last executing test programs:

1.418452143s ago: executing program 0 (id=1256):
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x12, 0xffffffffffffff00, &(0x7f00000000c0)="3fa800"/18, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

1.41655277s ago: executing program 1 (id=1257):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0x123}]}]}]}, 0x28}], 0x1}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202400, 0x0)
write$tun(r8, &(0x7f0000000080)={@val={0x0, 0xf6}, @void, @x25={0x1, 0x4, 0xff, "128d5ba5bc61783efb9d9e1fa1c26db1a1a4e9ff029976b728640cecf65e83b97e5fd84b17cb0f19f3ac591be158292b343508a7d6c0001ddd5ab512d0167f1069c6286c5f95909de295bb8ea4fe47d0700d3aa6977c9fabd19ba3a304daa250d88076af38198bb35665f5c7d47cccea559f9e2558f44e9494769650e0d2f7b4b6ce35523ae01eb431"}}, 0x90) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async)
epoll_create1(0x80000)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r10, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

1.370530686s ago: executing program 0 (id=1258):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xfff8, @local, 'hsr0\x00'}}, 0x1e)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x40)
socketpair(0x1e, 0x0, 0x7fffffff, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @local}, 0x8)
r5 = accept4(r1, 0x0, 0x0, 0x80800)
shutdown(r1, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
bind$alg(r5, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58)
listen(r6, 0x0)
r7 = accept(r6, 0x0, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r7}, 0x20)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r10)
sendmsg$DEVLINK_CMD_TRAP_GET(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x40000)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r8, &(0x7f0000000340)="b4c7fc70c6a3a39862785a5459a27f6f50d4633083e27f0453a0122497fb2ac66cd1350c1a311192f516593c1176d1ea0717715fa5dfa4ecaca48e4f6e48ae6ea604c231011618291caadced41ebb3a8f950d9fa52dd93220645a74e20a84744f7b9d42560508b6eea71664c8e5904f6e90f96cc4c49f8e18c8aa7721e83756cbe4293d71b7f2b", &(0x7f0000000100)=""/178, 0x4}, 0x20)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)

1.310297033s ago: executing program 1 (id=1260):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000000100000d000000000000000004000000000000000200000d0000000000000000000000000000000000000000000000000000000d000400000000000001000084000000000000000004"], &(0x7f00000001c0)=""/13, 0x6e, 0xd, 0x1}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

1.309484035s ago: executing program 1 (id=1261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x2b, 0x5, 0x9)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r7 = socket(0x1, 0x803, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.140707377s ago: executing program 1 (id=1263):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010829bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000100854a37390bd4b172fa6f6791c6ec0420040008000480259c493ac8ec431e042ff180a48abf833fe74b731265ce5879634e5dcf9dd995e5f9b2deb667a3578296f5f3eb141f453616230649667f360c63ede0b919a57c16fc17c0d3e3d891fc91ab7e17a56687963439c09493d2f3a43d030014bb67f88bde9af67a0dee87d0f045c2d7f161f6afe74f31bced25ea6070f1ba14adc65a7bd7443876b5e4adc10904de7e5ecf74603c17db77495909614c8a932c378dee086a4ec2cbc99d"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac0000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25190000000c00018008000300030000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="0802030001000000140002007653be3c8a61647600080001ac", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x8844)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$sock(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000005)
close(r4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xcd)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005200ffff0000000000000000020000001d6c1912f6b27df1a210f5a5df5f90ed43acf551acaf6438f7f63b8be6f40ce87abd3c6ab6aa10e379702c13f542da8527675126d533d0ff4d89285438039c4a618d49ef5aac1a95715ad988b71a82dff20bace5709fd10b"], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffffffffffff, "f832237f1cd17429d16cae1e38db9d56ef51749963da04343d5bf7a55163ddee", 0xfffffffa, 0x2, 0x1, 0x3}, 0x3c)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r7})

627.914348ms ago: executing program 1 (id=1269):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r1, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0xf3, 0x4, 0x200, 0xffffffffffffffff, 0x655c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) (async)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r5}, 0x18) (async)
getpeername$netlink(r3, 0x0, &(0x7f0000000080))
sendmsg$IPSET_CMD_DESTROY(r3, 0x0, 0x40810)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r6)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, 0x0, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010829bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0001000004200480080004000005000008001b2fe76cda4d33326a0b92b05c130000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

514.926596ms ago: executing program 2 (id=1271):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x54)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r2}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
close(r4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r6, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
clock_gettime(0x3, &(0x7f00000002c0))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))

471.168676ms ago: executing program 0 (id=1272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@delqdisc={0x0, 0x25, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xe, 0xf}, {0xf, 0x9}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{}, {0x0, 0x2, 0x4}}, @qdisc_kind_options=@q_pfifo_fast, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x81}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0xec}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0x1, 0x6, 0x85f, 0x1, 0x1ff, 0x38f7}}}, {{0x0, 0x1, {0x9, 0x73, 0x8, 0x7, 0x2, 0x57, 0x7}}, {0x0, 0x2, [0x6]}}, {{0x0, 0x1, {0x2, 0xf2, 0x2261, 0x9b, 0x0, 0x7, 0x7}}, {0x0, 0x2, [0xffff, 0x825, 0xd2c]}}, {{0x0, 0x1, {0x3, 0x0, 0xfffa, 0x7, 0x3, 0x401, 0x4}}, {0x0, 0x2, [0xb, 0x82, 0x7, 0x100, 0x1, 0x1]}}, {{0x0, 0x1, {0xd6, 0x38, 0x8, 0x862, 0x0, 0x7b, 0xe373}}, {0x0, 0x2, [0x7ff, 0x4, 0x2, 0x7]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x4, 0x7d, 0xffff, 0x81, 0x1, 0x5, 0x101}}, {0x0, 0x2, [0x1cd4, 0xd1, 0x0, 0x8]}}, {{0x0, 0x1, {0x2, 0xb7, 0x200, 0x3, 0x0, 0xc, 0x2}}, {0x0, 0x2, [0x7, 0xfffc, 0x7, 0x3ba7]}}, {{0x0, 0x1, {0x7, 0x0, 0x84e, 0xf, 0x1, 0x4, 0x1}}, {0x0, 0x2, [0xa33, 0x6]}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x4}]}, 0x18}}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x1, 0x7, 0x45, @rand_addr=' \x01\x00', @private2, 0x20, 0x7800, 0x9}})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00'})
writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249686a289cdcc06d3d3dc082d8db8c4621a113177518601e882f2c04", 0x54}], 0x3)
socket$nl_generic(0x10, 0x3, 0x10)

401.120962ms ago: executing program 0 (id=1273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000005c0)=ANY=[], 0x8)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r6 = socket$xdp(0x2c, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f69667465060000000000000000000000000000050003"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840)
sendmsg$xdp(r6, &(0x7f00000003c0)={&(0x7f0000000100)={0x2c, 0x8, r9, 0x1f}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)}, {&(0x7f0000000280)="7c6d6d8fb489616137d9f8a6a78e451ba02df365f8df09c99160b88da39b9456365ac483c81d9f6fd11fc9998a6f7feb7b1b2ffd119ca39efd5fb066b3976ac708df4b7ec6f41fe6c6b600649f168a5c881e9354a995ffb606e193b04051fdbd34a4cd247fa03d6cc7c957bebd167c", 0x6f}, {&(0x7f0000000300)}, {&(0x7f0000000440)="ce272257a4fb68e93c55f9d7cf9150d2bcbae436316a0252c3596958a00c6e62cfb60fa7f05f1f569ee7157cff56ae9864c8fae23e6f637aba30fc0007c64c1fcc0602adcba63f23", 0x48}, {&(0x7f0000000340)}], 0x5, 0x0, 0x0, 0x24080000}, 0x40000c4)
sendmmsg$inet6(r5, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48800)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
write$tun(r5, &(0x7f0000000180)={@void, @val={0x3, 0x4, 0x2, 0x2, 0x5, 0x34}, @mpls={[{0x7ff, 0x0, 0x1}, {0x9, 0x0, 0x1}], @ipv4=@generic={{0x8, 0x4, 0x1, 0x29, 0x4b, 0x8068, 0x0, 0x0, 0x73, 0x0, @loopback, @local, {[@noop, @cipso={0x86, 0x9, 0x1d46bdce5c3d396d, [{0x5, 0x3, "c0"}]}]}}, "97662b5d49718f4a7fbbdc309bb009aa49dc1700d96b735893ad01b201ac708d248c32a7624f1372cd44b4"}}}, 0x5d)
shutdown(r5, 0x2)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

340.918051ms ago: executing program 2 (id=1274):
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32)
r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) (async)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000640)=@req={0xd5, 0xfe, 0x1000043, 0x2}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000500)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004074}, 0x800) (async)
bind$tipc(r4, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10)
r10 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r11 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64)
r12 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000380)=[{r11, 0x4}], 0x1, 0x0, 0x0, 0x0) (async)
readv(r10, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)

339.838418ms ago: executing program 2 (id=1275):
socket$pppoe(0x18, 0x1, 0x0) (async)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'vcan0\x00'}}, 0x1e)
ioctl$sock_SIOCGIFINDEX(r0, 0x80047453, 0x0)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @multicast, 'netpci0\x00'}})

279.748509ms ago: executing program 2 (id=1276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000120a00000000000000000000010000010c000640000000000000000528000000000a05000000000000000000020000040c0004400000000000000002080002400000a74a131300001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040004)
r1 = epoll_create(0x1)
r2 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000005c0))
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)
r4 = epoll_create1(0x80000)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
close(r5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000240)={0xa0000000})
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000006c0))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000280)={0x2200201d})
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x2, {0x2, 0x5e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 'vlan0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x009\x00\x00\x00'], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=<r8=>0xffffffffffffffff, 0x3c, 0x1, 0x3cab, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
accept(r2, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000700)=0x98)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e20, 0x1, @local, 0x8}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}], 0x38)
socket$packet(0x11, 0x2, 0x300)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000740)={0x18, 0x2, {0x24, @empty, 'wlan0\x00'}}, 0x1e)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000340)='@-\x00'}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="4eb2ac5cd4ecd96c8b86849dc6b4bfbe29ff8ec573f496fadbb5449e5a9793a01601ee3435bc1cb8653dff244ca6de", @ANYRES32=r8, @ANYBLOB="0800100034000000", @ANYRES16=r8, @ANYRES8=r4], 0x20)

225.149724ms ago: executing program 2 (id=1277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

223.595709ms ago: executing program 2 (id=1278):
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, 0xffffffffffffffff, 0xfffff000)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f3eb05c99df80c0011dd0642ca7c400c9960564a6689b94d77ce4afe32d69eee0c470e01cf4f67f6e286d38ef6bff179ba96ed519e959a1cbad1", 0xad}], 0x1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x6, 0x3, 0x0, 0x1, [@generic="9e71"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r0, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)

142.488068ms ago: executing program 0 (id=1279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40884)

141.346009ms ago: executing program 0 (id=1280):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)="f4c7b9ecd9f534f9b85b21d9de308fdeec4573c0c7e729e2c03033c9e246735dc6b3378019fddd06aa88e039f6ee4b2397089b61039e296a3840908dc8c85e74de5fd8a9a2edacec3b510066443c5952fd07ca6335e32e155b40003dbf772dd4d6994b727a084e9fe0e181e303849fe36085ff74b5fc29d4e2612bd336a54ab9a13f7c1fdbc245e1d1fe6c88eba6013311990a74", 0x94}, {&(0x7f0000000600)="d3e1f6ac16485082799e7157477ac8b33548d52a33e5e4c284af8c941e1db11a8edc18eac4108812dd392bc4727f30d9ea92a50f36c44f26fbd39461b9ccf37b43b6d6b860cee0decb9bec0a1e28bce5b5608a12ac2071369e41d42e50c794299518a378e7d97ec41112bcaa4635c50c73e5f201a7ea50b302723828fdb4aaa2a1377279c64d00fc78e41ae1552f22379256fb63122bbcd183851f37015e397b81c43de839690531d6ea7fe9398640e384137ddbd5eb03aa31ea9f9cf372bd6a449e61bf6706470ff8257bc939dd13f932bed77e", 0xd4}, {&(0x7f0000000980)="a39139edcb62c3c2fcd5740e787d94cc9ecfeecb63dcf99913a8cc2ee292843c9bbb7e799cabc385cde483eda7703cb2f9595c6f4d1c6c065011470413d886a7239d5171f0f1316660ca854eed1bcf261928a17967996eb09202235547e867f491e0ceee3e5d27ab4183ea1606990d6890fb958961cb12c1d2b20a4aeec12e99e495889ad2683f0e5a342cee7ee0fe953dd3c672a210d8adb56b2874cae0320bdaa42307451ab628c66c090fb37180f07b01a5a2cb78c362d1badfd6de852ceb11a0f3c7", 0xc4}, {&(0x7f0000000a80)="865e266f6896585fa71e8a5ebeac8ca7ed9032f0cc56a9758f96d3533d3931e7fd1883888afdecb8f4979ef8a38b75e8a7b7229fc03a9d979626fc3e983b912006f5b962f1a061f348226945716de45fa0c9a75d54476e6bdff036d7892d667a22044be85dbcaa5be2b07a1a56223e996f7109368353ebad9605f76126d283009a1bab524842d250b37bfa379ce46bf97f0641ac0731f1a06f0a79aea0ed1c95978475644f287d8eb2ad321f4b0e19206c8d1282579ef23f0e9ca2959ffd6533e794b3a9b7603611b1128307dfe24c31f344a209572264c4c019ec605b91c0c2f33b92831239da6845e914d0e77ac44a8f135911194577c1a7ec", 0x7f}, {&(0x7f0000000280)="5c976c3fa68791", 0x7}, {&(0x7f0000000400)="660bb7ac8cfde5497fdf3cbfb08115b7ca9645605e8d0e7321d183a9d669b42f2839a1a890fd846ef6f471fe768932e83c6cf70ad621a13f208b48ee951987889e930e0b1620ed6ab357994bb4c604cb1dc5cba7897c73cc1ddb228ee4468db1749cb5dab6c0c3b3a65da617c9c333a8ad05139b19b74995fb04b4106af6ea5a33bc8e2a722a60af96f9cdda82d1f51797f345b5e702ffa72df5557a4f2484c5bd3e3ff945117ce6b6a83f51", 0xac}, {&(0x7f0000000b80)="adba296d2cabbcf7d29eee5111ff2ac7dba43968f811e3bc6a6b83f9dcb8bc90e7de354e63f4f7d013b392bdc9f1f773f28bdde9ba65c7f4ff7054f55fe7cafba1cff926b8030f45a2708b13fd6f18b253df51a281d74cd36e593ef1b1d27f5966454ba140475f652558d91368ad2f61134c07690bd2019ee720d73cab1ea149e73b03dec5b0d5183a96bd607a0d2afbb3d9b7c29dada19964a2f14628c5739fb373b03401d237e3e8f0127e08b44a1f63733c4f2a6535091ab9ae0e125a3aef03400a700917eff1aab0bfe12fa1c7b0eb9d45a30c3fa42c323db32754d0a59482", 0xe1}, {&(0x7f0000000880)="cdc3aebc80b58bb32fcc2333e85fb95d8b2655e65e47f79cb2cf9693efa5ad7516827278f708baf428af60f03d906aa38883cefa904210f7889453167472a931ca1fe466bc04872e4b24fa8fe09b592f8500d862c993b9d36ad022e813629657975b53e48996f5ca5aaf104889537d2c46031129660efd9e95550e0af1627cf33821d5b10755edf29a6833b66a1757cea91f29ab97189c7c1dbfcf9325d466f3c96663c260da5c6abfbe587bb22c2417afad2a9a62c9aa1672", 0xb9}, {&(0x7f0000000c80)="bc5ac506ada5093805a34879d7c0fd1f06bf2b5cc0feb78062c72dd12e89c902eafab89caeb874a82beb3c57e57c0e6a183de2b300079b5de89e22bd58b8d4afec57944f792de0e44cbd85a2bc6d572d3216ff65d0edb1186fd84ed768f6d0ef50ae2b61e6089a21043a6a8681f85d47078c5b882bd745261f55afd1bdebe3089e42a305bc3fcc64f695f621627e7fad4a3100d4a4f57f93fcb6d162b11d1a1126", 0xa1}], 0xa}, 0x840)
recvmsg$unix(r1, 0x0, 0x10102)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
unshare(0x22020600)
unshare(0x40000200)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2000a620a5da06000000020300"/22], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040))
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x15c98180}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0xd0, 0x0, 0x409, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe826539a35be4c5497dfac4635244d64675239174659c36"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "390d8eb5b5957fc8f577ea9b678b375e339995e2445dff43"}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x8001}, 0x10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r7, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080)

0s ago: executing program 1 (id=1281):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000001cc0)='cpuset.cpus\x00', 0x2, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r4, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/19, 0x13}], 0x6, &(0x7f0000000780)=[{0xc8, 0x0, 0x0, ""/182}, {0xe8, 0x0, 0x0, ""/216}, {0x68, 0x0, 0x0, ""/83}, {0x1010, 0x0, 0x0, ""/4096}, {0x110, 0x0, 0x0, ""/252}, {0x10}, {0x108, 0x0, 0x0, ""/248}, {0x70, 0x0, 0x0, ""/93}, {0x60, 0x0, 0x0, ""/76}], 0x1520, 0x12020}, 0x38, 0x0)
poll(&(0x7f0000000580)=[{r1, 0x300}, {r3, 0x400}, {r0, 0x101}], 0x3, 0x8000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

: unexpected cc 0x1001 length: 249 > 9
[   47.151640][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.156157][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.395811][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   47.440943][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   47.539639][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   47.560668][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.564676][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.567765][ T5851] bridge_slave_0: entered allmulticast mode
[   47.571670][ T5851] bridge_slave_0: entered promiscuous mode
[   47.600244][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.603256][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.606231][ T5851] bridge_slave_1: entered allmulticast mode
[   47.610055][ T5851] bridge_slave_1: entered promiscuous mode
[   47.638654][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.641664][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.645434][ T5855] bridge_slave_0: entered allmulticast mode
[   47.649172][ T5855] bridge_slave_0: entered promiscuous mode
[   47.653733][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.657081][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.660124][ T5855] bridge_slave_1: entered allmulticast mode
[   47.664071][ T5855] bridge_slave_1: entered promiscuous mode
[   47.680019][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.720812][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.744721][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.761775][ T5851] team0: Port device team_slave_0 added
[   47.783073][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.795535][ T5851] team0: Port device team_slave_1 added
[   47.807960][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.810407][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.812861][ T5858] bridge_slave_0: entered allmulticast mode
[   47.816455][ T5858] bridge_slave_0: entered promiscuous mode
[   47.841181][ T5855] team0: Port device team_slave_0 added
[   47.844242][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.847022][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.856293][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.861387][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.864456][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.867368][ T5858] bridge_slave_1: entered allmulticast mode
[   47.870440][ T5858] bridge_slave_1: entered promiscuous mode
[   47.881012][ T5855] team0: Port device team_slave_1 added
[   47.883927][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.886197][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.895686][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.911147][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.926853][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.937526][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.939921][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.949345][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.968686][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.970995][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.979777][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.997995][ T5858] team0: Port device team_slave_0 added
[   48.006503][ T5851] hsr_slave_0: entered promiscuous mode
[   48.008876][ T5851] hsr_slave_1: entered promiscuous mode
[   48.019536][ T5858] team0: Port device team_slave_1 added
[   48.069561][ T5855] hsr_slave_0: entered promiscuous mode
[   48.072796][ T5855] hsr_slave_1: entered promiscuous mode
[   48.077018][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   48.079404][ T5855] Cannot create hsr debugfs directory
[   48.082243][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.085679][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.095762][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.106328][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.108605][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.117685][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.194867][ T5858] hsr_slave_0: entered promiscuous mode
[   48.197278][ T5858] hsr_slave_1: entered promiscuous mode
[   48.199376][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   48.201210][ T5858] Cannot create hsr debugfs directory
[   48.333796][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.341793][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.355212][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.377738][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.424126][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.443549][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.448227][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.454982][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.495014][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.502065][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.512875][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.523952][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.645230][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.672238][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   48.677520][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.685568][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.702368][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.705081][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.716009][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   48.727509][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.729941][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.733836][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.736241][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.740443][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   48.767346][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.770384][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.781497][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.783964][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.797093][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.799595][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.881646][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.989742][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.025321][ T5851] veth0_vlan: entered promiscuous mode
[   49.037311][ T5851] veth1_vlan: entered promiscuous mode
[   49.041913][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.078561][ T5851] veth0_macvtap: entered promiscuous mode
[   49.084921][ T5851] veth1_macvtap: entered promiscuous mode
[   49.104435][   T55] Bluetooth: hci0: command tx timeout
[   49.104450][ T5239] Bluetooth: hci1: command tx timeout
[   49.110179][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.121476][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.127134][ T5858] veth0_vlan: entered promiscuous mode
[   49.132966][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.147998][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.151395][ T5858] veth1_vlan: entered promiscuous mode
[   49.166693][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.178445][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.181385][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.184765][ T5239] Bluetooth: hci2: command tx timeout
[   49.211219][ T5858] veth0_macvtap: entered promiscuous mode
[   49.219984][ T5855] veth0_vlan: entered promiscuous mode
[   49.237970][ T5858] veth1_macvtap: entered promiscuous mode
[   49.248745][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.252454][ T5855] veth1_vlan: entered promiscuous mode
[   49.254940][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.265864][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.279125][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.280694][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.281672][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.292868][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.304909][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.307877][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.319775][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.325425][ T5855] veth0_macvtap: entered promiscuous mode
[   49.340529][ T5855] veth1_macvtap: entered promiscuous mode
[   49.346462][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.374677][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.382729][ T5914] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   49.390791][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.395312][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.397897][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.411068][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.429260][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.432475][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.440067][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.454584][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.457702][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.498617][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.501173][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.541512][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.554937][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.630752][ T5932] pim6reg1: entered promiscuous mode
[   49.632624][ T5932] pim6reg1: entered allmulticast mode
[   49.707941][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.710932][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.793706][ T5947] tipc: Started in network mode
[   49.796198][ T5947] tipc: Node identity 0e68de03d01, cluster identity 4711
[   49.798557][ T5947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.807119][ T5947] erspan0: entered promiscuous mode
[   49.809377][ T5947] erspan0: entered allmulticast mode
[   49.836802][ T5947] tipc: Resetting bearer <eth:syzkaller0>
[   49.850471][ T5946] tipc: Disabling bearer <eth:syzkaller0>
[   49.947577][ T5959] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   50.129215][ T5973] Zero length message leads to an empty skb
[   50.138062][ T2287] IPVS: starting estimator thread 0...
[   50.143225][ T5973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15'.
[   50.235245][ T5976] IPVS: using max 79 ests per chain, 189600 per kthread
[   50.635251][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.639222][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.649477][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.652474][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.681020][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.684546][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.694908][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.21'.
[   50.846986][ T6018] syzkaller1: entered promiscuous mode
[   50.848898][ T6018] syzkaller1: entered allmulticast mode
[   50.871850][ T6021] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   50.928263][ T6018] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   51.183974][ T5239] Bluetooth: hci0: command tx timeout
[   51.184292][   T55] Bluetooth: hci1: command tx timeout
[   51.264150][   T55] Bluetooth: hci2: command tx timeout
[   51.881330][ T6042] vlan0: entered promiscuous mode
[   51.915566][ T6042] syz.0.32 (6042) used greatest stack depth: 21336 bytes left
[   51.957769][ T6049] netlink: 'syz.0.33': attribute type 10 has an invalid length.
[   51.973975][ T6049] team0: Device veth0_vlan failed to register rx_handler
[   52.034772][ T6049] syz.0.33 (6049) used greatest stack depth: 19768 bytes left
[   52.127987][ T6061] netlink: 'syz.2.39': attribute type 10 has an invalid length.
[   52.147223][ T6061] veth0_vlan: left promiscuous mode
[   52.149839][ T6061] veth0_vlan: entered promiscuous mode
[   52.153254][ T6061] team0: Device veth0_vlan failed to register rx_handler
[   52.374594][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.492012][ T6086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.496400][ T6086] syzkaller0: entered promiscuous mode
[   52.498632][ T6086] syzkaller0: entered allmulticast mode
[   52.511659][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[   52.517926][ T6085] tipc: Resetting bearer <eth:syzkaller0>
[   52.525152][ T6085] tipc: Disabling bearer <eth:syzkaller0>
[   52.594929][ T6089] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   52.848913][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.852477][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.937822][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.947272][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.063459][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.069591][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.077426][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.085464][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.139087][ T6121] netlink: 'syz.2.52': attribute type 10 has an invalid length.
[   53.142869][ T6121] veth0_vlan: left promiscuous mode
[   53.156618][ T6121] veth0_vlan: entered promiscuous mode
[   53.160352][ T6121] team0: Device veth0_vlan failed to register rx_handler
[   53.261109][ T6127] syzkaller1: entered promiscuous mode
[   53.265405][ T5239] Bluetooth: hci0: command tx timeout
[   53.267922][   T55] Bluetooth: hci1: command tx timeout
[   53.270924][ T6127] syzkaller1: entered allmulticast mode
[   53.344828][   T55] Bluetooth: hci2: command tx timeout
[   53.511618][ T6144] netlink: 'syz.1.59': attribute type 10 has an invalid length.
[   53.541716][ T6144] batman_adv: batadv0: Adding interface: team0
[   53.545096][ T6144] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.553721][ T6144] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   53.809586][ T6155] syzkaller1: entered promiscuous mode
[   53.811977][ T6155] syzkaller1: entered allmulticast mode
[   53.818088][ T6155] syzkaller1: left promiscuous mode
[   53.820449][ T6155] syzkaller1: left allmulticast mode
[   53.999488][ T6159] netlink: 'syz.0.65': attribute type 10 has an invalid length.
[   54.004331][ T6159] team0: Device veth0_vlan failed to register rx_handler
[   54.088722][ T6163] openvswitch: netlink: Flow key attr not present in new flow.
[   54.382922][ T6181] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   54.410740][ T6181] dummy0: entered promiscuous mode
[   54.417084][ T6181] bridge0: port 3(dummy0) entered blocking state
[   54.419823][ T6181] bridge0: port 3(dummy0) entered disabled state
[   54.422574][ T6181] dummy0: entered allmulticast mode
[   54.429960][ T6181] bridge0: port 3(dummy0) entered blocking state
[   54.432775][ T6181] bridge0: port 3(dummy0) entered forwarding state
[   54.477935][ T6181] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[   54.632224][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.966996][ T6222] tipc: Started in network mode
[   54.969142][ T6222] tipc: Node identity be89ad3b7e9e, cluster identity 4711
[   54.972351][ T6222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.977265][ T6224] syzkaller0: entered promiscuous mode
[   54.993143][ T6224] syzkaller0: entered allmulticast mode
[   55.015735][ T6222] __nla_validate_parse: 38 callbacks suppressed
[   55.015750][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[   55.022211][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[   55.032326][ T6221] tipc: Resetting bearer <eth:syzkaller0>
[   55.040232][ T6220] tipc: Resetting bearer <eth:syzkaller0>
[   55.054743][ T6220] tipc: Disabling bearer <eth:syzkaller0>
[   55.142276][ T6232] syzkaller1: entered promiscuous mode
[   55.166304][ T6232] syzkaller1: entered allmulticast mode
[   55.343991][   T55] Bluetooth: hci1: command tx timeout
[   55.344562][ T5239] Bluetooth: hci0: command tx timeout
[   55.369125][ T6243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.372545][ T6243] syzkaller0: entered promiscuous mode
[   55.375331][ T6243] syzkaller0: entered allmulticast mode
[   55.383313][ T6243] netlink: zone id is out of range
[   55.405329][ T6243] netlink: zone id is out of range
[   55.408305][ T6243] netlink: zone id is out of range
[   55.424468][ T5239] Bluetooth: hci2: command tx timeout
[   55.447429][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   55.460655][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[   55.477413][ T6242] tipc: Disabling bearer <eth:syzkaller0>
[   55.494564][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'.
[   55.533093][ T6252] warning: `syz.1.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.606356][ T6256] nbd: must specify at least one socket
[   55.671537][ T6261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.85'.
[   55.677171][ T6261] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   55.930019][ T6274] bridge0: port 4(erspan0) entered blocking state
[   55.933149][ T6274] bridge0: port 4(erspan0) entered disabled state
[   55.939664][ T6274] bridge0: port 4(erspan0) entered blocking state
[   55.943048][ T6274] bridge0: port 4(erspan0) entered forwarding state
[   55.951144][ T6274] bridge0: port 4(erspan0) entered disabled state
[   56.147497][ T6281] delete_channel: no stack
[   56.310116][ T6289] veth1_virt_wifi: entered promiscuous mode
[   56.342826][ T6289] veth1_virt_wifi: entered allmulticast mode
[   56.373850][ T6286] netlink: 'syz.0.90': attribute type 39 has an invalid length.
[   56.483856][ T6299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.910510][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.100'.
[   56.911590][ T6317] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   56.920803][ T6316] netlink: 'syz.1.100': attribute type 16 has an invalid length.
[   56.925550][ T6316] netlink: 'syz.1.100': attribute type 17 has an invalid length.
[   56.981658][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.053189][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.059284][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.150499][ T5861] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.154280][ T5861] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.166086][ T5861] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.189982][ T5861] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.277898][ T6337] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   57.359410][ T6341] can: request_module (can-proto-0) failed.
[   57.369006][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.105'.
[   57.404574][ T6341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.105'.
[   57.529480][ T6359] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   57.561338][ T6359] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.600304][ T6359] bond1: (slave geneve2): making interface the new active one
[   57.606573][ T6359] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   57.613710][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.618242][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.619066][ T6359] ieee802154 phy0 wpan0: encryption failed: -22
[   57.621813][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.632394][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.776202][ T6368] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   57.842341][ T6371] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   58.049602][ T6395] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   58.534966][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[   58.537850][ T6428] nbd: couldn't find a device at index 65546
[   58.543200][ T6432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.126'.
[   58.560644][ T6432] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   58.590758][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.600510][ T6436] netlink: 'syz.2.127': attribute type 3 has an invalid length.
[   58.606334][ T6432] bond1: (slave gretap1): making interface the new active one
[   58.610325][ T6432] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   58.673549][ T6432] syz.0.126 (6432) used greatest stack depth: 19472 bytes left
[   58.750801][ T6447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'.
[   58.758387][ T6447] unsupported nlmsg_type 40
[   58.792063][ T6447] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   58.940927][ T6458] tipc: Started in network mode
[   58.943277][ T6458] tipc: Node identity da9916cff44c, cluster identity 4711
[   58.953969][ T6458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.023800][ T6458] Bluetooth: MGMT ver 1.23
[   59.042386][ T6458] tipc: Resetting bearer <eth:syzkaller0>
[   59.130527][ T6456] tipc: Disabling bearer <eth:syzkaller0>
[   59.335225][ T6473] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   59.523108][ T6487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   59.566754][ T6488] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   59.740946][ T6501] netlink: 'syz.2.144': attribute type 9 has an invalid length.
[   59.884156][ T6516] netlink: 'syz.2.148': attribute type 1 has an invalid length.
[   59.962511][ T6519] netem: change failed
[   60.116680][ T6521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.120273][ T6521] syzkaller0: entered promiscuous mode
[   60.122186][ T6524] __nla_validate_parse: 3 callbacks suppressed
[   60.122192][ T6524] netlink: 248 bytes leftover after parsing attributes in process `syz.2.151'.
[   60.123727][ T6521] syzkaller0: entered allmulticast mode
[   60.125819][ T6524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.151'.
[   60.129340][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   60.135222][ T6521] syzkaller0: tun_net_xmit 90
[   60.141267][ T6520] tipc: Resetting bearer <eth:syzkaller0>
[   60.159991][ T6520] tipc: Disabling bearer <eth:syzkaller0>
[   60.170079][ T6524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.151'.
[   60.326427][ T6538] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   60.439874][ T6552] netlink: 'syz.2.157': attribute type 6 has an invalid length.
[   60.443048][ T6552] netlink: 'syz.2.157': attribute type 6 has an invalid length.
[   60.684099][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   60.811374][ T6579] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   60.949442][ T6594] netlink: 84 bytes leftover after parsing attributes in process `syz.1.168'.
[   61.022497][ T6594] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   61.103594][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[   61.106501][ T5239] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   61.192062][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.196326][ T6602] 8021q: adding VLAN 0 to HW filter on device team0
[   61.198582][ T6602] batman_adv: batadv0: Interface activated: team0
[   61.204678][ T6602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.250430][ T6604] netlink: 'syz.1.170': attribute type 7 has an invalid length.
[   61.256645][ T6604] netlink: 'syz.1.170': attribute type 8 has an invalid length.
[   61.261824][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'.
[   61.375520][ T6609] sctp: [Deprecated]: syz.1.172 (pid 6609) Use of int in max_burst socket option.
[   61.375520][ T6609] Use struct sctp_assoc_value instead
[   61.442986][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'.
[   61.518798][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'.
[   61.522498][ T6618] netlink: 7 bytes leftover after parsing attributes in process `syz.1.175'.
[   61.619525][ T6624] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.624076][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'.
[   61.792238][ T6634] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   61.823512][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[   62.460598][ T6670] pim6reg1: entered promiscuous mode
[   62.465662][ T6670] pim6reg1: entered allmulticast mode
[   62.606710][ T6676] netlink: 'syz.0.190': attribute type 10 has an invalid length.
[   62.615192][ T6676] team0: Device veth0_vlan failed to register rx_handler
[   62.848087][ T6683] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   62.881692][ T6683] dummy0: left allmulticast mode
[   62.884450][ T6683] bridge0: port 3(dummy0) entered disabled state
[   62.911813][ T6683] bridge_slave_0: left allmulticast mode
[   62.914134][ T6683] bridge_slave_0: left promiscuous mode
[   62.916553][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.924499][ T6683] bridge_slave_1: left allmulticast mode
[   62.926968][ T6683] bridge_slave_1: left promiscuous mode
[   62.929132][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.937305][ T6683] bond0: (slave bond_slave_0): Releasing backup interface
[   62.943073][ T6683] bond0: (slave bond_slave_1): Releasing backup interface
[   62.954622][ T6683] team0: Port device team_slave_0 removed
[   62.960569][ T6683] team0: Port device team_slave_1 removed
[   62.963268][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.969004][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.975067][ T6690] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   62.976070][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.980490][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.989791][ T6683] bond1: (slave gretap1): Releasing active interface
[   63.007972][ T6688] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   63.018038][ T6690] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   63.032263][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.037765][ T6690] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.118952][ T6693] lo speed is unknown, defaulting to 1000
[   63.130562][ T6693] lo speed is unknown, defaulting to 1000
[   63.141369][ T6693] lo speed is unknown, defaulting to 1000
[   63.245381][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.250716][ T6698] 8021q: adding VLAN 0 to HW filter on device team0
[   63.266566][ T6698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.292884][ T6700] bond0: option mode: unable to set because the bond device has slaves
[   63.342193][   T47] lo speed is unknown, defaulting to 1000
[   63.350259][   T47] syz0: Port: 1 Link ACTIVE
[   63.352156][ T6693] infiniband syz0: set active
[   63.355585][ T6693] infiniband syz0: added lo
[   63.393228][ T6704] lo speed is unknown, defaulting to 1000
[   63.404097][ T6693] RDS/IB: syz0: added
[   63.406001][ T6693] smc: adding ib device syz0 with port count 1
[   63.408112][ T6693] smc:    ib device syz0 port 1 has pnetid 
[   63.412989][   T47] lo speed is unknown, defaulting to 1000
[   63.572224][ T6693] lo speed is unknown, defaulting to 1000
[   63.835012][ T6693] lo speed is unknown, defaulting to 1000
[   63.918423][ T6712] netlink: 'syz.0.201': attribute type 31 has an invalid length.
[   64.060901][ T6693] lo speed is unknown, defaulting to 1000
[   64.144693][ T6655] Set syz1 is full, maxelem 65536 reached
[   64.580296][ T6744] netlink: 'syz.2.209': attribute type 31 has an invalid length.
[   64.657117][ T6729] lo speed is unknown, defaulting to 1000
[   64.837316][ T6771] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   64.865871][ T6764] lo speed is unknown, defaulting to 1000
[   65.016919][ T6786] smc: net device bond0 applied user defined pnetid SYZ2
[   65.021907][ T6789] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   65.173590][ T6801] __nla_validate_parse: 9 callbacks suppressed
[   65.173600][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   65.202404][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   65.260914][ T6801] sch_tbf: burst 1476 is lower than device bridge1 mtu (1514) !
[   65.269566][ T6801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.220'.
[   65.272497][ T6795] lo speed is unknown, defaulting to 1000
[   65.499884][ T6805] lo speed is unknown, defaulting to 1000
[   65.930047][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.226'.
[   66.054756][ T6861] geneve3: entered promiscuous mode
[   66.203702][ T6867] bond0: option xmit_hash_policy: invalid value (8)
[   66.224331][ T6867] bond0: option xmit_hash_policy: invalid value (8)
[   66.318369][ T6875] sctp: [Deprecated]: syz.2.230 (pid 6875) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.318369][ T6875] Use struct sctp_sack_info instead
[   66.461194][ T6882] netlink: 'syz.2.233': attribute type 83 has an invalid length.
[   66.737941][ T6892] lo speed is unknown, defaulting to 1000
[   66.781711][ T6897] netlink: 168 bytes leftover after parsing attributes in process `syz.0.236'.
[   66.795585][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[   66.957669][ T6907] netlink: 'syz.0.238': attribute type 1 has an invalid length.
[   67.015330][    T9] lo speed is unknown, defaulting to 1000
[   67.017395][    T9] syz0: Port: 1 Link DOWN
[   67.019282][    T9] lo speed is unknown, defaulting to 1000
[   67.031464][ T6910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'.
[   67.038501][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'.
[   67.079478][ T6913] netlink: 56 bytes leftover after parsing attributes in process `syz.2.240'.
[   67.251440][ T6922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.255897][ T6922] syzkaller0: entered promiscuous mode
[   67.257662][ T6922] syzkaller0: entered allmulticast mode
[   67.268098][ T6922] tipc: Resetting bearer <eth:syzkaller0>
[   67.269916][ T6922] syzkaller0: tun_net_xmit 90
[   67.275637][ T6921] tipc: Resetting bearer <eth:syzkaller0>
[   67.289158][ T6921] tipc: Disabling bearer <eth:syzkaller0>
[   67.296107][ T6924] netlink: 'syz.2.245': attribute type 9 has an invalid length.
[   67.354851][ T6929] team0: No ports can be present during mode change
[   67.411131][ T6946] netlink: 277 bytes leftover after parsing attributes in process `syz.2.251'.
[   67.420061][ T6946] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   67.427605][ T6946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.430874][ T6946] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   67.439113][ T6946] netlink: 'syz.2.251': attribute type 10 has an invalid length.
[   67.443629][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'.
[   67.446958][ T6946] batadv0: entered promiscuous mode
[   67.451484][ T6946] batadv0: entered allmulticast mode
[   67.462124][ T6946] bond0: (slave batadv0): Releasing backup interface
[   67.471062][ T6946] bridge0: port 3(batadv0) entered blocking state
[   67.473331][ T6946] bridge0: port 3(batadv0) entered disabled state
[   67.864492][ T5879] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   67.867649][ T5879] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   68.378231][ T6978] lo speed is unknown, defaulting to 1000
[   68.495529][ T6984] netlink: 'syz.2.260': attribute type 31 has an invalid length.
[   68.618748][ T6991] lo speed is unknown, defaulting to 1000
[   68.783858][ T7001] lo speed is unknown, defaulting to 1000
[   68.981591][ T7009] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   68.986611][   T13] bond0: (slave wlan1): interface is now down
[   69.018173][   T13] bond0: (slave wlan1): interface is now down
[   69.031606][   T13] bond0: now running without any active interface!
[   69.221281][ T7028] lo speed is unknown, defaulting to 1000
[   69.439936][ T7046] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   69.440560][ T7043] lo speed is unknown, defaulting to 1000
[   69.552352][ T7052] netlink: 'syz.0.272': attribute type 10 has an invalid length.
[   69.557774][ T7052] team0: Device veth0_vlan failed to register rx_handler
[   69.616824][ T7052] lo speed is unknown, defaulting to 1000
[   69.845015][ T7068] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   69.848098][ T7068] veth0_vlan: left promiscuous mode
[   69.850358][ T7068] veth0_vlan: entered promiscuous mode
[   69.854196][ T7068] team0: Device veth0_vlan failed to register rx_handler
[   69.966021][ T7075] netlink: 'syz.2.281': attribute type 33 has an invalid length.
[   70.176408][ T7087] netlink: 'syz.0.284': attribute type 10 has an invalid length.
[   70.181036][ T7087] team0: Device veth0_vlan failed to register rx_handler
[   70.358519][ T7095] ipvlan2: entered promiscuous mode
[   70.361682][ T7095] bridge0: port 1(ipvlan2) entered blocking state
[   70.365403][ T7095] bridge0: port 1(ipvlan2) entered disabled state
[   70.369402][ T7095] ipvlan2: entered allmulticast mode
[   70.371308][ T7095] bridge0: entered allmulticast mode
[   70.374978][ T7095] ipvlan2: left allmulticast mode
[   70.376680][ T7095] bridge0: left allmulticast mode
[   70.402277][ T7097] netlink: 'syz.0.287': attribute type 21 has an invalid length.
[   70.404929][ T7097] netlink: 'syz.0.287': attribute type 22 has an invalid length.
[   70.407729][ T7097] netlink: 'syz.0.287': attribute type 23 has an invalid length.
[   70.410115][ T7097] __nla_validate_parse: 13 callbacks suppressed
[   70.410121][ T7097] netlink: 136 bytes leftover after parsing attributes in process `syz.0.287'.
[   70.415851][ T7097] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.287'.
[   70.598309][ T7101] bond0: (slave wlan1): Releasing backup interface
[   70.612410][ T7101] erspan0: left promiscuous mode
[   70.616846][ T7101] erspan0: left allmulticast mode
[   70.625362][    C0] Illegal XDP return value 16128 on prog  (id 93) dev lo, expect packet loss!
[   70.629747][ T7101] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.742909][ T7103] lo speed is unknown, defaulting to 1000
[   70.766591][ T7106] netlink: 'syz.0.290': attribute type 1 has an invalid length.
[   70.947018][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.966220][ T7113] ieee802154 phy0 wpan0: encryption failed: -22
[   70.968871][ T7113] netlink: 196 bytes leftover after parsing attributes in process `syz.0.292'.
[   71.099610][ T7113] dummy0: left promiscuous mode
[   71.187785][ T7113] vlan0: left promiscuous mode
[   71.231411][ T7123] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.294'.
[   71.281216][ T7119] batman_adv: batadv0: Interface deactivated: team0
[   71.297256][ T7119] veth1_virt_wifi: left promiscuous mode
[   71.299133][ T7119] veth1_virt_wifi: left allmulticast mode
[   71.307747][ T7119] geneve3: left promiscuous mode
[   71.316056][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.319801][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.329568][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.333176][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.337590][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.341263][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.355048][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.358062][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.447566][ T7131] lo speed is unknown, defaulting to 1000
[   71.474595][ T7132] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   71.588300][ T7139] lo speed is unknown, defaulting to 1000
[   71.634445][ T7149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'.
[   71.800678][ T7159] netlink: 'syz.1.305': attribute type 10 has an invalid length.
[   71.812912][ T7159] veth0_vlan: left promiscuous mode
[   71.815373][ T7159] veth0_vlan: entered promiscuous mode
[   71.818054][ T7159] team0: Device veth0_vlan failed to register rx_handler
[   71.819247][ T7163] sctp: [Deprecated]: syz.2.307 (pid 7163) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.819247][ T7163] Use struct sctp_sack_info instead
[   72.016681][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   72.220971][ T7178] netlink: zone id is out of range
[   72.224856][ T7178] netlink: zone id is out of range
[   72.229823][ T7178] netlink: zone id is out of range
[   72.235648][ T7178] netlink: zone id is out of range
[   72.245480][ T7178] netlink: zone id is out of range
[   72.247113][ T7178] netlink: zone id is out of range
[   72.249070][ T7178] netlink: zone id is out of range
[   72.250710][ T7178] netlink: zone id is out of range
[   72.252589][ T7178] netlink: zone id is out of range
[   72.307277][ T7185] lo speed is unknown, defaulting to 1000
[   72.689353][ T7192] only policy match revision 0 supported
[   72.689369][ T7192] unable to load match
[   72.846803][ T7207] syz_tun: entered promiscuous mode
[   72.850575][ T7207] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   72.855577][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.859835][ T7207] team0: Port device bond0 added
[   73.052233][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'.
[   73.293023][ T7226] lo speed is unknown, defaulting to 1000
[   73.645298][ T7233] validate_nla: 2 callbacks suppressed
[   73.645316][ T7233] netlink: 'syz.0.324': attribute type 10 has an invalid length.
[   73.650998][ T7233] veth0_vlan: left promiscuous mode
[   73.658924][ T7233] veth0_vlan: entered promiscuous mode
[   73.668556][ T7233] team0: Device veth0_vlan failed to register rx_handler
[   73.707267][ T7236] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   73.871282][ T7247] lo speed is unknown, defaulting to 1000
[   73.873639][ T7250] syzkaller1: entered promiscuous mode
[   73.875764][ T7250] syzkaller1: entered allmulticast mode
[   73.907805][ T7251] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   73.975628][ T7257] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[   74.068919][ T7259] IPv6: sit1: Disabled Multicast RS
[   74.135809][ T7262] lo speed is unknown, defaulting to 1000
[   74.169200][ T7265] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   74.205846][ T7267] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   74.230633][ T7264] lo speed is unknown, defaulting to 1000
[   74.641790][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'.
[   74.861782][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'.
[   74.876608][ T7304] netlink: 32 bytes leftover after parsing attributes in process `syz.1.342'.
[   74.880876][ T7306] netlink: 9 bytes leftover after parsing attributes in process `syz.2.343'.
[   74.930923][ T7306] 0{X: renamed from gretap0
[   74.943137][ T7306] 0{X: entered allmulticast mode
[   74.947871][ T7304] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   81.184643][ T1912] cfg80211: failed to load regulatory.db
[   97.382900][ T7327] __nla_validate_parse: 1 callbacks suppressed
[   97.382914][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'.
[   97.395839][ T7331] netlink: 'syz.1.345': attribute type 6 has an invalid length.
[   97.400857][ T7331] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.450250][ T7337] syzkaller1: left promiscuous mode
[   97.457717][ T7337] syzkaller1: left allmulticast mode
[   97.474752][ T7337] netlink: 428 bytes leftover after parsing attributes in process `syz.2.346'.
[   97.477588][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'.
[   97.567691][ T7353] lo speed is unknown, defaulting to 1000
[   97.910645][ T7361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.913923][ T7361] syzkaller0: entered promiscuous mode
[   97.916262][ T7361] syzkaller0: entered allmulticast mode
[   97.927801][ T7361] tipc: Resetting bearer <eth:syzkaller0>
[   97.931515][ T7360] tipc: Resetting bearer <eth:syzkaller0>
[   97.941583][ T7360] tipc: Disabling bearer <eth:syzkaller0>
[   98.077081][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'.
[   98.080926][ T7365] net_ratelimit: 98 callbacks suppressed
[   98.080937][ T7365] openvswitch: netlink: Flow actions attr not present in new flow.
[   98.123860][ T7368] syzkaller1: entered promiscuous mode
[   98.126167][ T7368] syzkaller1: entered allmulticast mode
[   98.344913][ T7375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'.
[   98.365918][ T7382] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   98.371892][ T7382] bridge0: port 3(batadv0) entered disabled state
[   98.377465][ T7382] bridge_slave_0: left allmulticast mode
[   98.379479][ T7382] bridge_slave_0: left promiscuous mode
[   98.381427][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.386807][ T7382] bridge_slave_1: left allmulticast mode
[   98.388780][ T7382] bridge_slave_1: left promiscuous mode
[   98.390782][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.398193][ T7382] bond0: (slave bond_slave_0): Releasing backup interface
[   98.403157][ T7382] bond0: (slave bond_slave_1): Releasing backup interface
[   98.409851][ T7382] team0: Port device team_slave_0 removed
[   98.414746][ T7382] team0: Port device team_slave_1 removed
[   98.417416][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.420363][ T7382] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.454467][ T7394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.456701][ T7382] netlink: 'syz.2.360': attribute type 10 has an invalid length.
[   98.456854][ T7394] syzkaller0: entered promiscuous mode
[   98.461024][ T7394] syzkaller0: entered allmulticast mode
[   98.466502][ T7382] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   98.468766][ T7382] bond0: (slave wlan1): refused to change device type
[   98.481270][ T7394] tipc: Resetting bearer <eth:syzkaller0>
[   98.481420][ T7382] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.486781][ T7382] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.486876][ T7392] tipc: Resetting bearer <eth:syzkaller0>
[   98.497067][ T7392] tipc: Disabling bearer <eth:syzkaller0>
[   98.597674][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[   98.615936][ T7403] lo speed is unknown, defaulting to 1000
[   98.655640][ T7404] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   98.715459][ T7407] lo speed is unknown, defaulting to 1000
[   98.755100][ T7410] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   98.882895][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'.
[   98.906851][ T7413] lo speed is unknown, defaulting to 1000
[   99.343917][ T7430] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   99.369069][ T7427] lo speed is unknown, defaulting to 1000
[   99.428765][ T7428] nbd: couldn't find device at index 536870912
[   99.431128][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'.
[   99.476344][ T7437] syzkaller0: entered promiscuous mode
[   99.479669][ T7437] syzkaller0: entered allmulticast mode
[   99.501437][ T7438] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   99.560924][ T7433] lo speed is unknown, defaulting to 1000
[   99.648255][ T7441] syzkaller0: entered promiscuous mode
[   99.650141][ T7441] syzkaller0: entered allmulticast mode
[  101.305377][ T7452] netlink: 348 bytes leftover after parsing attributes in process `syz.1.378'.
[  101.365661][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.379'.
[  101.386335][ T7459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.390920][ T7459] tipc: Resetting bearer <eth:syzkaller0>
[  101.398851][ T7458] tipc: Disabling bearer <eth:syzkaller0>
[  101.468328][ T7462] syzkaller1: entered promiscuous mode
[  101.470278][ T7462] syzkaller1: entered allmulticast mode
[  101.735091][ T7481] lo speed is unknown, defaulting to 1000
[  101.785583][ T6133] IPVS: starting estimator thread 0...
[  101.883682][ T7490] IPVS: using max 79 ests per chain, 189600 per kthread
[  101.962766][ T7495] netlink: 'syz.1.388': attribute type 4 has an invalid length.
[  102.841146][ T7528] vxcan1: entered allmulticast mode
[  102.845215][ T7528] vxcan1: left allmulticast mode
[  102.908457][ T7528] raw_sendmsg: syz.1.399 forgot to set AF_INET. Fix it!
[  103.140684][ T7554] lo speed is unknown, defaulting to 1000
[  103.185948][ T7560] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  103.194401][ T7561] __nla_validate_parse: 3 callbacks suppressed
[  103.194417][ T7561] netlink: 428 bytes leftover after parsing attributes in process `syz.2.408'.
[  103.201678][ T7561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.408'.
[  103.241452][ T7558] lo speed is unknown, defaulting to 1000
[  103.422698][ T7573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.438007][ T7571] tipc: Disabling bearer <eth:syzkaller0>
[  103.678086][ T7578] netlink: 156 bytes leftover after parsing attributes in process `syz.1.412'.
[  103.771806][ T7584] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0
[  103.836757][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  103.868000][ T7591] netlink: 'syz.1.416': attribute type 2 has an invalid length.
[  103.875783][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'.
[  104.007837][ T7594] bridge_slave_0: entered promiscuous mode
[  104.011253][ T7594] bridge_slave_0: entered allmulticast mode
[  104.081057][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  104.085521][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  104.089833][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  104.094181][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  104.097492][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  104.102192][ T7600] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[  104.117779][ T7600] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.128225][ T7600] bond2: (slave gretap0): making interface the new active one
[  104.131312][ T7600] bond2: (slave gretap0): Enslaving as an active interface with an up link
[  104.424362][ T7612] lo: entered allmulticast mode
[  104.426273][ T7612] tunl0: entered allmulticast mode
[  104.428373][ T7612] gre0: entered allmulticast mode
[  104.430192][ T7612] gretap0: entered allmulticast mode
[  104.432102][ T7612] erspan0: entered allmulticast mode
[  104.434422][ T7612] ip_vti0: entered allmulticast mode
[  104.436318][ T7612] ip6_vti0: entered allmulticast mode
[  104.438252][ T7612] sit0: entered allmulticast mode
[  104.440073][ T7612] ip6tnl0: entered allmulticast mode
[  104.441961][ T7612] ip6gre0: entered allmulticast mode
[  104.444190][ T7612] ip6gretap0: entered allmulticast mode
[  104.446178][ T7612] bridge0: entered allmulticast mode
[  104.448342][ T7612] vcan0: entered allmulticast mode
[  104.450722][ T7612] bond0: entered allmulticast mode
[  104.452878][ T7612] team0: entered allmulticast mode
[  104.456621][ T7612] dummy0: entered allmulticast mode
[  104.458569][ T7612] nlmon0: entered allmulticast mode
[  104.460395][ T7612] caif0: entered allmulticast mode
[  104.462161][ T7612] batadv0: entered allmulticast mode
[  104.465511][ T7612] vxcan0: entered allmulticast mode
[  104.467692][ T7612] vxcan1: entered allmulticast mode
[  104.469566][ T7612] veth0: entered allmulticast mode
[  104.471339][ T7612] veth1: entered allmulticast mode
[  104.473136][ T7612] wg0: entered allmulticast mode
[  104.475053][ T7612] wg1: entered allmulticast mode
[  104.476755][ T7612] wg2: entered allmulticast mode
[  104.478471][ T7612] veth0_to_bridge: entered allmulticast mode
[  104.480621][ T7612] bridge_slave_0: entered allmulticast mode
[  104.482627][ T7612] veth1_to_bridge: entered allmulticast mode
[  104.484827][ T7612] bridge_slave_1: entered allmulticast mode
[  104.486835][ T7612] veth0_to_bond: entered allmulticast mode
[  104.489228][ T7612] bond_slave_0: entered allmulticast mode
[  104.491709][ T7612] veth1_to_bond: entered allmulticast mode
[  104.494284][ T7612] bond_slave_1: entered allmulticast mode
[  104.496641][ T7612] veth0_to_team: entered allmulticast mode
[  104.499006][ T7612] team_slave_0: entered allmulticast mode
[  104.501426][ T7612] veth1_to_team: entered allmulticast mode
[  104.503681][ T7612] team_slave_1: entered allmulticast mode
[  104.505922][ T7612] veth0_to_batadv: entered allmulticast mode
[  104.508491][ T7612] batadv_slave_0: entered allmulticast mode
[  104.510917][ T7612] veth1_to_batadv: entered allmulticast mode
[  104.512917][ T7612] batadv_slave_1: entered allmulticast mode
[  104.517734][ T7612] xfrm0: entered allmulticast mode
[  104.519501][ T7612] veth0_to_hsr: entered allmulticast mode
[  104.521448][ T7612] hsr_slave_0: entered allmulticast mode
[  104.523357][ T7612] veth1_to_hsr: entered allmulticast mode
[  104.525569][ T7612] hsr_slave_1: entered allmulticast mode
[  104.527582][ T7612] hsr0: entered allmulticast mode
[  104.529375][ T7612] veth1_virt_wifi: entered allmulticast mode
[  104.531369][ T7612] veth0_virt_wifi: entered allmulticast mode
[  104.533580][ T7612] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  104.536002][ T7612] veth1_vlan: entered allmulticast mode
[  104.537873][ T7612] veth0_vlan: entered allmulticast mode
[  104.539843][ T7612] vlan0: entered allmulticast mode
[  104.541609][ T7612] vlan1: entered allmulticast mode
[  104.543622][ T7612] macvlan0: entered allmulticast mode
[  104.545434][ T7612] macvlan1: entered allmulticast mode
[  104.547268][ T7612] ipvlan0: entered allmulticast mode
[  104.549053][ T7612] ipvlan1: entered allmulticast mode
[  104.550928][ T7612] veth1_macvtap: entered allmulticast mode
[  104.552902][ T7612] veth0_macvtap: entered allmulticast mode
[  104.554950][ T7612] macvtap0: entered allmulticast mode
[  104.556777][ T7612] macsec0: entered allmulticast mode
[  104.558561][ T7612] geneve0: entered allmulticast mode
[  104.560280][ T7612] geneve1: entered allmulticast mode
[  104.562303][ T7612] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  104.564967][ T7612] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  104.567490][ T7612] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  104.569886][ T7612] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  104.572449][ T7612] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  104.574926][ T7612] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  104.577281][ T7612] veth0_vlan.0003: entered allmulticast mode
[  104.579307][ T7612] macvlan2: entered allmulticast mode
[  104.581089][ T7612] bond1: entered allmulticast mode
[  104.582921][ T7612] gretap1: entered allmulticast mode
[  104.584805][ T7612] ipip0: entered allmulticast mode
[  104.586574][ T7612] bridge1: entered allmulticast mode
[  104.588344][ T7612] gre1: entered allmulticast mode
[  104.590002][ T7612] syztnl1: entered allmulticast mode
[  104.591723][ T7612] macvlan3: entered allmulticast mode
[  104.593750][ T7612] bond2: entered allmulticast mode
[  104.595483][ T7612] bond3: entered allmulticast mode
[  104.597225][ T7612] bond4: entered allmulticast mode
[  104.648398][ T7617] openvswitch: netlink: IP tunnel TTL not specified.
[  105.111168][ T7645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.114602][ T7645] syzkaller0: entered promiscuous mode
[  105.116465][ T7645] syzkaller0: entered allmulticast mode
[  105.175136][ T7644] tipc: Resetting bearer <eth:syzkaller0>
[  105.186490][ T7644] tipc: Disabling bearer <eth:syzkaller0>
[  105.200319][ T7649] lo speed is unknown, defaulting to 1000
[  105.250497][ T7650] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  105.357003][ T7652] lo speed is unknown, defaulting to 1000
[  105.450943][ T7663] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  105.487077][ T7661] lo speed is unknown, defaulting to 1000
[  105.787077][ T7677] lo speed is unknown, defaulting to 1000
[  105.917785][ T7679] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  105.968073][ T7687] lo speed is unknown, defaulting to 1000
[  106.389337][ T7705] lo speed is unknown, defaulting to 1000
[  106.530014][ T7708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.600960][ T7708] syzkaller0: entered promiscuous mode
[  106.603860][ T7708] syzkaller0: entered allmulticast mode
[  106.637055][ T7708] tipc: Resetting bearer <eth:syzkaller0>
[  106.646183][ T7707] tipc: Resetting bearer <eth:syzkaller0>
[  107.404699][ T7707] tipc: Disabling bearer <eth:syzkaller0>
[  107.614759][ T7739] netlink: 'syz.0.454': attribute type 10 has an invalid length.
[  107.617607][ T7739] veth0_vlan: left promiscuous mode
[  107.620118][ T7739] veth0_vlan: entered promiscuous mode
[  107.625807][ T7739] team0: Device veth0_vlan failed to register rx_handler
[  107.661734][ T7745] netlink: 'syz.2.456': attribute type 10 has an invalid length.
[  107.665760][ T7745] bond0: (slave wlan1): refused to change device type
[  107.930781][ T7753] lo speed is unknown, defaulting to 1000
[  107.959562][ T7748] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  108.177686][ T7757] geneve2: entered promiscuous mode
[  108.215954][ T7757] macsec0: left allmulticast mode
[  108.448947][ T7766] batman_adv: batadv0: Adding interface: gretap1
[  108.451723][ T7766] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  108.463038][ T7766] batman_adv: batadv0: Interface activated: gretap1
[  108.530497][ T7768] lo speed is unknown, defaulting to 1000
[  108.570479][ T7770] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  108.899374][ T7786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.051460][ T7804] __nla_validate_parse: 3 callbacks suppressed
[  109.051473][ T7804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'.
[  109.137097][ T7812] lo speed is unknown, defaulting to 1000
[  109.178730][ T7813] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  109.247992][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.478'.
[  109.334348][ T7799] lo speed is unknown, defaulting to 1000
[  109.518087][ T7832] netlink: 'syz.1.481': attribute type 3 has an invalid length.
[  109.521158][ T7832] netlink: 'syz.1.481': attribute type 3 has an invalid length.
[  109.586320][ T7837] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.680221][ T7847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.727189][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  109.734493][ T7852] sctp: [Deprecated]: syz.1.487 (pid 7852) Use of int in maxseg socket option.
[  109.734493][ T7852] Use struct sctp_assoc_value instead
[  109.740165][ T7852] netlink: 'syz.1.487': attribute type 1 has an invalid length.
[  109.751927][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'.
[  109.774679][ T7852] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.778193][ T7854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'.
[  109.781713][ T7854] netlink: 34 bytes leftover after parsing attributes in process `syz.0.488'.
[  109.909813][ T7862] netlink: 37 bytes leftover after parsing attributes in process `syz.2.491'.
[  109.955898][ T7865] netlink: 'syz.2.492': attribute type 10 has an invalid length.
[  109.961616][ T7866] netlink: 'syz.2.492': attribute type 10 has an invalid length.
[  109.965556][ T7866] netlink: 2 bytes leftover after parsing attributes in process `syz.2.492'.
[  109.969680][ T7866] team0: entered promiscuous mode
[  109.972903][ T7866] 8021q: adding VLAN 0 to HW filter on device team0
[  109.976704][ T7866] bridge0: port 1(team0) entered blocking state
[  109.980280][ T7866] bridge0: port 1(team0) entered disabled state
[  109.983079][ T7866] team0: entered allmulticast mode
[  109.992471][ T7860] lo speed is unknown, defaulting to 1000
[  110.049882][ T7868] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  110.185571][ T7870] lo speed is unknown, defaulting to 1000
[  110.411872][ T7887] lo speed is unknown, defaulting to 1000
[  110.577904][ T7894] lo speed is unknown, defaulting to 1000
[  110.901767][ T7922] netlink: 'syz.0.506': attribute type 1 has an invalid length.
[  110.941038][ T7922] 8021q: adding VLAN 0 to HW filter on device bond5
[  110.971142][ T7922] bond5: (slave geneve2): making interface the new active one
[  110.975040][ T7922] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  110.977969][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.983055][ T7922] ieee802154 phy0 wpan0: encryption failed: -22
[  110.989809][ T7922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.506'.
[  111.030375][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.033153][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.045831][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.070123][ T7928] lo speed is unknown, defaulting to 1000
[  111.242998][ T7938] lo speed is unknown, defaulting to 1000
[  111.641512][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.513'.
[  111.836611][ T7970] lo speed is unknown, defaulting to 1000
[  111.986240][ T7980] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[  112.018518][ T7986] lo speed is unknown, defaulting to 1000
[  112.029830][ T7980] netlink: 'syz.2.520': attribute type 2 has an invalid length.
[  112.063238][ T7988] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  112.138033][ T7996] netlink: 'syz.2.523': attribute type 10 has an invalid length.
[  112.140820][ T7996] veth0_vlan: left promiscuous mode
[  112.142905][ T7996] veth0_vlan: entered promiscuous mode
[  112.146453][ T7996] team0: Device veth0_vlan failed to register rx_handler
[  112.277019][ T8006] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[  112.419418][ T8016] syzkaller1: entered promiscuous mode
[  112.421279][ T8016] syzkaller1: entered allmulticast mode
[  112.448380][ T8018] lo speed is unknown, defaulting to 1000
[  112.734629][ T8030] veth0_vlan: left promiscuous mode
[  112.737166][ T8030] veth0_vlan: entered promiscuous mode
[  112.740286][ T8030] team0: Device veth0_vlan failed to register rx_handler
[  113.220802][ T8053] bridge0: port 1(erspan0) entered blocking state
[  113.224942][ T8053] bridge0: port 1(erspan0) entered disabled state
[  113.228962][ T8053] erspan0: entered promiscuous mode
[  113.233079][ T8053] erspan0: left promiscuous mode
[  113.235532][ T8053] bridge0: port 1(erspan0) entered disabled state
[  113.446975][ T8074] lo speed is unknown, defaulting to 1000
[  113.518809][ T8081] veth0_vlan: left promiscuous mode
[  113.521934][ T8081] veth0_vlan: entered promiscuous mode
[  113.530075][ T8081] team0: Device veth0_vlan failed to register rx_handler
[  113.909780][ T8107] veth0_vlan: left promiscuous mode
[  113.912856][ T8107] veth0_vlan: entered promiscuous mode
[  113.917600][ T8107] team0: Device veth0_vlan failed to register rx_handler
[  113.950225][ T8109] lo speed is unknown, defaulting to 1000
[  113.965979][ T8110] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  114.093523][ T8119] __nla_validate_parse: 17 callbacks suppressed
[  114.093532][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'.
[  114.139318][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.1.558'.
[  114.308717][ T8126] netlink: 56 bytes leftover after parsing attributes in process `syz.1.560'.
[  114.361392][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'.
[  114.377910][ T8128] bridge0: entered promiscuous mode
[  114.402242][ T8130] lo speed is unknown, defaulting to 1000
[  114.625044][ T8138] lo speed is unknown, defaulting to 1000
[  114.931504][ T8145] lo speed is unknown, defaulting to 1000
[  114.984257][ T8148] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  115.175033][ T8158] netlink: 52 bytes leftover after parsing attributes in process `syz.2.569'.
[  115.194217][ T8128] bridge0: left promiscuous mode
[  115.202136][ T8159] lo speed is unknown, defaulting to 1000
[  115.419371][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'.
[  115.576588][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'.
[  115.579507][ T8179] bridge0: left allmulticast mode
[  115.648430][ T8180] lo speed is unknown, defaulting to 1000
[  115.781250][ T8192] lo speed is unknown, defaulting to 1000
[  115.937165][ T8204] validate_nla: 9 callbacks suppressed
[  115.937176][ T8204] netlink: 'syz.1.579': attribute type 10 has an invalid length.
[  115.941673][ T8204] veth0_vlan: left promiscuous mode
[  115.945259][ T8204] veth0_vlan: entered promiscuous mode
[  115.948618][ T8204] team0: Device veth0_vlan failed to register rx_handler
[  115.956194][ T8195] lo speed is unknown, defaulting to 1000
[  115.982747][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'.
[  116.221428][ T8208] lo speed is unknown, defaulting to 1000
[  116.236461][ T8211] netlink: 'syz.1.580': attribute type 1 has an invalid length.
[  116.238962][ T8211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.580'.
[  116.268281][ T8213] netlink: 'syz.2.581': attribute type 10 has an invalid length.
[  116.270809][ T8214] netlink: 'syz.2.581': attribute type 10 has an invalid length.
[  116.274158][ T8213] veth0_vlan: left promiscuous mode
[  116.277156][ T8213] veth0_vlan: entered promiscuous mode
[  116.281145][ T8213] team0: Device veth0_vlan failed to register rx_handler
[  116.294111][ T8214] veth0_vlan: left promiscuous mode
[  116.296302][ T8214] veth0_vlan: entered promiscuous mode
[  116.299004][ T8214] team0: Device veth0_vlan failed to register rx_handler
[  116.431907][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[  116.664292][ T8241] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.671571][ T8241] bond3: (slave macvlan3): Error -22 calling dev_set_mtu
[  116.723341][ T8252] team0: left allmulticast mode
[  116.730187][ T8252] bridge0: port 1(team0) entered disabled state
[  116.743273][ T8252] bond2: (slave gretap0): Releasing active interface
[  116.890648][ T8258] lo speed is unknown, defaulting to 1000
[  116.909366][ T8262] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  117.187171][ T8269] lo speed is unknown, defaulting to 1000
[  117.769591][ T8297] ip6gre1: entered promiscuous mode
[  117.900355][ T8301] netlink: 'syz.0.602': attribute type 1 has an invalid length.
[  117.912800][ T8301] veth5: entered promiscuous mode
[  117.975734][ T8309] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  117.990302][ T8309] bond4: entered promiscuous mode
[  117.992204][ T8309] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.999642][ T8309] batadv0: entered promiscuous mode
[  118.001507][ T8309] batadv0: entered allmulticast mode
[  118.006427][ T8309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.010109][ T8309] bond4: (slave batadv0): making interface the new active one
[  118.021087][ T8309] bond4: (slave batadv0): Enslaving as an active interface with an up link
[  118.171204][ T8323] lo speed is unknown, defaulting to 1000
[  118.195178][ T8321] netlink: 'syz.1.608': attribute type 10 has an invalid length.
[  118.197944][ T8321] veth0_vlan: left promiscuous mode
[  118.200072][ T8321] veth0_vlan: entered promiscuous mode
[  118.202744][ T8321] team0: Device veth0_vlan failed to register rx_handler
[  118.392068][ T8343] lo speed is unknown, defaulting to 1000
[  118.445950][ T8348] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  118.575443][ T8349] lo speed is unknown, defaulting to 1000
[  118.868591][ T8377] lo speed is unknown, defaulting to 1000
[  118.894880][ T8380] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  118.991712][ T8390] gretap2: entered allmulticast mode
[  118.998512][ T8390] batman_adv: batadv0: Adding interface: gretap2
[  119.002910][ T8390] batman_adv: batadv0: The MTU of interface gretap2 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  119.011703][ T8390] batman_adv: batadv0: Interface activated: gretap2
[  119.111031][ T8398] ip6tnl1: entered promiscuous mode
[  119.143144][ T8402] __nla_validate_parse: 2 callbacks suppressed
[  119.143153][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'.
[  119.214582][ T8404] lo speed is unknown, defaulting to 1000
[  119.581536][ T8441] netlink: 56 bytes leftover after parsing attributes in process `syz.2.636'.
[  119.930199][ T8469] lo speed is unknown, defaulting to 1000
[  119.969328][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'.
[  119.996058][ T8480] netlink: 'syz.0.648': attribute type 11 has an invalid length.
[  120.191486][ T8489] lo speed is unknown, defaulting to 1000
[  120.220971][ T8495] netlink: 'syz.0.651': attribute type 13 has an invalid length.
[  120.235824][ T8495] netlink: 'syz.0.651': attribute type 17 has an invalid length.
[  120.254632][ T8495] lo: left allmulticast mode
[  120.257363][ T8495] tunl0: left allmulticast mode
[  120.259402][ T8495] gre0: left allmulticast mode
[  120.261545][ T8495] gretap0: left allmulticast mode
[  120.268942][ T8495] erspan0: left allmulticast mode
[  120.277144][ T8495] ip_vti0: left allmulticast mode
[  120.279204][ T8495] ip6_vti0: left allmulticast mode
[  120.281319][ T8495] sit0: left allmulticast mode
[  120.284421][ T8495] ip6tnl0: left allmulticast mode
[  120.287402][ T8495] ip6gre0: left allmulticast mode
[  120.289447][ T8495] ip6gretap0: left allmulticast mode
[  120.315411][ T8495] vcan0: left allmulticast mode
[  120.318269][ T8495] bond0: left allmulticast mode
[  120.320114][ T8495] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.336903][ T8495] team0: left allmulticast mode
[  120.339100][ T8495] 8021q: adding VLAN 0 to HW filter on device team0
[  120.341869][ T8495] nlmon0: left allmulticast mode
[  120.344879][ T8495] caif0: left allmulticast mode
[  120.346639][ T8495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.359760][ T8484] lo speed is unknown, defaulting to 1000
[  120.500376][ T8511] lo speed is unknown, defaulting to 1000
[  120.514766][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[  120.532503][ T8515] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  120.683041][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.658'.
[  120.778173][ T8525] lo speed is unknown, defaulting to 1000
[  120.829550][ T8526] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  121.087351][ T8533] lo speed is unknown, defaulting to 1000
[  121.100934][ T8536] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  121.122765][ T8541] netlink: 'syz.1.664': attribute type 9 has an invalid length.
[  121.128728][ T8538] netlink: 'syz.0.663': attribute type 10 has an invalid length.
[  121.130578][ T8541] netlink: 'syz.1.664': attribute type 9 has an invalid length.
[  121.361411][ T8552] lo speed is unknown, defaulting to 1000
[  121.429358][ T8556] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  121.514342][ T8563] lo speed is unknown, defaulting to 1000
[  121.556976][ T8565] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  121.764483][ T8574] lo speed is unknown, defaulting to 1000
[  121.880983][ T8581] syzkaller0: entered allmulticast mode
[  121.882938][ T8580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.005549][ T8587] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  122.021793][ T8585] lo speed is unknown, defaulting to 1000
[  122.150472][ T8589] lo speed is unknown, defaulting to 1000
[  122.448371][ T8602] lo speed is unknown, defaulting to 1000
[  122.505780][ T8604] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  122.761746][ T8616] netlink: 'syz.1.680': attribute type 10 has an invalid length.
[  122.766820][ T8616] team0: Device ipvlan1 failed to register rx_handler
[  122.801220][ T8618] lo speed is unknown, defaulting to 1000
[  122.854712][ T8619] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  122.994236][   T24] tipc: Node number set to 785716943
[  123.135551][ T8634] syz_tun: left promiscuous mode
[  123.137466][ T8634] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  123.154419][ T8633] lo speed is unknown, defaulting to 1000
[  123.176499][ T8634] netlink: 'syz.1.684': attribute type 10 has an invalid length.
[  123.181260][ T8634] veth0_vlan: left promiscuous mode
[  123.183791][ T8634] veth0_vlan: entered promiscuous mode
[  123.187299][ T8634] team0: Device veth0_vlan failed to register rx_handler
[  123.318960][ T8638] lo speed is unknown, defaulting to 1000
[  123.329989][ T8639] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  123.435781][ T8633] netlink: 'syz.2.685': attribute type 13 has an invalid length.
[  123.438873][ T8636] netlink: 'syz.2.685': attribute type 13 has an invalid length.
[  123.442659][ T8633] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  123.450396][ T8636] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  123.461889][ T8645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.687'.
[  123.582838][ T8650] lo speed is unknown, defaulting to 1000
[  123.767093][ T8663] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  123.777695][ T8660] lo speed is unknown, defaulting to 1000
[  123.917007][ T8667] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  123.988400][ T8666] lo speed is unknown, defaulting to 1000
[  124.242141][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'.
[  124.411110][ T8694] lo speed is unknown, defaulting to 1000
[  124.454493][ T8695] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  124.540519][ T8697] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.699'.
[  124.547014][ T8697] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  124.670586][ T8705] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  124.673053][ T8705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.701'.
[  124.692838][ T8700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  124.781280][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'.
[  124.890210][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.704'.
[  125.008527][ T8725] netlink: 240 bytes leftover after parsing attributes in process `syz.1.702'.
[  125.051009][ T8709] lo speed is unknown, defaulting to 1000
[  125.216751][ T8742] netlink: 'syz.0.708': attribute type 10 has an invalid length.
[  125.306350][ T8745] lo speed is unknown, defaulting to 1000
[  125.464406][ T8757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.715'.
[  125.477223][ T8756] lo speed is unknown, defaulting to 1000
[  125.549136][ T8767] netlink: 248 bytes leftover after parsing attributes in process `syz.2.718'.
[  125.642167][ T8775] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.666411][ T8775] syzkaller0: entered promiscuous mode
[  125.684956][ T8768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'.
[  125.701387][ T8775] tipc: Resetting bearer <eth:syzkaller0>
[  125.704771][ T8768] netlink: 'syz.0.717': attribute type 10 has an invalid length.
[  125.781980][ T8789] bond0: (slave wlan1): refused to change device type
[  125.787181][ T8788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.921684][ T8798] sctp: [Deprecated]: syz.1.725 (pid 8798) Use of int in max_burst socket option.
[  125.921684][ T8798] Use struct sctp_assoc_value instead
[  125.975771][ T8798] syzkaller1: entered promiscuous mode
[  125.977553][ T8798] syzkaller1: entered allmulticast mode
[  125.980498][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'.
[  126.253478][ T8822] validate_nla: 1 callbacks suppressed
[  126.253488][ T8822] netlink: 'syz.1.729': attribute type 31 has an invalid length.
[  126.318162][ T8825] netlink: 'syz.2.730': attribute type 31 has an invalid length.
[  126.409482][ T8835] pim6reg: entered allmulticast mode
[  126.411602][ T8835] pim6reg: left allmulticast mode
[  126.609866][ T8854] lo speed is unknown, defaulting to 1000
[  126.656057][ T8857] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  126.860563][ T8871] lo speed is unknown, defaulting to 1000
[  126.908486][ T8873] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  126.982745][ T8877] lo speed is unknown, defaulting to 1000
[  127.197053][ T8882] lo speed is unknown, defaulting to 1000
[  127.269705][ T8885] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  127.593664][ T8892] netlink: 'syz.0.752': attribute type 2 has an invalid length.
[  127.645693][ T8904] netlink: 'syz.1.755': attribute type 10 has an invalid length.
[  127.650987][ T8904] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  127.654407][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.657224][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.660662][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.667325][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.757172][ T8921] netlink: 'syz.1.757': attribute type 83 has an invalid length.
[  127.777291][ T8920] lo speed is unknown, defaulting to 1000
[  127.858165][ T8925] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  127.868222][ T8929] netlink: 'syz.2.763': attribute type 31 has an invalid length.
[  128.018837][ T8944] lo speed is unknown, defaulting to 1000
[  128.151231][ T8949] lo speed is unknown, defaulting to 1000
[  128.240771][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.316618][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.328727][ T8959] vlan0: entered allmulticast mode
[  128.950323][ T8980] lo speed is unknown, defaulting to 1000
[  129.009203][ T8986] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  129.163313][ T8994] lo speed is unknown, defaulting to 1000
[  129.208907][ T8996] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  129.424990][ T8999] lo speed is unknown, defaulting to 1000
[  129.465907][ T9000] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  129.705996][ T9005] lo speed is unknown, defaulting to 1000
[  129.785579][ T9012] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  129.793250][ T9010] bond5: (slave geneve2): Releasing active interface
[  129.807265][ T9010] batman_adv: batadv0: Interface deactivated: gretap2
[  129.809491][ T9010] batman_adv: batadv0: Removing interface: gretap2
[  129.827884][ T5879] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.830965][ T5879] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.846915][ T5879] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.849851][ T5879] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.884952][ T9016] __nla_validate_parse: 144 callbacks suppressed
[  129.884963][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'.
[  130.046267][ T9033] syzkaller1: entered promiscuous mode
[  130.046497][ T9034] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  130.048183][ T9033] syzkaller1: entered allmulticast mode
[  130.233207][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'.
[  130.355530][ T9044] lo speed is unknown, defaulting to 1000
[  130.407953][ T9046] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  130.659685][ T9052] lo speed is unknown, defaulting to 1000
[  130.677277][ T9054] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  130.895660][ T9063] IPVS: set_ctl: invalid protocol: 22 172.20.20.37:20001
[  131.009686][ T9077] lo speed is unknown, defaulting to 1000
[  131.037552][ T9083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.804'.
[  131.050210][ T9083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.804'.
[  131.107438][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  131.241617][ T9086] lo speed is unknown, defaulting to 1000
[  131.246084][ T9092] 8021q: VLANs not supported on wlan1
[  131.248589][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.806'.
[  131.248592][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.806'.
[  131.330125][ T9097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.216121][ T9103] lo speed is unknown, defaulting to 1000
[  132.245945][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'.
[  132.289820][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'.
[  132.386580][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.430290][ T9105] lo speed is unknown, defaulting to 1000
[  132.897958][ T9131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  132.901882][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'.
[  132.922688][ T9131] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  132.996644][ T9138] netlink: 'syz.2.821': attribute type 3 has an invalid length.
[  133.016847][ T9142] lo speed is unknown, defaulting to 1000
[  133.032772][ T9144] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  133.135851][ T9140] lo speed is unknown, defaulting to 1000
[  133.290295][ T9158] lo speed is unknown, defaulting to 1000
[  133.714344][ T9177] lo speed is unknown, defaulting to 1000
[  134.169453][ T9183] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  134.258921][ T9186] netlink: 'syz.1.830': attribute type 10 has an invalid length.
[  134.262416][ T9186] veth0_vlan: left promiscuous mode
[  134.269118][ T9186] veth0_vlan: entered promiscuous mode
[  134.272771][ T9186] team0: Device veth0_vlan failed to register rx_handler
[  134.355099][ T9194] lo speed is unknown, defaulting to 1000
[  134.423117][ T9198] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  134.442023][ T9200] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[  135.245999][ T9213] tipc: Resetting bearer <eth:syzkaller0>
[  135.376177][ T9215] __nla_validate_parse: 6 callbacks suppressed
[  135.376192][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'.
[  135.551601][ T9217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.838'.
[  135.679239][ T9222] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:0
[  135.906894][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'.
[  135.921100][ T9231] netlink: 'syz.1.842': attribute type 31 has an invalid length.
[  136.081715][ T9246] netlink: 'syz.0.845': attribute type 30 has an invalid length.
[  136.311747][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'.
[  136.648081][ T9273] lo speed is unknown, defaulting to 1000
[  136.727305][ T9271] lo speed is unknown, defaulting to 1000
[  136.950560][ T9277] netlink: 'syz.1.852': attribute type 10 has an invalid length.
[  136.955783][ T9277] veth0_vlan: left promiscuous mode
[  136.960138][ T9277] veth0_vlan: entered promiscuous mode
[  136.964646][ T9277] team0: Device veth0_vlan failed to register rx_handler
[  137.214855][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'.
[  137.218517][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'.
[  137.229232][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'.
[  137.399560][ T9293] lo speed is unknown, defaulting to 1000
[  137.576319][ T9310] netlink: 'syz.1.861': attribute type 10 has an invalid length.
[  137.579594][ T9310] veth0_vlan: left promiscuous mode
[  137.582299][ T9310] veth0_vlan: entered promiscuous mode
[  137.586844][ T9310] team0: Device veth0_vlan failed to register rx_handler
[  137.700025][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  137.728170][ T9313] bond0: (slave syz_tun): Releasing backup interface
[  137.775973][ T9318] lo speed is unknown, defaulting to 1000
[  137.819431][ T9319] netlink: 356 bytes leftover after parsing attributes in process `syz.0.863'.
[  137.886525][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[  137.985330][ T9326] 0{X: left allmulticast mode
[  137.988809][ T9326] team0: left promiscuous mode
[  137.992014][ T9326] bridge_slave_0: left promiscuous mode
[  137.996789][ T9326] bridge_slave_0: left allmulticast mode
[  138.004997][ T9326] pim6reg1: left promiscuous mode
[  138.007185][ T9326] pim6reg1: left allmulticast mode
[  138.011473][ T9326] bond4: left promiscuous mode
[  138.031625][ T9326] batadv0: left promiscuous mode
[  138.034330][ T9326] batadv0: left allmulticast mode
[  138.044423][ T9326] syzkaller0: left promiscuous mode
[  138.046980][ T9326] syzkaller0: left allmulticast mode
[  138.053775][ T9326] ip6tnl1: left promiscuous mode
[  138.081056][ T9329] netlink: 'syz.1.866': attribute type 10 has an invalid length.
[  138.102002][ T9329] veth0_vlan: left promiscuous mode
[  138.104767][ T9329] veth0_vlan: entered promiscuous mode
[  138.107634][ T9329] team0: Device veth0_vlan failed to register rx_handler
[  138.183029][ T9331] lo speed is unknown, defaulting to 1000
[  138.269851][ T9333] can: request_module (can-proto-0) failed.
[  138.343004][ T9342] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  138.394464][ T9339] lo speed is unknown, defaulting to 1000
[  138.656574][ T9356] vlan1: entered promiscuous mode
[  138.659189][ T9356] vlan1: entered allmulticast mode
[  138.661570][ T9356] veth0_vlan: entered allmulticast mode
[  138.761883][ T9364] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[  138.765397][ T9364] veth0_vlan: left promiscuous mode
[  138.768017][ T9364] veth0_vlan: entered promiscuous mode
[  138.771235][ T9364] team0: Device veth0_vlan failed to register rx_handler
[  138.876033][ T9366] lo speed is unknown, defaulting to 1000
[  139.212250][ T9374] lo speed is unknown, defaulting to 1000
[  139.465748][ T9392] lo speed is unknown, defaulting to 1000
[  139.681541][ T9397] lo speed is unknown, defaulting to 1000
[  139.697616][ T9402] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  139.743762][ T9407] netlink: 'syz.1.886': attribute type 13 has an invalid length.
[  139.749119][ T9407] netlink: 'syz.1.886': attribute type 17 has an invalid length.
[  139.799250][ T9407] batman_adv: batadv0: Interface activated: team0
[  139.807094][ T9407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.877993][ T9407] lo speed is unknown, defaulting to 1000
[  139.999345][ T9413] netlink: 'syz.0.888': attribute type 10 has an invalid length.
[  140.170544][ T9416] netlink: 'syz.0.889': attribute type 10 has an invalid length.
[  140.356570][ T9427] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  140.367014][ T9427] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  140.410951][ T9430] __nla_validate_parse: 6 callbacks suppressed
[  140.410960][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.893'.
[  140.425702][ T9429] lo speed is unknown, defaulting to 1000
[  140.687466][ T9441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.895'.
[  140.700590][ T9441] team0: Port device bond0 removed
[  140.704214][ T9441] batman_adv: batadv0: Interface deactivated: team0
[  140.706757][ T9441] batman_adv: batadv0: Removing interface: team0
[  140.710445][ T9441] bridge_slave_0: left allmulticast mode
[  140.712682][ T9441] bridge_slave_0: left promiscuous mode
[  140.721240][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.738901][ T9441] bridge_slave_1: left allmulticast mode
[  140.740854][ T9441] bridge_slave_1: left promiscuous mode
[  140.753682][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.760801][ T9441] bond0: (slave bond_slave_0): Releasing backup interface
[  140.768433][ T9441] bond0: (slave bond_slave_1): Releasing backup interface
[  140.776110][ T9441] team0: Port device team_slave_0 removed
[  140.778973][ T9441] team0: Port device team_slave_1 removed
[  140.781049][ T9441] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.785094][ T9441] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.788874][ T9441] bond0: (slave geneve1): Releasing backup interface
[  140.793146][ T9441] bond1: (slave geneve2): Releasing active interface
[  140.798192][ T9441] batman_adv: batadv0: Interface deactivated: gretap1
[  140.800318][ T9441] batman_adv: batadv0: Removing interface: gretap1
[  140.812800][ T9453] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  140.817404][ T5879] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.835246][ T5879] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.838955][ T5879] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.845583][ T9452] lo speed is unknown, defaulting to 1000
[  140.845830][ T5879] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.124065][ T9456] lo speed is unknown, defaulting to 1000
[  141.170933][ T9457] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  141.451902][ T9471] netlink: 'syz.2.903': attribute type 4 has an invalid length.
[  141.560762][ T9474] lo speed is unknown, defaulting to 1000
[  141.971903][ T9483] netlink: 'syz.1.906': attribute type 1 has an invalid length.
[  141.976072][ T9483] netlink: 224 bytes leftover after parsing attributes in process `syz.1.906'.
[  142.138874][ T9487] lo speed is unknown, defaulting to 1000
[  142.210221][ T9494] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  142.276696][ T9490] lo speed is unknown, defaulting to 1000
[  142.399597][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  142.452307][ T9498] netlink: 276 bytes leftover after parsing attributes in process `syz.2.911'.
[  142.567571][ T9504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.913'.
[  142.571237][ T9504] netlink: 43 bytes leftover after parsing attributes in process `syz.2.913'.
[  142.575840][ T9504] netlink: 'syz.2.913': attribute type 5 has an invalid length.
[  142.578808][ T9504] netlink: 43 bytes leftover after parsing attributes in process `syz.2.913'.
[  142.722892][ T9511] netlink: 'syz.2.914': attribute type 10 has an invalid length.
[  142.754213][ T9511] veth0_vlan: left promiscuous mode
[  142.757460][ T9511] veth0_vlan: entered promiscuous mode
[  142.761437][ T9511] team0: Device veth0_vlan failed to register rx_handler
[  142.798748][ T9516] lo speed is unknown, defaulting to 1000
[  142.813967][ T9519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'.
[  142.837755][ T9519] netlink: 312 bytes leftover after parsing attributes in process `syz.0.916'.
[  143.307085][ T9530] lo speed is unknown, defaulting to 1000
[  143.572383][ T9545] lo speed is unknown, defaulting to 1000
[  143.694056][ T9554] lo speed is unknown, defaulting to 1000
[  143.988807][ T9563] netlink: 'syz.1.928': attribute type 1 has an invalid length.
[  144.023877][ T9564] batadv1: entered promiscuous mode
[  144.025643][ T9564] batadv1: entered allmulticast mode
[  144.031561][ T9563] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  144.243140][ T9569] lo speed is unknown, defaulting to 1000
[  144.459202][ T9581] netlink: 'syz.2.931': attribute type 10 has an invalid length.
[  144.473841][ T9582] syzkaller1: entered promiscuous mode
[  144.475768][ T9582] syzkaller1: entered allmulticast mode
[  144.582300][ T9586] netlink: 'syz.2.933': attribute type 10 has an invalid length.
[  144.590252][ T9586] veth0_vlan: left promiscuous mode
[  144.595796][ T9586] veth0_vlan: entered promiscuous mode
[  144.598624][ T9586] team0: Device veth0_vlan failed to register rx_handler
[  144.962180][ T9593] lo speed is unknown, defaulting to 1000
[  145.015399][ T9595] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  145.312906][ T9607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  145.452089][ T9618] lo speed is unknown, defaulting to 1000
[  145.491696][ T9623] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  145.497840][ T9622] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  145.547431][ T9627] syzkaller0: entered promiscuous mode
[  145.549557][ T9627] syzkaller0: entered allmulticast mode
[  145.600055][ T9621] lo speed is unknown, defaulting to 1000
[  145.801527][ T9631] lo speed is unknown, defaulting to 1000
[  145.910739][ T9637] lo speed is unknown, defaulting to 1000
[  145.955710][ T9643] team_slave_1: left allmulticast mode
[  146.123656][ T9649] netlink: 'syz.0.946': attribute type 10 has an invalid length.
[  146.282741][ T9652] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[  146.286976][ T9653] __nla_validate_parse: 4 callbacks suppressed
[  146.286986][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'.
[  146.610758][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'.
[  146.613777][ T9662] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  146.661441][ T9662] syzkaller1: entered promiscuous mode
[  146.663342][ T9662] syzkaller1: entered allmulticast mode
[  146.710518][ T9673] lo speed is unknown, defaulting to 1000
[  146.752198][ T9679] delete_channel: no stack
[  146.760103][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'.
[  146.812820][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'.
[  146.822973][ T9675] lo speed is unknown, defaulting to 1000
[  146.883638][ T9689] netlink: 'syz.0.956': attribute type 1 has an invalid length.
[  146.922876][ T9689] bond7: entered promiscuous mode
[  146.926498][ T9689] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.938250][ T9689] bond7: (slave bridge4): making interface the new active one
[  146.950473][ T9689] bridge4: entered promiscuous mode
[  146.960073][ T9689] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  147.057228][ T9692] lo speed is unknown, defaulting to 1000
[  147.077475][ T9694] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  147.275942][ T9704] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[  147.278440][ T9704] netlink: 208 bytes leftover after parsing attributes in process `syz.2.960'.
[  147.290634][ T9705] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[  147.300723][ T9705] netlink: 208 bytes leftover after parsing attributes in process `syz.2.960'.
[  147.402426][ T9707] lo speed is unknown, defaulting to 1000
[  147.424213][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.961'.
[  147.527465][ T9717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.530790][ T9715] syzkaller0: entered promiscuous mode
[  147.533560][ T9715] syzkaller0: entered allmulticast mode
[  147.558803][ T9717] tipc: Resetting bearer <eth:syzkaller0>
[  147.576282][ T9717] tipc: Resetting bearer <eth:syzkaller0>
[  147.585949][ T9717] tipc: Disabling bearer <eth:syzkaller0>
[  147.594551][ T9719] syzkaller1: entered promiscuous mode
[  147.596401][ T9719] syzkaller1: entered allmulticast mode
[  147.746878][ T9726] netlink: 'syz.2.966': attribute type 1 has an invalid length.
[  147.748445][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.967'.
[  147.765055][ T9726] 8021q: adding VLAN 0 to HW filter on device bond5
[  147.772806][ T9723] lo speed is unknown, defaulting to 1000
[  147.807841][ T9726] bond5: (slave veth5): Enslaving as an active interface with a down link
[  147.811638][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'.
[  147.870067][ T9734] netlink: 'syz.2.969': attribute type 10 has an invalid length.
[  147.877187][ T9734] veth0_vlan: left promiscuous mode
[  147.886455][ T9734] veth0_vlan: entered promiscuous mode
[  147.890789][ T9734] team0: Device veth0_vlan failed to register rx_handler
[  147.915242][ T9736] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  147.920689][ T9732] lo speed is unknown, defaulting to 1000
[  148.045244][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  148.250057][ T9754] vlan0: entered allmulticast mode
[  148.251871][ T9754] veth0_vlan: entered allmulticast mode
[  148.255294][ T9754] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  148.375499][ T9762] bridge0: port 1(erspan0) entered blocking state
[  148.378815][ T9762] bridge0: port 1(erspan0) entered disabled state
[  148.381059][ T9762] erspan0: entered allmulticast mode
[  148.384929][ T9762] erspan0: entered promiscuous mode
[  148.399781][ T9762] erspan0: left allmulticast mode
[  148.402476][ T9762] erspan0: left promiscuous mode
[  148.405000][ T9762] bridge0: port 1(erspan0) entered disabled state
[  148.410878][ T9759] pim6reg1: entered promiscuous mode
[  148.416338][ T9759] pim6reg1: entered allmulticast mode
[  148.477959][ T9769] veth0_vlan: left promiscuous mode
[  148.481921][ T9769] veth0_vlan: entered promiscuous mode
[  148.496990][ T9769] team0: Device veth0_vlan failed to register rx_handler
[  148.692110][ T9784] syzkaller1: entered promiscuous mode
[  148.697347][ T9784] syzkaller1: entered allmulticast mode
[  148.701782][ T9775] syzkaller1: entered promiscuous mode
[  148.707181][ T9775] syzkaller1: entered allmulticast mode
[  148.720700][ T9787] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  148.737906][ T9786] lo speed is unknown, defaulting to 1000
[  148.838974][ T9797] syzkaller1: left promiscuous mode
[  148.842852][ T9797] syzkaller1: left allmulticast mode
[  148.854602][ T9797] veth0_vlan: left promiscuous mode
[  148.857567][ T9797] veth0_vlan: entered promiscuous mode
[  148.861467][ T9797] team0: Device veth0_vlan failed to register rx_handler
[  148.908441][ T9799] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  148.941669][ T9794] lo speed is unknown, defaulting to 1000
[  149.151281][ T9808] validate_nla: 2 callbacks suppressed
[  149.151294][ T9808] netlink: 'syz.0.989': attribute type 4 has an invalid length.
[  149.185420][ T9810] syzkaller1: left promiscuous mode
[  149.188874][ T9810] syzkaller1: left allmulticast mode
[  149.195225][ T9810] netlink: 'syz.1.990': attribute type 10 has an invalid length.
[  149.198773][ T9810] team0: Device veth0_vlan failed to register rx_handler
[  149.285631][ T9814] lo speed is unknown, defaulting to 1000
[  149.307599][ T9819] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  149.529919][ T9820] lo speed is unknown, defaulting to 1000
[  149.748292][ T9827] lo speed is unknown, defaulting to 1000
[  150.205778][ T9855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.957349][ T9861] netlink: 'syz.0.1003': attribute type 9 has an invalid length.
[  151.070288][ T9868] pim6reg: entered allmulticast mode
[  151.077173][ T9868] pim6reg: left allmulticast mode
[  151.170096][ T9877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.173080][ T9877] syzkaller0: entered promiscuous mode
[  151.176389][ T9877] syzkaller0: entered allmulticast mode
[  151.190622][ T9877] tipc: Resetting bearer <eth:syzkaller0>
[  151.226744][ T9877] lo speed is unknown, defaulting to 1000
[  151.419119][ T9875] tipc: Resetting bearer <eth:syzkaller0>
[  151.426290][ T9875] tipc: Disabling bearer <eth:syzkaller0>
[  151.514021][ T9882] lo speed is unknown, defaulting to 1000
[  151.558375][ T9883] bond7: (slave bridge4): Releasing backup interface
[  151.561057][ T9883] bridge4: left promiscuous mode
[  151.740134][ T9886] lo speed is unknown, defaulting to 1000
[  151.917318][ T9892] lo speed is unknown, defaulting to 1000
[  151.968922][ T9898] __nla_validate_parse: 7 callbacks suppressed
[  151.968932][ T9898] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1014'.
[  151.979936][ T9898] netlink: 'syz.0.1014': attribute type 10 has an invalid length.
[  152.029495][ T9901] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  152.033829][ T9901] team0: Device veth0_vlan failed to register rx_handler
[  152.117145][ T9906] lo speed is unknown, defaulting to 1000
[  152.134642][ T9909] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  152.170248][ T9911] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  152.215141][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  152.231655][ T9917] netlink: 'syz.2.1018': attribute type 2 has an invalid length.
[  152.267948][ T9920] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001
[  152.293644][ T9908] lo speed is unknown, defaulting to 1000
[  152.417699][ T9924] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1020'.
[  152.496639][ T9922] lo speed is unknown, defaulting to 1000
[  152.549242][ T9929] netlink: 'syz.0.1021': attribute type 2 has an invalid length.
[  152.676687][ T9927] lo speed is unknown, defaulting to 1000
[  152.719761][ T9934] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  152.787748][ T9933] lo speed is unknown, defaulting to 1000
[  152.799498][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1023'.
[  153.202082][ T9956] lo speed is unknown, defaulting to 1000
[  153.220172][ T9953] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.236540][ T9953] netlink: 'syz.1.1026': attribute type 4 has an invalid length.
[  153.320034][ T9969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.322939][ T9969] syzkaller0: entered promiscuous mode
[  153.324927][ T9969] syzkaller0: entered allmulticast mode
[  153.329470][ T9969] tipc: Resetting bearer <eth:syzkaller0>
[  153.341776][ T9968] tipc: Resetting bearer <eth:syzkaller0>
[  153.368531][ T9968] tipc: Disabling bearer <eth:syzkaller0>
[  153.592520][ T9987] lo speed is unknown, defaulting to 1000
[  153.683322][ T9994] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  153.737249][ T9990] lo speed is unknown, defaulting to 1000
[  153.962567][ T9996] lo speed is unknown, defaulting to 1000
[  154.004586][ T9997] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  154.151196][T10001] vlan1: entered promiscuous mode
[  154.153021][T10001] vlan1: entered allmulticast mode
[  154.361127][T10005] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  154.580784][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  154.625245][T10025] syzkaller0: refused to change device tx_queue_len
[  155.033086][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'.
[  155.212671][T10051] lo speed is unknown, defaulting to 1000
[  155.257362][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  155.770900][T10070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1058'.
[  155.843252][T10075] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  155.850110][T10070] bond0 (unregistering): Released all slaves
[  155.888556][T10074] lo speed is unknown, defaulting to 1000
[  156.212404][T10091] netlink: 'syz.0.1064': attribute type 31 has an invalid length.
[  156.251546][T10091] GUP no longer grows the stack in syz.0.1064 (10091): 200000003000-20000000a000 (200000001000)
[  156.256393][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.1064 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  156.256405][T10091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.256410][T10091] Call Trace:
[  156.256413][T10091]  <TASK>
[  156.256417][T10091]  dump_stack_lvl+0x189/0x250
[  156.256433][T10091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.256442][T10091]  ? __pfx__printk+0x10/0x10
[  156.256452][T10091]  ? find_vma+0xe7/0x160
[  156.256463][T10091]  ? __lock_acquire+0xab9/0xd20
[  156.256480][T10091]  __get_user_pages+0x24d0/0x2ce0
[  156.256492][T10091]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  156.256513][T10091]  ? rcu_is_watching+0x15/0xb0
[  156.256523][T10091]  __gup_longterm_locked+0xde9/0x1660
[  156.256538][T10091]  ? sanity_check_pinned_pages+0x123a/0x1300
[  156.256551][T10091]  gup_fast_fallback+0x1e6a/0x2010
[  156.256573][T10091]  ? __pfx_gup_fast_fallback+0x10/0x10
[  156.256589][T10091]  ? pin_user_pages_fast+0x4d/0xb0
[  156.256600][T10091]  iov_iter_extract_pages+0x35a/0x5e0
[  156.256611][T10091]  extract_iter_to_sg+0xe46/0x24e0
[  156.256628][T10091]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  156.256645][T10091]  ? __asan_memset+0x22/0x50
[  156.256655][T10091]  af_alg_get_rsgl+0x436/0x810
[  156.256671][T10091]  aead_recvmsg+0x4cc/0x13f0
[  156.256684][T10091]  ? rcu_is_watching+0x15/0xb0
[  156.256695][T10091]  ? __pfx_aead_recvmsg+0x10/0x10
[  156.256705][T10091]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  156.256714][T10091]  ? __pfx_aead_recvmsg+0x10/0x10
[  156.256725][T10091]  sock_recvmsg_nosec+0x186/0x1c0
[  156.256736][T10091]  ____sys_recvmsg+0x3aa/0x460
[  156.256750][T10091]  ? __pfx_____sys_recvmsg+0x10/0x10
[  156.256768][T10091]  ? import_iovec+0x74/0xa0
[  156.256777][T10091]  ___sys_recvmsg+0x1b5/0x510
[  156.256790][T10091]  ? __pfx____sys_recvmsg+0x10/0x10
[  156.256814][T10091]  ? __might_fault+0xb0/0x130
[  156.256826][T10091]  do_recvmmsg+0x307/0x770
[  156.256841][T10091]  ? __pfx_do_recvmmsg+0x10/0x10
[  156.256851][T10091]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  156.256868][T10091]  ? __pfx_do_futex+0x10/0x10
[  156.256884][T10091]  __x64_sys_recvmmsg+0x190/0x240
[  156.256897][T10091]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  156.256907][T10091]  ? rcu_is_watching+0x15/0xb0
[  156.256917][T10091]  ? do_syscall_64+0xbe/0x3b0
[  156.256929][T10091]  do_syscall_64+0xfa/0x3b0
[  156.256938][T10091]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.256953][T10091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.256962][T10091]  ? exc_page_fault+0x9f/0xf0
[  156.256973][T10091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.256980][T10091] RIP: 0033:0x7f4db5b8ebe9
[  156.256990][T10091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.256996][T10091] RSP: 002b:00007f4db6983038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  156.257007][T10091] RAX: ffffffffffffffda RBX: 00007f4db5db5fa0 RCX: 00007f4db5b8ebe9
[  156.257013][T10091] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000009
[  156.257018][T10091] RBP: 00007f4db5c11e19 R08: 0000000000000000 R09: 0000000000000000
[  156.257024][T10091] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  156.257030][T10091] R13: 00007f4db5db6038 R14: 00007f4db5db5fa0 R15: 00007fffa414e038
[  156.257043][T10091]  </TASK>
[  156.419637][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.459595][T10105] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1068'.
[  156.464923][T10105] sctp: [Deprecated]: syz.0.1068 (pid 10105) Use of int in max_burst socket option deprecated.
[  156.464923][T10105] Use struct sctp_assoc_value instead
[  156.523749][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  156.588419][T10108] netlink: 'syz.1.1069': attribute type 10 has an invalid length.
[  156.594347][T10108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  156.597983][T10108] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  157.032112][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'.
[  157.159761][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'.
[  157.395059][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  157.397835][T10135] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.402530][T10135] syzkaller0: entered promiscuous mode
[  157.409460][T10135] syzkaller0: entered allmulticast mode
[  157.416041][T10135] tipc: Resetting bearer <eth:syzkaller0>
[  157.419007][T10135] syzkaller0: tun_net_xmit 90
[  157.472471][T10139] syzkaller0: Caught tx_queue_len zero misconfig
[  157.563503][    C1] syzkaller0: tun_net_xmit 90
[  157.570633][T10143] netlink: 'syz.1.1080': attribute type 10 has an invalid length.
[  157.578611][T10143] team0: Device veth0_vlan failed to register rx_handler
[  157.703682][    C1] syzkaller0: tun_net_xmit 90
[  157.843638][    C1] syzkaller0: tun_net_xmit 90
[  157.983694][    C1] syzkaller0: tun_net_xmit 90
[  158.123478][    C1] syzkaller0: tun_net_xmit 90
[  158.167811][T10125] tipc: Resetting bearer <eth:syzkaller0>
[  158.175086][T10125] tipc: Disabling bearer <eth:syzkaller0>
[  158.260737][T10145] netlink: 'syz.0.1081': attribute type 1 has an invalid length.
[  158.298149][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'.
[  158.346387][T10148] netlink: 'syz.2.1082': attribute type 10 has an invalid length.
[  158.412283][T10152] lo speed is unknown, defaulting to 1000
[  158.591836][T10165] lo speed is unknown, defaulting to 1000
[  158.899503][T10169] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  158.903558][T10168] lo speed is unknown, defaulting to 1000
[  159.821836][T10193] netlink: 'syz.1.1092': attribute type 10 has an invalid length.
[  159.827810][T10193] team0: Device veth0_vlan failed to register rx_handler
[  159.848163][T10197] netlink: 'syz.2.1093': attribute type 31 has an invalid length.
[  160.018986][T10213] netlink: 'syz.1.1097': attribute type 1 has an invalid length.
[  160.022153][T10213] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1097'.
[  160.123588][T10220] lo speed is unknown, defaulting to 1000
[  160.171781][T10226] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  160.281479][T10233] syzkaller1: entered allmulticast mode
[  160.372874][T10242] syzkaller1: left allmulticast mode
[  160.555641][T10265] netlink: 'syz.0.1113': attribute type 10 has an invalid length.
[  160.561114][T10271] netlink: 'syz.0.1113': attribute type 10 has an invalid length.
[  160.571949][T10269] lo speed is unknown, defaulting to 1000
[  160.610077][T10274] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  160.618301][T10275] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  160.686535][T10270] lo speed is unknown, defaulting to 1000
[  160.716074][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1117'.
[  160.877547][T10290] lo speed is unknown, defaulting to 1000
[  160.922663][T10300] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.151123][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'.
[  161.171283][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'.
[  161.222922][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'.
[  161.229538][T10310] validate_nla: 2 callbacks suppressed
[  161.229550][T10310] netlink: 'syz.2.1124': attribute type 30 has an invalid length.
[  161.235739][ T5861] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.251851][ T5861] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.260372][ T5861] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.297605][ T5861] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.300986][T10309] lo speed is unknown, defaulting to 1000
[  161.310837][T10313] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  161.852658][T10341] netlink: 'syz.0.1130': attribute type 10 has an invalid length.
[  161.943230][T10347] lo speed is unknown, defaulting to 1000
[  162.128272][T10361] lo speed is unknown, defaulting to 1000
[  162.651897][T10373] lo speed is unknown, defaulting to 1000
[  162.874706][T10384] lo speed is unknown, defaulting to 1000
[  162.918523][T10386] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  163.103356][T10400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.114455][T10400] syzkaller0: entered promiscuous mode
[  163.123328][T10400] syzkaller0: entered allmulticast mode
[  163.265909][T10400] tipc: Resetting bearer <eth:syzkaller0>
[  163.278802][T10399] tipc: Resetting bearer <eth:syzkaller0>
[  163.284634][T10419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1147'.
[  163.288940][T10399] tipc: Disabling bearer <eth:syzkaller0>
[  163.769586][T10451] bridge2: entered allmulticast mode
[  163.814917][T10435] vlan2: entered allmulticast mode
[  163.880022][T10453] netlink: 'syz.0.1151': attribute type 83 has an invalid length.
[  163.910328][T10455] lo speed is unknown, defaulting to 1000
[  164.038037][T10465] lo speed is unknown, defaulting to 1000
[  164.124303][T10474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'.
[  164.181475][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'.
[  164.221483][T10468] lo speed is unknown, defaulting to 1000
[  164.579503][T10488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1166'.
[  164.877625][T10504] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  164.937963][T10500] lo speed is unknown, defaulting to 1000
[  164.962072][T10507] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  165.132496][T10502] lo speed is unknown, defaulting to 1000
[  165.172683][T10512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  165.282978][T10510] lo speed is unknown, defaulting to 1000
[  165.580575][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'.
[  165.660348][T10517] lo speed is unknown, defaulting to 1000
[  165.675190][T10520] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  165.855975][T10530] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  165.879589][T10524] lo speed is unknown, defaulting to 1000
[  166.066107][T10535] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  166.081910][T10534] lo speed is unknown, defaulting to 1000
[  166.672666][T10547] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  166.678963][T10545] lo speed is unknown, defaulting to 1000
[  166.736170][T10550] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  167.007978][T10548] lo speed is unknown, defaulting to 1000
[  167.176494][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'.
[  167.198083][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'.
[  167.265907][T10565] lo speed is unknown, defaulting to 1000
[  167.286669][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'.
[  167.512286][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  167.528763][T10583] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.535542][T10583] bond0: (slave rose0): Enslaving as an active interface with an up link
[  167.592462][T10577] lo speed is unknown, defaulting to 1000
[  167.708163][T10588] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  167.832533][T10586] lo speed is unknown, defaulting to 1000
[  167.864003][T10595] veth1_to_team: left allmulticast mode
[  167.868648][T10595] netlink: 'syz.0.1191': attribute type 3 has an invalid length.
[  168.052576][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'.
[  168.258850][T10609] lo speed is unknown, defaulting to 1000
[  168.293532][T10612] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  168.506434][T10615] netlink: 'syz.0.1196': attribute type 3 has an invalid length.
[  169.065231][T10632] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003
[  169.072505][T10630] lo speed is unknown, defaulting to 1000
[  169.282186][T10643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  169.289687][T10641] lo speed is unknown, defaulting to 1000
[  169.795301][T10651] netlink: 'syz.1.1203': attribute type 10 has an invalid length.
[  169.800134][T10651] team0: Device veth0_vlan failed to register rx_handler
[  169.836885][T10662] mac80211_hwsim hwsim4 ": renamed from wlan0
[  169.896929][T10667] netlink: 'syz.2.1206': attribute type 1 has an invalid length.
[  169.919918][T10669] __nla_validate_parse: 1 callbacks suppressed
[  169.919928][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'.
[  169.932243][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'.
[  169.941628][T10667] 8021q: adding VLAN 0 to HW filter on device bond8
[  169.947348][T10667] bond7: (slave bond8): making interface the new active one
[  169.950032][T10667] bond7: (slave bond8): Enslaving as an active interface with an up link
[  170.008300][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'.
[  170.020333][T10678] 8021q: adding VLAN 0 to HW filter on device bond7
[  170.212873][T10694] lo speed is unknown, defaulting to 1000
[  170.258923][T10697] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  170.307531][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  170.402761][T10704] lo speed is unknown, defaulting to 1000
[  170.495519][T10709] tap0: tun_chr_ioctl cmd 1074025678
[  170.497520][T10709] tap0: group set to 0
[  170.499660][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'.
[  170.804745][T10711] lo speed is unknown, defaulting to 1000
[  170.966036][T10717] lo speed is unknown, defaulting to 1000
[  171.302287][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'.
[  171.319241][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1222'.
[  171.323252][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1222'.
[  171.329156][T10728] netlink: 'syz.2.1222': attribute type 1 has an invalid length.
[  171.578934][T10736] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1225'.
[  171.640847][T10738] veth0_to_bridge: entered promiscuous mode
[  171.647526][T10737] veth0_to_bridge: left promiscuous mode
[  171.817378][T10750] syzkaller1: entered promiscuous mode
[  171.822951][T10750] syzkaller1: entered allmulticast mode
[  171.878295][T10754] lo speed is unknown, defaulting to 1000
[  171.959786][T10759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'.
[  172.032943][T10757] lo speed is unknown, defaulting to 1000
[  172.659180][T10772] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  172.695346][T10775] lo speed is unknown, defaulting to 1000
[  172.878290][T10781] lo speed is unknown, defaulting to 1000
[  172.912272][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'.
[  173.141349][T10795] lo speed is unknown, defaulting to 1000
[  173.406651][T10814] vxcan1: entered allmulticast mode
[  173.878780][T10838] syzkaller1: entered allmulticast mode
[  173.882388][T10835] lo speed is unknown, defaulting to 1000
[  174.190298][T10876] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  174.249464][T10882] netlink: 'syz.1.1261': attribute type 1 has an invalid length.
[  174.285289][T10881] netlink: 'syz.0.1258': attribute type 2 has an invalid length.
[  174.288654][T10881] netlink: 'syz.0.1258': attribute type 83 has an invalid length.
[  174.301914][T10878] lo speed is unknown, defaulting to 1000
[  174.415995][T10885] lo speed is unknown, defaulting to 1000
[  174.502792][T10890] netlink: 'syz.2.1264': attribute type 20 has an invalid length.
[  174.509527][T10890] netlink: 'syz.2.1264': attribute type 21 has an invalid length.
[  174.517069][T10890] tipc: Resetting bearer <eth:syzkaller0>
[  174.519246][T10890] tipc: Resetting bearer <eth:syzkaller0>
[  174.598551][T10895] syzkaller1: left allmulticast mode
[  174.768698][T10899] bond9: entered promiscuous mode
[  174.770867][T10899] 8021q: adding VLAN 0 to HW filter on device bond9
[  174.869675][T10905] lo speed is unknown, defaulting to 1000
[  175.138404][T10921] __nla_validate_parse: 11 callbacks suppressed
[  175.138417][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  175.169435][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  175.385562][T10940] lo speed is unknown, defaulting to 1000
[  175.418195][T10943] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  175.418374][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'.
[  175.446051][T10935] netlink: 'syz.2.1278': attribute type 1 has an invalid length.
[  175.449418][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1278'.
[  175.553820][T10952] ==================================================================
[  175.556366][T10952] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  175.558937][T10952] Read of size 1 at addr ffff888032698330 by task syz.1.1282/10952
[  175.562689][T10952] 
[  175.563528][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.1.1282 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  175.563541][T10952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.563548][T10952] Call Trace:
[  175.563553][T10952]  <TASK>
[  175.563556][T10952]  dump_stack_lvl+0x189/0x250
[  175.563569][T10952]  ? __virt_addr_valid+0x1c8/0x5c0
[  175.563581][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.563588][T10952]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.563597][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.563605][T10952]  ? lock_release+0x4b/0x3e0
[  175.563616][T10952]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  175.563625][T10952]  ? __virt_addr_valid+0x1c8/0x5c0
[  175.563634][T10952]  ? __virt_addr_valid+0x4a5/0x5c0
[  175.563642][T10952]  print_report+0xca/0x240
[  175.563650][T10952]  ? __xfrm_state_insert+0x8af/0x1450
[  175.563661][T10952]  kasan_report+0x118/0x150
[  175.563672][T10952]  ? __xfrm_state_insert+0x8af/0x1450
[  175.563684][T10952]  __xfrm_state_insert+0x8af/0x1450
[  175.563695][T10952]  ? xfrm_state_insert+0x44/0x60
[  175.563705][T10952]  xfrm_state_insert+0x54/0x60
[  175.563716][T10952]  ipcomp6_init_state+0x655/0x900
[  175.563728][T10952]  __xfrm_init_state+0xa76/0x13f0
[  175.563735][T10952]  ? __xfrm_init_state+0x7ef/0x13f0
[  175.563742][T10952]  xfrm_add_sa+0x2f5b/0x4070
[  175.563751][T10952]  ? __pfx_xfrm_add_sa+0x10/0x10
[  175.563757][T10952]  ? apparmor_capable+0x137/0x1b0
[  175.563767][T10952]  ? __nla_parse+0x40/0x60
[  175.563777][T10952]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.563785][T10952]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.563798][T10952]  ? __pfx___mutex_trylock_common+0x10/0x10
[  175.563806][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.563813][T10952]  ? trace_contention_end+0x39/0x120
[  175.563821][T10952]  ? __mutex_lock+0x335/0x1360
[  175.563833][T10952]  netlink_rcv_skb+0x208/0x470
[  175.563843][T10952]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.563852][T10952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.563864][T10952]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.563874][T10952]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.563882][T10952]  xfrm_netlink_rcv+0x79/0x90
[  175.563889][T10952]  netlink_unicast+0x82f/0x9e0
[  175.563903][T10952]  ? __pfx_netlink_unicast+0x10/0x10
[  175.563910][T10952]  ? netlink_sendmsg+0x642/0xb30
[  175.563919][T10952]  ? skb_put+0x11b/0x210
[  175.563929][T10952]  netlink_sendmsg+0x805/0xb30
[  175.563939][T10952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.563949][T10952]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.563958][T10952]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.563966][T10952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.563975][T10952]  __sock_sendmsg+0x21c/0x270
[  175.563983][T10952]  ____sys_sendmsg+0x505/0x830
[  175.563995][T10952]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.564008][T10952]  ? import_iovec+0x74/0xa0
[  175.564021][T10952]  ___sys_sendmsg+0x21f/0x2a0
[  175.564031][T10952]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.564050][T10952]  ? __fget_files+0x2a/0x420
[  175.564061][T10952]  ? __fget_files+0x3a0/0x420
[  175.564075][T10952]  __x64_sys_sendmsg+0x19b/0x260
[  175.564086][T10952]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.564099][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.564107][T10952]  ? do_syscall_64+0xbe/0x3b0
[  175.564119][T10952]  do_syscall_64+0xfa/0x3b0
[  175.564128][T10952]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.564136][T10952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.564143][T10952]  ? exc_page_fault+0x9f/0xf0
[  175.564152][T10952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.564159][T10952] RIP: 0033:0x7f6782b8ebe9
[  175.564166][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.564203][T10952] RSP: 002b:00007f67839a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.564213][T10952] RAX: ffffffffffffffda RBX: 00007f6782db5fa0 RCX: 00007f6782b8ebe9
[  175.564220][T10952] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000004
[  175.564225][T10952] RBP: 00007f6782c11e19 R08: 0000000000000000 R09: 0000000000000000
[  175.564230][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.564235][T10952] R13: 00007f6782db6038 R14: 00007f6782db5fa0 R15: 00007ffd0cb3c298
[  175.564245][T10952]  </TASK>
[  175.564247][T10952] 
[  175.694951][T10952] Allocated by task 7462:
[  175.696354][T10952]  kasan_save_track+0x3e/0x80
[  175.697835][T10952]  __kasan_slab_alloc+0x6c/0x80
[  175.699375][T10952]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  175.701136][T10952]  xfrm_state_alloc+0x24/0x2f0
[  175.702687][T10952]  __find_acq_core+0x8a7/0x1c00
[  175.704252][T10952]  xfrm_find_acq+0x78/0xa0
[  175.705726][T10952]  xfrm_alloc_userspi+0x6b3/0xc90
[  175.707407][T10952]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.709066][T10952]  netlink_rcv_skb+0x208/0x470
[  175.710606][T10952]  xfrm_netlink_rcv+0x79/0x90
[  175.712075][T10952]  netlink_unicast+0x82f/0x9e0
[  175.713597][T10952]  netlink_sendmsg+0x805/0xb30
[  175.715139][T10952]  __sock_sendmsg+0x21c/0x270
[  175.716641][T10952]  ____sys_sendmsg+0x505/0x830
[  175.718144][T10952]  ___sys_sendmsg+0x21f/0x2a0
[  175.719635][T10952]  __x64_sys_sendmsg+0x19b/0x260
[  175.721421][T10952]  do_syscall_64+0xfa/0x3b0
[  175.723058][T10952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.724873][T10952] 
[  175.725659][T10952] Freed by task 6133:
[  175.726924][T10952]  kasan_save_track+0x3e/0x80
[  175.728402][T10952]  kasan_save_free_info+0x46/0x50
[  175.729952][T10952]  __kasan_slab_free+0x5b/0x80
[  175.731472][T10952]  kmem_cache_free+0x18f/0x400
[  175.733037][T10952]  xfrm_state_gc_task+0x52d/0x6b0
[  175.734689][T10952]  process_scheduled_works+0xae1/0x17b0
[  175.736478][T10952]  worker_thread+0x8a0/0xda0
[  175.737930][T10952]  kthread+0x711/0x8a0
[  175.739208][T10952]  ret_from_fork+0x3fc/0x770
[  175.740669][T10952]  ret_from_fork_asm+0x1a/0x30
[  175.742233][T10952] 
[  175.743014][T10952] The buggy address belongs to the object at ffff888032698000
[  175.743014][T10952]  which belongs to the cache xfrm_state of size 928
[  175.747413][T10952] The buggy address is located 816 bytes inside of
[  175.747413][T10952]  freed 928-byte region [ffff888032698000, ffff8880326983a0)
[  175.751707][T10952] 
[  175.752463][T10952] The buggy address belongs to the physical page:
[  175.754506][T10952] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032698480 pfn:0x32698
[  175.757743][T10952] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  175.760455][T10952] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  175.762881][T10952] page_type: f5(slab)
[  175.764204][T10952] raw: 00fff00000000040 ffff88801d74c280 dead000000000122 0000000000000000
[  175.766994][T10952] raw: ffff888032698480 00000000800e000c 00000000f5000000 0000000000000000
[  175.769796][T10952] head: 00fff00000000040 ffff88801d74c280 dead000000000122 0000000000000000
[  175.772587][T10952] head: ffff888032698480 00000000800e000c 00000000f5000000 0000000000000000
[  175.775384][T10952] head: 00fff00000000002 ffffea0000c9a601 00000000ffffffff 00000000ffffffff
[  175.778167][T10952] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  175.780963][T10952] page dumped because: kasan: bad access detected
[  175.783036][T10952] page_owner tracks the page as allocated
[  175.784915][T10952] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6726, tgid 6725 (syz.1.206), ts 64409899035, free_ts 64409528459
[  175.790928][T10952]  post_alloc_hook+0x240/0x2a0
[  175.792493][T10952]  get_page_from_freelist+0x21e4/0x22c0
[  175.794300][T10952]  __alloc_frozen_pages_noprof+0x181/0x370
[  175.796212][T10952]  alloc_pages_mpol+0x232/0x4a0
[  175.797787][T10952]  allocate_slab+0x8a/0x370
[  175.799274][T10952]  ___slab_alloc+0xbeb/0x1410
[  175.800807][T10952]  kmem_cache_alloc_noprof+0x283/0x3c0
[  175.802568][T10952]  xfrm_state_alloc+0x24/0x2f0
[  175.804132][T10952]  __find_acq_core+0x8a7/0x1c00
[  175.805740][T10952]  xfrm_find_acq+0x78/0xa0
[  175.807218][T10952]  xfrm_alloc_userspi+0x6b3/0xc90
[  175.808860][T10952]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.810412][T10952]  netlink_rcv_skb+0x208/0x470
[  175.811914][T10952]  xfrm_netlink_rcv+0x79/0x90
[  175.813368][T10952]  netlink_unicast+0x82f/0x9e0
[  175.814890][T10952]  netlink_sendmsg+0x805/0xb30
[  175.816423][T10952] page last free pid 6726 tgid 6725 stack trace:
[  175.818363][T10952]  __free_frozen_pages+0xbc4/0xd30
[  175.819974][T10952]  stack_depot_save_flags+0x436/0x860
[  175.821659][T10952]  kasan_save_track+0x4f/0x80
[  175.823123][T10952]  __kasan_slab_alloc+0x6c/0x80
[  175.824711][T10952]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  175.826561][T10952]  __alloc_skb+0x112/0x2d0
[  175.827971][T10952]  netlink_ack+0x146/0xa50
[  175.829376][T10952]  netlink_rcv_skb+0x28c/0x470
[  175.830870][T10952]  crypto_netlink_rcv+0x2a/0x40
[  175.832478][T10952]  netlink_unicast+0x82f/0x9e0
[  175.834053][T10952]  netlink_sendmsg+0x805/0xb30
[  175.835615][T10952]  __sock_sendmsg+0x21c/0x270
[  175.837077][T10952]  ____sys_sendmsg+0x505/0x830
[  175.838561][T10952]  ___sys_sendmsg+0x21f/0x2a0
[  175.840057][T10952]  __x64_sys_sendmsg+0x19b/0x260
[  175.841961][T10952]  do_syscall_64+0xfa/0x3b0
[  175.843603][T10952] 
[  175.844369][T10952] Memory state around the buggy address:
[  175.846281][T10952]  ffff888032698200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.849003][T10952]  ffff888032698280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.851449][T10952] >ffff888032698300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  175.853956][T10952]                                      ^
[  175.855774][T10952]  ffff888032698380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  175.858399][T10952]  ffff888032698400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  175.860974][T10952] ==================================================================
[  175.863618][T10952] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  175.865881][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.1.1282 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  175.870375][T10952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.874374][T10952] Call Trace:
[  175.875809][T10952]  <TASK>
[  175.876945][T10952]  dump_stack_lvl+0x99/0x250
[  175.878710][T10952]  ? __asan_memcpy+0x40/0x70
[  175.880557][T10952]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.882605][T10952]  ? __pfx__printk+0x10/0x10
[  175.884390][T10952]  vpanic+0x281/0x750
[  175.885865][T10952]  ? __pfx_vpanic+0x10/0x10
[  175.887532][T10952]  ? irqentry_exit+0x74/0x90
[  175.889322][T10952]  panic+0xb9/0xc0
[  175.890640][T10952]  ? __pfx_panic+0x10/0x10
[  175.892073][T10952]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  175.893896][T10952]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  175.895826][T10952]  ? is_module_address+0x17/0xf0
[  175.897525][T10952]  ? __xfrm_state_insert+0x8af/0x1450
[  175.899348][T10952]  check_panic_on_warn+0x89/0xb0
[  175.901425][T10952]  ? __xfrm_state_insert+0x8af/0x1450
[  175.903546][T10952]  end_report+0x78/0x160
[  175.905371][T10952]  kasan_report+0x129/0x150
[  175.907062][T10952]  ? __xfrm_state_insert+0x8af/0x1450
[  175.909290][T10952]  __xfrm_state_insert+0x8af/0x1450
[  175.911361][T10952]  ? xfrm_state_insert+0x44/0x60
[  175.913145][T10952]  xfrm_state_insert+0x54/0x60
[  175.915127][T10952]  ipcomp6_init_state+0x655/0x900
[  175.917199][T10952]  __xfrm_init_state+0xa76/0x13f0
[  175.919335][T10952]  ? __xfrm_init_state+0x7ef/0x13f0
[  175.921521][T10952]  xfrm_add_sa+0x2f5b/0x4070
[  175.923464][T10952]  ? __pfx_xfrm_add_sa+0x10/0x10
[  175.925570][T10952]  ? apparmor_capable+0x137/0x1b0
[  175.927718][T10952]  ? __nla_parse+0x40/0x60
[  175.929614][T10952]  xfrm_user_rcv_msg+0x7a3/0xab0
[  175.931434][T10952]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.933248][T10952]  ? __pfx___mutex_trylock_common+0x10/0x10
[  175.935071][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.936583][T10952]  ? trace_contention_end+0x39/0x120
[  175.938312][T10952]  ? __mutex_lock+0x335/0x1360
[  175.939908][T10952]  netlink_rcv_skb+0x208/0x470
[  175.941489][T10952]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  175.943221][T10952]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.944915][T10952]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.946602][T10952]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.948314][T10952]  xfrm_netlink_rcv+0x79/0x90
[  175.949845][T10952]  netlink_unicast+0x82f/0x9e0
[  175.951354][T10952]  ? __pfx_netlink_unicast+0x10/0x10
[  175.953039][T10952]  ? netlink_sendmsg+0x642/0xb30
[  175.954611][T10952]  ? skb_put+0x11b/0x210
[  175.955966][T10952]  netlink_sendmsg+0x805/0xb30
[  175.957627][T10952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.959358][T10952]  ? aa_sock_msg_perm+0xf1/0x1d0
[  175.961405][T10952]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.963402][T10952]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.965112][T10952]  __sock_sendmsg+0x21c/0x270
[  175.966677][T10952]  ____sys_sendmsg+0x505/0x830
[  175.968286][T10952]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.969931][T10952]  ? import_iovec+0x74/0xa0
[  175.971525][T10952]  ___sys_sendmsg+0x21f/0x2a0
[  175.973094][T10952]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.974815][T10952]  ? __fget_files+0x2a/0x420
[  175.976303][T10952]  ? __fget_files+0x3a0/0x420
[  175.977849][T10952]  __x64_sys_sendmsg+0x19b/0x260
[  175.979530][T10952]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.981616][T10952]  ? rcu_is_watching+0x15/0xb0
[  175.983539][T10952]  ? do_syscall_64+0xbe/0x3b0
[  175.985324][T10952]  do_syscall_64+0xfa/0x3b0
[  175.986758][T10952]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.988458][T10952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.990484][T10952]  ? exc_page_fault+0x9f/0xf0
[  175.992003][T10952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.994000][T10952] RIP: 0033:0x7f6782b8ebe9
[  175.995512][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.002066][T10952] RSP: 002b:00007f67839a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.005369][T10952] RAX: ffffffffffffffda RBX: 00007f6782db5fa0 RCX: 00007f6782b8ebe9
[  176.008449][T10952] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000004
[  176.011639][T10952] RBP: 00007f6782c11e19 R08: 0000000000000000 R09: 0000000000000000
[  176.014332][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.016737][T10952] R13: 00007f6782db6038 R14: 00007f6782db5fa0 R15: 00007ffd0cb3c298
[  176.019214][T10952]  </TASK>
[  176.021216][T10952] Kernel Offset: disabled
[  176.022585][T10952] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:44:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017d5 RDI=00000000000017d6 RBP=00000000000003f8 RSP=ffffc9000487e9f0
R8 =ffff8880208b0237 R9 =1ffff11004116046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4900 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f67839a06c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000500 CR3=000000003222a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=70690001000b8037 001c000000000017
XMM02=00007f7933987498 00007f7933987470 XMM03=00007f79339874a8 00007f79339874a0
XMM04=00007f79344ed100 00007f7933987460 XMM05=00007f7933987478 00007f79339874c0
XMM06=00007f79339874b8 00007f79339874b0 XMM07=00007f79339874a8 00007f79339874a0
XMM08=dd11000cf89dc905 ebf37500175b35fc XMM09=0000000000000000 00007f7933812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8956bfe7 RBX=dffffc0000000000 RCX=0000000000080000 RDX=ffffc900214c5000
RSI=000000000007ffff RDI=0000000000080000 RBP=1ffff11024801244 RSP=ffffc9000698f880
R8 =ffffc9000698f9bf R9 =0000000000000000 R10=ffffc9000698f940 R11=fffff52000d31f38
R12=ffff888124009220 R13=ffffffff8c98beb0 R14=ffff888124009200 R15=ffffc9000698fce0
RIP=ffffffff8956bff6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f79345d46c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000016d030 CR3=0000000032466000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7933812e53
XMM06=0000000000000000 00007f7933812e4d XMM07=0000000000000000 00007f7933812e61
XMM08=0000000000000000 00007f7933812ee7 XMM09=0000000000000000 00007f7933812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
