last executing test programs:

6.292202273s ago: executing program 1 (id=10650):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2c0, 0x178, 0x178, 0x2c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffd, 0x8, 0x1, 'syz0\x00'}}, @common=@unspec=@cgroup0={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x9}]}}, @common=@icmp={{0x28}, {0xb, "17e4"}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3b8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
socket$inet6(0xa, 0x805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x24, 0x0, 0xdf, 0xe8}, 0x10)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xb], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251a000000060009000000000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044)

6.233559281s ago: executing program 1 (id=10652):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2fcb", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64], 0x7c}}, 0x8000)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4, "14655b50"}, &(0x7f0000000180)=0x2c)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={<r3=>0x0, 0x1000}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380)={r3, 0x4}, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.latency\x00', 0x2, 0x0)
close(0xffffffffffffffff)
r4 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x3, r5, 0x1, 0x1, 0x6, @broadcast}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000240), &(0x7f0000000280)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851)

6.119495139s ago: executing program 1 (id=10656):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1", @ANYRES8=<r1=>0x0], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb430500017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0xfc, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c266"}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x98}, 0x1, 0x0, 0x0, 0x4044895}, 0x4048010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x66000080)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
r11 = accept4$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
ppoll(&(0x7f0000000180)=[{r9, 0x8400}, {r10, 0x80}, {r4, 0x8000}, {r11, 0x1050}, {0xffffffffffffffff, 0x260}, {r6, 0x1}, {r2, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r8, 0x3}, &(0x7f00000000c0)=0x8)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r4, r5, 0x0, 0xffffffff004)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0)={0xe440, 0x7fffffff, 0xffffffff, 0xfffffffb, 0xfffffffc}, 0x14)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r12, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.042656372s ago: executing program 2 (id=10669):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x35}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x48806}, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0xc814)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="185400000100000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r5)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20010}, 0x24004001)
sendmsg$nl_route(r5, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20024090)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$xdp(0x2c, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044720000002c0002800800014000000009080002400000000008000440000000000800034000000000080005400000000b0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0)

971.676886ms ago: executing program 2 (id=10672):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000340)='5', 0x1}], 0x2}, 0x200048d0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
recvmsg$can_raw(r1, &(0x7f0000000840)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/70, 0x46}, {&(0x7f0000000780)}], 0x5}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r4}, 0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x10001}, &(0x7f0000000180)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800)

812.824167ms ago: executing program 1 (id=10675):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4)
sendmmsg$inet6(r4, &(0x7f00000004c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x6000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x89}}}], 0x18}}], 0x1, 0x4)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048850}, 0x8840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800)

722.057107ms ago: executing program 1 (id=10678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)

720.833456ms ago: executing program 1 (id=10680):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r5, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r6}, &(0x7f0000000080)=0x8)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r7, 0x3)
accept4(r7, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
getsockopt(r0, 0x28, 0x81, 0x0, &(0x7f0000000040))

352.954146ms ago: executing program 0 (id=10686):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x28, 0x1, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000000))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)=r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4040851}, 0x0)

273.315037ms ago: executing program 0 (id=10687):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000"], 0x160}}, 0x0)

222.770049ms ago: executing program 0 (id=10688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="05000000010006", 0x7)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0)

138.37957ms ago: executing program 0 (id=10689):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x2, 0x3, 0x0, 0x3}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmmsg$inet(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x4000)
openat$cgroup_ro(r8, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r7, @ANYRESHEX=r3], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESDEC=r10, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES16=r0], 0x3c}}, 0x4080)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

129.591567ms ago: executing program 0 (id=10690):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000b00000014000100fe8017eeff03a45cef67079901e6b40b"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000fde100007d01ff020000000000000000000000000001"], 0xfdef)

72.684534ms ago: executing program 2 (id=10691):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0)

71.820376ms ago: executing program 2 (id=10692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'bond_slave_0\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x8}, {0x0, 0x5, 0x4}, {0x0, 0x2, 0x1}, 0x98, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [0x0, 0xffffff00], 'wg1\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x7ff, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c885}, 0x8004)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf251a000000060009000000000008000300", @ANYRES32=r7, @ANYBLOB="504d7cdaec196c530a5ae99103b0c1d7af"], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044)

3.238681ms ago: executing program 2 (id=10693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@newtaction={0x1544, 0x32, 0x3f, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x1530, 0x1, [@m_police={0x152c, 0x1, 0x0, 0x0, {{0xb}, {0x1500, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x7, 0x6, 0x4, 0x1000, 0x0, 0x0, 0x4, 0x8, 0xffffffc1, 0x8, 0xfffffffc, 0x0, 0x491, 0x8, 0x8, 0x545, 0x2, 0x7ff, 0x200, 0x8001, 0x3, 0x8, 0x1, 0x9, 0x10, 0x7, 0x9, 0x4, 0x9, 0x6, 0x9, 0x7, 0x3, 0x81, 0x4, 0x2, 0x2, 0x1, 0x1, 0xf96f, 0x4, 0x7, 0xffffffff, 0x1, 0x101, 0x60000000, 0x9, 0x7f, 0x4, 0x40, 0x6, 0x10, 0xffffffff, 0xffff, 0x3, 0x6, 0x401, 0x3, 0x10, 0xffffd40b, 0x1, 0x6, 0x55, 0x400, 0x9, 0x7, 0x4, 0x800, 0x7, 0x3, 0x900, 0x6, 0x7fff, 0x4, 0xfffffff9, 0x8, 0xf2cf, 0x1, 0x2, 0x6, 0x1, 0xd326, 0x5, 0x7, 0x10000, 0xff, 0x3, 0x6, 0x62d3bd3e, 0x6, 0xe, 0x8, 0xa, 0x10001, 0x2, 0x40, 0xe4d, 0x80000000, 0x265, 0xffffff38, 0x4, 0xe, 0x100, 0x1ff, 0x40, 0xc9, 0x3, 0xfffffeff, 0x6, 0x4, 0x1, 0x4, 0x3, 0x7, 0xe8, 0xfaa, 0x3, 0x7, 0x81, 0x4, 0x3, 0x5, 0x9, 0x3ec6, 0x80, 0x2, 0xffffffff, 0x5, 0x7, 0xd, 0x2, 0x1, 0x1ff, 0x85da00, 0xa0, 0x63dc, 0xfffffffa, 0x40, 0x3, 0x0, 0x9, 0x70bb, 0x5, 0x863, 0x33ea, 0x11, 0x6, 0x551c, 0x9, 0x7, 0x2, 0x10001, 0x0, 0xfff, 0x9, 0x3, 0xffe, 0x4, 0x80000000, 0xffff, 0x8, 0x30bcb8f2, 0x6, 0x1, 0xae77548, 0x5, 0x6, 0xd5f8, 0x1, 0x7, 0x6, 0x0, 0x6, 0x7fffffff, 0x5, 0x4, 0x4, 0x80000000, 0xeb3, 0x800, 0x40, 0x0, 0x7, 0xa, 0x10000, 0x5, 0x8000, 0xfffffd00, 0x3111, 0xb, 0x681, 0x119, 0x101, 0x9, 0x2, 0x80000000, 0xfffffd29, 0x200, 0x80000001, 0x5, 0x8, 0xfffffffb, 0x3, 0x7, 0x4, 0x0, 0x9, 0x80000000, 0x832, 0x40, 0x10, 0x80000, 0x4c, 0x9, 0xf, 0x5, 0x1000, 0x65, 0x9, 0x6c, 0x4, 0x1, 0x200, 0x0, 0x9, 0x8e2, 0x200, 0x89e0, 0xc775, 0x4, 0x4, 0x817, 0xb, 0x5, 0x10001, 0x5f, 0x8001, 0x8e, 0x5f, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x8, 0xfeed, 0x6, 0x8, 0x2, 0x3, 0x7, 0x6, 0x3, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x8, 0xb0, 0x5, 0x9, {0x8, 0x1, 0x2, 0x37, 0x9000, 0x5}, {0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffff8}, 0xffffef4f, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x1, 0x8, 0x1, {0x6f, 0x0, 0x7ccd, 0x1, 0x1, 0x7bd2762c}, {0x5, 0x2, 0x6, 0x4, 0x9, 0xd15}, 0x8, 0xf18, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x401, 0x8, 0x40, 0x1, 0x3, 0xffff, 0x3, 0xfffff801, 0x5, 0x4, 0x9, 0x5, 0x7, 0x5, 0x9, 0x100, 0x0, 0x5, 0xc, 0x0, 0x6, 0x5, 0xd, 0x8, 0xb8, 0x6, 0x8ab6, 0x4, 0xb7, 0xffffffff, 0x7ff, 0x6, 0x0, 0x7fff, 0x1, 0x8000, 0x7ff, 0x8, 0x339, 0x7fff, 0x0, 0x55c7eab0, 0x5, 0xfe3d, 0x5, 0x3f, 0x2, 0x7ff, 0x0, 0x101, 0xfffffff5, 0xdb22, 0x7, 0x6, 0x6, 0x7, 0x8, 0x100, 0x0, 0xffff0001, 0x1, 0xffffffff, 0x81, 0x7, 0x1ff, 0x71a, 0x0, 0x1, 0x9b, 0xaa, 0x4, 0x5, 0x7d1d, 0x5, 0x10, 0x95, 0xfffffffe, 0x8, 0x5, 0x5, 0x0, 0x3, 0x7fffffff, 0x0, 0x0, 0x100, 0x0, 0x6, 0x14000, 0x9, 0xffff, 0x8, 0x5, 0x42, 0x0, 0xff, 0x40, 0x1, 0x0, 0x80000001, 0x1, 0x6, 0x0, 0x3, 0xf, 0x4, 0x10, 0x5, 0x0, 0x0, 0x1, 0x400, 0x0, 0x4, 0x1c, 0x7ff, 0x1000, 0x4, 0xe789, 0x1, 0x2, 0x5, 0x7, 0xfffffffd, 0xfb4, 0x4, 0x656, 0x0, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x9, 0xa, 0xa90a, 0x9, 0x3, 0x10, 0x9, 0x8, 0xfffffffc, 0x5, 0x5, 0x2, 0x7, 0x8, 0x80000000, 0x5, 0xa1ad, 0x0, 0x7f, 0x80, 0x6, 0x7fff, 0x8001, 0x4, 0x80000001, 0xf2, 0x2, 0x7, 0x80000000, 0xe, 0x1, 0x80, 0x0, 0x1, 0xfffffffd, 0x8, 0x7, 0x3a250, 0xdd8, 0xc846, 0x10, 0x4, 0x6, 0x6, 0x30a, 0x1, 0x2, 0x4d, 0x2, 0x0, 0x2, 0x9, 0x101, 0x2, 0x0, 0x5, 0x400, 0x800, 0x2, 0x68762bb4, 0x0, 0xf3d2, 0x0, 0x8, 0x5, 0xffffffff, 0x3ff, 0x496a, 0x3, 0x5, 0x8, 0x9, 0x6, 0x8, 0x4800, 0x5, 0x0, 0x40, 0x6, 0x3, 0x401, 0x2, 0x200, 0x8, 0x8, 0xefe7, 0x7fffffff, 0x4, 0xa0000000, 0x2, 0x40000000, 0x4, 0x3, 0x1, 0x0, 0x9, 0x5, 0x5, 0x0, 0x6, 0x1c, 0x2dcd, 0x40, 0xf2af, 0x8, 0x7, 0x4, 0x4f, 0xff, 0xa9e, 0xfffffffd, 0x2, 0x7, 0x5, 0x2, 0xaa9b, 0x918, 0x6, 0xfffffffe, 0xfffffffd, 0xfc, 0x4fc3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe2, 0x0, 0x7, 0x0, 0x4, 0x2, 0xf2c1, 0x81, 0x4, 0x0, 0x4, 0x1, 0x2, 0xf9d9, 0xe, 0x9, 0x10000, 0xa89, 0x1, 0xffffffd4, 0xfffffff0, 0x2, 0x0, 0x0, 0x7, 0xffffffff, 0x8, 0x6, 0x4, 0x10, 0x1, 0x10000, 0x9, 0x5, 0x7, 0x3ff, 0x9, 0x7, 0xb, 0x0, 0x3, 0x7, 0x7, 0x7, 0x97c7, 0xffff, 0x400, 0x1, 0x8625, 0xf, 0x5e, 0x9, 0x4857, 0x7, 0x0, 0xc, 0x5, 0x8, 0x1, 0x4d8a, 0x1, 0xfffffe00, 0x9, 0x1, 0xdbf, 0x817, 0xf81, 0xf, 0x2, 0x1, 0x1eca, 0x7, 0x5, 0x1, 0x0, 0x3, 0xfffffff0, 0x49, 0x8000, 0x3, 0x7, 0x4, 0x5f2, 0x1, 0x101, 0x1, 0x7fff, 0x6, 0x7fffffff, 0xf2, 0x8001, 0x81, 0x5, 0x0, 0x54, 0x5, 0x8, 0x2593, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfffffffb, 0xffffff08, 0x9, 0x5, 0xe0, 0x3, 0x6, 0x0, 0x0, 0x8ea, 0x8, 0xffff, 0x4, 0x0, 0x9, 0x0, 0x4, 0x0, 0x100, 0xc, 0x4, 0x3, 0x7, 0x9, 0x1, 0x8, 0x4, 0x1, 0x69, 0x20000, 0x5, 0x1, 0xfff, 0x10000, 0x8, 0x7, 0x1, 0x1, 0x101, 0x6, 0x2, 0x7, 0x5, 0xc, 0x7, 0x8, 0x2, 0xc, 0x1, 0x3, 0x6, 0x100, 0x8, 0x156, 0xc68, 0x80000000, 0xfffffff7, 0x80000000, 0x2f2499d0, 0x8, 0x8, 0x2, 0x1, 0xe, 0x6, 0x4, 0x0, 0x9, 0x5, 0x3ff, 0xfffffffe, 0x7fffffff, 0x4, 0x7, 0x7fffffff, 0x2, 0x1, 0x7, 0x9, 0xa8, 0x4, 0x8, 0x8be, 0xb, 0x8, 0x5, 0x9, 0x0, 0x9, 0x8, 0x8, 0x6, 0x394a, 0x2, 0x8000, 0x2, 0x6, 0xf, 0x0, 0x2, 0x7c73, 0x5, 0x3, 0x200, 0x101, 0x10001, 0x4, 0x4, 0x2, 0xf, 0x2, 0x5, 0x5, 0x2, 0x6, 0x4, 0xfff, 0x2, 0x6, 0x70d0, 0x7ff, 0x9, 0x3, 0x9, 0x7, 0x1, 0x7ff, 0x2, 0x3, 0xff, 0x7, 0x63b9, 0xc, 0x9, 0x40, 0x2, 0x3a800000, 0x6, 0xffff, 0x80000001, 0x6, 0xffffffff, 0xf6c8, 0x2, 0x1, 0x9d, 0x3, 0x3, 0x9, 0xf6, 0x3, 0x5, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x36, 0x8001, 0x1, 0x27d3, 0x5, 0xc, 0x3e1b, 0x401, 0x200, 0x9, 0x1, 0x5a83, 0x9, 0x8, 0x5, 0x4, 0xffff0001, 0x10001, 0x13, 0xf799, 0x6, 0xe, 0x3, 0x6, 0x4, 0x6bf0, 0x3, 0x9, 0x8000, 0xb2, 0x371, 0xa, 0x6178, 0x330f847a, 0x1ff, 0x8, 0x232c, 0xb6, 0x0, 0x800, 0x80000000, 0x6, 0x1, 0x80, 0x7, 0x9, 0x6f0, 0x3, 0xddf4, 0xfffffffd, 0xb3, 0x0, 0x40, 0x3, 0xa, 0xc3, 0x8, 0x3, 0x1693, 0xbf9, 0x7, 0x9, 0x7, 0x0, 0x2, 0x9, 0x10001, 0xb9, 0xfffffffe, 0x40, 0x3, 0x6, 0x9, 0x8f, 0x1c00000, 0x6, 0x560, 0x8, 0x1, 0x25df36a2, 0x7, 0x8, 0xfda, 0x1, 0x7, 0xc, 0x401, 0x0, 0x120, 0x5, 0x0, 0x10001, 0x80000000, 0x6, 0x1, 0x3, 0x5e796b49, 0x5, 0x7fff, 0x8, 0x8, 0x0, 0x8, 0x8, 0xffffffff, 0xffffff00, 0x2, 0x3247, 0xa8a, 0x7, 0x0, 0x4, 0x3, 0x4, 0x4a8, 0x3, 0x9, 0x10000, 0x2a02, 0xf, 0x9, 0x800, 0xe3ac, 0x6, 0x8000, 0x97, 0x6, 0x1, 0x1, 0xfff, 0x5, 0x184, 0x2, 0x1, 0x4, 0x7f, 0x9, 0xffff7fff, 0x3, 0x4, 0xa000000, 0x8, 0x40, 0x1, 0x6, 0xd43, 0x70d4, 0x400, 0xe, 0x2, 0x6, 0x7d, 0x10001, 0x9565, 0x5, 0xa5, 0xf, 0x5, 0x1, 0xab34008, 0x7, 0xc, 0x4, 0xda5, 0x317, 0x8300, 0x0, 0x2, 0x5, 0x7, 0xff, 0x2, 0x9, 0x5, 0x81, 0x80000000, 0x2eb, 0x5b, 0x100, 0x8001, 0x7, 0x10, 0x8, 0x871c, 0xfffffff8, 0x9, 0x5, 0x5, 0x8001, 0x3, 0x5, 0x58, 0xfffffbff, 0x9, 0x0, 0x100, 0x2, 0x80000001, 0x80000000, 0x1, 0x8, 0x3, 0x4, 0x3, 0x9, 0x2, 0xfffff801, 0x1, 0x5, 0x8, 0xdf73328, 0x2, 0x0, 0x2, 0x7, 0x0, 0x2, 0xeda, 0x8, 0xb07d, 0x5a, 0x2, 0xfffffffb, 0x63a, 0xfd1, 0x64, 0xc, 0xfffffffb, 0xf, 0x2, 0x1bc, 0x8, 0xa0000000, 0xffffffff, 0x8, 0x200, 0x28, 0x1, 0x6, 0x55d, 0x0, 0x3, 0x7ff, 0x5, 0x7, 0x4, 0x6427, 0x4, 0x8, 0x7, 0x2, 0xa3c, 0x2, 0x9, 0xffff05df, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x8001, 0x6, 0x101, 0x0, 0x5, 0x0, 0x49858000, 0x1ff, 0x98ed, 0xae99, 0x7fff, 0x46, 0x7, 0x1, 0x7, 0x7fffffff, 0x7fffffff, 0x0, 0x8000, 0x0, 0x8, 0x8, 0x7fffffff, 0x7, 0x8, 0x5, 0x7, 0x9, 0x85, 0x7fff, 0x71, 0x81, 0x3, 0x5, 0x81, 0xfbec, 0x8, 0x5, 0x7fff, 0x0, 0x7, 0x49b0, 0xfffffffa, 0x4, 0x661a, 0x9, 0x8, 0xfff, 0x5af8, 0x7f, 0xf1b, 0x5, 0x1, 0x2, 0x80000000, 0x8, 0x4, 0x5, 0x8001, 0x6bf, 0xd, 0xb, 0x2, 0x4b89, 0xaf, 0x2, 0x0, 0x2, 0x4db, 0x883, 0x2, 0x2, 0x5, 0x101, 0x6, 0x5, 0x1, 0xfffffffb, 0x0, 0x7, 0x5, 0x700000, 0x4, 0x5, 0xd3, 0x3, 0x7, 0x10, 0xa, 0x0, 0x3, 0x1, 0x2, 0x8, 0x2, 0xfdd3, 0x6, 0xf, 0x2b, 0x3, 0x7, 0xbf1f, 0x8, 0xe, 0xfff, 0x3, 0xffffffff, 0xfffffff9, 0x52, 0xfffffffa, 0x4, 0x180, 0xf9e, 0x0, 0x8000, 0x9, 0xe, 0x2, 0xb, 0x36, 0x2, 0x5, 0x1, 0x6, 0x4, 0x8, 0x10000, 0x40, 0x0, 0x1, 0x9, 0x6, 0x8000, 0x8, 0x0, 0xf775, 0x0, 0x0, 0x6, 0x3ff, 0x6, 0xff, 0x7, 0x81, 0xb5b, 0x1, 0xffffff00, 0xc, 0x7, 0x4, 0x372, 0x1, 0xbf, 0x3, 0x401, 0x1, 0x1e3, 0x0, 0x3, 0x5, 0x800, 0x6e, 0x7, 0x90000000, 0x5, 0x8a96, 0x3, 0x3, 0x41, 0x0, 0xf1, 0x4, 0x3, 0x5, 0x3, 0x5, 0x7f, 0x52, 0xd68, 0x5, 0x3, 0x7ff, 0x3, 0x7f, 0x506, 0x308000, 0x1, 0xee4, 0x9, 0x2, 0x3, 0x4, 0x1, 0xfff, 0xfff, 0x2, 0x3, 0xc0, 0x6, 0x6, 0x0, 0xe548, 0x3, 0x5, 0x7fff, 0x5000, 0x1, 0x81, 0x8, 0x80000000, 0x93, 0x288c1d79, 0xd34, 0x1000, 0x7, 0xfff, 0xffff8000, 0x40, 0x9, 0x550f, 0x1, 0x6f, 0x0, 0xfffffffc, 0x4, 0x42, 0xb, 0xf6, 0x7, 0x8f, 0x2, 0x9, 0x1, 0x9, 0x9, 0xb, 0x1ff, 0x1, 0x8, 0x0, 0x4, 0x2, 0x7, 0x1, 0x0, 0x2, 0x87, 0xd5, 0x8, 0x1, 0x8, 0x1588, 0x5, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x654}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3e4f}]]}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x1544}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

788.79µs ago: executing program 2 (id=10694):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xc7, 0x1}, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffff"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000ffff00000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000200000023000000080026003c14000008009f00"], 0x40}, 0x1, 0x0, 0x0, 0x9d26f8fcf5795660}, 0x4040000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080), 0x6)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

0s ago: executing program 0 (id=10695):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7ff}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x15}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x98}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c000}, 0x80)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1dc, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x120, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xe8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x29db}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x63}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6fd2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xb0e1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}, @NL80211_ATTR_MAC={0xa, 0x6, @random="42d3c5b550b3"}]}, 0x54}, 0x1, 0x0, 0x0, 0x215751702c6a33ce}, 0x20040000)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48041)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c040}, 0x20000000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x67}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x95d7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x80)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xec, r8, 0x24, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dbusd_etc_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x6000a000)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$XFS_IOC_BULKSTAT(r11, 0x8040587f, &(0x7f0000001500)={{0x2, 0x1, 0x3, 0x6, 0x7000}, &(0x7f0000001140)=[{}, {}, {}, {}, {}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000015c0)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=@gettfilter={0x44, 0x2e, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xffe0, 0xffff}, {0xb, 0x9}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r13, 0x20, 0x81, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20048040)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000001b40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x22c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "835a49f473d2eeafe9c4da34f1df4eec23bc9d36f84c307c"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0a4e4a70aa46e2e8d2adb74d31bbad6fb9af7b89dd9cf119"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab1522bdad68d1006f10680c8b8659b410ae8db57efdb633"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "084362aae9ba73556946ce204c95dc0bc3a93dea3f34e7e5"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b3adda125f9a7d344ec65186b2b80fc8dadf25d406ebe5f6"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2607e1da2fa78e191b5f955a829c4f85cc493f67c4a68a9f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3cfb012b88c72b103ef6ac79124907098c38c064d4e932ea"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2b1a386cc0747e27375b532afdaadd8140884708bb1e931a"}]]}, 0x22c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

kernel console output (not intermixed with test programs):

 tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  370.191532][T22868] netlink: 'syz.2.7066': attribute type 3 has an invalid length.
[  370.272040][T22878] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  370.324842][T22886] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  371.370075][T22934] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  371.447063][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  371.478619][T22938] syzkaller0: entered promiscuous mode
[  371.480485][T22938] syzkaller0: entered allmulticast mode
[  371.548848][T22941] block nbd2: server does not support multiple connections per device.
[  371.552314][T22941] block nbd2: shutting down sockets
[  371.557667][T22938] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  372.244198][T22998] __nla_validate_parse: 19 callbacks suppressed
[  372.244211][T22998] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7103'.
[  372.351023][T23013] netlink: 'syz.1.7108': attribute type 83 has an invalid length.
[  372.376193][T23009] netlink: 'syz.2.7106': attribute type 1 has an invalid length.
[  372.387774][T23009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7106'.
[  372.390751][T23009] netlink: 'syz.2.7106': attribute type 1 has an invalid length.
[  372.408588][T23009] syzkaller1: entered promiscuous mode
[  372.413517][T23009] syzkaller1: entered allmulticast mode
[  372.610078][T23029] syzkaller0: entered promiscuous mode
[  372.619524][T23029] syzkaller0: entered allmulticast mode
[  372.904648][T23042] syzkaller0: entered promiscuous mode
[  372.907843][T23042] syzkaller0: entered allmulticast mode
[  372.970944][T23047] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7119'.
[  373.102815][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7121'.
[  373.147651][T23059] netlink: 'syz.0.7123': attribute type 1 has an invalid length.
[  373.176530][T23059] 8021q: adding VLAN 0 to HW filter on device bond7
[  373.334060][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7129'.
[  373.654000][T23100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7138'.
[  373.962805][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7144'.
[  373.975407][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7143'.
[  373.975903][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7144'.
[  374.155236][T23137] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.7146'.
[  374.407545][ T6941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  374.707040][T23183] syzkaller0: entered promiscuous mode
[  374.709950][T23183] syzkaller0: entered allmulticast mode
[  375.367357][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[  377.371111][T23232] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7178'.
[  378.058747][T23215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  378.131587][T23238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7179'.
[  378.296731][T23250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7184'.
[  378.420286][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7189'.
[  378.436156][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7189'.
[  378.518657][T23280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.522333][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7194'.
[  378.525486][T23280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7194'.
[  378.530149][T23276] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7193'.
[  378.542918][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7193'.
[  378.564175][T23287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7195'.
[  378.674284][T23297] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  378.690198][T23297] bond8: (slave lo): Enslaving as an active interface with an up link
[  378.701813][T23297] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  378.840196][T23309] syzkaller0: entered promiscuous mode
[  378.844572][T23309] syzkaller0: entered allmulticast mode
[  379.109524][T23331] sctp: [Deprecated]: syz.1.7204 (pid 23331) Use of int in maxseg socket option.
[  379.109524][T23331] Use struct sctp_assoc_value instead
[  379.259102][T23345] netlink: 'syz.1.7210': attribute type 1 has an invalid length.
[  379.267141][T23345] netlink: 'syz.1.7210': attribute type 2 has an invalid length.
[  379.527142][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  379.528769][ T6943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  379.535571][ T6952] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  381.646507][T23488] netlink: 'syz.2.7255': attribute type 21 has an invalid length.
[  381.650810][T23488] netlink: 'syz.2.7255': attribute type 4 has an invalid length.
[  381.653465][T23488] netlink: 'syz.2.7255': attribute type 5 has an invalid length.
[  381.669195][T23486] pimreg: entered allmulticast mode
[  381.743162][T23485] pimreg: left allmulticast mode
[  381.910659][T23517] syzkaller0: entered promiscuous mode
[  381.913222][T23517] syzkaller0: entered allmulticast mode
[  381.990551][T23526] tipc: Bearer <ib:pim6reg1>: already 2 bearers with priority 10
[  381.997160][T23526] tipc: Bearer <ib:pim6reg1>: trying with adjusted priority
[  382.001361][T23526] tipc: Enabling of bearer <ib:pim6reg1> rejected, failed to enable media
[  382.368519][T23554] syzkaller0: entered promiscuous mode
[  382.370364][T23554] syzkaller0: entered allmulticast mode
[  382.414592][T23556] syzkaller0: entered promiscuous mode
[  382.417169][T23556] syzkaller0: entered allmulticast mode
[  382.733999][T23580] __nla_validate_parse: 11 callbacks suppressed
[  382.734046][T23580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7284'.
[  382.819606][T23590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7289'.
[  382.823291][T23590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7289'.
[  382.836843][T23593] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7290'.
[  382.943734][T23601] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  382.949411][T23601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.062676][T23601] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.065857][T23601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.158121][T23601] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.165596][T23601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.243366][T23601] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  383.246852][T23601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.352221][ T5657] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  383.354921][ T5657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.371707][ T5643] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  383.375341][ T5643] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.395438][ T5657] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  383.398235][ T5657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.412607][ T5657] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  383.420775][ T5657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.633989][T23650] netlink: 'syz.0.7305': attribute type 2 has an invalid length.
[  383.640760][T23650] netlink: 'syz.0.7305': attribute type 11 has an invalid length.
[  383.642148][T23641] lo speed is unknown, defaulting to 1000
[  383.651068][T23650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7305'.
[  383.941900][T23660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7309'.
[  383.945203][T23660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7309'.
[  383.956094][T23660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7309'.
[  384.234037][T23679] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7317'.
[  384.311859][T23686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.562104][T23704] netlink: 'syz.1.7325': attribute type 62 has an invalid length.
[  384.625564][T23708] netlink: 'syz.0.7326': attribute type 15 has an invalid length.
[  384.631670][T23708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7326'.
[  384.898610][T23725] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  384.903243][T23725] netlink: 'syz.1.7332': attribute type 2 has an invalid length.
[  385.290067][T23739] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  386.722240][T23830] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  386.748163][T23830] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  386.792583][T23830] tipc: Resetting bearer <eth:vlan0>
[  386.814401][T23836] netlink: 'syz.2.7361': attribute type 1 has an invalid length.
[  386.846356][T23832] vlan4: entered promiscuous mode
[  386.848838][T23832] bridge0: entered promiscuous mode
[  386.896487][ T5987] block nbd3: Receive control failed (result -32)
[  386.899138][   T56] block nbd3: Receive control failed (result -32)
[  386.914453][T23837] netlink: 'syz.2.7361': attribute type 1 has an invalid length.
[  386.940892][T23836] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  386.944891][T23836] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  387.017296][T23836] bond9: (slave bridge11): Enslaving as an active interface with a down link
[  387.026802][T23836] ip6gretap2: entered promiscuous mode
[  387.029800][T23836] ip6gretap2: entered allmulticast mode
[  387.033796][T23836] bond9: (slave ip6gretap2): making interface the new active one
[  387.040423][T23836] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link
[  387.530905][T23879] syzkaller1: entered promiscuous mode
[  387.533231][T23879] syzkaller1: entered allmulticast mode
[  387.748208][T23889] __nla_validate_parse: 13 callbacks suppressed
[  387.748230][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7381'.
[  387.767930][T23840] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  387.921362][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7383'.
[  387.949701][T23901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7384'.
[  387.955077][T23901] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7384'.
[  388.123028][T23914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7388'.
[  388.251874][T23922] netlink: 'syz.1.7391': attribute type 16 has an invalid length.
[  388.258131][T23922] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7391'.
[  388.309666][T23930] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7393'.
[  388.379994][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7396'.
[  388.627608][T23960] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7404'.
[  388.799639][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7406'.
[  388.850074][T23972] netlink: 'syz.2.7407': attribute type 29 has an invalid length.
[  388.853239][T23972] netlink: 'syz.2.7407': attribute type 29 has an invalid length.
[  388.855806][T23972] netlink: 'syz.2.7407': attribute type 29 has an invalid length.
[  388.858765][T23972] netlink: 'syz.2.7407': attribute type 29 has an invalid length.
[  388.967353][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[  389.120918][T23985] ipvlan2: entered allmulticast mode
[  389.123195][T23985] gretap0: entered allmulticast mode
[  389.433215][T24009] openvswitch: netlink: IPv4 tun info is not correct
[  389.863343][T24048] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  389.993839][T24065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.020056][T24066] openvswitch: netlink: Key 2 has unexpected len 2 expected 4
[  390.063313][T24070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.770907][T24117] validate_nla: 32 callbacks suppressed
[  390.770923][T24117] netlink: 'syz.2.7460': attribute type 4 has an invalid length.
[  390.783669][ T5915] lo speed is unknown, defaulting to 1000
[  390.788868][ T5915] sqz0: Port: 1 Link DOWN
[  390.791319][ T5915] lo speed is unknown, defaulting to 1000
[  390.882368][T24117] tipc: Resetting bearer <eth:xfrm0>
[  390.919710][ T5643] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.922713][ T5643] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.928914][ T5643] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  390.935283][ T5643] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  391.128659][T24138] batadv_slave_0: entered promiscuous mode
[  391.608749][T24185] netlink: 'syz.1.7482': attribute type 16 has an invalid length.
[  391.636286][T24185] netlink: 'syz.1.7482': attribute type 1 has an invalid length.
[  391.642002][T24185] netlink: 'syz.1.7482': attribute type 2 has an invalid length.
[  391.850449][T24126] batadv_slave_0: left promiscuous mode
[  391.853408][T24204] netlink: 'syz.1.7488': attribute type 11 has an invalid length.
[  392.275253][T24238] xt_hashlimit: overflow, try lower: 281474976710656/6
[  392.659211][T24199] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  392.967563][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  393.847277][ T5617] Bluetooth: hci0: command 0x0406 tx timeout
[  394.133402][T24252] xt_CONNSECMARK: invalid mode: 0
[  395.269673][T24238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.526018][T24295] __nla_validate_parse: 56 callbacks suppressed
[  395.526030][T24295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7514'.
[  395.662081][T24315] netlink: 264 bytes leftover after parsing attributes in process `syz.0.7521'.
[  396.189987][T24368] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7537'.
[  396.210580][T24371] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7538'.
[  396.516121][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7542'.
[  396.548995][T24385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7543'.
[  396.551837][T24385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7543'.
[  396.792206][T24408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7549'.
[  396.952181][T24421] netlink: 'syz.1.7553': attribute type 12 has an invalid length.
[  397.138642][T24429] netlink: 'syz.0.7555': attribute type 1 has an invalid length.
[  397.141243][T24429] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7555'.
[  397.894290][T24451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7561'.
[  401.298291][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  401.636164][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'.
[  402.354218][T24535] batman_adv: batadv0: Interface deactivated: ip6gretap0
[  402.387702][T24526] lo speed is unknown, defaulting to 1000
[  402.390790][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7580'.
[  402.395375][ T5643] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.405976][ T5643] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.412251][ T5643] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.418355][ T5643] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.423215][ T5643] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.429982][ T5643] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.434767][ T5643] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  402.440475][ T5643] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  402.539713][T24557] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7587'.
[  402.572737][T24557] bond9 (unregistering): Released all slaves
[  402.596864][T24559] bridge12: entered allmulticast mode
[  403.018174][T24585] gretap2: entered promiscuous mode
[  403.045684][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7599'.
[  403.096680][T24597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7602'.
[  403.106662][T24597] bond0: entered promiscuous mode
[  403.119133][T24597] bond0: left promiscuous mode
[  403.130655][T24598] netlink: 'syz.1.7597': attribute type 17 has an invalid length.
[  403.254246][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7605'.
[  403.258249][T24610] netlink: 'syz.2.7605': attribute type 32 has an invalid length.
[  403.299466][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7607'.
[  403.346480][T24620] syzkaller0: entered promiscuous mode
[  403.349117][T24620] syzkaller0: entered allmulticast mode
[  403.416162][T24613] bridge11: entered promiscuous mode
[  403.422236][T24613] bridge11: entered allmulticast mode
[  403.431533][T24613] team0: Port device bridge11 added
[  403.467183][T24613] bridge12: entered promiscuous mode
[  403.472621][T24613] bridge12: entered allmulticast mode
[  403.478302][T24613] team0: Port device bridge12 added
[  403.504694][T24613] bridge0: port 1(team0) entered blocking state
[  403.507732][T24613] bridge0: port 1(team0) entered disabled state
[  403.509960][T24613] team0: entered allmulticast mode
[  403.511975][T24613] bridge2: entered allmulticast mode
[  403.628344][T24641] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7611'.
[  403.638703][T24641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7611'.
[  403.705486][T24650] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  404.525789][T24661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7618'.
[  405.042726][T24705] syzkaller0: entered promiscuous mode
[  405.045211][T24705] syzkaller0: entered allmulticast mode
[  406.662082][T24851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.669329][T24851] __nla_validate_parse: 10 callbacks suppressed
[  406.669342][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7682'.
[  406.674794][T24851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7682'.
[  406.679004][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7682'.
[  406.682203][T24851] netlink: 'syz.0.7682': attribute type 5 has an invalid length.
[  406.692291][T24851] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7682'.
[  406.977877][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  406.980863][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  406.999208][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  407.005479][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  407.061398][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  407.064712][T24868] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7687'.
[  407.414632][T24906] nbd: must specify a size in bytes for the device
[  407.634490][T24919] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  408.058458][T24940] netlink: 'syz.1.7713': attribute type 11 has an invalid length.
[  408.322207][T24957] netlink: 'syz.2.7718': attribute type 1 has an invalid length.
[  408.422038][T24968] openvswitch: netlink: Flow actions attr not present in new flow.
[  409.041960][T25035] netlink: 'syz.1.7743': attribute type 8 has an invalid length.
[  409.202718][T25056] xt_hashlimit: size too large, truncated to 1048576
[  409.302822][T25068] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  409.382262][T25075] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  409.416012][T25079] ksmbd: Unknown IPC event: 1, ignore.
[  410.590901][T25141] sctp: [Deprecated]: syz.0.7779 (pid 25141) Use of int in max_burst socket option.
[  410.590901][T25141] Use struct sctp_assoc_value instead
[  411.495112][T25212] smc: net device team0 applied user defined pnetid SYZ2
[  411.504253][T25212] smc: net device team0 erased user defined pnetid SYZ2
[  411.663130][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.666722][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.694234][T25221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.780977][T25237] __nla_validate_parse: 22 callbacks suppressed
[  411.780989][T25237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7810'.
[  411.836473][T25246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7813'.
[  411.847241][T25246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7813'.
[  411.854929][T25246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7813'.
[  411.866469][T25249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7815'.
[  411.945201][T25254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7817'.
[  411.986647][T25259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7819'.
[  412.258928][T25283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7827'.
[  412.280081][T25283] bond13: entered promiscuous mode
[  412.285606][T25283] bond13: entered allmulticast mode
[  412.344100][T25285] netlink: 276 bytes leftover after parsing attributes in process `syz.2.7828'.
[  412.353646][T25298] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  412.604139][T25316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7837'.
[  412.660802][T25321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  412.814844][T25332] netlink: 'syz.0.7845': attribute type 16 has an invalid length.
[  412.871804][T25336] ipt_ECN: cannot use operation on non-tcp rule
[  413.131496][T25352] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  413.424182][T25361] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.429033][T25361] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.583777][T25372] sit0: entered promiscuous mode
[  413.586406][T25372] sit0: entered allmulticast mode
[  413.893582][T25390] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  413.896820][T25390] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  413.904143][T25390] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  414.288509][T25428] xt_l2tp: missing protocol rule (udp|l2tpip)
[  414.606623][T25456] netlink: 'syz.0.7890': attribute type 4 has an invalid length.
[  414.663222][T25458] IPVS: Scheduler module ip_vs_sip not found
[  414.713617][T25465] xt_CT: No such helper "syz1"
[  414.953275][T25488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.981414][T25488] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  414.991243][T25488] bond14: (slave lo): Enslaving as an active interface with an up link
[  414.994219][T25488] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  415.220642][T25503] syzkaller0: entered promiscuous mode
[  415.222674][T25503] syzkaller0: entered allmulticast mode
[  415.227850][T25503] IPVS: set_ctl: invalid protocol: 98 172.30.253.2:20000
[  415.535140][T25525] bond15: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  415.539344][T25525] bond15 (unregistering): Released all slaves
[  416.285348][T25574] syzkaller0: entered promiscuous mode
[  416.289059][T25574] syzkaller0: entered allmulticast mode
[  416.319974][T25576] netlink: 'syz.2.7928': attribute type 2 has an invalid length.
[  416.327466][T25576] netlink: 'syz.2.7928': attribute type 11 has an invalid length.
[  416.330048][T25582] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001
[  417.089394][T25634] syzkaller1: entered promiscuous mode
[  417.092700][T25634] syzkaller1: entered allmulticast mode
[  417.264862][T25643] x_tables: duplicate underflow at hook 2
[  417.268123][T25643] tipc: Can't bind to reserved service type 2
[  417.360183][T25647] veth1_macvtap: entered allmulticast mode
[  417.701036][T25677] __nla_validate_parse: 25 callbacks suppressed
[  417.701049][T25677] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7965'.
[  417.765913][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7966'.
[  418.172117][T25705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7975'.
[  418.221161][T25712] syzkaller0: entered promiscuous mode
[  418.223570][T25712] syzkaller0: entered allmulticast mode
[  418.235594][T25711] ip6t_REJECT: ECHOREPLY is not supported
[  418.640033][T25731] netlink: 'syz.2.7984': attribute type 1 has an invalid length.
[  418.660345][T25731] bond10: (slave bridge14): Enslaving as a backup interface with an up link
[  418.672879][T25731] macvlan4: entered promiscuous mode
[  418.674933][T25731] macvlan4: entered allmulticast mode
[  418.677623][T25731] bond10: entered promiscuous mode
[  418.679337][T25731] bridge14: entered promiscuous mode
[  418.681695][T25731] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  418.685623][T25731] bond10: left promiscuous mode
[  418.688462][T25731] bridge14: left promiscuous mode
[  418.700385][T25737] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  418.703447][T25737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.894878][T25760] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7991'.
[  418.910326][T25760] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  419.002610][T25772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7995'.
[  419.061304][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7997'.
[  419.065071][T25779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7997'.
[  419.161404][T25782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7998'.
[  419.174044][T25782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7998'.
[  419.254758][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8005'.
[  420.400512][T25913] netlink: 'syz.0.8039': attribute type 1 has an invalid length.
[  420.448872][T25913] bond9: entered promiscuous mode
[  420.451045][T25913] 8021q: adding VLAN 0 to HW filter on device bond9
[  420.508009][T25913] bond9: (slave bridge14): making interface the new active one
[  420.511136][T25913] bridge14: entered promiscuous mode
[  420.515229][T25913] bond9: (slave bridge14): Enslaving as an active interface with an up link
[  420.526802][T25923] xt_ecn: cannot match TCP bits for non-tcp packets
[  420.613640][T25927] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  423.129084][ T5615] Bluetooth: hci2: command 0x0405 tx timeout
[  423.129511][ T5617] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  423.142513][T26044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.145261][T26044] syzkaller0: entered promiscuous mode
[  423.147356][T26044] syzkaller0: entered allmulticast mode
[  423.162203][T26045] __nla_validate_parse: 13 callbacks suppressed
[  423.162214][T26045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8085'.
[  423.167764][T26045] team0: left allmulticast mode
[  423.169448][T26045] team_slave_0: left allmulticast mode
[  423.171517][T26045] team_slave_1: left allmulticast mode
[  423.173455][T26045] team0: left promiscuous mode
[  423.175213][T26045] team_slave_0: left promiscuous mode
[  423.177621][T26045] team_slave_1: left promiscuous mode
[  423.179752][T26045] bridge0: port 1(team0) entered disabled state
[  423.183447][T26045] team0: Cannot enslave team device to itself
[  423.186426][T26044] tipc: Resetting bearer <eth:syzkaller0>
[  423.188229][T26045] netlink: 'syz.1.8085': attribute type 1 has an invalid length.
[  423.191714][T26045] netlink: 16102 bytes leftover after parsing attributes in process `syz.1.8085'.
[  423.198491][T26043] tipc: Resetting bearer <eth:syzkaller0>
[  423.210204][T26043] tipc: Disabling bearer <eth:syzkaller0>
[  423.666285][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8101'.
[  423.723828][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8101'.
[  423.727355][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8101'.
[  423.763597][T26082] syzkaller0: entered promiscuous mode
[  423.765868][T26082] syzkaller0: entered allmulticast mode
[  423.978626][T26088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8105'.
[  424.027878][T26089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8104'.
[  424.856050][T26094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8106'.
[  425.303477][T26146] syzkaller0: entered promiscuous mode
[  425.305333][T26146] syzkaller0: entered allmulticast mode
[  425.314757][T26146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8118'.
[  425.456500][T26159] bond0: Error: Cannot enslave bond to itself.
[  425.484876][T26164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8124'.
[  425.501413][T26164] netlink: 'syz.1.8124': attribute type 1 has an invalid length.
[  425.581023][T26174] bond0: Error: Cannot enslave bond to itself.
[  425.671888][T26181] netem: unknown loss type 0
[  425.676347][T26181] netem: change failed
[  426.443913][T26187] vcan0: entered promiscuous mode
[  426.445966][T26187] vcan0: entered allmulticast mode
[  428.511034][T26168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  428.635418][T26190] netlink: 'syz.1.8130': attribute type 10 has an invalid length.
[  428.802464][T26219] __nla_validate_parse: 2 callbacks suppressed
[  428.802481][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8140'.
[  428.816302][T26219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8140'.
[  428.845185][T26220] xt_time: invalid argument - start or stop time greater than 23:59:59
[  428.921180][T26232] Only authenc() type AEADs are supported by ESSIV
[  429.202204][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8151'.
[  429.278162][T26262] netlink: 'syz.0.8153': attribute type 2 has an invalid length.
[  429.280825][T26261] netlink: 'syz.0.8153': attribute type 2 has an invalid length.
[  429.283282][T26262] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.8153'.
[  429.286505][T26261] netlink: 15974 bytes leftover after parsing attributes in process `syz.0.8153'.
[  429.528009][T26276] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8157'.
[  429.798006][T26304] netem: incorrect gi model size
[  429.802510][T26304] netem: change failed
[  429.842396][T26308] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8168'.
[  429.978788][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8174'.
[  430.026400][T26327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8175'.
[  430.029879][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8176'.
[  430.030582][T26328] netlink: 'syz.0.8174': attribute type 1 has an invalid length.
[  430.075632][T26328] bond10: entered promiscuous mode
[  430.078196][T26328] 8021q: adding VLAN 0 to HW filter on device bond10
[  430.096467][T26323] ipvlan3: entered allmulticast mode
[  430.098912][T26323] bond10: entered allmulticast mode
[  430.108546][T26323] ipvlan4: entered allmulticast mode
[  430.125379][T26323] bond10: (slave bridge15): making interface the new active one
[  430.131235][T26323] bridge15: entered promiscuous mode
[  430.137219][T26323] bridge15: entered allmulticast mode
[  430.142426][T26323] bond10: (slave bridge15): Enslaving as an active interface with an up link
[  430.318876][T26344] syzkaller1: entered promiscuous mode
[  430.321866][T26344] syzkaller1: entered allmulticast mode
[  430.458497][T26363] netlink: 'syz.2.8187': attribute type 1 has an invalid length.
[  433.623763][T26376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  433.820603][T26413] __nla_validate_parse: 4 callbacks suppressed
[  433.820619][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8202'.
[  434.071781][T26435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8212'.
[  434.215742][T26452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8216'.
[  434.225780][T26452] smc: adding net device hsr0 with user defined pnetid SYZ2
[  434.231432][T26452] smc: removing net device hsr0 with user defined pnetid SYZ2
[  434.548826][T26471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8225'.
[  434.555153][T26471] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8225'.
[  434.560012][T26471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8225'.
[  434.566222][T26472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8225'.
[  434.757992][T26478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8227'.
[  434.830173][T26481] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.8228'.
[  434.838109][T26481] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.8228'.
[  435.571673][T26534] bond15: entered promiscuous mode
[  435.574256][T26534] 8021q: adding VLAN 0 to HW filter on device bond15
[  435.781067][T26559] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  435.856394][T26568] netlink: 'syz.1.8260': attribute type 1 has an invalid length.
[  435.889672][T26568] 8021q: adding VLAN 0 to HW filter on device bond16
[  435.916685][T26568] bond16: (slave ip6gretap0): making interface the new active one
[  435.922694][T26568] bond16: (slave ip6gretap0): Enslaving as an active interface with an up link
[  436.442006][T26624] netlink: 'syz.1.8281': attribute type 1 has an invalid length.
[  436.453796][T26626] netlink: 'syz.1.8281': attribute type 1 has an invalid length.
[  436.475687][T26630] netlink: 'syz.0.8283': attribute type 4 has an invalid length.
[  436.828177][T26652] netlink: 'syz.0.8293': attribute type 62 has an invalid length.
[  437.684155][T26696] netlink: 'syz.1.8309': attribute type 1 has an invalid length.
[  437.704418][T26696] bond17: entered promiscuous mode
[  437.706630][T26696] 8021q: adding VLAN 0 to HW filter on device bond17
[  437.721913][T26696] 8021q: adding VLAN 0 to HW filter on device bond17
[  437.725188][T26696] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  437.729168][T26696] bond17: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  437.741983][T26696] bond17: (slave wireguard0): making interface the new active one
[  437.744747][T26696] wireguard0: entered promiscuous mode
[  437.747936][T26696] bond17: (slave wireguard0): Enslaving as an active interface with an up link
[  437.761864][T26696] bond17: (slave wireguard1): The slave device specified does not support setting the MAC address
[  437.770575][T26696] bond17: (slave wireguard1): Enslaving as a backup interface with an up link
[  438.612958][   T33] audit: type=1800 audit(1778622478.196:15): pid=26760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8328" name="memory.events" dev="tmpfs" ino=14287 res=0 errno=0
[  438.673913][T26765] netlink: 'syz.0.8330': attribute type 12 has an invalid length.
[  441.763152][T26776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.848751][T26800] __nla_validate_parse: 19 callbacks suppressed
[  441.848763][T26800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8341'.
[  441.855390][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8342'.
[  441.913455][T26807] virt_wifi0: entered promiscuous mode
[  441.915301][T26807] virt_wifi0: entered allmulticast mode
[  442.013692][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8349'.
[  442.042660][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8351'.
[  442.152378][T26841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8357'.
[  442.225040][T26837] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8355'.
[  442.234620][T26848] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  442.239414][T26848] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  442.263127][T26851] xt_policy: too many policy elements
[  442.635598][T26879] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8366'.
[  442.640025][T26879] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8366'.
[  443.421098][T26937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8380'.
[  443.494265][   T33] audit: type=1800 audit(1778622483.076:16): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8381" name="memory.events" dev="tmpfs" ino=14025 res=0 errno=0
[  443.771094][T26976] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.8390'.
[  443.925413][T26991] bond11: entered promiscuous mode
[  443.927750][T26991] 8021q: adding VLAN 0 to HW filter on device bond11
[  443.940943][T26991] vlan2: entered allmulticast mode
[  443.942584][T26991] bond11: entered allmulticast mode
[  444.504854][T27082] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.513113][T27082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.714783][T27102] netlink: 'syz.0.8434': attribute type 11 has an invalid length.
[  445.571713][T27192] netlink: 'syz.2.8459': attribute type 5 has an invalid length.
[  445.709254][T27205] netlink: 'syz.1.8463': attribute type 11 has an invalid length.
[  445.882929][T27222] nbd: couldn't find a device at index 0
[  446.915095][T27316] __nla_validate_parse: 18 callbacks suppressed
[  446.915112][T27316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8497'.
[  446.925552][T27316] netlink: 'syz.1.8497': attribute type 1 has an invalid length.
[  446.956598][T27316] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  446.960376][T27316] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  447.022227][T27323] bond18: (slave gretap3): making interface the new active one
[  447.027956][T27323] bond18: (slave gretap3): Enslaving as an active interface with an up link
[  447.063248][T27316] bond18: (slave bridge11): Enslaving as an active interface with a down link
[  447.185205][T27337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8499'.
[  447.192736][T27337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8499'.
[  447.560343][T27358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8505'.
[  447.818877][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8521'.
[  447.839747][T27417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8524'.
[  447.843054][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8525'.
[  447.846273][T27418] netlink: 'syz.1.8525': attribute type 4 has an invalid length.
[  447.853142][T27418] netlink: 'syz.1.8525': attribute type 4 has an invalid length.
[  447.930650][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'.
[  447.977944][T27426] veth0_macvtap: entered allmulticast mode
[  447.980782][T27428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8528'.
[  447.984725][T27426] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  447.996853][T27428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8528'.
[  448.492832][T27466] lo speed is unknown, defaulting to 1000
[  449.323307][T27539] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  449.550185][T27573] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  449.570300][T27573] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  449.706964][T27583] netlink: 'syz.0.8582': attribute type 13 has an invalid length.
[  449.711078][T27583] netlink: 'syz.0.8582': attribute type 17 has an invalid length.
[  449.768828][T27583] 8021q: adding VLAN 0 to HW filter on device team0
[  449.779893][T27583] 8021q: adding VLAN 0 to HW filter on device 60X
[  449.798578][T27583] bridge_slave_1: entered promiscuous mode
[  449.820779][T27583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  449.825018][T27583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.833434][T27583] virt_wifi0: left promiscuous mode
[  449.835680][T27583] virt_wifi0: left allmulticast mode
[  449.844353][T27583] veth1_vlan: left promiscuous mode
[  449.849399][T27583] veth0_vlan: left promiscuous mode
[  449.852414][T27583] veth0_vlan: entered promiscuous mode
[  449.857769][T27583] veth1_vlan: entered promiscuous mode
[  449.865003][T27583] veth1_macvtap: left promiscuous mode
[  449.867584][T27583] veth1_macvtap: left allmulticast mode
[  449.871211][T27583] veth0_macvtap: left promiscuous mode
[  449.880076][T27583] veth0_macvtap: entered promiscuous mode
[  449.889437][T27583] veth1_macvtap: entered promiscuous mode
[  449.897428][T27583] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  449.900319][T27583] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  449.904044][T27583] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  449.927963][ T5615] Bluetooth: hci0: command 0x0406 tx timeout
[  449.934499][ T5617] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  449.969971][T10763] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.011308][T10763] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.021212][T10763] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.024666][T10763] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.449372][T27624] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  451.130951][T27702] netlink: 'syz.0.8624': attribute type 6 has an invalid length.
[  452.552885][T27771] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  452.557360][T27771] syzkaller0: entered promiscuous mode
[  452.559707][T27771] syzkaller0: entered allmulticast mode
[  453.921233][T27815] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  453.930793][T27815] syzkaller0: entered promiscuous mode
[  453.933325][T27815] syzkaller0: entered allmulticast mode
[  453.944240][T27815] __nla_validate_parse: 61 callbacks suppressed
[  453.944259][T27815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8658'.
[  453.948861][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8659'.
[  454.188072][T27833] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  454.351520][T27852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8674'.
[  454.469281][T27864] PKCS7: Unknown OID: [4] (bad)
[  454.471468][T27864] PKCS7: Only support pkcs7_signedData type
[  454.709868][T27886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8686'.
[  454.807300][T27890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8685'.
[  454.946717][T27898] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8689'.
[  455.153704][T27907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8691'.
[  455.348467][T27911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8693'.
[  455.453019][T27917] IPv6: NLM_F_CREATE should be specified when creating new route
[  455.724342][T27933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8702'.
[  455.822616][T27939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8705'.
[  456.999532][T27998] bridge0: port 1(vlan5) entered blocking state
[  457.004540][T27998] bridge0: port 1(vlan5) entered disabled state
[  457.022501][T27998] vlan5: entered allmulticast mode
[  457.024316][T27998] geneve0: entered allmulticast mode
[  457.030799][T27998] vlan5: entered promiscuous mode
[  457.033028][T27998] geneve0: entered promiscuous mode
[  457.365898][T28030] netlink: 'syz.0.8734': attribute type 1 has an invalid length.
[  457.369634][T28030] netlink: 'syz.0.8734': attribute type 2 has an invalid length.
[  457.379509][T28031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  457.717160][T28031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  458.032408][T28039] x_tables: duplicate underflow at hook 4
[  458.067671][T28031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  458.159434][T28045] syzkaller1: entered promiscuous mode
[  458.162126][T28045] syzkaller1: entered allmulticast mode
[  458.200185][T28031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  458.284753][T28056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.474844][T28072] netlink: ct family unspecified
[  458.830092][T28113] netlink: 'syz.1.8762': attribute type 8 has an invalid length.
[  459.033911][T28129] __nla_validate_parse: 11 callbacks suppressed
[  459.033929][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8767'.
[  459.119427][T28138] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8771'.
[  459.135298][T28140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8772'.
[  459.135850][T28141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8772'.
[  459.530613][T28181] netlink: 'syz.2.8783': attribute type 28 has an invalid length.
[  459.595804][T28183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8784'.
[  459.600214][T28183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8784'.
[  459.773662][T28201] vlan3: left allmulticast mode
[  459.776153][T28201] geneve0: left allmulticast mode
[  459.783044][T28201] bridge0: port 1(vlan3) entered disabled state
[  459.826164][T28205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8790'.
[  459.909418][T28207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8792'.
[  459.914267][T28207] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8792'.
[  459.986490][T28223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8793'.
[  460.002757][T28223] veth27: entered promiscuous mode
[  460.311841][T28254] netlink: 'syz.0.8807': attribute type 11 has an invalid length.
[  460.331730][T10763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  460.331808][T28254] netlink: 'syz.0.8807': attribute type 11 has an invalid length.
[  460.337789][T10763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  460.345835][T10763] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  460.351994][T10763] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  461.540702][T28297] netlink: 'syz.1.8823': attribute type 5 has an invalid length.
[  461.540702][T28296] netlink: 'syz.1.8823': attribute type 5 has an invalid length.
[  461.641091][T28305] syzkaller0: entered promiscuous mode
[  461.642870][T28305] syzkaller0: entered allmulticast mode
[  463.568621][   T33] audit: type=1800 audit(1778622503.156:17): pid=28335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8838" name="memory.events" dev="tmpfs" ino=14818 res=0 errno=0
[  463.750400][T28351] syzkaller0: entered promiscuous mode
[  463.752742][T28351] syzkaller0: entered allmulticast mode
[  464.592581][T28366] __nla_validate_parse: 15 callbacks suppressed
[  464.592593][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8848'.
[  464.599566][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8848'.
[  464.602804][T28366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8848'.
[  464.605531][T28366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8848'.
[  464.612031][T28366] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8848'.
[  464.882882][T28375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8851'.
[  465.591033][T28389] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8854'.
[  465.723275][T28405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8862'.
[  465.754267][T28409] xt_recent: Unsupported userspace flags (000000b1)
[  465.763851][T28409] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002
[  465.858376][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8867'.
[  465.861656][T28418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8867'.
[  465.934821][T28431] netlink: 'syz.0.8872': attribute type 2 has an invalid length.
[  466.060238][T28446] netlink: 'syz.1.8878': attribute type 1 has an invalid length.
[  466.079421][T28446] 8021q: adding VLAN 0 to HW filter on device bond19
[  466.092206][T28446] vlan6: entered promiscuous mode
[  466.093854][T28446] bond19: entered promiscuous mode
[  466.095633][T28446] vlan6: entered allmulticast mode
[  466.097508][T28446] bond19: entered allmulticast mode
[  466.104468][T28446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.109805][T28446] bond19: (slave batadv0): making interface the new active one
[  466.112231][T28446] batadv0: entered promiscuous mode
[  466.113975][T28446] batadv0: entered allmulticast mode
[  466.116276][T28446] bond19: (slave batadv0): Enslaving as an active interface with an up link
[  466.933886][T28475] bond12: entered promiscuous mode
[  466.935834][T28475] 8021q: adding VLAN 0 to HW filter on device bond12
[  467.038561][T28485] syzkaller0: entered promiscuous mode
[  467.040994][T28485] syzkaller0: entered allmulticast mode
[  467.047732][T28485] netlink: 'syz.0.8892': attribute type 1 has an invalid length.
[  467.279832][T28488] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  467.513926][T28509] openvswitch: netlink: IP tunnel dst address not specified
[  467.516257][T28509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.723479][T28526] netlink: 'syz.2.8907': attribute type 1 has an invalid length.
[  468.159198][T28549] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  469.063855][T28609] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  469.102137][T28615] macsec0: entered promiscuous mode
[  469.104359][T28615] macsec0: entered allmulticast mode
[  469.110078][T28615] netlink: 'syz.2.8940': attribute type 11 has an invalid length.
[  469.113175][T28615] netlink: 'syz.2.8940': attribute type 5 has an invalid length.
[  469.598608][T28647] sctp: [Deprecated]: syz.1.8952 (pid 28647) Use of int in maxseg socket option.
[  469.598608][T28647] Use struct sctp_assoc_value instead
[  469.615120][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.619095][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.621642][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.624204][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.626784][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.630051][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.632892][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.635638][T28656] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  469.703557][T28665] __nla_validate_parse: 18 callbacks suppressed
[  469.703576][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8960'.
[  472.735660][T28667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.839607][T28694] ip6erspan1: entered allmulticast mode
[  472.881308][T28702] vcan0: entered promiscuous mode
[  472.893397][T28702] x_tables: duplicate underflow at hook 1
[  473.043079][T28719] xt_policy: neither incoming nor outgoing policy selected
[  473.110322][T28727] xt_hashlimit: size too large, truncated to 1048576
[  473.668672][T28779] syzkaller0: entered promiscuous mode
[  473.670962][T28779] syzkaller0: entered allmulticast mode
[  474.032694][T28785] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8997'.
[  474.699463][T28813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  474.720391][T28821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9007'.
[  474.751675][T28823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9007'.
[  474.867809][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9011'.
[  474.921881][T28836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9011'.
[  475.575931][T28844] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9016'.
[  475.673553][T28859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9021'.
[  475.677964][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9021'.
[  475.709682][T28864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9023'.
[  475.975522][T28885] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  475.994333][T28893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9033'.
[  476.006294][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9033'.
[  476.186088][T28896] syzkaller0: entered promiscuous mode
[  476.192383][T28896] syzkaller0: entered allmulticast mode
[  476.203544][T28888] lo speed is unknown, defaulting to 1000
[  477.817740][T28910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  478.458721][T28938] IPv6: sit1: Disabled Multicast RS
[  478.642329][T28946] SET target dimension over the limit!
[  478.689793][T28948] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20004
[  478.989326][T28978] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  479.141437][T28992] netlink: 'syz.1.9070': attribute type 4 has an invalid length.
[  479.145391][T28992] netlink: 'syz.1.9070': attribute type 4 has an invalid length.
[  479.589393][T29024] tunl0: entered allmulticast mode
[  479.702992][T29037] netlink: 'syz.1.9087': attribute type 1 has an invalid length.
[  479.732410][T29037] 8021q: adding VLAN 0 to HW filter on device bond20
[  479.834237][T29046] __nla_validate_parse: 8 callbacks suppressed
[  479.834254][T29046] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9089'.
[  479.884953][T29037] bond20: (slave geneve5): making interface the new active one
[  479.897693][T29037] bond20: (slave geneve5): Enslaving as an active interface with an up link
[  479.901779][T10763] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.911509][T10763] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.920920][T10763] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.929049][T10763] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.983981][T29052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9093'.
[  479.996369][T29052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9093'.
[  480.276692][T29082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9101'.
[  480.281672][T29082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9101'.
[  480.445535][T29098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9107'.
[  480.619932][T29119] syzkaller0: entered promiscuous mode
[  480.621839][T29119] syzkaller0: entered allmulticast mode
[  480.751694][T29122] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9116'.
[  480.755520][T29122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  480.764863][T29122] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9116'.
[  480.914379][T29133] syzkaller0: entered promiscuous mode
[  480.916739][T29133] syzkaller0: entered allmulticast mode
[  483.578629][T29110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  483.671598][T29141] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9121'.
[  483.681632][T29143] openvswitch: netlink: Message has 4 unknown bytes.
[  483.684690][T29143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.745837][T29141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9121'.
[  483.754915][T29141] batman_adv: 60X: Removing interface: batadv_slave_1
[  483.851780][T29154] netlink: 'syz.2.9126': attribute type 3 has an invalid length.
[  483.940563][T29162] netlink: 'syz.1.9130': attribute type 1 has an invalid length.
[  484.904084][T29185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.225247][T29228] bond11 (unregistering): Released all slaves
[  485.291885][T29237] __nla_validate_parse: 5 callbacks suppressed
[  485.291898][T29237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9150'.
[  485.370269][T29240] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  485.419070][T29243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9151'.
[  486.105854][T29289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9162'.
[  486.165824][T29291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9163'.
[  486.231759][T29294] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  486.264946][T29297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9165'.
[  486.401043][T29311] netlink: 120 bytes leftover after parsing attributes in process `syz.0.9170'.
[  486.469696][T29312] bond0: entered promiscuous mode
[  486.472430][T29312] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  486.475428][T29312] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  486.500812][T29312] 8021q: adding VLAN 0 to HW filter on device hsr1
[  486.505402][T29312] bond0: left promiscuous mode
[  486.517799][T29308] lo speed is unknown, defaulting to 1000
[  486.665989][T29320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9173'.
[  486.676069][T29320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9173'.
[  486.724016][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9172'.
[  486.787789][T29329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9175'.
[  487.135215][T29356] 8021q: adding VLAN 0 to HW filter on device `
[  487.172697][T29356] veth1_vlan: left promiscuous mode
[  487.175576][T29356] veth0_vlan: left promiscuous mode
[  487.181886][T29356] veth0_vlan: entered promiscuous mode
[  487.184699][T29356] veth1_vlan: entered promiscuous mode
[  487.188814][T29356] tipc: Resetting bearer <eth:ipvlan0>
[  487.190801][T29356] tipc: Resetting bearer <eth:ipvlan0>
[  487.193361][T29356] veth1_macvtap: left promiscuous mode
[  487.195667][T29356] veth0_macvtap: left promiscuous mode
[  487.199722][T29356] veth0_macvtap: entered promiscuous mode
[  487.202171][T29356] veth1_macvtap: entered promiscuous mode
[  487.203995][T29356] veth1_macvtap: entered allmulticast mode
[  487.205991][T29356] macsec0: left promiscuous mode
[  487.209614][T29356] macsec0: left allmulticast mode
[  487.211333][T29356] veth1_macvtap: left allmulticast mode
[  487.216613][T29356] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  487.219375][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.222409][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.225350][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  487.228443][T29356] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  487.231086][T29356] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  487.235063][T29356] 8021q: adding VLAN 0 to HW filter on device bond1
[  487.242147][T29356] 8021q: adding VLAN 0 to HW filter on device bond2
[  487.247609][T29356] 8021q: adding VLAN 0 to HW filter on device bond4
[  487.256584][T29356] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  487.260787][T29356] 8021q: adding VLAN 0 to HW filter on device bond3
[  487.266359][T29356] 8021q: adding VLAN 0 to HW filter on device bond5
[  487.271043][T29356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.277725][T29356] 8021q: adding VLAN 0 to HW filter on device bond6
[  487.280352][T29356] bond6: entered allmulticast mode
[  487.282088][T29356] bond6: entered promiscuous mode
[  487.283891][T29356] macvlan3: left promiscuous mode
[  487.285654][T29356] bond6: left promiscuous mode
[  487.290702][T29356] macvlan3: left allmulticast mode
[  487.292495][T29356] bond6: left allmulticast mode
[  487.294376][T29356] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  487.301184][T29356] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  487.308528][T14025] lo speed is unknown, defaulting to 1000
[  487.310429][T14025] sqz0: Port: 1 Link ACTIVE
[  487.311970][T14025] lo speed is unknown, defaulting to 1000
[  487.346663][T29360] bond0: Error: Cannot enslave bond to itself.
[  487.360157][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  487.363042][   T10] syz0: Port: 1 Link ACTIVE
[  487.365511][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  487.372753][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  487.379263][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.385917][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  487.393992][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.403232][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  487.411381][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.591758][T29375] tipc: Resetting bearer <eth:xfrm0>
[  487.621885][T29375] tipc: Resetting bearer <eth:ipvlan0>
[  487.734383][   T10] lo speed is unknown, defaulting to 1000
[  487.738803][   T10] sqz0: Port: 1 Link DOWN
[  487.740871][T14025] syz0: Port: 1 Link DOWN
[  487.742762][T10763] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.750375][T10763] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.757697][T10763] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.762893][T10763] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.768097][T14025] lo speed is unknown, defaulting to 1000
[  487.770180][T10763] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.773508][T10763] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.776285][T10763] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.781454][T10763] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.862996][T29404] syzkaller0: entered promiscuous mode
[  487.864926][T29404] syzkaller0: entered allmulticast mode
[  487.934570][T29416] syzkaller0: entered promiscuous mode
[  487.936508][T29416] syzkaller0: entered allmulticast mode
[  487.982561][T29422] netlink: 'syz.1.9205': attribute type 6 has an invalid length.
[  487.988090][T29422] netlink: 'syz.1.9205': attribute type 2 has an invalid length.
[  488.009144][T29428] netlink: 'syz.2.9206': attribute type 3 has an invalid length.
[  488.054558][T29434] netlink: 'syz.2.9208': attribute type 13 has an invalid length.
[  488.057712][T29434] netlink: 'syz.2.9208': attribute type 17 has an invalid length.
[  488.098732][T29434] 8021q: adding VLAN 0 to HW filter on device `
[  488.120833][T29438] netlink: 'syz.0.9209': attribute type 4 has an invalid length.
[  488.131586][T29434] veth1_vlan: left promiscuous mode
[  488.134507][T29434] veth0_vlan: left promiscuous mode
[  488.138353][T29434] veth0_vlan: entered promiscuous mode
[  488.142019][T29434] veth1_vlan: entered promiscuous mode
[  488.147271][T29434] veth1_macvtap: left promiscuous mode
[  488.149958][T29434] veth0_macvtap: left promiscuous mode
[  488.153098][T29434] veth0_macvtap: entered promiscuous mode
[  488.161497][T29434] veth1_macvtap: entered promiscuous mode
[  488.170593][T29434] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  488.174139][T29442] netlink: 'syz.0.9209': attribute type 4 has an invalid length.
[  488.176566][T29434] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  488.184633][T29434] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.191229][T29434] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.196661][T29434] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  488.204174][T29434] 8021q: adding VLAN 0 to HW filter on device bond1
[  488.213164][T29434] 8021q: adding VLAN 0 to HW filter on device bond2
[  488.215973][T29434] 8021q: adding VLAN 0 to HW filter on device bond4
[  488.223415][T29434] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  488.227291][T29434] 8021q: adding VLAN 0 to HW filter on device bond3
[  488.238135][T29434] 8021q: adding VLAN 0 to HW filter on device bond5
[  488.243795][T29434] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.123760][T29434] 8021q: adding VLAN 0 to HW filter on device bond6
[  489.128342][T29434] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  489.139684][T29434] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  489.144912][T14020] lo speed is unknown, defaulting to 1000
[  489.157231][T14020] sqz0: Port: 1 Link ACTIVE
[  489.159295][T14020] lo speed is unknown, defaulting to 1000
[  489.212031][T29393] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  489.218481][T29393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.222625][   T10] syz0: Port: 1 Link ACTIVE
[  489.224979][T29393] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  489.229332][T29393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.240402][T29393] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  489.247133][T29393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.258045][T29393] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  489.263526][T29393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.284540][T29460] netlink: 'syz.1.9214': attribute type 15 has an invalid length.
[  489.370487][T29464] syzkaller0: entered promiscuous mode
[  489.372523][T29464] syzkaller0: entered allmulticast mode
[  490.319709][T29474] __nla_validate_parse: 113 callbacks suppressed
[  490.319724][T29474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9219'.
[  491.202204][T29500] tc_dump_action: action bad kind
[  491.255638][T29505] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9230'.
[  491.260464][T29505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9230'.
[  491.328040][T29516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9234'.
[  491.431288][T29531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  491.581659][T29538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9243'.
[  491.802657][T29559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9250'.
[  492.113155][T29591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9258'.
[  492.286280][T29601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9261'.
[  492.292348][T29602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9261'.
[  492.365475][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9264'.
[  492.473302][T29621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  492.726160][T29637] 8021q: VLANs not supported on sit0
[  493.275596][T29667] lo speed is unknown, defaulting to 1000
[  494.732583][T29705] netlink: 'syz.1.9291': attribute type 3 has an invalid length.
[  494.791620][T29712] netlink: 'syz.2.9294': attribute type 21 has an invalid length.
[  494.794619][T29712] netlink: 'syz.2.9294': attribute type 4 has an invalid length.
[  494.798603][T29712] netlink: 'syz.2.9294': attribute type 5 has an invalid length.
[  494.948861][T29717] syzkaller0: entered promiscuous mode
[  494.950947][T29717] syzkaller0: entered allmulticast mode
[  494.975528][T29717] 0: reclassify loop, rule prio 0, protocol 800
[  494.982152][T29717] netlink: 'syz.2.9296': attribute type 3 has an invalid length.
[  495.248019][T29724] syzkaller0: entered promiscuous mode
[  495.250333][T29724] syzkaller0: entered allmulticast mode
[  497.134283][T29743] __nla_validate_parse: 20 callbacks suppressed
[  497.134297][T29743] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9307'.
[  497.322757][T29764] : entered promiscuous mode
[  497.373065][T29770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9316'.
[  497.412576][T29768] syzkaller0: entered promiscuous mode
[  497.419829][T29768] syzkaller0: entered allmulticast mode
[  497.434703][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9317'.
[  497.495525][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9317'.
[  499.190880][T29779] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  499.224476][T29784] netlink: 5404 bytes leftover after parsing attributes in process `syz.0.9319'.
[  499.281200][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9322'.
[  500.195880][T29813] netlink: 5404 bytes leftover after parsing attributes in process `syz.0.9328'.
[  500.330539][T29827] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9335'.
[  500.338747][T29827] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9335'.
[  500.345381][T29827] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9335'.
[  500.483903][T29822] lo speed is unknown, defaulting to 1000
[  500.648490][T29858] netlink: Conntrack attr has 3 unknown bytes
[  500.714771][T29865] netlink: 'syz.0.9347': attribute type 3 has an invalid length.
[  501.224284][T29913] netlink: 'syz.2.9365': attribute type 3 has an invalid length.
[  501.434546][T29923] syzkaller0: entered promiscuous mode
[  501.436710][T29923] syzkaller0: entered allmulticast mode
[  502.032105][T29937] netlink: 'syz.1.9374': attribute type 5 has an invalid length.
[  502.142673][T29939] __nla_validate_parse: 12 callbacks suppressed
[  502.142684][T29939] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9374'.
[  503.275056][T29932] batadv_slave_0: entered promiscuous mode
[  503.293209][T29933] batadv_slave_0: left promiscuous mode
[  503.470978][T29962] netlink: 'syz.2.9383': attribute type 1 has an invalid length.
[  503.474129][T29962] netlink: 476 bytes leftover after parsing attributes in process `syz.2.9383'.
[  503.483381][T29962] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.9383'.
[  503.503791][T29962] syzkaller1: entered promiscuous mode
[  503.506871][T29962] syzkaller1: entered allmulticast mode
[  503.661229][T29974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9388'.
[  503.664239][T29974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9388'.
[  503.667730][T29974] netlink: 'syz.0.9388': attribute type 4 has an invalid length.
[  503.723079][T29978] netlink: 'syz.0.9390': attribute type 11 has an invalid length.
[  503.779005][T29984] netlink: 'syz.2.9393': attribute type 29 has an invalid length.
[  503.782063][T29984] netlink: 'syz.2.9393': attribute type 29 has an invalid length.
[  503.785101][T29984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9393'.
[  503.788819][T29984] netem: change failed
[  503.791375][T29984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9393'.
[  503.817468][T29986] netlink: 'syz.2.9395': attribute type 3 has an invalid length.
[  504.250794][T30004] netlink: zone id is out of range
[  504.282952][T30004] syzkaller0: entered promiscuous mode
[  504.284952][T30004] syzkaller0: entered allmulticast mode
[  506.850039][T29991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  507.100809][T30035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9411'.
[  507.139522][T30037] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9413'.
[  507.148412][T30039] syzkaller0: entered promiscuous mode
[  507.150636][T30039] syzkaller0: entered allmulticast mode
[  507.189304][T30041] netlink: 'syz.0.9414': attribute type 2 has an invalid length.
[  507.192471][T30042] netlink: 'syz.0.9414': attribute type 2 has an invalid length.
[  507.195586][T30042] netlink: 'syz.0.9414': attribute type 2 has an invalid length.
[  507.352401][T30057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9418'.
[  507.628233][T30083] netlink: 'syz.0.9428': attribute type 3 has an invalid length.
[  507.703389][T30091] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9433'.
[  507.706783][T30091] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9433'.
[  507.711506][T30091] netlink: 'syz.0.9433': attribute type 3 has an invalid length.
[  507.762466][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9435'.
[  507.787662][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9435'.
[  507.845544][T30103] netlink: 'syz.2.9437': attribute type 3 has an invalid length.
[  508.017905][T30116] team0: No ports can be present during mode change
[  508.152448][T30137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9449'.
[  508.159634][T30139] netlink: 'syz.1.9450': attribute type 3 has an invalid length.
[  508.260332][T30149] netlink: 'syz.0.9454': attribute type 3 has an invalid length.
[  508.310564][T30155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9457'.
[  508.315271][T30155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9457'.
[  508.803194][T30177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9465'.
[  508.806485][T30177] sctp: [Deprecated]: syz.1.9465 (pid 30177) Use of struct sctp_assoc_value in delayed_ack socket option.
[  508.806485][T30177] Use struct sctp_sack_info instead
[  508.814121][T30177] netlink: 'syz.1.9465': attribute type 1 has an invalid length.
[  508.816731][T30177] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9465'.
[  508.894454][T30182] netlink: 'syz.2.9468': attribute type 3 has an invalid length.
[  509.013921][T30190] 8021q: adding VLAN 0 to HW filter on device bond22
[  509.021030][T30190] bond21: (slave bond22): making interface the new active one
[  509.024985][T30190] bond21: (slave bond22): Enslaving as an active interface with an up link
[  509.123827][T30205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  509.135795][T30205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  509.437315][T30231] netlink: 'syz.0.9485': attribute type 11 has an invalid length.
[  510.136137][T30244] geneve4: entered promiscuous mode
[  510.142035][ T5643] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53143 - 0
[  510.147147][ T5643] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53143 - 0
[  510.151964][ T5643] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53143 - 0
[  510.155851][ T5643] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53143 - 0
[  510.341519][T30257] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20001
[  510.487239][T30267] tipc: Failed to remove unknown binding: 66,1,1/1:1465673528/1465673530
[  510.490547][T30267] tipc: Failed to remove unknown binding: 66,1,1/1:1465673528/1465673530
[  510.493310][T30267] tipc: Failed to remove unknown binding: 66,1,1/1:1465673528/1465673530
[  511.087809][T30302] bridge18: the hash_elasticity option has been deprecated and is always 16
[  511.090655][T30302] bridge18: entered allmulticast mode
[  511.303781][T30321] syzkaller0: entered promiscuous mode
[  511.305767][T30321] syzkaller0: entered allmulticast mode
[  512.988263][T30344] __nla_validate_parse: 19 callbacks suppressed
[  512.988274][T30344] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9528'.
[  512.997409][T30344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9528'.
[  513.075741][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9532'.
[  513.102119][T30358] validate_nla: 8 callbacks suppressed
[  513.102130][T30358] netlink: 'syz.0.9532': attribute type 4 has an invalid length.
[  513.112190][T30358] netlink: 'syz.0.9532': attribute type 1 has an invalid length.
[  513.119001][T30358] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9532'.
[  513.296225][T30378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9536'.
[  513.304887][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9536'.
[  513.336333][T30385] netlink: 'syz.2.9538': attribute type 1 has an invalid length.
[  513.339123][T30385] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9538'.
[  513.391673][T30395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9539'.
[  513.511305][T30405] netlink: 'syz.0.9545': attribute type 2 has an invalid length.
[  513.518053][T30405] netlink: 'syz.0.9545': attribute type 1 has an invalid length.
[  513.619507][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9550'.
[  513.648973][T30426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9551'.
[  514.812017][T30500] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  515.298382][T30559] netlink: 'syz.1.9591': attribute type 3 has an invalid length.
[  515.461276][T30580] netlink: 'syz.1.9601': attribute type 3 has an invalid length.
[  515.837124][T30616] syzkaller1: entered promiscuous mode
[  515.839090][T30616] syzkaller1: entered allmulticast mode
[  516.018102][T30624] bond23: Unable to set down delay as MII monitoring is disabled
[  516.021618][T30624] bond23 (unregistering): Released all slaves
[  516.379013][T30653] GUP no longer grows the stack in syz.1.9629 (30653): 200000003000-20000000a000 (200000001000)
[  516.384403][T30653] CPU: 0 UID: 0 PID: 30653 Comm: syz.1.9629 Not tainted syzkaller #0 PREEMPT(full) 
[  516.384417][T30653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  516.384423][T30653] Call Trace:
[  516.384428][T30653]  <TASK>
[  516.384432][T30653]  dump_stack_lvl+0xe8/0x150
[  516.384449][T30653]  __get_user_pages+0x2378/0x2720
[  516.384462][T30653]  ? __gup_longterm_locked+0xc4e/0x1630
[  516.384478][T30653]  ? __gup_longterm_locked+0xc4e/0x1630
[  516.384487][T30653]  ? down_read_killable+0x1bb/0x340
[  516.384499][T30653]  __gup_longterm_locked+0xdcf/0x1630
[  516.384510][T30653]  ? lock_acquire+0x106/0x350
[  516.384526][T30653]  gup_fast_fallback+0x1d84/0x20d0
[  516.384548][T30653]  ? __pfx_gup_fast_fallback+0x10/0x10
[  516.384558][T30653]  ? is_valid_gup_args+0x11f/0x200
[  516.384567][T30653]  ? get_user_pages_fast+0x4d/0xb0
[  516.384579][T30653]  __iov_iter_get_pages_alloc+0x370/0xa10
[  516.384594][T30653]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  516.384606][T30653]  iov_iter_get_pages2+0x5e/0xa0
[  516.384619][T30653]  __se_sys_vmsplice+0x7c7/0x1620
[  516.384636][T30653]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  516.384646][T30653]  ? __pfx_futex_wait+0x10/0x10
[  516.384684][T30653]  ? lockdep_hardirqs_on+0x7a/0x110
[  516.384718][T30653]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.384728][T30653]  do_syscall_64+0x15f/0xf80
[  516.384736][T30653]  ? trace_irq_disable+0x3b/0x140
[  516.384752][T30653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.384761][T30653] RIP: 0033:0x7f6f24d9cdd9
[  516.384771][T30653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.384779][T30653] RSP: 002b:00007f6f25d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  516.384789][T30653] RAX: ffffffffffffffda RBX: 00007f6f25015fa0 RCX: 00007f6f24d9cdd9
[  516.384795][T30653] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  516.384799][T30653] RBP: 00007f6f24e32d69 R08: 0000000000000000 R09: 0000000000000000
[  516.384804][T30653] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  516.384808][T30653] R13: 00007f6f25016038 R14: 00007f6f25015fa0 R15: 00007ffd64dc7108
[  516.384836][T30653]  </TASK>
[  516.652732][T30677] sctp: [Deprecated]: syz.1.9639 (pid 30677) Use of int in max_burst socket option.
[  516.652732][T30677] Use struct sctp_assoc_value instead
[  517.059623][T30711] smc: adding net device hsr0 with user defined pnetid SYZ2
[  517.070954][T30711] bond0: entered promiscuous mode
[  517.077408][T30711] bond_slave_0: entered promiscuous mode
[  517.082401][T30711] bond_slave_1: entered promiscuous mode
[  517.090031][T30711] bond0: left promiscuous mode
[  517.096232][T30711] bond_slave_0: left promiscuous mode
[  517.100173][T30711] bond_slave_1: left promiscuous mode
[  517.107989][T30711] smc: removing net device hsr0 with user defined pnetid SYZ2
[  517.795486][T30751] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  517.845370][T30751] syzkaller0: entered promiscuous mode
[  517.851227][T30751] syzkaller0: entered allmulticast mode
[  518.020757][T30765] __nla_validate_parse: 22 callbacks suppressed
[  518.020842][T30765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9669'.
[  518.164842][T30771] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9670'.
[  519.731435][T30787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9676'.
[  519.735056][T30787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9676'.
[  519.864712][T30793] syzkaller0: entered promiscuous mode
[  519.867355][T30793] syzkaller0: entered allmulticast mode
[  519.904693][T30802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9683'.
[  521.421144][T30809] netlink: 'syz.0.9684': attribute type 3 has an invalid length.
[  521.452146][T30821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9687'.
[  521.534805][T30827] netlink: 288 bytes leftover after parsing attributes in process `syz.1.9690'.
[  521.552294][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9691'.
[  521.622501][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9688'.
[  521.634313][T30823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9688'.
[  521.721607][T30842] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 2, id = 0
[  521.888764][T30846] syzkaller1: entered promiscuous mode
[  521.891343][T30846] syzkaller1: entered allmulticast mode
[  521.945302][T30846] syzkaller1: left promiscuous mode
[  521.947186][T30846] syzkaller1: left allmulticast mode
[  522.191626][T30855] netlink: 'syz.2.9698': attribute type 4 has an invalid length.
[  522.421047][T30870] netlink: 'syz.0.9703': attribute type 11 has an invalid length.
[  523.391379][T30961] __nla_validate_parse: 4 callbacks suppressed
[  523.391395][T30961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9743'.
[  523.398680][T30961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9743'.
[  523.520435][T30977] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9749'.
[  523.755640][T30994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9755'.
[  523.774323][T30994] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9755'.
[  523.803780][T31000] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  523.806857][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'.
[  523.810330][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'.
[  523.813843][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'.
[  523.819293][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'.
[  523.823115][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9758'.
[  524.119182][T31033] xt_CT: You must specify a L4 protocol and not use inversions on it
[  524.364165][T31066] x_tables: duplicate underflow at hook 3
[  524.513684][T31081] xt_ipcomp: unknown flags 1D
[  524.520181][T31081] netlink: 'syz.2.9790': attribute type 22 has an invalid length.
[  524.524871][T31081] netlink: 'syz.2.9790': attribute type 1 has an invalid length.
[  524.658074][T31078] lo speed is unknown, defaulting to 1000
[  524.683009][T31092] set match dimension is over the limit!
[  524.694103][T31092] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  524.860910][T31087] lo speed is unknown, defaulting to 1000
[  525.063941][T31113] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  525.218646][ T5615] Bluetooth: hci2: command 0x0405 tx timeout
[  525.239908][T31133] netlink: 'syz.0.9808': attribute type 1 has an invalid length.
[  525.658484][T31172] netlink: 'syz.0.9825': attribute type 13 has an invalid length.
[  525.662096][T31172] netlink: 'syz.0.9825': attribute type 12 has an invalid length.
[  526.285766][T31207] nbd: nbd1 already in use
[  526.470008][T31219] netlink: 'syz.1.9840': attribute type 1 has an invalid length.
[  526.708056][T31230] syzkaller0: entered promiscuous mode
[  526.710389][T31230] syzkaller0: entered allmulticast mode
[  529.380123][T31214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.533904][T31248] __nla_validate_parse: 22 callbacks suppressed
[  529.533923][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9850'.
[  529.580586][T31248] bond13: entered promiscuous mode
[  529.588171][T31247] bond13: left promiscuous mode
[  529.651381][T31261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9856'.
[  529.811804][T31276] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9862'.
[  530.723910][T31320] IPv6: NLM_F_CREATE should be specified when creating new route
[  530.727167][T31320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  530.729445][T31320] IPv6: NLM_F_CREATE should be set when creating new route
[  530.731788][T31320] IPv6: NLM_F_CREATE should be set when creating new route
[  530.734063][T31320] IPv6: NLM_F_CREATE should be set when creating new route
[  530.739075][T31320] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9874'.
[  530.745902][T31301] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  530.750407][T31320] netlink: 'syz.2.9874': attribute type 3 has an invalid length.
[  530.752812][T31320] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9874'.
[  530.798557][T31324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9875'.
[  530.842795][T31328] bridge0: entered allmulticast mode
[  530.884639][T31329] veth0_vlan: entered allmulticast mode
[  530.896743][T28167] tipc: Resetting bearer <eth:ipvlan0>
[  530.907319][  T938] syz0: Port: 1 Link DOWN
[  531.102698][T31360] vlan7: entered allmulticast mode
[  531.104830][T31360] bond0: entered allmulticast mode
[  531.108153][T31360] bond_slave_0: entered allmulticast mode
[  531.117911][T31360] bond_slave_1: entered allmulticast mode
[  531.195377][T31375] netlink: 'syz.2.9895': attribute type 21 has an invalid length.
[  531.198513][T31375] IPv6: NLM_F_CREATE should be specified when creating new route
[  531.201084][T31375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  531.203444][T31375] IPv6: NLM_F_CREATE should be set when creating new route
[  531.205858][T31375] IPv6: NLM_F_CREATE should be set when creating new route
[  531.208233][T31375] IPv6: NLM_F_CREATE should be set when creating new route
[  531.215007][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9896'.
[  531.219473][T31381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9896'.
[  531.222652][T31375] netlink: 'syz.2.9895': attribute type 21 has an invalid length.
[  531.231735][T31375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  531.299335][T31389] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  531.302079][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9901'.
[  531.556080][T31421] ip6t_srh: unknown srh invflags 4000
[  531.595844][T31423] syzkaller0: entered promiscuous mode
[  531.597966][T31423] syzkaller0: entered allmulticast mode
[  531.923690][T31452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9923'.
[  531.956167][T31453] IPVS: Scheduler module ip_vs_sip not found
[  532.275445][T31475] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  532.900456][T31549] netlink: 'syz.0.9958': attribute type 3 has an invalid length.
[  532.964693][T31559] sctp: [Deprecated]: syz.2.9961 (pid 31559) Use of int in max_burst socket option.
[  532.964693][T31559] Use struct sctp_assoc_value instead
[  533.025575][T31568] netlink: 'syz.2.9964': attribute type 9 has an invalid length.
[  533.506360][T29393] tipc: Subscription rejected, illegal request
[  533.554605][T31628] netlink: 'syz.0.9984': attribute type 3 has an invalid length.
[  533.562817][T31630] x_tables: duplicate underflow at hook 4
[  533.794760][T31643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.799095][T31643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.804026][T31643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53143 - 0
[  533.897934][T31643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.901437][T31643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.904693][T31643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53143 - 0
[  533.979029][T31643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.982490][T31643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.986057][T31643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53143 - 0
[  534.087798][T31643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.094595][T31643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.101686][T31643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53143 - 0
[  534.144128][T31671] netlink: 'syz.0.9998': attribute type 1 has an invalid length.
[  534.147810][T31671] netlink: 'syz.0.9998': attribute type 2 has an invalid length.
[  534.211215][T29393] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.214913][T29393] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 53143 - 0
[  534.218479][T29393] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  534.230222][ T5657] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.233019][ T5657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 53143 - 0
[  534.235651][ T5657] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  534.243325][ T5657] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.245979][ T5657] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 53143 - 0
[  534.248908][ T5657] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  534.258570][ T5657] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  534.262313][ T5657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 53143 - 0
[  534.265987][ T5657] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  534.424224][T31681] netlink: 'syz.2.10003': attribute type 2 has an invalid length.
[  534.466382][T31685] netlink: 'syz.2.10004': attribute type 3 has an invalid length.
[  534.497924][T31689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  534.500428][T31689] IPv6: NLM_F_CREATE should be set when creating new route
[  534.628204][T31699] __nla_validate_parse: 12 callbacks suppressed
[  534.628222][T31699] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.10010'.
[  534.643876][T31699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10010'.
[  534.650915][T31699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10010'.
[  534.654872][T31702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10011'.
[  534.661404][T31702] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  534.664561][T31702] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  535.234873][T31743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10027'.
[  535.286641][T31749] netlink: 260 bytes leftover after parsing attributes in process `syz.1.10029'.
[  535.468426][T31767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.629380][T31785] syzkaller0: entered promiscuous mode
[  535.631955][T31785] syzkaller0: entered allmulticast mode
[  535.636447][T31785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  535.754877][T31786] xt_hashlimit: max too large, truncated to 1048576
[  535.775795][T31786] xt_ecn: cannot match TCP bits for non-tcp packets
[  536.122312][T31808] netlink: 'syz.1.10047': attribute type 4 has an invalid length.
[  536.232333][T31819] netlink: 'syz.1.10050': attribute type 3 has an invalid length.
[  536.264299][T31821] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10051'.
[  536.270192][T31821] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10051'.
[  536.273229][T31821] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10051'.
[  536.456151][T31784] tipc: Resetting bearer <eth:syzkaller0>
[  536.479586][T31830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10054'.
[  536.489340][T31784] tipc: Disabling bearer <eth:syzkaller0>
[  537.960364][T31894] netlink: 'syz.0.10074': attribute type 3 has an invalid length.
[  538.306567][T31914] netlink: 'syz.0.10081': attribute type 3 has an invalid length.
[  538.860411][T31830] Set syz1 is full, maxelem 65536 reached
[  538.925036][T31928] netlink: 'syz.2.10084': attribute type 1 has an invalid length.
[  538.932849][T31929] netlink: 'syz.0.10085': attribute type 3 has an invalid length.
[  539.044986][T31942] netlink: 'syz.1.10092': attribute type 12 has an invalid length.
[  539.205988][T31957] openvswitch: netlink: Flow actions attr not present in new flow.
[  539.222467][T31957] netlink: 'syz.2.10098': attribute type 6 has an invalid length.
[  539.366492][T31976] netlink: 'syz.2.10105': attribute type 1 has an invalid length.
[  539.396101][T31978] netlink: 'syz.2.10106': attribute type 3 has an invalid length.
[  539.492871][T31980] tipc: Resetting bearer <eth:ipvlan0>
[  539.648393][T31995] bond11: option arp_interval: invalid value (18446744073709551615)
[  539.650990][T31995] bond11: option arp_interval: allowed values 0 - 2147483647
[  539.655966][T31995] bond11 (unregistering): Released all slaves
[  539.725590][T32001] netlink: 'syz.0.10114': attribute type 3 has an invalid length.
[  540.051092][T32029] SET target dimension over the limit!
[  540.624046][T32038] netlink: 'syz.1.10125': attribute type 3 has an invalid length.
[  540.803597][T32048] __nla_validate_parse: 17 callbacks suppressed
[  540.803610][T32048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10129'.
[  540.926695][T32062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10134'.
[  540.933840][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10134'.
[  541.021014][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10137'.
[  541.053876][T32075] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10140'.
[  541.100246][T32083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10143'.
[  541.141432][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10144'.
[  541.234205][T32098] syzkaller1: entered promiscuous mode
[  541.237549][T32098] syzkaller1: entered allmulticast mode
[  541.273001][T32105] openvswitch: netlink: IPv4 tun info is not correct
[  541.319288][T32112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10155'.
[  541.349261][T32115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10157'.
[  541.356440][T32115] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10157'.
[  541.363167][T32115] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  541.439577][T32122] 8021q: adding VLAN 0 to HW filter on device bond11
[  541.461551][T32122] bond11: (slave gretap3): making interface the new active one
[  541.465395][T32122] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  541.495365][T32122] bond11 (unregistering): (slave gretap3): Releasing active interface
[  541.502319][T32122] bond11 (unregistering): Released all slaves
[  541.744922][T32162] IPVS: stopping backup sync thread 30842 ...
[  542.287167][T32229] batman_adv: batadv0: Adding interface: gretap1
[  542.289328][T32229] batman_adv: batadv0: Interface activated: gretap1
[  542.358489][T32229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.361677][T32235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.654859][T32262] bond0: entered promiscuous mode
[  542.660629][T32262] gretap0: entered promiscuous mode
[  542.662928][T32262] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  542.669315][T32262] hsr0: entered promiscuous mode
[  542.780770][T32272] 8021q: adding VLAN 0 to HW filter on device bond11
[  542.788694][T32272] vlan0: entered allmulticast mode
[  542.790491][T32272] bond11: entered allmulticast mode
[  542.953574][T32290] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  543.017153][T32290] IPVS: Scheduler module ip_vs_sip not found
[  543.376489][T32344] validate_nla: 5 callbacks suppressed
[  543.376500][T32344] netlink: 'syz.2.10227': attribute type 1 has an invalid length.
[  543.635327][   T33] audit: type=1107 audit(1778622583.216:18): pid=32366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='S'
[  543.988136][T32394] syzkaller0: entered promiscuous mode
[  543.990527][T32394] syzkaller0: entered allmulticast mode
[  543.994705][T32396] netlink: 'syz.2.10247': attribute type 13 has an invalid length.
[  543.997377][T32396] netlink: 'syz.2.10247': attribute type 17 has an invalid length.
[  544.009732][T32396] veth0_vlan: left allmulticast mode
[  544.021576][T32396] tipc: Resetting bearer <eth:ipvlan0>
[  544.036236][T32396] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  546.044926][T14028] syz0: Port: 1 Link ACTIVE
[  546.076864][T32413] x_tables: ip_tables: NETMAP.0 target: invalid size 24 (kernel) != (user) 0
[  546.104352][T32415] __nla_validate_parse: 26 callbacks suppressed
[  546.104365][T32415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10253'.
[  546.163059][T32417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10254'.
[  546.478785][T32437] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10262'.
[  546.582146][T32463] netlink: 'syz.1.10269': attribute type 3 has an invalid length.
[  546.584775][T32464] netlink: 'syz.1.10269': attribute type 3 has an invalid length.
[  546.622505][T32468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10271'.
[  546.693512][T32475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10274'.
[  546.849133][T32491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10280'.
[  546.852503][T32491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10280'.
[  546.855479][T32491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10280'.
[  546.860021][T32491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10280'.
[  546.863940][T32491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10280'.
[  547.179203][T32526] netlink: 'syz.2.10294': attribute type 9 has an invalid length.
[  547.656025][T32552] 8021q: adding VLAN 0 to HW filter on device bond12
[  547.732249][T32566] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  547.738916][T32566] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  548.005728][T32597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.064133][T32607] vlan5: entered promiscuous mode
[  548.068575][T32607] geneve1: entered promiscuous mode
[  548.071688][T32607] vlan5: entered allmulticast mode
[  548.074218][T32607] geneve1: entered allmulticast mode
[  548.174239][T32617] netlink: 'syz.2.10323': attribute type 49 has an invalid length.
[  548.733114][T32686] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  548.736342][T32686] syzkaller0: entered promiscuous mode
[  548.738909][T32686] syzkaller0: entered allmulticast mode
[  548.742752][T32686] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  549.214011][T32745] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  549.225448][T32745] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  549.554527][  T318] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.560341][  T318] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.644321][  T318] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.648165][  T318] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.706065][  T318] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.712614][  T318] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.799240][  T318] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.806993][  T318] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.908056][T10763] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  549.911408][T10763] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.919983][T10763] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  549.922814][T10763] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.932117][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  549.934945][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.952313][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  549.955189][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.971038][  T328] bridge26: entered allmulticast mode
[  550.226640][  T341] syzkaller0: entered promiscuous mode
[  550.230089][  T341] syzkaller0: entered allmulticast mode
[  550.329569][T32759] syz.1.10368 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  550.334175][T32759] CPU: 1 UID: 0 PID: 32759 Comm: syz.1.10368 Not tainted syzkaller #0 PREEMPT(full) 
[  550.334197][T32759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  550.334205][T32759] Call Trace:
[  550.334213][T32759]  <TASK>
[  550.334219][T32759]  dump_stack_lvl+0xe8/0x150
[  550.334242][T32759]  dump_header+0xd3/0x4c0
[  550.334264][T32759]  oom_kill_process+0x3ab/0x970
[  550.334285][T32759]  out_of_memory+0x106c/0x1410
[  550.334299][T32759]  ? try_charge_memcg+0xbb9/0x1570
[  550.334320][T32759]  ? __pfx___mutex_lock+0x10/0x10
[  550.334339][T32759]  ? __pfx_out_of_memory+0x10/0x10
[  550.334353][T32759]  ? do_raw_spin_unlock+0x4d/0x210
[  550.334378][T32759]  try_charge_memcg+0xc77/0x1570
[  550.334416][T32759]  ? __pfx_try_charge_memcg+0x10/0x10
[  550.334433][T32759]  ? percpu_ref_tryget+0x15/0x180
[  550.334465][T32759]  ? charge_memcg+0x23/0x2b0
[  550.334484][T32759]  charge_memcg+0x1a2/0x2b0
[  550.334501][T32759]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  550.334517][T32759]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  550.334536][T32759]  __swap_cache_prepare_and_add+0xdc/0x700
[  550.334555][T32759]  ? page_rmappable_folio+0x9a/0x170
[  550.334578][T32759]  swap_cache_alloc_folio+0xf1/0x240
[  550.334624][T32759]  swap_cluster_readahead+0x523/0x670
[  550.334644][T32759]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  550.334669][T32759]  ? get_vma_policy+0x27b/0x3c0
[  550.334691][T32759]  swapin_readahead+0x196/0xc50
[  550.334711][T32759]  ? swap_table_get+0x1e/0x260
[  550.334728][T32759]  ? __pfx_swapin_readahead+0x10/0x10
[  550.334742][T32759]  ? swap_table_get+0x1e/0x260
[  550.334755][T32759]  ? swap_table_get+0x1e/0x260
[  550.334766][T32759]  ? swap_table_get+0x1e/0x260
[  550.334780][T32759]  ? swap_table_get+0x216/0x260
[  550.334795][T32759]  ? swap_cache_get_folio+0x2e4/0x2f0
[  550.334813][T32759]  do_swap_page+0x555/0x5120
[  550.334831][T32759]  ? __pte_offset_map+0x29/0x240
[  550.334846][T32759]  ? __pte_offset_map+0x29/0x240
[  550.334864][T32759]  ? do_swap_page+0x128/0x5120
[  550.334878][T32759]  ? __pfx_do_swap_page+0x10/0x10
[  550.334889][T32759]  ? __pte_offset_map+0x1ae/0x240
[  550.334904][T32759]  ? pte_offset_map_rw_nolock+0xea/0x160
[  550.334918][T32759]  handle_mm_fault+0x12d2/0x3170
[  550.334940][T32759]  ? handle_mm_fault+0xee/0x3170
[  550.334956][T32759]  ? __pfx_handle_mm_fault+0x10/0x10
[  550.334968][T32759]  ? lock_vma_under_rcu+0x45a/0x500
[  550.334995][T32759]  do_user_addr_fault+0xa73/0x1340
[  550.335011][T32759]  ? rcu_is_watching+0x15/0xb0
[  550.335025][T32759]  ? trace_page_fault_user+0x84/0x1e0
[  550.335037][T32759]  exc_page_fault+0x6a/0xc0
[  550.335056][T32759]  asm_exc_page_fault+0x26/0x30
[  550.335068][T32759] RIP: 0033:0x7f6f24d9cdeb
[  550.335082][T32759] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[  550.335092][T32759] RSP: 002b:00007f6f25d09028 EFLAGS: 00010217
[  550.335105][T32759] RAX: 000000000000000c RBX: 00007f6f25015fa0 RCX: ffffffffffffffe8
[  550.335113][T32759] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000
[  550.335121][T32759] RBP: 00007f6f24e32d69 R08: 0000000000000000 R09: 0000000000000000
[  550.335129][T32759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  550.335135][T32759] R13: 00007f6f25016038 R14: 00007f6f25015fa0 R15: 00007ffd64dc7108
[  550.335157][T32759]  </TASK>
[  550.335162][T32759] memory: usage 307200kB, limit 307200kB, failcnt 4487
[  550.473542][T32759] memory+swap: usage 300792kB, limit 9007199254740988kB, failcnt 0
[  550.476743][T32759] kmem: usage 299612kB, limit 9007199254740988kB, failcnt 0
[  550.479961][T32759] Memory cgroup stats for /syz1:
[  550.480178][T32759] cache 4096
[  550.483375][T32759] rss 4096
[  550.484670][T32759] rss_huge 0
[  550.485989][T32759] shmem 0
[  550.487949][T32759] mapped_file 4096
[  550.489519][T32759] dirty 0
[  550.490774][T32759] writeback 0
[  550.492138][T32759] workingset_refault_anon 7
[  550.493960][T32759] workingset_refault_file 2
[  550.495787][T32759] swap 266240
[  550.497277][T32759] swapcached 315392
[  550.498804][T32759] pgpgin 368781
[  550.500205][T32759] pgpgout 368776
[  550.501685][T32759] pgfault 677650
[  550.503152][T32759] pgmajfault 11
[  550.504547][T32759] inactive_anon 4096
[  550.506109][T32759] active_anon 12288
[  550.508062][T32759] inactive_file 0
[  550.509663][T32759] active_file 4096
[  550.511187][T32759] unevictable 0
[  550.512613][T32759] hierarchical_memory_limit 314572800
[  550.514713][T32759] hierarchical_memsw_limit 9223372036854771712
[  550.518125][T32759] total_cache 4096
[  550.519842][T32759] total_rss 4096
[  550.520953][T32759] total_rss_huge 0
[  550.522093][T32759] total_shmem 0
[  550.523298][T32759] total_mapped_file 4096
[  550.524606][T32759] total_dirty 0
[  550.525685][T32759] total_writeback 0
[  550.537614][T32759] total_workingset_refault_anon 7
[  550.540776][T32759] total_workingset_refault_file 2
[  550.543955][T32759] total_swap 266240
[  550.545156][T32759] total_swapcached 315392
[  550.553012][T32759] total_pgpgin 368785
[  550.554253][T32759] total_pgpgout 368780
[  550.555618][T32759] total_pgfault 677664
[  550.557176][T32759] total_pgmajfault 11
[  550.558661][T32759] total_inactive_anon 4096
[  550.560076][T32759] total_active_anon 12288
[  550.561414][T32759] total_inactive_file 0
[  550.562790][T32759] total_active_file 4096
[  550.564382][T32759] total_unevictable 0
[  550.577534][T32759] anon_cost 0
[  550.578975][T32759] file_cost 0
[  550.580341][T32759] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10368,pid=32757,uid=0
[  550.598961][T32759] Memory cgroup out of memory: Killed process 32757 (syz.1.10368) total-vm:102364kB, anon-rss:1252kB, file-rss:23052kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  550.714776][  T343] ipt_REJECT: TCP_RESET invalid for non-tcp
[  552.229871][  T349] netlink: 'syz.1.10384': attribute type 3 has an invalid length.
[  552.255086][  T351] netlink: 'syz.1.10385': attribute type 20 has an invalid length.
[  552.258102][  T351] __nla_validate_parse: 41 callbacks suppressed
[  552.258111][  T351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10385'.
[  552.275394][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  552.275480][  T351] netlink: 'syz.1.10385': attribute type 20 has an invalid length.
[  552.278253][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  552.283806][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  552.286475][  T351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10385'.
[  552.286488][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  552.469252][  T365] netlink: 'syz.2.10391': attribute type 3 has an invalid length.
[  552.571234][  T372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10393'.
[  552.576188][  T372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10393'.
[  552.615921][  T374] netlink: 'syz.1.10394': attribute type 27 has an invalid length.
[  552.660435][  T367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10392'.
[  552.913617][  T385] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10399'.
[  553.004357][  T390] IPVS: Unknown mcast interface: pim6reg0
[  553.064279][  T394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10402'.
[  553.068192][  T394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10402'.
[  553.071266][  T394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10402'.
[  553.074713][  T394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10402'.
[  553.299245][  T407] netlink: 'syz.2.10407': attribute type 8 has an invalid length.
[  553.504490][  T418] syzkaller1: entered promiscuous mode
[  553.506815][  T418] syzkaller1: entered allmulticast mode
[  553.935844][  T430] lo speed is unknown, defaulting to 1000
[  553.995485][  T441] netlink: 'syz.0.10419': attribute type 11 has an invalid length.
[  554.502725][  T465] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  557.578602][  T474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  557.939858][  T539] __nla_validate_parse: 13 callbacks suppressed
[  557.939870][  T539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10452'.
[  557.945791][  T542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10451'.
[  557.950261][  T542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10451'.
[  558.929137][  T563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10458'.
[  559.111692][  T577] lo speed is unknown, defaulting to 1000
[  559.113676][  T577] lo speed is unknown, defaulting to 1000
[  559.115967][  T577] lo speed is unknown, defaulting to 1000
[  559.118476][  T577] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  559.123374][  T577] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  559.129540][  T577] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  559.139083][  T577] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98
[  559.154882][  T577] lo speed is unknown, defaulting to 1000
[  559.158368][  T577] lo speed is unknown, defaulting to 1000
[  559.162844][  T578] : renamed from lo (while UP)
[  559.166242][  T577]  speed is unknown, defaulting to 1000
[  559.334989][  T592] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10466'.
[  559.953870][  T602] netlink: 'syz.1.10470': attribute type 39 has an invalid length.
[  560.109200][  T610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10473'.
[  560.342066][  T631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10480'.
[  560.595347][  T653] netlink: 'syz.2.10487': attribute type 1 has an invalid length.
[  560.615804][  T653] bond13 (unregistering): Released all slaves
[  560.691914][  T663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10491'.
[  560.782989][  T668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10493'.
[  560.851361][  T672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10495'.
[  561.250817][  T707] tipc: Resetting bearer <eth:xfrm0>
[  561.289803][  T707] tipc: Resetting bearer <eth:ipvlan0>
[  561.399461][T14020]  speed is unknown, defaulting to 1000
[  561.403572][T14020] sy2: Port: 1 Link DOWN
[  561.425084][T14028] syz0: Port: 1 Link DOWN
[  561.431546][  T702]  speed is unknown, defaulting to 1000
[  561.431605][T29393] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.437639][T29393] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 53143 - 0
[  561.441084][T29393] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  561.444564][T29393] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.448551][T29393] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 53143 - 0
[  561.451942][T29393] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  561.456407][T29393] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.460398][T29393] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 53143 - 0
[  561.463721][T29393] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  561.468899][T29393] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  561.471998][T29393] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 53143 - 0
[  561.475134][T29393] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  561.605209][  T702]  speed is unknown, defaulting to 1000
[  561.732041][  T720] rdma_rxe: rxe_newlink: failed to add lo
[  562.562370][  T783] bond14: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  562.568577][  T783] bond14 (unregistering): Released all slaves
[  563.094839][  T853] nftables ruleset with unbound chain
[  563.116843][  T855] __nla_validate_parse: 48 callbacks suppressed
[  563.116853][  T855] netlink: 324 bytes leftover after parsing attributes in process `syz.1.10552'.
[  566.284080][  T910] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10571'.
[  566.296216][  T910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10571'.
[  566.322282][  T910] bond13: option primary_reselect: invalid value (133)
[  566.326810][  T910] bond13 (unregistering): Released all slaves
[  566.535567][  T934] syzkaller0: entered promiscuous mode
[  566.537819][  T934] syzkaller0: entered allmulticast mode
[  566.595027][  T943] mac80211_hwsim hwsim31 ;: renamed from wlan0
[  566.606658][  T943] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10579'.
[  566.610489][  T943] netlink: 'syz.1.10579': attribute type 1 has an invalid length.
[  566.809334][  T962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10585'.
[  566.812308][  T962] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10585'.
[  566.817134][  T962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10585'.
[  566.903773][  T958] syzkaller0: entered promiscuous mode
[  566.905615][  T958] syzkaller0: entered allmulticast mode
[  566.914281][  T969] netlink: 'syz.2.10587': attribute type 178 has an invalid length.
[  566.923583][  T969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10587'.
[  570.302210][ T1016] netlink: 'syz.0.10603': attribute type 2 has an invalid length.
[  570.332331][ T1016] netlink: 'syz.0.10603': attribute type 14 has an invalid length.
[  570.335905][ T1017] netlink: 'syz.0.10603': attribute type 4 has an invalid length.
[  570.340249][ T1017] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10603'.
[  570.347565][ T1016] netlink: 'syz.0.10603': attribute type 4 has an invalid length.
[  570.352015][ T1016] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10603'.
[  571.279706][ T1045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10612'.
[  571.283981][ T1045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10612'.
[  571.309736][ T1047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10613'.
[  571.313712][ T1047] openvswitch: netlink: Flow actions attr not present in new flow.
[  571.322215][ T1047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10613'.
[  571.389639][ T1058] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10617'.
[  571.434047][ T1066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10618'.
[  571.586701][ T1072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10620'.
[  574.384750][ T1058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  574.486605][ T1083] IPv4: Oversized IP packet from 127.202.26.0
[  574.504483][ T1088] IPv4: Oversized IP packet from 127.202.26.0
[  574.614000][ T1115] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10632'.
[  574.933128][ T1152] xt_TCPMSS: Only works on TCP SYN packets
[  575.059507][ T1160] nbd4: detected capacity change from 0 to 127
[  575.075827][   T56] block nbd4: Receive control failed (result -32)
[  575.079273][  T985] block nbd4: Send control failed (result -32)
[  575.084231][  T985] block nbd4: Request send failed, requeueing
[  575.092866][  T985] block nbd4: Dead connection, failed to find a fallback
[  575.099401][  T861] block nbd4: Dead connection, failed to find a fallback
[  575.103449][  T861] block nbd4: shutting down sockets
[  575.109652][  T861] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.114985][  T861] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.117718][  T985] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.117899][  T985] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.118119][  T985] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.118131][  T985] Buffer I/O error on dev nbd4, logical block 2, async page read
[  575.118184][  T985] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.118194][  T985] Buffer I/O error on dev nbd4, logical block 3, async page read
[  575.136608][  T985] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.146663][  T985] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.159683][  T985] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.165598][  T985] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.170081][  T985] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.173704][  T985] Buffer I/O error on dev nbd4, logical block 2, async page read
[  575.176750][  T985] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.180299][  T985] Buffer I/O error on dev nbd4, logical block 3, async page read
[  575.185534][  T985] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.192585][  T985] Buffer I/O error on dev nbd4, logical block 0, async page read
[  575.198165][  T985] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  575.206976][  T985] Buffer I/O error on dev nbd4, logical block 1, async page read
[  575.213490][  T985] ldm_validate_partition_table(): Disk read failed.
[  575.221451][  T985] Dev nbd4: unable to read RDB block 0
[  575.228010][  T985]  nbd4: unable to read partition table
[  575.250224][  T985] ldm_validate_partition_table(): Disk read failed.
[  575.254350][  T985] Dev nbd4: unable to read RDB block 0
[  575.259523][  T985]  nbd4: unable to read partition table
[  575.458199][ T1194] syzkaller0: entered promiscuous mode
[  575.463908][ T1194] syzkaller0: entered allmulticast mode
[  575.493031][ T1195] vlan8: entered promiscuous mode
[  575.496256][ T1195] gretap0: entered promiscuous mode
[  577.666324][ T1188]  speed is unknown, defaulting to 1000
[  577.701182][ T1200] syzkaller0: entered promiscuous mode
[  577.703958][ T1200] syzkaller0: entered allmulticast mode
[  577.972612][ T1209] __nla_validate_parse: 3 callbacks suppressed
[  577.972624][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10662'.
[  580.040921][ T1209] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  580.041746][ T1188]  speed is unknown, defaulting to 1000
[  580.225540][ T1224] netlink: 'syz.2.10666': attribute type 1 has an invalid length.
[  580.240559][ T1224] netlink: 636 bytes leftover after parsing attributes in process `syz.2.10666'.
[  580.481023][ T1242] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10669'.
[  580.694834][ T1256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10676'.
[  580.699178][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10676'.
[  580.782878][ T1268] sctp: [Deprecated]: syz.1.10680 (pid 1268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  580.782878][ T1268] Use struct sctp_sack_info instead
[  580.800172][ T1270] netlink: 'syz.0.10681': attribute type 1 has an invalid length.
[  580.803739][ T1270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10681'.
[  580.812013][ T1270] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[  580.820679][ T1270] netlink: 'syz.0.10681': attribute type 1 has an invalid length.
[  580.824097][ T1270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10681'.
[  581.012514][ T1280] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10684'.
[  581.200346][ T1286] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10687'.
[  581.335159][ T1293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10689'.
[  581.452871][ T1301] netlink: 'syz.2.10693': attribute type 3 has an invalid length.
[  581.520580][ T1312] 
[  581.521453][ T1312] ======================================================
[  581.523652][ T1312] WARNING: possible circular locking dependency detected
[  581.525765][ T1312] syzkaller #0 Not tainted
[  581.527276][ T1312] ------------------------------------------------------
[  581.529531][ T1312] syz.2.10696/1312 is trying to acquire lock:
[  581.531483][ T1312] ffff888104ff5ce0 (&resv_map->rw_sema){++++}-{4:4}, at: hugetlb_fault+0x4c2/0x1510
[  581.534579][ T1312] 
[  581.534579][ T1312] but task is already holding lock:
[  581.537315][ T1312] ffff888103ab4418 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  581.541061][ T1312] 
[  581.541061][ T1312] which lock already depends on the new lock.
[  581.541061][ T1312] 
[  581.544234][ T1312] 
[  581.544234][ T1312] the existing dependency chain (in reverse order) is:
[  581.547149][ T1312] 
[  581.547149][ T1312] -> #9 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  581.550069][ T1312]        __mutex_lock+0x1a3/0x1550
[  581.551819][ T1312]        hugetlb_fault+0x3d8/0x1510
[  581.553571][ T1312]        handle_mm_fault+0x2007/0x3170
[  581.555286][ T1312]        __get_user_pages+0x1683/0x2720
[  581.557155][ T1312]        populate_vma_page_range+0x2be/0x3c0
[  581.559239][ T1312]        __mm_populate+0x25f/0x390
[  581.560953][ T1312]        vm_mmap_pgoff+0x3aa/0x4f0
[  581.562752][ T1312]        ksys_mmap_pgoff+0x586/0x760
[  581.564601][ T1312]        do_syscall_64+0x15f/0xf80
[  581.566490][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.568746][ T1312] 
[  581.568746][ T1312] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  581.571214][ T1312]        __might_fault+0xcb/0x130
[  581.572832][ T1312]        _copy_from_user+0x28/0xb0
[  581.574527][ T1312]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  581.576720][ T1312]        ip_generic_getfrag+0x149/0x2d0
[  581.578599][ T1312]        __ip6_append_data+0x39cd/0x3f60
[  581.580488][ T1312]        ip6_append_data+0x10f/0x280
[  581.582198][ T1312]        rawv6_sendmsg+0x12d3/0x18e0
[  581.583952][ T1312]        ____sys_sendmsg+0x80a/0x9f0
[  581.585779][ T1312]        ___sys_sendmsg+0x2a5/0x360
[  581.587738][ T1312]        __x64_sys_sendmsg+0x1bd/0x2a0
[  581.589590][ T1312]        do_syscall_64+0x15f/0xf80
[  581.591278][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.593345][ T1312] 
[  581.593345][ T1312] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  581.595859][ T1312]        lock_sock_nested+0x41/0x100
[  581.597853][ T1312]        inet_shutdown+0x6a/0x390
[  581.599642][ T1312]        nbd_mark_nsock_dead+0x2e9/0x560
[  581.601508][ T1312]        sock_shutdown+0x15e/0x260
[  581.603243][ T1312]        nbd_clear_sock+0x24/0x170
[  581.605044][ T1312]        nbd_config_put+0x2dd/0x580
[  581.606916][ T1312]        nbd_genl_connect+0x19d5/0x1cf0
[  581.609069][ T1312]        genl_family_rcv_msg_doit+0x22a/0x330
[  581.611236][ T1312]        genl_rcv_msg+0x61c/0x7a0
[  581.613058][ T1312]        netlink_rcv_skb+0x232/0x4b0
[  581.614974][ T1312]        genl_rcv+0x28/0x40
[  581.616608][ T1312]        netlink_unicast+0x75c/0x8e0
[  581.618508][ T1312]        netlink_sendmsg+0x813/0xb40
[  581.620391][ T1312]        ____sys_sendmsg+0x972/0x9f0
[  581.622265][ T1312]        ___sys_sendmsg+0x2a5/0x360
[  581.624228][ T1312]        __x64_sys_sendmsg+0x1bd/0x2a0
[  581.626292][ T1312]        do_syscall_64+0x15f/0xf80
[  581.628426][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.630940][ T1312] 
[  581.630940][ T1312] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  581.633662][ T1312]        __mutex_lock+0x1a3/0x1550
[  581.635494][ T1312]        nbd_queue_rq+0x37b/0x1100
[  581.637376][ T1312]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  581.639573][ T1312]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  581.641982][ T1312]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  581.644272][ T1312]        blk_mq_run_hw_queue+0x348/0x4f0
[  581.646241][ T1312]        blk_mq_dispatch_list+0xd16/0xe10
[  581.648242][ T1312]        blk_mq_flush_plug_list+0x48d/0x570
[  581.650485][ T1312]        __blk_flush_plug+0x3ed/0x4d0
[  581.652512][ T1312]        __submit_bio+0x28d/0x580
[  581.654393][ T1312]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  581.656677][ T1312]        block_read_full_folio+0x599/0x830
[  581.658769][ T1312]        filemap_read_folio+0x137/0x3b0
[  581.660751][ T1312]        do_read_cache_folio+0x358/0x590
[  581.662749][ T1312]        read_part_sector+0xb6/0x2b0
[  581.664659][ T1312]        adfspart_check_ICS+0xb1/0x960
[  581.666705][ T1312]        bdev_disk_changed+0x817/0x1770
[  581.668829][ T1312]        blkdev_get_whole+0x380/0x510
[  581.670907][ T1312]        bdev_open+0x31e/0xd30
[  581.672716][ T1312]        blkdev_open+0x470/0x610
[  581.674527][ T1312]        do_dentry_open+0x785/0x14e0
[  581.676370][ T1312]        vfs_open+0x3b/0x340
[  581.678002][ T1312]        path_openat+0x2e08/0x3860
[  581.679857][ T1312]        do_file_open+0x23e/0x4a0
[  581.681707][ T1312]        do_sys_openat2+0x113/0x200
[  581.683574][ T1312]        __x64_sys_openat+0x138/0x170
[  581.685525][ T1312]        do_syscall_64+0x15f/0xf80
[  581.687373][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.689531][ T1312] 
[  581.689531][ T1312] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  581.692045][ T1312]        __mutex_lock+0x1a3/0x1550
[  581.693855][ T1312]        nbd_queue_rq+0xc6/0x1100
[  581.695684][ T1312]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  581.698049][ T1312]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  581.700778][ T1312]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  581.703303][ T1312]        blk_mq_run_hw_queue+0x348/0x4f0
[  581.705365][ T1312]        blk_mq_dispatch_list+0xd16/0xe10
[  581.707444][ T1312]        blk_mq_flush_plug_list+0x48d/0x570
[  581.709579][ T1312]        __blk_flush_plug+0x3ed/0x4d0
[  581.711544][ T1312]        __submit_bio+0x28d/0x580
[  581.713368][ T1312]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  581.715681][ T1312]        block_read_full_folio+0x599/0x830
[  581.718174][ T1312]        filemap_read_folio+0x137/0x3b0
[  581.720557][ T1312]        do_read_cache_folio+0x358/0x590
[  581.722584][ T1312]        read_part_sector+0xb6/0x2b0
[  581.724508][ T1312]        adfspart_check_ICS+0xb1/0x960
[  581.726437][ T1312]        bdev_disk_changed+0x817/0x1770
[  581.728462][ T1312]        blkdev_get_whole+0x380/0x510
[  581.730383][ T1312]        bdev_open+0x31e/0xd30
[  581.732094][ T1312]        blkdev_open+0x470/0x610
[  581.733877][ T1312]        do_dentry_open+0x785/0x14e0
[  581.735695][ T1312]        vfs_open+0x3b/0x340
[  581.737442][ T1312]        path_openat+0x2e08/0x3860
[  581.739572][ T1312]        do_file_open+0x23e/0x4a0
[  581.741675][ T1312]        do_sys_openat2+0x113/0x200
[  581.743673][ T1312]        __x64_sys_openat+0x138/0x170
[  581.745601][ T1312]        do_syscall_64+0x15f/0xf80
[  581.747438][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.749716][ T1312] 
[  581.749716][ T1312] -> #4 (set->srcu){.+.+}-{0:0}:
[  581.752200][ T1312]        __synchronize_srcu+0xca/0x300
[  581.754218][ T1312]        elevator_switch+0x1e8/0x7a0
[  581.756416][ T1312]        elevator_change+0x2cc/0x450
[  581.758587][ T1312]        elevator_set_default+0x36c/0x430
[  581.760865][ T1312]        blk_register_queue+0x3e9/0x4e0
[  581.762848][ T1312]        __add_disk+0x677/0xd50
[  581.764533][ T1312]        add_disk_fwnode+0xfb/0x480
[  581.766345][ T1312]        nbd_dev_add+0x72c/0xb50
[  581.768092][ T1312]        nbd_init+0x168/0x1f0
[  581.769764][ T1312]        do_one_initcall+0x250/0x870
[  581.771564][ T1312]        do_initcall_level+0x104/0x190
[  581.773412][ T1312]        do_initcalls+0x59/0xa0
[  581.775106][ T1312]        kernel_init_freeable+0x2a6/0x3e0
[  581.777137][ T1312]        kernel_init+0x1d/0x1d0
[  581.778952][ T1312]        ret_from_fork+0x514/0xb70
[  581.780540][ T1312]        ret_from_fork_asm+0x1a/0x30
[  581.782214][ T1312] 
[  581.782214][ T1312] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  581.785023][ T1312]        __mutex_lock+0x1a3/0x1550
[  581.786994][ T1312]        elevator_change+0x1b3/0x450
[  581.789007][ T1312]        elevator_set_none+0xb5/0x140
[  581.790652][ T1312]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  581.792643][ T1312]        nbd_start_device+0x17f/0xb10
[  581.794451][ T1312]        nbd_genl_connect+0x165b/0x1cf0
[  581.796576][ T1312]        genl_family_rcv_msg_doit+0x22a/0x330
[  581.798890][ T1312]        genl_rcv_msg+0x61c/0x7a0
[  581.800814][ T1312]        netlink_rcv_skb+0x232/0x4b0
[  581.802578][ T1312]        genl_rcv+0x28/0x40
[  581.804001][ T1312]        netlink_unicast+0x75c/0x8e0
[  581.805734][ T1312]        netlink_sendmsg+0x813/0xb40
[  581.807832][ T1312]        ____sys_sendmsg+0x972/0x9f0
[  581.809774][ T1312]        ___sys_sendmsg+0x2a5/0x360
[  581.811526][ T1312]        __x64_sys_sendmsg+0x1bd/0x2a0
[  581.813285][ T1312]        do_syscall_64+0x15f/0xf80
[  581.814961][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.817002][ T1312] 
[  581.817002][ T1312] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}:
[  581.819646][ T1312]        blk_alloc_queue+0x546/0x680
[  581.821439][ T1312]        __blk_mq_alloc_disk+0x197/0x390
[  581.823537][ T1312]        nbd_dev_add+0x499/0xb50
[  581.825468][ T1312]        nbd_init+0x168/0x1f0
[  581.827114][ T1312]        do_one_initcall+0x250/0x870
[  581.828908][ T1312]        do_initcall_level+0x104/0x190
[  581.830691][ T1312]        do_initcalls+0x59/0xa0
[  581.832254][ T1312]        kernel_init_freeable+0x2a6/0x3e0
[  581.834104][ T1312]        kernel_init+0x1d/0x1d0
[  581.835655][ T1312]        ret_from_fork+0x514/0xb70
[  581.837517][ T1312]        ret_from_fork_asm+0x1a/0x30
[  581.839214][ T1312] 
[  581.839214][ T1312] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  581.841442][ T1312]        fs_reclaim_acquire+0x71/0x100
[  581.843144][ T1312]        kmem_cache_alloc_noprof+0x40/0x650
[  581.845104][ T1312]        __anon_vma_prepare+0xcb/0x4a0
[  581.847087][ T1312]        __vmf_anon_prepare+0xe1/0x1b0
[  581.849231][ T1312]        hugetlb_no_page+0x399/0x2100
[  581.851088][ T1312]        hugetlb_fault+0x747/0x1510
[  581.852878][ T1312]        handle_mm_fault+0x2007/0x3170
[  581.854725][ T1312]        __get_user_pages+0x1683/0x2720
[  581.856594][ T1312]        populate_vma_page_range+0x2be/0x3c0
[  581.858586][ T1312]        __mm_populate+0x25f/0x390
[  581.860233][ T1312]        vm_mmap_pgoff+0x3aa/0x4f0
[  581.861955][ T1312]        ksys_mmap_pgoff+0x586/0x760
[  581.863682][ T1312]        do_syscall_64+0x15f/0xf80
[  581.865380][ T1312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.867492][ T1312] 
[  581.867492][ T1312] -> #0 (&resv_map->rw_sema){++++}-{4:4}:
[  581.870025][ T1312]        __lock_acquire+0x15a5/0x2cf0
[  581.871696][ T1312]        lock_acquire+0x106/0x350
[  581.873203][ T1312]        down_read+0x47/0x2e0
[  581.874710][ T1312]        hugetlb_fault+0x4c2/0x1510
[  581.876436][ T1312]        handle_mm_fault+0x2007/0x3170
[  581.878517][ T1312]        do_user_addr_fault+0xa73/0x1340
[  581.880589][ T1312]        exc_page_fault+0x6a/0xc0
[  581.882421][ T1312]        asm_exc_page_fault+0x26/0x30
[  581.884087][ T1312] 
[  581.884087][ T1312] other info that might help us debug this:
[  581.884087][ T1312] 
[  581.887256][ T1312] Chain exists of:
[  581.887256][ T1312]   &resv_map->rw_sema --> &mm->mmap_lock --> &hugetlb_fault_mutex_table[i]
[  581.887256][ T1312] 
[  581.891682][ T1312]  Possible unsafe locking scenario:
[  581.891682][ T1312] 
[  581.893947][ T1312]        CPU0                    CPU1
[  581.895611][ T1312]        ----                    ----
[  581.897384][ T1312]   lock(&hugetlb_fault_mutex_table[i]);
[  581.899195][ T1312]                                lock(&mm->mmap_lock);
[  581.901357][ T1312]                                lock(&hugetlb_fault_mutex_table[i]);
[  581.903974][ T1312]   rlock(&resv_map->rw_sema);
[  581.905639][ T1312] 
[  581.905639][ T1312]  *** DEADLOCK ***
[  581.905639][ T1312] 
[  581.908464][ T1312] 2 locks held by syz.2.10696/1312:
[  581.910203][ T1312]  #0: ffff88810a706c88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  581.913078][ T1312]  #1: ffff888103ab4418 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  581.916478][ T1312] 
[  581.916478][ T1312] stack backtrace:
[  581.918433][ T1312] CPU: 0 UID: 0 PID: 1312 Comm: syz.2.10696 Not tainted syzkaller #0 PREEMPT(full) 
[  581.918444][ T1312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  581.918450][ T1312] Call Trace:
[  581.918456][ T1312]  <TASK>
[  581.918461][ T1312]  dump_stack_lvl+0xe8/0x150
[  581.918474][ T1312]  print_circular_bug+0x2e1/0x300
[  581.918486][ T1312]  check_noncircular+0x12e/0x150
[  581.918496][ T1312]  __lock_acquire+0x15a5/0x2cf0
[  581.918504][ T1312]  ? trace_contention_end+0x3d/0x140
[  581.918515][ T1312]  ? __mutex_lock+0x319/0x1550
[  581.918525][ T1312]  ? hugetlb_fault+0x4c2/0x1510
[  581.918532][ T1312]  lock_acquire+0x106/0x350
[  581.918540][ T1312]  ? hugetlb_fault+0x4c2/0x1510
[  581.918548][ T1312]  down_read+0x47/0x2e0
[  581.918555][ T1312]  ? hugetlb_fault+0x4c2/0x1510
[  581.918562][ T1312]  ? hugetlb_fault+0x4b2/0x1510
[  581.918569][ T1312]  hugetlb_fault+0x4c2/0x1510
[  581.918577][ T1312]  ? __pfx_hugetlb_fault+0x10/0x10
[  581.918583][ T1312]  ? __might_fault+0xaf/0x130
[  581.918593][ T1312]  ? lock_vma_under_rcu+0x1d1/0x500
[  581.918605][ T1312]  handle_mm_fault+0x2007/0x3170
[  581.918614][ T1312]  ? reacquire_held_locks+0x104/0x190
[  581.918623][ T1312]  ? handle_mm_fault+0xee/0x3170
[  581.918632][ T1312]  ? __pfx_handle_mm_fault+0x10/0x10
[  581.918639][ T1312]  ? lock_vma_under_rcu+0x45a/0x500
[  581.918649][ T1312]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  581.918661][ T1312]  do_user_addr_fault+0xa73/0x1340
[  581.918670][ T1312]  ? rcu_is_watching+0x15/0xb0
[  581.918679][ T1312]  ? trace_page_fault_user+0x84/0x1e0
[  581.918687][ T1312]  exc_page_fault+0x6a/0xc0
[  581.918698][ T1312]  asm_exc_page_fault+0x26/0x30
[  581.918707][ T1312] RIP: 0033:0x7fe23d466601
[  581.918716][ T1312] Code: ca ff 48 d3 e2 89 f1 48 f7 d2 48 23 54 24 10 48 d3 e2 48 09 d0 48 0f c8 48 8b 74 24 18 48 89 06 e9 4b fd ff ff 48 8b 44 24 18 <0f> b7 10 48 8b 04 24 48 85 c0 0f 84 95 00 00 00 48 83 f8 01 0f 85
[  581.918722][ T1312] RSP: 002b:00007ffd48fea270 EFLAGS: 00010202
[  581.918730][ T1312] RAX: 00002000000000ea RBX: 000000000e000002 RCX: 0000000000000000
[  581.918735][ T1312] RDX: c9d3b4614589f824 RSI: 0000000000000000 RDI: 000055557c8c73d8
[  581.918740][ T1312] RBP: 00007ffd48fea390 R08: 0000000000000000 R09: 000000000000000e
[  581.918744][ T1312] R10: 0000000000000004 R11: 0000000000000000 R12: 00007ffd48fea3d0
[  581.918749][ T1312] R13: 00007fe23d815fac R14: 000000000008df0c R15: 00007fe23d815fa0
[  581.918757][ T1312]  </TASK>
