961': attribute type 1 has an invalid length.
[  261.735149][T16951] tipc: Failed to remove unknown binding: 66,1,1/11578026:2474758170/2474758172
[  261.800257][T16962] tipc: Failed to remove unknown binding: 66,1,1/11578026:2474758170/2474758172
[  261.807971][T16962] tipc: Failed to remove unknown binding: 66,1,1/11578026:2474758170/2474758172
[  261.900340][T16962] 8021q: adding VLAN 0 to HW filter on device bond36
[  262.871048][T17014] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  262.877144][T17014] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  262.925826][T17021] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.929492][T17021] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.978260][T17024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  262.981275][T17024] IPv6: NLM_F_CREATE should be set when creating new route
[  263.219300][T17037] tipc: Resetting bearer <ib:ip6gre0>
[  263.221991][T17037] tipc: Resetting bearer <ib:ip6gre0>
[  263.228401][T17037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.501124][T17041] __nla_validate_parse: 63 callbacks suppressed
[  263.501143][T17041] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2990'.
[  263.809628][T17051] 8021q: adding VLAN 0 to HW filter on device bond18
[  263.859978][T17054] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2993'.
[  263.909400][T17056] sctp: [Deprecated]: syz.1.2994 (pid 17056) Use of struct sctp_assoc_value in delayed_ack socket option.
[  263.909400][T17056] Use struct sctp_sack_info instead
[  264.182100][T17069] 8021q: adding VLAN 0 to HW filter on device bond19
[  264.196509][T17069] bond19: (slave gretap3): making interface the new active one
[  264.200919][T17069] bond19: (slave gretap3): Enslaving as an active interface with an up link
[  264.332116][T17076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'.
[  264.335911][T17076] vlan0: entered promiscuous mode
[  264.341940][T17076] bridge0: entered promiscuous mode
[  264.349105][T17076] vlan0: left allmulticast mode
[  264.405450][   T60] block nbd0: Possible stuck request ffff8880201c8e00: control (read@0,1024B). Runtime 90 seconds
[  264.408879][   T60] block nbd0: Possible stuck request ffff8880201c9000: control (read@1024,1024B). Runtime 90 seconds
[  264.412322][   T60] block nbd0: Possible stuck request ffff8880201c9200: control (read@2048,1024B). Runtime 90 seconds
[  264.415964][   T60] block nbd0: Possible stuck request ffff8880201c9400: control (read@3072,1024B). Runtime 90 seconds
[  264.497322][T17092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.501258][T17092] syzkaller0: entered promiscuous mode
[  264.503412][T17092] syzkaller0: entered allmulticast mode
[  264.513797][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3004'.
[  264.560792][T17096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3006'.
[  264.752388][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'.
[  264.772053][T17113] bridge0: failed insert local address into bridge forwarding table
[  264.959881][T17123] tipc: Resetting bearer <ib:ip6gre0>
[  265.030213][T17124] validate_nla: 11 callbacks suppressed
[  265.030228][T17124] netlink: 'syz.2.3013': attribute type 10 has an invalid length.
[  265.212819][T17080] tipc: Resetting bearer <eth:syzkaller0>
[  265.230970][T17080] tipc: Disabling bearer <eth:syzkaller0>
[  265.372174][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'.
[  265.609189][T17143] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3019'.
[  265.621983][T17138] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  265.651671][T17146] "syz.1.3020" (17146) uses obsolete ecb(arc4) skcipher
[  265.667338][T17147] "syz.1.3020" (17147) uses obsolete ecb(arc4) skcipher
[  265.765386][T17158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'.
[  265.775301][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[  265.788395][T17154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.821738][T17152] tipc: Disabling bearer <eth:syzkaller0>
[  266.077644][T17192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.466760][T17217] syz_tun: entered promiscuous mode
[  266.469888][T17217] batadv_slave_0: entered promiscuous mode
[  266.726273][T17224] syzkaller1: entered promiscuous mode
[  266.728659][T17224] syzkaller1: entered allmulticast mode
[  266.732780][T17224] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  267.158564][T17248] openvswitch: netlink: Flow key attribute not present in set flow.
[  267.165196][T17248] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  267.293006][T17258] netlink: 'syz.1.3052': attribute type 1 has an invalid length.
[  267.350401][T17258] 8021q: adding VLAN 0 to HW filter on device bond20
[  267.383933][T17258] vlan2: entered promiscuous mode
[  267.386242][T17258] bond20: entered promiscuous mode
[  267.388332][T17258] vlan2: entered allmulticast mode
[  267.390342][T17258] bond20: entered allmulticast mode
[  267.692535][T17287] netlink: 'syz.1.3059': attribute type 10 has an invalid length.
[  267.860354][T17299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.995692][    T9] lo speed is unknown, defaulting to 1000
[  267.999442][    T9] syz2: Port: 1 Link DOWN
[  268.053551][T17305] geneve3: entered promiscuous mode
[  268.058095][T17305] geneve3: entered allmulticast mode
[  268.082638][ T9184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  268.090731][T17298] tipc: Disabling bearer <eth:syzkaller0>
[  268.109921][ T9184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  268.112980][ T9184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  268.118780][ T9184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  268.370226][T17330] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.374727][T17330] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  268.377646][T17330] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  268.392815][T17330] tipc: Resetting bearer <eth:syzkaller0>
[  268.506640][T17342] __nla_validate_parse: 18 callbacks suppressed
[  268.506655][T17342] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3079'.
[  268.594091][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.597636][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.627996][T17347] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  268.630548][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.636353][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.639979][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.644804][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.648431][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.652670][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.662734][T17347] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  268.666586][T17347] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  268.669898][T17355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3081'.
[  268.672830][ T3062] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  268.677380][T17348] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  268.682103][T17348] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  268.711348][T17361] bridge0: entered allmulticast mode
[  268.720511][T17362] pim6reg: entered allmulticast mode
[  268.920224][T17377] syz.2.3087 uses old SIOCAX25GETINFO
[  268.925104][T17377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.108867][T17388] ieee802154 phy0 wpan0: encryption failed: -22
[  269.407897][T17399] sctp: [Deprecated]: syz.1.3093 (pid 17399) Use of int in max_burst socket option.
[  269.407897][T17399] Use struct sctp_assoc_value instead
[  269.602179][T17411] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000
[  270.388805][T17457] netlink: zone id is out of range
[  270.391047][T17457] netlink: zone id is out of range
[  270.393116][T17457] netlink: zone id is out of range
[  270.397315][T17457] netlink: zone id is out of range
[  270.399642][T17457] netlink: zone id is out of range
[  270.408683][T17457] netlink: zone id is out of range
[  270.415212][T17457] netlink: zone id is out of range
[  270.418139][T17457] netlink: zone id is out of range
[  270.421239][T17457] netlink: zone id is out of range
[  271.699719][T17498] netlink: 'syz.2.3123': attribute type 4 has an invalid length.
[  271.717010][T17498] netlink: 'syz.2.3123': attribute type 4 has an invalid length.
[  271.782085][T17506] netlink: 'syz.0.3124': attribute type 4 has an invalid length.
[  271.856353][T17513] netlink: 'syz.0.3124': attribute type 4 has an invalid length.
[  271.926558][T17521] netlink: 'syz.2.3129': attribute type 21 has an invalid length.
[  272.049133][T17521] 
[  272.050138][T17521] ======================================================
[  272.052713][T17521] WARNING: possible circular locking dependency detected
[  272.055403][T17521] syzkaller #0 Not tainted
[  272.057294][T17521] ------------------------------------------------------
[  272.060887][T17521] syz.2.3129/17521 is trying to acquire lock:
[  272.063089][T17521] ffffffff8f68ecd8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  272.066358][T17521] 
[  272.066358][T17521] but task is already holding lock:
[  272.069008][T17521] ffff8881103d9270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  272.072262][T17521] 
[  272.072262][T17521] which lock already depends on the new lock.
[  272.072262][T17521] 
[  272.075906][T17521] 
[  272.075906][T17521] the existing dependency chain (in reverse order) is:
[  272.079149][T17521] 
[  272.079149][T17521] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  272.081581][T17521]        lock_acquire+0x120/0x360
[  272.083225][T17521]        _raw_spin_lock_bh+0x36/0x50
[  272.084954][T17521]        nr_rt_device_down+0x12a/0x720
[  272.086668][T17521]        nr_device_event+0x137/0x150
[  272.088265][T17521]        notifier_call_chain+0x1b6/0x3e0
[  272.089979][T17521]        __dev_notify_flags+0x18d/0x2e0
[  272.092251][T17521]        netif_change_flags+0xe8/0x1a0
[  272.094509][T17521]        dev_change_flags+0x130/0x260
[  272.096641][T17521]        dev_ioctl+0x7b4/0x1150
[  272.098436][T17521]        sock_do_ioctl+0x22c/0x300
[  272.100365][T17521]        sock_ioctl+0x576/0x790
[  272.102035][T17521]        __se_sys_ioctl+0xfc/0x170
[  272.103781][T17521]        do_syscall_64+0xfa/0x3b0
[  272.105391][T17521]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.107317][T17521] 
[  272.107317][T17521] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  272.110195][T17521]        lock_acquire+0x120/0x360
[  272.112200][T17521]        _raw_spin_lock_bh+0x36/0x50
[  272.114187][T17521]        nr_rt_device_down+0xa9/0x720
[  272.115913][T17521]        nr_device_event+0x137/0x150
[  272.117580][T17521]        notifier_call_chain+0x1b6/0x3e0
[  272.119608][T17521]        __dev_notify_flags+0x18d/0x2e0
[  272.121512][T17521]        netif_change_flags+0xe8/0x1a0
[  272.123322][T17521]        dev_change_flags+0x130/0x260
[  272.125116][T17521]        dev_ioctl+0x7b4/0x1150
[  272.126866][T17521]        sock_do_ioctl+0x22c/0x300
[  272.128772][T17521]        sock_ioctl+0x576/0x790
[  272.130459][T17521]        __se_sys_ioctl+0xfc/0x170
[  272.132301][T17521]        do_syscall_64+0xfa/0x3b0
[  272.134030][T17521]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.136119][T17521] 
[  272.136119][T17521] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  272.139004][T17521]        validate_chain+0xb9b/0x2140
[  272.140579][T17521]        __lock_acquire+0xab9/0xd20
[  272.142190][T17521]        lock_acquire+0x120/0x360
[  272.144038][T17521]        _raw_spin_lock_bh+0x36/0x50
[  272.145989][T17521]        nr_remove_neigh+0x25/0xe0
[  272.147991][T17521]        nr_add_node+0x1d9f/0x2570
[  272.149905][T17521]        nr_rt_ioctl+0xc12/0xd50
[  272.151833][T17521]        sock_do_ioctl+0xdc/0x300
[  272.153860][T17521]        sock_ioctl+0x576/0x790
[  272.155833][T17521]        __se_sys_ioctl+0xfc/0x170
[  272.157914][T17521]        do_syscall_64+0xfa/0x3b0
[  272.159971][T17521]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.162528][T17521] 
[  272.162528][T17521] other info that might help us debug this:
[  272.162528][T17521] 
[  272.166423][T17521] Chain exists of:
[  272.166423][T17521]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  272.166423][T17521] 
[  272.171795][T17521]  Possible unsafe locking scenario:
[  272.171795][T17521] 
[  272.174595][T17521]        CPU0                    CPU1
[  272.176741][T17521]        ----                    ----
[  272.178912][T17521]   lock(&nr_node->node_lock);
[  272.180815][T17521]                                lock(nr_node_list_lock);
[  272.183616][T17521]                                lock(&nr_node->node_lock);
[  272.186431][T17521]   lock(nr_neigh_list_lock);
[  272.187981][T17521] 
[  272.187981][T17521]  *** DEADLOCK ***
[  272.187981][T17521] 
[  272.190795][T17521] 1 lock held by syz.2.3129/17521:
[  272.192790][T17521]  #0: ffff8881103d9270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  272.196239][T17521] 
[  272.196239][T17521] stack backtrace:
[  272.198538][T17521] CPU: 1 UID: 0 PID: 17521 Comm: syz.2.3129 Not tainted syzkaller #0 PREEMPT(full) 
[  272.198556][T17521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.198567][T17521] Call Trace:
[  272.198575][T17521]  <TASK>
[  272.198584][T17521]  dump_stack_lvl+0x189/0x250
[  272.198607][T17521]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.198623][T17521]  ? __pfx__printk+0x10/0x10
[  272.198641][T17521]  ? stack_trace_save+0x9c/0xe0
[  272.198661][T17521]  print_circular_bug+0x2ee/0x310
[  272.198679][T17521]  check_noncircular+0x134/0x160
[  272.198702][T17521]  validate_chain+0xb9b/0x2140
[  272.198727][T17521]  __lock_acquire+0xab9/0xd20
[  272.198749][T17521]  ? nr_remove_neigh+0x25/0xe0
[  272.198761][T17521]  lock_acquire+0x120/0x360
[  272.198780][T17521]  ? nr_remove_neigh+0x25/0xe0
[  272.198794][T17521]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  272.198811][T17521]  ? nr_remove_neigh+0x25/0xe0
[  272.198821][T17521]  _raw_spin_lock_bh+0x36/0x50
[  272.198835][T17521]  ? nr_remove_neigh+0x25/0xe0
[  272.198847][T17521]  nr_remove_neigh+0x25/0xe0
[  272.198861][T17521]  nr_add_node+0x1d9f/0x2570
[  272.198876][T17521]  ? __asan_memcpy+0x40/0x70
[  272.198893][T17521]  ? nr_call_to_digi+0x126/0x1b0
[  272.198906][T17521]  nr_rt_ioctl+0xc12/0xd50
[  272.198922][T17521]  ? kasan_quarantine_put+0xdd/0x220
[  272.198939][T17521]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  272.198955][T17521]  ? apparmor_capable+0x137/0x1b0
[  272.198974][T17521]  ? capable+0x89/0xe0
[  272.198987][T17521]  ? nr_ioctl+0x1b1/0x3b0
[  272.199006][T17521]  sock_do_ioctl+0xdc/0x300
[  272.199028][T17521]  ? __pfx_sock_do_ioctl+0x10/0x10
[  272.199046][T17521]  ? __lock_acquire+0xab9/0xd20
[  272.199071][T17521]  sock_ioctl+0x576/0x790
[  272.199091][T17521]  ? __pfx_sock_ioctl+0x10/0x10
[  272.199109][T17521]  ? __fget_files+0x2a/0x420
[  272.199120][T17521]  ? __fget_files+0x3a0/0x420
[  272.199130][T17521]  ? __fget_files+0x2a/0x420
[  272.199142][T17521]  ? bpf_lsm_file_ioctl+0x9/0x20
[  272.199159][T17521]  ? __pfx_sock_ioctl+0x10/0x10
[  272.199179][T17521]  __se_sys_ioctl+0xfc/0x170
[  272.199197][T17521]  do_syscall_64+0xfa/0x3b0
[  272.199214][T17521]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.199229][T17521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.199243][T17521]  ? exc_page_fault+0x9f/0xf0
[  272.199259][T17521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.199270][T17521] RIP: 0033:0x7fb89a58ebe9
[  272.199284][T17521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.199294][T17521] RSP: 002b:00007fb89b4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.199310][T17521] RAX: ffffffffffffffda RBX: 00007fb89a7c5fa0 RCX: 00007fb89a58ebe9
[  272.199321][T17521] RDX: 0000200000000440 RSI: 000000000000890b RDI: 000000000000000a
[  272.199329][T17521] RBP: 00007fb89a611e19 R08: 0000000000000000 R09: 0000000000000000
[  272.199339][T17521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  272.199348][T17521] R13: 00007fb89a7c6038 R14: 00007fb89a7c5fa0 R15: 00007ffe12d196e8
[  272.199366][T17521]  </TASK>

VM DIAGNOSIS:
20:01:34  Registers:
info registers vcpu 0

CPU#0
RAX=2dd4ada5a45a3a00 RBX=ffffffff819683f8 RCX=2dd4ada5a45a3a00 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b23f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb89b4a5fb8 CR3=000000010a154000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb89a612e53
XMM06=0000000000000000 00007fb89a612e4d XMM07=0000000000000000 00007fb89a612e61
XMM08=0000000000000000 00007fb89a612ee7 XMM09=0000000000000000 00007fb89a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014a9 RDI=00000000000014aa RBP=00000000000003f8 RSP=ffffc90002b5f070
R8 =ffff88801f778237 R9 =1ffff11003eef046 R10=dffffc0000000000 R11=ffffffff854f5590
R12=dffffc0000000000 R13=ffffffff99b028f2 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f560c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb89b4a76c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27d06e CR3=0000000029b0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ffff00ffff000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fb89b2fd100 00007fb89a797460 XMM05=00007fb89a797478 00007fb89a7974c0
XMM06=00007fb89a7974b8 00007fb89a7974b0 XMM07=00007fb89a7974a8 00007fb89a7974a0
XMM08=0000000000000000 00007fb89a612ee7 XMM09=0000000000000000 00007fb89a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
