last executing test programs:

19.713761071s ago: executing program 2 (id=5396):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="024068a4e7679ffd", 0x8}, {&(0x7f0000000240)="794cfa63c2e62595358de69dca6f", 0xe}, {&(0x7f0000000300)="86fe502ecf40f04481c48b1bc08e4dc168ea18d4", 0x14}, {&(0x7f0000000500)="62729a4adfdb01a6ae312007d33401102050e7aae2be215bf2566064c95bf64d96bfa850e9c3c9cb17d5bc6247232132b58783cfe22de2f2f98173b6f19e5f739f78899c241d79991dc859e0f6cdc24e2ee429d9f54816fbdf28bfecb244169990393dd21670d43704bedff66b7ea06523a6a0d797d5c3b5aedc1bff2f11ec404c138517733d2e3ff633b1ff41165fd32baf0797652d75f9429eb60790c7addf5760faad041115b33913e8e22e5787", 0xaf}], 0x4, 0x0, 0x0, 0x34044005}, 0x20044151)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/117, 0x75}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000840)=""/75, 0x4b}], 0x3}, 0x7fb}], 0x1, 0x40000160, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r5=>0x0})
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r6, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r6, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x45, '\x00', r5, 0xf, r3}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x8000) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x8000)
ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680)) (async)
ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000680))
sendto(r2, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x800e}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x3a}]}]}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x800e}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x3a}]}]}]}, 0x48}}, 0x0)

18.87801966s ago: executing program 2 (id=5399):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004)
close(0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x0, 0x9, 0x4, 0x7, 0x400}, {0x1, 0x2, 0x0, 0x7, 0x8, 0x72bf8a97}, 0xe9, 0xf, 0x19dd}}, @TCA_TBF_BURST={0x8, 0x6, 0x200}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4)

18.785563123s ago: executing program 2 (id=5401):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10)
recvfrom$unix(r3, &(0x7f0000000480)=""/133, 0x85, 0x20, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012)
read(r0, &(0x7f0000000000)=""/155, 0x9b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800)

18.0036858s ago: executing program 0 (id=5413):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
unshare(0x400)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x1a071, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x22, 0x3, 0xfffff000)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x401, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x1, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x1, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.924160243s ago: executing program 1 (id=5415):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000240), &(0x7f0000000740)=""/152, 0x4}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x37, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28)
recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @loopback, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000100), 0x4)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7})
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r8})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0)
r10 = socket$inet(0x2, 0x5, 0xfffffff4)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2})

17.923598043s ago: executing program 2 (id=5416):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0xffffffffffffff0a, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x4000850)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0)
unshare(0x22020400)
close(r0)

17.746015345s ago: executing program 1 (id=5417):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b1400"/20, @ANYRES32=0x0, @ANYBLOB="00000000050000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0xc)
connect$x25(r3, &(0x7f0000000a80), 0x12)
r4 = socket(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
epoll_create(0x9c02)
r11 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYRESHEX=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x48880)
r12 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0)

231.180469ms ago: executing program 0 (id=5418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c0039004ef1f011ffffffff0c0001000300000000feffff0c00010005000000f7ffffff0c004100080000000000000008000500", @ANYRES32=r3], 0x78}}, 0x0)

231.035946ms ago: executing program 0 (id=5419):
r0 = socket(0x10, 0x3, 0x0)
accept(r0, 0x0, &(0x7f0000000000))
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], 0x1c}}, 0x20004441)

225.605124ms ago: executing program 1 (id=5420):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000003f0000000000000071121300000000009500000000000000", @ANYBLOB="7e1a8f62b2fbef98fbd60e8a984506a528edc2525710e2137de4bf373b92fc7cd1d6b876119628b5fd9b68b16ceb6594fb46005bc95e0ca9bd59d8224b0f6d8482c9e865eb65e6dd693edab3a2c6c89afde847f0a223b943b3ead32a3030cb4ccab4fca4216ac6", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

224.980038ms ago: executing program 1 (id=5421):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0x22, 0x80000, 0x4, &(0x7f0000000040)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)

224.597344ms ago: executing program 0 (id=5422):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
close(r0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x28081) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) (async, rerun: 32)
r1 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc", 0x34}, {&(0x7f00000017c0)="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", 0xf17}], 0x2}, 0x2404c0d0) (rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x44004000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64)
r3 = socket(0x10, 0x1, 0x0) (rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x5, 0x7, 0xf, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x2f00, 0xfffffffe, 0xb}})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000004080300000000000000000001000002050003002f0080000900010073797a30000000000900010073797a3100000000"], 0x34}}, 0x24000847) (async)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202020201002d1a00800d98f3be94d1fd85f4c7550f913176420f00000000000000"], 0x4a) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x1e)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x20) (async)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000080211000001"], 0x36) (async, rerun: 64)
r7 = socket(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)

221.418815ms ago: executing program 0 (id=5423):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020010000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x83d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x29a6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e417a5813dc97331cafa9b0f3c3d42db4968015cfb"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9a4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc730}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x79}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x840}, 0xc800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0xeda7b1595050aaf2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x20}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20049053)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x408800, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000800)=&(0x7f00000007c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0xfff)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000ac0)={{<r7=>0x0, 0x800, 0x5, 0x2, 0x1, 0x2, 0x8000, 0x4, 0x9, 0x7fffffff, 0x200, 0x5, 0x2, 0x1, 0x9}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001ac0)={<r8=>0x0, 0x0, "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", "ecdef9bf37f3a275bae0aaf5bf14e58d6df360a48e69b0b055a95690ec8886e25da3aeb0dceb2eaad57b27ace41818a4838a271300fdccf516e4e00d910d638d7917884875a68ee577fa0173a197a2f12c5c9b52bed7a6933283101f70968690b828d33ab49ea2c75470be511f54bb10e6629e6d88ea62c7cf1089928d02cd7ca070408ed91539c8426e75fa9af7f0d64ce4a98a23e455d8e7aae60c3b95bc521b8e8acdb3c738e85ef16d567f2f094e37f39feb7a0877170b7218392d20f63b14fedd707ebf9136dbf7163e7474d37edccbe22606df8a4f79ff0c5ad20afc055bd7196c28163f7707ad5f751a4f8ca7df97ecf6e7c2bc87fa838f032f0a15fc5b5bf61aa30a68b2bf4b1ebdaaf7fa2382c9c1758b5f1ebda9a7ada38b46f0faa27e7a38d424a8309aefdd041d20de9690ddc14fe18534f060484afb5d8201dddf7d42b10148832ac5483f1d176450907af0e9ed4f197747d750411c1600370f2ef7ca94a65719914b2d75b8cf3379b5c90006a8f6145c0b4734831cb9574ee54df901987c6236f543ee711eacc44bd77a26dd7d0239738f1677fcab1a2d35772bb9b717b8e1e982e2955f8448885710ac5ca950f3634b121ea8a509a3293933f400d48251d8415fc404a553dcb5f8f63270a9b667d02c85af669593b8d84e7bac0c656b5eac7538f92103302906cca6e867f76fbf6543d600ef33fde403072307d04e92aab378dfac94900ebb4450d38ea90735f96820cc9366ea53bd07e9a1f99e0c9b60b9d195beadb463ba4fb9d632ee1a39413d83e1a3b763e7bd88bba1e010be71e718581f9387886eadaab5a3bd214c2d5f9b73b27d4918b9d6ef1a3c6f73b020e1f28f312781450131fc8da4038e9c59fd57076f3aa2bd62415515d65977b0e29325be31866ee06835d1fbd170750c019648574dd924fc032b1051c4ee026f5224911eea8a18eb9e43bc1f61d3c70c75ee5f751b05f2b5cf1bce18103880965eee952a9f83ddf9c55d5f3a1f96936e5c6db39f10704d973356aa32996672ff83cca1996ff425602f8ba8af9a6056978950b3845de3e02d3ec5e559e7347334ab37f74da1c86e46b22ded513e16a6bcc89a21ca8452c4cdbe2eb18064d26c1a85f48a9ffcc4aaa45ec89086c56ddbc4137aea094a95cb07866eb75415ae4c5b435080b58b8f032c7e364a309b38cc07a534a4a053a2228bb778c3a611ffb43bf038c74d32fd9c06c2b0d0139c0630e93b80ffaf39d9d424d04822f730237dc7707da687a25e18a6db831feca6b41bc69268c8151e79d0693eea36aeda4eb3270d4a1a731d95194213687ca0ccb5d8efbf6c9bd8f53acb34029e7acc4e599d5bb3cc08f0c1497bab85029484e1103e298c724ba072d407fab21cac458819972ceabea3a9e3ffe16c43f7a282acc043f002bc3f30b0e6f0d07a5dc01fdb54176e4f6b393566f3426475c71cf50643dec3270e820a6c4a6e78e9dc6621463feb280da0dc808e88f818aa7326a7b2d57c23815621104f62593e5c37160c33d1d24722bff022026b98fb318d3a5d3d7ca5bc1ba99357b57ac20111813e6d376b865eb158ad834ce8333046fcc89735bb06e935595894e199e7f0c3c999720d3b13cc49f552956ee68d38df2001f9291f3eb608ad01872b59c20064633ec1ccb7728caeaac1e8a8a6023f17e8a0da6cfb9be186a8becdf166add3180382b9104065f9d1b2fccdff767fcd66ff2c1fcfddf5f6580ad4772b6306deecdb186bdd58c121bdb1317c27e0b56f3084187db6fd2599c23316f08308fce59754496770af30961493db29bac8d28f13377c22f3a2608d5daee1543b58a8118044df2c2d86da3db2bd39228d4a4333d5481686b7d9ad4795c140edf1dc1f2c6f55a6c00e25d4ffef22ef900574c289c904e7b16c89685c97d5434e05e399d7c116e62292b0b151f312f6341f24c1742fffd37d84dd274ef9d22231d611b6f25ff87c2d6aa1d58bdebff854588b3d46b854505fdfe9ff274634fe9d2a3aee14a6967417a7767a820788628c162e864037ae93d9f999be18c1524b148acb32bab7db8fb1d920378b194ef6f0ca8d6c6f84e9171fc04029a179d06235a6d39b501588f65c424ca46574ff9276d6440ae1610cc7be1ff91f538a85c750f6f84af35a6732f2cc692433e4dda633869c4a104d13f5151c499ff003b06bd06486fdd52d8e03cb7b91fd1459659fa29eb7042e1314c9c03d6cb066b0fd5eabf69444f650818e9fa04f059806396a23edd348632311d752815115d6bb2e53a077f5453de68a24c20583f8b8c7d00ba94148480f9ede0cec667174d85f761d637f8e9caa51962019bc700635efd653b0bace2a606586a02e02e6c457e100d047b7b2ca997ecf608330b23022e736570109c3351fa1e1f4b2934d32962b9ae01806d92f98c1751ccb457ff86f706ed697fcbefc78b68073c46cdf0a6de472e2d78ab27d30391d5c245ad30c7397cb66d01c340c7a701782207b8103ac127587bdd098446f45a0cd94759285cdfe4b6d6ff7f93762dbfa419eee684aabdca2aa9799346f6313d0cd0555824270a2ff7d6a47e35463d459add3a87087561e2eddca06a495f0092b7fa719fe8e6d18e17a858cac04747b68ff449cc6e9c8cb1c2aee2ce9b8e0b86d794802b1e82a6a96580e694a85587563ac176566115567a8254702ea59c8537e0b3a7340ae26969998abadc3c272f3671cd8f36ab79cf62fc3448ddafa99b60b46ae54d7e5b37ad190d5bb7a3b949d6581cc0c990ec8f82a855de5a29bf73688038662449e26a922cf003cc84d5f9795f2a1a96ccef24293a0aca9b2b05b7132addd66426be92dddc73b63c7f83684897d3c0d5afb53a79668910a0a48b211e42e2996f6030a3575019eec56d87c1dd979c62e34aa471f4960f83b29b3ef3d6bac1bbf26f463f9d293742506a4f34c2bef8d457f23bb410435243ee33369eccab6f01f4dd6fc56b0a4b30e1086f6fdd1ea9fa0385119f2df32707dd7a05edbad5bccadc1f9cda5724fb18a76f906f4ad839591a1a1ebdbd567bc94661fb2e7792e27a8637b6abb064bc3fe06186ddd1c3e48a723a75e24f5448f3ff2b912f48107bd28f803bed66153b017d53e1eab8e5ec70069aea1e2cd7207cb00b7211ec12887500451d69904d4c6a52db139d5437569f8d61dfe9cc6864e8ed8729ff5b8aeaf12b0a1bec896445a7bd31316e11261b0c42b9a4ce9fd257eed2e607605e50caeee3e7ce28afe987154402aea930597c277c98c2fa5168d08771cee9af23aa4be4627a41bb5f6e05cb738a26a6fb02f19faca93d8d6dcaa1d27a236de11a94f4a6052f2bb87a7d551584a5da4816eeb317123fae971dd6e754c537fcc96ca65603226064f655f4f296ab5397c591d4c4a34f76dd5704f0ae9e5fada0dd6c1b2d917d41243eb583fafa0e9caf30c944cd79830ba999998d0516894f722995dc358463691bf409e7ad13b4467357bf3c5a38312c1cedb004f7f9ad0b5f68c24d66179e99418383bdcdb5150592d85cad98eee615ab87ebf4bd7b1fff604b7e07de9a9a6fdb49734713311504a66071191a21ac94c98ed8bdad135766cca2228c0b588a9de141e7ad3e1f828c2fedc86b11947fd07740c0f5c7d14f0376173978cf90715ef35517416c9d0c57b862fe5dc4e2b151ae7ae55a2890f6893149c1d8e965c65b3c0b69d170ee41fd8bb678fe55da45ca69a51f039e05ba0fd6f89af988128742d305e727b5bcb24cf9da510919495dc6d2698c5588b531da477e706380b70285b66a803c42fef8aee2739c64ef8583b905348207d7e92d453b6bec2856c246f2c104a3e4cde61ef8bf4f384fc6491984f839f720ff8a9dba343e2d6c073657ce066412bb2daf694d6aaa30fba68031ad46feda0f77141710341a6b3f281f169cc15bec9834adeca6cd321f628240d500522a9dcc3b126cb633ee80eceb99b1d8822f9413cf2a77394185881f0c11f364bc1e290819fe2b04ae0c0040e021e99d3a178e1d601abc5290da4e90085d024138bfbd7c3a5a24364703ede94eefeccd3e27df3b01d5c237e7526fdce52c1f6b29dbedb1c053c4596dea0743dd49c203e3098e9628e20868b91742072104ab4a4d246ec7bf277babfc1d84acfd8bc39f8221c79220fc3f5871328171f33d5040131435221ebd2266800d08810af4b4af618fb1d71d5c8f078d425a9f4f68f1f589deeb9b39831e1bc22bf59e42f8a97e7b4e3ee9c7aaee257fd602f21f56ad25250b64c1497d5d1a2ad6b56e8d23c155ec0c82d4f985a0b640fd6f38b8bb1ab0265ae8f1bebdfd6ec0630e54e6f5a9e1046c124adfff58d00df32aeb252cc5ceb632349c1d6c25d69213d2fe269aab34e83fcbe6bd3ef3cddcfab9992fc6479525260c4b98700a1cae1ee21d2aa2cced9aac06d0bd4f6eca96b82cf80aeb84a64c16e58c4e593c9eda19ee6b356fba00ad11791bc152dfe437265528e84d1a4954b3ff566767e58e7fe28011a79253aeaf6475cb54bb8f240eea6b498faeed620a778bf02317757092431b6ad7c9989c4b8cf5b60050babe1d08fb5e6b50bf1e4480835fdcd76c65f0184be2a1c6bbc4fb7106a147fbd017f613251ed790cf7be80793c7aef97525a3f03993b911dc539fb547a7c0421c4f8db73ba4e410dcd69a6e045ace16cadc222d15b5fb0faddbc4da3fb6e7ddb6acbe08a2d49e007aa22afb8d11d56db99d0e3b6f32117ceacc22d8ed523b86a99070d31f797e5837f223c23f430ad44f37d84839d1a8365308e101ce30f97526d74ebd81746e0fb31f08287841e31a0592b927951891bcb416d5e03aa4b6b5928e245238ea8d28d4761ed6199309ec578df03767354ad1da5450e2c15f6113ca8668be72986ea9e39c5e6cd0a01588e1c627fcd3aa396c7c2b89d9a29dc5f55f6cd2f22ff086e724c268293ec609d4aa1898144cc8982d649217d316bc31e530257d322f6ce75d10f8f95a38b5c8b397cc257ac022aa9b3041adaf99b4b3de41f66825623cd11951ff77c4d75664e2a89c4c8638469998c04e565c4521b74d1e582e8cbc551eecf537baa0656949f5e978c8b396f5cd477ef5e069e544bcb3933963112d7e88cea21fd7979a36df9890c4672631acad4fbe23feb6a738c8ab9a90253770f29cc2f67963da037cfee6d3f73a5d12686a17f0c77b2a6348314bfa0395e412ba35678b7a490a7c4810dc9c3491f7406f85385dccb5eaccd6c20daa3488b9d096fb8266ff8a5d3e69df7b3068954adbad4b2b977e48653d9dff7453887e54f4ee95ce12c8427f65f0f702942986b16d556040f7d1d3e1450018e9c8e14eed3d3515b276b95617298e241773b007fd53c6ff4b0bb05d7f259d7157e7a6b680c45fc187f"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000002ac0)={{<r9=>0x0, 0xa7b, 0x1, 0x769af69, 0x5, 0x7fffffffffffffff, 0x2, 0x1, 0x6fa7, 0x7, 0x1, 0x1, 0x9, 0x10000, 0x80000001}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000002b80)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000115280)={0xfffffffffffffffd, [{r7, r8}, {r9, r10}], 0x2, "5c532319765551"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000eb300)={0x0, <r11=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000ec300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x1, "042b3baac0a7e0"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000ed300)={{<r13=>0x0, 0x5, 0x0, 0x4, 0x2, 0x8, 0x9, 0x3, 0x9, 0x4, 0x3, 0x0, 0x9, 0x2, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ed3c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x0, "90be09c590f0a8"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000ee3c0)={0x0, ""/256, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000ee5c0)={0x0, ""/256, 0x0, <r16=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ee7c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r17=>0x0}], 0x1, "c9ea3801285107"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000ef7c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}], 0x5, "84d5883489c803"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000f07c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}], 0x5, "0ded6a6c50be80"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000f17c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {r11, r12}, {r13, r14}, {r15, r16}, {r17}, {r18, r19}], 0x5c, "46614f449d7d8d"})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r20=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r20}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x814)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x100, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)

221.261648ms ago: executing program 1 (id=5424):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="b5af2000000000000000010000000c00018008000400ee"], 0x20}}, 0x0)
socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@empty, 0x2d, r5})

215.202578ms ago: executing program 2 (id=5425):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000000fcaf1f9fa3568822e065de5587ec4acfd4ec33f2cfa565094850145bc59df5429830b2b4ebda6b892b8d4ac309c46be74f03aba7b25ae1a1fcbfb76829672d33b611bf18e1d17e2125e52eec01752d0136b00bef817d9769fcbcf7a7848afa2fde6e52", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2517000000440006803c00040067636d28616573290000000000000000000000000000000000000000000000001400000096557917d5d82cebae9347436de1ace2fe62c07904000300"], 0x58}}, 0x4004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r8, 0xfff, 0x89a}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={r8, @in={{0x2, 0x4e21, @private=0xa010101}}, 0x400, 0xbb}, 0x90)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
r10 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r10, 0x29, 0x46, 0x0, &(0x7f0000000100))
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r11, 0x112, 0x4, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0xff, 0xaa, 0x1, 0x1, @private0={0xfc, 0x0, '\x00', 0x20}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x10, 0xfffffff9, 0xfe4}})
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001)

105.152787ms ago: executing program 0 (id=5426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000a8c102001c0012800b00010067726574617000000c00028005000a000100000008000a00", @ANYRES32, @ANYBLOB="060024003c002b8008000800", @ANYRES32, @ANYBLOB="0800030000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd2d, 0x25dfdc01, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f00000000c0)=0x20000006, 0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000500))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1d, 0x0, 0x2, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3efcae69}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040084}, 0x4881)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r10, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x28}], 0x1}, 0x0)

103.530491ms ago: executing program 1 (id=5427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b1400"/20, @ANYRES32=0x0, @ANYBLOB="00000000060000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0xc)
connect$x25(r3, &(0x7f0000000a80), 0x12)
r4 = socket(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
epoll_create(0x9c02)
r11 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r11, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYRESHEX=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x48880)
r12 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0)

0s ago: executing program 2 (id=5428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0xffff, 0x5})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x200})
ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) (async)
ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)
getgid() (async)
r2 = getgid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r2)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)

kernel console output (not intermixed with test programs):

tdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  263.926237][T17301] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  263.930777][T17301] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  263.964692][T17301] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  263.968914][T17301] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  264.011585][T17315] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  264.014355][T17315] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  264.017033][T17315] tipc: Resetting bearer <eth:syzkaller0>
[  264.023504][T17301] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  264.026681][T17301] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  264.091014][ T5870] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  264.094971][ T5870] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  264.098445][T17317] syzkaller1: entered allmulticast mode
[  264.116127][ T5870] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  264.119742][ T5870] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  264.142145][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  264.145088][ T5870] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  264.163823][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  264.166865][ T5870] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  264.198424][T17329] ip6t_srh: unknown srh match flags  4000
[  264.305841][T17329] netlink: 'syz.0.3330': attribute type 18 has an invalid length.
[  264.485956][T17364] xt_TCPMSS: Only works on TCP SYN packets
[  264.543149][T17369] ipvlan5: entered promiscuous mode
[  264.545516][T17369] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  264.774716][T17385] netlink: 'syz.2.3343': attribute type 1 has an invalid length.
[  264.805338][T17385] 8021q: adding VLAN 0 to HW filter on device bond28
[  265.013135][T17401] netlink: 'syz.2.3347': attribute type 7 has an invalid length.
[  265.019194][T17401] ip6_vti0: Master is either lo or non-ether device
[  265.381293][T17414] lo speed is unknown, defaulting to 1000
[  265.781966][T17425] sch_fq: defrate 0 ignored.
[  266.155112][T17442] team0: Refused to change device type
[  266.234941][T17445] __nla_validate_parse: 34 callbacks suppressed
[  266.234956][T17445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3363'.
[  266.391094][T17462] tipc: Resetting bearer <eth:syzkaller0>
[  266.393329][T17462] tipc: Resetting bearer <eth:syzkaller0>
[  266.405886][T17462] validate_nla: 3 callbacks suppressed
[  266.405923][T17462] netlink: 'syz.1.3370': attribute type 16 has an invalid length.
[  266.410757][T17462] netlink: 'syz.1.3370': attribute type 17 has an invalid length.
[  266.426735][T17462] 8021q: adding VLAN 0 to HW filter on device .`
[  266.430718][T17462] 8021q: adding VLAN 0 to HW filter on device team0
[  266.435012][T17462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.507133][T17471] team0: Refused to change device type
[  266.539535][T17472] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  266.567299][T17473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3374'.
[  266.661512][T17487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'.
[  266.878382][T17502] netlink: 'syz.1.3384': attribute type 4 has an invalid length.
[  266.882241][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3384'.
[  266.931446][T17504] team0: Refused to change device type
[  266.973574][T17496] lo speed is unknown, defaulting to 1000
[  266.992230][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3385'.
[  267.632357][T17531] netlink: 'syz.1.3395': attribute type 4 has an invalid length.
[  267.762738][T17542] netlink: 'syz.1.3398': attribute type 8 has an invalid length.
[  267.772238][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3397'.
[  267.781114][T17542] netlink: 'syz.1.3398': attribute type 8 has an invalid length.
[  267.794708][T17539] netlink: 'syz.0.3397': attribute type 1 has an invalid length.
[  267.802633][T17542] netlink: 'syz.1.3398': attribute type 8 has an invalid length.
[  267.824302][T17539] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.833139][T17542] netlink: 'syz.1.3398': attribute type 8 has an invalid length.
[  267.840688][T17542] netlink: 'syz.1.3398': attribute type 8 has an invalid length.
[  267.844322][T17539] vlan3: entered promiscuous mode
[  267.846051][T17539] bond0: entered promiscuous mode
[  267.848095][T17539] vlan3: entered allmulticast mode
[  267.849809][T17539] bond0: entered allmulticast mode
[  267.867142][T17539] bond0: (slave bridge0): making interface the new active one
[  267.870220][T17539] bridge0: entered promiscuous mode
[  267.872413][T17539] bridge0: entered allmulticast mode
[  267.875477][T17539] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  268.335916][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.343490][T17573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.356262][T17577] team0: Refused to change device type
[  268.375696][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  268.418620][T17580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3409'.
[  268.423900][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.429770][T17573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.473239][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'.
[  268.522853][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.526095][T17573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.583280][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.586714][T17573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.642170][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.645324][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.654101][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.656814][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.675828][ T5867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.682187][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.685924][T17605] sctp: [Deprecated]: syz.1.3414 (pid 17605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.685924][T17605] Use struct sctp_sack_info instead
[  268.693701][T10362] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.696876][T10362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.705160][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3415'.
[  268.762182][T17613] vxcan1: entered promiscuous mode
[  268.763854][T17613] vxcan1: entered allmulticast mode
[  268.864830][T17629] pim6reg: left allmulticast mode
[  269.073143][T17650] x_tables: duplicate underflow at hook 1
[  269.255791][T17671] 8021q: adding VLAN 0 to HW filter on device bond34
[  269.278167][T17671] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode
[  269.283815][T17671] bond34: (slave wlan0): Enslaving as an active interface with a down link
[  269.345753][T17697] tipc: Resetting bearer <eth:syzkaller0>
[  269.514889][T17715] syzkaller0: entered promiscuous mode
[  269.519475][T17715] syzkaller0: entered allmulticast mode
[  269.797464][T17734] lo speed is unknown, defaulting to 1000
[  269.944993][T17752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.951758][T17752] tipc: Resetting bearer <eth:syzkaller0>
[  271.012345][T17819] openvswitch: netlink: Invalid VLAN frame
[  271.112978][T17829] sctp: [Deprecated]: syz.1.3487 (pid 17829) Use of struct sctp_assoc_value in delayed_ack socket option.
[  271.112978][T17829] Use struct sctp_sack_info instead
[  271.142413][T17829] bond18: entered promiscuous mode
[  271.144641][T17829] 8021q: adding VLAN 0 to HW filter on device bond18
[  271.162532][T17829] bond18: (slave bridge83): making interface the new active one
[  271.165517][T17829] bridge83: entered promiscuous mode
[  271.168746][T17829] bridge83: left promiscuous mode
[  271.320668][T17836] __nla_validate_parse: 22 callbacks suppressed
[  271.320682][T17836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3489'.
[  271.461556][T17847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3492'.
[  272.141851][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3495'.
[  272.200045][T17859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3495'.
[  272.203699][T17859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3495'.
[  272.231722][T17856] lo speed is unknown, defaulting to 1000
[  272.310843][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'.
[  272.387845][T17863] nbd: must specify an index to disconnect
[  272.437482][T17865] batadv_slave_0: entered promiscuous mode
[  272.492486][T17864] batadv_slave_0: left promiscuous mode
[  272.590510][T17877] validate_nla: 64 callbacks suppressed
[  272.590523][T17877] netlink: 'syz.1.3502': attribute type 21 has an invalid length.
[  272.595246][T17877] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3502'.
[  272.627150][T17877] netlink: 'syz.1.3502': attribute type 5 has an invalid length.
[  272.630534][T17877] netlink: 'syz.1.3502': attribute type 6 has an invalid length.
[  272.633304][T17877] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3502'.
[  272.698700][T17884] netlink: 'syz.1.3502': attribute type 4 has an invalid length.
[  272.734409][T17877] netlink: 'syz.1.3502': attribute type 4 has an invalid length.
[  272.770608][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3502'.
[  272.811485][T17894] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3507'.
[  272.988855][T17902] : renamed from wg2
[  273.170116][T17915] syzkaller1: entered promiscuous mode
[  273.171929][T17915] syzkaller1: entered allmulticast mode
[  291.341158][T17942] __nla_validate_parse: 4 callbacks suppressed
[  291.341168][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'.
[  291.463849][T17957] bond35: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  291.493651][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'.
[  291.501991][T17957] bond35 (unregistering): Released all slaves
[  291.504457][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3527'.
[  291.713242][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3530'.
[  291.950938][T17978] lo speed is unknown, defaulting to 1000
[  292.411999][T17990] macvtap2: entered promiscuous mode
[  292.414127][T17990] macvtap2: entered allmulticast mode
[  292.596250][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'.
[  292.790842][T18011] openvswitch: netlink: Flow actions attr not present in new flow.
[  292.795800][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3544'.
[  292.829740][T18024] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  292.885434][T18027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3549'.
[  293.025826][T18036] batman_adv: batadv0: Adding interface: dummy0
[  293.029353][T18036] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.047878][T18036] batman_adv: batadv0: Interface activated: dummy0
[  293.057091][T18036] batadv0: mtu less than device minimum
[  293.061978][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.065648][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.069630][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.073259][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.076841][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.080460][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.084096][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.087777][T18036] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  293.339438][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  293.344966][T18065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3557'.
[  293.375403][T18056] lo speed is unknown, defaulting to 1000
[  293.524402][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3560'.
[  293.537829][T18074] netlink: 'syz.2.3560': attribute type 30 has an invalid length.
[  293.555844][ T5870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.560028][T18074] netlink: 'syz.2.3560': attribute type 30 has an invalid length.
[  293.569653][ T5870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.577540][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.584995][ T5870] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.649930][T18076] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.672940][T18076] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.750592][T18076] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.803948][T18076] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.919507][ T5870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.945043][ T5870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.982325][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  294.004068][ T5870] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  294.552396][T18107] netlink: 'syz.2.3568': attribute type 1 has an invalid length.
[  294.566595][T18107] bond29: entered promiscuous mode
[  294.570012][T18107] 8021q: adding VLAN 0 to HW filter on device bond29
[  294.579810][T18107] bond29: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.583825][T18107] bond29: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  294.587184][T18107] bond29: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  294.651272][T18107] bond29: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.655485][T18107] bond29: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  295.255676][T18156] bond35 (unregistering): Released all slaves
[  295.276689][T18161] netlink: 'syz.2.3585': attribute type 13 has an invalid length.
[  295.364373][T18165] team0: Refused to change device type
[  295.388948][T18161] netlink: 'syz.2.3585': attribute type 11 has an invalid length.
[  295.558412][T18180] macsec1: entered promiscuous mode
[  295.560106][T18180] veth1_macvtap: entered promiscuous mode
[  295.563767][T18180] veth1_macvtap: left promiscuous mode
[  295.985171][T18196] netlink: 'syz.1.3595': attribute type 4 has an invalid length.
[  296.009167][T18196] netlink: 'syz.1.3595': attribute type 4 has an invalid length.
[  296.171080][T18225] netlink: 'syz.2.3602': attribute type 10 has an invalid length.
[  296.227085][T18223] tipc: Resetting bearer <eth:syzkaller0>
[  296.311499][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.314248][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.316736][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.324390][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.327223][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.330287][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.332874][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  296.335762][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  296.858340][T18228] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  297.027215][T18239] tipc: Resetting bearer <eth:syzkaller0>
[  297.092292][T18245] bond0: (slave 8F4): Releasing active interface
[  297.095740][T18245] bond0: (slave 8F4): last VLAN challenged slave left bond - VLAN blocking is removed
[  297.105398][T18245] team0: Device 8F4 is loopback device. Loopback devices can't be added as a team port
[  297.186630][T18252] tipc: Resetting bearer <eth:syzkaller0>
[  297.235724][T18245] lo speed is unknown, defaulting to 1000
[  297.356771][T18261] __nla_validate_parse: 13 callbacks suppressed
[  297.356782][T18261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3613'.
[  297.414247][T18265] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.418408][T18265] tipc: Resetting bearer <eth:syzkaller0>
[  297.451071][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'.
[  297.461371][T18272] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  298.711902][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'.
[  298.714764][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'.
[  300.443455][T18272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.524997][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3628'.
[  300.581289][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3627'.
[  300.625247][T18315] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  300.629357][T18315] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  300.631610][T18315] tipc: Resetting bearer <eth:syzkaller0>
[  300.741086][T18320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'.
[  300.745767][T18320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3631'.
[  300.755033][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'.
[  300.766186][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3631'.
[  301.023955][T18349] team1: entered promiscuous mode
[  301.025999][T18349] team1: entered allmulticast mode
[  301.030532][T18349] 8021q: adding VLAN 0 to HW filter on device team1
[  301.042611][T18350] team2: entered promiscuous mode
[  301.044217][T18350] team2: entered allmulticast mode
[  301.045289][T18355] netlink: 'syz.2.3644': attribute type 1 has an invalid length.
[  301.045958][T18350] 8021q: adding VLAN 0 to HW filter on device team2
[  301.089145][T18349] team3: entered promiscuous mode
[  301.090828][T18349] team3: entered allmulticast mode
[  301.092950][T18349] 8021q: adding VLAN 0 to HW filter on device team3
[  301.113931][T18355] bond30: (slave vxcan9): The slave device specified does not support setting the MAC address
[  301.119558][T18355] bond30: (slave vxcan9): Error -95 calling set_mac_address
[  301.173882][T18368] 8021q: adding VLAN 0 to HW filter on device bond19
[  301.181354][T18355] macvlan0: entered promiscuous mode
[  301.183235][T18355] macvlan0: entered allmulticast mode
[  301.185447][T18355] bond30: entered promiscuous mode
[  301.187972][T18355] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  301.192581][T18355] bond30: left promiscuous mode
[  301.230259][T18368] macsec3: entered promiscuous mode
[  301.232692][T18368] bond19: entered promiscuous mode
[  301.234984][T18368] macsec3: entered allmulticast mode
[  301.237115][T18368] bond19: entered allmulticast mode
[  301.241703][T18368] bond19: left allmulticast mode
[  301.243842][T18368] bond19: left promiscuous mode
[  301.354431][T18382] rdma_rxe: rxe_newlink: failed to add bond0
[  301.429617][T18391] netlink: 'syz.2.3652': attribute type 33 has an invalid length.
[  301.437945][T18391] batman_adv: batadv0: Interface deactivated: dummy0
[  301.458951][T18391] batman_adv: batadv0: Removing interface: dummy0
[  301.731224][T18410] veth18: entered allmulticast mode
[  301.796930][T18414] x_tables: duplicate underflow at hook 1
[  301.860350][T18417] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  301.862985][T18417] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  301.866505][T18417] tipc: Resetting bearer <eth:syzkaller0>
[  301.898830][T18421] netlink: 'syz.1.3659': attribute type 1 has an invalid length.
[  301.907232][T18421] net_ratelimit: 12 callbacks suppressed
[  301.907240][T18421] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  302.396032][T18433] netlink: 'syz.0.3663': attribute type 10 has an invalid length.
[  302.399814][T18433] netlink: 'syz.0.3663': attribute type 10 has an invalid length.
[  302.405920][T18433] .`: (slave dummy0): Enslaving as an active interface with an up link
[  302.584714][T18443] __nla_validate_parse: 29 callbacks suppressed
[  302.584725][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'.
[  302.696520][T18449] pimreg3: entered allmulticast mode
[  302.785739][T18455] netlink: 'syz.2.3669': attribute type 4 has an invalid length.
[  302.854100][T18460] macvtap2: entered promiscuous mode
[  302.856099][T18460] syz_tun: entered promiscuous mode
[  303.039830][T18472] openvswitch: netlink: Flow actions attr not present in new flow.
[  303.074354][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'.
[  303.104609][T18470] hsr_slave_1 (unregistering): left promiscuous mode
[  303.413717][T18499] veth0_to_bond: left promiscuous mode
[  303.415675][T18499] bridge12: port 2(veth0_to_bond) entered disabled state
[  303.419864][T18499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  303.426523][T18498] netlink: 'syz.1.3684': attribute type 10 has an invalid length.
[  303.431468][T18498] wlan1: mtu less than device minimum
[  303.433136][T18498] .`: (slave wlan1): Error -22 calling dev_set_mtu
[  303.515545][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'.
[  303.626312][T18508] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3687'.
[  303.697492][T18514] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  303.700101][T18514] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  303.702912][T18514] tipc: Resetting bearer <eth:syzkaller0>
[  304.032600][T18532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'.
[  304.069635][T18536] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3698'.
[  304.139005][T18523] lo speed is unknown, defaulting to 1000
[  304.165044][T18539] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3699'.
[  304.196653][T18544] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3701'.
[  304.220218][T18546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3702'.
[  304.233700][T18546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3702'.
[  304.385243][T18557] syzkaller1: entered promiscuous mode
[  304.388773][T18557] syzkaller1: entered allmulticast mode
[  304.503006][T18564] syzkaller1: entered promiscuous mode
[  304.504998][T18564] syzkaller1: entered allmulticast mode
[  305.116868][T18582] openvswitch: netlink: Actions may not be safe on all matching packets
[  305.126890][T18578] lo speed is unknown, defaulting to 1000
[  305.322538][T18586] netlink: 'syz.0.3715': attribute type 1 has an invalid length.
[  305.905171][T18607] batadv_slave_0: left allmulticast mode
[  305.911848][T18607] tipc: Resetting bearer <eth:syzkaller0>
[  305.920179][T18607] veth9: left promiscuous mode
[  305.922052][T18607] veth11: left promiscuous mode
[  305.924080][T18607] geneve4: left promiscuous mode
[  305.926260][T18607] geneve5: left promiscuous mode
[  305.928444][T18607] vti0: left promiscuous mode
[  305.975500][T18607] bond18: left promiscuous mode
[  306.003299][T18607] team1: left promiscuous mode
[  306.007797][T18607] team1: left allmulticast mode
[  306.013517][T18607] team2: left promiscuous mode
[  306.015410][T18607] team2: left allmulticast mode
[  306.023150][T18607] team3: left promiscuous mode
[  306.024808][T18607] team3: left allmulticast mode
[  306.049111][ T5867] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  306.052104][ T5867] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.054957][ T5867] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  306.060669][ T5867] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.063339][ T5867] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  306.066564][ T5867] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.070235][ T5867] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  306.073575][ T5867] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  306.074277][T18613] netlink: 'syz.1.3724': attribute type 1 has an invalid length.
[  306.179835][T18617] netlink: 'syz.1.3725': attribute type 1 has an invalid length.
[  306.481119][T18638] xt_ecn: cannot match TCP bits for non-tcp packets
[  306.522895][T18645] netlink: 'syz.1.3734': attribute type 1 has an invalid length.
[  306.549788][T18645] 8021q: adding VLAN 0 to HW filter on device bond21
[  306.571925][T18645] 8021q: adding VLAN 0 to HW filter on device bond21
[  306.578520][T18645] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  306.582762][T18645] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  306.607812][T18648] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  307.169801][T18692] netlink: 'syz.1.3751': attribute type 1 has an invalid length.
[  307.766200][T18712] tipc: Resetting bearer <eth:syzkaller0>
[  307.815529][T18715] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  307.871063][T18722] __nla_validate_parse: 13 callbacks suppressed
[  307.871077][T18722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3759'.
[  307.945087][T18730] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3763'.
[  307.954720][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'.
[  307.962798][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3762'.
[  308.120094][T18755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3767'.
[  308.180967][T18761] IPVS: ip_vs_add_dest(): server weight less than zero
[  308.320230][T18765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3770'.
[  308.369213][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'.
[  308.388407][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3772'.
[  308.390222][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'.
[  308.436558][T18777] netlink: 'syz.1.3773': attribute type 4 has an invalid length.
[  308.529103][T18784] syz.0.3775: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  308.535111][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.0.3775 Not tainted syzkaller #0 PREEMPT(full) 
[  308.535129][T18784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.535135][T18784] Call Trace:
[  308.535142][T18784]  <TASK>
[  308.535149][T18784]  dump_stack_lvl+0xe8/0x150
[  308.535168][T18784]  warn_alloc+0x249/0x340
[  308.535185][T18784]  ? stack_trace_save+0xa9/0x100
[  308.535207][T18784]  ? __pfx_warn_alloc+0x10/0x10
[  308.535223][T18784]  ? kasan_save_track+0x4f/0x80
[  308.535235][T18784]  ? kasan_save_track+0x3e/0x80
[  308.535244][T18784]  ? __kasan_kmalloc+0x93/0xb0
[  308.535255][T18784]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  308.535265][T18784]  ? xskq_create+0x56/0x170
[  308.535275][T18784]  ? xsk_setsockopt+0x54c/0x990
[  308.535293][T18784]  ? do_sock_setsockopt+0x17c/0x1b0
[  308.535303][T18784]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  308.535314][T18784]  ? do_syscall_64+0xe2/0xf80
[  308.535327][T18784]  __vmalloc_node_range_noprof+0x132/0x1730
[  308.535360][T18784]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  308.535377][T18784]  ? __kasan_kmalloc+0x93/0xb0
[  308.535392][T18784]  vmalloc_user_noprof+0xad/0xe0
[  308.535403][T18784]  ? xskq_create+0xbf/0x170
[  308.535415][T18784]  xskq_create+0xbf/0x170
[  308.535435][T18784]  xsk_init_queue+0xad/0x110
[  308.535456][T18784]  xsk_setsockopt+0x54c/0x990
[  308.535474][T18784]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.535490][T18784]  ? __pfx_aa_sk_perm+0x10/0x10
[  308.535508][T18784]  ? aa_sock_opt_perm+0xff/0x1a0
[  308.535525][T18784]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  308.535536][T18784]  ? __pfx_xsk_setsockopt+0x10/0x10
[  308.535554][T18784]  do_sock_setsockopt+0x17c/0x1b0
[  308.535569][T18784]  __x64_sys_setsockopt+0x13d/0x1b0
[  308.535586][T18784]  do_syscall_64+0xe2/0xf80
[  308.535626][T18784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.535639][T18784]  ? trace_irq_disable+0x37/0x100
[  308.535661][T18784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.535673][T18784] RIP: 0033:0x7fb8bf99acb9
[  308.535684][T18784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.535695][T18784] RSP: 002b:00007fb8c0786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  308.535709][T18784] RAX: ffffffffffffffda RBX: 00007fb8bfc15fa0 RCX: 00007fb8bf99acb9
[  308.535719][T18784] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  308.535727][T18784] RBP: 00007fb8bfa08bf7 R08: 0000000000000004 R09: 0000000000000000
[  308.535735][T18784] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.535743][T18784] R13: 00007fb8bfc16038 R14: 00007fb8bfc15fa0 R15: 00007ffe8b9a6c78
[  308.535767][T18784]  </TASK>
[  308.535772][T18784] Mem-Info:
[  308.628675][T18784] active_anon:5765 inactive_anon:0 isolated_anon:0
[  308.628675][T18784]  active_file:1481 inactive_file:38402 isolated_file:0
[  308.628675][T18784]  unevictable:1768 dirty:114 writeback:0
[  308.628675][T18784]  slab_reclaimable:13164 slab_unreclaimable:134532
[  308.628675][T18784]  mapped:18266 shmem:2435 pagetables:1115
[  308.628675][T18784]  sec_pagetables:0 bounce:0
[  308.628675][T18784]  kernel_misc_reclaimable:0
[  308.628675][T18784]  free:1051281 free_pcp:55027 free_cma:0
[  308.644494][T18784] Node 0 active_anon:10856kB inactive_anon:0kB active_file:1564kB inactive_file:122616kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47888kB dirty:228kB writeback:0kB shmem:4644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6952kB pagetables:2172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  308.654499][T18784] Node 1 active_anon:12204kB inactive_anon:0kB active_file:4360kB inactive_file:30992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25176kB dirty:228kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8708kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  308.664980][T18784] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  308.674696][T18784] lowmem_reserve[]: 0 1590 2121 2121 2121
[  308.676507][T18784] Node 0 DMA32 free:1327144kB boost:0kB min:25072kB low:31340kB high:37608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1628364kB mlocked:0kB bounce:0kB free_pcp:64100kB local_pcp:61108kB free_cma:0kB
[  308.687080][T18784] lowmem_reserve[]: 0 0 531 531 531
[  308.689506][T18784] Node 0 Normal free:18048kB boost:4096kB min:12608kB low:14736kB high:16864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10848kB inactive_anon:0kB active_file:1564kB inactive_file:122596kB unevictable:3536kB writepending:224kB zspages:0kB present:1572868kB managed:543876kB mlocked:0kB bounce:0kB free_pcp:624kB local_pcp:568kB free_cma:0kB
[  308.700006][T18784] lowmem_reserve[]: 0 0 0 0 0
[  308.701504][T18784] Node 1 Normal free:2844316kB boost:0kB min:56280kB low:70348kB high:84416kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12204kB inactive_anon:0kB active_file:4360kB inactive_file:30992kB unevictable:3536kB writepending:228kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:153112kB local_pcp:34280kB free_cma:0kB
[  308.712128][T18784] lowmem_reserve[]: 0 0 0 0 0
[  308.713701][T18784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  308.717705][T18784] Node 0 DMA32: 290*4kB (UM) 74*8kB (UM) 51*16kB (UM) 282*32kB (UME) 179*64kB (UM) 38*128kB (UME) 25*256kB (UM) 21*512kB (UM) 18*1024kB (UME) 13*2048kB (UME) 302*4096kB (UM) = 1327112kB
[  308.723404][T18784] Node 0 Normal: 232*4kB (UM) 147*8kB (UM) 176*16kB (UM) 67*32kB (UM) 30*64kB (M) 19*128kB (M) 14*256kB (M) 4*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18072kB
[  308.728768][T18784] Node 1 Normal: 819*4kB (UME) 454*8kB (UME) 614*16kB (UME) 152*32kB (UME) 315*64kB (UME) 89*128kB (UME) 49*256kB (UM) 11*512kB (UE) 12*1024kB (UME) 6*2048kB (UME) 671*4096kB (UM) = 2844316kB
[  308.734715][T18784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  308.737529][T18784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  308.740554][T18784] 42318 total pagecache pages
[  308.742058][T18784] 0 pages in swap cache
[  308.743317][T18784] Free swap  = 124996kB
[  308.744607][T18784] Total swap = 124996kB
[  308.745880][T18784] 1834877 pages RAM
[  308.747042][T18784] 0 pages HighMem/MovableOnly
[  308.749166][T18784] 389304 pages reserved
[  308.750477][T18784] 0 pages cma reserved
[  308.812192][T18797] netlink: 'syz.0.3780': attribute type 21 has an invalid length.
[  308.814734][T18797] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3780'.
[  308.817884][T18797] netlink: 'syz.0.3780': attribute type 5 has an invalid length.
[  308.821107][T18797] netlink: 'syz.0.3780': attribute type 6 has an invalid length.
[  308.826255][T18797] netlink: 'syz.0.3780': attribute type 4 has an invalid length.
[  308.832055][T18797] netlink: 'syz.0.3780': attribute type 4 has an invalid length.
[  308.836123][   T33] lo speed is unknown, defaulting to 1000
[  308.839504][   T33] syz2: Port: 1 Link ACTIVE
[  309.079413][T18814] bond35: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  309.086119][T18814] bond35 (unregistering): Released all slaves
[  309.220176][T18823] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  309.296500][T18823] syz_tun: left promiscuous mode
[  309.305357][T10362] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.311159][T10362] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.314402][T10362] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.318224][T10362] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.371388][T18837] geneve5: entered promiscuous mode
[  309.373051][T18837] geneve5: entered allmulticast mode
[  309.375411][T10362] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.378303][T10362] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.380801][T10362] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.383366][T10362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.765668][T18858] netlink: 'syz.1.3798': attribute type 11 has an invalid length.
[  309.769813][T18865] lo: Caught tx_queue_len zero misconfig
[  309.778872][T18865] netem: change failed
[  309.790251][T18867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.797715][T18867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.799182][T18869] nbd: must specify at least one socket
[  309.907890][T18869] nbd1: detected capacity change from 0 to 127
[  309.914181][   T57] block nbd1: Receive control failed (result -32)
[  309.919866][T18589] block nbd1: Send control failed (result -32)
[  309.924804][T18589] block nbd1: Request send failed, requeueing
[  309.931040][  T213] block nbd1: Dead connection, failed to find a fallback
[  309.934105][  T213] block nbd1: shutting down sockets
[  309.936483][  T213] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.940850][  T213] Buffer I/O error on dev nbd1, logical block 0, async page read
[  309.944315][T18589] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.948709][T18589] Buffer I/O error on dev nbd1, logical block 1, async page read
[  309.951983][T18589] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.955823][T18589] Buffer I/O error on dev nbd1, logical block 2, async page read
[  309.960100][T18589] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.963945][T18589] Buffer I/O error on dev nbd1, logical block 3, async page read
[  309.967020][T18589] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.971415][T18589] Buffer I/O error on dev nbd1, logical block 0, async page read
[  309.975782][T18589] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.982163][T18589] Buffer I/O error on dev nbd1, logical block 1, async page read
[  309.987115][T18589] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  309.993832][T18589] Buffer I/O error on dev nbd1, logical block 2, async page read
[  309.997056][T18589] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  310.002143][T18589] Buffer I/O error on dev nbd1, logical block 3, async page read
[  310.006240][T18589] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  310.010609][T18589] Buffer I/O error on dev nbd1, logical block 0, async page read
[  310.014170][T18589] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  310.018498][T18589] Buffer I/O error on dev nbd1, logical block 1, async page read
[  310.023688][T18589] ldm_validate_partition_table(): Disk read failed.
[  310.028669][T18589] Dev nbd1: unable to read RDB block 0
[  310.031886][T18589]  nbd1: unable to read partition table
[  310.039933][T18589] ldm_validate_partition_table(): Disk read failed.
[  310.043012][T18589] Dev nbd1: unable to read RDB block 0
[  310.045663][T18589]  nbd1: unable to read partition table
[  310.183844][T18892] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  310.189393][T18892] syzkaller0: entered promiscuous mode
[  310.191674][T18892] syzkaller0: entered allmulticast mode
[  310.532104][T18912] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  310.536171][T18912] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  310.540161][T18912] tipc: Resetting bearer <eth:syzkaller0>
[  310.694120][T18931] bond31: option packets_per_slave: invalid value (3303287)
[  310.696985][T18931] bond31: option packets_per_slave: allowed values 0 - 65535
[  310.701787][T18931] bond31 (unregistering): Released all slaves
[  310.982261][T18962] ip6tnl0: Caught tx_queue_len zero misconfig
[  311.050387][T18970] bond0: (slave rose0): Error: Device can not be enslaved while up
[  311.106394][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.106823][  T944] lo speed is unknown, defaulting to 1000
[  311.110889][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.114400][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.115663][  T944] syz2: Port: 1 Link DOWN
[  311.117397][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.212761][T18978] bond31: (slave bond_slave_1): Device is not bonding slave
[  311.215232][T18978] bond31: option active_slave: invalid value (bond_slave_1)
[  311.218626][T18978] bond31 (unregistering): Released all slaves
[  311.230800][T18983] netlink: 'syz.1.3840': attribute type 1 has an invalid length.
[  311.252409][T18983] veth19: entered promiscuous mode
[  311.256338][T18983] bond22: (slave veth19): Enslaving as a backup interface with a down link
[  311.262498][T18983] 8021q: adding VLAN 0 to HW filter on device bond22
[  311.312452][T18986] veth36: entered allmulticast mode
[  311.431754][T18998] dvmrp0: entered allmulticast mode
[  311.443170][T18999] netlink: 'syz.2.3844': attribute type 13 has an invalid length.
[  311.635466][T19011] syzkaller0: entered promiscuous mode
[  311.637466][T19011] syzkaller0: entered allmulticast mode
[  312.329227][T19037] lo speed is unknown, defaulting to 1000
[  312.408373][T19053] netlink: 'syz.0.3861': attribute type 4 has an invalid length.
[  313.837824][T19084] syzkaller1: entered promiscuous mode
[  313.840230][T19084] syzkaller1: entered allmulticast mode
[  314.069320][T19093] __nla_validate_parse: 33 callbacks suppressed
[  314.069339][T19093] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3873'.
[  314.118987][T19098] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3874'.
[  314.166032][T19100] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.3875'.
[  314.315128][T19105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3877'.
[  314.596234][T19120] netlink: 176680 bytes leftover after parsing attributes in process `syz.1.3881'.
[  314.778369][T19126] lo speed is unknown, defaulting to 1000
[  315.040756][T19134] netlink: 'syz.1.3883': attribute type 10 has an invalid length.
[  315.043634][T19134] veth0_vlan: left promiscuous mode
[  315.046089][T19134] veth0_vlan: entered promiscuous mode
[  315.049329][T19134] team0: Device veth0_vlan failed to register rx_handler
[  315.245941][T19142] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20004
[  315.278350][T19139] bond34: (slave wlan0): Releasing active interface
[  315.324436][T19142] pim6reg: entered allmulticast mode
[  315.619953][T19136] lo speed is unknown, defaulting to 1000
[  315.943924][T19169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3894'.
[  316.008758][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'.
[  316.014292][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3895'.
[  316.025957][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'.
[  316.029880][T19174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3895'.
[  316.568750][T19194] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  316.608483][T19196] netlink: 'syz.2.3903': attribute type 1 has an invalid length.
[  316.859890][T19218] netlink: 'syz.2.3909': attribute type 1 has an invalid length.
[  316.878240][T19218] bond32: entered promiscuous mode
[  316.880280][T19218] bond32: entered allmulticast mode
[  316.882665][T19218] 8021q: adding VLAN 0 to HW filter on device bond32
[  316.951321][T19218] macvlan0: entered promiscuous mode
[  316.953416][T19218] macvlan0: entered allmulticast mode
[  316.956771][T19218] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  317.074926][T19233] IPVS: length: 132 != 8
[  317.188818][T19239] nbd: illegal input index -1113835520
[  317.522785][T19267] tipc: Resetting bearer <eth:syzkaller0>
[  317.632395][T19282] 8021q: adding VLAN 0 to HW filter on device bond35
[  317.639234][T19282] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.645002][T19282] bond35: (slave bond0): Enslaving as an active interface with an up link
[  317.670009][ T5867] bond0: (slave bridge0): link status definitely down, disabling slave
[  317.673598][ T5867] bridge0: left promiscuous mode
[  317.675950][ T5867] bridge0: left allmulticast mode
[  317.687918][ T5867] bond0: now running without any active interface!
[  318.454820][T19334] xt_ecn: cannot match TCP bits for non-tcp packets
[  318.780306][T19354] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)%	]3DL̥
[  318.804196][T19354] smc: adding net device wlan0 with user defined pnetid SYZ0
[  318.935659][T19363] netlink: 'syz.1.3939': attribute type 21 has an invalid length.
[  318.940498][T19363] netlink: 'syz.1.3939': attribute type 5 has an invalid length.
[  318.943656][T19363] netlink: 'syz.1.3939': attribute type 6 has an invalid length.
[  319.207009][T19386] __nla_validate_parse: 16 callbacks suppressed
[  319.207023][T19386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3943'.
[  319.217753][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3943'.
[  319.223833][T19384] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.228135][T19384] netlink: 'syz.1.3942': attribute type 12 has an invalid length.
[  319.564998][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'.
[  319.674481][T19411] bond36: (slave bond_slave_1): Device is not our slave
[  319.676971][T19411] bond36: option active_slave: invalid value (bond_slave_1)
[  319.680838][T19411] bond36 (unregistering): Released all slaves
[  320.117128][T19425] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode
[  320.120323][T19425] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  320.178174][T19431] netlink: 'syz.1.3953': attribute type 4 has an invalid length.
[  320.292393][T19442] team0: Refused to change device type
[  320.403718][T19445] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  320.409313][T19445] syzkaller0: entered promiscuous mode
[  320.411230][T19445] syzkaller0: entered allmulticast mode
[  320.422633][T19445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3957'.
[  320.470409][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'.
[  320.473347][T19450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3959'.
[  320.563877][T19455] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3960'.
[  320.693580][T19473] xt_ipcomp: unknown flags 1D
[  320.700758][T19473] bond0: Master is either lo or non-ether device
[  320.792359][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'.
[  321.075390][T19511] netlink: 'syz.2.3978': attribute type 1 has an invalid length.
[  321.087682][T19511] netlink: 'syz.2.3978': attribute type 2 has an invalid length.
[  321.186286][T19517] netlink: 'syz.2.3979': attribute type 21 has an invalid length.
[  321.971513][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3981'.
[  321.983232][T19523] 8021q: adding VLAN 0 to HW filter on device bond36
[  321.986703][T19523] bond36: option miimon: invalid value (18446744071562067968)
[  321.989848][T19523] bond36: option miimon: allowed values 0 - 2147483647
[  322.001845][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'.
[  322.391868][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  322.540229][T19566] netlink: 'syz.2.3994': attribute type 1 has an invalid length.
[  322.593216][T19566] bond34: entered promiscuous mode
[  322.595059][T19566] 8021q: adding VLAN 0 to HW filter on device bond34
[  322.653382][T19566] bond34: (slave bridge27): making interface the new active one
[  322.655837][T19566] bridge27: entered promiscuous mode
[  322.661029][T19566] bond34: (slave bridge27): Enslaving as an active interface with an up link
[  322.822311][T19573] No such timeout policy "syz0"
[  322.851805][T19579] openvswitch: netlink: IPv4 tunnel dst address is zero
[  322.955381][T19579] netlink: 'syz.1.3997': attribute type 4 has an invalid length.
[  323.078658][T19599] syzkaller0: entered promiscuous mode
[  323.080551][T19599] syzkaller0: entered allmulticast mode
[  323.239416][T19613] 8021q: adding VLAN 0 to HW filter on device bond35
[  323.292241][T19620] tipc: Resetting bearer <eth:syzkaller0>
[  323.418272][T19632] syzkaller1: entered promiscuous mode
[  323.420167][T19632] syzkaller1: entered allmulticast mode
[  323.485018][T19637] syzkaller0: entered promiscuous mode
[  323.486908][T19637] syzkaller0: entered allmulticast mode
[  323.496789][T19637] 0: reclassify loop, rule prio 0, protocol 800
[  323.542403][T19633] lo speed is unknown, defaulting to 1000
[  323.724815][T19655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.743957][T19655] tipc: Resetting bearer <eth:syzkaller0>
[  323.951377][T19670] netlink: 'syz.0.4027': attribute type 13 has an invalid length.
[  324.017870][T19670] tipc: Resetting bearer <eth:syzkaller0>
[  324.158503][T19684] mac80211_hwsim hwsim27 wlan0: left promiscuous mode
[  324.160954][T19684] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  324.165038][T19684] tipc: Resetting bearer <eth:syzkaller0>
[  324.180614][T19684] veth19: left promiscuous mode
[  324.203843][T19684] tipc: Resetting bearer <eth:syzkaller0>
[  324.211347][T19682] sctp: [Deprecated]: syz.2.4031 (pid 19682) Use of int in maxseg socket option.
[  324.211347][T19682] Use struct sctp_assoc_value instead
[  324.262035][T19688] netlink: 'syz.0.4033': attribute type 11 has an invalid length.
[  324.266795][T19688] bridge0: entered allmulticast mode
[  324.563614][T19692] bond0: (slave bridge0): Releasing active interface
[  324.678077][T19705] tipc: Resetting bearer <eth:syzkaller0>
[  324.704602][T19707] __nla_validate_parse: 20 callbacks suppressed
[  324.704613][T19707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4038'.
[  324.740890][T19712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4039'.
[  324.775063][T19711] dvmrp1: entered allmulticast mode
[  324.815626][T19718] netlink: 'syz.0.4040': attribute type 1 has an invalid length.
[  324.855748][T19718] 8021q: adding VLAN 0 to HW filter on device bond37
[  324.872457][T19718] vlan5: entered promiscuous mode
[  324.874118][T19718] bond37: entered promiscuous mode
[  324.875835][T19718] vlan5: entered allmulticast mode
[  324.877475][T19718] bond37: entered allmulticast mode
[  324.909261][T19718] netlink: 'syz.0.4040': attribute type 1 has an invalid length.
[  324.911989][T19718] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4040'.
[  324.996901][T19726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4043'.
[  325.074297][T19746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'.
[  325.270219][T19763] sctp: [Deprecated]: syz.1.4052 (pid 19763) Use of struct sctp_assoc_value in delayed_ack socket option.
[  325.270219][T19763] Use struct sctp_sack_info instead
[  325.315172][T19767] gtp2: entered allmulticast mode
[  325.319203][T19767] team0: Refused to change device type
[  325.368649][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4053'.
[  325.376160][T19770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4054'.
[  325.384021][T19770] ipvlan0: entered promiscuous mode
[  325.386437][T19770] ipvlan0: left promiscuous mode
[  325.626884][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4055'.
[  325.630889][T19774] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  325.633795][T19774] tipc: Resetting bearer <eth:syzkaller0>
[  325.733595][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'.
[  325.736584][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'.
[  325.839737][T19792] gtp4: entered promiscuous mode
[  325.841345][T19792] gtp4: entered allmulticast mode
[  325.942092][T19801] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  325.958238][T19801] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  326.074704][T19810] tipc: Resetting bearer <eth:syzkaller0>
[  326.102571][T19810] tipc: Resetting bearer <eth:syzkaller0>
[  326.191628][T19821] syzkaller1: entered promiscuous mode
[  326.193383][T19821] syzkaller1: entered allmulticast mode
[  326.247462][T19823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  326.257462][T19823] erspan1: entered allmulticast mode
[  326.365566][T19838] xt_TCPMSS: Only works on TCP SYN packets
[  326.619079][T19859] x_tables: duplicate entry at hook 1
[  326.623652][T19858] team0: Refused to change device type
[  326.669760][T19864] xt_time: invalid argument - start or stop time greater than 23:59:59
[  327.439121][T19882] wg1: entered promiscuous mode
[  327.441026][T19882] wg1: entered allmulticast mode
[  327.552891][T19890] mac80211_hwsim hwsim33 syzkaller0: Caught tx_queue_len zero misconfig
[  327.592129][T19894] veth0: entered promiscuous mode
[  327.628496][T19898] veth0: left promiscuous mode
[  327.694311][T19897] lo speed is unknown, defaulting to 1000
[  327.866611][T19918] netlink: 'syz.0.4094': attribute type 1 has an invalid length.
[  327.871088][T19918] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  328.036771][T19938] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  328.051595][T19938] netlink: 'syz.2.4097': attribute type 7 has an invalid length.
[  328.068345][T19938] netlink: 'syz.2.4097': attribute type 8 has an invalid length.
[  328.115472][T19944] pim6reg: left allmulticast mode
[  328.211258][T19956] tipc: Enabling of bearer <eth:vlan0> rejected, already enabled
[  328.657170][T19982] lo speed is unknown, defaulting to 1000
[  329.418235][T20013] lo speed is unknown, defaulting to 1000
[  329.434095][T20027] vlan2: left allmulticast mode
[  329.435789][T20027] vlan2: left promiscuous mode
[  329.439314][T20027] bridge_slave_0: left promiscuous mode
[  329.441784][T20027] bridge0: port 1(vlan2) entered disabled state
[  329.644911][T20037] netlink: 'syz.2.4124': attribute type 4 has an invalid length.
[  329.650480][T20037] netlink: 'syz.2.4124': attribute type 4 has an invalid length.
[  329.660192][T20037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.028634][T20065] lo: Caught tx_queue_len zero misconfig
[  330.140568][T20079] bond36: option arp_all_targets: invalid value (129)
[  330.145728][T20079] bond36 (unregistering): Released all slaves
[  330.379907][T20096] netlink: 'syz.1.4142': attribute type 58 has an invalid length.
[  330.439165][T20110] openvswitch: netlink: Multiple metadata blocks provided
[  330.477461][T20116] netlink: 'syz.0.4148': attribute type 1 has an invalid length.
[  330.490776][T20116] bond38: entered promiscuous mode
[  330.492662][T20116] 8021q: adding VLAN 0 to HW filter on device bond38
[  330.500479][T20116] __nla_validate_parse: 25 callbacks suppressed
[  330.500526][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4148'.
[  330.511207][T20116] sctp: [Deprecated]: syz.0.4148 (pid 20116) Use of struct sctp_assoc_value in delayed_ack socket option.
[  330.511207][T20116] Use struct sctp_sack_info instead
[  330.795087][T20133] gtp4: entered allmulticast mode
[  330.822262][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4153'.
[  330.825717][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4153'.
[  330.843387][T20133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4152'.
[  330.891688][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4155'.
[  330.903631][T20143] netlink: 'syz.2.4154': attribute type 11 has an invalid length.
[  330.917176][T20143] rdma_op ffff88811787c9f0 conn xmit_rdma 0000000000000000
[  330.975651][T20149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.177132][T20154] lo speed is unknown, defaulting to 1000
[  331.237904][T20164] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4162'.
[  331.263455][T20166] netlink: 'syz.0.4163': attribute type 1 has an invalid length.
[  331.299633][T20168] netlink: 'syz.1.4164': attribute type 8 has an invalid length.
[  331.322402][T20166] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4163'.
[  331.327802][T20169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4163'.
[  331.463076][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'.
[  331.483556][T20180] vlan6: entered promiscuous mode
[  331.485177][T20180] bridge0: entered promiscuous mode
[  331.583678][T20176] lo speed is unknown, defaulting to 1000
[  331.678335][T20194] xt_ecn: cannot match TCP bits for non-tcp packets
[  331.849567][T20202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.917722][T20174] lo speed is unknown, defaulting to 1000
[  332.603195][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'.
[  332.841939][T20218] syzkaller1: entered promiscuous mode
[  332.845101][T20218] syzkaller1: entered allmulticast mode
[  333.205126][T20243] validate_nla: 1 callbacks suppressed
[  333.205136][T20243] netlink: 'syz.2.4182': attribute type 4 has an invalid length.
[  333.248029][T20243] netlink: 'syz.2.4182': attribute type 4 has an invalid length.
[  333.402465][T20257] netlink: 'syz.1.4186': attribute type 3 has an invalid length.
[  333.501224][T20259] dvmrp6: entered allmulticast mode
[  333.544422][T20272] syzkaller1: entered allmulticast mode
[  333.640562][T20274] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  333.671889][T20274] netlink: 'syz.1.4191': attribute type 13 has an invalid length.
[  333.763973][T20287] mac80211_hwsim hwsim27 syzkaller0: Caught tx_queue_len zero misconfig
[  333.873294][T20296] bond36 (unregistering): Released all slaves
[  334.010164][T20309] bond36: (slave bridge29): Enslaving as an active interface with an up link
[  334.177729][T20320] wg1: entered promiscuous mode
[  334.179329][T20320] wg1: entered allmulticast mode
[  334.664682][T20350] openvswitch: netlink: Duplicate or invalid key (type 0).
[  334.671709][T20350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.752516][T20352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  334.757915][  T944] lo speed is unknown, defaulting to 1000
[  334.760193][  T944] syz2: Port: 1 Link ACTIVE
[  335.020038][T20374] netlink: 'syz.2.4219': attribute type 9 has an invalid length.
[  335.295659][T20403] pim6reg: entered allmulticast mode
[  335.422780][T20422] tipc: MTU too low for tipc bearer
[  335.444125][T20424] ieee802154 phy0 wpan0: encryption failed: -22
[  335.457873][T20424] netlink: 'syz.0.4233': attribute type 2 has an invalid length.
[  335.461340][T20424] ieee802154 phy0 wpan0: encryption failed: -22
[  335.646014][T20454] __nla_validate_parse: 25 callbacks suppressed
[  335.646028][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'.
[  335.663902][   T34] audit: type=1800 audit(1769964518.656:9): pid=20452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4239" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697302 dev="tmpfs" ino=7271 res=0 errno=0
[  335.793803][T20446] lo speed is unknown, defaulting to 1000
[  335.842890][T20465] sctp: [Deprecated]: syz.0.4241 (pid 20465) Use of struct sctp_assoc_value in delayed_ack socket option.
[  335.842890][T20465] Use struct sctp_sack_info instead
[  335.957736][T20457] siw: device registration error -23
[  336.092291][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4244'.
[  336.453700][T20485] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4247'.
[  336.663993][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4251'.
[  336.695549][T20497] 8021q: adding VLAN 0 to HW filter on device bond23
[  336.769533][T20500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.773908][T20500] bond23: (slave batadv0): Enslaving as an active interface with an up link
[  336.994685][T20509] bridge0: entered allmulticast mode
[  337.008061][T20509] tunl0: Caught tx_queue_len zero misconfig
[  337.352596][T20520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4258'.
[  337.355426][T20520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4258'.
[  337.689997][T20529] lo speed is unknown, defaulting to 1000
[  338.396219][T20539] team_slave_1: Caught tx_queue_len zero misconfig
[  338.410677][T20544] netlink: 'syz.2.4263': attribute type 11 has an invalid length.
[  338.424288][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'.
[  338.521796][T20552] dvmrp1: entered allmulticast mode
[  338.524000][T20552] dvmrp0: left allmulticast mode
[  338.525674][T20552] dvmrp1: left allmulticast mode
[  338.531202][T20555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.546004][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4269'.
[  338.597358][T20555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.734201][T20575] netlink: 'syz.2.4275': attribute type 1 has an invalid length.
[  338.740923][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4275'.
[  338.788767][T20579] wg1: entered promiscuous mode
[  338.790340][T20579] wg1: entered allmulticast mode
[  339.025282][T20601] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  339.028557][T20601] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  339.123852][T20604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4284'.
[  339.608713][T20612] team0: Refused to change device type
[  339.766412][T20622] gretap2: entered promiscuous mode
[  339.848147][T20625] tipc: Enabling of bearer <eth:caif0> rejected, max 3 bearers permitted
[  339.916616][T20627] IPVS: Scheduler module ip_vs_sip not found
[  340.039938][T20638] bond39: option arp_all_targets: invalid value (129)
[  340.043860][T20638] bond39 (unregistering): Released all slaves
[  340.055284][T20641] 8021q: VLANs not supported on bond0
[  340.490363][T20662] lo speed is unknown, defaulting to 1000
[  340.579251][T20685] netlink: 'syz.0.4310': attribute type 8 has an invalid length.
[  340.627415][T20687] sctp: [Deprecated]: syz.1.4311 (pid 20687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.627415][T20687] Use struct sctp_sack_info instead
[  340.655368][T20687] netlink: 'syz.1.4311': attribute type 1 has an invalid length.
[  340.768537][T20692] __nla_validate_parse: 7 callbacks suppressed
[  340.768547][T20692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'.
[  340.811623][T20692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4313'.
[  341.024022][T20697] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4314'.
[  341.037903][T20697] tunl0: Caught tx_queue_len zero misconfig
[  341.047669][   T58] block nbd2: Receive control failed (result -32)
[  341.160801][T20699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.166295][T20699] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  341.186081][T20699] netlink: 'syz.1.4316': attribute type 282 has an invalid length.
[  341.390709][T20714] veth0: Caught tx_queue_len zero misconfig
[  341.416920][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4322'.
[  341.495489][T20721] netlink: 'syz.1.4324': attribute type 5 has an invalid length.
[  341.499473][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'.
[  341.694732][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4326'.
[  341.836174][T20744] netlink: 'syz.1.4333': attribute type 9 has an invalid length.
[  342.013532][T20741] lo speed is unknown, defaulting to 1000
[  342.259174][T20765] bond0: Caught tx_queue_len zero misconfig
[  342.323645][T20777] .`: (slave dummy0): Releasing backup interface
[  342.407770][T20777] batman_adv: batadv0: Adding interface: dummy0
[  342.409760][T20777] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.418868][T20777] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  342.449940][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'.
[  342.495351][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'.
[  342.519171][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'.
[  342.522188][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4344'.
[  342.620854][T20796] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  342.636980][T20795] syzkaller1: entered promiscuous mode
[  342.639474][T20795] syzkaller1: entered allmulticast mode
[  342.918828][T20816] netlink: 'syz.1.4355': attribute type 1 has an invalid length.
[  342.939107][T20816] 8021q: adding VLAN 0 to HW filter on device bond24
[  342.982565][T20816] 8021q: adding VLAN 0 to HW filter on device bond24
[  342.987305][T20816] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  342.991764][T20816] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  343.025919][T20819] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  343.029356][T20819] bond24: (slave wlan0): Opening slave failed
[  343.303860][    T9] lo speed is unknown, defaulting to 1000
[  343.328827][    T9] syz2: Port: 1 Link DOWN
[  343.419903][T20836] gtp2: entered promiscuous mode
[  343.421915][T20836] gtp2: entered allmulticast mode
[  343.425566][T20836] team0: Device gtp2 is up. Set it down before adding it as a team port
[  343.449947][T20832] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  343.452355][T20832] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  343.587052][T20847] pim6reg99999999: entered allmulticast mode
[  343.734770][T20861] 8021q: adding VLAN 0 to HW filter on device bond39
[  343.745718][T20861] bond39: (slave batadv4): Opening slave failed
[  343.938490][T20886] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  344.024323][T20878] lo speed is unknown, defaulting to 1000
[  344.054026][T20892] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.301799][T20895] netlink: 'syz.0.4377': attribute type 11 has an invalid length.
[  344.548460][T20911] netlink: 'syz.0.4381': attribute type 1 has an invalid length.
[  344.563108][T20911] bond40: entered promiscuous mode
[  344.564994][T20911] 8021q: adding VLAN 0 to HW filter on device bond40
[  344.793494][T20928] sit0: Master is either lo or non-ether device
[  344.800327][T20928] sit0: Master is either lo or non-ether device
[  345.078758][T20943] netlink: 'syz.1.4393': attribute type 13 has an invalid length.
[  345.304686][T20952] bond25: option arp_interval: invalid value (18446744072738322950)
[  345.308324][T20952] bond25: option arp_interval: allowed values 0 - 2147483647
[  345.312782][T20952] bond25 (unregistering): Released all slaves
[  345.394725][T20960] team0: Refused to change device type
[  345.803061][T20995] team0: Refused to change device type
[  345.862853][T20995] __nla_validate_parse: 132 callbacks suppressed
[  345.862863][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[  346.320692][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'.
[  346.324230][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'.
[  346.327079][T21043] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  346.775819][T21068] lo speed is unknown, defaulting to 1000
[  347.162074][T21092] lo speed is unknown, defaulting to 1000
[  347.216307][T21100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4432'.
[  347.246115][T21094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4431'.
[  347.312453][T21105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4434'.
[  347.315762][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4434'.
[  347.318967][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4434'.
[  347.398726][T21105] block nbd3: server does not support multiple connections per device.
[  347.403979][T21105] block nbd3: shutting down sockets
[  347.510828][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4437'.
[  347.524793][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4439'.
[  347.988610][T21143] netlink: 'syz.1.4445': attribute type 1 has an invalid length.
[  348.000364][T21143] netlink: 'syz.1.4445': attribute type 7 has an invalid length.
[  348.003070][T21143] netlink: 'syz.1.4445': attribute type 8 has an invalid length.
[  348.005778][T21143] NCSI netlink: No device for ifindex 65584
[  348.034355][T21145] netlink: 'syz.2.4446': attribute type 12 has an invalid length.
[  348.158877][T21152] geneve7: entered promiscuous mode
[  348.161928][T10362] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  348.165163][T10362] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  348.177663][T10362] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  348.180946][T10362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  348.383224][T21151] lo speed is unknown, defaulting to 1000
[  348.846726][T21174] bridge_slave_1: invalid flags given to default FDB implementation
[  348.975006][T21183] netlink: 'syz.2.4459': attribute type 5 has an invalid length.
[  349.102533][   T34] audit: type=1800 audit(1769964532.096:10): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4459" name="memory.events" dev="tmpfs" ino=7422 res=0 errno=0
[  349.236096][T21189] wg1: left promiscuous mode
[  349.238157][T21189] wg1: left allmulticast mode
[  349.249832][T21189] mac80211_hwsim hwsim32 wlan0: left promiscuous mode
[  349.252473][T21189] mac80211_hwsim hwsim32 wlan0: left allmulticast mode
[  349.256722][T21189] vlan5: left promiscuous mode
[  349.258539][T21189] bond20: left promiscuous mode
[  349.260181][T21189] vlan5: left allmulticast mode
[  349.261990][T21189] bond20: left allmulticast mode
[  349.264579][T21189] bond22: left promiscuous mode
[  349.266636][T21189] vlan6: left promiscuous mode
[  349.269285][T21189] bond23: left promiscuous mode
[  349.271489][T21189] bond24: left promiscuous mode
[  349.272938][T21193] xt_TCPMSS: Only works on TCP SYN packets
[  349.273640][T21194] xt_TCPMSS: Only works on TCP SYN packets
[  349.280024][T21189] gretap0: left promiscuous mode
[  349.282077][T21189] bond27: left promiscuous mode
[  349.284531][T21189] gtp2: left promiscuous mode
[  349.286467][T21189] gtp2: left allmulticast mode
[  349.289454][T21189] bond29: left promiscuous mode
[  349.291924][T21189] macvtap2: left promiscuous mode
[  349.294492][T21189] bond32: left promiscuous mode
[  349.296680][T21189] bond32: left allmulticast mode
[  349.305836][T21189] bond34: left promiscuous mode
[  349.308224][T21189] bridge27: left promiscuous mode
[  349.317449][T21189] geneve7: left promiscuous mode
[  349.328632][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.333489][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.338319][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  349.342050][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  350.027301][T21207] bridge31: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  350.099649][T21209] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  350.464222][T21242] netlink: 'syz.2.4475': attribute type 10 has an invalid length.
[  350.605856][T21254] bridge16: entered promiscuous mode
[  350.783804][T21265] can: request_module (can-proto-0) failed.
[  351.136454][T21288] __nla_validate_parse: 17 callbacks suppressed
[  351.136468][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4491'.
[  351.281821][T21296] : renamed from veth0_to_bond
[  351.403448][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'.
[  351.407913][T21305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  351.411834][T21305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  351.422907][T21306] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  351.428802][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'.
[  351.494165][T21300] lo speed is unknown, defaulting to 1000
[  351.509529][T21308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4497'.
[  351.915175][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4501'.
[  351.975906][T21319] 8021q: adding VLAN 0 to HW filter on device bond37
[  351.990782][T21319] bond37: option ad_select: unable to set because the bond device is up
[  352.171847][T21336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4506'.
[  352.668830][T21344] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  352.854450][T21351] team0: Refused to change device type
[  352.913607][T21352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4512'.
[  352.934639][T21355] netlink: 'syz.2.4513': attribute type 7 has an invalid length.
[  353.133794][T21372] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.147195][T21374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4519'.
[  353.159755][T21374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4519'.
[  353.168808][T21374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4519'.
[  353.444123][T21392] wg1: entered promiscuous mode
[  353.446714][T21392] wg1: entered allmulticast mode
[  353.869844][T21407] Cannot find set identified by id 0 to match
[  354.215853][T21421] team0: Refused to change device type
[  354.351590][T21425] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  354.903233][T21448] netlink: 'syz.1.4543': attribute type 6 has an invalid length.
[  355.275142][T21475] ip6tnl0: Caught tx_queue_len zero misconfig
[  355.824826][T21519] netlink: 'syz.1.4560': attribute type 10 has an invalid length.
[  355.866590][T21523] netlink: 'syz.0.4562': attribute type 8 has an invalid length.
[  356.122611][T21551] netlink: 'syz.0.4568': attribute type 1 has an invalid length.
[  356.141574][T21551] 8021q: adding VLAN 0 to HW filter on device bond41
[  356.164156][T21551] bond41: (slave veth37): Enslaving as an active interface with a down link
[  356.174505][T21551] 8021q: adding VLAN 0 to HW filter on device batadv4
[  356.176884][T21551] bond41: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  356.292898][T21551] __nla_validate_parse: 80 callbacks suppressed
[  356.292908][T21551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4568'.
[  356.344368][T21553] lo speed is unknown, defaulting to 1000
[  356.739426][T21559] netlink: 'syz.1.4571': attribute type 1 has an invalid length.
[  356.759345][T21559] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  356.763327][T21559] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  356.811602][T21561] macvlan0: entered promiscuous mode
[  356.813776][T21561] macvlan0: entered allmulticast mode
[  356.816472][T21561] bond25: entered promiscuous mode
[  356.818921][T21561] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  356.823749][T21561] bond25: left promiscuous mode
[  356.944096][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4572'.
[  357.101555][T21578] 8021q: VLANs not supported on gre0
[  357.144412][T21584] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  357.173568][T21589] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  357.417472][T21590] lo speed is unknown, defaulting to 1000
[  357.696332][T21607] team0: Mode changed to "activebackup"
[  357.698142][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4583'.
[  357.789097][T21611] mac80211_hwsim hwsim27 syzkaller0: Caught tx_queue_len zero misconfig
[  358.286352][T21613] x_tables: duplicate underflow at hook 1
[  358.311076][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4586'.
[  358.323825][T21615] 8021q: adding VLAN 0 to HW filter on device bond42
[  358.331987][T21615] bond35: (slave bond0): Releasing backup interface
[  358.336333][T21615] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.349952][T21615] bond42: (slave bond0): Enslaving as an active interface with an up link
[  358.360543][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4586'.
[  358.433613][T21618] netlink: 'syz.0.4587': attribute type 1 has an invalid length.
[  358.436315][T21618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4587'.
[  358.474212][T21620] bond43: (slave bond_slave_1): Device is not our slave
[  358.478053][T21620] bond43: option active_slave: invalid value (bond_slave_1)
[  358.481571][T21620] bond43 (unregistering): Released all slaves
[  358.514690][T21622] delete_channel: no stack
[  358.592953][T21624] No such timeout policy "syz0"
[  358.601421][T21624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'.
[  358.661640][T21633] batman_adv: batadv0: Interface activated: dummy0
[  358.663710][T21633] batadv0: mtu less than device minimum
[  358.665984][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.669731][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.673304][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.676913][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.681590][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.685338][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.689089][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.692722][T21633] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  358.738431][T21635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4593'.
[  358.823477][T21644] netlink: 'syz.1.4597': attribute type 1 has an invalid length.
[  358.835650][T21644] bond26: entered promiscuous mode
[  358.838047][T21644] bond26: entered allmulticast mode
[  358.840812][T21644] 8021q: adding VLAN 0 to HW filter on device bond26
[  358.907517][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[  359.096337][T21666] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4606'.
[  359.405067][T21695] gtp4: entered promiscuous mode
[  359.407271][T21695] gtp4: entered allmulticast mode
[  359.622950][T21710] netlink: 'syz.2.4621': attribute type 21 has an invalid length.
[  359.626156][T21710] netlink: 'syz.2.4621': attribute type 4 has an invalid length.
[  359.634168][T21710] netlink: 'syz.2.4621': attribute type 5 has an invalid length.
[  359.658184][T21712] ipvlan0: Caught tx_queue_len zero misconfig
[  359.715128][T21718] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  359.718637][T21718] syzkaller0: entered promiscuous mode
[  359.723954][T21718] syzkaller0: entered allmulticast mode
[  359.746081][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  359.751297][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  359.758885][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  359.764384][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  359.993954][T21736] lo speed is unknown, defaulting to 1000
[  360.130256][T21760] netlink: 'syz.2.4638': attribute type 1 has an invalid length.
[  360.207504][T21764] 8021q: adding VLAN 0 to HW filter on device bond39
[  360.302448][  T944] lo speed is unknown, defaulting to 1000
[  360.304292][  T944] syz2: Port: 1 Link ACTIVE
[  360.511850][T21793] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  360.515090][T21793] syzkaller0: entered promiscuous mode
[  360.516852][T21793] syzkaller0: entered allmulticast mode
[  360.704848][T21805] 8021q: adding VLAN 0 to HW filter on device bond40
[  361.503237][T21870] C: renamed from team_slave_0
[  361.506304][T21870] validate_nla: 12 callbacks suppressed
[  361.506312][T21870] netlink: 'syz.1.4668': attribute type 8 has an invalid length.
[  361.511819][T21870] net_ratelimit: 11 callbacks suppressed
[  361.511825][T21870] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  361.550853][T21875] __nla_validate_parse: 21 callbacks suppressed
[  361.550862][T21875] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.556613][T21875] netlink: 'syz.1.4669': attribute type 1 has an invalid length.
[  361.563388][T21875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.573307][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.576906][T21875] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.582022][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.585635][T21875] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.590461][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.601525][T21873] netlink: 'syz.2.4670': attribute type 2 has an invalid length.
[  361.607261][T21873] !: entered promiscuous mode
[  361.622250][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.625786][T21875] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.639409][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'.
[  361.713189][T21890] netlink: 'syz.2.4674': attribute type 1 has an invalid length.
[  361.750668][T21890] bond41: (slave vxcan9): The slave device specified does not support setting the MAC address
[  361.754911][T21890] bond41: (slave vxcan9): Error -95 calling set_mac_address
[  361.868245][T21906] bond27: option miimon: invalid value (18446744073709551607)
[  361.870825][T21906] bond27: option miimon: allowed values 0 - 2147483647
[  361.874155][T21906] bond27 (unregistering): Released all slaves
[  361.890677][T21901] bond43: (slave bridge18): Enslaving as an active interface with an up link
[  361.900310][T21901] bond43: entered promiscuous mode
[  361.902487][T21901] bridge18: entered promiscuous mode
[  361.904912][T21901] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  361.908902][T21901] bond43: left promiscuous mode
[  361.911018][T21901] bridge18: left promiscuous mode
[  362.381109][T21954] netlink: 'syz.0.4692': attribute type 21 has an invalid length.
[  362.384794][T21954] netlink: 'syz.0.4692': attribute type 5 has an invalid length.
[  362.389900][T21954] netlink: 'syz.0.4692': attribute type 6 has an invalid length.
[  362.395292][T21954] netlink: 'syz.0.4692': attribute type 4 has an invalid length.
[  362.409458][T18609] lo speed is unknown, defaulting to 1000
[  362.412369][T18609] syz2: Port: 1 Link DOWN
[  362.420249][T21954] netlink: 'syz.0.4692': attribute type 4 has an invalid length.
[  362.424485][T18609] lo speed is unknown, defaulting to 1000
[  362.426459][T18609] syz2: Port: 1 Link ACTIVE
[  362.553858][T21966] tipc: Enabled bearer <ib:team0>, priority 10
[  362.608246][T21970] ipip0: entered promiscuous mode
[  362.610329][T21970] ipip0: entered allmulticast mode
[  362.669824][T21978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.676566][T21978] openvswitch: netlink: Tunnel attr 10416 out of range max 16
[  362.683624][T21978] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  362.686292][T21980] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  362.687331][T21978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.691958][T21980] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  362.702582][T21980] netlink: 'syz.1.4702': attribute type 12 has an invalid length.
[  362.788077][T21989] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  362.935948][T21999] 8021q: adding VLAN 0 to HW filter on device bond44
[  363.137464][T22012] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  363.378775][T22021] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  363.931611][T22035] lo speed is unknown, defaulting to 1000
[  363.984191][T22044] team0: Device ipvlan1 failed to register rx_handler
[  364.707186][T22076] syzkaller1: entered promiscuous mode
[  364.709419][T22076] syzkaller1: entered allmulticast mode
[  364.838576][T22088] wg1: left promiscuous mode
[  364.840249][T22088] wg1: left allmulticast mode
[  364.849218][T22088] mac80211_hwsim hwsim27 wlan0: left promiscuous mode
[  364.863047][T22088] gretap2: left promiscuous mode
[  364.865419][T22088] bond26: left promiscuous mode
[  364.867055][T22088] bond26: left allmulticast mode
[  364.871488][T22088] ipip0: left promiscuous mode
[  364.873465][T22088] ipip0: left allmulticast mode
[  365.504070][T22130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.614967][T22136] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  365.619121][T22136] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  365.623961][T22136] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  366.152591][T22166] wg1: entered promiscuous mode
[  366.154176][T22166] wg1: entered allmulticast mode
[  366.246694][T22174] openvswitch: netlink: Flow key attr not present in new flow.
[  366.561571][T22200] validate_nla: 6 callbacks suppressed
[  366.561585][T22200] netlink: 'syz.1.4758': attribute type 30 has an invalid length.
[  366.566922][T22200] __nla_validate_parse: 37 callbacks suppressed
[  366.566932][T22200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4758'.
[  366.591835][T22202] netlink: 'syz.2.4759': attribute type 39 has an invalid length.
[  366.595681][T22200] bond27: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  366.604202][T22200] bond27 (unregistering): Released all slaves
[  366.669542][T22204] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4759'.
[  366.701373][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'.
[  366.704365][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'.
[  366.707080][T22206] netlink: 'syz.1.4760': attribute type 6 has an invalid length.
[  366.711298][T22206] netlink: 'syz.1.4760': attribute type 5 has an invalid length.
[  366.714085][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'.
[  366.716926][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'.
[  366.720362][T22206] netlink: 'syz.1.4760': attribute type 6 has an invalid length.
[  366.729565][T22206] netlink: 'syz.1.4760': attribute type 5 has an invalid length.
[  366.739464][T22206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4760'.
[  366.762704][T22208] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  366.780355][T22211] tap0: tun_chr_ioctl cmd 1074025680
[  366.856610][T22218] 8021q: VLANs not supported on ip_vti0
[  366.904864][T22224] netlink: 'syz.2.4767': attribute type 39 has an invalid length.
[  366.909556][T22224] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4767'.
[  367.402578][T22237] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4771'.
[  367.406237][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4771'.
[  367.529426][T22239] lo speed is unknown, defaulting to 1000
[  367.987270][T22272] macsec1: entered allmulticast mode
[  367.990664][T22272] macsec0: entered allmulticast mode
[  368.066466][T22262] lo speed is unknown, defaulting to 1000
[  368.590496][T22289] netlink: 'syz.0.4787': attribute type 2 has an invalid length.
[  368.889741][T22318] netlink: 'syz.0.4797': attribute type 21 has an invalid length.
[  368.920764][T22318] netlink: 'syz.0.4797': attribute type 5 has an invalid length.
[  368.935454][   T24] lo speed is unknown, defaulting to 1000
[  368.937486][   T24] syz2: Port: 1 Link DOWN
[  368.957052][   T24] lo speed is unknown, defaulting to 1000
[  368.960155][   T24] syz2: Port: 1 Link ACTIVE
[  369.110015][T22336] xt_nfacct: accounting object `syz0' does not exist
[  369.290221][T22347] 8021q: VLANs not supported on ipvlan1
[  369.796427][T22410] bond0: option mode: unable to set because the bond device is up
[  370.659427][T22457] x_tables: duplicate underflow at hook 2
[  371.533644][T22509] 8021q: adding VLAN 0 to HW filter on device bond27
[  371.536152][T22518] netem: change failed
[  371.741575][T22544] validate_nla: 10 callbacks suppressed
[  371.741589][T22544] netlink: 'syz.0.4857': attribute type 2 has an invalid length.
[  371.747103][T22544] __nla_validate_parse: 20 callbacks suppressed
[  371.747113][T22544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'.
[  371.790622][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'.
[  371.794432][T22546] netlink: 'syz.0.4858': attribute type 30 has an invalid length.
[  371.807116][T10362] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  371.812544][T10362] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  371.816180][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'.
[  371.819715][T22546] netlink: 'syz.0.4858': attribute type 30 has an invalid length.
[  371.819750][T22538] lo speed is unknown, defaulting to 1000
[  371.822140][T10362] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  371.826948][T10362] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  371.982022][T22553] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4860'.
[  371.984943][T22553] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  372.204133][T22559] bridge87: entered promiscuous mode
[  372.237064][T22563] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4863'.
[  372.349252][T22569] netlink: 'syz.1.4864': attribute type 1 has an invalid length.
[  372.351807][T22569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4864'.
[  372.578263][T22580] bond45: option miimon: invalid value (18446744073709551607)
[  372.580698][T22580] bond45: option miimon: allowed values 0 - 2147483647
[  372.584139][T22580] bond45 (unregistering): Released all slaves
[  372.621623][T22576] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  372.646213][T22586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'.
[  372.759118][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4870'.
[  372.890666][T22602] netlink: 'syz.0.4873': attribute type 10 has an invalid length.
[  372.892863][T22593] lo speed is unknown, defaulting to 1000
[  372.893272][T22602] batman_adv: batadv0: Interface deactivated: dummy0
[  372.900806][T22602] batman_adv: batadv0: Removing interface: dummy0
[  372.904073][T22602] netlink: 'syz.0.4873': attribute type 10 has an invalid length.
[  372.911057][T22602] .`: (slave dummy0): Enslaving as an active interface with an up link
[  373.019213][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4876'.
[  373.091897][T22621] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.137535][T22621] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.174737][T22621] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.245265][T22621] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  373.339502][T22625] netlink: 'syz.1.4880': attribute type 39 has an invalid length.
[  373.362388][ T5867] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  373.365524][ T5867] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  373.372214][T22625] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4880'.
[  373.405026][ T5867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  373.411797][ T5867] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.711491][T22646] xt_ecn: cannot match TCP bits for non-tcp packets
[  373.780616][T22653] netlink: 'syz.1.4887': attribute type 1 has an invalid length.
[  373.985507][T22665] netlink: 'syz.2.4895': attribute type 39 has an invalid length.
[  374.469435][T22681] lo speed is unknown, defaulting to 1000
[  374.610149][T22705] netlink: 'syz.0.4900': attribute type 11 has an invalid length.
[  374.861688][T22721] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  375.178139][T22742] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  375.181841][T22742] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  375.343591][T22734] lo speed is unknown, defaulting to 1000
[  375.965944][T22754] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode
[  375.969853][T22754] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode
[  376.191192][T22786] netlink: 'syz.2.4925': attribute type 4 has an invalid length.
[  376.394417][T22805] syzkaller1: entered promiscuous mode
[  376.396168][T22805] syzkaller1: entered allmulticast mode
[  376.500794][T22827] ieee802154 phy0 wpan0: encryption failed: -22
[  376.528726][T22832] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  376.590111][T22827] : entered promiscuous mode
[  376.593004][T22827] ieee802154 phy0 wpan0: encryption failed: -22
[  376.651805][T22849] No such timeout policy "syz0"
[  376.778474][T22873] validate_nla: 1 callbacks suppressed
[  376.778484][T22873] netlink: 'syz.2.4951': attribute type 3 has an invalid length.
[  376.790642][T22858] bond29: option miimon: invalid value (18446744073709551607)
[  376.793262][T22858] bond29: option miimon: allowed values 0 - 2147483647
[  376.794405][T22876] __nla_validate_parse: 24 callbacks suppressed
[  376.794413][T22876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4953'.
[  376.795581][T22873] netlink: 772 bytes leftover after parsing attributes in process `syz.2.4951'.
[  376.799027][T22877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4953'.
[  376.800959][T22873] netlink: 'syz.2.4951': attribute type 3 has an invalid length.
[  376.812917][T22858] bond29 (unregistering): Released all slaves
[  376.817636][T22873] netlink: 772 bytes leftover after parsing attributes in process `syz.2.4951'.
[  376.824403][T22878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  376.851753][T22880] netlink: 'syz.0.4955': attribute type 1 has an invalid length.
[  376.854650][T22880] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4955'.
[  376.946927][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4959'.
[  376.969991][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4959'.
[  377.004510][T22895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'.
[  377.045221][T22903] netlink: 'syz.2.4962': attribute type 1 has an invalid length.
[  377.109139][T22906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4962'.
[  377.125565][T22906] bond44: (slave bridge36): making interface the new active one
[  377.128389][T22906] bond44: (slave bridge36): Enslaving as an active interface with an up link
[  377.132203][T22899] lo speed is unknown, defaulting to 1000
[  377.278822][T22922] netlink: 'syz.1.4966': attribute type 2 has an invalid length.
[  377.314113][T22926] macsec0: left allmulticast mode
[  377.331047][T22930] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4969'.
[  377.354394][ T5870] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.356899][ T5870] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.363093][ T5870] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.370712][ T5870] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  377.387070][T22935] netlink: 'syz.1.4970': attribute type 39 has an invalid length.
[  377.450077][T22941] dvmrp0: entered allmulticast mode
[  377.477922][T22941] bpq0: entered promiscuous mode
[  377.479613][T22941] bpq0: entered allmulticast mode
[  377.503430][T22944] netlink: 'syz.1.4973': attribute type 5 has an invalid length.
[  377.507407][T22944] netlink: 'syz.1.4973': attribute type 5 has an invalid length.
[  377.522223][T22946] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  377.528395][T22944] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20004
[  377.558491][T22946] syzkaller0: entered promiscuous mode
[  377.560312][T22946] syzkaller0: entered allmulticast mode
[  377.584403][T22950] netlink: 'syz.1.4975': attribute type 4 has an invalid length.
[  377.587160][T22950] netlink: 'syz.1.4975': attribute type 4 has an invalid length.
[  377.957298][T22950] lo speed is unknown, defaulting to 1000
[  378.413554][   T34] audit: type=1107 audit(1769964561.406:11): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  379.529808][T23019] team0: Refused to change device type
[  379.563668][T23020] 8021q: VLANs not supported on lo
[  379.800208][T23046] netlink: 'syz.1.5006': attribute type 11 has an invalid length.
[  380.091748][T23073] tun0: tun_chr_ioctl cmd 1074025675
[  380.093931][T23073] tun0: persist enabled
[  380.095958][T23073] tun0: tun_chr_ioctl cmd 1074025675
[  380.098464][T23073] tun0: persist enabled
[  380.123679][T23073] tun0: tun_chr_ioctl cmd 3223348778
[  380.235774][T23087] syzkaller0: entered promiscuous mode
[  380.237994][T23087] syzkaller0: entered allmulticast mode
[  380.612052][T23100] gtp2: entered promiscuous mode
[  380.613677][T23100] gtp2: entered allmulticast mode
[  380.752585][T23113] xt_recent: Unsupported userspace flags (000000b1)
[  380.923685][T23127] gtp2: entered promiscuous mode
[  380.926319][T23127] gtp2: entered allmulticast mode
[  380.938489][T23127] team0: Refused to change device type
[  381.002811][T23128] bond45: entered promiscuous mode
[  381.005404][T23128] 8021q: adding VLAN 0 to HW filter on device bond45
[  381.843946][T23178] __nla_validate_parse: 35 callbacks suppressed
[  381.843956][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'.
[  382.036988][T23187] validate_nla: 77 callbacks suppressed
[  382.037082][T23187] netlink: 'syz.0.5049': attribute type 1 has an invalid length.
[  382.043038][T23187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5049'.
[  382.143114][T23200] xt_TPROXY: Can be used only with -p tcp or -p udp
[  382.538800][T23212] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  382.542234][T23212] netlink: 'syz.1.5055': attribute type 29 has an invalid length.
[  382.546496][T23212] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5055'.
[  382.587510][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5056'.
[  382.890510][T23229] batadv0: mtu less than device minimum
[  382.893959][T23229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5061'.
[  383.068620][T23245] mac80211_hwsim hwsim33 syzkaller0: left promiscuous mode
[  383.070919][T23245] mac80211_hwsim hwsim33 syzkaller0: left allmulticast mode
[  383.135462][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5065'.
[  383.285088][T23275] netlink: 'syz.2.5069': attribute type 1 has an invalid length.
[  383.295335][T23276] x_tables: duplicate underflow at hook 2
[  383.297354][T23276] x_tables: duplicate underflow at hook 2
[  383.301487][T23276] x_tables: duplicate underflow at hook 2
[  383.303724][T23276] x_tables: duplicate underflow at hook 2
[  383.305924][T23276] x_tables: duplicate underflow at hook 2
[  383.308626][T23276] x_tables: duplicate underflow at hook 2
[  383.311067][T23276] x_tables: duplicate underflow at hook 2
[  383.313430][T23276] x_tables: duplicate underflow at hook 2
[  383.315663][T23276] x_tables: duplicate underflow at hook 2
[  383.321130][T23276] x_tables: duplicate underflow at hook 2
[  383.331977][T23275] bond45: entered promiscuous mode
[  383.333958][T23275] 8021q: adding VLAN 0 to HW filter on device bond45
[  383.340321][T23275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'.
[  383.343334][T23275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'.
[  383.358807][T23275] bond45: (slave bridge38): making interface the new active one
[  383.362676][T23275] bridge38: entered promiscuous mode
[  383.365829][T23275] bond45: (slave bridge38): Enslaving as an active interface with an up link
[  383.496840][T23290] netlink: 'syz.2.5074': attribute type 13 has an invalid length.
[  383.574744][T23300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5073'.
[  383.587159][T23300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5073'.
[  383.594469][T23294] bond46: entered promiscuous mode
[  383.597211][T23294] 8021q: adding VLAN 0 to HW filter on device bond46
[  383.731151][T23294] veth0_to_bond: left allmulticast mode
[  383.733283][T23294] veth0_to_bond: left promiscuous mode
[  383.735662][T23294] bridge2: port 3(veth0_to_bond) entered disabled state
[  383.756719][T23294] bridge20: port 1(veth0_to_bond) entered blocking state
[  383.767695][T23294] bridge20: port 1(veth0_to_bond) entered disabled state
[  383.770026][T23294] veth0_to_bond: entered allmulticast mode
[  383.772625][T23294] veth0_to_bond: entered promiscuous mode
[  383.826058][T23315] netlink: 'syz.1.5077': attribute type 13 has an invalid length.
[  383.840340][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  383.988858][T23326] xt_l2tp: invalid flags combination: 0
[  384.035953][T23331] gtp4: entered allmulticast mode
[  384.140980][T23349] wg1: left promiscuous mode
[  384.142553][T23349] wg1: left allmulticast mode
[  384.151611][T23349] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode
[  384.153905][T23349] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode
[  384.157958][T23353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.166196][T23349] bridge87: left promiscuous mode
[  384.251917][T23357] syzkaller0: entered promiscuous mode
[  384.253773][T23357] syzkaller0: entered allmulticast mode
[  384.354556][T23360] vlan7: entered promiscuous mode
[  384.356318][T23360] bridge0: entered promiscuous mode
[  384.394503][T23360] netlink: 'syz.2.5091': attribute type 11 has an invalid length.
[  385.073561][T23391] netlink: 'syz.1.5099': attribute type 1 has an invalid length.
[  385.247272][T23420] netlink: 'syz.0.5108': attribute type 8 has an invalid length.
[  388.192475][T23413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.507750][T23470] __nla_validate_parse: 76 callbacks suppressed
[  388.507763][T23470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5119'.
[  388.514947][T23453] lo speed is unknown, defaulting to 1000
[  388.541213][T23470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5119'.
[  388.711255][T23463] lo speed is unknown, defaulting to 1000
[  388.808533][T23477] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5122'.
[  388.865100][T23480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5123'.
[  388.869308][T23480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5123'.
[  388.970626][T23486] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.015926][T23487] netlink: 'syz.0.5125': attribute type 28 has an invalid length.
[  389.021317][T23487] netlink: 'syz.0.5125': attribute type 3 has an invalid length.
[  389.024586][T23487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5125'.
[  389.026063][T23486] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.101980][T23486] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.187064][T23486] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.374911][T10362] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.404546][ T5870] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.421423][ T5870] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.456100][T10362] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.670587][T23496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5128'.
[  389.705259][T23507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5130'.
[  389.761933][T23517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5133'.
[  389.766258][T23517] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5133'.
[  389.939567][T23523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.114752][T23532] 8021q: adding VLAN 0 to HW filter on device bond29
[  390.175455][T23534] 8021q: adding VLAN 0 to HW filter on device batadv2
[  390.180756][T23534] bond29: (slave batadv2): Enslaving as an active interface with an up link
[  390.186542][T23534] xt_socket: unknown flags 0x50
[  390.707364][T23540] siw: device registration error -23
[  390.713554][T23540] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  390.976343][T23557] netlink: 'syz.1.5146': attribute type 8 has an invalid length.
[  390.982015][T23542] lo speed is unknown, defaulting to 1000
[  391.676310][T23603] netlink: 'syz.1.5159': attribute type 6 has an invalid length.
[  392.015879][T23613] bpq0: left promiscuous mode
[  392.018589][T23613] bpq0: left allmulticast mode
[  392.229068][T23648] netlink: 'syz.0.5171': attribute type 1 has an invalid length.
[  392.526360][T23667] netlink: 'syz.0.5176': attribute type 12 has an invalid length.
[  392.620656][T23674] xt_ecn: cannot match TCP bits for non-tcp packets
[  392.623171][T23674] xt_ecn: cannot match TCP bits for non-tcp packets
[  392.635478][T23674] xt_ecn: cannot match TCP bits for non-tcp packets
[  392.656532][T23674] xt_ecn: cannot match TCP bits for non-tcp packets
[  392.718994][T23686] 8021q: VLANs not supported on wg1
[  392.733498][T23689] No such timeout policy "syz0"
[  393.184260][T23711] lo speed is unknown, defaulting to 1000
[  393.269326][T23721] bond30: Unable to set peer notification delay as MII monitoring is disabled
[  393.275385][T23721] bond30 (unregistering): Released all slaves
[  393.310917][T23712] lo speed is unknown, defaulting to 1000
[  393.654866][T23731] wg1: entered promiscuous mode
[  393.657760][T23731] wg1: entered allmulticast mode
[  393.709597][T23733] __nla_validate_parse: 28 callbacks suppressed
[  393.709607][T23733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'.
[  393.749998][T23733] 8021q: adding VLAN 0 to HW filter on device bond30
[  393.820871][T23737] netlink: 'syz.2.5196': attribute type 39 has an invalid length.
[  394.034002][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5198'.
[  394.089772][T23751] netlink: 'syz.1.5200': attribute type 4 has an invalid length.
[  394.131802][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5201'.
[  394.141093][T23755] xt_hashlimit: size too large, truncated to 1048576
[  394.151017][T23755] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  394.171764][T23753] xfrm2: entered promiscuous mode
[  394.173748][T23753] xfrm2: entered allmulticast mode
[  394.197910][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5201'.
[  394.349403][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5204'.
[  394.791052][T23780] netlink: 4592 bytes leftover after parsing attributes in process `syz.0.5208'.
[  394.862583][T23789] xt_policy: too many policy elements
[  394.865424][T23789] netlink: 'syz.1.5212': attribute type 10 has an invalid length.
[  395.095775][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5220'.
[  395.152183][T23811] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  395.173614][T23811] syzkaller0: entered promiscuous mode
[  395.175368][T23811] syzkaller0: entered allmulticast mode
[  395.278673][T23818] bond0: Master is either lo or non-ether device
[  395.351788][T23824] ipvlan3: entered promiscuous mode
[  395.354520][T23824] bridge0: port 1(ipvlan3) entered blocking state
[  395.357052][T23824] bridge0: port 1(ipvlan3) entered disabled state
[  395.362509][T23824] ipvlan3: entered allmulticast mode
[  395.364660][T23824] bridge0: entered allmulticast mode
[  395.373294][T23820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5225'.
[  395.376449][T23824] ipvlan3: left allmulticast mode
[  395.378819][T23824] bridge0: left allmulticast mode
[  395.420901][T23829] lo: Caught tx_queue_len zero misconfig
[  395.481289][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5229'.
[  395.505772][T23833] bond46: (slave bridge39): Enslaving as an active interface with an up link
[  395.517280][T23833] bond46: entered promiscuous mode
[  395.520236][T23833] bridge39: entered promiscuous mode
[  395.522423][T23833] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  395.526189][T23833] bond46: left promiscuous mode
[  395.528477][T23833] bridge39: left promiscuous mode
[  395.551360][T23836] netlink: 'syz.0.5230': attribute type 4 has an invalid length.
[  395.555161][T23836] lo: left allmulticast mode
[  395.557997][ T5869] lo speed is unknown, defaulting to 1000
[  395.560307][ T5869] syz2: Port: 1 Link DOWN
[  395.618493][T23839] tunl0: Caught tx_queue_len zero misconfig
[  395.704530][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5233'.
[  395.773401][T23856] netlink: 'syz.0.5235': attribute type 1 has an invalid length.
[  395.794286][T23856] 8021q: adding VLAN 0 to HW filter on device bond47
[  395.813081][T23856] veth43: entered promiscuous mode
[  395.824306][T23856] bond47: (slave veth43): Enslaving as an active interface with a down link
[  395.830781][T23856] erspan0: entered allmulticast mode
[  395.832954][T23848] lo speed is unknown, defaulting to 1000
[  395.846174][T23856] bond47: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  395.965067][T23869] netlink: 'syz.1.5240': attribute type 101 has an invalid length.
[  395.969877][T23869] netlink: 'syz.1.5240': attribute type 7 has an invalid length.
[  395.995305][T23869] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  396.025071][T23873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.041323][T23874] syzkaller1: entered promiscuous mode
[  396.043528][T23874] syzkaller1: entered allmulticast mode
[  396.160747][T23879] batadv_slave_0: entered promiscuous mode
[  396.289648][T23877] batadv_slave_0: left promiscuous mode
[  396.863074][T23906] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode
[  396.865467][T23906] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode
[  396.985253][T23918] netlink: 'syz.0.5256': attribute type 15 has an invalid length.
[  397.116907][T23933] gretap0: entered promiscuous mode
[  397.221069][T23946] netlink: 'syz.0.5260': attribute type 1 has an invalid length.
[  397.251590][T23946] 8021q: adding VLAN 0 to HW filter on device bond48
[  397.263994][T23946] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode
[  397.666620][T23988] netlink: 'syz.0.5267': attribute type 1 has an invalid length.
[  397.696059][T23988] 8021q: adding VLAN 0 to HW filter on device bond49
[  397.730676][T23988] bond49: (slave veth45): Enslaving as an active interface with a down link
[  397.743544][T23988] syzkaller1: entered promiscuous mode
[  397.745492][T23988] syzkaller1: entered allmulticast mode
[  397.763828][T23988] 8021q: adding VLAN 0 to HW filter on device batadv4
[  397.766998][T23988] bond49: (slave batadv4): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  397.858058][T23999] bond0: Master is either lo or non-ether device
[  397.996099][T24011] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.002755][T24011] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  398.206345][T24016] lo speed is unknown, defaulting to 1000
[  398.469041][T24024] netlink: 'syz.2.5277': attribute type 1 has an invalid length.
[  398.777703][T24034] __nla_validate_parse: 15 callbacks suppressed
[  398.777718][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5281'.
[  398.994317][T24046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'.
[  398.994990][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'.
[  399.048395][T24049] gretap0: left promiscuous mode
[  399.052559][T24049] erspan0: left allmulticast mode
[  399.076672][T24049] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  399.086126][   T24] lo speed is unknown, defaulting to 1000
[  399.090512][   T24] syz2: Port: 1 Link ACTIVE
[  399.153861][T24060] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.5290'.
[  399.186120][T24062] syzkaller1: entered promiscuous mode
[  399.194923][T24062] syzkaller1: entered allmulticast mode
[  399.299903][T24070] Unsupported ieee802154 address type: 0
[  399.302824][T24067] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5293'.
[  399.315814][T24067] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5293'.
[  399.319605][T24068] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5293'.
[  399.416213][T24067] lo speed is unknown, defaulting to 1000
[  399.420144][T24074] nbd: must specify an index to disconnect
[  399.522737][T24083] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5298'.
[  399.872042][T24117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5306'.
[  399.896722][T24117] batadv2: entered allmulticast mode
[  399.965203][T24122] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.5307'.
[  400.006584][T24126] netem: unknown loss type 0
[  400.012158][T24126] netem: change failed
[  400.145427][T24132] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.173621][T24133] 8021q: adding VLAN 0 to HW filter on device .`
[  400.176303][T24133] 8021q: adding VLAN 0 to HW filter on device team0
[  400.182692][T24133] tipc: Resetting bearer <ib:team0>
[  400.184879][T24133] tipc: Resetting bearer <ib:team0>
[  400.194819][T24133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  400.211868][T24133] tipc: Resetting bearer <ib:team0>
[  400.214588][T24133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  400.222513][T24132] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.294998][T24138] pim6reg1: entered promiscuous mode
[  400.296743][T24138] pim6reg1: entered allmulticast mode
[  400.332214][T24132] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.432811][T24132] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  400.451094][T24140] gtp4: entered promiscuous mode
[  400.452834][T24140] gtp4: entered allmulticast mode
[  400.530446][T10362] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.542780][T10362] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.552328][T24145] validate_nla: 34 callbacks suppressed
[  400.552342][T24145] netlink: 'syz.2.5314': attribute type 12 has an invalid length.
[  400.568249][ T5867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.572631][ T5867] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.775599][T24159] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  400.935101][T24162] lo speed is unknown, defaulting to 1000
[  401.220248][T24191] netlink: 'syz.2.5326': attribute type 10 has an invalid length.
[  401.341321][T24198] netlink: 'syz.2.5328': attribute type 10 has an invalid length.
[  401.435891][T24204] netlink: 'syz.2.5329': attribute type 1 has an invalid length.
[  401.472629][T24206] nbd: must specify an index to disconnect
[  401.592542][T24211] netlink: 'syz.1.5332': attribute type 1 has an invalid length.
[  401.595626][T24210] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  401.598223][T24211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.750347][T24222] netlink: 'syz.2.5336': attribute type 1 has an invalid length.
[  401.816388][T24220] lo speed is unknown, defaulting to 1000
[  402.020656][T24227] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  402.164868][T24245] netlink: 'syz.1.5343': attribute type 96 has an invalid length.
[  402.473452][T24270] A link change request failed with some changes committed already. Interface gre7 may have been left with an inconsistent configuration, please check.
[  402.714255][T24297] ip_vti0: Master is either lo or non-ether device
[  402.863140][T24308] bridge0: port 1(batadv3) entered blocking state
[  402.865856][T24308] bridge0: port 1(batadv3) entered disabled state
[  402.868939][T24308] batadv3: entered allmulticast mode
[  402.872659][T24308] batadv3: entered promiscuous mode
[  403.018143][T24311] lo speed is unknown, defaulting to 1000
[  403.122429][T24310] lo speed is unknown, defaulting to 1000
[  403.219470][T24331] openvswitch: netlink: Message has 16 unknown bytes.
[  403.227995][T24331] netlink: 'syz.1.5365': attribute type 8 has an invalid length.
[  403.377666][ T5867] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  403.380782][ T5867] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  403.480928][T24343] xt_l2tp: missing protocol rule (udp|l2tpip)
[  403.483129][T24340] netlink: 'syz.1.5368': attribute type 1 has an invalid length.
[  403.485563][T24340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.915822][T24355] __nla_validate_parse: 27 callbacks suppressed
[  403.915831][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5373'.
[  403.983897][T24361] ipip4: entered promiscuous mode
[  403.986106][T24361] ipip4: entered allmulticast mode
[  404.221428][T24376] xt_ecn: cannot match TCP bits for non-tcp packets
[  404.231993][T24376] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.241228][T24378] tap0: tun_chr_ioctl cmd 2147767521
[  404.290462][T24376] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.361784][T24376] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.457365][T24376] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.470499][T24384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5382'.
[  404.474186][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5382'.
[  404.477089][T24384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5382'.
[  404.485851][T24384] ipip3: entered promiscuous mode
[  404.488449][T24384] ipip3: entered allmulticast mode
[  404.574395][ T5870] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.577149][ T5870] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.591331][ T5870] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.603195][ T5870] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.621552][T24400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5385'.
[  404.698894][T24414] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.5389'.
[  404.702063][T24413] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.5389'.
[  404.723655][T24400] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  404.738011][T24400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5385'.
[  404.755941][T24418] netlink: 'syz.0.5390': attribute type 4 has an invalid length.
[  404.759713][T24418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5390'.
[  404.792068][T24425] bond31: option all_slaves_active: invalid value (13)
[  404.795181][T24425] bond31 (unregistering): Released all slaves
[  404.882215][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'.
[  404.979118][T24444] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  405.105485][T24440] lo speed is unknown, defaulting to 1000
[  405.733812][T24463] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  406.032703][T24481] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.099682][T24481] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.217040][T24481] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.226202][T24494] : renamed from vlan0
[  406.269764][T24481] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.325811][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.341833][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.366780][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.386075][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.700123][T24520] netlink: 'syz.2.5416': attribute type 12 has an invalid length.
[  406.703313][T24520] netlink: 'syz.2.5416': attribute type 12 has an invalid length.
[  406.706187][T24520] netlink: 'syz.2.5416': attribute type 12 has an invalid length.
[  406.815124][T24526] team0: Refused to change device type
[  406.882888][T24530] netlink: 'syz.0.5418': attribute type 2 has an invalid length.
[  406.886206][T24530] netlink: 'syz.0.5418': attribute type 9 has an invalid length.
[  406.896994][T24530] vlan0: entered promiscuous mode
[  406.901791][T24530] vlan0: entered allmulticast mode
[  407.010464][T24536] netlink: 'syz.1.5421': attribute type 8 has an invalid length.
[  424.386800][T24554] netlink: 'syz.1.5424': attribute type 1 has an invalid length.
[  424.399908][T24554] bond31: entered promiscuous mode
[  424.400876][T24559] __nla_validate_parse: 12 callbacks suppressed
[  424.400885][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'.
[  424.401879][T24554] 8021q: adding VLAN 0 to HW filter on device bond31
[  424.413103][T24558] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  424.462798][T24561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5426'.
[  424.608658][T24569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5427'.
[  424.646931][T13628] smc: removing ib device syz1
[  424.706170][T24565] team0: Refused to change device type
[  424.727425][T24570] bond44: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.732625][T24570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  424.739755][ T5853] ==================================================================
[  424.742528][ T5853] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  424.745256][ T5853] Read of size 8 at addr ffff88811f6f22f0 by task kworker/1:3/5853
[  424.748397][ T5853] 
[  424.749678][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  424.749694][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  424.749703][ T5853] Workqueue: events smc_ib_port_event_work
[  424.749726][ T5853] Call Trace:
[  424.749732][ T5853]  <TASK>
[  424.749737][ T5853]  dump_stack_lvl+0xe8/0x150
[  424.749756][ T5853]  print_report+0xba/0x230
[  424.749767][ T5853]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  424.749792][ T5853]  kasan_report+0x117/0x150
[  424.749807][ T5853]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  424.749825][ T5853]  __ethtool_get_link_ksettings+0x5e/0x170
[  424.749840][ T5853]  ib_get_eth_speed+0x180/0x7f0
[  424.749856][ T5853]  ? rxe_query_port+0x7e/0x3d0
[  424.749868][ T5853]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  424.749884][ T5853]  ? do_raw_spin_unlock+0x4d/0x210
[  424.749903][ T5853]  rxe_query_port+0x93/0x3d0
[  424.749917][ T5853]  ib_query_port+0x170/0x830
[  424.749932][ T5853]  smc_ib_port_event_work+0x15a/0x940
[  424.749948][ T5853]  ? process_scheduled_works+0xa0f/0x17a0
[  424.749958][ T5853]  ? process_scheduled_works+0xa0f/0x17a0
[  424.749968][ T5853]  process_scheduled_works+0xaec/0x17a0
[  424.749984][ T5853]  ? __pfx_process_scheduled_works+0x10/0x10
[  424.749992][ T5853]  ? do_raw_spin_lock+0x12b/0x2f0
[  424.750005][ T5853]  ? assign_work+0x3d3/0x440
[  424.750015][ T5853]  worker_thread+0x89f/0xd90
[  424.750032][ T5853]  kthread+0x726/0x8b0
[  424.750048][ T5853]  ? __pfx_worker_thread+0x10/0x10
[  424.750083][ T5853]  ? __pfx_kthread+0x10/0x10
[  424.750099][ T5853]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.750110][ T5853]  ? __pfx_kthread+0x10/0x10
[  424.750121][ T5853]  ret_from_fork+0x51b/0xa40
[  424.750132][ T5853]  ? __pfx_ret_from_fork+0x10/0x10
[  424.750140][ T5853]  ? __switch_to+0xc82/0x1410
[  424.750155][ T5853]  ? __pfx_kthread+0x10/0x10
[  424.750166][ T5853]  ret_from_fork_asm+0x1a/0x30
[  424.750184][ T5853]  </TASK>
[  424.750188][ T5853] 
[  424.825806][ T5853] Allocated by task 5805:
[  424.827490][ T5853]  kasan_save_track+0x3e/0x80
[  424.829436][ T5853]  __kasan_kmalloc+0x93/0xb0
[  424.831319][ T5853]  __kvmalloc_node_noprof+0x59a/0x8d0
[  424.833518][ T5853]  alloc_netdev_mqs+0xa6/0x11b0
[  424.835507][ T5853]  rtnl_create_link+0x31f/0xd70
[  424.837501][ T5853]  rtnl_newlink_create+0x277/0xb70
[  424.839542][ T5853]  rtnl_newlink+0x1666/0x1be0
[  424.841470][ T5853]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  424.843494][ T5853]  netlink_rcv_skb+0x232/0x4b0
[  424.845454][ T5853]  netlink_unicast+0x80f/0x9b0
[  424.847382][ T5853]  netlink_sendmsg+0x813/0xb40
[  424.849296][ T5853]  __sock_sendmsg+0x21c/0x270
[  424.851192][ T5853]  __sys_sendto+0x3c0/0x550
[  424.853045][ T5853]  __x64_sys_sendto+0xde/0x100
[  424.855003][ T5853]  do_syscall_64+0xe2/0xf80
[  424.856883][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.859311][ T5853] 
[  424.860319][ T5853] Freed by task 24561:
[  424.861988][ T5853]  kasan_save_track+0x3e/0x80
[  424.863925][ T5853]  kasan_save_free_info+0x46/0x50
[  424.865972][ T5853]  __kasan_slab_free+0x5c/0x80
[  424.867916][ T5853]  kfree+0x1be/0x650
[  424.869430][ T5853]  device_release+0x9e/0x1d0
[  424.871280][ T5853]  kobject_put+0x228/0x560
[  424.873110][ T5853]  netdev_run_todo+0xc75/0xde0
[  424.875055][ T5853]  rtnl_dellink+0x6a7/0x820
[  424.876894][ T5853]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  424.878894][ T5853]  netlink_rcv_skb+0x232/0x4b0
[  424.880850][ T5853]  netlink_unicast+0x80f/0x9b0
[  424.882787][ T5853]  netlink_sendmsg+0x813/0xb40
[  424.884701][ T5853]  __sock_sendmsg+0x21c/0x270
[  424.886562][ T5853]  ____sys_sendmsg+0x4d7/0x810
[  424.888510][ T5853]  ___sys_sendmsg+0x2a5/0x360
[  424.890440][ T5853]  __x64_sys_sendmsg+0x1bd/0x2a0
[  424.892442][ T5853]  do_syscall_64+0xe2/0xf80
[  424.894311][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.896652][ T5853] 
[  424.897636][ T5853] The buggy address belongs to the object at ffff88811f6f2000
[  424.897636][ T5853]  which belongs to the cache kmalloc-cg-4k of size 4096
[  424.902742][ T5853] The buggy address is located 752 bytes inside of
[  424.902742][ T5853]  freed 4096-byte region [ffff88811f6f2000, ffff88811f6f3000)
[  424.907111][ T5853] 
[  424.907975][ T5853] The buggy address belongs to the physical page:
[  424.910576][ T5853] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f6f0
[  424.914089][ T5853] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  424.917355][ T5853] memcg:ffff888112543b81
[  424.919098][ T5853] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  424.922045][ T5853] page_type: f5(slab)
[  424.923688][ T5853] raw: 017ff00000000040 ffff88810004b500 ffffea000481f200 dead000000000002
[  424.926996][ T5853] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888112543b81
[  424.930439][ T5853] head: 017ff00000000040 ffff88810004b500 ffffea000481f200 dead000000000002
[  424.933848][ T5853] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888112543b81
[  424.937232][ T5853] head: 017ff00000000003 ffffea00047dbc01 00000000ffffffff 00000000ffffffff
[  424.940563][ T5853] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  424.943932][ T5853] page dumped because: kasan: bad access detected
[  424.946445][ T5853] page_owner tracks the page as allocated
[  424.948808][ T5853] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5805, tgid 5805 (syz-executor), ts 55920828895, free_ts 51607749806
[  424.956699][ T5853]  post_alloc_hook+0x228/0x280
[  424.958256][ T5853]  get_page_from_freelist+0x24dc/0x2580
[  424.960451][ T5853]  __alloc_frozen_pages_noprof+0x18d/0x380
[  424.962695][ T5853]  alloc_pages_mpol+0x232/0x4a0
[  424.964566][ T5853]  allocate_slab+0x86/0x3a0
[  424.966390][ T5853]  ___slab_alloc+0xd82/0x1760
[  424.968317][ T5853]  __slab_alloc+0x65/0x100
[  424.970055][ T5853]  __kmalloc_noprof+0x46c/0x7e0
[  424.972097][ T5853]  __register_sysctl_table+0x72/0x1340
[  424.974273][ T5853]  __addrconf_sysctl_register+0x331/0x4d0
[  424.976492][ T5853]  addrconf_sysctl_register+0x168/0x1c0
[  424.978727][ T5853]  ipv6_add_dev+0xd26/0x13a0
[  424.980577][ T5853]  addrconf_notify+0x771/0x1050
[  424.982594][ T5853]  notifier_call_chain+0x19d/0x3a0
[  424.984655][ T5853]  register_netdevice+0x1637/0x1ae0
[  424.986742][ T5853]  virt_wifi_newlink+0x428/0x860
[  424.988755][ T5853] page last free pid 5731 tgid 5731 stack trace:
[  424.991294][ T5853]  free_unref_folios+0xd9e/0x14d0
[  424.993349][ T5853]  folios_put_refs+0x58a/0x680
[  424.995229][ T5853]  free_pages_and_swap_cache+0x2e7/0x5b0
[  424.997469][ T5853]  tlb_flush_mmu+0x3a8/0x680
[  424.999330][ T5853]  tlb_finish_mmu+0xf9/0x230
[  425.001268][ T5853]  vms_clear_ptes+0x44d/0x570
[  425.003130][ T5853]  vms_complete_munmap_vmas+0x205/0x890
[  425.005386][ T5853]  do_vmi_align_munmap+0x3b7/0x4b0
[  425.007447][ T5853]  do_vmi_munmap+0x252/0x2d0
[  425.009340][ T5853]  __vm_munmap+0x22c/0x3d0
[  425.011137][ T5853]  __x64_sys_munmap+0x60/0x70
[  425.013032][ T5853]  do_syscall_64+0xe2/0xf80
[  425.014888][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.017285][ T5853] 
[  425.018221][ T5853] Memory state around the buggy address:
[  425.020406][ T5853]  ffff88811f6f2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.023570][ T5853]  ffff88811f6f2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.026755][ T5853] >ffff88811f6f2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.030000][ T5853]                                                              ^
[  425.033097][ T5853]  ffff88811f6f2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.036266][ T5853]  ffff88811f6f2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  425.039489][ T5853] ==================================================================
[  425.059252][ T5853] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  425.062230][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  425.065928][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.069789][ T5853] Workqueue: events smc_ib_port_event_work
[  425.072095][ T5853] Call Trace:
[  425.073441][ T5853]  <TASK>
[  425.074652][ T5853]  vpanic+0x1e0/0x670
[  425.076239][ T5853]  panic+0xc5/0xd0
[  425.077723][ T5853]  ? __pfx_panic+0x10/0x10
[  425.079486][ T5853]  ? preempt_schedule_thunk+0x16/0x30
[  425.081379][ T5853]  ? preempt_schedule_thunk+0x16/0x30
[  425.083462][ T5853]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  425.085811][ T5853]  check_panic_on_warn+0x89/0xb0
[  425.087772][ T5853]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  425.090053][ T5853]  end_report+0x6f/0x140
[  425.091714][ T5853]  kasan_report+0x128/0x150
[  425.093528][ T5853]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  425.095920][ T5853]  __ethtool_get_link_ksettings+0x5e/0x170
[  425.098254][ T5853]  ib_get_eth_speed+0x180/0x7f0
[  425.100190][ T5853]  ? rxe_query_port+0x7e/0x3d0
[  425.102091][ T5853]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  425.104202][ T5853]  ? do_raw_spin_unlock+0x4d/0x210
[  425.106232][ T5853]  rxe_query_port+0x93/0x3d0
[  425.107960][ T5853]  ib_query_port+0x170/0x830
[  425.109768][ T5853]  smc_ib_port_event_work+0x15a/0x940
[  425.111873][ T5853]  ? process_scheduled_works+0xa0f/0x17a0
[  425.114157][ T5853]  ? process_scheduled_works+0xa0f/0x17a0
[  425.116379][ T5853]  process_scheduled_works+0xaec/0x17a0
[  425.118542][ T5853]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.120719][ T5853]  ? do_raw_spin_lock+0x12b/0x2f0
[  425.122471][ T5853]  ? assign_work+0x3d3/0x440
[  425.124293][ T5853]  worker_thread+0x89f/0xd90
[  425.126146][ T5853]  kthread+0x726/0x8b0
[  425.127772][ T5853]  ? __pfx_worker_thread+0x10/0x10
[  425.129730][ T5853]  ? __pfx_kthread+0x10/0x10
[  425.131585][ T5853]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.133531][ T5853]  ? __pfx_kthread+0x10/0x10
[  425.135319][ T5853]  ret_from_fork+0x51b/0xa40
[  425.137202][ T5853]  ? __pfx_ret_from_fork+0x10/0x10
[  425.139259][ T5853]  ? __switch_to+0xc82/0x1410
[  425.141207][ T5853]  ? __pfx_kthread+0x10/0x10
[  425.143084][ T5853]  ret_from_fork_asm+0x1a/0x30
[  425.145031][ T5853]  </TASK>
[  425.147156][ T5853] Kernel Offset: disabled
[  425.148948][ T5853] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:50:07  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000f RBX=0000000000000000 RCX=0000000000000007 RDX=0000000000020007
RSI=0000000000000007 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90009b1f208
R8 =ffffffff82351ca4 R9 =ffffffff8e35a360 R10=dffffc0000000000 R11=fffff940008c2149
R12=0000000000000000 R13=0000000000000002 R14=ffff88816db33a80 R15=ffff88816db345b0
RIP=ffffffff819f1675 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f337aadc6c0 ffffffff 00c00000
GS =0000 ffff88818e31c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557274021988 CR3=00000001116e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90005287190
R8 =ffff8881094a8237 R9 =1ffff11021295046 R10=dffffc0000000000 R11=ffffffff852547e0
R12=dffffc0000000000 R13=ffffffff99df89e6 R14=ffffffff9a10d2a0 R15=0000000000000000
RIP=ffffffff8525485c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a991c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34f069 CR3=000000000e146000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007fb8c074d560
XMM02=00007fb8bfbe4488 00007fb8bfbe44b8 XMM03=00007fb8bfbe44a0 00007fb8bfbe4480
XMM04=00007fb8c074d020 00007fb8bfbe4460 XMM05=00007fb8bfbe4470 00007fb8bfbe44b0
XMM06=00007fb8bfbe4498 00007fb8bfbe4468 XMM07=00007fb8bfbe44a0 00007fb8bfbe4480
XMM08=325220382d70663d 3152203a31656d61 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
