last executing test programs:

2.527227942s ago: executing program 0 (id=3153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a000000fffffffffffffff1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a000000fffffffffffffff1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
r8 = socket$kcm(0x10, 0x2, 0x4)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="25ffffff5e080100003d3fc2dc0b7386ecd1ba33ca5fb5db09aac833f504eb9b3ea709d704dd2921be9372761e1ae340f6d5ac890858ce886110ebf19ff2f835139ab8a3446856d8ce520e18830a95e6c111b990ecc298662044710f43c0e4162edfd7"], 0x14}}, 0x0) (async)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="25ffffff5e080100003d3fc2dc0b7386ecd1ba33ca5fb5db09aac833f504eb9b3ea709d704dd2921be9372761e1ae340f6d5ac890858ce886110ebf19ff2f835139ab8a3446856d8ce520e18830a95e6c111b990ecc298662044710f43c0e4162edfd7"], 0x14}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000de80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x874, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "b665b88e1104a9e19e5eeb62"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x89, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9349e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x720, 0x3, 0x0, 0x1, [{0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x20, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a028412139aaf9d7"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x37, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb9371"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x53, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eecaa84e2e810eddaad2ff0dd"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f182bb00dde2c0eb58ccd8c3c1b2afb8a3b1bf8c5ef325930212d533596061a2af5b88c51ce85186eac014a92c3de7a0627"}]}, {0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb, 0x1, "c60bcbbe83d695"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\xf9\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x9c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "666a203baf36bab1bb85f4519c122ca289dcd11925e84ab71600a4a601065f8e5f6520aeca7829cdc3a18535ae84b6461d7f69"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xfb, 0x6, 0x1, 0x0, "15a378cb1185ebac10a35259329a0ab752a289c7d2a6e5e0cc48530e10bf3e0b223189dce581ea380c10710dfc044b77c8e059916e3f68a6587f64b35c6d011945ea46a1bbec21497e1773357fb06275454537da85c5bb3968d61c335c600ada03e0696bbbff61a31602dd1eb1822a393da8c3f9231058993738c3ebc2265aa3d3e7dcdc7ed65f54a2d4c7fec67677b5b163e2a3050b68f4c8b505634acfc4f98cea005eb572a6f0a8aab9135fc6b7dc5b84e9d3568a4b9607f99d979239ef9e7049de8f1ab62ba7946b1115c773d7a2e95488e0f0a0f5f5d295085d2647ade57efb432662d39f74c5a480ccb5428b727b73998ddde26a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xf4, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae32"}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5476e4a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x48, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x34, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xe}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xfff}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x24, 0x6, "3eb45c5a436a8675a6f4475ba5436a923b1f798c9ce8d7f61eecab59ae06a1cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbe8}, 0x1, 0x0, 0x0, 0x8040}, 0x894)

2.376731558s ago: executing program 0 (id=3157):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x2, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3b}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}}, 0x28048810)
sendmmsg(0xffffffffffffffff, &(0x7f0000003e00)=[{{&(0x7f0000000440)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0}}], 0x1, 0x20000004)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x480, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000180)='v', 0x0}, 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtfilter={0x140, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x110, 0x2, [@TCA_CGROUP_ACT={0x10c, 0x1, [@m_ctinfo={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80}]}, {0xd1, 0x6, "c5fc5480e210a8ef05ad134dfd5c886c357be8c34c8edcf4a01b6be77b770194115556ed91beb8f47168e30a9116d7ff5aca29b3645b30070dddbee715fc16ec2b531890b473c9462efdd169bee236e317a7a856d11507e414e7352c0d9a4ac1f9c7656ef74eee4250d2f98e7e99b346509d9ca2e423e2949ab3f6054de0126db65e68e9c9f0878075ad3c872fdd15f9b11eae1851f944b6893eaa6b1cf96aa4dea3b0677a4c8f1d00c8e8bbf131c6c61e8b6757ca11e3745671715293d3a2d1ea8c9bec179a9ec486f92b4ea9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x140}}, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040006000500090001000000050003000900000005000a00010000000500040002"], 0x88}}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f0000000080), 0x72a, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000017709000000010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540"], 0xe0}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)

2.183459583s ago: executing program 0 (id=3160):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x138, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000840}, 0x48851)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x78, r6})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x42000000}, 0x0)

2.079384274s ago: executing program 0 (id=3162):
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, <r2=>0x0}, &(0x7f0000000580)=0x14)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/cgroup\x00')
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8004)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'bond0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x2}, 0x94)
r4 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c)
recvfrom(r4, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4fda0, 0x0, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000010)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911ba000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x2b, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

2.01915225s ago: executing program 0 (id=3165):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5}, 0x18}, 0x1, 0x0, 0x0, 0x20040014}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f00000000c0)={0xffffffff}, 0x10}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006912000000000000950000000000000088cc29d04b0e71f163ec08a632ce9bb6f416a777b56a08212ccdcee5c9cfdcec6cf563a75b28ec77bee80fb8c261870621cfa38723096c92636b891afc8ba1d2d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a090914"], 0x44}, 0x1, 0x1000000}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000fc0)=0xfa34, 0x1)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1.509673204s ago: executing program 1 (id=3176):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x17b8, 0xffffffff, 0x5c66705, 0xb87a, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4c02c1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)

1.430000162s ago: executing program 1 (id=3177):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r8, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x138, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000840}, 0x48851)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@local, 0x78, r6})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0xc3ffffff}, 0x0)

1.429740344s ago: executing program 1 (id=3178):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041)
syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94)

1.258717554s ago: executing program 2 (id=3180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv(r1, &(0x7f00000019c0)=[{&(0x7f0000002fc0)=""/140, 0x8c}], 0x1, 0x80000001, 0x100)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmmsg(r0, &(0x7f0000002b80)=[{{&(0x7f0000000000)=@nfc={0x27, r2, 0x0, 0x6}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000000c0)="04f2daf33e28a45cc9edc487a0fd480a7b1871177f8884601eb036e5eae3d04e", 0x20}, {&(0x7f0000000200)="64fc53d324b225adb893f320308ae637631b8a6d7ecda8ca18238c1af52e18c9ee6c97a6026d9622c7a195afe1f9eecc74c37e153abc3aa928e7b104bed6b669ca329afd7de37fec7d64757b860db02b6938a624b4272283d3d444757b26f830c3788b89f85b81f7f2ca0bc7b4120b09187872cc2c19f97e1ee8cdd88be1f53ba8fb907872a3a30dbcae1803bd2ad4d4b6161de7856f8c1b3e29cf344bf83df531c62c51c6367f4a36dbc03ad9ab62dc7433fa3123b086420f42243c2bef69e68f16882e710753440f5eaeb0fd35658a4d1b1dac00968000db78fbd2e9b30d", 0xdf}, {&(0x7f0000000100)="5b36113fc026b45c3bac05f7cfd0ee90c021c19208ddf3a6fffaaff0fb7083fab706d5057c2cfffacaa2ef0421", 0x2d}, {&(0x7f0000000300)="3fff23965f483ff33b2efe77e8c26c6d7538a082d7c79850cf3bd4cc39bfee7ee820750be58aaef0f9b9838820614255cd2bf7dba4100518f707496f1ac7bf1fd4359ad4beb5d8e99c138051216c1f59189c1da2e95e955a1164a3c7757bf76210dd9a83642a71089d1f524b572b2eefb31790ff330fe84f73e2c7cdb99572fc67017be97d374a149fd292f613660023944bb29a190790baa155dbcb39c3867c1a5bdfdcd129436fb045e045ea0b0db1f916a13c9d8e77ad1b56fe37d8d3fc609bbb", 0xc2}, {&(0x7f00000004c0)="c9f18aeea70c81189bf41249e65636855b2f77e968a930dec716ffc20334e1356883e9fcef65c3132f2e588fb5e8dfb7a6faa68d42ae4d63fcfb646fcaef0dbd6f445d5dfa67be77b2219847962e1874355804d1018df6d4cada449d139150528c61d3dcf03fc6a72dfe162244e963d06d2bab3804359cf937e0cada2e49a71189fae8e945bfcb4f7fc413f2f9e8c0827649cc0acc9d67888587aac69769c56c028221740693bc9064e78f08124a30a52bcc06b77f194018cceeac04eed4caa95bf79a5332b87e3683c80cfae4e5fad6fa9cc08f25e043217d9fa6474973d51eeddbd42f1c7bd3fcfc3b120512b660d3c3f34e366557ec4f0284807e252f9bbbbb764586a737f37281cf8cd80e5ef46174780a8dacd2e155cfb112face56e351c485feac3561e625108d4350893ab32c6c434323d59bc8a087632989b3656e22c6e81fe3b8321733f3128493e1d14251cdcef30d5b2fcd48c5ce3e45472caf184fad53d7bab49a9d2bf8357aae53527606e89c7fe1e70f9795bebe37e4d7f140c3132ba6e8f4310d7c3197d0af34c6d41183c48ad84ae0492f42031316904808c16a84fb09448529f5f2fce36619418d0553525d49d3cc7b7ee3d0af7e1e30bb541bc5c03b0739a15a22bcd7fbc978dbae74efa19da2d346f6a29d4294b9a3b0afe438d30f7702af41d6b84264eb5d33b347ec39d3e3f14ef45e4cefa0951a8b44cb916e88b0af177ef137980e2563aba30bea274e74f089e57d368e53f7db2cab8817dd20a2e64855f2465ead6870eae27e265388009aaaab8ca79e2f650bdc6fdcf389031b86d3ad395c3f2af002fd99740475e1ef0beb3053ae3fe435890c4357bd9b1adc48683dd717259b7eb10b47c697bb80eb9362b32abb39ae9088bafaefe58ce5a5fa3fc5ee4e7320c38e973b6aa06d5435582d09e1a161bfbdf135196ee1bff296c1936ac88999412e047d60c63b8588ff185003398f1075b76ccdefd82f429c107afa7995061499e1ee9de60054c9f5d701708124fceb21a3db02d5975d346069f1520a0a95962a553b19fa7bee057176008737ec9d50ac2a585fb6d5bcf3cc8f74553683675e39d03b45574b831187c8c87c062af6266cd9cebfa23d5f1ce0ccab7452f1781b734ecdd6c96c173dbd63c463e8fc3a90d282875dc5b7ae43cf5bfd97e6bd91b9548f38cfd0be1259e1ef6b88582db7816fc6abbe73dffaabadd4628cbabd2cbc9ed996fd844ee4696dfc31171a50d2e67b7fd075904573cc1c6711a3eff67b447462bdf5fd3e13bb28ae4582a2ef7701d88ee554805b4d599f6c694b408d748233020fbe040c7b3ceebfdf8661a90dd1c6f046532bb39df63a239c434839b33e63c72d73b68c581129aca710b838cceaeb8a22b2b012a73cbd27e47ea218f5ac1fe778ed869a21367f40b220950e1dab27725dfd837f76f749f69ff57a34d00469edb85eb2083205c6990bf3390633e57c6a8c90611c0bbe19c169239ec202f2f0e5b47d3392dffcbeb313a217ef340cd417ff7dba024026b4bf12053aa03f9f7b2fb63aa4b2f08127c0aaf1f532ad324f6e1a7d9a622c9b099107e97a90c6c6a7d2714fc95e06481f9d5e480af04c80b47a0642859c2b050c5344870a61ae7f4fec69b3f4b699fbcdb712bd2f9794aaa97f3f2dd1f1c717d7ae81f3bbff2ea1f2db8c7fc884d02e49ab579a9feecc58b7bc0e5215c1a7961936281c5e79cea95077fc8e1ac26f1ee1cd854f6e037261cfec8128629c193eb724eb6dfe07abecad7a225e1c517ffb721655ee5f447ab469111d915b675914cd41d41ce91fa75fda2bf0bec3be05fff76147a32e0a4445bbd6bba837e24acf15419485883f1bccc76b077390b6e601951a32eb479bae2495cbe78a1491c63f65b0061eacac865e621030faf8a807b19db44749f2d8f0ecc9d48e6c0f60a5bd119b16e1745d91e7038bb472c81e73b464d20d0d1471b632a07591148d297be715cb11b039820cc0ce8250cfae9cd9e968d0b72c8445f18001d6492f6aa2fa6857ca4ef97bc151e83ae14f0febe44aa8064237da2173819d689e9a005ec32f7d03ac371258ccaa6b324eb993a1fa2b14924a4e426c305f4a2920ed8cd48d8e8c86f2717445ea48e6c48ce17f66765741ecfda78e5c7508847b93cea3b969aa1f68dc61957bd3c6aeb778cf219dd7a448d3acc835c6f7f06d50217e1b7161b4402293a590dce248a80de94972348ff3747cbc524dbd552a0757e91db88537f3a4287a98d4043c48cd0b0db96e2536c7468017d19b2cca58add1bf0db4796fa051a73daac17dc2dc5ad98232417442666c571c8e4fe7a8430e518f1b168ed3dc8c76cef5accf1763a61855f3c5a66c253a9a286d28a06e8fe0d7cdff0ad2eec38ea97bd6f2cdc4e46db0b710eee25b24212902bb442c28f3a057555fea72187f54390d2cb26ae7392870d9ee645e650b4f1b62f44103a44c5ee538903f2fcd003768d7d258a41bafae3692d3e1436e885c4399afa00cd994f16603b9b3712d8d2eef6ef0638d8a17fb60081397278a98f3cabf760183482c7e6ac6cbe5e3456dbd7efbc826ae95a040e54caf99dde180960da8e314944f4418948f11ac0e4eceab99682a51546942d7817a473a0a053365ba7e68f8187ff1b1df299f14d57e4a94875434babad42932d8c17ed1727f6f97b3efe0d8cbc2089830952a6923be117baeeba2178f02740a7a5802accc75d571a7a8b93c487e3bf87200df07566dac8aeaa1471ad526ccf1f108c8f7b3da9f6043f0c5c8cabdb0ad423e24204e871935bc3fe330a1bd0ff62c0bc72708e6cde426471b4023201ada9e02ed7b8dd94d211b2d122ec40f641ae035083fdc08b668082004579d969cb18580c23e843dd6df2691922a615dc2cfd3b613a597bbd69470274811d60e28809afa08725a57089b9f02d2cecd2eb35ecc24596cdf0f5aff08cd3e34570ee0c961d2d883266c6d07887e1c29fedc3608a5750e7722658fbba840f686c75dedbd6b4f1d01a3b4249b421c13e4ccdf2da92aae4b3cec79c61e414f8afbb1ab427a5357dcf03327bf922b587fbcba146a15817a075ff917338e3800395f6cb909ccf3971188e4bf19feec407dbe79904c47062b6e043e1eb32ca2bc3d73e42dd39db1ffbc4167532b479eedb2438ba7188a3075809862b5f470524b8fcbd8e5cc6085472256fbe47343b21bf4ea5786c7322f91c893e8b214e74a8856b29c53f03be8df40da2e9f9760e4df12d11b82034c68956ea499a85effe2e2d6be5354fd192432a085be170f10a29cd9b3f910379959885f67d766a723fd9443d573198d99975d638839e047c2d7da26e25007bd165c34b41cf1afc8b0a0381f290392cd9d0b5e287fa5af947f2999a38411df584ec57ee6458b3ba8ef5bb81d972cf85e986ff6932f81593745190976399052ec27c602f0b9d1b3bdcd3a0e6c130bff2dfea4932616adc8c2ccf662528dc8ae918b463bd11b8d1725d47c5438963d6b412b71a540448388b33b81d776f8470e5fac5e2fd02fc1d7eade367ec67e05933f491f5adfa3577430a35cf5631ecd4def46b988f4eecbd1561aec6c583c69937f39330f991e00953dfe8991a32bd96844e143b0d7f3b5cd00da51a9a8dd8fcc30468b8cb5bd2cb2de1b3fc512777c624a2a25eb5aa86c8cfb3657bdddfcd313ead59c4604ec402487c25110c207e4d7346ecea09c3f91f0484fe3db32c478ecb842971e72385ac88eef4232638086c561a0531e04c03b7b4305a672aa7a923a5ff348cef0409c93d748f22e87eac5e0572bbdc862733edb593f12583ecd47701c4dfa9f8617263eba464c57376aef4107d274b30a487c3d836a0dece819eab66cfcda633c75d0b2b367f0903805756a146cd9bce22cbe4aa6f48b0bd328a38a88b2043a1f045680691637b63a819370a9c0c327bad8bb8a0268a49554d0d7d719e3deca10d8aee5cf425b692ad2ccb5da8665a214d73db4c2e0bbc6058759ad06f6e100f23f46e0159ec703ed3384a85660bb0b25187220233167ce90eb5c48c3d0724741558cdfcfad524ba835829a461a6764daed9f550cd24ba7c35e5bd4131c4e0e7bcadf28512d2ff6ac4e467c3821d705c30ce1b8c871d118f1b6d583df86d3f3a4c3d74b8be5a18025a48ac9d4b87ba835c8a644b7d5dc3503fa045379ef8821519c53859e301a383a8ed404877882afbb78c6eeef5a7f6b803bfdbddf12309d33aff810bdad03b070faf84304327bc1a8c8b178a10f200d2765fdd40383626deb6486f58fc0fd0144637b8fb14eb5f4f4f0b7144ea324a4c94680c06e4d53e93d67a17d57f8cbf6221d7e6862601fafe59defd4b94c9794ff673d0ee04b2ca6e69760f0ef43b832be4d96b8596425b22fb31631bf4c1c8d82f2c7c4f176bb9aae7d8ca2c47f26caec5e394c8e7c5966360c27e3fabb1aaa8711c802d47a290083db82dd549663eed39cc7a0b657cd26013098e002a2d7d7d33c1b76c2c4ae8dc2efbfbfd40736e4906d1920ae04712d9b104fd381e3a27f7cf9b8759f70ff809476ed2e0708e59f3de8d238c1478f2561e28d9cd4820c4cfcb37b8d471e97f5e7164055de328de2ec06005f5e3231355d6f2b3c15631fae2a033457364d006b02455b89c1933da7f8ed4555ffc04cc5e12940e034a2183ccf8cd497dcacee3b0b1a2f725a9afa5c0fb9888792e3015e32b9a524e864e4b30f0dd4eb653dc35c25b550a33ba9dccf9975d2517ab9080ed2a5e106e47b4e8b5a62d71e6b5d9f45b685347f47f602570e15637085b49e757369088f0b68157b9ac436532f6c46693ee5f2f6255525447d54c6a288391c3dd7c09044bd0f5d68762c49cd969757c0654811ae7ecaa6c40b58e471d67ecfd3a63410e2f13bd6c7d0edb6dcf0204cb28328f01e80d32e4ab4ff94fe8f06d4da6d34cbfa0052b0a9fd99bce6550f560bef400bdec90478b89b432fb4ae1e245a01c9cf09c6af4a7e99c18adfe53125d6f835bab621b7e44553b5cd0810b2f53534a98a135e9ec940a2fc40be4587e19e6134aedf114fda53cba4915c105e5baab4d2091fcdd9067b980c77679ac380340e2aca62d1ec1555ad0850d91ee0ff6c24d62ef1b25bb704349649d5d5dd27f373599a71c7e27c93eed5f1886d215294366d9983236c9acc9e8fd5d1bed89edcdd14e75f87d65e3899192c99b34f1c2c072eb9ab42bce924acba62a6eeb4e003d537b07f8775411cb50ce5a332bc4986747c79d0fa9b5828b7d31cd5e891187e5033d7d4621706c225093944584a8683bfaa0beada9a7eb65b7c016879b80757b5ef111f9064418445c539733d2235583b88210d81a0db4cf5b6b9f2785cace64ac089a311fc94dbecb3e138e4575fc0e747083c9ac436603e0b2a6c7910328aac21d7911b443d072875350206d4ac4280efd183611d9bd7064631d87ba85343c0f527e8515abcf381986cd599ccf8dea43966dfc6f19b4059e26087261f4c01b18060ef85ef03aff17aec489622a2081db33acf13df1f4c1fc36dce355b5d5eae65e0f41e1ec9a986261667b5c037d0958238cfc46c8a6e456d0592d676ab42e157d1f5551f8c82997e0cdd60f6c3b2a8b63e95fbd6009c7e8d2a5100d101ff0ca8fcc1c7fdf3673e1a43a18a86078ce759c2e33c7793a0865b5c69b19fb3c568b1a13040ffdffb0a221f89a295f6de184533cf2eeecdb7b18f92d00b95e39ba04c36a0d82765e7a5d9289070472f521b5aa37adfe7c364c8a28fd2583109e3e9d7", 0x1000}, {&(0x7f0000000140)="c80fea5fd20ab9734dea9fbf771bd8e4", 0x10}, {&(0x7f0000000180)="a0e55b8a115ce09c838ccd9b87dad6371a36fadff79f02550c8ffeed989cd955b40c785207bea2f1145ef08896aa36eef526eb71391c5580aa3c93", 0x3b}, {&(0x7f0000000400)="30a6ac323831cf77c0043dcc934b1eed33eaf1b01f7d2d90061130b885adcd249961b6fd8db12a36f545fb60e40abcd9c2387696462372d5e3cf19104984510c23c019e354e2ba87ea360c42270578", 0x4f}], 0x8, &(0x7f0000001540)=[{0x78, 0xff, 0x379b1f23, "ca91f613eb027a2862e4a0cfb84aba9baf2cbab3f40fb8cecbbbf3225de4ed2a248bb66dc80e3e8298cb16c8c5bb456f0a82c49732c48c551c57171a1d313b30501cbac2af102189c58086f22e0592e5aae96d02e7e81cdfb4c98ef4c241248e7f"}, {0xa0, 0x115, 0x5, "d196ac3c25503300d95998ad47b51c25a49a4f3c6327cbedd429733ca3854c1695330fea2c78c50896445da9677f8a391c9b8a4dcd0a75f9209364816ba701a282cdaf03cb57591be1353f067cba41f30e4ff569bac5393022889a2580d3c60657a0d6078a171bfa23d3277e2315997f623faafb571a1b1bd71d6d42bfd7944f7900cf7454bc143b062bea045c8f"}, {0xc8, 0x109, 0x4, "df3f4bf4cfb2159d4d9a493ef70b50b70d7ba1c2b2f9f866d99f7cb74409f499bf45cb866311ad13c517b20379acbe09c34a280501354182555ec091450b890fefe833968e54280013dce42e2f978f36fe6339972915add948d56b7d25863045ca6b9988d0a41d7b2f250241038a8a8d87ebdd196859bde5c2a0c59a09dd01c292aa642e90e255695b447277a14acca5156499ba6bf6a0a7b90f12f7ad90406898699d8eb34a69619fa6ab535db86a4804d9"}], 0x1e0}}, {{&(0x7f0000001740)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000017c0)="469ce6193dcdc1a9d7cf40f1e0702b02803a28d6e05604453873e1e0cc277376dae6211429f76fead65432460f410648568a974081d1e3388e1fa4fa68477437fb62c461ccd47e9230281882b53ad25d6cdcfae0e3cd23fa686ed759c24e45bea5d7b7f7f4584ae35b56797d", 0x6c}, {&(0x7f0000001840)="e2b8a169332abe5d4969bf263ac6a15ea505afef384184a95bd638fb357df925875b86fcc6c2cf2b330a46f8c08da22200de62fa0db67c92938f062d5140e43ada2368538c9740d814122d668e41f755952960b1337086ab7de534a48ca298f45736b94ae7fa70868c80a2c7bd048e5526852380ec7c93d6bfa2f8a197fe424f81867c437dd95e24e1ca39d2c820cc83874b80570b99380f6a97d7cc2407d1970f198e51033ee26710e53af60bdeb4999e3e23c075ec7589142f65eba7e8626bd01f4166ab4d4693f938a45fa74030d46ac9c13299e2049e923b5a76fd16497c", 0xe0}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000001940)="5210ca419a4a7f9c50520c31797134246d14bcf62a3028be5d7dd0cabc1fcefe73aefbdcc0c3d40a9a28e9f6440f3ca1f456c6659b4da9ebc7b4b04e56b942ecb751ebb499ad6556fa976c6276545f20b6", 0x51}], 0x4, &(0x7f0000002a40)=[{0xa0, 0x112, 0xdc, "b8a4132e8f30b26c4106e7f87544143af487b14cf18d515f101092b5abf5aba9da5533125fb6a506ee54e4427a4aade02e16ee460a538be88010732bc5b0e8fddfc221141df78626b2a2eaa9866df102684763e904d05b53f1378ae24a709f25000824ab5787772ab41490a7e8a54d939098427ed2f324d8177350faead9caab003da134199066399d6b"}, {0x60, 0x10b, 0x80000001, "21e3658eff6ce6520398f687ba38e1c44296a238271c335f46b8f3374bb160ca6be678e5d9dbf3c66132391fd48a5deeafb17c3f68e2b3392eb713cc7ddc4e174be6c185fb21f3e69ac413ef239ba82b"}, {0x28, 0x11, 0x5, "da176b8dcb5e6068f4ca09760aca29a51bf7f22b65fa4d"}], 0x128}}], 0x2, 0xf000000)

877.008614ms ago: executing program 1 (id=3181):
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000))
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={<r2=>r0, 0x1ff, 0x8, 0x10001})
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="09a152cf61cf4768f177a5c7d362fe7abeb3617bb26efc3d5fe24d8815102be14fb1cdf2ad", 0x25}, {&(0x7f00000000c0)="e1eb9ffaed40e072eb69d5fc4bcef335906e47b7ae85014cb637a2e671a36a1ac40dc54699bfe182dbee349afd9b13e0e674a54192c3766d2696ef346b630dcbfa3b", 0x42}], 0x2, &(0x7f0000000180)=[@iv={0x88, 0x117, 0x2, 0x6d, "e5cdbd59c8a3c44fb3bf2e2aee7fd0d599d6cf03a6e1decaf6ca98989dd59fd299822930cd06600fa174c99c5861a86b06ce116a4a2aed116ed77c84b066306a7c4f3b9add1d6513d71152845a01d81fc65f60ec8109aff9dfacebb7dd6ff98b95d654e5bc5ec7a612fa4451d5"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0xf}, @iv={0x78, 0x117, 0x2, 0x60, "594c67b246ad4296fd42e2a3f5e3e4fdec8ead58196a0316ce6069668aacef482f3879d794a79ccd72114184280ed71dea54f4d2a92fe74c9f275b37524622e538b173edae6ad28a59c5765dc3b52423f6aa623ed7e887d1a391d5bca40517c4"}, @iv={0x48, 0x117, 0x2, 0x33, "a5ab2544c0454442045021098c3b771277eef172e1d76939b2ef1e69f2b942910cdaa792a8fbbf9064b64c65ced8bf354c23fd"}, @op={0x18}], 0x1c0}, 0x9b2ce111ccb593dc)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x22c, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
unshare(0x8000800)
sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="eb53af734be1aa07df4d706601d36538422a4553f462f5a35ebb367299d604837d339b76704177c273d38db5c8640c2d95913a9beabf43a9a85323bfe7842aaf056c5511bd7b6d", 0x47}], 0x1, &(0x7f0000000780)=[{0x18, 0x114, 0x81, "abf4f279"}, {0x20, 0x12e, 0x8, "b6b1d4b1ba95152d0195e31808"}, {0x98, 0x108, 0x2, "ae1454e0522144c9621a6997428b4d3f04b20cd255ccb91e5e2864c8e60f8fcf8710ef0a5da141871aaf4c3a9dce86a249c8f2eb33ddca03fb455f38f531f3af3f5aff0acbae423c58b23022e9744a0a657fe8cd9032aa7aa0b63f9a469f41c02f6f17e43085bb7fd64cdcdd5bb73d39422e10d2528d15269b9f42810688d128a0cbc90e6227"}, {0x50, 0x117, 0x81, "af5ac77a1080deb8f63e624e9dc715981e6ecec2d45de799e9ad98cc428e8c3aa10fb17eacbfa91df28a5cb2ed995113366f415370f9e76022ee"}, {0x1010, 0x111, 0x7ff, "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"}, {0x28, 0x116, 0x400, "7eced9a2b5a3d4670e3a5f660c46dfb918d9f7ff"}], 0x1158}, 0x1)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001940)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x2, [@empty, @remote]}, 0x18)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001a00)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x104, r4, 0x200, 0x70bd2a, 0x109, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xd6b}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_IE={0xa5, 0x2a, [@preq={0x82, 0x25, {{0x0, 0x1}, 0x1, 0xe, 0x1, @device_b, 0x8, @void, 0x7, 0x7, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}, @random={0x9, 0x66, "6082e910e8df6ecf3bb13b7976e172c285162838c5b5317783494e8d0796cf213eb2118ebfd5c1e90c01434b519459ea56e95bf7770efb46e7e5c1a8a5e3e3d77b3013e0c9d77f39ab7ac24723074796ce2bcedbb1a1fedb8a71076218a6f3a93aed9beb5ba7"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x6, 0x3}}, @challenge={0x10, 0x1, 0xad}, @erp={0x2a, 0x1, {0x1}}, @random={0x4, 0x1, "ae"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5096}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x24040041}, 0x80)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000001c00))
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r2)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40440d0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, r8, 0xa00, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000001ec0)={0x1, 0x1, 0xb8, 0x1ff, @vifc_lcl_addr=@local, @local}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f40)=@o_path={&(0x7f0000001f00)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001fc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000002180)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f0000002000)={0x12c, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5a14a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46fcee52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a84a2af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6803ea5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cb3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6547cb75}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8460}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda45}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe3e5d35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e976fc5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3621}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26173333}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7491}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x315e}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x12c}}, 0x781f08ecbad17e1c)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40008208}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x4c, 0x2, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40045}, 0x80)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002340), r7)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x38, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4000001)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000002440)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000002540)=0xe8)
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x80010, r2, 0x100000000)

356.956235ms ago: executing program 2 (id=3182):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000240)="ad", 0x1}, {&(0x7f0000000040)="68b8aa932eb6f4940a82f1523117", 0xe}], 0x2}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f00000001c0)=0xfffffff1, 0x4)

354.054833ms ago: executing program 1 (id=3183):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)="ab09d55949161aca3034bc2da0d85e631a5fb071ba417a87062fb848119cf3cbeb13e8d37387f59ef3e4cb4839b0c753be1f6678ebed61b4f8cf47b0bcf8f54ef36087dde10b05b4165d226e9c92aa28c50d45dc7fc5", 0x56}], 0x1}}], 0x1, 0x44000)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f03000005eb0000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a", 0x43}, {&(0x7f0000000900)="8d47487e5461ba7b8d2c87fe38df2f1b003ea2ccddbefcfdcc", 0x19}], 0x2, 0x0, 0x0, 0x1f000801}, 0x4000)

299.413756ms ago: executing program 2 (id=3184):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
sendmsg$xdp(r1, &(0x7f0000001740)={&(0x7f0000000300)={0x2c, 0x9, 0x0, 0x7}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)="0a833ddcbd7f9d68bc6b2bc89fee8455a93d2f10b089aa42d801ed41d9ec8e143290a463d0da3117a471a38ca1c049f224845833b3d8a186bfc433c2899032abe80bf88fde220498fc75cd26e5a76cc70499c46199dabd260ddfab87a63446219da1487583467696304b7babee84d835095fd49128bf73f2b86cbd1e9ae9b0d89c62cfe1afc0be30406bbe47095dd943e6ca02a1240cc5cf3d2c9008bd5e7dc8c1f36da1ea7a6bb33caa7dfc804e9a0c8e08bfb39565634b9489d7083d6695bfa01abb1ed8b5f39c0f923118f88d33", 0xcf}, {&(0x7f0000000440)="33cddb2184eaf904e73abec0dc764d858e013223db300d9b5ed6e6553c0d002c4b699805624eaef6c6d2c7240607ae35796a2a8b14a7f6", 0x37}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="28eed73b0922ef89facb45d01a15187c8c053e1345470dca7bfc61df7edcfcdd9cf9dc361996502706adb2b12a56007e8c8f84548beaa2eeccee9e50422d8bc2ca5686708de7039a22c10f55e46a7c5c91cc0c0000f89b97183b3b55d908091e7f497f1e3d861b3a13a0f350f69785e52a7faf506235516a5030a7afce018d858eace3", 0x83}, {&(0x7f0000001640)="38f83ebdcba80d1bd50205b5c2c04e2750eea5410f6ea366c099b69224a4a2b09b4e68b2e7652df3855b39a4f9f7ed", 0x2f}, {&(0x7f0000001680)="94a794809d61f892b282c312e6f80253fe120b8cc2d859", 0x17}], 0x7}, 0x8004)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) (async)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="56366a75ccf549de75b7b1016d743b542c0cb0a0ba3fe354317ec302694f811ffd4763005261910b45a9a8cab310e7ee9d9dbfb974b7b1b67f5d38b66c3c6231b8c0810f36ac6e1ca7054f7760281a98afc6fdeb73c2b29da363e1892f58ff6d1c65754a2d88446eb6208bf28ca23b7f3c71d3f76b4933ea17032d66fd06f4f00fda3ca0e7601d2ce42a51e8cc51a9559eb59315509d376b9cac45233489bd54fff23f9eebff5b06cd06d569", @ANYBLOB="0017", @ANYBLOB="424c2206463bd61b892ba69940a8d7a6f84ece4d5ad9b0335c245107cc3489da4a4b1b8d04933eb8f88fd6ce06"], 0xc0) (async)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4)
getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000180)) (async)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

295.616799ms ago: executing program 2 (id=3185):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x16) (async, rerun: 64)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000040), 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)='q\x00\x00', 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x20044800) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12122, 0x0) (rerun: 32)
write$tun(r3, &(0x7f0000000080)=ANY=[], 0x36) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f00000015c0)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, 0x1c) (async)
close(r0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000200)=0x7, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r7, 0x0, 0x2d6ab132499744a1, 0x48c0, 0x0, 0xffffffc5)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed", 0x9e}, {&(0x7f0000000180)="50c552f1e0ce851e3598d16c959c959961acc0e29c1c3a15e437dcc80fc869726b03679e5d823c8a29528c4fc2205daedafa5224dbe080d3787d", 0x3a}], 0x2}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4)
socket(0x1e, 0x1, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) (async)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a03700002d0001005deeec7ba926bd7000fcdbdf250400000005000b00", @ANYRESDEC=r6, @ANYRESHEX=r2], 0x37a0}}, 0x20000000)

89.875478ms ago: executing program 2 (id=3186):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000000000000044e2000607d029000000000000000d749d9785991aa6676c51c420be18422d0ca517ab22cd216215c21dbe117610208abb0c15952a04e2f983a699d0da6fb9c55f5c45f"], 0x0) (async)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000000000000044e2000607d029000000000000000d749d9785991aa6676c51c420be18422d0ca517ab22cd216215c21dbe117610208abb0c15952a04e2f983a699d0da6fb9c55f5c45f"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

88.852801ms ago: executing program 0 (id=3187):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x14)
pipe(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getuid() (async)
getuid()
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4)
sendmsg$nl_generic(r4, 0x0, 0x801)
sendmsg$netlink(r3, 0x0, 0x0) (async)
sendmsg$netlink(r3, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0xf1358943c4221ef0}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

85.955034ms ago: executing program 1 (id=3188):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="180200000040000000001b0000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e20, 0x8001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d423ed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
splice(r4, 0x0, r5, 0x0, 0x1, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000001480)="37b5f9d8589f091cc62634cbe0bb84", 0xf}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0)
write(r3, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001b40)={0x0, 0x2c, &(0x7f0000001b80)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xffff}]}, &(0x7f0000000180)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r8, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/time\x00')
r9 = socket(0x10, 0x2, 0x0)
write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000013c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r10 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)

0s ago: executing program 2 (id=3189):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbacf, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000063c0)={'vlan0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x2}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x7c}}, 0x2c000842)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f00000000c0))
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffee8, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040)=0xfff, 0x4)

kernel console output (not intermixed with test programs):

70754][T10879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'.
[  141.823104][T10867] tipc: Disabling bearer <eth:syzkaller0>
[  141.866942][T10881] tipc: Resetting bearer <eth:ip6tnl0>
[  141.896180][T10881] dummy0: left promiscuous mode
[  141.908066][T10881] vlan0: left promiscuous mode
[  141.918938][T10881] xfrm1: left promiscuous mode
[  141.920983][T10881] xfrm1: left allmulticast mode
[  141.945783][T10881] bond9: left promiscuous mode
[  141.975962][T10881] bond13: left promiscuous mode
[  141.980824][T10881] bridge9: left promiscuous mode
[  141.983178][T10881] bond13: left allmulticast mode
[  141.985544][T10881] bridge9: left allmulticast mode
[  142.001604][T10881] geneve2: left promiscuous mode
[  142.009524][T10881] ip6erspan0: left allmulticast mode
[  142.030420][ T5872] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  142.034724][ T5872] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  142.039185][ T5872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  142.042284][ T5872] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  142.045360][ T5872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  142.059477][ T5872] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  142.062543][ T5872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  142.065896][ T5872] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  142.559648][T10914] IPv6: sit2: Disabled Multicast RS
[  142.565722][T10913] bridge0: failed insert local address into bridge forwarding table
[  142.581080][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'.
[  142.781258][T10919] dvmrp8: entered allmulticast mode
[  142.787627][T10918] dvmrp8: left allmulticast mode
[  142.992629][T10923] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  142.996006][T10923] netlink: 'syz.1.1498': attribute type 2 has an invalid length.
[  143.593440][T10934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1501'.
[  143.604490][T10934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1501'.
[  143.934780][T10945] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  144.064400][T10958] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1509'.
[  144.142194][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.154084][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.158912][T10963] netlink: 'syz.0.1510': attribute type 5 has an invalid length.
[  144.169269][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.179498][T10964] netlink: 'syz.0.1510': attribute type 5 has an invalid length.
[  144.179842][T10893] net_ratelimit: 14 callbacks suppressed
[  144.179851][T10893] Set syz1 is full, maxelem 65536 reached
[  144.210979][T10966] openvswitch: netlink: Missing valid actions attribute.
[  144.214030][T10966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.257884][T10972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.260774][T10972] syzkaller0: entered promiscuous mode
[  144.262690][T10972] syzkaller0: entered allmulticast mode
[  144.267261][T10972] tipc: Resetting bearer <eth:syzkaller0>
[  144.313355][T10971] tipc: Resetting bearer <eth:syzkaller0>
[  144.323368][T10971] tipc: Disabling bearer <eth:syzkaller0>
[  144.628364][T11006] openvswitch: netlink: Message has 20 unknown bytes.
[  144.630860][T11006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.914324][T11016] unsupported nlmsg_type 40
[  145.257356][T11044] bond0: (slave rose0): Error: Device can not be enslaved while up
[  145.383224][T11046] netlink: 'syz.2.1537': attribute type 5 has an invalid length.
[  145.706819][T11058] netlink: 'syz.0.1540': attribute type 8 has an invalid length.
[  146.104870][T11093] veth1_to_bond: entered allmulticast mode
[  146.114053][T11094] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  146.119251][T11094] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  146.273259][T11103] __nla_validate_parse: 18 callbacks suppressed
[  146.273275][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'.
[  146.443321][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'.
[  146.448283][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'.
[  146.488722][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1557'.
[  146.501559][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1557'.
[  146.532693][T11128] netlink: 'syz.0.1560': attribute type 1 has an invalid length.
[  146.543600][T11131] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1560'.
[  146.687645][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'.
[  146.691708][T11142] ip6gre0: Master is either lo or non-ether device
[  146.693413][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'.
[  146.810125][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  146.848597][T11083] veth1_to_bond: left allmulticast mode
[  146.913675][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'.
[  147.270121][T11179] netlink: 'syz.1.1574': attribute type 1 has an invalid length.
[  147.292617][T11179] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.882502][T11204] syzkaller0: entered promiscuous mode
[  147.884643][T11204] syzkaller0: entered allmulticast mode
[  149.062019][T11226] netlink: 'syz.2.1589': attribute type 1 has an invalid length.
[  149.607364][T11263] netlink: 'syz.1.1599': attribute type 12 has an invalid length.
[  149.741362][T11267] vxlan0: entered promiscuous mode
[  149.743433][T11267] vxlan0: entered allmulticast mode
[  149.911334][T11273] netlink: 'syz.1.1601': attribute type 10 has an invalid length.
[  149.915255][T11273] wlan1: mtu less than device minimum
[  149.922893][T11273] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  149.994330][T11284] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  149.997563][T11284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.295155][T11314] netlink: 'syz.0.1616': attribute type 1 has an invalid length.
[  150.451033][T11329] netlink: 'syz.2.1621': attribute type 2 has an invalid length.
[  151.230520][T11385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.234021][T11385] syzkaller0: entered promiscuous mode
[  151.239493][T11385] syzkaller0: entered allmulticast mode
[  151.479116][T11384] tipc: Resetting bearer <eth:syzkaller0>
[  151.482756][T11401] netlink: zone id is out of range
[  151.484744][T11401] netlink: zone id is out of range
[  151.487101][T11401] netlink: zone id is out of range
[  151.489425][T11401] netlink: zone id is out of range
[  151.491555][T11401] netlink: zone id is out of range
[  151.493912][T11401] netlink: zone id is out of range
[  151.496216][T11401] netlink: zone id is out of range
[  151.500642][T11384] tipc: Disabling bearer <eth:syzkaller0>
[  151.622773][T11404] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  151.651712][T11410] __nla_validate_parse: 24 callbacks suppressed
[  151.651728][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'.
[  151.781671][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'.
[  152.352246][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'.
[  152.612797][T11428] IPVS: length: 125 != 8
[  152.686243][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'.
[  152.740236][T11437] syzkaller1: entered promiscuous mode
[  152.742530][T11437] syzkaller1: entered allmulticast mode
[  152.895139][T11441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1652'.
[  153.051301][T11455] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1657'.
[  153.076027][T11457] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1656'.
[  153.217586][T11478] netlink: 'syz.2.1662': attribute type 9 has an invalid length.
[  153.222399][T11478] netlink: 'syz.2.1662': attribute type 6 has an invalid length.
[  153.226987][T11477] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1662'.
[  153.231307][T11480] netlink: 'syz.1.1663': attribute type 10 has an invalid length.
[  153.236148][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1663'.
[  153.302726][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1665'.
[  153.568867][T11497] netlink: 'syz.2.1669': attribute type 4 has an invalid length.
[  153.595644][T11499] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  153.686864][   T47] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96
[  155.110171][T11570] validate_nla: 1 callbacks suppressed
[  155.110180][T11570] netlink: 'syz.0.1688': attribute type 33 has an invalid length.
[  155.123274][T11534] delete_channel: no stack
[  155.237606][T11584] net_ratelimit: 137 callbacks suppressed
[  155.237616][T11584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.245593][T11582] netlink: 'syz.0.1692': attribute type 11 has an invalid length.
[  155.245596][T11586] netlink: 'syz.0.1692': attribute type 11 has an invalid length.
[  155.458691][T11609] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  155.542383][T11614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.574883][T11627] pim6reg1: entered promiscuous mode
[  155.577868][T11627] pim6reg1: entered allmulticast mode
[  155.616313][T11623] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  155.742841][T11645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.910241][T11647] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.914510][T11647] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.173705][T11668] netlink: 'syz.1.1716': attribute type 13 has an invalid length.
[  156.176683][T11668] netlink: 'syz.1.1716': attribute type 17 has an invalid length.
[  156.191417][T11668] ip6gretap0: entered promiscuous mode
[  156.194611][T11668] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.199051][T11668] 8021q: adding VLAN 0 to HW filter on device team0
[  156.202648][T11668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.574544][T11681] : renamed from pim6reg1
[  156.579369][T11681] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  156.582453][T11681] CPU: 1 UID: 0 PID: 11681 Comm: syz.1.1720 Not tainted syzkaller #0 PREEMPT(full) 
[  156.582470][T11681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.582478][T11681] Call Trace:
[  156.582485][T11681]  <TASK>
[  156.582492][T11681]  dump_stack_lvl+0x189/0x250
[  156.582515][T11681]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.582530][T11681]  ? __pfx__printk+0x10/0x10
[  156.582552][T11681]  ? kernfs_path_from_node+0x2f/0x290
[  156.582565][T11681]  ? kernfs_path_from_node+0x250/0x290
[  156.582576][T11681]  ? kernfs_path_from_node+0x2f/0x290
[  156.582592][T11681]  sysfs_warn_dup+0x8e/0xa0
[  156.582604][T11681]  sysfs_do_create_link_sd+0xc0/0x110
[  156.582617][T11681]  device_add_class_symlinks+0x1cf/0x240
[  156.582635][T11681]  device_add+0x475/0xb50
[  156.582651][T11681]  wiphy_register+0x1ba6/0x28d0
[  156.582677][T11681]  ? __pfx_wiphy_register+0x10/0x10
[  156.582689][T11681]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  156.582711][T11681]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  156.582732][T11681]  ieee80211_register_hw+0x3425/0x4080
[  156.582762][T11681]  ? ieee80211_register_hw+0x1431/0x4080
[  156.582785][T11681]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  156.582803][T11681]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  156.582828][T11681]  ? __hrtimer_setup+0x187/0x210
[  156.582838][T11681]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  156.582860][T11681]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  156.582902][T11681]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  156.582919][T11681]  ? trace_kmalloc+0x1f/0xd0
[  156.582933][T11681]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  156.582949][T11681]  ? kstrndup+0xbf/0x160
[  156.582970][T11681]  hwsim_new_radio_nl+0xea4/0x1b10
[  156.582989][T11681]  ? __pfx___nla_validate_parse+0x10/0x10
[  156.583019][T11681]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.583045][T11681]  ? __nla_parse+0x40/0x60
[  156.583067][T11681]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  156.583091][T11681]  genl_family_rcv_msg_doit+0x215/0x300
[  156.583113][T11681]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  156.583142][T11681]  ? bpf_lsm_capable+0x9/0x20
[  156.583156][T11681]  ? security_capable+0x7e/0x2e0
[  156.583178][T11681]  genl_rcv_msg+0x60e/0x790
[  156.583208][T11681]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.583224][T11681]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  156.583253][T11681]  netlink_rcv_skb+0x208/0x470
[  156.583264][T11681]  ? __lock_acquire+0xab9/0xd20
[  156.583283][T11681]  ? __pfx_genl_rcv_msg+0x10/0x10
[  156.583300][T11681]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.583352][T11681]  ? down_read+0x1ad/0x2e0
[  156.583370][T11681]  genl_rcv+0x28/0x40
[  156.583384][T11681]  netlink_unicast+0x82f/0x9e0
[  156.583408][T11681]  ? __pfx_netlink_unicast+0x10/0x10
[  156.583426][T11681]  ? netlink_sendmsg+0x642/0xb30
[  156.583436][T11681]  ? skb_put+0x11b/0x210
[  156.583453][T11681]  netlink_sendmsg+0x805/0xb30
[  156.583473][T11681]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.583507][T11681]  ? aa_sock_msg_perm+0xf1/0x1d0
[  156.583522][T11681]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.583535][T11681]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.583549][T11681]  __sock_sendmsg+0x21c/0x270
[  156.583570][T11681]  ____sys_sendmsg+0x505/0x830
[  156.583589][T11681]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.583610][T11681]  ? import_iovec+0x74/0xa0
[  156.583628][T11681]  ___sys_sendmsg+0x21f/0x2a0
[  156.583644][T11681]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.583688][T11681]  ? __fget_files+0x2a/0x420
[  156.583699][T11681]  ? __fget_files+0x3a0/0x420
[  156.583718][T11681]  __x64_sys_sendmsg+0x19b/0x260
[  156.583735][T11681]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.583757][T11681]  ? rcu_is_watching+0x15/0xb0
[  156.583773][T11681]  ? do_syscall_64+0xbe/0x3b0
[  156.583789][T11681]  do_syscall_64+0xfa/0x3b0
[  156.583800][T11681]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.583813][T11681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.583826][T11681]  ? exc_page_fault+0x9f/0xf0
[  156.583839][T11681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.583851][T11681] RIP: 0033:0x7f2785b8ebe9
[  156.583864][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.583874][T11681] RSP: 002b:00007f2783df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.583887][T11681] RAX: ffffffffffffffda RBX: 00007f2785dc5fa0 RCX: 00007f2785b8ebe9
[  156.583897][T11681] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  156.583905][T11681] RBP: 00007f2785c11e19 R08: 0000000000000000 R09: 0000000000000000
[  156.583912][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.583919][T11681] R13: 00007f2785dc6038 R14: 00007f2785dc5fa0 R15: 00007fffaf7a07d8
[  156.583943][T11681]  </TASK>
[  156.769692][T11682] __nla_validate_parse: 26 callbacks suppressed
[  156.769705][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'.
[  156.825199][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1721'.
[  156.879492][T11696] netlink: 'syz.2.1722': attribute type 2 has an invalid length.
[  156.921746][T11691] netlink: 'syz.0.1723': attribute type 16 has an invalid length.
[  156.924840][T11691] netlink: 'syz.0.1723': attribute type 17 has an invalid length.
[  156.936904][T11691] v: left allmulticast mode
[  156.943054][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'.
[  156.946604][T11691] IPv6: NLM_F_REPLACE set, but no existing node found!
[  157.001128][T11691] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  157.001472][T11695] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  157.049983][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'.
[  157.089221][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'.
[  157.128794][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1726'.
[  157.134128][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'.
[  157.190437][T11711] openvswitch: netlink: Duplicate or invalid key (type 0).
[  157.193098][T11711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.681395][T11729] netlink: 'syz.2.1733': attribute type 2 has an invalid length.
[  157.688300][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'.
[  157.974965][T11746] netlink: 'syz.2.1738': attribute type 11 has an invalid length.
[  158.073657][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  158.077304][T11754] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1741'.
[  159.644237][T11913] netlink: 'syz.2.1773': attribute type 7 has an invalid length.
[  159.689727][T11908] bond10: (slave geneve0): Releasing active interface
[  159.693540][T11908] bond12: (slave gretap4): Releasing active interface
[  159.698886][T11908] bond13: (slave bridge9): Removing an active aggregator
[  159.703174][T11908] bond13: (slave bridge9): Releasing backup interface
[  159.764853][T11908] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  159.770829][T11908] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.166169][T11930] vti0: entered promiscuous mode
[  160.169618][T11930] vti0: entered allmulticast mode
[  160.689638][T11978] validate_nla: 2 callbacks suppressed
[  160.689651][T11978] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  160.694789][T11978] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  160.703846][T11978] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  160.727754][T11978] 8021q: adding VLAN 0 to HW filter on device bond13
[  160.838824][T11996] netlink: 'syz.1.1798': attribute type 21 has an invalid length.
[  160.963724][T12014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.967526][T12014] syzkaller0: entered promiscuous mode
[  160.969823][T12014] syzkaller0: entered allmulticast mode
[  160.982454][T12014] tipc: Resetting bearer <eth:syzkaller0>
[  161.041418][T12012] tipc: Resetting bearer <eth:syzkaller0>
[  161.053831][T12012] tipc: Disabling bearer <eth:syzkaller0>
[  161.129238][T12025] sctp: [Deprecated]: syz.0.1806 (pid 12025) Use of int in maxseg socket option.
[  161.129238][T12025] Use struct sctp_assoc_value instead
[  161.181706][T12028] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  161.191854][T12028] bridge16: entered promiscuous mode
[  161.194214][T12028] bridge16: entered allmulticast mode
[  161.198414][T12028] team0: Port device bridge16 added
[  162.489868][T12098] __nla_validate_parse: 19 callbacks suppressed
[  162.489877][T12098] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1829'.
[  162.508465][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1827'.
[  162.524146][T12101] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  162.527998][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'.
[  162.528011][T12102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'.
[  162.536167][T12101] netlink: 'syz.2.1830': attribute type 2 has an invalid length.
[  162.669713][T12107] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1832'.
[  163.048960][T12121] dvmrp8: entered allmulticast mode
[  163.052249][T12121] dvmrp8: left allmulticast mode
[  163.249676][T12127] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  163.282326][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'.
[  163.296921][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'.
[  163.314597][T12129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1838'.
[  163.328482][T12129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.331524][T12129] syzkaller0: entered promiscuous mode
[  163.334117][T12129] syzkaller0: entered allmulticast mode
[  163.376281][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.380094][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.383227][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.526968][ T5915] vxcan1 speed is unknown, defaulting to 1000
[  163.529532][T12137] infiniband syz2: set down
[  163.531024][T12137] infiniband syz2: added vxcan1
[  163.552186][T12137] RDS/IB: syz2: added
[  163.553845][T12137] smc: adding ib device syz2 with port count 1
[  163.555994][T12137] smc:    ib device syz2 port 1 has pnetid 
[  163.558183][ T5915] vxcan1 speed is unknown, defaulting to 1000
[  163.561652][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.665206][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.758035][T12137] vxcan1 speed is unknown, defaulting to 1000
[  163.883967][T12153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  163.897036][T12153] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1846'.
[  163.951182][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'.
[  163.976726][T12163] netlink: 'syz.2.1849': attribute type 3 has an invalid length.
[  163.983510][T12124] tipc: Resetting bearer <eth:syzkaller0>
[  163.994965][T12124] tipc: Disabling bearer <eth:syzkaller0>
[  164.053496][T12163] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  164.054610][T12168] netlink: 'syz.0.1850': attribute type 1 has an invalid length.
[  164.062964][T12168] netlink: 'syz.0.1850': attribute type 1 has an invalid length.
[  164.078297][T12163] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  164.090097][T12170] netlink: 'syz.0.1851': attribute type 16 has an invalid length.
[  164.104607][T12170] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  164.393375][T12204] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  164.420051][T12205] vxcan1 speed is unknown, defaulting to 1000
[  164.518372][T12212] bond_slave_0: entered allmulticast mode
[  164.588102][T12215] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.629554][T12220] 8021q: adding VLAN 0 to HW filter on device bond16
[  164.977838][T12260] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  165.179376][T12284] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  165.185686][T12284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.190427][T12284] syzkaller0: entered promiscuous mode
[  165.193057][T12284] syzkaller0: entered allmulticast mode
[  165.202040][T12284] tipc: Resetting bearer <eth:syzkaller0>
[  165.205748][T12283] tipc: Resetting bearer <eth:syzkaller0>
[  165.215251][T12283] tipc: Disabling bearer <eth:syzkaller0>
[  165.817520][T12301] syzkaller1: entered promiscuous mode
[  165.820262][T12301] syzkaller1: entered allmulticast mode
[  165.968990][T12310] IPv6: NLM_F_REPLACE set, but no existing node found!
[  165.971967][T12311] IPv6: NLM_F_REPLACE set, but no existing node found!
[  166.212845][T12336] bridge10: entered promiscuous mode
[  166.214719][T12336] bridge10: entered allmulticast mode
[  166.241915][T12343] validate_nla: 3 callbacks suppressed
[  166.241924][T12343] netlink: 'syz.0.1903': attribute type 1 has an invalid length.
[  166.327767][T12338] tipc: Resetting bearer <eth:ip6tnl0>
[  167.388064][T12387] ipvlan2: entered promiscuous mode
[  167.390818][T12387] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  167.832677][T12413] __nla_validate_parse: 30 callbacks suppressed
[  167.832688][T12413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1920'.
[  168.226007][T12419] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.229383][T12419] tipc: Enabled bearer <udp:syz2>, priority 10
[  168.271143][T12421] syz_tun: left allmulticast mode
[  168.273242][T12421] syz_tun: left promiscuous mode
[  168.275256][T12421] bridge0: port 1(syz_tun) entered disabled state
[  168.279414][T12421] batman_adv: batadv0: Removing interface: dummy0
[  168.282230][T12421] veth0_to_bond: left allmulticast mode
[  168.284708][T12421] veth0_to_bond: left promiscuous mode
[  168.287264][T12421] bridge9: port 2(veth0_to_bond) entered disabled state
[  168.291033][T12421] bond1: left promiscuous mode
[  168.293382][T12421] team0: Port device bond1 removed
[  168.295963][T12421] bond2: (slave bond3): Releasing backup interface
[  168.301728][T12421] veth13: left allmulticast mode
[  168.303461][T12421] veth13: left promiscuous mode
[  168.305450][T12421] bridge9: port 1(veth13) entered disabled state
[  168.309394][T12421] vlan2: left allmulticast mode
[  168.311155][T12421] veth1: left allmulticast mode
[  168.312832][T12421] vlan2: left promiscuous mode
[  168.314496][T12421] veth1: left promiscuous mode
[  168.318737][T12421] bridge9: port 3(vlan2) entered disabled state
[  168.323717][T12421] bond6: (slave bridge11): Releasing active interface
[  168.327633][T12421] bond7: (slave gretap1): Releasing active interface
[  168.330895][T12421] bond8: (slave gretap2): Releasing active interface
[  168.333773][T12421] bond8: (slave gretap2): the permanent HWaddr of slave - 4a:e2:fe:fb:62:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  168.341149][T12421] bond8: (slave gretap3): making interface the new active one
[  168.345659][T12421] bond8: (slave gretap3): Releasing active interface
[  168.349400][T12421] bond11: (slave geneve0): Releasing active interface
[  168.354448][T12421] team0: Port device bridge16 removed
[  168.356706][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.363245][T12421] netlink: 'syz.2.1923': attribute type 10 has an invalid length.
[  168.367006][T12421] bond0: (slave wlan1): Opening slave failed
[  168.370580][T12421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1923'.
[  168.453807][T12429] netlink: 'syz.2.1926': attribute type 1 has an invalid length.
[  168.482924][T12429] bond14: entered promiscuous mode
[  168.485114][T12429] 8021q: adding VLAN 0 to HW filter on device bond14
[  168.492872][T12429] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1926'.
[  168.496520][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.506085][T12429] batadv2: entered promiscuous mode
[  168.508364][T12429] batadv2: entered allmulticast mode
[  168.511546][T12429] 8021q: adding VLAN 0 to HW filter on device batadv2
[  168.515345][T12429] bond14: (slave batadv2): making interface the new active one
[  168.521122][T12429] bond14: (slave batadv2): Enslaving as an active interface with an up link
[  168.571147][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'.
[  168.609842][T12429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1926'.
[  168.636619][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.660263][T12445] netlink: 'syz.2.1930': attribute type 3 has an invalid length.
[  168.672182][T12445] syz_tun: entered allmulticast mode
[  168.677698][T12447] syzkaller1: entered promiscuous mode
[  168.679531][T12447] syzkaller1: entered allmulticast mode
[  168.683323][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'.
[  168.689320][T12444] syz_tun: left allmulticast mode
[  168.727350][T12449] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1932'.
[  168.773375][T12452] netlink: ct family unspecified
[  168.775538][T12452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.776622][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.820601][T12457] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  168.916545][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  168.936290][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  169.056522][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  169.094055][T12478] netlink: 'syz.2.1940': attribute type 7 has an invalid length.
[  169.096834][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'.
[  169.101107][T12478] netlink: 'syz.2.1940': attribute type 16 has an invalid length.
[  169.103704][T12478] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1940'.
[  169.121140][T12479] 8021q: adding VLAN 0 to HW filter on device bond15
[  169.192126][T12479] bond15 (unregistering): Released all slaves
[  169.215324][T12478] 8021q: adding VLAN 0 to HW filter on device bond15
[  169.311934][T12478] bond15 (unregistering): Released all slaves
[  169.336583][   T47] tipc: Node number set to 3854701265
[  169.406290][T12486] macvlan4: entered allmulticast mode
[  169.410278][T12486] veth1_vlan: entered allmulticast mode
[  169.413495][T12486] veth1_vlan: left allmulticast mode
[  169.515275][T12490] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  169.521641][T12491] bond0: (slave gretap0): Opening slave failed
[  169.690544][T12507] vxcan1 speed is unknown, defaulting to 1000
[  170.123684][T12513] syzkaller0: entered promiscuous mode
[  170.125592][T12513] syzkaller0: entered allmulticast mode
[  171.575993][T12528] netlink: 'syz.0.1953': attribute type 5 has an invalid length.
[  171.765970][T12534] bridge0: entered allmulticast mode
[  171.783670][T12528] bridge0 (unregistering): left allmulticast mode
[  171.868554][T12541] syz.2.1956: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  171.874892][T12541] CPU: 1 UID: 0 PID: 12541 Comm: syz.2.1956 Not tainted syzkaller #0 PREEMPT(full) 
[  171.874909][T12541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.874916][T12541] Call Trace:
[  171.874922][T12541]  <TASK>
[  171.874928][T12541]  dump_stack_lvl+0x189/0x250
[  171.874949][T12541]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.874982][T12541]  ? __pfx__printk+0x10/0x10
[  171.874998][T12541]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  171.875011][T12541]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  171.875024][T12541]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  171.875038][T12541]  warn_alloc+0x214/0x310
[  171.875058][T12541]  ? __pfx_warn_alloc+0x10/0x10
[  171.875078][T12541]  ? __get_vm_area_node+0x28f/0x300
[  171.875093][T12541]  ? xskq_create+0xbf/0x170
[  171.875107][T12541]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  171.875141][T12541]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  171.875189][T12541]  ? __kasan_kmalloc+0x93/0xb0
[  171.875208][T12541]  vmalloc_user_noprof+0xad/0xf0
[  171.875222][T12541]  ? xskq_create+0xbf/0x170
[  171.875232][T12541]  xskq_create+0xbf/0x170
[  171.875245][T12541]  xsk_init_queue+0xb0/0x110
[  171.875262][T12541]  xsk_setsockopt+0x57b/0x8d0
[  171.875279][T12541]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.875292][T12541]  ? __pfx_aa_sk_perm+0x10/0x10
[  171.875303][T12541]  ? __fget_files+0x2a/0x420
[  171.875308][T12541]  ? aa_sock_opt_perm+0xff/0x1b0
[  171.875316][T12541]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  171.875325][T12541]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.875339][T12541]  do_sock_setsockopt+0x17c/0x1b0
[  171.875355][T12541]  __x64_sys_setsockopt+0x13f/0x1b0
[  171.875370][T12541]  do_syscall_64+0xfa/0x3b0
[  171.875381][T12541]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.875391][T12541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.875402][T12541]  ? exc_page_fault+0x9f/0xf0
[  171.875413][T12541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.875424][T12541] RIP: 0033:0x7f008318ebe9
[  171.875434][T12541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.875443][T12541] RSP: 002b:00007f0083f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  171.875456][T12541] RAX: ffffffffffffffda RBX: 00007f00833c5fa0 RCX: 00007f008318ebe9
[  171.875463][T12541] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  171.875470][T12541] RBP: 00007f0083211e19 R08: 0000000000000004 R09: 0000000000000000
[  171.875476][T12541] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  171.875483][T12541] R13: 00007f00833c6038 R14: 00007f00833c5fa0 R15: 00007fff91cfcb98
[  171.875502][T12541]  </TASK>
[  171.876133][T12541] Mem-Info:
[  171.895992][T12546] netlink: 'syz.1.1957': attribute type 10 has an invalid length.
[  171.900436][T12541] active_anon:4226 inactive_anon:0 isolated_anon:0
[  171.900436][T12541]  active_file:1536 inactive_file:38271 isolated_file:0
[  171.900436][T12541]  unevictable:1768 dirty:172 writeback:0
[  171.900436][T12541]  slab_reclaimable:10577 slab_unreclaimable:97655
[  171.900436][T12541]  mapped:18181 shmem:2558 pagetables:813
[  171.900436][T12541]  sec_pagetables:0 bounce:0
[  171.900436][T12541]  kernel_misc_reclaimable:0
[  171.900436][T12541]  free:253994 free_pcp:16514 free_cma:0
[  171.994960][T12541] Node 0 active_anon:10224kB inactive_anon:0kB active_file:4044kB inactive_file:22168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27724kB dirty:268kB writeback:0kB shmem:5292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7192kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.023692][T12541] Node 1 active_anon:6748kB inactive_anon:0kB active_file:2100kB inactive_file:130916kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44864kB dirty:420kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6616kB pagetables:1424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.054547][T12541] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  172.063919][T12557] vxcan1 speed is unknown, defaulting to 1000
[  172.064863][T12541] lowmem_reserve[]: 0 811 811 811 811
[  172.069805][T12541] Node 0 DMA32 free:316716kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10224kB inactive_anon:0kB active_file:4180kB inactive_file:22168kB unevictable:3536kB writepending:336kB present:1556484kB managed:830896kB mlocked:0kB bounce:0kB free_pcp:25260kB local_pcp:18984kB free_cma:0kB
[  172.080892][T12541] lowmem_reserve[]: 0 0 0 0 0
[  172.082546][T12541] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  172.094437][T12541] lowmem_reserve[]: 0 0 854 854 854
[  172.097062][T12541] Node 1 Normal free:224904kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6816kB inactive_anon:0kB active_file:2100kB inactive_file:130916kB unevictable:3536kB writepending:420kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40552kB local_pcp:21572kB free_cma:0kB
[  172.109972][T12541] lowmem_reserve[]: 0 0 0 0 0
[  172.116710][T12541] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  172.121110][T12541] Node 0 DMA32: 127*4kB (UM) 312*8kB (UME) 481*16kB (UME) 57*32kB (ME) 259*64kB (UME) 73*128kB (UM) 44*256kB (UM) 25*512kB (UME) 14*1024kB (UME) 1*2048kB (M) 58*4096kB (UM) = 316460kB
[  172.128894][T12541] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  172.136575][T12541] Node 1 Normal: 989*4kB (UM) 461*8kB (UME) 556*16kB (UME) 430*32kB (UM) 238*64kB (UM) 105*128kB (UM) 81*256kB (UME) 34*512kB (UME) 22*1024kB (UM) 7*2048kB (UME) 22*4096kB (UM) = 224092kB
[  172.142670][T12541] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.145744][T12541] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.156604][T12541] 42775 total pagecache pages
[  172.159949][T12541] 0 pages in swap cache
[  172.166608][T12541] Free swap  = 124996kB
[  172.168383][T12541] Total swap = 124996kB
[  172.170084][T12541] 786301 pages RAM
[  172.171696][T12541] 0 pages HighMem/MovableOnly
[  172.173624][T12541] 241345 pages reserved
[  172.175901][T12541] 0 pages cma reserved
[  172.265004][T12570] IPVS: stopping master sync thread 6847 ...
[  172.663789][T12602] netlink: 'syz.0.1973': attribute type 1 has an invalid length.
[  172.700007][T12604] ip6tnl2: entered promiscuous mode
[  172.874412][T12617] __nla_validate_parse: 17 callbacks suppressed
[  172.874422][T12617] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1979'.
[  172.963026][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'.
[  172.966968][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1982'.
[  173.376539][    C1] net_ratelimit: 6 callbacks suppressed
[  173.376549][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  173.794185][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  173.824776][T12644] batman_adv: batadv0: Adding interface: dummy0
[  173.836909][T12644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1596.
[  173.855034][T12644] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  173.943179][T12655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.189511][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'.
[  174.383293][T12690] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1997'.
[  174.416577][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  174.471392][T12695] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  174.512905][T12700] netlink: 'syz.0.1999': attribute type 2 has an invalid length.
[  174.512996][T12701] netlink: 'syz.0.1999': attribute type 2 has an invalid length.
[  174.524324][T12700] k*]: entered promiscuous mode
[  174.563761][T12700] 8021q: adding VLAN 0 to HW filter on device team0
[  174.569178][T12700] batman_adv: batadv0: Interface activated: dummy0
[  174.572907][T12700] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  174.731759][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  174.736610][T12724] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2004'.
[  174.790330][T12728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'.
[  174.798688][T12728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'.
[  174.871370][T12730] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  174.886107][T12730] 8021q: adding VLAN 0 to HW filter on device bond15
[  175.074634][T12760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.104609][T12760] tipc: Disabling bearer <eth:syzkaller0>
[  175.383524][T12783] batman_adv: batadv0: Adding interface: ip6gretap2
[  175.397246][T12783] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.409079][T12783] batman_adv: batadv0: Interface activated: ip6gretap2
[  175.423006][T12785] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.446606][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  175.699684][T12814] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  175.710028][T12814] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  175.712593][T12814] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  175.762370][T12818] 8021q: adding VLAN 0 to HW filter on device bond17
[  175.772433][T12818] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  175.775644][T12818] batman_adv: batadv0: Removing interface: ip6gretap2
[  175.951106][T12836] netlink: 'syz.1.2036': attribute type 30 has an invalid length.
[  175.963503][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.966258][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.969459][T12836] netlink: 'syz.1.2036': attribute type 30 has an invalid length.
[  175.972663][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.988910][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.026288][T12842] netlink: 'syz.0.2037': attribute type 7 has an invalid length.
[  176.041197][T12844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.045586][T12844] syzkaller0: entered promiscuous mode
[  176.049275][T12844] syzkaller0: entered allmulticast mode
[  176.062501][T12844] tipc: Resetting bearer <eth:syzkaller0>
[  176.065967][T12843] tipc: Resetting bearer <eth:syzkaller0>
[  176.074599][T12843] tipc: Disabling bearer <eth:syzkaller0>
[  176.447602][T12866] netlink: 'syz.2.2045': attribute type 1 has an invalid length.
[  178.070575][T12912] bond0: (slave rose0): Error: Device can not be enslaved while up
[  178.077687][T12914] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  178.081766][T12914] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.198796][T12928] __nla_validate_parse: 19 callbacks suppressed
[  178.198806][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'.
[  178.209331][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'.
[  178.343778][T12939] vxcan1 speed is unknown, defaulting to 1000
[  179.820562][T12952] macvlan4: entered allmulticast mode
[  179.822879][T12952] veth1_vlan: entered allmulticast mode
[  179.828269][T12952] veth1_vlan: left allmulticast mode
[  180.126757][T12963] netlink: 'syz.2.2071': attribute type 10 has an invalid length.
[  180.129997][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'.
[  180.133328][T12963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2071'.
[  180.138888][T12963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'.
[  180.143557][T12963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2071'.
[  180.152337][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2070'.
[  180.164392][T12963] netlink: 'syz.2.2071': attribute type 1 has an invalid length.
[  180.168815][T12963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2071'.
[  180.211563][T12969] netlink: 'syz.2.2073': attribute type 1 has an invalid length.
[  180.242241][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'.
[  180.247845][T12973] netlink: 'syz.1.2074': attribute type 29 has an invalid length.
[  180.252992][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'.
[  180.388749][T12994] siw: device registration error -23
[  180.392389][T12993] siw: device registration error -23
[  180.439643][T12998] netlink: 'syz.0.2080': attribute type 21 has an invalid length.
[  180.443114][T12998] pim6reg1: entered promiscuous mode
[  180.445041][T12998] pim6reg1: entered allmulticast mode
[  180.568783][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  180.574548][T13010] netlink: 'syz.1.2085': attribute type 39 has an invalid length.
[  180.772569][T13021] netlink: 'syz.1.2088': attribute type 10 has an invalid length.
[  180.781159][T13021] 8021q: adding VLAN 0 to HW filter on device team0
[  180.787897][T13021] bond0: (slave team0): Enslaving as an active interface with an up link
[  180.795899][T13021] netlink: 'syz.1.2088': attribute type 10 has an invalid length.
[  180.815395][T13021] bond17: option mode: unable to set because the bond device is up
[  180.939376][T13030] syzkaller0: entered promiscuous mode
[  180.943265][T13030] syzkaller0: entered allmulticast mode
[  180.955088][T13034] syzkaller1: entered promiscuous mode
[  180.957827][T13034] syzkaller1: entered allmulticast mode
[  182.234165][T13064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.237963][T13064] syzkaller0: entered promiscuous mode
[  182.240063][T13064] syzkaller0: entered allmulticast mode
[  182.245023][T13064] tipc: Resetting bearer <eth:syzkaller0>
[  182.262932][T13065] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  182.278456][T13065] team0: Port device dummy0 added
[  182.281611][T13065] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  182.290842][T13065] team0: Port device dummy0 removed
[  182.297605][T13065] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  182.701806][T13081] vlan0: entered promiscuous mode
[  182.704077][T13081] bond0: entered promiscuous mode
[  182.996333][T13055] tipc: Resetting bearer <eth:syzkaller0>
[  183.009661][T13055] tipc: Disabling bearer <eth:syzkaller0>
[  183.054745][T13088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.060886][T13089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.064392][T13088] syzkaller0: entered promiscuous mode
[  183.067029][T13088] syzkaller0: entered allmulticast mode
[  183.187875][T13104] vxcan1 speed is unknown, defaulting to 1000
[  183.191861][T13088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.220427][T13089] tipc: Resetting bearer <eth:syzkaller0>
[  183.277922][T13089] tipc: Disabling bearer <eth:syzkaller0>
[  183.453817][T13114] __nla_validate_parse: 15 callbacks suppressed
[  183.453831][T13114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2117'.
[  183.461948][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'.
[  183.574644][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.589969][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.605317][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.613881][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.617632][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.621054][T13122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'.
[  183.661126][T13122] 8021q: adding VLAN 0 to HW filter on device bond18
[  183.716243][T13139] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2122'.
[  183.905270][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'.
[  184.065431][T13170] bond0: default FDB implementation only supports local addresses
[  184.094557][T13172] vxcan1 speed is unknown, defaulting to 1000
[  184.124615][T13176] dvmrp0: left allmulticast mode
[  184.128295][T13176] pimreg: left allmulticast mode
[  184.196287][T13181] batman_adv: batadv0: Interface deactivated: dummy0
[  184.202842][T13181] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  184.464854][T13195] pimreg: entered allmulticast mode
[  184.575580][T13209] 8021q: adding VLAN 0 to HW filter on device bond19
[  184.667569][T13212] vxcan1 speed is unknown, defaulting to 1000
[  184.909063][T13221] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  185.029721][T13230] macsec0: entered promiscuous mode
[  185.038140][T13230] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  185.040756][T13230] macsec0: entered allmulticast mode
[  185.042745][T13230] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  185.077661][T13230] macsec1: entered promiscuous mode
[  185.080099][T13230] macsec1: entered allmulticast mode
[  185.203305][T13249] validate_nla: 5 callbacks suppressed
[  185.203314][T13249] netlink: 'syz.0.2156': attribute type 13 has an invalid length.
[  185.207952][T13249] netlink: 'syz.0.2156': attribute type 17 has an invalid length.
[  185.229746][T13249] 8021q: adding VLAN 0 to HW filter on device team0
[  185.233084][T13249] batman_adv: batadv0: Interface activated: dummy0
[  185.237096][T13249] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.321060][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.326275][T13255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.326712][T13249] vxcan1 speed is unknown, defaulting to 1000
[  185.366589][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  186.406626][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  187.299413][T13268] netlink: 'syz.2.2162': attribute type 21 has an invalid length.
[  187.302069][T13268] netlink: 'syz.2.2162': attribute type 4 has an invalid length.
[  187.304612][T13268] netlink: 'syz.2.2162': attribute type 5 has an invalid length.
[  187.309476][T13268] netlink: 'syz.2.2162': attribute type 30 has an invalid length.
[  187.423774][T13281] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  187.427767][T13281] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  187.440552][T13282] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  187.456537][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  187.558530][T13297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.579515][T13303] tipc: Resetting bearer <eth:syzkaller0>
[  187.595410][T13296] tipc: Disabling bearer <eth:syzkaller0>
[  187.674246][T13307] netlink: 'syz.1.2173': attribute type 1 has an invalid length.
[  187.729299][T13305] batman_adv: batadv0: Interface deactivated: dummy0
[  187.772950][T13305] mac80211_hwsim hwsim26 wlan0: left allmulticast mode
[  187.775746][T13305] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[  187.798404][T13307] 8021q: adding VLAN 0 to HW filter on device bond20
[  187.810077][T13311] vlan0: entered promiscuous mode
[  187.812321][T13311] gretap0: entered promiscuous mode
[  187.818102][T13311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  187.887680][T13322] 8021q: adding VLAN 0 to HW filter on device bond21
[  187.895195][T13325] bond14: (slave batadv2): Releasing active interface
[  187.901206][T13322] tunl0: entered promiscuous mode
[  187.903664][T13322] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  188.114110][T13338] NCSI netlink: No device for ifindex 3321692160
[  188.122052][T13338] tunl0: left promiscuous mode
[  188.140513][T13338] tipc: Resetting bearer <eth:ip6tnl0>
[  188.165406][T13338] bond_slave_0: left allmulticast mode
[  188.193899][T13338] ipvlan2: left promiscuous mode
[  188.224305][ T5871] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.227431][ T5871] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.230198][ T5871] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.232915][ T5871] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.486532][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  188.544807][T13350] __nla_validate_parse: 22 callbacks suppressed
[  188.544821][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'.
[  188.593266][T13357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2187'.
[  188.600653][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'.
[  188.641755][T13359] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2188'.
[  188.695213][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'.
[  188.715657][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'.
[  189.055276][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'.
[  189.132954][T13436] vxcan1 speed is unknown, defaulting to 1000
[  189.482883][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'.
[  189.485880][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2202'.
[  189.536536][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.571302][T13460] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  189.699056][T13467] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2207'.
[  189.945418][T13486] vxcan1 speed is unknown, defaulting to 1000
[  190.153998][T13502] syzkaller1: entered promiscuous mode
[  190.160428][T13502] syzkaller1: entered allmulticast mode
[  190.258666][T13513] tipc: Invalid UDP bearer configuration
[  190.258692][T13513] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  190.401395][T13522] validate_nla: 6 callbacks suppressed
[  190.401405][T13522] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  190.489777][T13531] netlink: 'syz.2.2226': attribute type 13 has an invalid length.
[  190.492939][T13531] netlink: 'syz.2.2226': attribute type 17 has an invalid length.
[  190.522262][T13531] erspan0: left promiscuous mode
[  190.546672][T13531] ip6gretap0: left promiscuous mode
[  190.550922][T13531] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.554905][T13531] 8021q: adding VLAN 0 to HW filter on device team0
[  190.559563][T13531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.566523][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  190.603679][T13534] vxcan1 speed is unknown, defaulting to 1000
[  190.662346][T13531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.214382][T13542] netlink: 'syz.1.2230': attribute type 1 has an invalid length.
[  191.517170][T13555] vxcan1 speed is unknown, defaulting to 1000
[  191.606530][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  191.711981][T13563] vxcan1 speed is unknown, defaulting to 1000
[  191.972883][T13566] gtp0: entered promiscuous mode
[  192.205501][T13568] netlink: 'syz.1.2237': attribute type 10 has an invalid length.
[  192.212571][T13568] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  192.353960][T13572] netlink: 'syz.0.2238': attribute type 11 has an invalid length.
[  192.482448][T13599] netlink: 'syz.0.2247': attribute type 1 has an invalid length.
[  192.518276][T13599] 8021q: adding VLAN 0 to HW filter on device bond15
[  192.544464][T13598] vlan1: entered promiscuous mode
[  192.546222][T13598] bond15: entered promiscuous mode
[  192.558880][T13598] vlan1: entered allmulticast mode
[  192.560632][T13598] bond15: entered allmulticast mode
[  192.575412][T13599] bond15: (slave gretap3): making interface the new active one
[  192.578347][T13599] gretap3: entered promiscuous mode
[  192.580259][T13599] gretap3: entered allmulticast mode
[  192.582850][T13599] bond15: (slave gretap3): Enslaving as an active interface with an up link
[  192.597819][T13599] syz.0.2247 (13599) used greatest stack depth: 19400 bytes left
[  192.646583][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  192.649557][T13614] siw: device registration error -23
[  192.653353][T13614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.656043][T13614] veth0_to_bridge: entered promiscuous mode
[  192.658281][T13614] veth0_to_bridge: entered allmulticast mode
[  192.665501][T13612] tipc: Disabling bearer <eth:syzkaller0>
[  192.789479][T13625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.792059][T13625] syzkaller0: entered promiscuous mode
[  192.793816][T13625] syzkaller0: entered allmulticast mode
[  192.824007][T13624] tipc: Resetting bearer <eth:syzkaller0>
[  192.835733][T13624] tipc: Disabling bearer <eth:syzkaller0>
[  193.090144][T13663] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  193.325315][T13697] syz_tun: entered allmulticast mode
[  193.332758][T13697] dvmrp8: entered allmulticast mode
[  193.361364][T13696] syz_tun: left allmulticast mode
[  193.363160][T13696] dvmrp8: left allmulticast mode
[  193.446243][T13704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.687419][T13731] bridge0: port 1(ipvlan3) entered blocking state
[  193.695858][T13731] bridge0: port 1(ipvlan3) entered disabled state
[  193.706062][T13731] ipvlan3: entered allmulticast mode
[  193.710165][T13731] bridge0: entered allmulticast mode
[  193.713631][T13731] ipvlan3: left allmulticast mode
[  193.715671][T13731] bridge0: left allmulticast mode
[  193.868230][T13739] __nla_validate_parse: 23 callbacks suppressed
[  193.868240][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.873353][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.876316][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.879585][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.882589][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.885588][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.890218][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.893151][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.896058][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  193.899288][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'.
[  194.276774][T13726] Set syz1 is full, maxelem 65536 reached
[  194.284381][T13768] vxcan1 speed is unknown, defaulting to 1000
[  194.404662][T13772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  194.578463][T13768] netlink: 'syz.0.2290': attribute type 13 has an invalid length.
[  194.581170][T13768] netlink: 'syz.0.2290': attribute type 17 has an invalid length.
[  194.593413][T13768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  195.037084][ T5915] IPVS: starting estimator thread 0...
[  195.126642][T13830] IPVS: using max 81 ests per chain, 194400 per kthread
[  195.425969][T13857] tun0: tun_chr_ioctl cmd 1074025675
[  195.429649][T13857] tun0: persist enabled
[  195.479521][T13862] vxcan1 speed is unknown, defaulting to 1000
[  195.766605][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  195.800077][T13875] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  195.901532][T13889] syzkaller0: entered promiscuous mode
[  195.903497][T13889] syzkaller0: entered allmulticast mode
[  195.987800][T13893] siw: device registration error -23
[  195.992497][T13893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.153518][T13905] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  196.157958][T13902] siw: device registration error -23
[  196.169857][T13902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.188764][T13901] tipc: Disabling bearer <eth:syzkaller0>
[  196.208175][T13907] netlink: 'syz.2.2333': attribute type 4 has an invalid length.
[  196.212608][T13907] netlink: 'syz.2.2333': attribute type 4 has an invalid length.
[  196.604499][T13917] netlink: 'syz.2.2336': attribute type 10 has an invalid length.
[  196.609433][T13917] netlink: 'syz.2.2336': attribute type 10 has an invalid length.
[  196.615678][T13917] dummy0: entered promiscuous mode
[  196.789341][T13936] vxcan1 speed is unknown, defaulting to 1000
[  196.816528][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  196.899404][T13935] vxcan1 speed is unknown, defaulting to 1000
[  197.108393][T13968] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  197.603081][T13994] netlink: 'syz.0.2360': attribute type 4 has an invalid length.
[  197.610608][T13994] netlink: 'syz.0.2360': attribute type 4 has an invalid length.
[  197.846655][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  198.070432][T14006] netlink: 'syz.1.2364': attribute type 12 has an invalid length.
[  198.194466][T14017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.200173][T14019] tipc: Resetting bearer <eth:syzkaller0>
[  198.379520][T14025] netlink: 'syz.2.2371': attribute type 13 has an invalid length.
[  198.384649][T14025] 8021q: adding VLAN 0 to HW filter on device team0
[  198.389070][T14025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.828149][T14049] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.843046][T14047] : entered promiscuous mode
[  198.886514][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  198.949833][T14059] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.954459][T14059] syzkaller0: entered promiscuous mode
[  198.957692][T14059] syzkaller0: entered allmulticast mode
[  198.965684][T14061] vxcan1 speed is unknown, defaulting to 1000
[  199.007436][T14059] tipc: Resetting bearer <eth:syzkaller0>
[  199.085602][T14058] tipc: Resetting bearer <eth:syzkaller0>
[  199.089109][T14065] __nla_validate_parse: 97 callbacks suppressed
[  199.089118][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'.
[  199.107159][T14058] tipc: Disabling bearer <eth:syzkaller0>
[  199.118040][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'.
[  199.131842][T14067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.134717][T14067] syzkaller0: entered promiscuous mode
[  199.136714][T14067] syzkaller0: entered allmulticast mode
[  199.155783][T14067] tipc: Resetting bearer <eth:syzkaller0>
[  199.162535][T14066] tipc: Resetting bearer <eth:syzkaller0>
[  199.181392][T14066] tipc: Disabling bearer <eth:syzkaller0>
[  199.218727][T14074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2387'.
[  199.386203][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  199.399453][T14084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2389'.
[  199.936618][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  200.208907][T14125] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2400'.
[  200.245054][T14127] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2401'.
[  200.302778][T14133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2404'.
[  200.359693][T14146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'.
[  200.399387][T14141] vxcan1 speed is unknown, defaulting to 1000
[  200.525471][T14161] batadv_slave_0: entered promiscuous mode
[  200.534124][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  200.624124][T14166] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  200.630506][T14166] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  200.966581][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  201.160558][T14196] vxcan1 speed is unknown, defaulting to 1000
[  201.499733][T14213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.502467][T14213] syzkaller0: entered promiscuous mode
[  201.504417][T14213] syzkaller0: entered allmulticast mode
[  201.628454][T14213] tipc: Resetting bearer <eth:syzkaller0>
[  202.007310][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  202.275024][T14212] tipc: Resetting bearer <eth:syzkaller0>
[  202.368633][T14212] tipc: Disabling bearer <eth:syzkaller0>
[  202.467575][T14251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.816020][T14280] pim6reg: entered allmulticast mode
[  202.869512][T14288] tap0: tun_chr_ioctl cmd 1074025680
[  202.876002][T14288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.881240][T14288] D: renamed from syzkaller0
[  202.884290][T14288] tipc: Disabling bearer <eth:syzkaller0>
[  202.904224][T14290] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  203.020115][T14302] validate_nla: 7 callbacks suppressed
[  203.020124][T14302] netlink: 'syz.2.2451': attribute type 1 has an invalid length.
[  203.046613][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  203.054329][T14304] Bluetooth: MGMT ver 1.23
[  203.091737][T14309] tun0: tun_chr_ioctl cmd 1074025675
[  203.094575][T14309] tun0: persist enabled
[  203.096249][T14310] tun0: tun_chr_ioctl cmd 1074025675
[  203.098687][T14310] tun0: persist enabled
[  203.135476][T14314] x9: renamed from bridge_slave_0
[  204.053413][T14324] netlink: 'syz.0.2459': attribute type 4 has an invalid length.
[  204.071540][T14324] netlink: 'syz.0.2459': attribute type 4 has an invalid length.
[  204.075078][T14328] netlink: 'syz.2.2461': attribute type 1 has an invalid length.
[  204.079957][T14328] syzkaller0: Caught tx_queue_len zero misconfig
[  204.087252][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  204.196144][T14340] ip6tnl4: entered promiscuous mode
[  204.256589][T14349] __nla_validate_parse: 22 callbacks suppressed
[  204.256604][T14349] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2467'.
[  204.614317][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'.
[  204.635137][T14381] netlink: 'syz.0.2478': attribute type 10 has an invalid length.
[  204.638041][T14380] vxcan1 speed is unknown, defaulting to 1000
[  204.638949][T14381] batman_adv: batadv0: Removing interface: dummy0
[  204.645781][T14381] team0: Port device dummy0 added
[  204.649950][T14381] netlink: 'syz.0.2478': attribute type 10 has an invalid length.
[  204.656061][T14381] team0: Port device dummy0 removed
[  204.733357][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2480'.
[  204.759099][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2480'.
[  204.783606][T14388] !: renamed from dummy0
[  204.848732][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2483'.
[  205.081510][T14417] netlink: 'syz.1.2484': attribute type 12 has an invalid length.
[  205.136660][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  205.263455][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2486'.
[  205.567471][T14425] sctp: [Deprecated]: syz.2.2488 (pid 14425) Use of int in max_burst socket option deprecated.
[  205.567471][T14425] Use struct sctp_assoc_value instead
[  205.605847][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'.
[  205.762102][T14431] netlink: 'syz.2.2489': attribute type 10 has an invalid length.
[  205.809473][T14431] batadv_slave_0: left promiscuous mode
[  205.820200][T14431] batadv_slave_0: entered promiscuous mode
[  205.981301][T14433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2490'.
[  205.984961][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'.
[  206.079988][T14450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'.
[  206.090240][T14450] macvtap0: entered promiscuous mode
[  206.092592][T14450] macvtap0: entered allmulticast mode
[  206.098584][T14450] gretap0: entered allmulticast mode
[  206.103486][T14452] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  206.166542][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  206.222470][T14463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.226804][T14463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.233392][T14464] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  206.249920][T14464] team0: Device ipvlan1 failed to register rx_handler
[  207.210378][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  207.889956][T14495] netlink: 'syz.1.2508': attribute type 3 has an invalid length.
[  207.957568][T14503] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  208.094661][T14507] !: renamed from dummy0
[  208.246670][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  208.973120][T14514] syzkaller0: entered promiscuous mode
[  208.974980][T14514] syzkaller0: entered allmulticast mode
[  209.286472][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  209.526630][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  209.965918][T14512] vxcan1 speed is unknown, defaulting to 1000
[  210.098886][T14528] __nla_validate_parse: 13 callbacks suppressed
[  210.098896][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'.
[  210.130062][T14528] IPVS: Unknown mcast interface: vcan0
[  210.214556][T14533] netlink: 'syz.1.2517': attribute type 12 has an invalid length.
[  210.261819][T14539] siw: device registration error -23
[  210.293166][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2520'.
[  210.296079][T14541] openvswitch: netlink: Flow key attr not present in new flow.
[  210.326572][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  210.521961][T14558] netlink: 'syz.0.2526': attribute type 8 has an invalid length.
[  210.524579][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'.
[  210.524636][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'.
[  210.528703][T14557] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2527'.
[  210.533255][T14556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2526'.
[  210.573168][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'.
[  210.648823][T14567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2531'.
[  210.653393][T14567] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2531'.
[  210.660495][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2531'.
[  210.804830][T14595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  210.831047][T14597] pimreg: entered allmulticast mode
[  210.834173][T14597] pimreg: left allmulticast mode
[  211.343339][T14621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.345982][T14621] IPv6: NLM_F_CREATE should be set when creating new route
[  211.348473][T14621] IPv6: NLM_F_CREATE should be set when creating new route
[  211.351186][T14621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  211.366591][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  211.531112][T14625] vxcan1 speed is unknown, defaulting to 1000
[  211.580252][T14627] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  211.923166][T14657] netlink: 'syz.2.2554': attribute type 9 has an invalid length.
[  211.962949][T14665] netlink: 'syz.2.2554': attribute type 9 has an invalid length.
[  212.035027][T14673] tipc: Failed to remove unknown binding: 66,1,1/2530457235:2010005030/2010005032
[  212.040172][T14669] tipc: Failed to remove unknown binding: 66,1,1/2530457235:2010005030/2010005032
[  212.043426][T14669] tipc: Failed to remove unknown binding: 66,1,1/2530457235:2010005030/2010005032
[  212.102166][T14681] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  212.149428][T14690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.153558][T14690] syzkaller0: entered promiscuous mode
[  212.155527][T14690] syzkaller0: entered allmulticast mode
[  212.168409][T14690] tipc: Resetting bearer <eth:syzkaller0>
[  212.171598][T14689] tipc: Resetting bearer <eth:syzkaller0>
[  212.189566][T14689] tipc: Disabling bearer <eth:syzkaller0>
[  212.250391][T14702] netlink: 'syz.1.2564': attribute type 21 has an invalid length.
[  212.406532][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.186038][T14718] vxcan1 speed is unknown, defaulting to 1000
[  213.446488][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  213.466050][T14732] syzkaller0: entered promiscuous mode
[  213.468050][T14732] syzkaller0: entered allmulticast mode
[  214.486628][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  214.626855][T14742] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  214.750778][T14753] netlink: 'syz.1.2583': attribute type 83 has an invalid length.
[  214.962161][T14770] netlink: 'syz.1.2589': attribute type 10 has an invalid length.
[  215.171140][T14783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.174253][T14783] syzkaller0: entered promiscuous mode
[  215.176121][T14783] syzkaller0: entered allmulticast mode
[  215.207952][T14783] tipc: Resetting bearer <eth:syzkaller0>
[  215.213718][T14789] netlink: 'syz.1.2596': attribute type 1 has an invalid length.
[  215.217298][T14782] tipc: Resetting bearer <eth:syzkaller0>
[  215.242345][T14782] tipc: Disabling bearer <eth:syzkaller0>
[  215.279576][T14795] __nla_validate_parse: 18 callbacks suppressed
[  215.279588][T14795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2599'.
[  215.282941][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'.
[  215.421240][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2605'.
[  215.427675][T14813] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2605'.
[  215.455978][T14812] vxcan1 speed is unknown, defaulting to 1000
[  215.526611][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.320665][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2610'.
[  216.327191][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'.
[  216.394184][T14836] 8021q: adding VLAN 0 to HW filter on device bond16
[  216.400007][T14836] bond0: (slave bond16): Enslaving as an active interface with an up link
[  216.407256][T14836] netlink: 'syz.0.2612': attribute type 10 has an invalid length.
[  216.455409][T14841] netlink: 'syz.0.2614': attribute type 1 has an invalid length.
[  216.458268][T14841] netlink: 'syz.0.2614': attribute type 1 has an invalid length.
[  216.489156][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2614'.
[  216.566543][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  216.748056][T14850] netlink: 'syz.1.2618': attribute type 4 has an invalid length.
[  216.762978][T14850] netlink: 'syz.1.2618': attribute type 4 has an invalid length.
[  216.807892][T14853] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.2619'.
[  216.875246][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  216.889188][T14861] tipc: Enabled bearer <eth:vlan0>, priority 18
[  217.216140][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'.
[  217.244864][T14871] bridge17: port 1(veth9) entered blocking state
[  217.248845][T14871] bridge17: port 1(veth9) entered disabled state
[  217.251013][T14871] veth9: entered allmulticast mode
[  217.253776][T14871] veth9: entered promiscuous mode
[  217.295406][T14878] pim6reg: left allmulticast mode
[  217.593475][T14889] sctp: [Deprecated]: syz.2.2628 (pid 14889) Use of int in maxseg socket option.
[  217.593475][T14889] Use struct sctp_assoc_value instead
[  217.606688][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  217.714927][T14902] netlink: 'syz.0.2629': attribute type 1 has an invalid length.
[  217.741237][T14902] 8021q: adding VLAN 0 to HW filter on device bond17
[  217.766219][T14905] chnl_net:caif_netlink_parms(): no params data found
[  217.853117][T14915] caif0: entered promiscuous mode
[  217.854847][T14915] caif0: entered allmulticast mode
[  217.920899][T14918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.924229][T14918] syzkaller0: entered promiscuous mode
[  217.926305][T14918] syzkaller0: entered allmulticast mode
[  218.181523][T14923] only policy match revision 0 supported
[  218.181540][T14923] unable to load match
[  218.646598][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.693647][T14916] tipc: Resetting bearer <eth:syzkaller0>
[  218.705069][T14916] tipc: Disabling bearer <eth:syzkaller0>
[  219.010537][T14950] netlink: 'syz.0.2642': attribute type 1 has an invalid length.
[  219.059888][T14957] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  219.091329][T14957] veth9: entered promiscuous mode
[  219.096145][T14957] bond19: (slave veth9): Enslaving as a backup interface with a down link
[  219.102885][T14957] 8021q: adding VLAN 0 to HW filter on device bond19
[  219.167669][T14973] netlink: 'syz.1.2648': attribute type 13 has an invalid length.
[  219.170630][T14967] netlink: 'syz.2.2646': attribute type 4 has an invalid length.
[  219.180409][T14967] block nbd0: not configured, cannot reconfigure
[  219.235817][T14975] 8021q: adding VLAN 0 to HW filter on device team0
[  219.242323][T14975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.262071][T14977] dvmrp8: entered allmulticast mode
[  219.280633][T14977] vxcan1 speed is unknown, defaulting to 1000
[  219.385483][T14975] vxcan1 speed is unknown, defaulting to 1000
[  219.432074][T14976] dvmrp8: left allmulticast mode
[  219.688666][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  219.906085][T15027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.919136][T15030] pimreg: entered allmulticast mode
[  219.941526][T15030] pimreg: left allmulticast mode
[  219.961725][T15027] vxcan1 speed is unknown, defaulting to 1000
[  220.189875][T15046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.272400][T15046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.276170][T15048] syzkaller1: entered promiscuous mode
[  220.279418][T15048] syzkaller1: entered allmulticast mode
[  220.298102][T15048] __nla_validate_parse: 25 callbacks suppressed
[  220.298115][T15048] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2673'.
[  220.385137][T15054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.391598][T15053] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  220.403112][T15053] tipc: Bearer <udp:s>: trying with adjusted priority
[  220.405574][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2675'.
[  220.410821][T15053] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  220.425229][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'.
[  220.687958][T15084] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2683'.
[  220.691987][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'.
[  220.717791][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'.
[  220.726724][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  220.757748][T15092] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  220.765680][T15086] vlan1: entered allmulticast mode
[  220.767488][T15086] bond19: entered allmulticast mode
[  220.893698][T15107] veth19: entered promiscuous mode
[  221.028690][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2691'.
[  221.034739][T15119] bridge0: entered promiscuous mode
[  221.038886][T15119] bridge0: port 1(macvlan0) entered blocking state
[  221.044139][T15119] bridge0: port 1(macvlan0) entered disabled state
[  221.048121][T15119] macvlan0: entered allmulticast mode
[  221.050519][T15119] bridge0: entered allmulticast mode
[  221.053448][T15119] macvlan0: left allmulticast mode
[  221.055188][T15119] bridge0: left allmulticast mode
[  221.057996][T15119] bridge0: left promiscuous mode
[  221.130500][T15122] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2692'.
[  221.176165][T15124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2693'.
[  221.181599][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'.
[  221.225397][T15126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.655902][T15154] validate_nla: 13 callbacks suppressed
[  221.655912][T15154] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  221.703015][T15162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.728672][T15164] netlink: 'syz.1.2703': attribute type 4 has an invalid length.
[  221.766476][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  221.842675][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  221.847194][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  221.850895][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  221.854963][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  221.857281][T15183] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  221.892135][T15186] vlan2: entered promiscuous mode
[  221.958376][T15175] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  221.964128][T15194] vxcan1 speed is unknown, defaulting to 1000
[  222.085895][T15202] netlink: 'syz.0.2714': attribute type 3 has an invalid length.
[  222.806552][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.951945][T15209] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.108467][T15241] vxcan1 speed is unknown, defaulting to 1000
[  223.143016][T15246] netlink: 'syz.1.2724': attribute type 1 has an invalid length.
[  223.315667][T15255] vxcan1 speed is unknown, defaulting to 1000
[  223.396005][T15261] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  223.399118][T15261] CPU: 0 UID: 0 PID: 15261 Comm: syz.0.2731 Not tainted syzkaller #0 PREEMPT(full) 
[  223.399130][T15261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.399134][T15261] Call Trace:
[  223.399137][T15261]  <TASK>
[  223.399141][T15261]  dump_stack_lvl+0x189/0x250
[  223.399155][T15261]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.399163][T15261]  ? __pfx__printk+0x10/0x10
[  223.399175][T15261]  ? kernfs_path_from_node+0x2f/0x290
[  223.399183][T15261]  ? kernfs_path_from_node+0x250/0x290
[  223.399189][T15261]  ? kernfs_path_from_node+0x2f/0x290
[  223.399198][T15261]  sysfs_warn_dup+0x8e/0xa0
[  223.399206][T15261]  sysfs_do_create_link_sd+0xc0/0x110
[  223.399214][T15261]  device_add_class_symlinks+0x1cf/0x240
[  223.399223][T15261]  device_add+0x475/0xb50
[  223.399232][T15261]  wiphy_register+0x1ba6/0x28d0
[  223.399246][T15261]  ? __pfx_wiphy_register+0x10/0x10
[  223.399252][T15261]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  223.399265][T15261]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  223.399276][T15261]  ieee80211_register_hw+0x3425/0x4080
[  223.399292][T15261]  ? ieee80211_register_hw+0x1431/0x4080
[  223.399303][T15261]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  223.399313][T15261]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.399327][T15261]  ? __hrtimer_setup+0x187/0x210
[  223.399333][T15261]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  223.399345][T15261]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  223.399366][T15261]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  223.399374][T15261]  ? trace_kmalloc+0x1f/0xd0
[  223.399382][T15261]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  223.399391][T15261]  ? kstrndup+0xbf/0x160
[  223.399403][T15261]  hwsim_new_radio_nl+0xea4/0x1b10
[  223.399413][T15261]  ? __pfx___nla_validate_parse+0x10/0x10
[  223.399429][T15261]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.399443][T15261]  ? __nla_parse+0x40/0x60
[  223.399454][T15261]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  223.399466][T15261]  genl_family_rcv_msg_doit+0x215/0x300
[  223.399478][T15261]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  223.399492][T15261]  ? bpf_lsm_capable+0x9/0x20
[  223.399500][T15261]  ? security_capable+0x7e/0x2e0
[  223.399512][T15261]  genl_rcv_msg+0x60e/0x790
[  223.399523][T15261]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.399531][T15261]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.399546][T15261]  netlink_rcv_skb+0x208/0x470
[  223.399552][T15261]  ? __lock_acquire+0xab9/0xd20
[  223.399562][T15261]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.399571][T15261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.399586][T15261]  ? down_read+0x1ad/0x2e0
[  223.399594][T15261]  genl_rcv+0x28/0x40
[  223.399629][T15261]  netlink_unicast+0x82f/0x9e0
[  223.399642][T15261]  ? __pfx_netlink_unicast+0x10/0x10
[  223.399652][T15261]  ? netlink_sendmsg+0x642/0xb30
[  223.399658][T15261]  ? skb_put+0x11b/0x210
[  223.399667][T15261]  netlink_sendmsg+0x805/0xb30
[  223.399678][T15261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.399686][T15261]  ? aa_sock_msg_perm+0xf1/0x1d0
[  223.399694][T15261]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.399701][T15261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.399708][T15261]  __sock_sendmsg+0x21c/0x270
[  223.399719][T15261]  ____sys_sendmsg+0x505/0x830
[  223.399729][T15261]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.399740][T15261]  ? import_iovec+0x74/0xa0
[  223.399750][T15261]  ___sys_sendmsg+0x21f/0x2a0
[  223.399758][T15261]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.399781][T15261]  ? __fget_files+0x2a/0x420
[  223.399787][T15261]  ? __fget_files+0x3a0/0x420
[  223.399797][T15261]  __x64_sys_sendmsg+0x19b/0x260
[  223.399806][T15261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.399834][T15261]  ? rcu_is_watching+0x15/0xb0
[  223.399845][T15261]  ? do_syscall_64+0xbe/0x3b0
[  223.399855][T15261]  do_syscall_64+0xfa/0x3b0
[  223.399861][T15261]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.399867][T15261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.399874][T15261]  ? exc_page_fault+0x9f/0xf0
[  223.399881][T15261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.399888][T15261] RIP: 0033:0x7f105998ebe9
[  223.399896][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.399902][T15261] RSP: 002b:00007f105a881038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.399915][T15261] RAX: ffffffffffffffda RBX: 00007f1059bc6090 RCX: 00007f105998ebe9
[  223.399920][T15261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  223.399924][T15261] RBP: 00007f1059a11e19 R08: 0000000000000000 R09: 0000000000000000
[  223.399928][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.399932][T15261] R13: 00007f1059bc6128 R14: 00007f1059bc6090 R15: 00007ffc458a8c98
[  223.399944][T15261]  </TASK>
[  223.577248][T15262] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  223.579834][T15262] CPU: 1 UID: 0 PID: 15262 Comm: syz.0.2731 Not tainted syzkaller #0 PREEMPT(full) 
[  223.579845][T15262] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.579850][T15262] Call Trace:
[  223.579854][T15262]  <TASK>
[  223.579857][T15262]  dump_stack_lvl+0x189/0x250
[  223.579871][T15262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.579879][T15262]  ? __pfx__printk+0x10/0x10
[  223.579891][T15262]  ? kernfs_path_from_node+0x2f/0x290
[  223.579899][T15262]  ? kernfs_path_from_node+0x250/0x290
[  223.579905][T15262]  ? kernfs_path_from_node+0x2f/0x290
[  223.579914][T15262]  sysfs_warn_dup+0x8e/0xa0
[  223.579922][T15262]  sysfs_do_create_link_sd+0xc0/0x110
[  223.579930][T15262]  device_add_class_symlinks+0x1cf/0x240
[  223.579939][T15262]  device_add+0x475/0xb50
[  223.579948][T15262]  wiphy_register+0x1ba6/0x28d0
[  223.579963][T15262]  ? __pfx_wiphy_register+0x10/0x10
[  223.579969][T15262]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  223.579981][T15262]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  223.579992][T15262]  ieee80211_register_hw+0x3425/0x4080
[  223.580008][T15262]  ? ieee80211_register_hw+0x1431/0x4080
[  223.580019][T15262]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  223.580030][T15262]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.580043][T15262]  ? __hrtimer_setup+0x187/0x210
[  223.580049][T15262]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  223.580062][T15262]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  223.580083][T15262]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  223.580091][T15262]  ? trace_kmalloc+0x1f/0xd0
[  223.580099][T15262]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  223.580108][T15262]  ? kstrndup+0xbf/0x160
[  223.580119][T15262]  hwsim_new_radio_nl+0xea4/0x1b10
[  223.580129][T15262]  ? __pfx___nla_validate_parse+0x10/0x10
[  223.580145][T15262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.580159][T15262]  ? __nla_parse+0x40/0x60
[  223.580171][T15262]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  223.580183][T15262]  genl_family_rcv_msg_doit+0x215/0x300
[  223.580195][T15262]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  223.580208][T15262]  ? bpf_lsm_capable+0x9/0x20
[  223.580217][T15262]  ? security_capable+0x7e/0x2e0
[  223.580230][T15262]  genl_rcv_msg+0x60e/0x790
[  223.580241][T15262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.580249][T15262]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  223.580264][T15262]  netlink_rcv_skb+0x208/0x470
[  223.580269][T15262]  ? __lock_acquire+0xab9/0xd20
[  223.580279][T15262]  ? __pfx_genl_rcv_msg+0x10/0x10
[  223.580288][T15262]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  223.580302][T15262]  ? down_read+0x1ad/0x2e0
[  223.580311][T15262]  genl_rcv+0x28/0x40
[  223.580318][T15262]  netlink_unicast+0x82f/0x9e0
[  223.580331][T15262]  ? __pfx_netlink_unicast+0x10/0x10
[  223.580341][T15262]  ? netlink_sendmsg+0x642/0xb30
[  223.580347][T15262]  ? skb_put+0x11b/0x210
[  223.580357][T15262]  netlink_sendmsg+0x805/0xb30
[  223.580367][T15262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.580375][T15262]  ? aa_sock_msg_perm+0xf1/0x1d0
[  223.580383][T15262]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  223.580390][T15262]  ? __pfx_netlink_sendmsg+0x10/0x10
[  223.580397][T15262]  __sock_sendmsg+0x21c/0x270
[  223.580408][T15262]  ____sys_sendmsg+0x505/0x830
[  223.580418][T15262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  223.580430][T15262]  ? import_iovec+0x74/0xa0
[  223.580440][T15262]  ___sys_sendmsg+0x21f/0x2a0
[  223.580449][T15262]  ? __pfx____sys_sendmsg+0x10/0x10
[  223.580471][T15262]  ? __fget_files+0x2a/0x420
[  223.580477][T15262]  ? __fget_files+0x3a0/0x420
[  223.580488][T15262]  __x64_sys_sendmsg+0x19b/0x260
[  223.580497][T15262]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  223.580509][T15262]  ? do_user_addr_fault+0xc8a/0x1390
[  223.580521][T15262]  ? do_syscall_64+0xbe/0x3b0
[  223.580530][T15262]  do_syscall_64+0xfa/0x3b0
[  223.580537][T15262]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.580543][T15262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.580549][T15262]  ? exc_page_fault+0x9f/0xf0
[  223.580557][T15262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.580563][T15262] RIP: 0033:0x7f105998ebe9
[  223.580570][T15262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  223.580576][T15262] RSP: 002b:00007f105a860038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  223.580585][T15262] RAX: ffffffffffffffda RBX: 00007f1059bc6180 RCX: 00007f105998ebe9
[  223.580589][T15262] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  223.580594][T15262] RBP: 00007f1059a11e19 R08: 0000000000000000 R09: 0000000000000000
[  223.580619][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.580623][T15262] R13: 00007f1059bc6218 R14: 00007f1059bc6180 R15: 00007ffc458a8c98
[  223.580635][T15262]  </TASK>
[  223.847651][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.068946][T15292] IPv6: sit5: Disabled Multicast RS
[  224.115333][T15296] openvswitch: netlink: Flow key attribute not present in set flow.
[  224.324146][T15309] IPVS: set_ctl: invalid protocol: 47 172.20.20.46:37860
[  224.493360][T15316] hsr_slave_0: left promiscuous mode
[  224.886698][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.991181][T15324] vxcan1 speed is unknown, defaulting to 1000
[  225.401324][T15334] tipc: Resetting bearer <eth:syzkaller0>
[  225.407853][T15334] gretap0: left allmulticast mode
[  225.539988][T15350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.543774][T15350] syzkaller0: entered promiscuous mode
[  225.546055][T15350] syzkaller0: entered allmulticast mode
[  225.552025][T15347] tipc: Resetting bearer <eth:syzkaller0>
[  225.576021][T15347] tipc: Disabling bearer <eth:syzkaller0>
[  225.835293][T15385] vxcan1 speed is unknown, defaulting to 1000
[  225.926599][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  226.151113][T15397] netlink: 'syz.1.2766': attribute type 7 has an invalid length.
[  226.154226][T15397] netlink: 'syz.1.2766': attribute type 8 has an invalid length.
[  226.519611][T15412] __nla_validate_parse: 21 callbacks suppressed
[  226.519627][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2770'.
[  226.653166][T15422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.657601][T15422] tipc: Disabling bearer <eth:syzkaller0>
[  226.691633][T15424] netlink: 'syz.2.2773': attribute type 1 has an invalid length.
[  226.694957][T15424] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2773'.
[  226.710534][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2773'.
[  226.740117][T15426] netlink: 'syz.0.2774': attribute type 3 has an invalid length.
[  226.745863][T15426] gretap0: entered allmulticast mode
[  226.771091][T15429] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002
[  226.773980][T15430] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002
[  226.801504][T15426] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2774'.
[  226.811306][T15436] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[  226.814114][T15436] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[  226.817170][T15437] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[  226.819876][T15437] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[  226.824720][T15436] netlink: 'syz.1.2776': attribute type 1 has an invalid length.
[  226.844944][T15436] 8021q: adding VLAN 0 to HW filter on device bond22
[  226.849340][T15425] gretap0: left allmulticast mode
[  226.856004][T15436] 8021q: adding VLAN 0 to HW filter on device bond22
[  226.859155][T15436] bond22: (slave wlan0): Opening slave failed
[  226.894358][T15443] netlink: 'syz.1.2778': attribute type 1 has an invalid length.
[  226.966647][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  227.558547][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'.
[  227.566263][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'.
[  227.674481][T15460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2781'.
[  227.766800][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'.
[  227.779117][T15464] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.783082][T15464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.874265][T15475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2782'.
[  227.953249][T15482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2786'.
[  227.955113][T15483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.971927][T15483] tipc: Disabling bearer <eth:syzkaller0>
[  228.006576][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  228.032777][T15491] netlink: 'syz.0.2790': attribute type 4 has an invalid length.
[  228.083113][T15495] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  228.086202][T15495] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  228.609327][T15519] netlink: 'syz.2.2799': attribute type 10 has an invalid length.
[  228.663493][T15522] 8021q: adding VLAN 0 to HW filter on device bond20
[  228.683825][T15525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.693690][T15525] syzkaller0: entered promiscuous mode
[  228.695920][T15525] syzkaller0: entered allmulticast mode
[  228.725188][T15525] tipc: Resetting bearer <eth:syzkaller0>
[  228.739298][T15525] tipc: Disabling bearer <eth:syzkaller0>
[  228.868159][T15534] team0: Mode changed to "loadbalance"
[  228.912229][T15542] siw: device registration error -23
[  229.046782][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.086582][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  230.188522][T15589] bond_slave_1: entered promiscuous mode
[  230.192406][T15589] bond_slave_1: left promiscuous mode
[  230.528626][T15605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.570920][T15605] syzkaller0: entered promiscuous mode
[  230.573303][T15605] syzkaller0: entered allmulticast mode
[  230.575909][T15605] tipc: Resetting bearer <eth:syzkaller0>
[  230.583591][T15603] tipc: Resetting bearer <eth:syzkaller0>
[  231.126631][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  231.819124][T15603] tipc: Disabling bearer <eth:syzkaller0>
[  231.861340][T15638] vxcan1 speed is unknown, defaulting to 1000
[  231.884739][T15640] syzkaller1: entered allmulticast mode
[  231.891895][T15640] __nla_validate_parse: 14 callbacks suppressed
[  231.891905][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2833'.
[  231.906745][T15641] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2832'.
[  231.928125][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  232.097971][T15651] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2837'.
[  232.115192][T15653] validate_nla: 4 callbacks suppressed
[  232.115205][T15653] netlink: 'syz.2.2838': attribute type 21 has an invalid length.
[  232.135913][T15649] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2836'.
[  232.139411][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'.
[  232.145321][T15653] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2838'.
[  232.166677][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  232.222641][T15651] vxcan1 speed is unknown, defaulting to 1000
[  232.274130][T15666] sctp: [Deprecated]: syz.2.2840 (pid 15666) Use of int in max_burst socket option deprecated.
[  232.274130][T15666] Use struct sctp_assoc_value instead
[  232.304853][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'.
[  232.365219][T15671] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2841'.
[  232.370884][T15672] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2841'.
[  232.386126][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2841'.
[  232.389806][T15671] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.393337][T15671] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.894928][T15689] vxcan1 speed is unknown, defaulting to 1000
[  233.062422][T15701] syzkaller1: entered promiscuous mode
[  233.080277][T15701] syzkaller1: entered allmulticast mode
[  233.206570][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  233.280636][T15709] vxcan1 speed is unknown, defaulting to 1000
[  233.509613][T15729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.513209][T15729] syzkaller0: entered promiscuous mode
[  233.515569][T15729] syzkaller0: entered allmulticast mode
[  233.522105][T15729] syzkaller0: mtu less than device minimum
[  233.600000][T15728] tipc: Resetting bearer <eth:syzkaller0>
[  233.616274][T15728] tipc: Disabling bearer <eth:syzkaller0>
[  233.762870][T15742] netlink: 'syz.1.2858': attribute type 4 has an invalid length.
[  233.763396][T15741] netlink: 'syz.1.2858': attribute type 4 has an invalid length.
[  233.830700][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.833715][ T5871] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.840612][ T5871] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.846757][ T5871] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.874372][T15750] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.924765][T15750] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.987278][T15750] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.091386][T15750] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.213906][ T5863] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.227893][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.238580][T10080] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.246646][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  234.256254][T15768] netlink: 'syz.1.2867': attribute type 29 has an invalid length.
[  234.261017][T15768] netlink: 'syz.1.2867': attribute type 29 has an invalid length.
[  234.273037][T15768] netlink: 'syz.1.2867': attribute type 29 has an invalid length.
[  234.350911][T15777] netlink: 'syz.1.2870': attribute type 4 has an invalid length.
[  234.702884][T15799] tc_dump_action: action bad kind
[  235.035871][T15821] netlink: 'syz.1.2885': attribute type 1 has an invalid length.
[  235.068561][T15823] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  235.286569][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  235.365702][T15840] netlink: 'syz.1.2891': attribute type 2 has an invalid length.
[  235.478641][T15798] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  235.921454][T15751] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.981771][T15751] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.059904][T15751] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.127207][ T5872] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.135182][ T5872] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.144266][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.154398][T10080] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.326541][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  236.344349][T15865] vxcan1 speed is unknown, defaulting to 1000
[  236.458286][T15873] vxcan1 speed is unknown, defaulting to 1000
[  236.739910][T15887] netlink: 'syz.1.2904': attribute type 58 has an invalid length.
[  236.899041][T15897] macsec0: entered allmulticast mode
[  236.900943][T15897] erspan0: entered allmulticast mode
[  236.903227][T15897] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  237.004964][T15900] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  237.063001][T15900] ip6tnl4: left promiscuous mode
[  237.083838][T15900] erspan0: left allmulticast mode
[  237.085653][T15900] macsec0: left allmulticast mode
[  237.366735][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  237.384045][T15918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.396867][T15918] syzkaller0: entered promiscuous mode
[  237.399220][T15918] syzkaller0: entered allmulticast mode
[  237.442441][T15918] tipc: Resetting bearer <eth:syzkaller0>
[  237.447250][T15917] tipc: Resetting bearer <eth:syzkaller0>
[  237.456194][T15917] tipc: Disabling bearer <eth:syzkaller0>
[  237.544278][T15926] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  237.548745][T15926] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  237.579323][T15926] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  237.613094][T15926] 8021q: adding VLAN 0 to HW filter on device bond23
[  237.723231][T15940] __nla_validate_parse: 22 callbacks suppressed
[  237.723244][T15940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2918'.
[  237.815212][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2920'.
[  237.819477][T15948] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  237.822945][T15948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.859039][T15950] netlink: 'syz.1.2921': attribute type 10 has an invalid length.
[  237.861622][T15950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2921'.
[  237.864875][T15950] veth0_vlan: left promiscuous mode
[  237.867041][T15950] veth0_vlan: entered promiscuous mode
[  237.868902][T15950] veth0_vlan: entered allmulticast mode
[  237.873706][T15950] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  237.968287][T15959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2924'.
[  237.972269][T15961] netlink: 'syz.2.2925': attribute type 11 has an invalid length.
[  237.975333][T15961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2925'.
[  237.980258][T15961] netlink: 'syz.2.2925': attribute type 4 has an invalid length.
[  237.988064][T15959] vlan2: entered allmulticast mode
[  237.989979][T15959] bridge0: entered allmulticast mode
[  237.992086][T15959] bridge21: port 1(vlan2) entered blocking state
[  237.994883][T15959] bridge21: port 1(vlan2) entered disabled state
[  237.999285][T15959] vlan2: entered promiscuous mode
[  238.001307][T15959] bridge0: entered promiscuous mode
[  238.061259][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'.
[  238.064721][T15970] bridge0: entered allmulticast mode
[  238.073035][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2927'.
[  238.140878][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'.
[  238.269665][T15985] bond0: entered promiscuous mode
[  238.271613][T15985] team0: entered promiscuous mode
[  238.273495][T15985] !: entered promiscuous mode
[  238.276030][T15985] batadv_slave_0: entered promiscuous mode
[  238.280597][T15985] bond0: left promiscuous mode
[  238.282256][T15985] team0: left promiscuous mode
[  238.284020][T15985] !: left promiscuous mode
[  238.285660][T15985] batadv_slave_0: left promiscuous mode
[  238.314678][T15988] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2932'.
[  238.370043][T15993] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2934'.
[  238.406549][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  238.770578][T16032] netlink: 'syz.0.2944': attribute type 39 has an invalid length.
[  239.223104][T16051] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  239.446550][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  239.474854][T16057] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001
[  239.484834][T16057] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001
[  239.729513][T16071] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  239.733070][T16071] gretap4: entered promiscuous mode
[  239.735056][T16071] gretap4: entered allmulticast mode
[  239.753716][T16075] syzkaller0: entered promiscuous mode
[  239.756029][T16075] syzkaller0: entered allmulticast mode
[  239.823891][T16084] syzkaller1: entered promiscuous mode
[  239.825877][T16084] syzkaller1: entered allmulticast mode
[  239.958064][T16097] siw: device registration error -23
[  239.971984][T16097] netlink: 'syz.1.2968': attribute type 4 has an invalid length.
[  239.991202][T16100] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  240.010405][T16100] bridge28: entered promiscuous mode
[  240.012446][T16100] bridge28: entered allmulticast mode
[  240.015390][T16100] team0: Port device bridge28 added
[  240.051123][T16104] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  240.169989][T16118] GUP no longer grows the stack in syz.2.2975 (16118): 200000003000-20000000a000 (200000001000)
[  240.173904][T16118] CPU: 0 UID: 0 PID: 16118 Comm: syz.2.2975 Not tainted syzkaller #0 PREEMPT(full) 
[  240.173915][T16118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.173919][T16118] Call Trace:
[  240.173923][T16118]  <TASK>
[  240.173926][T16118]  dump_stack_lvl+0x189/0x250
[  240.173940][T16118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.173949][T16118]  ? __pfx__printk+0x10/0x10
[  240.173956][T16118]  ? find_vma+0xe7/0x160
[  240.173966][T16118]  ? __lock_acquire+0xab9/0xd20
[  240.173982][T16118]  __get_user_pages+0x24d0/0x2ce0
[  240.173991][T16118]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  240.174010][T16118]  ? rcu_is_watching+0x15/0xb0
[  240.174019][T16118]  __gup_longterm_locked+0xde9/0x1660
[  240.174032][T16118]  ? sanity_check_pinned_pages+0x123a/0x1300
[  240.174044][T16118]  gup_fast_fallback+0x1e6a/0x2010
[  240.174065][T16118]  ? __pfx_gup_fast_fallback+0x10/0x10
[  240.174092][T16118]  ? stack_trace_save+0x9c/0xe0
[  240.174101][T16118]  ? __pfx_stack_trace_save+0x10/0x10
[  240.174113][T16118]  ? pin_user_pages_fast+0x4d/0xb0
[  240.174123][T16118]  iov_iter_extract_pages+0x35a/0x5e0
[  240.174136][T16118]  extract_iter_to_sg+0xe46/0x24e0
[  240.174150][T16118]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  240.174170][T16118]  ? __asan_memset+0x22/0x50
[  240.174179][T16118]  af_alg_get_rsgl+0x436/0x810
[  240.174196][T16118]  aead_recvmsg+0x4cc/0x13f0
[  240.174210][T16118]  ? rcu_is_watching+0x15/0xb0
[  240.174220][T16118]  ? __pfx_aead_recvmsg+0x10/0x10
[  240.174230][T16118]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  240.174238][T16118]  ? __pfx_aead_recvmsg+0x10/0x10
[  240.174247][T16118]  sock_recvmsg_nosec+0x186/0x1c0
[  240.174259][T16118]  ____sys_recvmsg+0x3aa/0x460
[  240.174272][T16118]  ? __pfx_____sys_recvmsg+0x10/0x10
[  240.174286][T16118]  ? import_iovec+0x74/0xa0
[  240.174295][T16118]  ___sys_recvmsg+0x1b5/0x510
[  240.174305][T16118]  ? __pfx____sys_recvmsg+0x10/0x10
[  240.174326][T16118]  ? __might_fault+0xb0/0x130
[  240.174337][T16118]  do_recvmmsg+0x307/0x770
[  240.174349][T16118]  ? __pfx_do_recvmmsg+0x10/0x10
[  240.174356][T16118]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  240.174372][T16118]  ? __pfx_do_futex+0x10/0x10
[  240.174387][T16118]  __x64_sys_recvmmsg+0x190/0x240
[  240.174396][T16118]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  240.174409][T16118]  ? rcu_is_watching+0x15/0xb0
[  240.174438][T16118]  ? do_syscall_64+0xbe/0x3b0
[  240.174451][T16118]  do_syscall_64+0xfa/0x3b0
[  240.174458][T16118]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.174465][T16118]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.174473][T16118]  ? exc_page_fault+0x9f/0xf0
[  240.174481][T16118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.174488][T16118] RIP: 0033:0x7f008318ebe9
[  240.174496][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  240.174502][T16118] RSP: 002b:00007f0083f4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  240.174511][T16118] RAX: ffffffffffffffda RBX: 00007f00833c5fa0 RCX: 00007f008318ebe9
[  240.174516][T16118] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000d
[  240.174520][T16118] RBP: 00007f0083211e19 R08: 0000000000000000 R09: 0000000000000000
[  240.174524][T16118] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  240.174528][T16118] R13: 00007f00833c6038 R14: 00007f00833c5fa0 R15: 00007fff91cfcb98
[  240.174540][T16118]  </TASK>
[  240.391676][T16137] vxcan1 speed is unknown, defaulting to 1000
[  240.486655][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  240.539507][T16156] team0: Port device bridge28 removed
[  240.566166][T16156] 8021q: adding VLAN 0 to HW filter on device bond21
[  240.571898][T16156] tipc: Enabled bearer <eth:team0>, priority 0
[  240.619361][T16154] netlink: 'syz.1.2986': attribute type 4 has an invalid length.
[  240.859617][T16184] netlink: 'syz.1.2997': attribute type 1 has an invalid length.
[  241.010767][T16199] gretap5: entered allmulticast mode
[  241.018196][T16199] bond21: (slave gretap5): making interface the new active one
[  241.027525][T16199] bond21: (slave gretap5): Enslaving as an active interface with an up link
[  241.099107][T16213] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  241.119895][T16216] syzkaller1: entered promiscuous mode
[  241.122037][T16216] syzkaller1: entered allmulticast mode
[  241.208227][T16234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.212311][T16232] tipc: Resetting bearer <eth:syzkaller0>
[  241.221472][T16230] tipc: Disabling bearer <eth:syzkaller0>
[  241.267568][T16242] vxcan1 speed is unknown, defaulting to 1000
[  241.526656][    C1] net_ratelimit: 1 callbacks suppressed
[  241.526671][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  241.609059][T16272] siw: device registration error -23
[  241.615025][T16272] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.618612][T16272] veth0_to_bridge: entered promiscuous mode
[  241.620686][T16272] veth0_to_bridge: entered allmulticast mode
[  242.407130][T16318] netlink: 'syz.0.3035': attribute type 11 has an invalid length.
[  242.566603][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  242.691866][T16339] validate_nla: 5 callbacks suppressed
[  242.691876][T16339] netlink: 'syz.0.3041': attribute type 2 has an invalid length.
[  242.701882][T16339] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  242.874333][T16352] __nla_validate_parse: 114 callbacks suppressed
[  242.874346][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'.
[  242.893859][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'.
[  243.052058][T16364] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  243.224491][T16368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.230184][T16368] syzkaller0: entered promiscuous mode
[  243.232632][T16368] syzkaller0: entered allmulticast mode
[  243.248277][T16368] tipc: Resetting bearer <eth:syzkaller0>
[  243.260185][T16368] tipc: Disabling bearer <eth:syzkaller0>
[  243.338146][T16373] netlink: 'syz.0.3049': attribute type 6 has an invalid length.
[  243.360094][T16373] bond23: entered promiscuous mode
[  243.448508][T16378] sctp: [Deprecated]: syz.1.3051 (pid 16378) Use of int in max_burst socket option deprecated.
[  243.448508][T16378] Use struct sctp_assoc_value instead
[  243.460534][T16379] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  243.472517][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'.
[  243.523447][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3052'.
[  243.527944][T16381] netlink: 'syz.1.3052': attribute type 1 has an invalid length.
[  243.530653][T16381] netlink: 'syz.1.3052': attribute type 2 has an invalid length.
[  243.533737][T16381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3052'.
[  243.540654][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'.
[  243.543754][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3052'.
[  243.606959][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  243.709547][T16388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3054'.
[  243.882866][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3057'.
[  243.885933][T16406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'.
[  243.889303][T16406] netlink: 'syz.2.3057': attribute type 6 has an invalid length.
[  243.953528][T16418] netlink: 'syz.1.3060': attribute type 1 has an invalid length.
[  243.956202][T16418] netlink: 'syz.1.3060': attribute type 2 has an invalid length.
[  243.959912][T16418] netlink: 'syz.1.3060': attribute type 8 has an invalid length.
[  243.964184][T16415] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003
[  244.216771][T16449] syzkaller0: entered promiscuous mode
[  244.219396][T16449] syzkaller0: entered allmulticast mode
[  244.255163][T16453] netlink: 'syz.0.3067': attribute type 1 has an invalid length.
[  244.315420][T16453] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.320474][T16453] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.646586][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.660756][T16470] netlink: 'syz.1.3071': attribute type 10 has an invalid length.
[  244.665658][T16470] bond0: (slave 0!): Releasing backup interface
[  244.677026][T16470] team0: Port device 0! added
[  244.687909][T16470] team0: Port device 0! removed
[  244.693706][T16470] bond0: (slave 0!): Enslaving as an active interface with an up link
[  245.029187][T16476] siw: device registration error -23
[  245.052991][T16476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.527757][T16501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  245.577063][T16511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.579783][T16511] syzkaller0: entered promiscuous mode
[  245.581767][T16511] syzkaller0: entered allmulticast mode
[  245.587917][T16510] vxcan1 speed is unknown, defaulting to 1000
[  245.597478][T16515] tipc: Resetting bearer <eth:syzkaller0>
[  245.611843][T16515] tipc: Disabling bearer <eth:syzkaller0>
[  245.906050][T16527] vxcan1 speed is unknown, defaulting to 1000
[  246.591631][T16550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.594714][T16550] syzkaller0: entered promiscuous mode
[  246.598027][T16550] syzkaller0: entered allmulticast mode
[  246.613983][T16550] tipc: Resetting bearer <eth:syzkaller0>
[  246.619544][T16549] tipc: Resetting bearer <eth:syzkaller0>
[  246.628893][T16549] tipc: Disabling bearer <eth:syzkaller0>
[  246.828516][T16565] : renamed from vlan1 (while UP)
[  246.917092][T16569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.254981][T16592] : renamed from bond_slave_0
[  247.379730][T16605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.383045][T16605] syzkaller0: entered promiscuous mode
[  247.385310][T16605] syzkaller0: entered allmulticast mode
[  247.402423][T16605] tipc: Resetting bearer <eth:syzkaller0>
[  247.410132][T16604] tipc: Resetting bearer <eth:syzkaller0>
[  247.420965][T16604] tipc: Disabling bearer <eth:syzkaller0>
[  247.600892][T16609] bond0: entered promiscuous mode
[  247.602682][T16609] bond16: entered promiscuous mode
[  247.605165][T16609] bond0: left promiscuous mode
[  247.607303][T16609] bond16: left promiscuous mode
[  247.994411][T16624] validate_nla: 6 callbacks suppressed
[  247.994424][T16624] netlink: 'syz.2.3117': attribute type 1 has an invalid length.
[  248.021356][T16624] 8021q: adding VLAN 0 to HW filter on device bond22
[  248.035461][T16624] bond22: (slave ip6gretap1): making interface the new active one
[  248.040163][T16624] bond22: (slave ip6gretap1): Enslaving as an active interface with an up link
[  248.060763][T16624] veth21: entered promiscuous mode
[  248.065885][T16624] bond22: (slave veth21): Enslaving as an active interface with a down link
[  248.075010][T16624] erspan0: entered allmulticast mode
[  248.081806][T16628] __nla_validate_parse: 21 callbacks suppressed
[  248.081819][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3118'.
[  248.111382][T16628] sch_tbf: peakrate 7 is lower than or equals to rate 1250091910564742684 !
[  248.157802][T16630] netlink: 'syz.2.3119': attribute type 1 has an invalid length.
[  248.205637][T16638] netlink: 'syz.2.3120': attribute type 10 has an invalid length.
[  248.206860][T16637] netlink: 'syz.2.3120': attribute type 10 has an invalid length.
[  248.406812][T16646] vxcan1 speed is unknown, defaulting to 1000
[  248.639594][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3127'.
[  248.816077][T16679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3132'.
[  248.957793][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'.
[  248.961859][T16696] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  248.988277][T16701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3141'.
[  249.045949][T16696] bridge19: entered allmulticast mode
[  249.079406][T16715] IPVS: length: 163 != 8
[  249.207509][T16725] netlink: 'syz.0.3148': attribute type 21 has an invalid length.
[  249.356870][T16725] ipvlan2: entered promiscuous mode
[  249.362634][T16725] bridge0: port 1(ipvlan2) entered blocking state
[  249.376268][T16725] bridge0: port 1(ipvlan2) entered disabled state
[  249.391404][T16725] ipvlan2: entered allmulticast mode
[  249.393342][T16725] gretap0: entered allmulticast mode
[  249.396103][T16725] ipvlan2: left allmulticast mode
[  249.402737][T16725] gretap0: left allmulticast mode
[  249.667873][T16748] netlink: 'syz.2.3155': attribute type 10 has an invalid length.
[  249.671610][T16748] bond0: (slave wlan1): Opening slave failed
[  249.744668][T16755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3157'.
[  249.795698][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'.
[  249.800366][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3157'.
[  249.847947][T16751] block nbd0: server does not support multiple connections per device.
[  249.851880][T16751] block nbd0: shutting down sockets
[  249.860277][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3157'.
[  249.863893][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'.
[  249.969147][T16769] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  250.021812][T16769] netlink: 'syz.2.3161': attribute type 1 has an invalid length.
[  250.026053][T16769] netlink: 'syz.2.3161': attribute type 10 has an invalid length.
[  250.036442][T16769] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  250.039863][T16769] bond0: (slave wlan1): Opening slave failed
[  250.128778][T16787] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  250.208941][T16797] netlink: 'syz.2.3169': attribute type 3 has an invalid length.
[  250.219241][T16797] gre0: entered allmulticast mode
[  250.230108][T16799] netlink: 'syz.1.3170': attribute type 2 has an invalid length.
[  250.232295][T16797] erspan0: left allmulticast mode
[  250.243241][T16797] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.248741][T16797] 8021q: adding VLAN 0 to HW filter on device team0
[  250.252793][T16797] caif0: left promiscuous mode
[  250.254474][T16797] caif0: left allmulticast mode
[  250.256120][T16797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.261689][T16799] : left promiscuous mode
[  250.275255][T16796] gre0: left allmulticast mode
[  250.580660][T16825] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  250.976607][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  251.955125][T16848] bond0: entered promiscuous mode
[  251.957391][T16848] team0: entered promiscuous mode
[  251.959401][T16848] batadv_slave_0: entered promiscuous mode
[  251.961519][T16848] !: entered promiscuous mode
[  251.963255][T16848] bond0: entered allmulticast mode
[  251.965043][T16848] team0: entered allmulticast mode
[  251.967357][T16848] batadv_slave_0: entered allmulticast mode
[  251.969557][T16848] !: entered allmulticast mode
[  251.972283][T16848] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.974977][T16848] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  252.080389][T16863] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.141808][T16863] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.192395][T16863] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.250916][T16863] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.341459][ T5871] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.361394][ T5871] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.371115][ T5871] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.380992][ T5871] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.387023][T16866] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.393739][ T5871] ==================================================================
[  252.396521][ T5871] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  252.399093][ T5871] Read of size 8 at addr ffff88803a4dccb0 by task kworker/u8:3/5871
[  252.402754][ T5871] 
[  252.403767][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  252.403783][ T5871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.403790][ T5871] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  252.403813][ T5871] Call Trace:
[  252.403818][ T5871]  <TASK>
[  252.403823][ T5871]  dump_stack_lvl+0x189/0x250
[  252.403836][ T5871]  ? __kasan_check_byte+0x12/0x40
[  252.403853][ T5871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.403862][ T5871]  ? lock_release+0x4b/0x3e0
[  252.403873][ T5871]  ? __virt_addr_valid+0x4a5/0x5c0
[  252.403882][ T5871]  print_report+0xca/0x240
[  252.403889][ T5871]  ? __mutex_lock+0x147/0x1350
[  252.403897][ T5871]  kasan_report+0x118/0x150
[  252.403905][ T5871]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  252.403916][ T5871]  ? __mutex_lock+0x147/0x1350
[  252.403923][ T5871]  __mutex_lock+0x147/0x1350
[  252.403931][ T5871]  ? __mutex_lock+0x5bb/0x1350
[  252.403938][ T5871]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  252.403949][ T5871]  ? __pfx___mutex_lock+0x10/0x10
[  252.403956][ T5871]  ? __lock_acquire+0xab9/0xd20
[  252.403967][ T5871]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  252.403978][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  252.403985][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  252.403991][ T5871]  process_scheduled_works+0xae1/0x17b0
[  252.404002][ T5871]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.404011][ T5871]  worker_thread+0x8a0/0xda0
[  252.404022][ T5871]  kthread+0x711/0x8a0
[  252.404031][ T5871]  ? __pfx_worker_thread+0x10/0x10
[  252.404038][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.404046][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.404054][ T5871]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.404061][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.404069][ T5871]  ret_from_fork+0x3fc/0x770
[  252.404076][ T5871]  ? __pfx_ret_from_fork+0x10/0x10
[  252.404084][ T5871]  ? __switch_to_asm+0x39/0x70
[  252.404092][ T5871]  ? __switch_to_asm+0x33/0x70
[  252.404100][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.404108][ T5871]  ret_from_fork_asm+0x1a/0x30
[  252.404118][ T5871]  </TASK>
[  252.404121][ T5871] 
[  252.483719][ T5871] Allocated by task 16863:
[  252.485220][ T5871]  kasan_save_track+0x3e/0x80
[  252.486802][ T5871]  __kasan_kmalloc+0x93/0xb0
[  252.488354][ T5871]  __kmalloc_noprof+0x27a/0x4f0
[  252.489992][ T5871]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  252.492477][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.494243][ T5871]  register_netdevice+0x1608/0x1ae0
[  252.495989][ T5871]  nsim_create+0xae8/0xf10
[  252.497495][ T5871]  __nsim_dev_port_add+0x6b6/0xb10
[  252.499229][ T5871]  nsim_dev_port_add_all+0x37/0xf0
[  252.501212][ T5871]  nsim_dev_reload_up+0x451/0x780
[  252.503167][ T5871]  devlink_reload+0x4ec/0x8d0
[  252.505116][ T5871]  devlink_nl_reload_doit+0xb35/0xd50
[  252.507308][ T5871]  genl_family_rcv_msg_doit+0x215/0x300
[  252.509281][ T5871]  genl_rcv_msg+0x60e/0x790
[  252.511013][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.512755][ T5871]  genl_rcv+0x28/0x40
[  252.514150][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.515824][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.517482][ T5871]  __sock_sendmsg+0x21c/0x270
[  252.519113][ T5871]  ____sys_sendmsg+0x505/0x830
[  252.520849][ T5871]  ___sys_sendmsg+0x21f/0x2a0
[  252.522857][ T5871]  __x64_sys_sendmsg+0x19b/0x260
[  252.524795][ T5871]  do_syscall_64+0xfa/0x3b0
[  252.526489][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.529038][ T5871] 
[  252.530098][ T5871] Freed by task 16866:
[  252.531900][ T5871]  kasan_save_track+0x3e/0x80
[  252.533960][ T5871]  kasan_save_free_info+0x46/0x50
[  252.536161][ T5871]  __kasan_slab_free+0x5b/0x80
[  252.538249][ T5871]  kfree+0x18e/0x440
[  252.539770][ T5871]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  252.542410][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.544397][ T5871]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  252.547088][ T5871]  unregister_netdevice_queue+0x33c/0x380
[  252.549497][ T5871]  nsim_destroy+0x1dd/0x670
[  252.551485][ T5871]  __nsim_dev_port_del+0x14d/0x1b0
[  252.553712][ T5871]  nsim_dev_reload_destroy+0x288/0x490
[  252.556027][ T5871]  nsim_dev_reload_down+0x8a/0xc0
[  252.558227][ T5871]  devlink_reload+0x1b6/0x8d0
[  252.560274][ T5871]  devlink_nl_reload_doit+0xb35/0xd50
[  252.562563][ T5871]  genl_family_rcv_msg_doit+0x215/0x300
[  252.564933][ T5871]  genl_rcv_msg+0x60e/0x790
[  252.566932][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.569034][ T5871]  genl_rcv+0x28/0x40
[  252.570759][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.572807][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.574798][ T5871]  __sock_sendmsg+0x21c/0x270
[  252.576762][ T5871]  ____sys_sendmsg+0x505/0x830
[  252.578668][ T5871]  ___sys_sendmsg+0x21f/0x2a0
[  252.580598][ T5871]  __x64_sys_sendmsg+0x19b/0x260
[  252.582537][ T5871]  do_syscall_64+0xfa/0x3b0
[  252.584115][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.585973][ T5871] 
[  252.586951][ T5871] Last potentially related work creation:
[  252.589346][ T5871]  kasan_save_stack+0x3e/0x60
[  252.591229][ T5871]  kasan_record_aux_stack+0xbd/0xd0
[  252.593235][ T5871]  insert_work+0x3d/0x330
[  252.594769][ T5871]  __queue_work+0xbaf/0xfb0
[  252.596317][ T5871]  queue_work_on+0x181/0x270
[  252.598104][ T5871]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  252.600145][ T5871]  udp_tunnel_push_rx_port+0x180/0x200
[  252.602011][ T5871]  vxlan_offload_rx_ports+0x139/0x200
[  252.603842][ T5871]  vxlan_netdevice_event+0x111/0x470
[  252.605756][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.607603][ T5871]  call_netdevice_notifiers+0x88/0xc0
[  252.609473][ T5871]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  252.611771][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.613584][ T5871]  register_netdevice+0x1608/0x1ae0
[  252.615553][ T5871]  nsim_create+0xae8/0xf10
[  252.617158][ T5871]  __nsim_dev_port_add+0x6b6/0xb10
[  252.618959][ T5871]  nsim_dev_port_add_all+0x37/0xf0
[  252.620802][ T5871]  nsim_dev_reload_up+0x451/0x780
[  252.622994][ T5871]  devlink_reload+0x4ec/0x8d0
[  252.624980][ T5871]  devlink_nl_reload_doit+0xb35/0xd50
[  252.626853][ T5871]  genl_family_rcv_msg_doit+0x215/0x300
[  252.629179][ T5871]  genl_rcv_msg+0x60e/0x790
[  252.631185][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.633058][ T5871]  genl_rcv+0x28/0x40
[  252.634476][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.636126][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.637789][ T5871]  __sock_sendmsg+0x21c/0x270
[  252.639422][ T5871]  ____sys_sendmsg+0x505/0x830
[  252.641233][ T5871]  ___sys_sendmsg+0x21f/0x2a0
[  252.642914][ T5871]  __x64_sys_sendmsg+0x19b/0x260
[  252.644720][ T5871]  do_syscall_64+0xfa/0x3b0
[  252.646386][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.648533][ T5871] 
[  252.649410][ T5871] Second to last potentially related work creation:
[  252.651982][ T5871]  kasan_save_stack+0x3e/0x60
[  252.653658][ T5871]  kasan_record_aux_stack+0xbd/0xd0
[  252.655546][ T5871]  insert_work+0x3d/0x330
[  252.657009][ T5871]  __queue_work+0xcd2/0xfb0
[  252.658497][ T5871]  queue_work_on+0x181/0x270
[  252.660032][ T5871]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  252.661909][ T5871]  udp_tunnel_push_rx_port+0x180/0x200
[  252.663745][ T5871]  vxlan_offload_rx_ports+0x139/0x200
[  252.665483][ T5871]  vxlan_netdevice_event+0x111/0x470
[  252.667351][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.669141][ T5871]  call_netdevice_notifiers+0x88/0xc0
[  252.671363][ T5871]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  252.673535][ T5871]  notifier_call_chain+0x1b6/0x3e0
[  252.675229][ T5871]  register_netdevice+0x1608/0x1ae0
[  252.676968][ T5871]  nsim_create+0xae8/0xf10
[  252.678469][ T5871]  __nsim_dev_port_add+0x6b6/0xb10
[  252.680161][ T5871]  nsim_dev_port_add_all+0x37/0xf0
[  252.681862][ T5871]  nsim_dev_reload_up+0x451/0x780
[  252.683659][ T5871]  devlink_reload+0x4ec/0x8d0
[  252.685275][ T5871]  devlink_nl_reload_doit+0xb35/0xd50
[  252.687085][ T5871]  genl_family_rcv_msg_doit+0x215/0x300
[  252.688936][ T5871]  genl_rcv_msg+0x60e/0x790
[  252.690448][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.692039][ T5871]  genl_rcv+0x28/0x40
[  252.693393][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.695000][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.696624][ T5871]  __sock_sendmsg+0x21c/0x270
[  252.698191][ T5871]  ____sys_sendmsg+0x505/0x830
[  252.699789][ T5871]  ___sys_sendmsg+0x21f/0x2a0
[  252.701363][ T5871]  __x64_sys_sendmsg+0x19b/0x260
[  252.703015][ T5871]  do_syscall_64+0xfa/0x3b0
[  252.704539][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.706465][ T5871] 
[  252.707259][ T5871] The buggy address belongs to the object at ffff88803a4dcc00
[  252.707259][ T5871]  which belongs to the cache kmalloc-256 of size 256
[  252.711819][ T5871] The buggy address is located 176 bytes inside of
[  252.711819][ T5871]  freed 256-byte region [ffff88803a4dcc00, ffff88803a4dcd00)
[  252.716378][ T5871] 
[  252.717210][ T5871] The buggy address belongs to the physical page:
[  252.719348][ T5871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a4dc
[  252.722209][ T5871] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  252.724997][ T5871] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  252.727601][ T5871] page_type: f5(slab)
[  252.728934][ T5871] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c9d200 dead000000000005
[  252.731726][ T5871] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  252.734566][ T5871] head: 00fff00000000040 ffff88801a441b40 ffffea0000c9d200 dead000000000005
[  252.737356][ T5871] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  252.740215][ T5871] head: 00fff00000000001 ffffea0000e93701 00000000ffffffff 00000000ffffffff
[  252.743469][ T5871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  252.746310][ T5871] page dumped because: kasan: bad access detected
[  252.748424][ T5871] page_owner tracks the page as allocated
[  252.750320][ T5871] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9918, tgid 9912 (syz.0.1184), ts 126688584028, free_ts 126653858433
[  252.757986][ T5871]  post_alloc_hook+0x240/0x2a0
[  252.759982][ T5871]  get_page_from_freelist+0x21e4/0x22c0
[  252.762304][ T5871]  __alloc_frozen_pages_noprof+0x181/0x370
[  252.764734][ T5871]  alloc_pages_mpol+0x232/0x4a0
[  252.766771][ T5871]  allocate_slab+0x8a/0x370
[  252.768676][ T5871]  ___slab_alloc+0xbeb/0x1410
[  252.770429][ T5871]  __kmalloc_noprof+0x305/0x4f0
[  252.771986][ T5871]  hash_ip4_add+0x18ba/0x1ec0
[  252.773768][ T5871]  hash_ip4_uadt+0x640/0x850
[  252.775740][ T5871]  call_ad+0x383/0xb00
[  252.777459][ T5871]  ip_set_ad+0x791/0x930
[  252.779210][ T5871]  nfnetlink_rcv_msg+0xb4d/0x1130
[  252.781309][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.783314][ T5871]  nfnetlink_rcv+0x26a/0x2520
[  252.784947][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.786590][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.788184][ T5871] page last free pid 9918 tgid 9912 stack trace:
[  252.790304][ T5871]  __free_pages_ok+0xa83/0xbe0
[  252.791903][ T5871]  free_large_kmalloc+0x13a/0x1f0
[  252.793576][ T5871]  hash_ip4_resize+0x17c9/0x1990
[  252.795215][ T5871]  call_ad+0x44e/0xb00
[  252.796587][ T5871]  ip_set_ad+0x791/0x930
[  252.797995][ T5871]  nfnetlink_rcv_msg+0xb4d/0x1130
[  252.799681][ T5871]  netlink_rcv_skb+0x208/0x470
[  252.801272][ T5871]  nfnetlink_rcv+0x26a/0x2520
[  252.802852][ T5871]  netlink_unicast+0x82f/0x9e0
[  252.804485][ T5871]  netlink_sendmsg+0x805/0xb30
[  252.806105][ T5871]  __sock_sendmsg+0x21c/0x270
[  252.807706][ T5871]  ____sys_sendmsg+0x505/0x830
[  252.809598][ T5871]  ___sys_sendmsg+0x21f/0x2a0
[  252.811489][ T5871]  __x64_sys_sendmsg+0x19b/0x260
[  252.813632][ T5871]  do_syscall_64+0xfa/0x3b0
[  252.815579][ T5871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.818072][ T5871] 
[  252.819091][ T5871] Memory state around the buggy address:
[  252.821431][ T5871]  ffff88803a4dcb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  252.824742][ T5871]  ffff88803a4dcc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.828058][ T5871] >ffff88803a4dcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  252.831051][ T5871]                                      ^
[  252.833088][ T5871]  ffff88803a4dcd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  252.836458][ T5871]  ffff88803a4dcd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  252.839757][ T5871] ==================================================================
[  252.849763][ T5871] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  252.852856][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  252.856814][ T5871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.861037][ T5871] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  252.864142][ T5871] Call Trace:
[  252.865592][ T5871]  <TASK>
[  252.866870][ T5871]  dump_stack_lvl+0x99/0x250
[  252.868848][ T5871]  ? __asan_memcpy+0x40/0x70
[  252.870817][ T5871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.873007][ T5871]  ? __pfx__printk+0x10/0x10
[  252.875012][ T5871]  vpanic+0x281/0x750
[  252.876754][ T5871]  ? preempt_schedule+0xae/0xc0
[  252.878842][ T5871]  ? __pfx_vpanic+0x10/0x10
[  252.880739][ T5871]  ? preempt_schedule_common+0x83/0xd0
[  252.883044][ T5871]  ? preempt_schedule+0xae/0xc0
[  252.885127][ T5871]  ? __pfx_preempt_schedule+0x10/0x10
[  252.887427][ T5871]  panic+0xb9/0xc0
[  252.889042][ T5871]  ? __pfx_panic+0x10/0x10
[  252.890949][ T5871]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  252.893507][ T5871]  ? __mutex_lock+0x147/0x1350
[  252.895540][ T5871]  check_panic_on_warn+0x89/0xb0
[  252.897645][ T5871]  ? __mutex_lock+0x147/0x1350
[  252.899675][ T5871]  end_report+0x78/0x160
[  252.901496][ T5871]  kasan_report+0x129/0x150
[  252.903487][ T5871]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  252.905961][ T5871]  ? __mutex_lock+0x147/0x1350
[  252.907978][ T5871]  __mutex_lock+0x147/0x1350
[  252.909944][ T5871]  ? __mutex_lock+0x5bb/0x1350
[  252.911978][ T5871]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  252.914644][ T5871]  ? __pfx___mutex_lock+0x10/0x10
[  252.916792][ T5871]  ? __lock_acquire+0xab9/0xd20
[  252.918815][ T5871]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  252.921397][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  252.923807][ T5871]  ? process_scheduled_works+0x9ef/0x17b0
[  252.926211][ T5871]  process_scheduled_works+0xae1/0x17b0
[  252.928559][ T5871]  ? __pfx_process_scheduled_works+0x10/0x10
[  252.931071][ T5871]  worker_thread+0x8a0/0xda0
[  252.932994][ T5871]  kthread+0x711/0x8a0
[  252.934751][ T5871]  ? __pfx_worker_thread+0x10/0x10
[  252.936940][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.938935][ T5871]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.941136][ T5871]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.943359][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.945345][ T5871]  ret_from_fork+0x3fc/0x770
[  252.947251][ T5871]  ? __pfx_ret_from_fork+0x10/0x10
[  252.949424][ T5871]  ? __switch_to_asm+0x39/0x70
[  252.951479][ T5871]  ? __switch_to_asm+0x33/0x70
[  252.953464][ T5871]  ? __pfx_kthread+0x10/0x10
[  252.955451][ T5871]  ret_from_fork_asm+0x1a/0x30
[  252.957394][ T5871]  </TASK>
[  252.959393][ T5871] Kernel Offset: disabled
[  252.961194][ T5871] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:00:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff903b2401 RCX=b5074178e6cdf500 RDX=ffffc9000660ed01
RSI=ffffffff8172c195 RDI=ffffffff8e139ee0 RBP=dffffc0000000000 RSP=ffffc9000660ec50
R8 =ffffc9000660feb8 R9 =0000000000000000 R10=ffffc9000660edd8 R11=fffff52000cc1dbd
R12=ffffc9000660fec8 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195
RIP=ffffffff819d6be4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0083f4f6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000030a78000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=c4475fa2c1e8a400 000000000084f37b XMM03=a6f6c83c9ddbaf0a b46cbe76974a1440
XMM04=4e3f758b00000000 000000c4e1740905 XMM05=09fcdf31a3980c10 0b8a33f6eab2a413
XMM06=701631f2db997a08 ccef5695ef1b4e3f XMM07=758b000000000000 00c4e1740905a6f6
XMM08=c83c9ddbaf0ab46c be76974a1440c447 XMM09=0000000000000000 00007f2785c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000464f130
R8 =ffff8881066a8237 R9 =1ffff11020cd5046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b01918 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2783db3fc8 CR3=0000000035eaa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
