last executing test programs:

1.940429817s ago: executing program 2 (id=6219):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r5, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r4, 0xe0, &(0x7f0000000f00)={0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r4, 0x7, 0x34, 0x0, @void, @void, @void, @value=r7, r6}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0xf}, {0xffff, 0xffff}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x4000090)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r11, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000300)=0x68)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r2, r3, 0x35, 0x4000, 0x0, @void, @value=r11, @void, @void, r6}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="6c0000001000390462eeaa07f638faffffff000000000000000064fb51676741f67b3eb877308aaa8ed807e0d83f46e860dc1ef1d54d62731c4b4cde330ac1cd98f14bc84f22897b7c842970dbc40751d92f5c7417fcd2936e1c199c1757784acf0bf10177900865022ca8823c7b3dd6ddd6105fb2890fe790f14f536bfcce4258a95139dbf12f3559a0180b64d2f513f050b91e673483b016968a3163da85806b2827c8970637aa5539fba13904dc", @ANYRES32=r1, @ANYBLOB="000000009000000020001980140005001ed32ef81fbce29122c7923c40767d9e05000600810000001c0024004f84778defe46f4cf480cc5127c7aa779e9ce49a87d98de808002500040000000800290003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

1.934465764s ago: executing program 2 (id=6222):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
bind$llc(r0, &(0x7f0000000180)={0x1a, 0x2, 0x80, 0x2, 0xff, 0x2, @local}, 0x10)

1.859255389s ago: executing program 2 (id=6223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f00000002c0)=@in6={0xa, 0x4e24, 0x4, @remote, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="5c1c54ca148a5fd962171d103ecaf5527c1b7cdaf40576236d4c2c02fc4fad5a4e524517ceda3aeca57a5cb20402242682b8c395cd6aab4ff5ee018bd76fcfe9de1533c27c78f41c9e61079f9e70810339732607e5461a00079fbd2dc125b37577d22364d4e1c4187a33d36a7db3", 0x6e}, {&(0x7f0000000040)="5703165029a6278756ad029bcd47d3cfbbfa0ec55176ccc02fe8c69f1bc1be4b034dd5635d0af9aa91", 0x29}], 0x2}}, {{&(0x7f0000000440)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="8bfbded792663f06e2a2d8118607e3cd09c9f693b79de3173214922feaea07cfee7bd4815d6cadac58acedde9556c77f82eb6b", 0x33}, {&(0x7f00000004c0)="632cb6e82e45a9b84284d9c429fb56b1ff37d4b814e709f75cb5c7213dee23dfc48c683e75d2f19bf0379dd767043004fd4e71c985fb3d7d87892034a2482f0132c85b91059746b7606c452b3e1b721d157328022fbbefd9ce206cf3b2c28bc33a3681b5b9642a3da16bea3bac32a532cd518be1270044fdf586febfb0fb", 0x7e}], 0x2, 0xfffffffffffffffe}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)="789f95187769fa2abee3bb6c08adfa41afdc663c637a18d9981810271d734d52d1a3f8e6cc46c9401dd928fa70758ddf3c6b386a3d92d1e3daecf5c3a1529c6979131339c7e81bb9", 0x48}, {&(0x7f0000000640)="a4ae1e6c030d4784197baa5f73fd672215e383", 0x13}, {&(0x7f0000000680)="b1dcacd7ea", 0x5}, {&(0x7f00000006c0)="df0adef54a92af94ce2606ac4e7e5f5b3f96a9d18d3e6dd6ceaee239c3f653072cfee46c231a7112", 0x28}, {&(0x7f0000000700)="c7679324a452c99200b72253bfc67b1300c0d0e33a237ad5c6d94160cdac6e6ff30416e96206b72e8f69037300d334f9651a4313e50365c5b0ba850fa632e1", 0x3f}, {&(0x7f0000000d80)="a69793d2f123dcfabcbef3038942145b8331e7e08f019640193e8c54bf7b2806a184224d492c7fe79d23b14a22899b48dc0de38c4027150372450a05b839d72caf5182631b1ae4a9f889224cf4e694753f6a18e13139709b8a3b766b42afa6fa199c5459d910ae455c9533b6c71df6497fe5c2212898b1b87db6ac0b3cfac992e9843911434a709d1b525d3f942d49ecdf1d140986562acd9a14bc4461d55e57b810c2880509ad8a6d78d02154b5f934", 0xb0}, {&(0x7f0000000800)="56847b8999da98d419edf3fc481c798e21ad76a6503a725849369eddf114d34902b7ae4bd2a3956769f033aa98843cc8cd7990002fe0b7908ee6dc28662b6245465bac0f59978216b4e3ace67eb77a5682e3b19d2af5d8c5948a64f587", 0x5d}], 0x7}}], 0x3, 0x20008044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000380)="263ae086bf22d69a33d1bd6688a86408714c", 0x0, 0x411fd, 0x0, 0x49, 0x0, &(0x7f0000000a40)="b7012eb6a4c0e907fec5f7298e49174603d031dde138c602376a4f621159c5c759ec3ea97b55d3e794a5eb67a36bf082dfb764e2702c63512c7518ee5feac8df6b160e9530ae953a00", &(0x7f0000000000), 0x0, 0x0, 0xfffffffd}, 0x50)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
unshare(0x22020600)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2c, 0x0, @void}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r5, r6}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000000001e00000008001700ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, r3, 0x25, 0x4, @void}, 0x10)
ppoll(&(0x7f0000000e40)=[{r2, 0x4104}, {r1, 0x5020}, {r4, 0x4000}, {r5, 0x6108}, {0xffffffffffffffff, 0x1022}, {r9}, {r7, 0x2026}, {r5, 0x10}, {r5, 0x1}], 0x9, &(0x7f0000000ec0), &(0x7f0000000f00)={[0x8]}, 0x8)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x11c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "b967ad1555a6a32884a8f16bb7a945c71b759c2011947a7667c26b96524570f27d2447b771e1d42ca88d25530b9d0a633d560b88fc0d0a50fbc7d889037e1d0e1a6be1f1c0dfa00df24a60b3acf6b3e3a6e5035dc0c631d6cc66b9fc20fb2eb38f33c8cf6bd2df9d34403bc7d18a4a554475b1eb073a1ac22fe0d52e6ba381b20b20e17a4edf196921e3e6e74316315cf5ba08383c4bd0c7b7de8280f0d782af69cae0fbfc305d8d8ddb276590dae1a3256ccde71f1fe064f41f2bc2fe446392c9452713d487dc43cd8ed597222452aab285338e4f7bb2a0e609975747bae9655b224b7ce389b25fd5af87f51d8eb7"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x1)
write(r10, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.007157542s ago: executing program 2 (id=6235):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={<r5=>0x0, 0x401}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x12, 0x7, 0x8, 0x200, 0x0, 0x5, 0x2, 0x4, r5}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="36d48b13755b13bce00abf34d5677521f56627b2a052d5ac9c815a40379f1c41a899cb69cd68de43bd1e48d2b435fec51440778ea337b15a14dd0999e19975ceb22b3083225e14715733f5f87d4b272a5c1fdc59e96e2006072d4cd531d99bd40b6b91647f52505d2be7bf25f4c8f076eaf14ef8731a34bceeab0bea7da8bc3d523a387de233c81961b657fddbdd91618be16377826f5a7097aaf4eac41806a750207912d52456b8d3a5cda797559cc7a62f90c64d4df4818676d1d6f9f390eb770f7585949361b281d679a26e90b6cda87f3fe40ea8f5ed2b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000180)=0x8)

945.92765ms ago: executing program 2 (id=6239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001280)=[@in6={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x24002004}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000080601040000000000000000010000010900020073797a300000000005000100070000000900020073797a30000000620000020073797a31000000000900020073797a31000000000900020073797a30000000000900020073797a742e8018a8abb48a7093300000000005000100070000000900020073797a300000"], 0x80}, 0x1, 0x0, 0x0, 0x20000110}, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000bbe5943f170000000000000000d474683a73797a6b616c6c65723000"/59], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
unshare(0x2c020400)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, 0x0, &(0x7f0000000080))
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x85d7}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x0, 0x4800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/4096, 0x2d, 0x1000, 0x1}, 0x20)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

860.266706ms ago: executing program 1 (id=6243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2101, 0x0)
close(r4) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x10001, 0x1, 0x4b, 0x2}}}, ["", "", "", ""]}, 0x30}}, 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000800000000000000feab000000ebade8f9a01fced69f6d01dac1d228995b94631d48cc36951920da95c4acf1f5ae1fc5b04c3727d3634febc5f63bb11c34971cd2bb4e60e3894cd708e6ec1de1a596c8b9db2582ea87bc8ab53a3c9bad7d98c5b7d8add4e50b9697"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r8}, 0x10)
r10 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) (async)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7)
sendmsg$NL80211_CMD_SET_REG(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESDEC=r11], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, 0x0, 0x20000001) (async)
sendmmsg(r10, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x24000004)

760.940731ms ago: executing program 1 (id=6245):
unshare(0x20000400) (async)
unshare(0x20000400)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
write(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x28, 0x10, 0x1, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x14001}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x28, 0x10, 0x1, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x14001}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000080))
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="e04c000055953377551afda32dae14b552975ed05d35d80550c4f36205c9bbd92938d92f6db6b4ec1df1e049d9c850611b51e488aefd7da1488fdbae6ba596e96c2bf3fceac37de28f420c22b6ac2153552587c546a57aecc851d746479d5a0a428b423274f096a54aaf", @ANYRES16=r5, @ANYBLOB="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"], 0xce0}, 0x1, 0x0, 0x0, 0x2800c005}, 0x44000)

756.514814ms ago: executing program 1 (id=6247):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'wg1\x00', @remote})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r2], 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000300)=0x9)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
r7 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r9, 0x1)
recvmmsg(r9, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket(0x26, 0xa, 0x8)
ioctl$IMCTRLREQ(r10, 0x80044945, &(0x7f0000000000)={0x4002, 0x4, 0x200, 0x9})
recvmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=@delqdisc={0x24, 0x25, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {0xffff, 0x5}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r11, {0x9, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x800a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008064}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random})

531.088471ms ago: executing program 1 (id=6251):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000300)={@private, @local, @dev}, &(0x7f0000000340)=0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6e4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004840)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r8)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x7, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

439.563596ms ago: executing program 0 (id=6252):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110ad000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000001b40)={&(0x7f00000001c0)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000140)="203fab260e661be30da3a68e8995a0656ba808ceb7dfe9e6d63e2a8c2e1bb7732ea11d09de7f026b5549bd5fa31c45d4d7064e9cc20bff956faa154cd0a9d54869cbcd5bb7b1dc53c8d69b5e7bd0d68b6da6219a6d940004d999aa8e8ab609d4bbd46342618fa37c57cdce701b7165ccef46f52c18d6f862d27311f6dab0a4a77dd16be7a973f94fa68ca24badaef6f87f8147f93d24b16b076ce7d83917b4b88f87c5e12835d67db9dcad8fa8cc4f175ca92156a851727e2bb00f730ec8a8339e33e286180efd66b96005a9", 0xcc}], 0x2)
sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x800, 0x1135)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800058004800500080000003e"], 0x44}}, 0x4000)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x9, 0x7, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xbbc4}}]}, 0x38}}, 0x84)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', r6, 0x700, 0x7, 0x6, 0x3, {{0x33, 0x4, 0x2, 0x8, 0xcc, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x6, 0x5, "88eb9c"}]}, @rr={0x7, 0x3, 0x5a}, @timestamp_addr={0x44, 0x44, 0xaa, 0x1, 0x9, [{@private=0xa010102, 0x7}, {@broadcast, 0x2}, {@private=0xa010100, 0xf4}, {@multicast2, 0x2}, {@loopback, 0x1ced}, {@broadcast, 0xfffffff8}, {@rand_addr=0x64010102, 0xffffff06}, {@local, 0xb47}]}, @generic={0x7, 0x2}, @cipso={0x86, 0x33, 0x1, [{0x1, 0xc, "e35d18c07d267436a54e"}, {0x0, 0x11, "c8881597b0ed63e9444753cd8dbad4"}, {0x0, 0x6, "e896e94e"}, {0x1, 0x6, "116af3c4"}, {0x5, 0x4, "e5db"}]}, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x80000000}, {@broadcast, 0x9}, {@multicast1, 0x10001}, {@broadcast, 0x8001}]}, @noop, @rr={0x7, 0xb, 0xba, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0)

437.288686ms ago: executing program 1 (id=6253):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'bond_slave_0\x00', @remote})
close(0x4)

382.817411ms ago: executing program 0 (id=6254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x5, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x7, 0x0, 0x1, 0x10000}}, 0xe8) (async)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(0xffffffffffffffff, 0x0) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) (async)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0bce4640f82c0000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r0, @ANYBLOB="100016800c00dd800800c9000a010100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

380.922721ms ago: executing program 0 (id=6255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x1)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x11}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x271f8848d8e461b2}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="34000000d713bc0f7ad347825f3c4b7373e70aabc4b907a45b314757e5afaf2c50699c111595e605e946cfd61eeda68c3d460a080c0dee096385f86f17519d1e4bba8aac576ff98e5f06e06b8a782a8d51aac334e096063fb9be20429e75411dcb4041238e5e33cd147ff16f03aa326e", @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf251700000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000f000000730000000a001a00ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8004000", @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket(0x25, 0xa, 0x6)
bind$can_j1939(r8, &(0x7f0000000040)={0x1d, 0x0, 0x801, {0x0, 0x1, 0x2}}, 0x18)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0xfdc6, 0x8001, 0x6, 0x7fee}}, @TCA_NETEM_CORR={0x10, 0x1, {0x9de1, 0x39, 0x100}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000005c0)={<r12=>0x0, 0x1}, &(0x7f0000000600)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000500)={r12, 0x81, 0x84, 0x342}, &(0x7f0000000740)=0x10)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @multicast}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x2400c880)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
write$tun(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="bcff48bd708aafa3bbaa2eb33d4c34c04c748ae71ad2ac31a23a27a3422dd53ed2431752c60d49af8f65fa8688d815cd0b3001e27b9a8d"], 0x37)

380.431628ms ago: executing program 1 (id=6256):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f0000000040), &(0x7f0000000940)=r5}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="834505000100000040001280fe57dd6799aa08000100736974003400028008000300ffffffff0600100006000000000000000600000006000f0000000000060012004e2300000800016e2d369909be44b4327445007549ed33e51abb5d6d4228ac13a09e2848a536d71fdaa0d3e4d0d8444b9e9d10885cc48ecd39331f673ef285d06515031acbcc6e4178ab434ffe067f2b23de38e18dfba1e67345f03f73a7e15e6abb0209b9513a15add4e3302aa508f9af11f545dee3016f35c9b99dd3e34f0af8a7f5", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000000})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x54, 0x11, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x8}, {0xa}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}]}, 0x54}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r13, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)

210.691061ms ago: executing program 0 (id=6257):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x104041}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x60)
sendmsg$nfc_llcp(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x27, r2, 0x1, 0x3, 0xb, 0x5, "799bbc8bb523a04e818c022cf27580bf3da1e581313196e27b5f469fd284e3a99941ad5744d2cbcce306bbad424854634be91e4b53f1566e57233a83ebee9b", 0x1f}, 0x60, &(0x7f0000000540)=[{&(0x7f0000000480)="01c7154fa995b44073", 0x9}, {&(0x7f00000004c0)="7d9664a3663d7c1670cb372f94d71b08d53637f8ccb65c9843c4e25288a2cb6ce3d103aef70a87b5e435afb4bd24683b79220bb61c76aca0cc5e63b71658d53e01f43e14e6920fb987c11ba2c1", 0x4d}], 0x2, 0x0, 0x0, 0x4008000}, 0x20000040)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3d, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb750}, [@exit, @ldst={0x3, 0x3, 0x3, 0x2, 0x5, 0x100, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbd50}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x8001, 0xed, &(0x7f0000000800)=""/237, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xb, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0xb}], 0x10, 0xfffffffa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r7, 0x0, 0x1000, 0x48, &(0x7f0000000a80)="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", &(0x7f0000001a80)=""/72, 0x4, 0x0, 0x4, 0xac, &(0x7f0000001b00)="adf35775", &(0x7f0000001b40)="cb8dfcec5fc033e0a48b091b14e673fb9c4ba8d12f032f367ab120a846ef86f82a7c0a989e6b1492745be77c9a24d59851205bd93a8da3cc03ed48f02738ebee949fedf93d46564e5d3a28f48007a452ba0eb6dd70fdd1a923c6e3e2ea7accfb87e660ee405a113f73710ccd3f9e271bcfac4be3e2011ba503ab7d6d712d39f18f726166f04ac3000c269631646ecde5fc4f00896459553799ca8db0d8e81815a5f3d44dea214be2eda6faf2", 0x5}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001c80)={'wpan1\x00'})
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d00)=0x14, 0x80000)
getsockname$packet(r8, &(0x7f0000001d40)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001d80)=0x14)
sendmsg$inet(r8, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000001e40)=[{&(0x7f0000001e00)="b73119c73408b808afee50377ead54d659a26a5e5ffc972db986690c80cf73b152078d3fcff28efdc5c4d28ae23418e6ab39cfd7bc908550cb5229c4c894", 0x3e}], 0x1}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
accept(0xffffffffffffffff, 0x0, &(0x7f0000001ec0))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f00), r0)
syz_genetlink_get_family_id$nfc(&(0x7f0000001f40), r4)
recvmsg(r8, &(0x7f0000003080)={&(0x7f0000001f80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, &(0x7f0000003040)=""/2, 0x2}, 0x40000002)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003200)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', r9, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000031c0)={@map=<r11=>r10, 0xf, 0x1, 0x40, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000003100)=[0x0], &(0x7f0000003140)=[0x0, 0x0], &(0x7f0000003180)=[0x0, 0x0]}, 0x40)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003480)={&(0x7f0000003280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x5, [@restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0xcf50, [{0x9, 0x1, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}, @restrict={0x2, 0x0, 0x0, 0xb, 0x3}, @float={0x5, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x80000001}}, @enum64={0xc, 0x6, 0x0, 0x13, 0x0, 0x2, [{0x10, 0x5, 0x80000001}, {0x1, 0x7bdd410f, 0x6}, {0x1, 0xc, 0x2}, {0xc, 0x39a, 0x1}, {0x9, 0x8}, {0xf, 0x6699, 0x6}]}]}, {0x0, [0x5f, 0x0, 0x61]}}, &(0x7f0000003380)=""/193, 0xdd, 0xc1, 0x760a, 0x8}, 0x28)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000034c0)=@base={0x0, 0x9, 0x6, 0xfff, 0x420c0, r11, 0x0, '\x00', r9, r12, 0x3}, 0x50)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000003580)=<r14=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000003740)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x14, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c0c4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003780)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x2, '\x00', r9, r12, 0x2, 0x3, 0x2}, 0x50)

209.367598ms ago: executing program 0 (id=6258):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write(r0, &(0x7f0000000040)="8708979d4d07bcf7de37b6b3201d44b725002b6f34623794b3f329210f6fc0a451c548fcbe857d78d8a1309fc0c79a9b519ded59575d04a0015c752a8304e9b98a51", 0x42)
r1 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@default, @bcast, @netrom, @rose, @null, @netrom, @null, @default]}, &(0x7f0000000140)=0x80, 0x80000)
sendmsg$nl_route_sched(r1, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000001c0)=@newtfilter={0xad0, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0x9}, {0x9, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x4c, 0xd}}, @TCA_RATE={0x6, 0x5, {0x29, 0x2}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xfd}}, @filter_kind_options=@f_u32={{0x8}, {0x748, 0x2, [@TCA_U32_SEL={0x744, 0x5, {0x7, 0x9, 0x4, 0xec, 0x495, 0xff, 0x7, 0x6, [{0x3, 0x101, 0x4, 0x6}, {0x347, 0xbb, 0x7, 0x1}, {0x5, 0xac28, 0x4, 0x2}, {0x0, 0x7, 0x9, 0x8}, {0x6, 0x9, 0x6, 0x7}, {0xaaf, 0x9, 0x7, 0xd13a}, {0x7, 0xdfe, 0x7, 0x478}, {0x2, 0x0, 0x6, 0xe}, {0x80000001, 0x10001, 0xf, 0xfff}, {0x8, 0x100, 0xffff, 0x2}, {0x7, 0x0, 0x76, 0x5}, {0x7, 0x10, 0x7, 0x4}, {0x81, 0xf, 0x5, 0x7}, {0x80000001, 0x6, 0xffffffff, 0x42}, {0x36e, 0x6228fd40, 0x80000001, 0x8}, {0x4, 0xba33, 0xffffffff, 0x7}, {0x0, 0x7, 0x3dd, 0x5}, {0x100, 0xe7e7, 0x6, 0x5}, {0x1, 0x200, 0x5, 0x1585a2a4}, {0x800, 0x8, 0x3, 0x2}, {0x6, 0xb, 0xd1, 0xa6}, {0x1, 0x8000, 0xd}, {0x9, 0x2e, 0x8, 0x1}, {0xf, 0x1, 0xff, 0x2}, {0x2, 0x7, 0x5, 0x3}, {0x80000000, 0x1, 0xb, 0xe8}, {0x2, 0x2, 0x10001, 0x8}, {0x3, 0x1, 0x0, 0x4}, {0x101, 0x200, 0x1ff, 0x3}, {0xcdd4, 0x7, 0x2, 0xb}, {0x2, 0x71fcd2bf, 0x0, 0xc}, {0x1, 0x1, 0x7ff, 0x9}, {0x3, 0xffffffff, 0xffff22e0, 0x2}, {0x77, 0x3, 0x5, 0x3}, {0x14, 0x2, 0xc6, 0x4}, {0x5, 0xd, 0x5d, 0x82e}, {0x3, 0x9, 0x80, 0x5b}, {0x3, 0x8, 0x0, 0x3}, {0x1, 0x58a, 0x4, 0x4}, {0x80000000, 0x87c4, 0x3}, {0x0, 0x3, 0xfffffffc, 0xe6}, {0x8, 0x0, 0xf, 0xffffff37}, {0x0, 0x3, 0x7, 0xb}, {0x0, 0x7fff, 0x0, 0x9}, {0x6, 0x0, 0x4, 0x2}, {0x7, 0xff, 0x3, 0x3}, {0x0, 0x6, 0x8, 0x5}, {0x0, 0xa7c4, 0xff, 0xfff}, {0x401, 0xfffffffb, 0x7, 0x3}, {0x4, 0x1000, 0x5ba, 0x700000}, {0x1, 0x8, 0x0, 0x4}, {0x4, 0x2, 0x5, 0x8}, {0x2, 0x10000, 0x5, 0x3}, {0x5, 0xf, 0x2, 0x9}, {0x6, 0x8, 0x7, 0x7}, {0x80, 0x80000001, 0x8, 0xffff}, {0x9, 0x4, 0xfffffffe, 0x778bd4b6}, {0x3, 0x4, 0xfffffffb, 0x7}, {0x9, 0x0, 0x4, 0x400}, {0xad5, 0xfffffd11, 0x1, 0xfff}, {0x3, 0xffffffff, 0x4, 0x9}, {0xfffff6fc, 0x2, 0x1, 0x6}, {0x34, 0x5, 0x800, 0x1}, {0xc, 0xffffff27, 0xb, 0x1000}, {0x8, 0x9f, 0x6, 0xa}, {0x7, 0x5, 0x9, 0xfffffff5}, {0x668, 0x0, 0x7, 0x29a}, {0x3, 0x4, 0x4, 0x9}, {0x4, 0xff, 0x2}, {0x4c, 0x7, 0x9, 0x3}, {0x10001, 0x8, 0x0, 0x86c}, {0x4c7, 0x2, 0x7, 0x5}, {0x2, 0x5, 0xd, 0x4}, {0x10, 0x6d, 0x3, 0x6f}, {0x3, 0x5, 0x7fffffff, 0xd8}, {0x4, 0x0, 0xe9}, {0x61, 0x2, 0xfb8a, 0x8}, {0x3, 0x7, 0x4, 0x3}, {0x3, 0x8b, 0x6}, {0x9, 0x7, 0x50, 0x1}, {0x10, 0x3, 0x6, 0x3}, {0x280000, 0x3ff, 0x5, 0x100}, {0x9, 0x7, 0xfffffe44, 0xffffffff}, {0x6f8, 0x0, 0x1ff, 0x6e16}, {0x101, 0x7, 0x3, 0x7}, {0x8a5b, 0x7fff, 0x4, 0x5}, {0x7fff, 0x3, 0x0, 0x7}, {0x7, 0x8, 0x7, 0x1c45737f}, {0x7, 0x6049, 0x4, 0x200}, {0xff, 0x5, 0x5, 0x100}, {0x5, 0x200, 0x9, 0x100}, {0xa0, 0x3, 0x800, 0x8}, {0x2, 0x7, 0x10, 0x80}, {0x6, 0x10000, 0xc, 0x6}, {0x9, 0xffff, 0x1, 0x1}, {0x4, 0x8, 0x9, 0x3}, {0x7302fbf6, 0xabcd201, 0x0, 0x1}, {0x0, 0x3, 0x83, 0x3}, {0x8, 0x2, 0x2, 0x2f434d19}, {0x1, 0x3, 0x9, 0x3}, {0x5, 0x7, 0x7, 0x2}, {0x6e2, 0xaea, 0x3, 0x1}, {0x8, 0xa, 0x4, 0x5}, {0x7, 0x2, 0xfffffffe, 0x9}, {0x3fffc00, 0x4, 0x5, 0x9e0}, {0x5, 0xffff, 0x8e31, 0xb}, {0xa, 0x1, 0x80000000, 0x7}, {0x8, 0x5, 0x0, 0xa}, {0x1ff, 0x10, 0xd, 0x200}, {0x8, 0x9, 0x7, 0xede}, {0x7fff, 0x6, 0x9, 0x2}, {0x80, 0x9, 0x3f7, 0x1}, {0x1, 0x1, 0x2b4c76a0, 0x100}, {0x8, 0xfffffffe, 0x0, 0xb2}, {0xe, 0x1, 0x3f6c, 0x5}]}}]}}, @TCA_RATE={0x6, 0x5, {0x4a, 0x85}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x314, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_ACT={0x1fc, 0x7, [@m_xt={0x158, 0x11, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x74, 0x6, {0xf6, 'raw\x00', 0x5, 0x8, "d8f538434f213c445d5e2454bb01a3008480971e34016f371325342ca8e341add53e04d51c9ef2b18e5b90fe4b067f0cfd9a6805f4fafb7d6ed2336965ad602c8fbbc1addd509dafcf3e"}}]}, {0xbc, 0x6, "3e2d0718c0061b4ecb1d21415f1a34508fb75ba7ec7cd75c85abf61d83c71482295e3a7c97c1b726f1d69d5b1022f31f203a178cb86f0f3cb56347ae307d6608330e828f68538c134e9a2f012d5566c3fb762c5d3e3fccf78c6de3cea37824b378d9b72955874e44b355fde0ddeb91f2e7888affd323404323b2535c75ea5fc52fbcea2ce9bdc151e1f992ee98fea2fa1f0908cb8946421b511518c75d3ac59cd13f541ad7a89915523297e8fd0902aa6295fde48ca2395d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xa0, 0x8, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7, 0x20000000, 0xffff, 0xd93}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb77}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xe9bd}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}]}, {0x1a, 0x6, "f6ae6f13960de624eb340df4e4a6a89a1d731e676106"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb}, @TCA_U32_ACT={0xec, 0x7, [@m_xt={0xe8, 0x15, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0xb5, 0x6, "aa2b547889f8e6885cf578d3bd8013732f8eda983d40c4981e767598d5565ee2247aeacb373a6acf4bb7f2a8942c6164377a1a305d10efbe85782b27815211838f559ff6ed5716824112ac3ec493ebc5cdc98f69b1d1d8f45b487e1b2044c1112a785d402920cab8b0dec086cca7f6dd147f0c00289ddad9fbdabad3b8c477e67ac9e749d11f56f99d9b520faab54b91e334726797dbf8e97ad05a675c397e260796778b2385de8a28721f886b19f4b65a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_HASH={0x8, 0x2, 0x401}, @TCA_U32_LINK={0x8, 0x3, 0xb69}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0xad0}, 0x1, 0x0, 0x0, 0x400c800}, 0x880)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40851)
r3 = accept4$llc(r1, 0x0, &(0x7f0000000e80), 0x80c00)
ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, 0xfffffffffffffffd)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r5 = accept4$llc(r4, &(0x7f0000000ec0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000f00)=0x10, 0x400)
r6 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000f80)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000001080)=0xe8)
sendmsg$nl_generic(r1, &(0x7f0000001240)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000010c0)={0x110, 0x14, 0x400, 0x70bd29, 0x25dfdbfe, {0x14}, [@typed={0xc, 0xb4, 0x0, 0x0, @u64=0x9}, @generic="f9bf61d7dac732d3714344eb82158abce113b33fae0b623e7e4e4a54a9b03f6bf22c3330235fdeb8debadf0e105ea0ab3fd183d0ea0944141d4a5d29b3401f8542cb4c7b6be7849fe504adedbf8c659325d412e1423f0bb1ef88b7088a5b0bf84766279bda3daaacfb1a169d19afd2eb340a13655fced74c08e9ea7407", @generic="d03c94f9d9bb32dcc00c4118256fd917baf4173894eaa607034e9d71e4cdd08f94d8c25ed1c85e55448851ed8f2e7de96f5d08519aea937864f810d741cb420045f91d7b13ef46d2543da86ff7", @nested={0x1c, 0x5e, 0x0, 0x1, [@typed={0x8, 0x10f, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x1e}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x8}]}, @typed={0x8, 0xb7, 0x0, 0x0, @uid=r8}]}, 0x110}, 0x1, 0x0, 0x0, 0x2}, 0x20000000)
getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001280), &(0x7f00000012c0)=0x8)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001300)={'wpan1\x00', <r10=>0x0})
sendmsg$nl_route(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@ipv4_deladdr={0x3c, 0x15, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x78, 0xb3, 0xff, r7}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_1\x00'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4080)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480), r1)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001600)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xc4, r11, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x380}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}]}]}, 0xc4}}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@getnexthop={0x1c, 0x6a, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x40094)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, r12, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
getsockname$packet(r1, &(0x7f0000001880), &(0x7f00000018c0)=0x14)
r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001940)={'wpan3\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x58, r12, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040001)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, 0x1411, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x81)
sendmsg$sock(r4, &(0x7f0000001e80)={&(0x7f0000001bc0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)="ccbcfdae038eb88f3abb983cc93ee3a4ea8667e829d83e20c398dce0c18b9d468ef9ff1f67ec5fc3fee49f5d96a93431faf86da486716450ca360e150328ffece0a790a686758936312380656061137c0e8afd36065be6573a3e8c70c7cc5f396d4ebec2773e1288d67d2caa81a2a935f35e602ae9db6aba99c82a9ac06b215e04ec99210cd0aa40f6dc82589ed0953a6e8416729256015668834c591a69a630923edc7af77a530f940c4e8569e830858bd1594535e5db255949ef77b00a7300b8451890c23c26805963c5c454455d3369", 0xd1}, {&(0x7f0000001d40)="7f6b9cce885e2954ab66d80715568ef362fa2a8e0b2d2219a82d856cf7ce3da26ad7f827b2e070401c82759c48fa39de4e386659640b0f08601f76886649bb78c46bdcb6dfa953dbe54c7e466b2ff0f1c050b00684c52d6d549bf48997587be9eeabcc560b3f9e8d0475d6ad1c200c87dd8fa9e8db7bb4643ac9ab9dfee646ceaed4939c896a0b84171c08263f3dd9274b832edd3a3e", 0x96}], 0x2, &(0x7f0000001e40)=[@mark={{0x14}}], 0x18}, 0x0)
ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000001f00)=0x9)

130.840692ms ago: executing program 0 (id=6259):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'ip6tnl0\x00', 0x1})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async)
sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xb9952aa97289f855, 0x69, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xb9) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x8000)

0s ago: executing program 2 (id=6260):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a580, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvlan0\x00'})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x7f, 0x0, 0x1}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="28f7ff00520001000000001c00001014000000000000d65b147466a3035c10e7eefbf54a69c6a57055d531c3bb27f4f18866318924d6b17b179bdc8cc9caf38c", @ANYRES64=<r9=>r7], 0x28}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e, 0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000001000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=r9], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="40000000100001042abd70000020000000000000", @ANYRES32=0x0, @ANYBLOB="c683060098540720200004800e00000069703665727370616e0000000c00028006000200ffff0000"], 0x40}, 0x1, 0xd, 0x0, 0x4044084}, 0x44000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8)

kernel console output (not intermixed with test programs):

red promiscuous mode
[  375.596382][T27050] bond31: entered allmulticast mode
[  375.598854][T27050] 8021q: adding VLAN 0 to HW filter on device bond31
[  375.610037][T27050] bridge0: entered promiscuous mode
[  375.612297][T27050] bridge0: entered allmulticast mode
[  375.614785][T27050] bond31: (slave bridge0): Enslaving as a backup interface with an up link
[  375.713145][   T13] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  375.733133][T27054] 8021q: adding VLAN 0 to HW filter on device bond32
[  375.739386][T27059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.747670][T27060] 8021q: adding VLAN 0 to HW filter on device bond32
[  375.750143][T27060] bond32: (slave vxcan1): The slave device specified does not support setting the MAC address
[  375.756014][T27060] bond32: (slave vxcan1): Error -95 calling set_mac_address
[  375.763636][T27057] syzkaller0: entered promiscuous mode
[  375.766519][T27057] syzkaller0: entered allmulticast mode
[  375.773855][T27056] tipc: Resetting bearer <eth:syzkaller0>
[  375.787267][T27056] tipc: Disabling bearer <eth:syzkaller0>
[  375.808111][T27054] veth17: entered promiscuous mode
[  375.812125][T27054] bond32: (slave veth17): Enslaving as an active interface with a down link
[  375.818333][T27054] erspan0: entered allmulticast mode
[  375.835851][T13558] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  375.897633][T27065] hsr0 speed is unknown, defaulting to 1000
[  375.901276][T27065] lo speed is unknown, defaulting to 1000
[  375.948756][T27068] veth0: entered promiscuous mode
[  375.957071][T27068] veth0 (unregistering): left promiscuous mode
[  376.012584][T27065] lo speed is unknown, defaulting to 1000
[  376.057015][T27071] syzkaller0: entered promiscuous mode
[  376.058811][T27071] syzkaller0: entered allmulticast mode
[  376.651456][T27113] hsr0 speed is unknown, defaulting to 1000
[  376.654760][T27113] lo speed is unknown, defaulting to 1000
[  376.738900][T27117] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  376.746527][T27113] lo speed is unknown, defaulting to 1000
[  376.773412][T27117] validate_nla: 12 callbacks suppressed
[  376.773426][T27117] netlink: 'syz.0.5469': attribute type 5 has an invalid length.
[  376.884598][T27127] netlink: 'syz.2.5470': attribute type 2 has an invalid length.
[  376.893862][T27127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.906227][    T9] lo speed is unknown, defaulting to 1000
[  376.908751][    T9] syz1: Port: 1 Link ACTIVE
[  376.934856][T27129] syzkaller0: entered promiscuous mode
[  376.937304][T27129] syzkaller0: entered allmulticast mode
[  377.202884][T27141] veth0_to_bond: left allmulticast mode
[  377.205306][T27141] veth0_to_bond: left promiscuous mode
[  377.208135][T27141] bridge21: port 2(veth0_to_bond) entered disabled state
[  377.211769][T27141] veth13: left allmulticast mode
[  377.213468][T27141] veth13: left promiscuous mode
[  377.215536][T27141] bridge21: port 1(veth13) entered disabled state
[  377.460132][T27147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  377.463550][T27147] syzkaller0: entered promiscuous mode
[  377.466055][T27147] syzkaller0: entered allmulticast mode
[  377.471176][T27147] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  377.477394][T27147] tipc: Resetting bearer <eth:syzkaller0>
[  377.481714][T27146] tipc: Resetting bearer <eth:syzkaller0>
[  377.488193][T27146] tipc: Disabling bearer <eth:syzkaller0>
[  377.833035][T27155] __nla_validate_parse: 27 callbacks suppressed
[  377.833050][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5480'.
[  377.982491][T27157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  377.984364][T27158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  377.992041][T27158] IPv6: NLM_F_CREATE should be set when creating new route
[  377.995215][T27158] IPv6: NLM_F_CREATE should be set when creating new route
[  378.000803][T27158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  378.005236][T27157] netlink: 'syz.0.5481': attribute type 7 has an invalid length.
[  378.008677][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'.
[  378.439872][T27169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.442765][T27169] syzkaller0: entered promiscuous mode
[  378.444704][T27169] syzkaller0: entered allmulticast mode
[  378.451151][T27169] unknown channel width for channel at 909000KHz?
[  378.456352][T27169] tipc: Resetting bearer <eth:syzkaller0>
[  378.465966][T27169] tipc: Resetting bearer <eth:syzkaller0>
[  378.469515][T27169] tipc: Disabling bearer <eth:syzkaller0>
[  378.662745][T27183] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5489'.
[  378.714202][T27186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5490'.
[  378.738017][T27195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.741027][T27195] syzkaller0: entered promiscuous mode
[  378.743327][T27195] syzkaller0: entered allmulticast mode
[  378.754130][T27195] tipc: Resetting bearer <eth:syzkaller0>
[  378.758423][T27194] tipc: Resetting bearer <eth:syzkaller0>
[  378.762373][T27194] tipc: Disabling bearer <eth:syzkaller0>
[  378.770932][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'.
[  378.775069][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'.
[  378.778881][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'.
[  378.781955][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'.
[  378.815033][T27199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.819347][T27199] syzkaller0: entered promiscuous mode
[  378.821659][T27199] syzkaller0: entered allmulticast mode
[  378.826063][T27199] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  378.835015][T27199] tipc: Resetting bearer <eth:syzkaller0>
[  378.844483][T27199] tipc: Resetting bearer <eth:syzkaller0>
[  378.849026][T27199] tipc: Disabling bearer <eth:syzkaller0>
[  378.932666][T27204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5496'.
[  378.955089][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'.
[  379.009323][T27221] "syz.2.5500" (27221) uses obsolete ecb(arc4) skcipher
[  379.108246][T27225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.111226][T27225] syzkaller0: entered promiscuous mode
[  379.113370][T27225] syzkaller0: entered allmulticast mode
[  379.122071][T27225] tipc: Resetting bearer <eth:syzkaller0>
[  379.129860][T27224] tipc: Resetting bearer <eth:syzkaller0>
[  379.133587][T27224] tipc: Disabling bearer <eth:syzkaller0>
[  379.144493][T27227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.160573][T27227] syzkaller0: entered promiscuous mode
[  379.162763][T27227] syzkaller0: entered allmulticast mode
[  379.181338][T27227] tipc: Resetting bearer <eth:syzkaller0>
[  379.190255][T27226] tipc: Resetting bearer <eth:syzkaller0>
[  379.207335][T27226] tipc: Disabling bearer <eth:syzkaller0>
[  379.277266][T27236] tipc: Trying to set illegal importance in message
[  379.289623][T27239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.292965][T27238] syzkaller0: entered promiscuous mode
[  379.295533][T27238] syzkaller0: entered allmulticast mode
[  379.307522][T27237] tipc: Resetting bearer <eth:syzkaller0>
[  379.314369][T27237] tipc: Disabling bearer <eth:syzkaller0>
[  379.600996][T27273] netlink: 'syz.0.5514': attribute type 1 has an invalid length.
[  379.612102][T27273] bond25: (slave geneve10): making interface the new active one
[  379.615415][T27273] bond25: (slave geneve10): Enslaving as an active interface with an up link
[  379.624301][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  379.628081][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  379.631597][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  379.636202][T27273] 8021q: adding VLAN 0 to HW filter on device bond25
[  379.640057][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  379.685465][T27281] netlink: 'syz.1.5517': attribute type 10 has an invalid length.
[  379.824463][T27290] syzkaller0: entered promiscuous mode
[  379.827812][T27290] syzkaller0: entered allmulticast mode
[  379.869185][   T10] lo speed is unknown, defaulting to 1000
[  379.871498][   T10] syz1: Port: 1 Link DOWN
[  379.925921][T27302] gtp8: entered promiscuous mode
[  379.935990][T27302] gtp8: entered allmulticast mode
[  379.997619][T27312] syzkaller1: entered promiscuous mode
[  380.000390][T27312] syzkaller1: entered allmulticast mode
[  380.140434][T27324] 8021q: VLANs not supported on caif0
[  380.142539][T27324] 8021q: VLANs not supported on caif0
[  380.144525][T27324] 8021q: VLANs not supported on caif0
[  380.148855][T27324] 8021q: VLANs not supported on caif0
[  380.151663][T27324] 8021q: VLANs not supported on caif0
[  380.513483][T27344] netlink: 'syz.1.5533': attribute type 9 has an invalid length.
[  380.779687][T27361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.782521][T27361] syzkaller0: entered promiscuous mode
[  380.784884][T27361] syzkaller0: entered allmulticast mode
[  380.789514][T27361] tipc: Resetting bearer <eth:syzkaller0>
[  380.791927][T27361] syzkaller0: tun_net_xmit 90
[  380.799698][T27360] tipc: Resetting bearer <eth:syzkaller0>
[  380.804388][T27360] tipc: Disabling bearer <eth:syzkaller0>
[  381.178959][T27384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.222512][T27384] syzkaller0: entered promiscuous mode
[  381.224923][T27384] syzkaller0: entered allmulticast mode
[  381.262906][T27397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.279088][T27397] syzkaller0: entered promiscuous mode
[  381.281461][T27397] syzkaller0: entered allmulticast mode
[  381.317657][T27384] tipc: Resetting bearer <eth:syzkaller0>
[  381.320891][T27382] tipc: Resetting bearer <eth:syzkaller0>
[  381.348969][T27382] tipc: Disabling bearer <eth:syzkaller0>
[  381.352808][T27397] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  381.361361][T27397] tipc: Resetting bearer <eth:syzkaller0>
[  381.367418][T27396] tipc: Resetting bearer <eth:syzkaller0>
[  381.377046][T27396] tipc: Disabling bearer <eth:syzkaller0>
[  381.396391][T27407] netlink: 'syz.1.5545': attribute type 4 has an invalid length.
[  381.405102][ T5911] lo speed is unknown, defaulting to 1000
[  381.410029][ T5911] syz0: Port: 1 Link DOWN
[  381.410122][T27407] netlink: 'syz.1.5545': attribute type 4 has an invalid length.
[  381.411779][ T5911] lo speed is unknown, defaulting to 1000
[  381.421590][    T9] lo speed is unknown, defaulting to 1000
[  381.423787][    T9] syz0: Port: 1 Link ACTIVE
[  381.425497][    T9] lo speed is unknown, defaulting to 1000
[  381.522301][T27418] erspan0: left allmulticast mode
[  381.560861][T27418] mac80211_hwsim hwsim302 wlan0: left allmulticast mode
[  381.564190][T27418] veth17: left promiscuous mode
[  381.571408][T27418] gtp8: left promiscuous mode
[  381.575917][T27418] gtp8: left allmulticast mode
[  381.585878][ T5911] lo speed is unknown, defaulting to 1000
[  381.588263][ T5911] syz0: Port: 1 Link DOWN
[  381.590127][ T5911] lo speed is unknown, defaulting to 1000
[  381.624297][T27429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.657716][T27429] syzkaller0: entered promiscuous mode
[  381.659645][T27429] syzkaller0: entered allmulticast mode
[  381.704661][T27429] tipc: Resetting bearer <eth:syzkaller0>
[  381.711740][T27431] hsr0 speed is unknown, defaulting to 1000
[  381.714533][T27428] tipc: Resetting bearer <eth:syzkaller0>
[  381.720866][T27428] tipc: Disabling bearer <eth:syzkaller0>
[  381.725320][T27431] lo speed is unknown, defaulting to 1000
[  381.778852][T27431] lo speed is unknown, defaulting to 1000
[  381.910299][T27453] netlink: 'syz.1.5557': attribute type 39 has an invalid length.
[  381.968234][T27463] syzkaller0: entered promiscuous mode
[  381.970183][T27463] syzkaller0: entered allmulticast mode
[  382.259507][T27472] bond31: (slave bridge0): Removing an active aggregator
[  382.265318][T27472] bond31: (slave bridge0): Releasing backup interface
[  382.269554][T27472] bridge0: left promiscuous mode
[  382.271751][T27472] bridge0: left allmulticast mode
[  382.284862][T27472] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  382.323496][T27477] netlink: 'syz.0.5562': attribute type 10 has an invalid length.
[  382.339594][T27477] netlink: 'syz.0.5562': attribute type 10 has an invalid length.
[  382.811448][T27479] bond32: (slave veth17): Releasing active interface
[  382.830300][T27479] A link change request failed with some changes committed already. Interface bond5 may have been left with an inconsistent configuration, please check.
[  382.953606][T27485] hsr0 speed is unknown, defaulting to 1000
[  382.963671][T27485] lo speed is unknown, defaulting to 1000
[  383.070409][T27485] lo speed is unknown, defaulting to 1000
[  383.188820][T27501] __nla_validate_parse: 64 callbacks suppressed
[  383.188836][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5569'.
[  383.222882][T27501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5569'.
[  383.224462][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'.
[  383.227586][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5569'.
[  383.330061][T27515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5572'.
[  383.360704][T27517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5573'.
[  383.403139][T27519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.407754][T27519] syzkaller0: entered promiscuous mode
[  383.409621][T27519] syzkaller0: entered allmulticast mode
[  383.428608][T27518] tipc: Resetting bearer <eth:syzkaller0>
[  383.435443][T27518] tipc: Disabling bearer <eth:syzkaller0>
[  383.518676][T27533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.521787][T27533] syzkaller0: entered promiscuous mode
[  383.524096][T27533] syzkaller0: entered allmulticast mode
[  383.527193][T27535] netlink: 'syz.1.5579': attribute type 10 has an invalid length.
[  383.533858][T27533] tipc: Resetting bearer <eth:syzkaller0>
[  383.539176][T27532] tipc: Resetting bearer <eth:syzkaller0>
[  383.547595][T27532] tipc: Disabling bearer <eth:syzkaller0>
[  383.660375][T27543] netlink: 'syz.1.5580': attribute type 10 has an invalid length.
[  383.860492][T27568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5587'.
[  383.864809][T27568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5587'.
[  383.875351][T27568] syzkaller1: entered promiscuous mode
[  383.878135][T27568] syzkaller1: entered allmulticast mode
[  384.009736][T27572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'.
[  384.331531][T27591] erspan0: entered promiscuous mode
[  384.334554][T27591] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  384.358390][T27597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5593'.
[  384.402883][T27604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  384.405696][T27604] syzkaller0: entered promiscuous mode
[  384.407989][T27604] syzkaller0: entered allmulticast mode
[  384.496144][T27604] tipc: Resetting bearer <eth:syzkaller0>
[  384.500942][T27603] tipc: Resetting bearer <eth:syzkaller0>
[  384.509852][T27603] tipc: Disabling bearer <eth:syzkaller0>
[  384.532136][T27615] netlink: 'syz.1.5596': attribute type 10 has an invalid length.
[  384.540885][T27615] netlink: 'syz.1.5596': attribute type 10 has an invalid length.
[  384.717480][T27617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.467512][T27631] netlink: 'syz.0.5601': attribute type 10 has an invalid length.
[  385.518209][T27634] netlink: 'syz.0.5601': attribute type 10 has an invalid length.
[  385.769115][T27646] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  385.849989][T27652] bond24: left promiscuous mode
[  385.852310][T27652] bond24: left allmulticast mode
[  385.861709][T13558] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.867208][T13558] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  385.875412][T13558] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.884246][T13558] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  385.890193][T13558] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.893490][T13558] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  385.897685][T13558] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  385.901680][T13558] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  385.907760][T27663] lo: entered promiscuous mode
[  385.910032][T27663] lo: entered allmulticast mode
[  385.918502][T27663] tunl0: entered promiscuous mode
[  385.922964][T27663] tunl0: entered allmulticast mode
[  385.927564][T27663] gre0: entered promiscuous mode
[  385.929718][T27663] gre0: entered allmulticast mode
[  385.933516][T27663] gretap0: entered promiscuous mode
[  385.937025][T27663] gretap0: entered allmulticast mode
[  385.939858][T27663] erspan0: left promiscuous mode
[  385.942079][T27663] erspan0: entered promiscuous mode
[  385.944336][T27663] erspan0: entered allmulticast mode
[  385.949757][T27663] ip_vti0: entered promiscuous mode
[  385.952159][T27663] ip_vti0: entered allmulticast mode
[  385.955065][T27663] ip6_vti0: entered promiscuous mode
[  385.958326][T27663] ip6_vti0: entered allmulticast mode
[  385.961215][T27663] sit0: entered promiscuous mode
[  385.963377][T27663] sit0: entered allmulticast mode
[  385.968391][T27663] ip6tnl0: entered promiscuous mode
[  385.970774][T27663] ip6tnl0: entered allmulticast mode
[  385.974647][T27663] ip6gre0: entered promiscuous mode
[  385.977987][T27663] ip6gre0: entered allmulticast mode
[  385.981714][T27663] !: entered promiscuous mode
[  385.983842][T27663] !: entered allmulticast mode
[  385.986988][T27663] nlmon0: entered promiscuous mode
[  385.989264][T27663] nlmon0: entered allmulticast mode
[  385.993849][T27663] wg1: entered promiscuous mode
[  385.996103][T27663] wg1: entered allmulticast mode
[  386.000081][T27663] wg2: entered promiscuous mode
[  386.002240][T27663] wg2: entered allmulticast mode
[  386.004905][T27663] veth0_to_bridge: entered promiscuous mode
[  386.007853][T27663] veth0_to_bridge: entered allmulticast mode
[  386.011114][T27663] bridge_slave_0: entered allmulticast mode
[  386.014579][T27663] veth1_to_bridge: entered promiscuous mode
[  386.017156][T27663] veth1_to_bridge: entered allmulticast mode
[  386.020759][T27663] bridge_slave_1: entered promiscuous mode
[  386.023303][T27663] bridge_slave_1: entered allmulticast mode
[  386.026547][T27663] veth0_to_bond: entered promiscuous mode
[  386.028785][T27663] veth0_to_bond: entered allmulticast mode
[  386.032651][T27663] bond_slave_0: entered promiscuous mode
[  386.035062][T27663] bond_slave_0: entered allmulticast mode
[  386.038176][T27663] veth1_to_team: entered promiscuous mode
[  386.040722][T27663] veth1_to_team: entered allmulticast mode
[  386.044025][T27663] team_slave_1: entered promiscuous mode
[  386.046832][T27663] team_slave_1: entered allmulticast mode
[  386.049862][T27663] xfrm0: entered promiscuous mode
[  386.052184][T27663] xfrm0: entered allmulticast mode
[  386.055537][T27663] veth0_to_hsr: entered promiscuous mode
[  386.058175][T27663] veth0_to_hsr: entered allmulticast mode
[  386.061364][T27663] hsr_slave_0: entered promiscuous mode
[  386.063773][T27663] hsr_slave_0: entered allmulticast mode
[  386.067059][T27663] veth1_to_hsr: entered promiscuous mode
[  386.069626][T27663] veth1_to_hsr: entered allmulticast mode
[  386.072833][T27663] hsr_slave_1: entered promiscuous mode
[  386.076006][T27663] veth1_virt_wifi: entered promiscuous mode
[  386.078545][T27663] veth1_virt_wifi: entered allmulticast mode
[  386.081848][T27663] veth0_virt_wifi: entered promiscuous mode
[  386.084346][T27663] veth0_virt_wifi: entered allmulticast mode
[  386.087834][T27663] geneve0: entered promiscuous mode
[  386.090048][T27663] geneve0: entered allmulticast mode
[  386.093378][T27663] geneve1: entered promiscuous mode
[  386.095216][T27663] geneve1: entered allmulticast mode
[  386.103658][T27663] mac80211_hwsim hwsim143 wlan2: entered promiscuous mode
[  386.106226][T27663] mac80211_hwsim hwsim143 wlan2: entered allmulticast mode
[  386.109181][T27663] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  386.116685][T13558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  386.120020][T13558] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  386.139276][T13558] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  386.143357][T13558] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.149709][T27665] hsr0 speed is unknown, defaulting to 1000
[  386.152904][T27665] lo speed is unknown, defaulting to 1000
[  386.169028][T27675] netlink: 'syz.1.5609': attribute type 4 has an invalid length.
[  386.182343][T22185] lo speed is unknown, defaulting to 1000
[  386.184779][T22185] syz0: Port: 1 Link ACTIVE
[  386.189719][ T5911] lo speed is unknown, defaulting to 1000
[  386.220521][T27665] lo speed is unknown, defaulting to 1000
[  386.259049][T27682] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  386.294005][T27687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.299085][T27688] syzkaller0: entered promiscuous mode
[  386.301523][T27688] syzkaller0: entered allmulticast mode
[  386.314095][T27688] tipc: Resetting bearer <eth:syzkaller0>
[  386.322821][T27688] tipc: Disabling bearer <eth:syzkaller0>
[  386.483434][ T5911] lo speed is unknown, defaulting to 1000
[  386.485463][ T5911] syz0: Port: 1 Link DOWN
[  386.494695][ T5911] lo speed is unknown, defaulting to 1000
[  386.631231][T27731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  386.634569][T27731] syzkaller0: entered promiscuous mode
[  386.636643][T27731] syzkaller0: entered allmulticast mode
[  386.640809][T27740] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  386.648468][T27730] tipc: Resetting bearer <eth:syzkaller0>
[  386.653192][T27730] tipc: Disabling bearer <eth:syzkaller0>
[  386.784389][T27751] hsr0 speed is unknown, defaulting to 1000
[  386.787050][T27751] lo speed is unknown, defaulting to 1000
[  386.823474][T27751] lo speed is unknown, defaulting to 1000
[  387.008551][T27772] macsec0: entered promiscuous mode
[  387.010872][T27772] veth10: entered promiscuous mode
[  387.013085][T27772] macsec0: entered allmulticast mode
[  387.015445][T27772] veth10: entered allmulticast mode
[  387.061254][T27776] validate_nla: 7 callbacks suppressed
[  387.061270][T27776] netlink: 'syz.1.5637': attribute type 9 has an invalid length.
[  387.107225][T27780] netlink: 'syz.0.5638': attribute type 10 has an invalid length.
[  387.111119][T27780] !: left promiscuous mode
[  387.113155][T27780] !: left allmulticast mode
[  387.136960][T27788] netlink: 'syz.1.5640': attribute type 4 has an invalid length.
[  387.140505][T27788] netlink: 'syz.1.5640': attribute type 4 has an invalid length.
[  387.144357][ T3146] lo speed is unknown, defaulting to 1000
[  387.148434][ T3146] syz0: Port: 1 Link ACTIVE
[  387.150209][ T5911] lo speed is unknown, defaulting to 1000
[  387.173245][T27790] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  387.177700][T27790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.187288][T27790] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  387.335281][T27800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.338500][T27800] syzkaller0: entered promiscuous mode
[  387.340349][T27800] syzkaller0: entered allmulticast mode
[  387.345335][T27799] tipc: Resetting bearer <eth:syzkaller0>
[  387.354707][T27799] tipc: Disabling bearer <eth:syzkaller0>
[  387.435123][T27802] IPVS: Unknown mcast interface: veth0_virt_wifi
[  387.592700][T27812] netlink: 'syz.0.5648': attribute type 39 has an invalid length.
[  387.610495][T27815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.616019][T27815] syzkaller0: entered promiscuous mode
[  387.620034][T27815] syzkaller0: entered allmulticast mode
[  387.662990][T27814] tipc: Resetting bearer <eth:syzkaller0>
[  387.669577][T27814] tipc: Disabling bearer <eth:syzkaller0>
[  387.795532][T27838] netlink: 'syz.0.5655': attribute type 11 has an invalid length.
[  387.799478][T27838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.803039][T27838] syzkaller0: entered promiscuous mode
[  387.804938][T27838] syzkaller0: entered allmulticast mode
[  387.810125][T27838] tipc: Resetting bearer <eth:syzkaller0>
[  387.813582][T27837] tipc: Resetting bearer <eth:syzkaller0>
[  387.817582][T27837] tipc: Disabling bearer <eth:syzkaller0>
[  387.907307][T27845] pim6reg1: entered promiscuous mode
[  387.909115][T27845] pim6reg1: entered allmulticast mode
[  388.025048][T27867] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  388.031586][T27869] syzkaller0: entered promiscuous mode
[  388.034019][T27869] syzkaller0: entered allmulticast mode
[  388.050457][T27869] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  388.138313][T27885] netlink: 'syz.1.5666': attribute type 12 has an invalid length.
[  388.208787][T27890] netlink: 'syz.0.5668': attribute type 11 has an invalid length.
[  388.212720][T27890] __nla_validate_parse: 32 callbacks suppressed
[  388.212733][T27890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5668'.
[  388.222769][T27890] bridge26: entered promiscuous mode
[  388.225065][T27890] macsec1: entered promiscuous mode
[  388.228321][T27890] macsec1: entered allmulticast mode
[  388.230656][T27890] bridge26: entered allmulticast mode
[  388.233324][T27890] bridge26: port 1(macsec1) entered blocking state
[  388.235513][T27890] bridge26: port 1(macsec1) entered disabled state
[  388.239307][T27890] bridge26: left allmulticast mode
[  388.241255][T27890] bridge26: left promiscuous mode
[  388.303516][T27894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5670'.
[  388.312429][T27894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5670'.
[  388.326265][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5670'.
[  388.350592][T27901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.353706][T27901] syzkaller0: entered promiscuous mode
[  388.357633][T27901] syzkaller0: entered allmulticast mode
[  388.384297][T27900] tipc: Resetting bearer <eth:syzkaller0>
[  388.391724][T27900] tipc: Disabling bearer <eth:syzkaller0>
[  388.453991][T27917] lo: left promiscuous mode
[  388.456349][T27917] lo: left allmulticast mode
[  388.461260][T27917] tunl0: left promiscuous mode
[  388.463464][T27917] tunl0: left allmulticast mode
[  388.468871][T27917] gre0: left promiscuous mode
[  388.470595][T27917] gre0: left allmulticast mode
[  388.473902][T27917] gretap0: left promiscuous mode
[  388.476341][T27917] gretap0: left allmulticast mode
[  388.479360][T27917] erspan0: left allmulticast mode
[  388.483408][T27917] ip_vti0: left promiscuous mode
[  388.485236][T27917] ip_vti0: left allmulticast mode
[  388.488182][T27917] ip6_vti0: left promiscuous mode
[  388.490036][T27917] ip6_vti0: left allmulticast mode
[  388.492806][T27917] sit0: left promiscuous mode
[  388.494755][T27917] sit0: left allmulticast mode
[  388.502525][T27917] ip6tnl0: left promiscuous mode
[  388.507497][T27917] ip6tnl0: left allmulticast mode
[  388.511346][T27917] ip6gre0: left promiscuous mode
[  388.513262][T27917] ip6gre0: left allmulticast mode
[  388.518331][T27917] nlmon0: left promiscuous mode
[  388.521983][T27917] nlmon0: left allmulticast mode
[  388.525307][T27917] wg1: left promiscuous mode
[  388.527278][T27917] wg1: left allmulticast mode
[  388.530260][T27917] wg2: left promiscuous mode
[  388.531976][T27917] wg2: left allmulticast mode
[  388.534741][T27917] veth0_to_bridge: left promiscuous mode
[  388.537147][T27917] veth0_to_bridge: left allmulticast mode
[  388.541649][T27917] bridge_slave_0: left allmulticast mode
[  388.548423][T27917] veth1_to_bridge: left promiscuous mode
[  388.550782][T27917] veth1_to_bridge: left allmulticast mode
[  388.555493][T27917] bridge_slave_1: left promiscuous mode
[  388.559563][T27917] bridge_slave_1: left allmulticast mode
[  388.565482][T27917] veth0_to_bond: left promiscuous mode
[  388.567858][T27917] veth0_to_bond: left allmulticast mode
[  388.576070][T27917] bond_slave_0: left promiscuous mode
[  388.578313][T27917] bond_slave_0: left allmulticast mode
[  388.585412][T27917] veth1_to_team: left promiscuous mode
[  388.588079][T27917] veth1_to_team: left allmulticast mode
[  388.593867][T27917] team_slave_1: left promiscuous mode
[  388.596502][T27917] team_slave_1: left allmulticast mode
[  388.601143][T27917] xfrm0: left promiscuous mode
[  388.603109][T27917] xfrm0: left allmulticast mode
[  388.609761][T27917] veth0_to_hsr: left promiscuous mode
[  388.611963][T27917] veth0_to_hsr: left allmulticast mode
[  388.617279][T27917] hsr_slave_0: left promiscuous mode
[  388.619474][T27917] hsr_slave_0: left allmulticast mode
[  388.623750][T27917] veth1_to_hsr: left promiscuous mode
[  388.627392][T27917] veth1_to_hsr: left allmulticast mode
[  388.630876][T27917] hsr_slave_1: left promiscuous mode
[  388.636274][T27917] veth1_virt_wifi: left promiscuous mode
[  388.638526][T27917] veth1_virt_wifi: left allmulticast mode
[  388.643179][T27917] veth0_virt_wifi: left promiscuous mode
[  388.647315][T27917] veth0_virt_wifi: left allmulticast mode
[  388.651768][T27917] geneve0: left promiscuous mode
[  388.653858][T27917] geneve0: left allmulticast mode
[  388.658512][T27917] geneve1: left promiscuous mode
[  388.660275][T27917] geneve1: left allmulticast mode
[  388.664976][T27917] mac80211_hwsim hwsim143 wlan2: left promiscuous mode
[  388.669166][T27917] mac80211_hwsim hwsim143 wlan2: left allmulticast mode
[  388.675355][T27917] veth10: left allmulticast mode
[  388.678106][T27917] veth10: left promiscuous mode
[  388.681510][T27917] macsec0: left promiscuous mode
[  388.683167][T27917] macsec0: left allmulticast mode
[  388.689939][T27923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.692674][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.696893][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.699516][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.702103][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.721146][T27924] syzkaller0: entered promiscuous mode
[  388.723508][T27924] syzkaller0: entered allmulticast mode
[  388.773424][T27918] tipc: Resetting bearer <eth:syzkaller0>
[  388.785315][T27918] tipc: Disabling bearer <eth:syzkaller0>
[  388.932509][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'.
[  388.986654][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  388.990238][T27946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  389.037594][T27953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5682'.
[  389.060622][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5682'.
[  389.083887][T27960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.087533][T27960] syzkaller0: entered promiscuous mode
[  389.089763][T27960] syzkaller0: entered allmulticast mode
[  389.146081][T27960] tipc: Resetting bearer <eth:syzkaller0>
[  389.149611][T27959] tipc: Resetting bearer <eth:syzkaller0>
[  389.152947][T27959] tipc: Disabling bearer <eth:syzkaller0>
[  389.214843][T27966] netlink: 'syz.0.5685': attribute type 9 has an invalid length.
[  389.218363][T27966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5685'.
[  389.347134][T27977] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  389.503881][T27987] hsr0 speed is unknown, defaulting to 1000
[  389.505518][T27989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.509330][T27987] lo speed is unknown, defaulting to 1000
[  389.510013][T27989] syzkaller0: entered promiscuous mode
[  389.514072][T27989] syzkaller0: entered allmulticast mode
[  389.521850][T27989] tipc: Resetting bearer <eth:syzkaller0>
[  389.525555][T27988] tipc: Resetting bearer <eth:syzkaller0>
[  389.532355][T27988] tipc: Disabling bearer <eth:syzkaller0>
[  389.581971][T27987] lo speed is unknown, defaulting to 1000
[  389.597533][T27991] netlink: 'syz.2.5694': attribute type 12 has an invalid length.
[  389.692703][T27997] netlink: 'syz.0.5695': attribute type 13 has an invalid length.
[  389.698176][T27997] netlink: 'syz.0.5695': attribute type 17 has an invalid length.
[  389.975133][T27999] hsr0 speed is unknown, defaulting to 1000
[  390.021415][T27999] lo speed is unknown, defaulting to 1000
[  390.184006][T27999] lo speed is unknown, defaulting to 1000
[  390.212327][T28008] 8021q: adding VLAN 0 to HW filter on device bond33
[  390.219332][T28008] bond33 (unregistering): Released all slaves
[  390.254590][T28013] gretap0: left promiscuous mode
[  390.257896][T28013] macvtap5: left promiscuous mode
[  390.259684][T28013] macvtap5: left allmulticast mode
[  390.261581][T28013] sit10: left allmulticast mode
[  390.263360][T28013] ip6gre3: left allmulticast mode
[  390.265329][T28013] sit11: left promiscuous mode
[  390.271357][T28013] bond31: left promiscuous mode
[  390.273222][T28013] bond31: left allmulticast mode
[  390.428117][T28016] warn_alloc: 1 callbacks suppressed
[  390.428127][T28016] syz.1.5700: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  390.436889][T28016] CPU: 1 UID: 0 PID: 28016 Comm: syz.1.5700 Not tainted syzkaller #0 PREEMPT(full) 
[  390.436928][T28016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.436933][T28016] Call Trace:
[  390.436937][T28016]  <TASK>
[  390.436940][T28016]  dump_stack_lvl+0x189/0x250
[  390.436953][T28016]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.436962][T28016]  ? __pfx__printk+0x10/0x10
[  390.436971][T28016]  ? lock_release+0x4b/0x3e0
[  390.436982][T28016]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  390.436991][T28016]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  390.436999][T28016]  warn_alloc+0x214/0x310
[  390.437010][T28016]  ? __pfx_warn_alloc+0x10/0x10
[  390.437024][T28016]  ? __get_vm_area_node+0x28f/0x300
[  390.437039][T28016]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  390.437056][T28016]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  390.437079][T28016]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  390.437096][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437107][T28016]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  390.437121][T28016]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  390.437131][T28016]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  390.437141][T28016]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  390.437151][T28016]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  390.437161][T28016]  pfifo_fast_change_tx_queue_len+0x110/0xa30
[  390.437172][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437183][T28016]  ? lock_release+0x4b/0x3e0
[  390.437196][T28016]  ? net_generic+0x1f4/0x240
[  390.437208][T28016]  ? ib_device_get_by_netdev+0x46b/0x4d0
[  390.437245][T28016]  ? lowpan_event+0x107/0x6a0
[  390.437259][T28016]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  390.437269][T28016]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  390.437281][T28016]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  390.437291][T28016]  ? notifier_call_chain+0x3bf/0x3e0
[  390.437300][T28016]  netif_change_tx_queue_len+0x162/0x270
[  390.437308][T28016]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  390.437316][T28016]  ? netif_change_flags+0xe8/0x1a0
[  390.437323][T28016]  do_setlink+0xdfb/0x41c0
[  390.437330][T28016]  ? __kernel_text_address+0xd/0x40
[  390.437341][T28016]  ? ___ratelimit+0x7c3/0xab0
[  390.437350][T28016]  ? __pfx_do_setlink+0x10/0x10
[  390.437357][T28016]  ? __pfx____ratelimit+0x10/0x10
[  390.437365][T28016]  ? stack_trace_save+0x9c/0xe0
[  390.437376][T28016]  ? __mutex_trylock_common+0x153/0x260
[  390.437384][T28016]  ? __pfx___mutex_trylock_common+0x10/0x10
[  390.437392][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437399][T28016]  ? trace_contention_end+0x39/0x120
[  390.437406][T28016]  ? __mutex_lock+0x335/0x1350
[  390.437418][T28016]  ? rtnl_newlink+0x8db/0x1c70
[  390.437428][T28016]  ? __pfx___mutex_lock+0x10/0x10
[  390.437440][T28016]  ? ns_capable+0x8a/0xf0
[  390.437447][T28016]  ? rtnl_link_get_net_capable+0x16a/0x350
[  390.437454][T28016]  rtnl_newlink+0x149f/0x1c70
[  390.437466][T28016]  ? __pfx_rtnl_newlink+0x10/0x10
[  390.437477][T28016]  ? sched_balance_rq+0x4e4a/0x57a0
[  390.437490][T28016]  ? unwind_next_frame+0xa5/0x2390
[  390.437498][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437505][T28016]  ? unwind_next_frame+0xa5/0x2390
[  390.437513][T28016]  ? unwind_next_frame+0xa5/0x2390
[  390.437520][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437527][T28016]  ? is_bpf_text_address+0x26/0x2b0
[  390.437537][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437544][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437550][T28016]  ? lock_release+0x4b/0x3e0
[  390.437559][T28016]  ? lock_release+0x4b/0x3e0
[  390.437570][T28016]  ? is_bpf_text_address+0x292/0x2b0
[  390.437579][T28016]  ? is_bpf_text_address+0x26/0x2b0
[  390.437589][T28016]  ? kernel_text_address+0xa5/0xe0
[  390.437599][T28016]  ? __kernel_text_address+0xd/0x40
[  390.437608][T28016]  ? unwind_get_return_address+0x4d/0x90
[  390.437617][T28016]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  390.437627][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437634][T28016]  ? lock_release+0x4b/0x3e0
[  390.437643][T28016]  ? bpf_lsm_capable+0x9/0x20
[  390.437652][T28016]  ? security_capable+0x7e/0x2e0
[  390.437663][T28016]  ? __pfx_rtnl_newlink+0x10/0x10
[  390.437672][T28016]  rtnetlink_rcv_msg+0x7cf/0xb70
[  390.437683][T28016]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  390.437692][T28016]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  390.437701][T28016]  ? __netlink_lookup+0xbd/0x810
[  390.437708][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437715][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437722][T28016]  netlink_rcv_skb+0x208/0x470
[  390.437732][T28016]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  390.437742][T28016]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  390.437755][T28016]  netlink_unicast+0x82f/0x9e0
[  390.437765][T28016]  ? __pfx_netlink_unicast+0x10/0x10
[  390.437774][T28016]  ? netlink_sendmsg+0x642/0xb30
[  390.437783][T28016]  ? skb_put+0x11b/0x210
[  390.437790][T28016]  netlink_sendmsg+0x805/0xb30
[  390.437801][T28016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.437811][T28016]  ? futex_unqueue+0x22/0x240
[  390.437819][T28016]  ? aa_sock_msg_perm+0xf1/0x1d0
[  390.437826][T28016]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  390.437834][T28016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  390.437843][T28016]  __sock_sendmsg+0x21c/0x270
[  390.437852][T28016]  ____sys_sendmsg+0x505/0x830
[  390.437860][T28016]  ? __pfx_____sys_sendmsg+0x10/0x10
[  390.437869][T28016]  ? import_iovec+0x74/0xa0
[  390.437878][T28016]  ___sys_sendmsg+0x21f/0x2a0
[  390.437885][T28016]  ? __pfx____sys_sendmsg+0x10/0x10
[  390.437892][T28016]  ? futex_wait+0x285/0x360
[  390.437937][T28016]  ? __fget_files+0x2a/0x420
[  390.437953][T28016]  ? __fget_files+0x3a0/0x420
[  390.437967][T28016]  __x64_sys_sendmsg+0x19b/0x260
[  390.437975][T28016]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  390.437983][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437990][T28016]  ? rcu_is_watching+0x15/0xb0
[  390.437997][T28016]  do_syscall_64+0xfa/0x3b0
[  390.438008][T28016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.438015][T28016]  ? exc_page_fault+0x9f/0xf0
[  390.438025][T28016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.438032][T28016] RIP: 0033:0x7f01f238ebe9
[  390.438040][T28016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.438046][T28016] RSP: 002b:00007f01f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  390.438056][T28016] RAX: ffffffffffffffda RBX: 00007f01f25b5fa0 RCX: 00007f01f238ebe9
[  390.438061][T28016] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003
[  390.438066][T28016] RBP: 00007f01f2411e19 R08: 0000000000000000 R09: 0000000000000000
[  390.438071][T28016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  390.438076][T28016] R13: 00007f01f25b6038 R14: 00007f01f25b5fa0 R15: 00007ffcaeff6438
[  390.438083][T28016]  </TASK>
[  390.438384][T28016] Mem-Info:
[  390.695192][T28016] active_anon:42 inactive_anon:348 isolated_anon:0
[  390.695192][T28016]  active_file:1097 inactive_file:657 isolated_file:0
[  390.695192][T28016]  unevictable:1768 dirty:12 writeback:0
[  390.695192][T28016]  slab_reclaimable:11500 slab_unreclaimable:141974
[  390.695192][T28016]  mapped:17108 shmem:1768 pagetables:1484
[  390.695192][T28016]  sec_pagetables:0 bounce:0
[  390.695192][T28016]  kernel_misc_reclaimable:0
[  390.695192][T28016]  free:244511 free_pcp:1376 free_cma:0
[  390.712781][T28016] Node 0 active_anon:68kB inactive_anon:740kB active_file:2692kB inactive_file:1884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17740kB dirty:28kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9692kB pagetables:3180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  390.735357][T28016] Node 1 active_anon:100kB inactive_anon:652kB active_file:1696kB inactive_file:744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46068kB dirty:20kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6364kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  390.749280][T28016] Node 0 DMA free:13288kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  390.762045][T28016] lowmem_reserve[]: 0 811 811 811 811
[  390.764952][T28016] Node 0 DMA32 free:254892kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:136kB inactive_anon:672kB active_file:3032kB inactive_file:1884kB unevictable:3536kB writepending:28kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:5860kB local_pcp:2300kB free_cma:0kB
[  390.780956][T28016] lowmem_reserve[]: 0 0 0 0 0
[  390.782927][T28016] Node 1 DMA32 free:416136kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  390.797089][T28016] lowmem_reserve[]: 0 0 854 854 854
[  390.803302][T28016] Node 1 Normal free:295776kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:236kB inactive_anon:652kB active_file:1832kB inactive_file:744kB unevictable:3536kB writepending:20kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:1684kB local_pcp:1264kB free_cma:0kB
[  390.816788][T28016] lowmem_reserve[]: 0 0 0 0 0
[  390.818834][T28016] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 6*32kB (U) 6*64kB (U) 6*128kB (U) 6*256kB (U) 6*512kB (U) 5*1024kB (U) 1*2048kB (M) 0*4096kB = 13288kB
[  390.825110][T28016] Node 0 DMA32: 11*4kB (UME) 1528*8kB (U) 1064*16kB (UM) 879*32kB (UME) 539*64kB (UME) 287*128kB (UM) 111*256kB (UME) 17*512kB (UME) 87*1024kB (UM) 0*2048kB 0*4096kB = 254860kB
[  390.831536][T28016] Node 1 DMA32: 240*4kB (UM) 235*8kB (UM) 245*16kB (UME) 239*32kB (UM) 235*64kB (UM) 229*128kB (UME) 226*256kB (UME) 213*512kB (UME) 186*1024kB (UME) 0*2048kB 0*4096kB = 416136kB
[  390.838365][T28016] Node 1 Normal: 6*4kB (ME) 1003*8kB (UME) 861*16kB (UME) 581*32kB (UME) 288*64kB (UME) 195*128kB (UME) 194*256kB (UME) 113*512kB (UME) 102*1024kB (UME) 0*2048kB 0*4096kB = 295776kB
[  390.845262][T28016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  390.849450][T28016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  390.853351][T28016] 3913 total pagecache pages
[  390.856967][T28016] 258 pages in swap cache
[  390.858804][T28016] Free swap  = 75224kB
[  390.860533][T28016] Total swap = 124996kB
[  390.862294][T28016] 786301 pages RAM
[  390.863945][T28016] 0 pages HighMem/MovableOnly
[  390.866076][T28016] 241332 pages reserved
[  390.867785][T28016] 0 pages cma reserved
[  390.872120][T28016] ip6erspan0: refused to change device tx_queue_len
[  390.874927][T28016] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check.
[  390.885942][    T9] lo speed is unknown, defaulting to 1000
[  390.888077][    T9] syz0: Port: 1 Link DOWN
[  390.889715][    T9] lo speed is unknown, defaulting to 1000
[  390.991926][T28039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.008028][T28039] syzkaller0: entered promiscuous mode
[  391.010107][T28039] syzkaller0: entered allmulticast mode
[  391.061316][T28039] tipc: Resetting bearer <eth:syzkaller0>
[  391.070024][T28036] tipc: Resetting bearer <eth:syzkaller0>
[  391.074255][T28036] tipc: Disabling bearer <eth:syzkaller0>
[  391.081697][T28049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.143029][T28049] syzkaller0: entered promiscuous mode
[  391.144803][T28049] syzkaller0: entered allmulticast mode
[  391.200968][T28049] tipc: Resetting bearer <eth:syzkaller0>
[  391.204295][T28059] openvswitch: netlink: Flow key attr not present in new flow.
[  391.210869][T28047] tipc: Resetting bearer <eth:syzkaller0>
[  391.216508][T28047] tipc: Disabling bearer <eth:syzkaller0>
[  391.360301][T28077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.468567][T28091] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  391.615129][T28107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.618819][T28107] syzkaller0: entered promiscuous mode
[  391.621210][T28107] syzkaller0: entered allmulticast mode
[  391.632180][T28108] macvlan0: entered allmulticast mode
[  391.634455][T28108] pimreg0: entered allmulticast mode
[  391.637703][T28108] pimreg0: left allmulticast mode
[  391.648278][T28107] tipc: Resetting bearer <eth:syzkaller0>
[  391.652486][T28106] tipc: Resetting bearer <eth:syzkaller0>
[  391.657474][T28106] tipc: Disabling bearer <eth:syzkaller0>
[  391.980308][T28120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  391.985478][ T3146] lo speed is unknown, defaulting to 1000
[  391.987816][ T3146] syz0: Port: 1 Link ACTIVE
[  391.989372][ T3146] lo speed is unknown, defaulting to 1000
[  392.169875][T28122] geneve7: entered promiscuous mode
[  392.173388][T13558] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  392.177204][T13558] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  392.181869][T13558] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  392.185243][T13558] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  392.221607][T28127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.225018][T28127] syzkaller0: entered promiscuous mode
[  392.227669][T28127] syzkaller0: entered allmulticast mode
[  392.241302][T28127] tipc: Resetting bearer <eth:syzkaller0>
[  392.242679][T28129] validate_nla: 14 callbacks suppressed
[  392.242690][T28129] netlink: 'syz.0.5726': attribute type 4 has an invalid length.
[  392.250438][T28126] tipc: Resetting bearer <eth:syzkaller0>
[  392.261378][T28126] tipc: Disabling bearer <eth:syzkaller0>
[  392.334278][T28133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  392.341445][T28133] syzkaller0: entered promiscuous mode
[  392.343864][T28133] syzkaller0: entered allmulticast mode
[  392.354599][T28133] tipc: Resetting bearer <eth:syzkaller0>
[  392.363869][T28131] tipc: Resetting bearer <eth:syzkaller0>
[  392.389221][T28131] tipc: Disabling bearer <eth:syzkaller0>
[  392.593816][T28154] IPVS: persistence engine module ip_vs_pe_ not found
[  393.363634][T28181] __nla_validate_parse: 20 callbacks suppressed
[  393.363648][T28181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5739'.
[  393.540590][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5742'.
[  393.543654][T28192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5742'.
[  393.547730][T28192] netlink: 'syz.2.5742': attribute type 1 has an invalid length.
[  393.562576][T28192] veth17: entered promiscuous mode
[  393.668913][T28202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5743'.
[  393.672088][T28202] openvswitch: netlink: Flow actions attr not present in new flow.
[  393.739017][T22185] lo speed is unknown, defaulting to 1000
[  393.741467][T22185] syz0: Port: 1 Link DOWN
[  393.743448][T22185] lo speed is unknown, defaulting to 1000
[  394.335505][T28194] netlink: 'syz.1.5741': attribute type 2 has an invalid length.
[  394.339583][T28196] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5743'.
[  394.430570][T28207] netlink: 'syz.2.5747': attribute type 3 has an invalid length.
[  394.454088][T28207] geneve7: left promiscuous mode
[  394.474924][ T5692] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.483778][ T5692] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.486715][ T5692] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.489984][ T5692] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.501095][T28213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  394.503552][T28215] syzkaller0: entered promiscuous mode
[  394.505815][T28215] syzkaller0: entered allmulticast mode
[  394.514855][T28213] tipc: Resetting bearer <eth:syzkaller0>
[  394.530505][T28212] tipc: Resetting bearer <eth:syzkaller0>
[  394.541327][T28212] tipc: Disabling bearer <eth:syzkaller0>
[  394.581162][T28221] hsr0 speed is unknown, defaulting to 1000
[  394.584467][T28221] lo speed is unknown, defaulting to 1000
[  394.629926][T28227] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5753'.
[  394.633148][T28227] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5753'.
[  394.643097][T28227] dvmrp0: left allmulticast mode
[  394.644968][T28227] dvmrp1: left allmulticast mode
[  394.659936][T28221] lo speed is unknown, defaulting to 1000
[  394.714263][T28227] syz0: rxe_newlink: already configured on lo
[  394.739966][T28227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.748280][ T5911] lo speed is unknown, defaulting to 1000
[  394.750652][ T5911] syz0: Port: 1 Link ACTIVE
[  394.756384][ T3146] lo speed is unknown, defaulting to 1000
[  394.953915][T28239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5756'.
[  394.958170][T28239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  394.961599][T28239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  395.001572][T28241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.005507][T28241] syzkaller0: entered promiscuous mode
[  395.008530][T28241] syzkaller0: entered allmulticast mode
[  395.023918][T28241] netlink: 37768 bytes leftover after parsing attributes in process `syz.2.5757'.
[  395.029254][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5757'.
[  395.036833][T28241] tipc: Resetting bearer <eth:syzkaller0>
[  395.047577][T28240] tipc: Resetting bearer <eth:syzkaller0>
[  395.052552][T28240] tipc: Disabling bearer <eth:syzkaller0>
[  395.059697][T28242] hsr0 speed is unknown, defaulting to 1000
[  395.063064][T28242] lo speed is unknown, defaulting to 1000
[  395.115215][T28242] lo speed is unknown, defaulting to 1000
[  395.221206][T28255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.225702][T28255] syzkaller0: entered promiscuous mode
[  395.228116][T28255] syzkaller0: entered allmulticast mode
[  395.234225][T28255] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  395.243121][T28254] tipc: Resetting bearer <eth:syzkaller0>
[  395.250500][T28254] tipc: Disabling bearer <eth:syzkaller0>
[  395.523007][T28269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.526626][T28269] syzkaller0: entered promiscuous mode
[  395.529062][T28269] syzkaller0: entered allmulticast mode
[  395.537881][T28268] tipc: Resetting bearer <eth:syzkaller0>
[  395.545306][T28268] tipc: Disabling bearer <eth:syzkaller0>
[  395.555365][T28266] hsr0 speed is unknown, defaulting to 1000
[  395.560458][T28266] lo speed is unknown, defaulting to 1000
[  395.572013][T28270] erspan0: left promiscuous mode
[  395.574491][T28270] erspan0: entered promiscuous mode
[  395.577549][T28270] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  395.631422][T28266] lo speed is unknown, defaulting to 1000
[  395.691109][T28277] syzkaller0: entered promiscuous mode
[  395.693553][T28277] syzkaller0: entered allmulticast mode
[  395.826246][   T33] audit: type=1107 audit(1756214972.223:8): pid=28283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='j_4^;g_,X*k:j"!<з!Q@6,jַ8E$ok@w}A+A[
[  395.826246][   T33] 4녯ٶ
[  395.826246][   T33] Ku]|B'
[  395.942159][T28292] netlink: 'syz.1.5766': attribute type 3 has an invalid length.
[  395.945061][T28292] netlink: 'syz.1.5766': attribute type 10 has an invalid length.
[  395.958029][T28294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  396.693114][T28308] netlink: 'syz.2.5772': attribute type 1 has an invalid length.
[  396.794954][T28315] netlink: 'syz.1.5774': attribute type 22 has an invalid length.
[  396.802922][T13558] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  396.802985][T28315] netlink: 'syz.1.5774': attribute type 22 has an invalid length.
[  396.811007][T13558] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  396.814471][T13558] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  396.820195][T13558] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.840522][T28318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.849505][T28318] syzkaller0: entered promiscuous mode
[  396.851794][T28318] syzkaller0: entered allmulticast mode
[  396.903846][   T10] lo speed is unknown, defaulting to 1000
[  396.903930][T13558] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.908470][   T10] syz0: Port: 1 Link DOWN
[  396.912038][T13558] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.918671][T13558] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.921474][T13558] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.921490][   T10] lo speed is unknown, defaulting to 1000
[  396.929552][T28318] tipc: Resetting bearer <eth:syzkaller0>
[  396.934421][T28316] tipc: Resetting bearer <eth:syzkaller0>
[  396.938990][T28316] tipc: Disabling bearer <eth:syzkaller0>
[  396.952038][T28334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.957200][T28334] syzkaller0: entered promiscuous mode
[  396.959097][T28334] syzkaller0: entered allmulticast mode
[  396.967270][T28334] tipc: Resetting bearer <eth:syzkaller0>
[  396.970467][T28333] tipc: Resetting bearer <eth:syzkaller0>
[  396.973755][T28333] tipc: Disabling bearer <eth:syzkaller0>
[  397.194242][T28358] ip6gre4: entered allmulticast mode
[  397.397425][T28360] netlink: 'syz.0.5784': attribute type 10 has an invalid length.
[  397.431043][T28362] syzkaller1: entered promiscuous mode
[  397.433428][T28362] syzkaller1: entered allmulticast mode
[  397.596195][T28364] netlink: 'syz.1.5786': attribute type 12 has an invalid length.
[  397.599508][T28364] netlink: 'syz.1.5786': attribute type 11 has an invalid length.
[  397.634354][T28367] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  397.637276][T28367] CPU: 0 UID: 0 PID: 28367 Comm: syz.1.5787 Not tainted syzkaller #0 PREEMPT(full) 
[  397.637289][T28367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.637294][T28367] Call Trace:
[  397.637297][T28367]  <TASK>
[  397.637301][T28367]  dump_stack_lvl+0x189/0x250
[  397.637314][T28367]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.637323][T28367]  ? __pfx__printk+0x10/0x10
[  397.637332][T28367]  ? kernfs_root+0x1c/0x230
[  397.637341][T28367]  ? kernfs_path_from_node+0x2f/0x290
[  397.637348][T28367]  ? kernfs_path_from_node+0x250/0x290
[  397.637356][T28367]  ? kernfs_path_from_node+0x2f/0x290
[  397.637365][T28367]  sysfs_warn_dup+0x8e/0xa0
[  397.637373][T28367]  sysfs_do_create_link_sd+0xc0/0x110
[  397.637381][T28367]  device_add_class_symlinks+0x1cf/0x240
[  397.637390][T28367]  device_add+0x475/0xb50
[  397.637397][T28367]  wiphy_register+0x1ba6/0x28d0
[  397.637411][T28367]  ? __pfx_wiphy_register+0x10/0x10
[  397.637421][T28367]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  397.637431][T28367]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  397.637444][T28367]  ieee80211_register_hw+0x3484/0x4100
[  397.637454][T28367]  ? ieee80211_register_hw+0x14a1/0x4100
[  397.637463][T28367]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  397.637472][T28367]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  397.637483][T28367]  ? __hrtimer_setup+0x187/0x210
[  397.637490][T28367]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  397.637501][T28367]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  397.637515][T28367]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  397.637524][T28367]  ? trace_kmalloc+0x1f/0xd0
[  397.637533][T28367]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  397.637542][T28367]  ? kstrndup+0xbf/0x160
[  397.637551][T28367]  hwsim_new_radio_nl+0xea4/0x1b10
[  397.637561][T28367]  ? __pfx___nla_validate_parse+0x10/0x10
[  397.637575][T28367]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  397.637586][T28367]  ? __nla_parse+0x40/0x60
[  397.637597][T28367]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  397.637607][T28367]  genl_family_rcv_msg_doit+0x215/0x300
[  397.637617][T28367]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  397.637627][T28367]  ? bpf_lsm_capable+0x9/0x20
[  397.637637][T28367]  ? security_capable+0x7e/0x2e0
[  397.637649][T28367]  genl_rcv_msg+0x60e/0x790
[  397.637657][T28367]  ? __pfx_genl_rcv_msg+0x10/0x10
[  397.637664][T28367]  ? __kasan_slab_alloc+0x6c/0x80
[  397.637673][T28367]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  397.637682][T28367]  ? __netlink_lookup+0xbd/0x810
[  397.637688][T28367]  ? rcu_is_watching+0x15/0xb0
[  397.637697][T28367]  netlink_rcv_skb+0x208/0x470
[  397.637707][T28367]  ? __pfx_genl_rcv_msg+0x10/0x10
[  397.637715][T28367]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  397.637726][T28367]  ? lock_release+0x4b/0x3e0
[  397.637738][T28367]  ? down_read+0x1ad/0x2e0
[  397.637744][T28367]  genl_rcv+0x28/0x40
[  397.637751][T28367]  netlink_unicast+0x82f/0x9e0
[  397.637761][T28367]  ? __pfx_netlink_unicast+0x10/0x10
[  397.637771][T28367]  ? netlink_sendmsg+0x642/0xb30
[  397.637780][T28367]  ? skb_put+0x11b/0x210
[  397.637787][T28367]  netlink_sendmsg+0x805/0xb30
[  397.637798][T28367]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.637809][T28367]  ? futex_unqueue+0x22/0x240
[  397.637817][T28367]  ? aa_sock_msg_perm+0xf1/0x1d0
[  397.637824][T28367]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.637831][T28367]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.637842][T28367]  __sock_sendmsg+0x21c/0x270
[  397.637853][T28367]  ____sys_sendmsg+0x505/0x830
[  397.637862][T28367]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.637871][T28367]  ? import_iovec+0x74/0xa0
[  397.637906][T28367]  ___sys_sendmsg+0x21f/0x2a0
[  397.637915][T28367]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.637923][T28367]  ? futex_wait+0x285/0x360
[  397.637937][T28367]  ? __fget_files+0x2a/0x420
[  397.637948][T28367]  ? __fget_files+0x3a0/0x420
[  397.637960][T28367]  __x64_sys_sendmsg+0x19b/0x260
[  397.637968][T28367]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  397.637981][T28367]  ? rcu_is_watching+0x15/0xb0
[  397.637993][T28367]  ? rcu_is_watching+0x15/0xb0
[  397.638003][T28367]  do_syscall_64+0xfa/0x3b0
[  397.638018][T28367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.638030][T28367]  ? exc_page_fault+0x9f/0xf0
[  397.638046][T28367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.638057][T28367] RIP: 0033:0x7f01f238ebe9
[  397.638070][T28367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.638081][T28367] RSP: 002b:00007f01f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.638097][T28367] RAX: ffffffffffffffda RBX: 00007f01f25b5fa0 RCX: 00007f01f238ebe9
[  397.638114][T28367] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  397.638119][T28367] RBP: 00007f01f2411e19 R08: 0000000000000000 R09: 0000000000000000
[  397.638124][T28367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.638129][T28367] R13: 00007f01f25b6038 R14: 00007f01f25b5fa0 R15: 00007ffcaeff6438
[  397.638138][T28367]  </TASK>
[  398.024660][T28379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.035284][T28379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  398.042329][T10023] lo speed is unknown, defaulting to 1000
[  398.046184][T10023] syz1: Port: 1 Link ACTIVE
[  398.128789][ T8525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.132111][ T8525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.324381][T28387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.342410][T28387] tipc: Disabling bearer <eth:syzkaller0>
[  398.483464][T28398] __nla_validate_parse: 14 callbacks suppressed
[  398.483474][T28398] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5796'.
[  398.488679][T28398] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5796'.
[  399.027079][T28409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5800'.
[  399.031969][T28409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5800'.
[  399.037921][T28408] delete_channel: no stack
[  399.265845][T28416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5802'.
[  399.579701][T28423] 8021q: VLANs not supported on tunl0
[  399.708239][T28432] netlink: 'syz.0.5807': attribute type 4 has an invalid length.
[  399.712087][T28432] netlink: 'syz.0.5807': attribute type 4 has an invalid length.
[  399.986588][T28434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'.
[  399.989584][T28434] netlink: 'syz.2.5808': attribute type 12 has an invalid length.
[  399.992312][T28434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5808'.
[  399.995467][T28434] netlink: 'syz.2.5808': attribute type 12 has an invalid length.
[  400.049104][T28437] hsr0 speed is unknown, defaulting to 1000
[  400.052192][T28437] lo speed is unknown, defaulting to 1000
[  400.093944][T28437] lo speed is unknown, defaulting to 1000
[  400.531289][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5812'.
[  400.653456][T28452] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5812'.
[  401.482550][T28466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5816'.
[  401.486960][T28466] 8021q: VLANs not supported on wg2
[  401.512149][T28471] netlink: 'syz.0.5817': attribute type 4 has an invalid length.
[  401.842800][T28488] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004
[  401.845985][T28488] netlink: 'syz.2.5822': attribute type 4 has an invalid length.
[  401.881565][T28492] hsr0 speed is unknown, defaulting to 1000
[  401.883901][T28492] lo speed is unknown, defaulting to 1000
[  401.967434][T28492] lo speed is unknown, defaulting to 1000
[  402.022409][T28502] netlink: 'syz.1.5827': attribute type 10 has an invalid length.
[  402.041040][T28504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.044374][T28504] syzkaller0: entered promiscuous mode
[  402.046832][T28504] syzkaller0: entered allmulticast mode
[  402.052679][T28504] tipc: Resetting bearer <eth:syzkaller0>
[  402.057706][T28503] tipc: Resetting bearer <eth:syzkaller0>
[  402.063665][T28503] tipc: Disabling bearer <eth:syzkaller0>
[  402.073206][T28492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  402.253853][T28524] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  402.273307][T28523] syzkaller0: entered promiscuous mode
[  402.285698][T28523] syzkaller0: entered allmulticast mode
[  402.578928][T28546] validate_nla: 2 callbacks suppressed
[  402.578939][T28546] netlink: 'syz.1.5841': attribute type 10 has an invalid length.
[  402.585025][T28547] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  402.589180][T28547] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  403.079648][T28561] netlink: 'syz.2.5845': attribute type 24 has an invalid length.
[  403.191670][T28570] hsr0 speed is unknown, defaulting to 1000
[  403.194206][T28570] lo speed is unknown, defaulting to 1000
[  403.260237][T28570] lo speed is unknown, defaulting to 1000
[  403.501806][T28587] __nla_validate_parse: 12 callbacks suppressed
[  403.501823][T28587] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5850'.
[  403.643080][T28592] hsr0 speed is unknown, defaulting to 1000
[  403.645496][T28592] lo speed is unknown, defaulting to 1000
[  403.677109][T28592] lo speed is unknown, defaulting to 1000
[  403.896430][T28597] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5853'.
[  404.085922][T28604] netlink: 'syz.2.5855': attribute type 10 has an invalid length.
[  404.207891][T28606] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  404.211272][T28606] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  404.232744][T28606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.242239][T28606] syzkaller0: entered promiscuous mode
[  404.244220][T28606] syzkaller0: entered allmulticast mode
[  404.258931][T28608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.262593][T28606] tipc: Resetting bearer <eth:syzkaller0>
[  404.264958][T28609] syzkaller0: entered promiscuous mode
[  404.272802][T28609] syzkaller0: entered allmulticast mode
[  404.283107][T28606] tipc: Resetting bearer <eth:syzkaller0>
[  404.292192][T28606] tipc: Disabling bearer <eth:syzkaller0>
[  404.298933][T28613] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5857'.
[  404.336309][T28609] tipc: Resetting bearer <eth:syzkaller0>
[  404.342766][T28609] tipc: Disabling bearer <eth:syzkaller0>
[  404.427316][T28616] syzkaller0: entered promiscuous mode
[  404.432812][T28616] syzkaller0: entered allmulticast mode
[  404.447472][T28616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5858'.
[  404.459064][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  404.466407][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  404.472950][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  404.487158][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  404.517732][T28620] bond25: (slave geneve10): Releasing active interface
[  404.558472][T28620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5859'.
[  404.605211][ T5850] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  404.610022][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  404.610039][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  404.610047][ T5850] Call Trace:
[  404.610052][ T5850]  <TASK>
[  404.610058][ T5850]  dump_stack_lvl+0x189/0x250
[  404.610078][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.610091][ T5850]  ? __pfx__printk+0x10/0x10
[  404.610126][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610143][ T5850]  dump_header+0xd3/0x480
[  404.610159][ T5850]  oom_kill_process+0x387/0x920
[  404.610173][ T5850]  out_of_memory+0xf09/0x12a0
[  404.610186][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610196][ T5850]  ? __pfx_out_of_memory+0x10/0x10
[  404.610208][ T5850]  ? percpu_ref_put+0x19/0x180
[  404.610223][ T5850]  ? lock_release+0x4b/0x3e0
[  404.610243][ T5850]  mem_cgroup_out_of_memory+0x145/0x240
[  404.610256][ T5850]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  404.610270][ T5850]  ? _raw_spin_unlock+0x28/0x50
[  404.610284][ T5850]  ? memcg1_oom_prepare+0x37f/0x450
[  404.610300][ T5850]  try_charge_memcg+0xdff/0x1290
[  404.610314][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610330][ T5850]  ? __pfx_try_charge_memcg+0x10/0x10
[  404.610344][ T5850]  ? rcu_needs_cpu+0xa1/0xb0
[  404.610353][ T5850]  ? xa_load+0x60/0x210
[  404.610371][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610382][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610394][ T5850]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  404.610409][ T5850]  charge_memcg+0x9f/0x180
[  404.610424][ T5850]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  404.610438][ T5850]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  404.610455][ T5850]  __read_swap_cache_async+0x28c/0x510
[  404.610470][ T5850]  swap_cluster_readahead+0x305/0x5f0
[  404.610483][ T5850]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  404.610499][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610508][ T5850]  ? filemap_get_entry+0xad/0x2f0
[  404.610521][ T5850]  ? get_vma_policy+0x27c/0x3c0
[  404.610537][ T5850]  swapin_readahead+0x17d/0xb50
[  404.610550][ T5850]  ? __pfx_filemap_get_entry+0x10/0x10
[  404.610563][ T5850]  ? get_swap_device_info+0x1c/0x2b0
[  404.610574][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610586][ T5850]  ? __pfx_swapin_readahead+0x10/0x10
[  404.610598][ T5850]  ? __filemap_get_folio+0x9a6/0xaf0
[  404.610612][ T5850]  ? swap_cache_get_folio+0xae/0x3b0
[  404.610625][ T5850]  do_swap_page+0x525/0x5ac0
[  404.610643][ T5850]  ? ___pte_offset_map+0x29/0x250
[  404.610658][ T5850]  ? lock_acquire+0x5f/0x360
[  404.610674][ T5850]  ? do_swap_page+0x184/0x5ac0
[  404.610686][ T5850]  ? __pfx_do_swap_page+0x10/0x10
[  404.610699][ T5850]  ? __pfx_filemap_map_pages+0x10/0x10
[  404.610711][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610721][ T5850]  ? __pfx_default_wake_function+0x10/0x10
[  404.610739][ T5850]  ? ___pte_offset_map+0x45/0x250
[  404.610751][ T5850]  ? ___pte_offset_map+0x1cf/0x250
[  404.610767][ T5850]  ? pte_offset_map_rw_nolock+0xea/0x160
[  404.610781][ T5850]  __handle_mm_fault+0xe55/0x5440
[  404.610801][ T5850]  ? __pfx___handle_mm_fault+0x10/0x10
[  404.610814][ T5850]  ? lock_release+0x4b/0x3e0
[  404.610839][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610850][ T5850]  ? lock_vma_under_rcu+0xdf/0x3d0
[  404.610889][ T5850]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  404.610907][ T5850]  handle_mm_fault+0x40a/0x8e0
[  404.610924][ T5850]  do_user_addr_fault+0xa81/0x1390
[  404.610944][ T5850]  ? rcu_is_watching+0x15/0xb0
[  404.610956][ T5850]  ? trace_page_fault_user+0x84/0x1e0
[  404.610973][ T5850]  exc_page_fault+0x76/0xf0
[  404.610990][ T5850]  asm_exc_page_fault+0x26/0x30
[  404.611001][ T5850] RIP: 0033:0x7f01f238eb46
[  404.611012][ T5850] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83
[  404.611023][ T5850] RSP: 002b:00007ffcaeff6790 EFLAGS: 00010246
[  404.611034][ T5850] RAX: 0000000000000bb8 RBX: 00000000000017ed RCX: 0000000000062bcf
[  404.611042][ T5850] RDX: 0000000000000bb8 RSI: 0000000000000000 RDI: 0000000000002710
[  404.611051][ T5850] RBP: 00007ffcaeff67fc R08: 0000000019b0fc92 R09: 0000000000000000
[  404.611059][ T5850] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000001388
[  404.611066][ T5850] R13: 00000000000927c0 R14: 00000000000629af R15: 00007ffcaeff6850
[  404.611079][ T5850]  </TASK>
[  404.611144][ T5850] memory: usage 307200kB, limit 307200kB, failcnt 1233
[  404.864437][ T5850] memory+swap: usage 188052kB, limit 9007199254740988kB, failcnt 0
[  404.875809][ T5850] kmem: usage 179064kB, limit 9007199254740988kB, failcnt 0
[  404.896224][ T5850] Memory cgroup stats for /syz1:
[  404.896321][ T5850] cache 8192
[  404.913594][ T5850] rss 0
[  404.917448][ T5850] rss_huge 0
[  404.919959][ T5850] shmem 0
[  404.922348][ T5850] mapped_file 0
[  404.929899][ T5850] dirty 0
[  404.931532][ T5850] writeback 0
[  404.933812][ T5850] workingset_refault_anon 182
[  404.937742][ T5850] workingset_refault_file 336
[  404.941559][ T5850] swap 196608
[  404.944115][ T5850] swapcached 12288
[  404.949977][ T5850] pgpgin 252948
[  404.952534][ T5850] pgpgout 252943
[  404.974605][ T5850] pgfault 469520
[  404.976489][ T5850] pgmajfault 583
[  404.985986][ T5850] inactive_anon 12288
[  404.987468][ T5850] active_anon 0
[  404.988793][ T5850] inactive_file 4096
[  404.992349][ T5850] active_file 4096
[  404.993688][ T5850] unevictable 0
[  404.994966][ T5850] hierarchical_memory_limit 314572800
[  404.996829][ T5850] hierarchical_memsw_limit 9223372036854771712
[  404.999018][ T5850] total_cache 8192
[  405.000422][ T5850] total_rss 0
[  405.001739][ T5850] total_rss_huge 0
[  405.003210][ T5850] total_shmem 0
[  405.004609][ T5850] total_mapped_file 0
[  405.007430][ T5850] total_dirty 0
[  405.009424][ T5850] total_writeback 0
[  405.010953][ T5850] total_workingset_refault_anon 182
[  405.012916][ T5850] total_workingset_refault_file 336
[  405.014913][ T5850] total_swap 196608
[  405.018387][ T5850] total_swapcached 12288
[  405.021196][ T5850] total_pgpgin 252949
[  405.022962][ T5850] total_pgpgout 252944
[  405.024655][ T5850] total_pgfault 469521
[  405.026494][ T5850] total_pgmajfault 583
[  405.028259][ T5850] total_inactive_anon 12288
[  405.030177][ T5850] total_active_anon 0
[  405.031845][ T5850] total_inactive_file 4096
[  405.033628][ T5850] total_active_file 4096
[  405.035328][ T5850] total_unevictable 0
[  405.049257][ T5850] anon_cost 0
[  405.051914][ T5850] file_cost 0
[  405.054303][ T5850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5854,pid=28598,uid=0
[  405.061164][ T5850] Memory cgroup out of memory: Killed process 28598 (syz.1.5854) total-vm:101960kB, anon-rss:0kB, file-rss:21716kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  405.103281][T28628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.108295][T28628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  405.268982][T28641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5863'.
[  405.319839][T28650] delete_channel: no stack
[  405.400946][T28655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5867'.
[  405.413521][T28655] bridge36: port 1(veth1) entered blocking state
[  405.417297][T28655] bridge36: port 1(veth1) entered disabled state
[  405.419566][T28655] veth1: entered allmulticast mode
[  405.422692][T28655] veth1: entered promiscuous mode
[  405.426850][T28655] bridge36: port 2(veth0_to_bond) entered blocking state
[  405.429246][T28655] bridge36: port 2(veth0_to_bond) entered disabled state
[  405.432219][T28655] veth0_to_bond: entered allmulticast mode
[  405.435521][T28655] veth0_to_bond: entered promiscuous mode
[  405.549849][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'.
[  405.648260][T28668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.737826][T28673] netlink: 'syz.0.5872': attribute type 10 has an invalid length.
[  405.876785][T28681] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  405.919058][T28686] syzkaller1: entered promiscuous mode
[  405.921332][T28686] syzkaller1: entered allmulticast mode
[  406.028950][T28692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  406.031744][T28692] syzkaller0: entered promiscuous mode
[  406.033620][T28692] syzkaller0: entered allmulticast mode
[  406.043722][T28692] tipc: Resetting bearer <eth:syzkaller0>
[  406.068400][T28694] syzkaller0: entered promiscuous mode
[  406.070676][T28694] syzkaller0: entered allmulticast mode
[  406.079898][T28694] netlink: 'syz.2.5878': attribute type 1 has an invalid length.
[  406.083046][T28694] netlink: 'syz.2.5878': attribute type 2 has an invalid length.
[  406.087238][T28694] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.5878'.
[  406.091703][T28694] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  406.190458][T28701] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  406.193589][T28701] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  406.200398][T28701] netlink: 'syz.2.5880': attribute type 1 has an invalid length.
[  406.213841][T28701] 8021q: adding VLAN 0 to HW filter on device bond32
[  406.218402][T28701] bond32: (slave wlan0): Opening slave failed
[  406.298816][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5881'.
[  406.469984][T28729] netlink: 'syz.1.5887': attribute type 12 has an invalid length.
[  406.749138][T28682] tipc: Resetting bearer <eth:syzkaller0>
[  406.752479][T28682] tipc: Disabling bearer <eth:syzkaller0>
[  406.779910][T28738] veth0_to_bond: left allmulticast mode
[  406.782294][T28738] veth0_to_bond: left promiscuous mode
[  406.784236][T28738] bridge36: port 2(veth0_to_bond) entered disabled state
[  406.787919][T28738] veth1: left allmulticast mode
[  406.789632][T28738] veth1: left promiscuous mode
[  406.791315][T28738] bridge36: port 1(veth1) entered disabled state
[  406.853816][T28746] hsr0 speed is unknown, defaulting to 1000
[  406.871673][T28746] lo speed is unknown, defaulting to 1000
[  406.933193][T28746] lo speed is unknown, defaulting to 1000
[  408.007595][T28784] validate_nla: 1 callbacks suppressed
[  408.007605][T28784] netlink: 'syz.0.5898': attribute type 1 has an invalid length.
[  408.033813][T28787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  408.038694][T28787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.041984][T28787] syzkaller0: entered promiscuous mode
[  408.044364][T28787] syzkaller0: entered allmulticast mode
[  408.052352][T28787] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  408.074414][T28793] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.081097][T28793] syzkaller0: entered promiscuous mode
[  408.083011][T28793] syzkaller0: entered allmulticast mode
[  408.089128][T28786] tipc: Resetting bearer <eth:syzkaller0>
[  408.092406][T28786] tipc: Disabling bearer <eth:syzkaller0>
[  408.099760][T28793] tipc: Resetting bearer <eth:syzkaller0>
[  408.101828][T28793] syzkaller0: tun_net_xmit 134
[  408.104530][T28792] tipc: Resetting bearer <eth:syzkaller0>
[  408.107976][T28792] tipc: Disabling bearer <eth:syzkaller0>
[  408.195482][T28801] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  408.226613][T28808] pim6reg1: entered promiscuous mode
[  408.228440][T28808] pim6reg1: entered allmulticast mode
[  408.279403][T28813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.288566][T28813] syzkaller0: entered promiscuous mode
[  408.290903][T28813] syzkaller0: entered allmulticast mode
[  408.308467][T28812] tipc: Resetting bearer <eth:syzkaller0>
[  408.313172][T28812] tipc: Disabling bearer <eth:syzkaller0>
[  408.396303][T28814] bond33 (unregistering): Released all slaves
[  408.456721][T28832] syzkaller1: entered allmulticast mode
[  408.581745][T28846] __nla_validate_parse: 8 callbacks suppressed
[  408.581754][T28846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5914'.
[  408.586870][T28846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5914'.
[  408.589737][T28846] dvmrp0: left allmulticast mode
[  408.781477][T28874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5920'.
[  408.784740][T28874] netlink: 'syz.0.5920': attribute type 12 has an invalid length.
[  408.787900][T28874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5920'.
[  408.790998][T28874] netlink: 'syz.0.5920': attribute type 12 has an invalid length.
[  408.982511][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5923'.
[  409.047072][T28898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.049962][T28898] syzkaller0: entered promiscuous mode
[  409.051984][T28898] syzkaller0: entered allmulticast mode
[  409.063800][T28897] tipc: Resetting bearer <eth:syzkaller0>
[  409.069565][T28897] tipc: Disabling bearer <eth:syzkaller0>
[  409.103035][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5926'.
[  409.111255][T28900] mac80211_hwsim hwsim306 wlan0: entered allmulticast mode
[  409.327122][T28910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5929'.
[  409.407017][T28919] syzkaller0: entered promiscuous mode
[  409.408885][T28919] syzkaller0: entered allmulticast mode
[  409.493399][T28933] netlink: 'syz.0.5935': attribute type 4 has an invalid length.
[  409.498046][T28933] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5935'.
[  409.573793][T28942] syzkaller0: entered promiscuous mode
[  409.578927][T28942] syzkaller0: entered allmulticast mode
[  409.599747][T28946] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5940'.
[  409.699914][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5944'.
[  409.741617][T28964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  409.745262][T28964] syzkaller0: entered promiscuous mode
[  409.748509][T28964] syzkaller0: entered allmulticast mode
[  409.755206][T28964] tipc: Resetting bearer <eth:syzkaller0>
[  409.758188][T28963] tipc: Resetting bearer <eth:syzkaller0>
[  409.762320][T28963] tipc: Disabling bearer <eth:syzkaller0>
[  410.656235][T28995] netlink: 'syz.2.5953': attribute type 12 has an invalid length.
[  410.656626][T28996] netlink: 'syz.2.5953': attribute type 12 has an invalid length.
[  410.697814][T28995] netlink: 'syz.2.5953': attribute type 12 has an invalid length.
[  410.698023][T28996] netlink: 'syz.2.5953': attribute type 12 has an invalid length.
[  410.745431][T28998] IPVS: persistence engine module ip_vs_pe_ not found
[  410.759475][T28998] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  410.762287][T28998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.895490][T29011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  410.918677][T29011] syzkaller0: entered promiscuous mode
[  410.920907][T29011] syzkaller0: entered allmulticast mode
[  410.934767][T29011] tipc: Resetting bearer <eth:syzkaller0>
[  410.938972][T29010] tipc: Resetting bearer <eth:syzkaller0>
[  410.943412][T29010] tipc: Disabling bearer <eth:syzkaller0>
[  411.134016][T29039] netlink: 'syz.2.5961': attribute type 10 has an invalid length.
[  411.143400][T29039] netlink: 'syz.2.5961': attribute type 10 has an invalid length.
[  411.262514][T29057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.265259][T29057] syzkaller0: entered promiscuous mode
[  411.267287][T29057] syzkaller0: entered allmulticast mode
[  411.270352][T29057] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  411.274869][T29057] tipc: Resetting bearer <eth:syzkaller0>
[  411.278299][T29056] tipc: Resetting bearer <eth:syzkaller0>
[  411.282444][T29056] tipc: Disabling bearer <eth:syzkaller0>
[  411.405512][T29066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  411.412037][T29066] syzkaller0: entered promiscuous mode
[  411.413882][T29066] syzkaller0: entered allmulticast mode
[  411.428965][T29066] tipc: Resetting bearer <eth:syzkaller0>
[  411.432255][T29065] tipc: Resetting bearer <eth:syzkaller0>
[  411.436769][T29065] tipc: Disabling bearer <eth:syzkaller0>
[  411.684773][T29084] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  411.736477][T29090] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  412.120411][T29133] hsr0 speed is unknown, defaulting to 1000
[  412.122800][T29133] lo speed is unknown, defaulting to 1000
[  412.160488][T29133] lo speed is unknown, defaulting to 1000
[  412.464356][T29163] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  412.475125][T29163] CPU: 1 UID: 0 PID: 29163 Comm: syz.0.5992 Not tainted syzkaller #0 PREEMPT(full) 
[  412.475143][T29163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  412.475151][T29163] Call Trace:
[  412.475156][T29163]  <TASK>
[  412.475162][T29163]  dump_stack_lvl+0x189/0x250
[  412.475181][T29163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.475194][T29163]  ? __pfx__printk+0x10/0x10
[  412.475210][T29163]  ? kernfs_root+0x1c/0x230
[  412.475223][T29163]  ? kernfs_path_from_node+0x2f/0x290
[  412.475233][T29163]  ? kernfs_path_from_node+0x250/0x290
[  412.475243][T29163]  ? kernfs_path_from_node+0x2f/0x290
[  412.475255][T29163]  sysfs_warn_dup+0x8e/0xa0
[  412.475266][T29163]  sysfs_do_create_link_sd+0xc0/0x110
[  412.475280][T29163]  device_add_class_symlinks+0x1cf/0x240
[  412.475294][T29163]  device_add+0x475/0xb50
[  412.475306][T29163]  wiphy_register+0x1ba6/0x28d0
[  412.475327][T29163]  ? __pfx_wiphy_register+0x10/0x10
[  412.475340][T29163]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  412.475352][T29163]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  412.475369][T29163]  ieee80211_register_hw+0x3484/0x4100
[  412.475384][T29163]  ? ieee80211_register_hw+0x14a1/0x4100
[  412.475398][T29163]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  412.475410][T29163]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.475425][T29163]  ? __hrtimer_setup+0x187/0x210
[  412.475434][T29163]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  412.475451][T29163]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  412.475472][T29163]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  412.475484][T29163]  ? trace_kmalloc+0x1f/0xd0
[  412.475496][T29163]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  412.475510][T29163]  ? kstrndup+0xbf/0x160
[  412.475522][T29163]  hwsim_new_radio_nl+0xea4/0x1b10
[  412.475535][T29163]  ? __pfx___nla_validate_parse+0x10/0x10
[  412.475554][T29163]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  412.475596][T29163]  ? __nla_parse+0x40/0x60
[  412.475615][T29163]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  412.475632][T29163]  genl_family_rcv_msg_doit+0x215/0x300
[  412.475647][T29163]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  412.475663][T29163]  ? bpf_lsm_capable+0x9/0x20
[  412.475676][T29163]  ? security_capable+0x7e/0x2e0
[  412.475691][T29163]  genl_rcv_msg+0x60e/0x790
[  412.475704][T29163]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.475714][T29163]  ? __kasan_slab_alloc+0x6c/0x80
[  412.475727][T29163]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  412.475739][T29163]  ? __netlink_lookup+0xbd/0x810
[  412.475748][T29163]  ? rcu_is_watching+0x15/0xb0
[  412.475760][T29163]  netlink_rcv_skb+0x208/0x470
[  412.475774][T29163]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.475786][T29163]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.475802][T29163]  ? lock_release+0x4b/0x3e0
[  412.475826][T29163]  ? down_read+0x1ad/0x2e0
[  412.478535][T29163]  genl_rcv+0x28/0x40
[  412.478551][T29163]  netlink_unicast+0x82f/0x9e0
[  412.478596][T29163]  ? __pfx_netlink_unicast+0x10/0x10
[  412.478613][T29163]  ? netlink_sendmsg+0x642/0xb30
[  412.478631][T29163]  ? skb_put+0x11b/0x210
[  412.478643][T29163]  netlink_sendmsg+0x805/0xb30
[  412.478666][T29163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.478684][T29163]  ? futex_unqueue+0x22/0x240
[  412.478698][T29163]  ? aa_sock_msg_perm+0xf1/0x1d0
[  412.478709][T29163]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  412.478722][T29163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.478740][T29163]  __sock_sendmsg+0x21c/0x270
[  412.478756][T29163]  ____sys_sendmsg+0x505/0x830
[  412.478771][T29163]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.478787][T29163]  ? import_iovec+0x74/0xa0
[  412.478802][T29163]  ___sys_sendmsg+0x21f/0x2a0
[  412.478823][T29163]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.478861][T29163]  ? futex_wait+0x285/0x360
[  412.478889][T29163]  ? __fget_files+0x2a/0x420
[  412.478908][T29163]  ? __fget_files+0x3a0/0x420
[  412.478930][T29163]  __x64_sys_sendmsg+0x19b/0x260
[  412.478943][T29163]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.478959][T29163]  ? rcu_is_watching+0x15/0xb0
[  412.478972][T29163]  ? rcu_is_watching+0x15/0xb0
[  412.478985][T29163]  do_syscall_64+0xfa/0x3b0
[  412.479004][T29163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.479016][T29163]  ? exc_page_fault+0x9f/0xf0
[  412.479031][T29163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.479044][T29163] RIP: 0033:0x7f1af2d8ebe9
[  412.479056][T29163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.479067][T29163] RSP: 002b:00007f1af3c11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.479082][T29163] RAX: ffffffffffffffda RBX: 00007f1af2fb5fa0 RCX: 00007f1af2d8ebe9
[  412.479091][T29163] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  412.479099][T29163] RBP: 00007f1af2e11e19 R08: 0000000000000000 R09: 0000000000000000
[  412.479108][T29163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  412.479116][T29163] R13: 00007f1af2fb6038 R14: 00007f1af2fb5fa0 R15: 00007ffe0ecd4d88
[  412.479132][T29163]  </TASK>
[  412.701440][T29170] syzkaller1: entered promiscuous mode
[  412.703599][T29170] syzkaller1: entered allmulticast mode
[  413.415883][T29203] validate_nla: 2 callbacks suppressed
[  413.415900][T29203] netlink: 'syz.0.6000': attribute type 13 has an invalid length.
[  413.421605][T29203] netlink: 'syz.0.6000': attribute type 17 has an invalid length.
[  413.430299][T29203] erspan0: left promiscuous mode
[  413.432395][T29203] erspan0: entered promiscuous mode
[  413.451034][T29203] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  413.462164][ T5692] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.465240][ T5692] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.474695][ T5692] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.479514][ T5692] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.533422][T29206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.719090][T29223] __nla_validate_parse: 36 callbacks suppressed
[  413.719104][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'.
[  413.725250][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6005'.
[  413.776491][T29225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6005'.
[  413.917346][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6007'.
[  413.927031][T29230] vlan1: entered allmulticast mode
[  413.928807][T29230] bridge0: entered allmulticast mode
[  413.960548][T29230] mac80211_hwsim hwsim308 wlan0: entered allmulticast mode
[  414.153346][T29251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.177741][T29251] syzkaller0: entered promiscuous mode
[  414.179590][T29251] syzkaller0: entered allmulticast mode
[  414.184754][T29251] tipc: Resetting bearer <eth:syzkaller0>
[  414.191513][T29250] tipc: Resetting bearer <eth:syzkaller0>
[  414.197039][T29250] tipc: Disabling bearer <eth:syzkaller0>
[  414.223114][T29255] netlink: 'syz.0.6014': attribute type 12 has an invalid length.
[  414.261239][T29263] veth0: entered promiscuous mode
[  414.269499][T29264] netlink: 'syz.0.6016': attribute type 1 has an invalid length.
[  414.273338][T29263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'.
[  414.285214][T29264] bond26: entered promiscuous mode
[  414.290264][T29264] 8021q: adding VLAN 0 to HW filter on device bond26
[  414.294391][T29263] veth0 (unregistering): left promiscuous mode
[  414.314507][T29271] sctp: [Deprecated]: syz.0.6018 (pid 29271) Use of int in max_burst socket option deprecated.
[  414.314507][T29271] Use struct sctp_assoc_value instead
[  414.391609][T29273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6019'.
[  414.425339][T29279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6021'.
[  414.457337][T29279] batman_adv: batadv0: Adding interface: ip6gretap3
[  414.459553][T29279] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.468205][T29279] batman_adv: batadv0: Interface activated: ip6gretap3
[  414.526744][T29287] netlink: 'syz.2.6020': attribute type 10 has an invalid length.
[  414.535768][T29289] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6023'.
[  414.538897][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6023'.
[  414.574436][T29295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.578210][T29293] syzkaller0: entered promiscuous mode
[  414.580186][T29293] syzkaller0: entered allmulticast mode
[  414.603155][T29294] tipc: Resetting bearer <eth:syzkaller0>
[  414.611182][T29294] tipc: Disabling bearer <eth:syzkaller0>
[  414.626951][T29303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.635080][T29302] tipc: Disabling bearer <eth:syzkaller0>
[  414.668501][T29305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  414.671726][T29305] syzkaller0: entered promiscuous mode
[  414.674035][T29305] syzkaller0: entered allmulticast mode
[  414.684239][T29305] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.6027'.
[  414.700579][T29305] tipc: Resetting bearer <eth:syzkaller0>
[  414.737777][T29307] syzkaller0: entered promiscuous mode
[  414.739950][T29307] syzkaller0: entered allmulticast mode
[  414.752020][T29304] tipc: Resetting bearer <eth:syzkaller0>
[  414.757145][T29304] tipc: Disabling bearer <eth:syzkaller0>
[  414.963175][T29328] netlink: 'syz.0.6034': attribute type 2 has an invalid length.
[  414.971668][T29328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.341065][T29343] mac80211_hwsim hwsim308 wlan0: left allmulticast mode
[  415.352219][T29343] bond26: left promiscuous mode
[  415.354948][T29343] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  415.371362][ T5692] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.388242][ T5692] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.391610][ T5692] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.403024][ T5692] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.559723][T29371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.562515][T29371] syzkaller0: entered promiscuous mode
[  415.564551][T29371] syzkaller0: entered allmulticast mode
[  415.571012][T29371] tipc: Resetting bearer <eth:syzkaller0>
[  415.574723][T29369] tipc: Resetting bearer <eth:syzkaller0>
[  415.578563][T29369] tipc: Disabling bearer <eth:syzkaller0>
[  415.604697][T29372] bridge16: entered allmulticast mode
[  415.612351][T29372] dvmrp1: entered allmulticast mode
[  415.617656][T29370] bridge16: left allmulticast mode
[  415.646244][T29374] pim6reg1: entered promiscuous mode
[  415.648407][T29374] pim6reg1: entered allmulticast mode
[  415.789471][T29374] bond33 (unregistering): Released all slaves
[  416.389983][T29394] netlink: 'syz.0.6049': attribute type 32 has an invalid length.
[  416.393096][T29394] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  416.407326][T29394] IPVS: Unknown mcast interface: wg0
[  416.411791][T29394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  416.495078][T29399] netlink: 'syz.0.6051': attribute type 13 has an invalid length.
[  416.499327][T29399] gretap0: refused to change device tx_queue_len
[  416.501449][T29399] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  416.660906][T29421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.663859][T29421] syzkaller0: entered promiscuous mode
[  416.666352][T29421] syzkaller0: entered allmulticast mode
[  416.678190][T29421] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  416.682231][T29421] 8021q: VLANs not supported on vxcan1
[  416.688041][T29421] tipc: Resetting bearer <eth:syzkaller0>
[  416.691205][T29420] tipc: Resetting bearer <eth:syzkaller0>
[  416.694170][T29420] tipc: Disabling bearer <eth:syzkaller0>
[  416.750991][T29425] netlink: 'syz.1.6058': attribute type 20 has an invalid length.
[  416.753804][T29425] netlink: 'syz.1.6058': attribute type 20 has an invalid length.
[  416.832169][T29436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  416.837729][T29436] syzkaller0: entered promiscuous mode
[  416.840172][T29436] syzkaller0: entered allmulticast mode
[  416.851201][T29436] tipc: Resetting bearer <eth:syzkaller0>
[  416.856495][T29435] tipc: Resetting bearer <eth:syzkaller0>
[  416.860979][T29435] tipc: Disabling bearer <eth:syzkaller0>
[  417.107790][T29462] dvmrp8: entered allmulticast mode
[  417.117315][T29462] hsr0 speed is unknown, defaulting to 1000
[  417.120124][T29462] lo speed is unknown, defaulting to 1000
[  417.186851][T29462] lo speed is unknown, defaulting to 1000
[  417.193909][T29464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.202985][T29464] syzkaller0: entered promiscuous mode
[  417.204963][T29464] syzkaller0: entered allmulticast mode
[  417.218494][T29464] tipc: Resetting bearer <eth:syzkaller0>
[  417.221269][T29461] dvmrp8: left allmulticast mode
[  417.226621][T29463] tipc: Resetting bearer <eth:syzkaller0>
[  417.229046][T29463] tipc: Disabling bearer <eth:syzkaller0>
[  417.294283][T29469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  417.374678][T29469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  417.422042][T29469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  417.501279][T29469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  417.520811][T29482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.525725][T29481] tipc: Disabling bearer <eth:syzkaller0>
[  417.606295][ T5692] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  417.613102][ T5692] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  417.618465][T29485] syzkaller0: entered promiscuous mode
[  417.620319][T29485] syzkaller0: entered allmulticast mode
[  417.622969][T29484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.625560][ T5692] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  417.631476][ T5692] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  417.634405][T29484] tipc: Resetting bearer <eth:syzkaller0>
[  417.639088][T29484] tipc: Disabling bearer <eth:syzkaller0>
[  417.689234][T29499] syzkaller0: entered promiscuous mode
[  417.691009][T29499] syzkaller0: entered allmulticast mode
[  417.697609][T29493] hsr0 speed is unknown, defaulting to 1000
[  417.700172][T29493] lo speed is unknown, defaulting to 1000
[  417.739620][T29493] lo speed is unknown, defaulting to 1000
[  417.810557][T29510] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  417.815501][T10023] lo speed is unknown, defaulting to 1000
[  417.823156][T10023] syz0: Port: 1 Link ACTIVE
[  417.825529][T10023] lo speed is unknown, defaulting to 1000
[  417.853043][T22185] lo speed is unknown, defaulting to 1000
[  417.855349][T22185] syz0: Port: 1 Link DOWN
[  417.862153][T22185] lo speed is unknown, defaulting to 1000
[  417.983636][T29518] gretap0: Device is already in use.
[  418.013881][T29521] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  418.626736][T29540] validate_nla: 6 callbacks suppressed
[  418.626751][T29540] netlink: 'syz.0.6090': attribute type 10 has an invalid length.
[  418.645962][T29540] netlink: 'syz.0.6090': attribute type 10 has an invalid length.
[  418.680046][T29545] hsr0 speed is unknown, defaulting to 1000
[  418.682426][T29545] lo speed is unknown, defaulting to 1000
[  418.761676][T29545] lo speed is unknown, defaulting to 1000
[  419.190067][T29556] syzkaller0: entered promiscuous mode
[  419.192039][T29556] syzkaller0: entered allmulticast mode
[  419.316119][T29559] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  419.481174][T29570] sctp: [Deprecated]: syz.1.6096 (pid 29570) Use of struct sctp_assoc_value in delayed_ack socket option.
[  419.481174][T29570] Use struct sctp_sack_info instead
[  419.521032][T29580] netlink: 'syz.0.6100': attribute type 2 has an invalid length.
[  419.523518][T29580] __nla_validate_parse: 33 callbacks suppressed
[  419.523526][T29580] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6100'.
[  419.564091][T29586] syzkaller0: entered promiscuous mode
[  419.567400][T29586] syzkaller0: entered allmulticast mode
[  419.591160][T13424] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  419.709955][T29592] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  419.787395][T29592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6102'.
[  419.815539][T29592] netlink: 428 bytes leftover after parsing attributes in process `syz.0.6102'.
[  419.856391][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'.
[  419.864494][T29600] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  419.902965][T29600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  419.909250][T29599] tipc: Resetting bearer <eth:syzkaller0>
[  419.914216][T29599] tipc: Disabling bearer <eth:syzkaller0>
[  419.983209][T29602] netlink: 'syz.0.6104': attribute type 4 has an invalid length.
[  420.054078][T29604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'.
[  420.293349][T29616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'.
[  420.300292][T29616] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6108'.
[  420.348984][T29625] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  420.357478][T29625] syzkaller0: entered promiscuous mode
[  420.362424][T29628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6112'.
[  420.363502][T29625] syzkaller0: entered allmulticast mode
[  420.388738][T29628] ip6gre1: entered promiscuous mode
[  420.420168][T29630] netlink: 'syz.0.6113': attribute type 1 has an invalid length.
[  420.430096][T29632] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  420.443223][T29630] veth15: entered promiscuous mode
[  420.500261][T29632] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  420.540789][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6117'.
[  420.548102][T29632] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  420.579517][T29643] ip6gre1: left promiscuous mode
[  420.585349][T29643] veth15: left promiscuous mode
[  420.589868][T29632] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  420.641931][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'.
[  420.724191][ T5692] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  420.733667][ T5692] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  420.744861][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  420.756501][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  420.947359][T29669] gretap0: entered promiscuous mode
[  420.949608][T29669] macvlan5: entered allmulticast mode
[  420.951899][T29669] gretap0: entered allmulticast mode
[  420.954755][T29669] gretap0: left allmulticast mode
[  420.961641][T29669] gretap0: left promiscuous mode
[  420.987388][T29672] ip6gre5: entered allmulticast mode
[  421.062106][T29676] gretap0: entered promiscuous mode
[  421.142524][T29684] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  421.988639][T29724] netlink: 'syz.1.6136': attribute type 1 has an invalid length.
[  421.991637][T29725] netlink: 'syz.1.6136': attribute type 1 has an invalid length.
[  422.003661][T29724] 8021q: adding VLAN 0 to HW filter on device bond33
[  422.123496][T29741] netlink: 'syz.2.6139': attribute type 1 has an invalid length.
[  422.579360][T29781] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  423.094875][T29811] batman_adv: batadv0: Removing interface: ip6gretap3
[  423.099984][T29811] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  423.189597][T29815] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.412072][T29842] dvmrp8: entered allmulticast mode
[  423.414599][T29841] dvmrp8: left allmulticast mode
[  423.532452][T29855] netlink: 'syz.0.6165': attribute type 1 has an invalid length.
[  423.538610][T29854] vlan1: entered promiscuous mode
[  423.542442][T29854] bridge0: entered promiscuous mode
[  423.557743][T29853] hsr0 speed is unknown, defaulting to 1000
[  423.561072][T29853] lo speed is unknown, defaulting to 1000
[  423.562589][T29860] netlink: 'syz.2.6167': attribute type 10 has an invalid length.
[  423.608439][T29853] lo speed is unknown, defaulting to 1000
[  423.643262][T29876] veth0: entered promiscuous mode
[  423.656193][T29877] veth0 (unregistering): left promiscuous mode
[  423.862001][T29890] netlink: 'syz.1.6174': attribute type 10 has an invalid length.
[  423.897373][T22185] lo speed is unknown, defaulting to 1000
[  423.899607][T22185] syz1: Port: 1 Link DOWN
[  423.903184][T29904] netlink: 'syz.2.6177': attribute type 4 has an invalid length.
[  423.919142][ T5911] lo speed is unknown, defaulting to 1000
[  423.921413][ T5911] syz1: Port: 1 Link ACTIVE
[  423.978573][T29911] netlink: 'syz.2.6180': attribute type 1 has an invalid length.
[  424.161430][T29936] IPv6: sit13: Disabled Multicast RS
[  424.163622][T29936] sit13: entered allmulticast mode
[  424.218562][T29938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.856307][T29943] sctp: [Deprecated]: syz.0.6188 (pid 29943) Use of int in maxseg socket option.
[  424.856307][T29943] Use struct sctp_assoc_value instead
[  424.913898][T29947] __nla_validate_parse: 36 callbacks suppressed
[  424.913907][T29947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6189'.
[  424.920393][T29947] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.984584][T29953] dvmrp0: entered allmulticast mode
[  425.028050][T29956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'.
[  425.055003][T29961] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6192'.
[  425.090194][T29963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6193'.
[  425.112617][T29965] mac80211_hwsim hwsim347 wlan1: entered allmulticast mode
[  425.214249][T29977] hsr0 speed is unknown, defaulting to 1000
[  425.222397][T29977] lo speed is unknown, defaulting to 1000
[  425.249253][T29981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6198'.
[  425.287073][T29977] lo speed is unknown, defaulting to 1000
[  425.343075][T29988] pim6reg1: entered promiscuous mode
[  425.344887][T29988] pim6reg1: entered allmulticast mode
[  425.397124][T29988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6200'.
[  425.504656][T29994] bond28 (unregistering): Released all slaves
[  425.647958][T30006] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6203'.
[  425.651268][T30006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6203'.
[  425.708512][T30007] netlink: 'syz.0.6203': attribute type 10 has an invalid length.
[  426.271469][T30016] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6205'.
[  426.499350][T30018] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6206'.
[  427.002512][T30035] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  427.022394][T30032] netlink: 'syz.1.6209': attribute type 10 has an invalid length.
[  427.030784][T30032] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  427.034783][T30032] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  427.320727][T30061] netlink: 'syz.1.6214': attribute type 13 has an invalid length.
[  427.324250][T30061] netlink: 'syz.1.6214': attribute type 17 has an invalid length.
[  427.348360][T30064] mac80211_hwsim hwsim306 wlan0: left allmulticast mode
[  427.356992][T30064] ip6gre4: left allmulticast mode
[  427.393665][T22185] lo speed is unknown, defaulting to 1000
[  427.397383][T22185] syz1: Port: 1 Link DOWN
[  428.077349][T30072] netlink: 'syz.2.6216': attribute type 23 has an invalid length.
[  428.092406][T30061] warn_alloc: 1 callbacks suppressed
[  428.092422][T30061] syz.1.6214: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  428.101635][T30061] CPU: 1 UID: 0 PID: 30061 Comm: syz.1.6214 Not tainted syzkaller #0 PREEMPT(full) 
[  428.101650][T30061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  428.101657][T30061] Call Trace:
[  428.101662][T30061]  <TASK>
[  428.101667][T30061]  dump_stack_lvl+0x189/0x250
[  428.101687][T30061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.101700][T30061]  ? __pfx__printk+0x10/0x10
[  428.101715][T30061]  ? lock_release+0x4b/0x3e0
[  428.101734][T30061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  428.101748][T30061]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  428.101770][T30061]  warn_alloc+0x214/0x310
[  428.101817][T30061]  ? __pfx_warn_alloc+0x10/0x10
[  428.101839][T30061]  ? __get_vm_area_node+0x28f/0x300
[  428.101856][T30061]  ? pfifo_fast_change_tx_queue_len+0x1a6/0xa30
[  428.101876][T30061]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  428.101902][T30061]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  428.101924][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.101936][T30061]  ? pfifo_fast_change_tx_queue_len+0x1a6/0xa30
[  428.101951][T30061]  ? pfifo_fast_change_tx_queue_len+0x1a6/0xa30
[  428.101966][T30061]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  428.101982][T30061]  ? pfifo_fast_change_tx_queue_len+0x1a6/0xa30
[  428.102001][T30061]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  428.102017][T30061]  pfifo_fast_change_tx_queue_len+0x1a6/0xa30
[  428.102034][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102045][T30061]  ? lock_release+0x4b/0x3e0
[  428.102061][T30061]  ? net_generic+0x1f4/0x240
[  428.102078][T30061]  ? lowpan_event+0x107/0x6a0
[  428.102093][T30061]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  428.102111][T30061]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  428.102133][T30061]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  428.102151][T30061]  ? notifier_call_chain+0x3bf/0x3e0
[  428.102168][T30061]  netif_change_tx_queue_len+0x162/0x270
[  428.102183][T30061]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  428.102196][T30061]  ? netif_change_flags+0xe8/0x1a0
[  428.102210][T30061]  do_setlink+0xdfb/0x41c0
[  428.102221][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102232][T30061]  ? __schedule+0x17ae/0x4cc0
[  428.102249][T30061]  ? __pfx_do_setlink+0x10/0x10
[  428.102260][T30061]  ? do_raw_spin_lock+0x121/0x290
[  428.102278][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102291][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102303][T30061]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  428.102319][T30061]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  428.102335][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102350][T30061]  ? __mutex_lock+0xd3b/0x1350
[  428.102368][T30061]  ? __mutex_lock+0x5bb/0x1350
[  428.102387][T30061]  ? rtnl_newlink+0x8db/0x1c70
[  428.102406][T30061]  ? __pfx___mutex_lock+0x10/0x10
[  428.102426][T30061]  ? ns_capable+0x8a/0xf0
[  428.102439][T30061]  ? rtnl_link_get_net_capable+0x16a/0x350
[  428.102451][T30061]  rtnl_newlink+0x149f/0x1c70
[  428.102472][T30061]  ? __pfx_rtnl_newlink+0x10/0x10
[  428.102490][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102502][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102516][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102530][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102542][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102555][T30061]  ? is_bpf_text_address+0x26/0x2b0
[  428.102572][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102584][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102596][T30061]  ? lock_release+0x4b/0x3e0
[  428.102614][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102627][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102638][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102653][T30061]  ? unwind_next_frame+0xa5/0x2390
[  428.102665][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102678][T30061]  ? is_bpf_text_address+0x26/0x2b0
[  428.102693][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102704][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102715][T30061]  ? lock_release+0x4b/0x3e0
[  428.102729][T30061]  ? lock_release+0x4b/0x3e0
[  428.102740][T30061]  ? is_bpf_text_address+0x292/0x2b0
[  428.102749][T30061]  ? is_bpf_text_address+0x26/0x2b0
[  428.102766][T30061]  ? kernel_text_address+0xa5/0xe0
[  428.102777][T30061]  ? __kernel_text_address+0xd/0x40
[  428.102809][T30061]  ? unwind_get_return_address+0x4d/0x90
[  428.102820][T30061]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  428.102830][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102837][T30061]  ? lock_release+0x4b/0x3e0
[  428.102846][T30061]  ? bpf_lsm_capable+0x9/0x20
[  428.102859][T30061]  ? security_capable+0x7e/0x2e0
[  428.102877][T30061]  ? __pfx_rtnl_newlink+0x10/0x10
[  428.102893][T30061]  rtnetlink_rcv_msg+0x7cf/0xb70
[  428.102912][T30061]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  428.102928][T30061]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  428.102944][T30061]  ? __netlink_lookup+0xbd/0x810
[  428.102954][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102965][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.102979][T30061]  netlink_rcv_skb+0x208/0x470
[  428.102996][T30061]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  428.103012][T30061]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  428.103035][T30061]  netlink_unicast+0x82f/0x9e0
[  428.103052][T30061]  ? __pfx_netlink_unicast+0x10/0x10
[  428.103067][T30061]  ? netlink_sendmsg+0x642/0xb30
[  428.103083][T30061]  ? skb_put+0x11b/0x210
[  428.103096][T30061]  netlink_sendmsg+0x805/0xb30
[  428.103115][T30061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.103132][T30061]  ? futex_unqueue+0x22/0x240
[  428.103145][T30061]  ? aa_sock_msg_perm+0xf1/0x1d0
[  428.103158][T30061]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  428.103171][T30061]  ? __pfx_netlink_sendmsg+0x10/0x10
[  428.103189][T30061]  __sock_sendmsg+0x21c/0x270
[  428.103207][T30061]  ____sys_sendmsg+0x505/0x830
[  428.103222][T30061]  ? __pfx_____sys_sendmsg+0x10/0x10
[  428.103238][T30061]  ? import_iovec+0x74/0xa0
[  428.103252][T30061]  ___sys_sendmsg+0x21f/0x2a0
[  428.103263][T30061]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.103276][T30061]  ? futex_wait+0x285/0x360
[  428.103301][T30061]  ? file_init_path+0x434/0x590
[  428.103318][T30061]  __x64_sys_sendmsg+0x19b/0x260
[  428.103332][T30061]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.103348][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.103361][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.103375][T30061]  do_syscall_64+0xfa/0x3b0
[  428.103393][T30061]  ? rcu_is_watching+0x15/0xb0
[  428.103403][T30061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.103419][T30061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.103431][T30061] RIP: 0033:0x7f01f238ebe9
[  428.103445][T30061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.103456][T30061] RSP: 002b:00007f01f05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.103469][T30061] RAX: ffffffffffffffda RBX: 00007f01f25b5fa0 RCX: 00007f01f238ebe9
[  428.103478][T30061] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004
[  428.103486][T30061] RBP: 00007f01f2411e19 R08: 0000000000000000 R09: 0000000000000000
[  428.103495][T30061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  428.103503][T30061] R13: 00007f01f25b6038 R14: 00007f01f25b5fa0 R15: 00007ffcaeff6438
[  428.103517][T30061]  </TASK>
[  428.103522][T30061] Mem-Info:
[  428.352498][T30061] active_anon:224 inactive_anon:120 isolated_anon:0
[  428.352498][T30061]  active_file:1465 inactive_file:11 isolated_file:0
[  428.352498][T30061]  unevictable:1768 dirty:2 writeback:0
[  428.352498][T30061]  slab_reclaimable:12119 slab_unreclaimable:146829
[  428.352498][T30061]  mapped:16245 shmem:1801 pagetables:1471
[  428.352498][T30061]  sec_pagetables:0 bounce:0
[  428.352498][T30061]  kernel_misc_reclaimable:0
[  428.352498][T30061]  free:211127 free_pcp:956 free_cma:0
[  428.368166][T30061] Node 0 active_anon:404kB inactive_anon:368kB active_file:5148kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19576kB dirty:8kB writeback:0kB shmem:3592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9620kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  428.378603][T30061] Node 1 active_anon:492kB inactive_anon:112kB active_file:712kB inactive_file:64kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45404kB dirty:0kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6352kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  428.390514][T30061] Node 0 DMA free:11240kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.401224][T30061] lowmem_reserve[]: 0 811 811 811 811
[  428.403020][T30061] Node 0 DMA32 free:224440kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:404kB inactive_anon:368kB active_file:5148kB inactive_file:0kB unevictable:3536kB writepending:8kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:2524kB local_pcp:1244kB free_cma:0kB
[  428.416002][T30061] lowmem_reserve[]: 0 0 0 0 0
[  428.417897][T30061] Node 1 DMA32 free:416088kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  428.428422][T30061] lowmem_reserve[]: 0 0 854 854 854
[  428.430609][T30061] Node 1 Normal free:192740kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:492kB inactive_anon:112kB active_file:712kB inactive_file:60kB unevictable:3536kB writepending:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:1332kB local_pcp:1256kB free_cma:0kB
[  428.441721][T30061] lowmem_reserve[]: 0 0 0 0 0
[  428.443257][T30061] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 6*32kB (U) 6*64kB (U) 6*128kB (U) 6*256kB (U) 6*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 11240kB
[  428.448766][T30061] Node 0 DMA32: 7*4kB (ME) 37*8kB (UE) 63*16kB (UE) 695*32kB (UME) 530*64kB (UME) 286*128kB (UME) 121*256kB (UME) 18*512kB (UME) 88*1024kB (UM) 0*2048kB 0*4096kB = 224404kB
[  428.454626][T30061] Node 1 DMA32: 240*4kB (UM) 235*8kB (UM) 245*16kB (UM) 239*32kB (UM) 235*64kB (UM) 229*128kB (UM) 226*256kB (UM) 213*512kB (UM) 186*1024kB (UM) 0*2048kB 0*4096kB = 416136kB
[  428.460742][T30061] Node 1 Normal: 218*4kB (ME) 274*8kB (ME) 132*16kB (ME) 112*32kB (UME) 52*64kB (UM) 41*128kB (M) 63*256kB (UM) 109*512kB (UM) 101*1024kB (UM) 0*2048kB 0*4096kB = 192696kB
[  428.476050][T30061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.479101][T30061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  428.482589][T30061] 3541 total pagecache pages
[  428.484291][T30061] 289 pages in swap cache
[  428.486165][T30061] Free swap  = 74856kB
[  428.487808][T30061] Total swap = 124996kB
[  428.489478][T30061] 786301 pages RAM
[  428.490979][T30061] 0 pages HighMem/MovableOnly
[  428.492684][T30061] 241332 pages reserved
[  428.494209][T30061] 0 pages cma reserved
[  428.502447][T30061] ip6gretap4: refused to change device tx_queue_len
[  428.504736][T30061] A link change request failed with some changes committed already. Interface ip6gretap4 may have been left with an inconsistent configuration, please check.
[  428.515806][T13558] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  428.556399][T13558] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  428.563165][T13558] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  428.570240][T13558] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  428.581220][T30074] netlink: 'syz.1.6217': attribute type 30 has an invalid length.
[  428.586576][T13558] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.586605][T30074] netlink: 'syz.1.6217': attribute type 30 has an invalid length.
[  428.590258][T13558] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  428.597925][T13558] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  428.604415][T13558] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  428.648766][T30079] sit0: Master is either lo or non-ether device
[  428.882305][T30098] mac80211_hwsim hwsim347 wlan1: left allmulticast mode
[  429.008241][T30102] netlink: 'syz.0.6227': attribute type 12 has an invalid length.
[  429.050433][T30108] mac80211_hwsim hwsim347 wlan1: entered allmulticast mode
[  429.256809][T30118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.259438][T30118] syzkaller0: entered promiscuous mode
[  429.261311][T30118] syzkaller0: entered allmulticast mode
[  429.292988][T30118] tipc: Resetting bearer <eth:syzkaller0>
[  429.296399][T30117] tipc: Resetting bearer <eth:syzkaller0>
[  429.300114][T30117] tipc: Disabling bearer <eth:syzkaller0>
[  429.443570][T30124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.447122][T30124] syzkaller0: entered promiscuous mode
[  429.449582][T30124] syzkaller0: entered allmulticast mode
[  429.493539][T30124] tipc: Resetting bearer <eth:syzkaller0>
[  429.497273][T30128] netlink: 'syz.0.6233': attribute type 1 has an invalid length.
[  429.507813][T30128] 8021q: adding VLAN 0 to HW filter on device bond28
[  429.511072][T30123] tipc: Resetting bearer <eth:syzkaller0>
[  429.514613][T30123] tipc: Disabling bearer <eth:syzkaller0>
[  429.527417][T30128] 8021q: adding VLAN 0 to HW filter on device bond28
[  429.530374][T30128] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  429.535378][T30128] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  429.579510][T30132] veth1: entered promiscuous mode
[  429.584696][T30132] bond28: (slave veth1): Enslaving as an active interface with a down link
[  429.595494][T30128] erspan0: entered allmulticast mode
[  429.631717][T30138] vlan0: entered promiscuous mode
[  429.742875][T30156] syzkaller0: entered promiscuous mode
[  429.744714][T30156] syzkaller0: entered allmulticast mode
[  429.868135][T30178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.873889][T30178] wg1: entered allmulticast mode
[  429.943505][T30177] tipc: Disabling bearer <eth:syzkaller0>
[  429.999545][T30187] __nla_validate_parse: 26 callbacks suppressed
[  429.999560][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6250'.
[  430.029006][T30187] netlink: 'syz.0.6250': attribute type 1 has an invalid length.
[  430.037471][T30187] hsr0 speed is unknown, defaulting to 1000
[  430.039716][T30187] lo speed is unknown, defaulting to 1000
[  430.076546][T30189] syzkaller0: entered promiscuous mode
[  430.078968][T30189] syzkaller0: entered allmulticast mode
[  430.100463][T30187] lo speed is unknown, defaulting to 1000
[  430.150702][T30193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6252'.
[  430.159417][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6252'.
[  430.249064][T30202] syzkaller0: entered promiscuous mode
[  430.254688][T30202] syzkaller0: entered allmulticast mode
[  430.324018][T30205] hsr0 speed is unknown, defaulting to 1000
[  430.326475][T30205] lo speed is unknown, defaulting to 1000
[  430.372420][T30205] lo speed is unknown, defaulting to 1000
[  430.425215][T30205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6256'.
[  430.465173][T30205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6256'.
[  430.579697][T30222] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  430.610834][T30222] netlink: 'syz.2.6260': attribute type 4 has an invalid length.
[  430.652290][T30230] ==================================================================
[  430.655623][T30230] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  430.658950][T30230] Read of size 1 at addr ffff888120f7d0b0 by task syz.2.6262/30230
[  430.663159][T30230] 
[  430.664201][T30230] CPU: 1 UID: 0 PID: 30230 Comm: syz.2.6262 Not tainted syzkaller #0 PREEMPT(full) 
[  430.664218][T30230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  430.664227][T30230] Call Trace:
[  430.664234][T30230]  <TASK>
[  430.664241][T30230]  dump_stack_lvl+0x189/0x250
[  430.664262][T30230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.664278][T30230]  ? lock_release+0x4b/0x3e0
[  430.664300][T30230]  ? __virt_addr_valid+0x4a5/0x5c0
[  430.664319][T30230]  print_report+0xca/0x240
[  430.664331][T30230]  ? __xfrm_state_insert+0x8af/0x1450
[  430.664344][T30230]  kasan_report+0x118/0x150
[  430.664364][T30230]  ? __xfrm_state_insert+0x8af/0x1450
[  430.664378][T30230]  __xfrm_state_insert+0x8af/0x1450
[  430.664394][T30230]  xfrm_state_insert+0x54/0x60
[  430.664405][T30230]  ipcomp6_init_state+0x655/0x900
[  430.664420][T30230]  __xfrm_init_state+0xa76/0x13f0
[  430.664434][T30230]  ? __xfrm_init_state+0x7ef/0x13f0
[  430.664449][T30230]  xfrm_init_state+0x18/0xa0
[  430.664464][T30230]  pfkey_add+0x1d38/0x2e00
[  430.664480][T30230]  ? __pfx_pfkey_add+0x10/0x10
[  430.664488][T30230]  ? kmem_cache_free+0x18f/0x400
[  430.664508][T30230]  pfkey_sendmsg+0xbfe/0x1090
[  430.664527][T30230]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  430.664550][T30230]  ? plist_check_list+0x30f/0x330
[  430.664564][T30230]  ? aa_sock_msg_perm+0xf1/0x1d0
[  430.664575][T30230]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  430.664587][T30230]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  430.664605][T30230]  __sock_sendmsg+0x21c/0x270
[  430.664622][T30230]  ____sys_sendmsg+0x52d/0x830
[  430.664637][T30230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  430.664650][T30230]  ? import_iovec+0x74/0xa0
[  430.664667][T30230]  ___sys_sendmsg+0x21f/0x2a0
[  430.664680][T30230]  ? __pfx____sys_sendmsg+0x10/0x10
[  430.664693][T30230]  ? __pfx_futex_wake_mark+0x10/0x10
[  430.664717][T30230]  ? __fget_files+0x2a/0x420
[  430.664749][T30230]  ? __fget_files+0x3a0/0x420
[  430.664769][T30230]  __sys_sendmmsg+0x227/0x430
[  430.664812][T30230]  ? __pfx___sys_sendmmsg+0x10/0x10
[  430.664823][T30230]  ? do_futex+0x333/0x420
[  430.664839][T30230]  ? fdget+0x184/0x1e0
[  430.664853][T30230]  ? __pfx___se_sys_futex+0x10/0x10
[  430.664866][T30230]  ? fd_install+0x30d/0x540
[  430.664884][T30230]  __x64_sys_sendmmsg+0xa0/0xc0
[  430.664895][T30230]  do_syscall_64+0xfa/0x3b0
[  430.664913][T30230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.664923][T30230]  ? exc_page_fault+0x9f/0xf0
[  430.664938][T30230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.664951][T30230] RIP: 0033:0x7f025d58ebe9
[  430.664964][T30230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  430.664975][T30230] RSP: 002b:00007f025e42a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  430.664990][T30230] RAX: ffffffffffffffda RBX: 00007f025d7b5fa0 RCX: 00007f025d58ebe9
[  430.665007][T30230] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000005
[  430.665016][T30230] RBP: 00007f025d611e19 R08: 0000000000000000 R09: 0000000000000000
[  430.665024][T30230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.665032][T30230] R13: 00007f025d7b6038 R14: 00007f025d7b5fa0 R15: 00007ffe5f42e0d8
[  430.665046][T30230]  </TASK>
[  430.665051][T30230] 
[  430.782246][T30230] Allocated by task 28488:
[  430.784111][T30230]  kasan_save_track+0x3e/0x80
[  430.785967][T30230]  __kasan_slab_alloc+0x6c/0x80
[  430.787526][T30230]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  430.789693][T30230]  xfrm_state_alloc+0x24/0x2f0
[  430.791623][T30230]  pfkey_add+0x6e4/0x2e00
[  430.793395][T30230]  pfkey_sendmsg+0xbfe/0x1090
[  430.795257][T30230]  __sock_sendmsg+0x21c/0x270
[  430.797234][T30230]  ____sys_sendmsg+0x505/0x830
[  430.799243][T30230]  ___sys_sendmsg+0x21f/0x2a0
[  430.801254][T30230]  __x64_sys_sendmsg+0x19b/0x260
[  430.803371][T30230]  do_syscall_64+0xfa/0x3b0
[  430.805415][T30230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.808015][T30230] 
[  430.809037][T30230] Freed by task 22185:
[  430.810807][T30230]  kasan_save_track+0x3e/0x80
[  430.812765][T30230]  kasan_save_free_info+0x46/0x50
[  430.814924][T30230]  __kasan_slab_free+0x5b/0x80
[  430.817017][T30230]  kmem_cache_free+0x18f/0x400
[  430.819079][T30230]  xfrm_state_gc_task+0x52d/0x6b0
[  430.821254][T30230]  process_scheduled_works+0xae1/0x17b0
[  430.823584][T30230]  worker_thread+0x8a0/0xda0
[  430.825552][T30230]  kthread+0x711/0x8a0
[  430.827277][T30230]  ret_from_fork+0x3fc/0x770
[  430.829240][T30230]  ret_from_fork_asm+0x1a/0x30
[  430.831236][T30230] 
[  430.832189][T30230] The buggy address belongs to the object at ffff888120f7cd80
[  430.832189][T30230]  which belongs to the cache xfrm_state of size 928
[  430.837679][T30230] The buggy address is located 816 bytes inside of
[  430.837679][T30230]  freed 928-byte region [ffff888120f7cd80, ffff888120f7d120)
[  430.843297][T30230] 
[  430.844306][T30230] The buggy address belongs to the physical page:
[  430.846871][T30230] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120f7df80 pfn:0x120f7c
[  430.850747][T30230] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  430.854357][T30230] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  430.857321][T30230] page_type: f5(slab)
[  430.858809][T30230] raw: 057ff00000000040 ffff88801ab33dc0 dead000000000122 0000000000000000
[  430.861733][T30230] raw: ffff888120f7df80 00000000800e000a 00000000f5000000 0000000000000000
[  430.865025][T30230] head: 057ff00000000040 ffff88801ab33dc0 dead000000000122 0000000000000000
[  430.868659][T30230] head: ffff888120f7df80 00000000800e000a 00000000f5000000 0000000000000000
[  430.871846][T30230] head: 057ff00000000002 ffffea000483df01 00000000ffffffff 00000000ffffffff
[  430.875503][T30230] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  430.879188][T30230] page dumped because: kasan: bad access detected
[  430.881814][T30230] page_owner tracks the page as allocated
[  430.884188][T30230] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5925, tgid 5923 (syz.1.5), ts 46494059050, free_ts 46489672382
[  430.891815][T30230]  post_alloc_hook+0x240/0x2a0
[  430.893805][T30230]  get_page_from_freelist+0x21e4/0x22c0
[  430.896073][T30230]  __alloc_frozen_pages_noprof+0x181/0x370
[  430.898448][T30230]  alloc_pages_mpol+0x232/0x4a0
[  430.900467][T30230]  allocate_slab+0x8a/0x370
[  430.902353][T30230]  ___slab_alloc+0xbeb/0x1410
[  430.904287][T30230]  kmem_cache_alloc_noprof+0x283/0x3c0
[  430.906550][T30230]  xfrm_state_alloc+0x24/0x2f0
[  430.908518][T30230]  xfrm_add_sa+0x17d1/0x4070
[  430.910416][T30230]  xfrm_user_rcv_msg+0x7a3/0xab0
[  430.912442][T30230]  netlink_rcv_skb+0x208/0x470
[  430.914416][T30230]  xfrm_netlink_rcv+0x79/0x90
[  430.916387][T30230]  netlink_unicast+0x82f/0x9e0
[  430.918380][T30230]  netlink_sendmsg+0x805/0xb30
[  430.920425][T30230]  __sock_sendmsg+0x21c/0x270
[  430.922432][T30230]  ____sys_sendmsg+0x505/0x830
[  430.924468][T30230] page last free pid 5853 tgid 5853 stack trace:
[  430.927087][T30230]  __free_frozen_pages+0xbc4/0xd30
[  430.929214][T30230]  __slab_free+0x303/0x3c0
[  430.931131][T30230]  qlist_free_all+0x97/0x140
[  430.933048][T30230]  kasan_quarantine_reduce+0x148/0x160
[  430.935242][T30230]  __kasan_slab_alloc+0x22/0x80
[  430.937307][T30230]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  430.939589][T30230]  getname_flags+0xb8/0x540
[  430.941494][T30230]  user_path_at+0x24/0x60
[  430.943341][T30230]  do_utimes+0x131/0x2a0
[  430.945105][T30230]  __x64_sys_utimensat+0x14f/0x230
[  430.947235][T30230]  do_syscall_64+0xfa/0x3b0
[  430.949146][T30230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.951634][T30230] 
[  430.952643][T30230] Memory state around the buggy address:
[  430.954936][T30230]  ffff888120f7cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  430.958227][T30230]  ffff888120f7d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  430.961520][T30230] >ffff888120f7d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  430.964729][T30230]                                      ^
[  430.967073][T30230]  ffff888120f7d100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  430.970254][T30230]  ffff888120f7d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  430.973621][T30230] ==================================================================
[  430.977221][T30230] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  430.980139][T30230] CPU: 1 UID: 0 PID: 30230 Comm: syz.2.6262 Not tainted syzkaller #0 PREEMPT(full) 
[  430.983910][T30230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  430.987157][T30230] Call Trace:
[  430.988309][T30230]  <TASK>
[  430.989513][T30230]  dump_stack_lvl+0x99/0x250
[  430.991048][T30230]  ? __asan_memcpy+0x40/0x70
[  430.992510][T30230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  430.994404][T30230]  ? __pfx__printk+0x10/0x10
[  430.996291][T30230]  vpanic+0x281/0x750
[  430.997919][T30230]  ? __pfx_vpanic+0x10/0x10
[  430.999806][T30230]  ? rcu_is_watching+0x15/0xb0
[  431.001759][T30230]  panic+0xb9/0xc0
[  431.003308][T30230]  ? __pfx_panic+0x10/0x10
[  431.005143][T30230]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  431.007484][T30230]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  431.009979][T30230]  ? __xfrm_state_insert+0x8af/0x1450
[  431.012202][T30230]  check_panic_on_warn+0x89/0xb0
[  431.014260][T30230]  ? __xfrm_state_insert+0x8af/0x1450
[  431.016493][T30230]  end_report+0x78/0x160
[  431.018241][T30230]  kasan_report+0x129/0x150
[  431.020157][T30230]  ? __xfrm_state_insert+0x8af/0x1450
[  431.022383][T30230]  __xfrm_state_insert+0x8af/0x1450
[  431.024541][T30230]  xfrm_state_insert+0x54/0x60
[  431.026555][T30230]  ipcomp6_init_state+0x655/0x900
[  431.028628][T30230]  __xfrm_init_state+0xa76/0x13f0
[  431.030726][T30230]  ? __xfrm_init_state+0x7ef/0x13f0
[  431.032863][T30230]  xfrm_init_state+0x18/0xa0
[  431.034706][T30230]  pfkey_add+0x1d38/0x2e00
[  431.036611][T30230]  ? __pfx_pfkey_add+0x10/0x10
[  431.038621][T30230]  ? kmem_cache_free+0x18f/0x400
[  431.040421][T30230]  pfkey_sendmsg+0xbfe/0x1090
[  431.041955][T30230]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  431.043608][T30230]  ? plist_check_list+0x30f/0x330
[  431.045262][T30230]  ? aa_sock_msg_perm+0xf1/0x1d0
[  431.046865][T30230]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  431.048529][T30230]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  431.050300][T30230]  __sock_sendmsg+0x21c/0x270
[  431.052033][T30230]  ____sys_sendmsg+0x52d/0x830
[  431.053557][T30230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.055252][T30230]  ? import_iovec+0x74/0xa0
[  431.056724][T30230]  ___sys_sendmsg+0x21f/0x2a0
[  431.058258][T30230]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.059933][T30230]  ? __pfx_futex_wake_mark+0x10/0x10
[  431.061839][T30230]  ? __fget_files+0x2a/0x420
[  431.063337][T30230]  ? __fget_files+0x3a0/0x420
[  431.065022][T30230]  __sys_sendmmsg+0x227/0x430
[  431.066878][T30230]  ? __pfx___sys_sendmmsg+0x10/0x10
[  431.068720][T30230]  ? do_futex+0x333/0x420
[  431.070265][T30230]  ? fdget+0x184/0x1e0
[  431.071664][T30230]  ? __pfx___se_sys_futex+0x10/0x10
[  431.073460][T30230]  ? fd_install+0x30d/0x540
[  431.074911][T30230]  __x64_sys_sendmmsg+0xa0/0xc0
[  431.076555][T30230]  do_syscall_64+0xfa/0x3b0
[  431.078060][T30230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.080170][T30230]  ? exc_page_fault+0x9f/0xf0
[  431.081682][T30230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.083802][T30230] RIP: 0033:0x7f025d58ebe9
[  431.085562][T30230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.092089][T30230] RSP: 002b:00007f025e42a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  431.094676][T30230] RAX: ffffffffffffffda RBX: 00007f025d7b5fa0 RCX: 00007f025d58ebe9
[  431.097174][T30230] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000005
[  431.099663][T30230] RBP: 00007f025d611e19 R08: 0000000000000000 R09: 0000000000000000
[  431.102218][T30230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  431.104694][T30230] R13: 00007f025d7b6038 R14: 00007f025d7b5fa0 R15: 00007ffe5f42e0d8
[  431.107264][T30230]  </TASK>
[  431.109214][T30230] Kernel Offset: disabled
[  431.110917][T30230] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:30:07  Registers:
info registers vcpu 0

CPU#0
RAX=b51b59464e16a700 RBX=ffffffff819683b8 RCX=b51b59464e16a700 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f025d7362b0 CR3=0000000038d0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0005000880020004 000063657363616d
XMM02=00007f1af2f87498 00007f1af2f87470 XMM03=00007f1af2f874a8 00007f1af2f874a0
XMM04=00007f1af3aed100 00007f1af2f87460 XMM05=00007f1af2f87478 00007f1af2f874c0
XMM06=00007f1af2f874b8 00007f1af2f874b0 XMM07=00007f1af2f874a8 00007f1af2f874a0
XMM08=0000000000000000 00007f1af2e12ee7 XMM09=0000000000000000 00007f1af2e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000124d RDI=000000000000124e RBP=00000000000003f8 RSP=ffffc90002f5ecb0
R8 =ffff888106e88237 R9 =1ffff11020dd1046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8f9 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f025e42a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01f25362b0 CR3=000000001c2c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f025d787498 00007f025d787470 XMM03=00007f025d7874a8 00007f025d7874a0
XMM04=00007f025e2ed100 00007f025d787460 XMM05=00007f025d787478 00007f025d7874c0
XMM06=00007f025d7874b8 00007f025d7874b0 XMM07=00007f025d7874a8 00007f025d7874a0
XMM08=0000000000000000 00007f025d612ee7 XMM09=0000000000000000 00007f025d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
