last executing test programs:

3m10.760039491s ago: executing program 0 (id=2290):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m8.918754476s ago: executing program 0 (id=2292):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

3m8.309086823s ago: executing program 1 (id=2293):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

3m5.140260279s ago: executing program 1 (id=2295):
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4000002}, 0x4080)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, 0x0, 0x10)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080)

3m1.512526152s ago: executing program 0 (id=2297):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000180)="5ba04787c9152acf621ed50e326362", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3m0.077537146s ago: executing program 1 (id=2299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)

3m0.077369522s ago: executing program 0 (id=2300):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
read(r3, &(0x7f00000000c0)=""/81, 0x51)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x1)
setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0)

2m57.73884123s ago: executing program 2 (id=2301):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)

2m57.670259809s ago: executing program 1 (id=2302):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0)

2m56.942983716s ago: executing program 2 (id=2303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20)

2m56.806202074s ago: executing program 1 (id=2304):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x10c, 0x1, [@m_ctinfo={0x108, 0x1b, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xb, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x89, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m55.389299193s ago: executing program 2 (id=2305):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

2m53.398419337s ago: executing program 0 (id=2306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x2, 0x3, 0x9, 0x6, 0x3, 0x1800, 0x9, 0x3}}}}]}, 0x58}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m53.34359234s ago: executing program 1 (id=2307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x8080)

2m51.619641644s ago: executing program 2 (id=2308):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000c3"], 0x1c}}, 0x0)

2m49.25977307s ago: executing program 0 (id=2309):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r3, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
nanosleep(0x0, 0x0)

2m48.987687169s ago: executing program 2 (id=2310):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2m44.052990937s ago: executing program 2 (id=2311):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffe87)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket(0x10, 0x2, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfd5d, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8004)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=<r5=>r1, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x62040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840)
listen(0xffffffffffffffff, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

2m37.092137105s ago: executing program 32 (id=2307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x8080)

2m34.306475947s ago: executing program 33 (id=2309):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r3, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x60, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x60}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r7, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0)
nanosleep(0x0, 0x0)

2m29.178960527s ago: executing program 34 (id=2311):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfffffffffffffe87)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
socket(0x10, 0x2, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfd5d, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8004)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=<r5=>r1, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x62040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r4, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRESHEX=0x0, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xffffffffffffff7c)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r8, &(0x7f0000002840)=[{{0x0, 0xffffffffffffffe3, 0x0}}], 0x1, 0x4000840)
listen(0xffffffffffffffff, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

2.009424763s ago: executing program 4 (id=5676):
r0 = socket$nl_route(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000040)=""/225, 0xe1)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0)

1.8775554s ago: executing program 4 (id=5680):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x6, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

1.877203814s ago: executing program 4 (id=5681):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000041010102000000000000000000000000000001802c00038006000200badd6fb506000100060002004e240000060002004e000000000049a000"/74], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)
close(r0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0xe722e18}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x89b1, &(0x7f0000000040)={'tunl0\x00', 0xfffffffe})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, 0x0, &(0x7f0000000300))

978.291936ms ago: executing program 4 (id=5704):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast]}, 0x48)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10)

499.818423ms ago: executing program 5 (id=5726):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x8}, 0xa34})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xffffffff, 0x1000, 0x8, 0x2100, 0xffffffffffffffff, 0x6, '\x00', r1, r2, 0x1, 0x5, 0x3}, 0x50)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0x78, 0xca, &(0x7f0000000240)="ddc44848a52e273d872ca6521c9723cd42664a350d9d4fd96af826c355957db16064d4f5345c67ce49f4baa2c24ccae51fb8adbf05d7ab065241dd7be624760a06a96b728c5b713bfdb84d7197ee624f7505d1cd8e2e65b78bd5fcb04f52e2c44ae5a22bd27a8d01f165734c07f390b3e27ad1e959b5bd12", &(0x7f00000002c0)=""/202, 0x3, 0x0, 0x58, 0x0, &(0x7f00000003c0)="8cfe91f5a8d8d717ed55a82ba38d670021500ca1b85238a98c89d030ec111bdee496e960ce5675f79f8493a2d6d1cf46f894217998d18e55dc84efc7ab020d352f5abc6e898b59d6a12f7418d26197bcbf2b705214bfecc9", &(0x7f0000000440), 0x0, 0x0, 0xe4e6}, 0x50)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet(r0, &(0x7f0000002bc0), 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000002d80), 0x0}, 0x20)
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e40)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f0000002e80)={'veth0_to_hsr\x00'})
r7 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000002ec0)}, 0x40000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004480)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x4, '\x00', r1, r2, 0x5, 0x3, 0x3}, 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005940)={r2, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000005a40))
getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, &(0x7f0000005ac0))
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000005b00)={'veth1_to_hsr\x00', 0x400})
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000005b40)={'veth1_macvtap\x00', 0x9})
syz_genetlink_get_family_id$batadv(&(0x7f0000005bc0), r8)

420.036541ms ago: executing program 5 (id=5728):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

326.872082ms ago: executing program 3 (id=5731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000101c0)=ANY=[@ANYBLOB="021800090b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x4, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000000c0)=""/237, 0xed}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x1fd}], 0x6, 0x4022, 0x0)

323.550987ms ago: executing program 3 (id=5732):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000021dfd636dcc26c30c39fc94f195f09e4ced60a98caedb044b8467d8f62100d4503a6bce8f9d69bad1c121c8039862483ae7601fcd855a73aca848a16308aa0e51b3fe422115e111407df5ca7daeb000000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1d, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='kvm_test_age_hva\x00', r5}, 0x18)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="030000001801238c09d0ff0f1d0dbd30", 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="33000000fc77ffffffffffff", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r2], 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000100)="2fa20bdb5443df167bcadf985adfb7341cf1732e550a7556dc3f3e8b2adc7479ce4c2a16cc767bc540e789f61ec81431dd418d6f641f13d6a0c61640d52b6dc0cba789422b2e98", 0x47, 0x4000, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r10, &(0x7f0000000900)=[{&(0x7f0000000540)="78e89346", 0x4}], 0x1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
mkdirat$cgroup(r9, &(0x7f00000004c0)='syz1\x00', 0x1ff)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000002c0)={@private2, r11}, 0x14)

299.030526ms ago: executing program 5 (id=5733):
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4)

230.505731ms ago: executing program 5 (id=5734):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp-reno\x00', 0xb)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

215.671634ms ago: executing program 3 (id=5735):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000180)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x8906, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x8}}}}}}, 0x32)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)

150.227826ms ago: executing program 5 (id=5736):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="f0000000100013000000000000000000000025870a2c00000000ffffe00000020aefa112c5fc0101020000000000000000000000004e2314"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x40}}, 0x28048810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

64.365785ms ago: executing program 4 (id=5737):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

64.150365ms ago: executing program 3 (id=5738):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x3)
openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0)

319.023µs ago: executing program 5 (id=5739):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1)
shutdown(r1, 0x1)
pipe(&(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
close(r6)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
sendto(r8, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)

185.993µs ago: executing program 4 (id=5740):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)

97.374µs ago: executing program 3 (id=5741):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000001480))

0s ago: executing program 3 (id=5742):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48)

kernel console output (not intermixed with test programs):

own, defaulting to 1000
[  123.475685][ T8977] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1260'.
[  123.487074][ T8972] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1260'.
[  123.810786][ T9007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1276'.
[  124.168913][ T9030] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  124.172393][ T9030] netlink: 'syz.1.1287': attribute type 4 has an invalid length.
[  124.176649][ T9030] netlink: 'syz.1.1287': attribute type 1 has an invalid length.
[  124.180643][ T9030] netlink: 'syz.1.1287': attribute type 4 has an invalid length.
[  124.201542][ T9032] pim6reg1: entered promiscuous mode
[  124.213665][ T9032] pim6reg1: entered allmulticast mode
[  125.234769][ T9070] netlink: 'syz.0.1303': attribute type 101 has an invalid length.
[  125.238729][ T9070] netlink: 'syz.0.1303': attribute type 7 has an invalid length.
[  125.534162][ T9101] __nla_validate_parse: 5 callbacks suppressed
[  125.534174][ T9101] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1316'.
[  125.606432][ T9111] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.752650][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  125.754760][ T9118] netlink: 'syz.2.1325': attribute type 1 has an invalid length.
[  125.759371][ T9118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1325'.
[  125.780962][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'.
[  126.206611][ T9163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1345'.
[  126.664812][ T9188] syz.0.1356 uses old SIOCAX25GETINFO
[  126.765379][ T9196] netlink: 'syz.1.1360': attribute type 4 has an invalid length.
[  126.786822][ T9198] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  126.793175][ T9198] netlink: 'syz.0.1361': attribute type 2 has an invalid length.
[  126.824057][ T9200] geneve0: entered allmulticast mode
[  126.931717][ T9212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1368'.
[  127.005785][ T9220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1372'.
[  127.307842][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1377'.
[  127.499434][ T9244] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1382'.
[  127.535778][ T9246] netlink: 'syz.0.1383': attribute type 41 has an invalid length.
[  128.021405][ T9275] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1398'.
[  128.108649][ T9288] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  128.142290][ T9290] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  128.296886][ T9307] netlink: 'syz.1.1414': attribute type 31 has an invalid length.
[  128.583979][ T9341] vxcan1 speed is unknown, defaulting to 1000
[  128.767979][ T9361] netlink: 'syz.2.1438': attribute type 12 has an invalid length.
[  128.927184][ T9372] tipc: Started in network mode
[  128.929151][ T9372] tipc: Node identity 1ee709c6b17f, cluster identity 4711
[  128.932662][ T9372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.935998][ T9372] syzkaller0: entered promiscuous mode
[  128.938054][ T9372] syzkaller0: entered allmulticast mode
[  128.950525][ T9372] tipc: Resetting bearer <eth:syzkaller0>
[  128.954118][ T9371] tipc: Resetting bearer <eth:syzkaller0>
[  128.962936][ T9371] tipc: Disabling bearer <eth:syzkaller0>
[  129.264672][ T9383] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.268588][ T9383] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  129.574136][ T9392] syzkaller0: entered promiscuous mode
[  129.579212][ T9392] syzkaller0: entered allmulticast mode
[  129.616573][ T9394] netlink: 'syz.0.1453': attribute type 1 has an invalid length.
[  130.822532][ T9457] validate_nla: 1 callbacks suppressed
[  130.822542][ T9457] netlink: 'syz.1.1474': attribute type 5 has an invalid length.
[  130.835234][ T9457] __nla_validate_parse: 9 callbacks suppressed
[  130.835243][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1474'.
[  130.916703][ T9467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1478'.
[  131.280378][ T9495] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  131.412866][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'.
[  131.416480][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'.
[  131.485574][ T9515] netlink: 'syz.0.1501': attribute type 8 has an invalid length.
[  131.488895][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  131.504844][ T9515] bond0: entered promiscuous mode
[  131.507042][ T9515] bond_slave_0: entered promiscuous mode
[  131.515113][ T9515] bond_slave_1: entered promiscuous mode
[  131.517698][ T9515] bond3: entered promiscuous mode
[  131.522712][ T9515] bond0: left promiscuous mode
[  131.524413][ T9515] bond_slave_0: left promiscuous mode
[  131.526285][ T9515] bond_slave_1: left promiscuous mode
[  131.528344][ T9515] bond3: left promiscuous mode
[  131.674848][ T9534] netlink: 'syz.2.1510': attribute type 27 has an invalid length.
[  131.677421][ T9534] netlink: 'syz.2.1510': attribute type 27 has an invalid length.
[  131.686352][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  131.723052][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'.
[  131.744029][ T9539] geneve2: entered promiscuous mode
[  131.745977][ T9539] geneve2: entered allmulticast mode
[  131.757771][ T5709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.764380][ T5709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.769269][ T5709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.775935][ T5709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.167260][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  132.341750][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'.
[  132.347824][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'.
[  132.488917][ T9597] gretap1: entered allmulticast mode
[  132.660523][ T9617] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.672866][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.709159][ T9623] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  133.665659][ T9650] sctp: [Deprecated]: syz.2.1565 (pid 9650) Use of int in max_burst socket option deprecated.
[  133.665659][ T9650] Use struct sctp_assoc_value instead
[  133.936352][ T9668] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  133.940096][ T9668] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  133.943281][ T9668] netlink: 'syz.0.1574': attribute type 2 has an invalid length.
[  133.989699][ T9676] netlink: 'syz.0.1577': attribute type 30 has an invalid length.
[  134.096805][ T9688] netlink: 'syz.1.1584': attribute type 1 has an invalid length.
[  134.150463][ T9688] bond0: (slave vti0): The slave device specified does not support setting the MAC address
[  134.155191][ T9688] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  134.165054][ T9688] bond0: (slave vti0): making interface the new active one
[  134.168595][ T9688] bond0: (slave vti0): Enslaving as an active interface with an up link
[  134.487768][ T9717] syzkaller1: entered promiscuous mode
[  134.490818][ T9717] syzkaller1: entered allmulticast mode
[  134.590524][    C1] bridge0: port 1(dummy0) entered learning state
[  134.962225][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.970106][ T9746] 8021q: adding VLAN 0 to HW filter on device team0
[  134.976833][ T9746] dummy0: left promiscuous mode
[  134.986041][ T9746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.029519][ T9756] syz_tun: entered allmulticast mode
[  135.038963][ T9746] vxcan1 speed is unknown, defaulting to 1000
[  135.158246][ T9760] bridge0: port 1(dummy0) entered disabled state
[  135.183431][ T9754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.188887][ T9762] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  135.192481][ T9762] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  135.239347][ T9749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.920520][ T9815] __nla_validate_parse: 5 callbacks suppressed
[  135.920530][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1635'.
[  135.942691][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'.
[  136.036636][ T9817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'.
[  136.175428][ T9825] validate_nla: 2 callbacks suppressed
[  136.175441][ T9825] netlink: 'syz.2.1640': attribute type 30 has an invalid length.
[  136.294395][ T9832] netlink: 'syz.2.1642': attribute type 22 has an invalid length.
[  136.300736][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  136.337105][ T9832] netlink: 'syz.2.1642': attribute type 22 has an invalid length.
[  136.340933][ T5879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.348630][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'.
[  136.352697][ T5709] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.352747][ T5709] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.352768][ T5709] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.483498][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.550170][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.553805][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.579170][ T9831] vxcan1 speed is unknown, defaulting to 1000
[  136.638725][ T9837] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.662101][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.675335][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'.
[  136.904904][ T9873] netlink: 'syz.0.1657': attribute type 1 has an invalid length.
[  136.908095][ T9873] netlink: 'syz.0.1657': attribute type 4 has an invalid length.
[  137.053370][ T9884] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  137.438367][ T9908] netlink: 'syz.2.1674': attribute type 16 has an invalid length.
[  137.477604][ T9912] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  138.615528][T10032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.928967][T10064] netlink: 'syz.1.1749': attribute type 10 has an invalid length.
[  139.217573][T10081] openvswitch: netlink: IP tunnel TTL not specified.
[  139.224419][T10082] veth3: entered promiscuous mode
[  139.636902][T10107] IPVS: Scheduler module ip_vs_sip not found
[  140.111482][T10140] smc: net device bond0 applied user defined pnetid SYZ2
[  140.116178][T10140] smc: net device bond0 erased user defined pnetid SYZ2
[  140.338854][T10166] macsec1: entered promiscuous mode
[  140.349410][T10166] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  140.356118][T10166] macsec1: entered allmulticast mode
[  140.357892][T10166] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  140.382855][T10173] bond0: Device is already in use.
[  141.359425][T10214] __nla_validate_parse: 15 callbacks suppressed
[  141.359435][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'.
[  141.435934][T10220] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  141.450368][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1816'.
[  141.459772][T10196] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  141.484042][T10220] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.508885][T10216] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.546330][T10216] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.616535][T10216] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.657230][T10216] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.730370][ T9834] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.751330][ T9834] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.767945][ T9834] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.781172][ T9834] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.296834][T10267] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1838'.
[  142.428031][T10279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.209493][T10333] openvswitch: netlink: IP tunnel dst address not specified
[  143.234889][T10332] vxcan1 speed is unknown, defaulting to 1000
[  143.493110][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'.
[  143.556244][T10349] bond4: entered promiscuous mode
[  143.558667][T10349] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.567383][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1877'.
[  143.586925][T10356] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.600051][T10356] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  143.613574][T10356] bond4: (slave vcan1): Error -95 calling set_mac_address
[  144.905760][T10426] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  145.627123][T10452] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.637324][T10452] bond0: (slave rose0): Enslaving as an active interface with an up link
[  145.648271][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'.
[  145.894642][T10472] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  145.903087][T10472] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  146.245289][T10508] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  146.248524][T10508] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  146.262488][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'.
[  146.266373][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'.
[  146.281353][T10510] pim6reg: entered allmulticast mode
[  146.293374][T10510] pim6reg: left allmulticast mode
[  146.410101][T10518] netlink: 'syz.1.1941': attribute type 3 has an invalid length.
[  146.518224][T10527] syzkaller0: entered promiscuous mode
[  146.520348][T10527] syzkaller0: entered allmulticast mode
[  146.553456][T10533] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1947'.
[  146.672119][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'.
[  146.726106][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'.
[  146.744735][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1954'.
[  147.943232][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'.
[  148.838328][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  148.903769][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1993'.
[  149.007509][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'.
[  149.017910][T10643] netlink: 'syz.2.1999': attribute type 5 has an invalid length.
[  149.021933][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1999'.
[  149.030942][T10643] geneve2: entered promiscuous mode
[  149.033014][T10643] geneve2: entered allmulticast mode
[  149.035811][ T5709] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  149.038819][ T5709] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  149.045573][ T5709] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  149.048847][ T5709] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  149.107188][T10648] sctp: [Deprecated]: syz.2.2002 (pid 10648) Use of int in maxseg socket option.
[  149.107188][T10648] Use struct sctp_assoc_value instead
[  149.188250][T10659] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  149.324235][T10666] netlink: 'syz.2.2010': attribute type 1 has an invalid length.
[  149.383963][T10672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.537705][T10691] IPVS: Error connecting to the multicast addr
[  149.611644][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2025'.
[  149.847830][T10722] vxcan1 speed is unknown, defaulting to 1000
[  150.253597][T10747] netlink: 'syz.2.2047': attribute type 10 has an invalid length.
[  150.361787][T10755] netlink: 'syz.1.2050': attribute type 4 has an invalid length.
[  150.501345][   T57] block nbd1: Receive control failed (result -32)
[  150.669489][T10781] netlink: 'syz.1.2058': attribute type 13 has an invalid length.
[  150.673854][T10781] netlink: 'syz.1.2058': attribute type 17 has an invalid length.
[  150.698122][T10783] netlink: 'syz.2.2063': attribute type 13 has an invalid length.
[  150.760080][T10781] 8021q: adding VLAN 0 to HW filter on device team0
[  150.766781][T10781] bridge0: port 1(dummy0) entered blocking state
[  150.769737][T10781] bridge0: port 1(dummy0) entered listening state
[  150.792029][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.797416][T10781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.863021][ T9834] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.878937][ T9834] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.885447][T10784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.923306][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.933271][ T9834] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.939226][T10774] vxcan1 speed is unknown, defaulting to 1000
[  150.963288][ T9834] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.655636][T10820] netlink: 'syz.0.2076': attribute type 4 has an invalid length.
[  151.661916][T10820] netlink: 'syz.0.2076': attribute type 4 has an invalid length.
[  151.772684][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2077'.
[  152.001170][  T791] tipc: Node number set to 1650264232
[  152.011543][T10846] openvswitch: netlink: IPv4 tunnel dst address is zero
[  152.505894][T10883] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2103'.
[  152.950409][T10918] netlink: 'syz.2.2117': attribute type 83 has an invalid length.
[  153.158409][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'.
[  153.454357][T10959] vcan0: tx drop: invalid sa for name 0x0000020000000000
[  153.802237][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'.
[  153.815934][T10994] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  153.846444][T10999] ieee802154 phy1 wpan1: encryption failed: -22
[  153.954052][T10994] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2154'.
[  154.146659][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2162'.
[  154.346721][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2169'.
[  154.401974][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'.
[  155.562975][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2180'.
[  155.818989][T11083] openvswitch: netlink: IP tunnel dst address not specified
[  156.214971][T11124] IPVS: length: 91191230 != 8
[  157.187233][T11142] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  157.201329][T11142] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  157.205646][T11142] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.207987][T11142] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  157.300783][T11142] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  157.324424][T11142] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  157.365342][T11173] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2229'.
[  157.420802][T11179] validate_nla: 2 callbacks suppressed
[  157.420811][T11179] netlink: 'syz.0.2232': attribute type 1 has an invalid length.
[  157.549803][T11185] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  157.688299][T11195] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2239'.
[  157.906847][T11209] syz2: rxe_newlink: already configured on vxcan1
[  165.057575][    C1] sched: DL replenish lagged too much
[  165.951813][    C1] bridge0: port 1(dummy0) entered learning state
[  166.688628][T11230] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.823411][T11229] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  166.880392][T11229] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  174.261564][T11236] delete_channel: no stack
[  174.419669][T11229] tipc: Resetting bearer <eth:syzkaller0>
[  175.690696][T11244] netlink: 'syz.1.2258': attribute type 21 has an invalid length.
[  177.369262][T11250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'.
[  178.112357][T11252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'.
[  181.309687][    C1] bridge0: port 1(dummy0) entered forwarding state
[  181.312400][    C1] bridge0: topology change detected, propagating
[  181.714821][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'.
[  181.718347][T11262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2266'.
[  181.808947][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'.
[  181.828588][T11262] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2266'.
[  182.007143][T11262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2266'.
[  194.193747][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  207.817133][T11338] netlink: 'syz.0.2292': attribute type 10 has an invalid length.
[  208.882171][T11338] team0: Device ipvlan1 failed to register rx_handler
[  216.430098][T11352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2299'.
[  216.886443][T11355] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2298'.
[  224.312494][T11372] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.659833][T11381] netlink: 'syz.0.2309': attribute type 13 has an invalid length.
[  228.895600][T11381] netlink: 'syz.0.2309': attribute type 17 has an invalid length.
[  250.014199][T11376] tipc: Disabling bearer <eth:ipvlan1>
[  250.586863][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.606689][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.623962][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.627462][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.641102][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.742108][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  250.745907][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  250.748527][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  250.784885][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.787742][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.378059][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.388670][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.406844][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.423657][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.427755][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.738832][ T5849] Bluetooth: hci3: command tx timeout
[  254.984966][   T55] Bluetooth: hci4: command tx timeout
[  255.019069][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  255.060691][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  255.082484][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  255.146287][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  255.245442][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  255.669985][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.834918][ T5238] Bluetooth: hci3: command tx timeout
[  257.068858][ T5238] Bluetooth: hci4: command tx timeout
[  257.435180][ T5238] Bluetooth: hci5: command tx timeout
[  257.899501][ T5238] Bluetooth: hci3: command tx timeout
[  259.252714][ T5238] Bluetooth: hci4: command tx timeout
[  259.491502][ T5238] Bluetooth: hci5: command tx timeout
[  260.063619][ T5238] Bluetooth: hci3: command tx timeout
[  261.354372][ T5238] Bluetooth: hci4: command tx timeout
[  261.564112][ T5238] Bluetooth: hci5: command tx timeout
[  263.638409][ T5238] Bluetooth: hci5: command tx timeout
[  264.993285][T11381] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.996659][T11381] 8021q: adding VLAN 0 to HW filter on device team0
[  265.001782][T11381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.025088][T11385] vxcan1 speed is unknown, defaulting to 1000
[  265.188803][T11376] syz_tun (unregistering): left allmulticast mode
[  265.206661][T11392] vxcan1 speed is unknown, defaulting to 1000
[  265.328279][T11407] vxcan1 speed is unknown, defaulting to 1000
[  265.425444][T11403] vxcan1 speed is unknown, defaulting to 1000
[  265.531254][T11407] chnl_net:caif_netlink_parms(): no params data found
[  265.607187][T11397] vxcan1 speed is unknown, defaulting to 1000
[  265.715615][T11407] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.718820][T11407] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.722049][T11407] bridge_slave_0: entered allmulticast mode
[  265.726040][T11407] bridge_slave_0: entered promiscuous mode
[  265.750101][ T5709] dummy0: left allmulticast mode
[  265.751973][ T5709] dummy0: left promiscuous mode
[  265.754430][ T5709] bridge0: port 1(dummy0) entered disabled state
[  266.119021][ T5709] bond0 (unregistering): (slave vti0): Releasing backup interface
[  266.280406][ T5709] bond2 (unregistering): (slave bridge1): Releasing active interface
[  266.422912][ T5709] bond1 (unregistering): Released all slaves
[  266.431436][ T5709] bond2 (unregistering): Released all slaves
[  266.502272][ T5709] bond3 (unregistering): Released all slaves
[  266.508473][ T5709] bond0 (unregistering): Released all slaves
[  266.517598][T11407] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.521361][T11407] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.524258][T11407] bridge_slave_1: entered allmulticast mode
[  266.527728][T11407] bridge_slave_1: entered promiscuous mode
[  266.596845][ T5709] k*: left promiscuous mode
[  266.616906][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.624448][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.647095][ T5709] tipc: Left network mode
[  266.678505][T11407] team0: Port device team_slave_0 added
[  266.684106][T11407] team0: Port device team_slave_1 added
[  266.758907][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.761516][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.770468][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.819050][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.829764][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.838677][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.914871][T11407] hsr_slave_0: entered promiscuous mode
[  266.917723][T11407] hsr_slave_1: entered promiscuous mode
[  266.923329][T11407] debugfs: 'hsr0' already exists in 'hsr'
[  266.925161][T11407] Cannot create hsr debugfs directory
[  267.138220][T11403] chnl_net:caif_netlink_parms(): no params data found
[  267.332639][ T5709] hsr_slave_0: left promiscuous mode
[  267.689135][T11397] chnl_net:caif_netlink_parms(): no params data found
[  267.896258][T11403] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.899289][T11403] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.903284][T11403] bridge_slave_0: entered allmulticast mode
[  267.907135][T11403] bridge_slave_0: entered promiscuous mode
[  267.930363][T11403] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.940606][T11403] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.948892][T11403] bridge_slave_1: entered allmulticast mode
[  267.953174][T11403] bridge_slave_1: entered promiscuous mode
[  268.065365][T11403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.069762][T11397] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.072823][T11397] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.075873][T11397] bridge_slave_0: entered allmulticast mode
[  268.090094][T11397] bridge_slave_0: entered promiscuous mode
[  268.093673][T11397] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.096056][T11397] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.098660][T11397] bridge_slave_1: entered allmulticast mode
[  268.103465][T11397] bridge_slave_1: entered promiscuous mode
[  268.108054][T11403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.173030][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.177796][T11403] team0: Port device team_slave_0 added
[  268.195056][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.198906][T11403] team0: Port device team_slave_1 added
[  268.236472][ T5709] IPVS: stop unused estimator thread 0...
[  268.240454][T11403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.242755][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.254606][T11403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.283459][T11403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.285788][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.296164][T11403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.305967][T11397] team0: Port device team_slave_0 added
[  268.311575][T11397] team0: Port device team_slave_1 added
[  268.363775][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.366830][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.377950][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.383847][T11407] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.408454][T11403] hsr_slave_0: entered promiscuous mode
[  268.411816][T11403] hsr_slave_1: entered promiscuous mode
[  268.414812][T11403] debugfs: 'hsr0' already exists in 'hsr'
[  268.417292][T11403] Cannot create hsr debugfs directory
[  268.423424][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.427142][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.438507][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.443894][T11407] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.453393][T11407] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  268.470871][T11407] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  268.552301][T11397] hsr_slave_0: entered promiscuous mode
[  268.555534][T11397] hsr_slave_1: entered promiscuous mode
[  268.558540][T11397] debugfs: 'hsr0' already exists in 'hsr'
[  268.565388][T11397] Cannot create hsr debugfs directory
[  268.813200][T11403] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  268.827465][T11403] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  268.833558][T11403] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  268.868441][T11403] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  268.885056][T11407] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.925330][T11397] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  268.933118][T11397] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  268.947939][T11397] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  268.956769][T11397] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  268.987094][T11407] 8021q: adding VLAN 0 to HW filter on device team0
[  269.013942][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.016873][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.040676][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.043604][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.144640][T11397] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.153549][T11403] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.185808][T11403] 8021q: adding VLAN 0 to HW filter on device team0
[  269.204832][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.207982][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.226619][T11397] 8021q: adding VLAN 0 to HW filter on device team0
[  269.254565][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.257684][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.263763][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.266973][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.286008][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.288992][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.366435][T11397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  269.402668][T11407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.538945][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.594116][T11397] veth0_vlan: entered promiscuous mode
[  269.603794][T11397] veth1_vlan: entered promiscuous mode
[  269.651908][T11403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.676882][T11397] veth0_macvtap: entered promiscuous mode
[  269.683511][T11397] veth1_macvtap: entered promiscuous mode
[  269.713110][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.726135][T11407] veth0_vlan: entered promiscuous mode
[  269.729781][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.746333][ T9834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.753265][T11407] veth1_vlan: entered promiscuous mode
[  269.756566][ T9834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.760874][ T9834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.767699][ T9834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.810702][T11407] veth0_macvtap: entered promiscuous mode
[  269.823060][T11407] veth1_macvtap: entered promiscuous mode
[  269.832108][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.837770][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.855797][T11407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.865568][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.867003][T11407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.872805][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.885734][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.888593][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.901033][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.910398][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.918134][T11403] veth0_vlan: entered promiscuous mode
[  269.950694][T11403] veth1_vlan: entered promiscuous mode
[  269.992362][ T4596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.995008][ T4596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.034659][T11403] veth0_macvtap: entered promiscuous mode
[  270.038627][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.042182][T11403] veth1_macvtap: entered promiscuous mode
[  270.051513][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.068304][T11403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.094079][T11403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.124110][ T5709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.128235][ T5709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.177354][ T5709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.183839][ T5709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.216955][T11510] netlink: 'syz.3.2317': attribute type 4 has an invalid length.
[  270.221898][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.224965][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.262628][T11510] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2317'.
[  270.284704][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.287269][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.361806][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2317'.
[  270.367816][T11517] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2313'.
[  270.588223][T11536] vxcan1 speed is unknown, defaulting to 1000
[  270.673285][ T5709] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.685607][T11547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'.
[  270.944329][T11571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.947424][T11549] vxcan1 speed is unknown, defaulting to 1000
[  271.732681][T11628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2346'.
[  271.783898][T11635] netlink: 'syz.5.2348': attribute type 1 has an invalid length.
[  271.837045][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2348'.
[  271.868131][T11635] bond1: entered promiscuous mode
[  271.873654][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2351'.
[  271.875475][T11635] 8021q: adding VLAN 0 to HW filter on device bond1
[  271.900280][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2348'.
[  271.948468][T11640] nbd: socks must be embedded in a SOCK_ITEM attr
[  271.969990][T11409] block nbd64: NBD_DISCONNECT
[  272.680351][ T5862] IPVS: starting estimator thread 0...
[  272.782419][T11668] IPVS: using max 44 ests per chain, 105600 per kthread
[  272.925057][T11676] netlink: 'syz.3.2363': attribute type 3 has an invalid length.
[  273.947966][T11696] netlink: 'syz.3.2371': attribute type 1 has an invalid length.
[  274.126256][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'.
[  274.206034][T11714] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  274.235705][T11716] xt_socket: unknown flags 0xfc
[  274.615619][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'.
[  274.736937][T11757] nbd: device at index 4 is going down
[  275.314963][T11798] netlink: 'syz.3.2419': attribute type 12 has an invalid length.
[  275.320545][T11798] __nla_validate_parse: 2 callbacks suppressed
[  275.320557][T11798] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2419'.
[  275.389300][T11802] tipc: Started in network mode
[  275.395932][T11802] tipc: Node identity 7f000001, cluster identity 4711
[  275.398423][T11802] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  275.475392][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'.
[  275.505587][T11808] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20003
[  275.509176][T11808] netlink: 'syz.4.2424': attribute type 1 has an invalid length.
[  276.217323][T11861] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  276.292719][T11867] nbd: couldn't find device at index 536870912
[  276.364945][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'.
[  276.464481][T11879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2455'.
[  276.496852][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2456'.
[  277.077929][T11925] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  277.628097][T11956] netlink: 'syz.5.2492': attribute type 1 has an invalid length.
[  277.832092][T11969] netlink: 'syz.5.2498': attribute type 4 has an invalid length.
[  278.103628][   T33] audit: type=1800 audit(1757708135.573:2): pid=11973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2499" name="memory.events" dev="tmpfs" ino=465 res=0 errno=0
[  278.960589][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'.
[  278.965455][T12054] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  278.968800][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.156376][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'.
[  279.199231][T12072] vcan0: tx drop: invalid da for name 0x0000000000000003
[  279.214422][T12074] xt_l2tp: missing protocol rule (udp|l2tpip)
[  279.702938][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2558'.
[  280.578012][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2564'.
[  280.911717][T12159] pim6reg1: entered promiscuous mode
[  280.914469][T12159] pim6reg1: entered allmulticast mode
[  281.569512][T12212] netlink: 'syz.5.2600': attribute type 1 has an invalid length.
[  281.578311][T12212] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2600'.
[  281.671991][T12222] netlink: 'syz.4.2605': attribute type 1 has an invalid length.
[  281.674611][T12222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.813819][T12235] netlink: 'syz.4.2611': attribute type 11 has an invalid length.
[  281.982492][T12252] netlink: 5636 bytes leftover after parsing attributes in process `syz.5.2619'.
[  282.258325][T12289] openvswitch: netlink: Message has 16 unknown bytes.
[  282.262209][T12289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.528169][T12313] netlink: 592 bytes leftover after parsing attributes in process `syz.5.2643'.
[  282.603657][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2646'.
[  282.776104][T12333] nft_compat: unsupported protocol 0
[  282.811238][T12337] netlink: 'syz.5.2655': attribute type 30 has an invalid length.
[  282.864754][T12343] IPv6: NLM_F_REPLACE set, but no existing node found!
[  283.009758][T12347] nbd4: detected capacity change from 0 to 63
[  283.014204][T12352] block nbd4: NBD_DISCONNECT
[  283.016790][T12352] block nbd4: Disconnected due to user request.
[  283.024634][T12352] block nbd4: shutting down sockets
[  283.029948][    C1] blk_print_req_error: 138 callbacks suppressed
[  283.029960][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.030411][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'.
[  283.032263][    C1] buffer_io_error: 138 callbacks suppressed
[  283.032270][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  283.044373][    C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.048218][    C1] Buffer I/O error on dev nbd4, logical block 1, async page read
[  283.051554][    C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.055472][    C1] Buffer I/O error on dev nbd4, logical block 2, async page read
[  283.058785][    C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.062655][    C1] Buffer I/O error on dev nbd4, logical block 3, async page read
[  283.076930][T11511] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.080561][T11511] Buffer I/O error on dev nbd4, logical block 0, async page read
[  283.083252][T11511] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.086203][T11511] Buffer I/O error on dev nbd4, logical block 1, async page read
[  283.089136][T11511] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.104364][T11511] Buffer I/O error on dev nbd4, logical block 2, async page read
[  283.112166][T11511] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.116234][T11511] Buffer I/O error on dev nbd4, logical block 3, async page read
[  283.120218][T11511] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.124790][T11511] Buffer I/O error on dev nbd4, logical block 0, async page read
[  283.131632][T11511] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.135444][T11511] Buffer I/O error on dev nbd4, logical block 1, async page read
[  283.141231][T11511] ldm_validate_partition_table(): Disk read failed.
[  283.145310][T11511] Dev nbd4: unable to read RDB block 0
[  283.149055][T11511]  nbd4: unable to read partition table
[  283.158419][T11511] ldm_validate_partition_table(): Disk read failed.
[  283.165050][T11511] Dev nbd4: unable to read RDB block 0
[  283.169331][T11511]  nbd4: unable to read partition table
[  283.263988][T12356] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.267577][T12356] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.392925][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.405091][T12356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.544930][T12356] bond1: left promiscuous mode
[  283.570782][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2664'.
[  283.592785][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.598737][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.622635][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.647097][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  283.918793][T12381] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2672'.
[  284.004353][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'.
[  284.338768][T12410] syzkaller0: entered promiscuous mode
[  284.343493][T12410] syzkaller0: entered allmulticast mode
[  284.624285][T12447] IPVS: set_ctl: invalid protocol: 108 172.20.20.0:20002
[  284.633979][  T791] IPVS: starting estimator thread 0...
[  284.638729][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'.
[  284.719850][T12448] IPVS: using max 81 ests per chain, 194400 per kthread
[  285.314387][T12478] delete_channel: no stack
[  285.808449][T12495] netlink: 'syz.4.2725': attribute type 2 has an invalid length.
[  285.860820][T12497] __nla_validate_parse: 1 callbacks suppressed
[  285.860830][T12497] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2727'.
[  286.182238][T12525] netlink: 'syz.4.2740': attribute type 13 has an invalid length.
[  286.268272][T12525] vxcan1 speed is unknown, defaulting to 1000
[  286.276283][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2746'.
[  286.370067][T12538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  286.704197][T12553] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  286.851923][T12563] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2757'.
[  286.925466][T12569] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2760'.
[  287.312587][T12593] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2771'.
[  287.317591][T12593] ..0: renamed from hsr0 (while UP)
[  287.326617][T12593] ..0: entered allmulticast mode
[  287.328767][T12593] hsr_slave_0: entered allmulticast mode
[  287.336231][T12593] hsr_slave_1: entered allmulticast mode
[  287.340144][T12593] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  287.578855][T12628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2788'.
[  287.685765][T12641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2795'.
[  288.323976][T12718] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  288.329222][T12718] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2832'.
[  288.767846][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'.
[  288.959050][T12751] netem: change failed
[  289.556375][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'.
[  289.682402][   T33] audit: type=1800 audit(1757708147.163:3): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2865" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1053 res=0 errno=0
[  290.281497][T12810] vxcan1 speed is unknown, defaulting to 1000
[  290.911188][T12841] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  291.382637][T12851] tipc: Started in network mode
[  291.385895][T12851] tipc: Node identity bef3d806a23a, cluster identity 4711
[  291.388479][T12851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.412886][T12851] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) !
[  291.417798][T12851] tipc: Resetting bearer <eth:syzkaller0>
[  291.826168][T12877] __nla_validate_parse: 4 callbacks suppressed
[  291.826183][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'.
[  291.835416][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'.
[  291.839163][T12877] netlink: 'syz.3.2903': attribute type 7 has an invalid length.
[  291.845302][T12844] tipc: Disabling bearer <eth:syzkaller0>
[  291.862115][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'.
[  291.862118][ T5709] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  291.862138][ T5709] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  291.866043][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'.
[  291.877780][T12877] netlink: 'syz.3.2903': attribute type 7 has an invalid length.
[  291.879487][ T5709] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  291.885463][ T5709] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.263248][T12985] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2955'.
[  293.380343][T12993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.453453][   T32] tipc: Resetting bearer <eth:syzkaller0>
[  293.536298][T12987] tipc: Resetting bearer <eth:syzkaller0>
[  293.962102][T13005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2960'.
[  294.379928][ T5853] tipc: Node number set to 2130706433
[  294.886864][T12987] tipc: Disabling bearer <eth:syzkaller0>
[  295.116766][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2974'.
[  295.315864][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2985'.
[  295.329175][T13057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.358981][T13057] syzkaller0: entered promiscuous mode
[  295.363551][T13057] syzkaller0: entered allmulticast mode
[  295.366889][T13057] tipc: Resetting bearer <eth:syzkaller0>
[  295.372702][T13056] tipc: Resetting bearer <eth:syzkaller0>
[  296.367632][T13056] tipc: Disabling bearer <eth:syzkaller0>
[  296.412582][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2989'.
[  296.636683][T13095] veth5: entered promiscuous mode
[  296.647629][T13093] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3000'.
[  296.803024][T13113] netlink: 'syz.3.3010': attribute type 3 has an invalid length.
[  296.812503][T13113] netlink: 'syz.3.3010': attribute type 1 has an invalid length.
[  296.920689][T13123] __nla_validate_parse: 1 callbacks suppressed
[  296.920702][T13123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3014'.
[  297.262458][T13148] syzkaller1: entered promiscuous mode
[  297.264701][T13148] syzkaller1: entered allmulticast mode
[  297.555312][T13176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.599787][T13176] syzkaller0: entered promiscuous mode
[  297.602774][T13176] syzkaller0: entered allmulticast mode
[  297.608507][T13176] tipc: Resetting bearer <eth:syzkaller0>
[  297.623352][T13175] tipc: Resetting bearer <eth:syzkaller0>
[  298.688373][T13175] tipc: Disabling bearer <eth:syzkaller0>
[  298.713002][T13189] vxcan1 speed is unknown, defaulting to 1000
[  298.793988][T13195] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3047'.
[  299.042882][T13202] vxcan1 speed is unknown, defaulting to 1000
[  299.086193][T13208] netlink: 'syz.4.3051': attribute type 2 has an invalid length.
[  299.190392][T13207] vxcan1 speed is unknown, defaulting to 1000
[  299.990981][T13243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3065'.
[  300.529139][T13285] netlink: 'syz.3.3085': attribute type 3 has an invalid length.
[  301.987686][T13346] netlink: 'syz.4.3114': attribute type 10 has an invalid length.
[  302.008874][T13346] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  302.014643][T13346] team0: Failed to send options change via netlink (err -105)
[  302.017760][T13346] team0: Port device netdevsim0 added
[  302.085859][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.114887][T13356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3118'.
[  302.118531][T13356] netlink: 'syz.3.3118': attribute type 7 has an invalid length.
[  302.127398][T13361] syz_tun: entered allmulticast mode
[  302.129707][T13356] netlink: 'syz.3.3118': attribute type 8 has an invalid length.
[  302.132246][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'.
[  302.335799][T13392] syzkaller0: entered promiscuous mode
[  302.338015][T13392] syzkaller0: entered allmulticast mode
[  302.348844][T13392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.363325][T13391] tipc: Resetting bearer <eth:syzkaller0>
[  302.402364][T13391] tipc: Disabling bearer <eth:syzkaller0>
[  302.560245][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3147'.
[  302.609171][T13430] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  302.627799][T13431] netlink: 'syz.4.3151': attribute type 3 has an invalid length.
[  302.684250][T13437] netlink: 'syz.4.3155': attribute type 9 has an invalid length.
[  302.746214][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3156'.
[  302.938040][T13456] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.941104][T13456] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.055501][T13456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.065440][T13456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.131413][   T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.134561][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.137658][   T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.153557][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.157216][   T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.160879][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.163809][   T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  303.168117][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.343438][T13494] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3176'.
[  303.384920][T13502] netlink: 'syz.5.3181': attribute type 1 has an invalid length.
[  303.388280][T13502] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3181'.
[  303.399692][T13502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3181'.
[  303.466007][T13513] sctp: [Deprecated]: syz.4.3186 (pid 13513) Use of int in max_burst socket option.
[  303.466007][T13513] Use struct sctp_assoc_value instead
[  303.495731][T13515] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3187'.
[  303.525039][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3184'.
[  303.612570][T13524] syzkaller0: entered promiscuous mode
[  303.614477][T13524] syzkaller0: entered allmulticast mode
[  303.836689][T13549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3193'.
[  304.913574][T13565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.920475][T13565] syzkaller0: entered promiscuous mode
[  304.929060][T13565] syzkaller0: entered allmulticast mode
[  304.951537][T13565] tipc: Resetting bearer <eth:syzkaller0>
[  304.954166][T13565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.958021][T13565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.964491][T13564] tipc: Resetting bearer <eth:syzkaller0>
[  304.980828][T13564] tipc: Disabling bearer <eth:syzkaller0>
[  305.539123][T13620] bridge_slave_0: left allmulticast mode
[  305.542111][T13620] bridge_slave_0: left promiscuous mode
[  305.544155][T13620] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.563019][T13620] bridge_slave_1: left allmulticast mode
[  305.568837][T13620] bridge_slave_1: left promiscuous mode
[  305.576328][T13620] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.591781][T13620] bond0: (slave bond_slave_0): Releasing backup interface
[  305.605040][T13620] bond0: (slave bond_slave_1): Releasing backup interface
[  305.614163][T13620] team0: Port device team_slave_0 removed
[  305.620866][T13620] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  306.302237][T13703] netlink: 'syz.4.3248': attribute type 8 has an invalid length.
[  306.765703][T13732] netlink: 'syz.4.3262': attribute type 5 has an invalid length.
[  306.768362][T13732] netlink: 'syz.4.3262': attribute type 6 has an invalid length.
[  306.906706][T13746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.763566][T13830] __nla_validate_parse: 8 callbacks suppressed
[  308.763575][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3289'.
[  308.828030][T13834] netlink: 'syz.5.3291': attribute type 1 has an invalid length.
[  308.997470][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3298'.
[  309.062288][T13850] geneve2: entered promiscuous mode
[  309.066684][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.072822][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.079465][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.084143][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.377872][T13874] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3310'.
[  309.428336][T13883] syzkaller1: entered promiscuous mode
[  309.430751][T13883] syzkaller1: entered allmulticast mode
[  309.494219][T13892] netlink: 'syz.4.3318': attribute type 1 has an invalid length.
[  309.502746][T13892] netlink: 'syz.4.3318': attribute type 2 has an invalid length.
[  310.337550][T13941] ip6tnl2: entered promiscuous mode
[  310.339881][T13941] ip6tnl2: entered allmulticast mode
[  310.505095][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3355'.
[  310.508135][T13967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3355'.
[  310.544835][T13971] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3357'.
[  310.573285][T13971] vxcan1 speed is unknown, defaulting to 1000
[  310.969498][T14000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.432647][T14039] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3385'.
[  311.667818][T14051] netlink: 'syz.5.3390': attribute type 1 has an invalid length.
[  311.743239][T14055] netlink: 'syz.5.3392': attribute type 5 has an invalid length.
[  311.918103][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'.
[  311.951277][T14076] netlink: 'syz.3.3402': attribute type 20 has an invalid length.
[  311.981264][T14078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.984328][T14078] syzkaller0: entered promiscuous mode
[  311.986324][T14078] syzkaller0: entered allmulticast mode
[  311.989921][T14078] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  312.001884][T14078] tipc: Resetting bearer <eth:syzkaller0>
[  312.004739][T14077] tipc: Resetting bearer <eth:syzkaller0>
[  312.013713][T14077] tipc: Disabling bearer <eth:syzkaller0>
[  312.114275][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'.
[  312.119449][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3408'.
[  312.293448][T14099] bond3: entered promiscuous mode
[  312.295747][T14099] bond3: entered allmulticast mode
[  312.298293][T14099] 8021q: adding VLAN 0 to HW filter on device bond3
[  312.506467][T14117] netlink: del zone limit has 8 unknown bytes
[  312.696556][T14131] vti0: entered promiscuous mode
[  312.921752][T14148] vxcan1 speed is unknown, defaulting to 1000
[  313.312093][T14164] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  313.653909][T14169] netlink: 'syz.3.3444': attribute type 2 has an invalid length.
[  313.656567][T14169] netlink: 'syz.3.3444': attribute type 2 has an invalid length.
[  313.799787][T14181] __nla_validate_parse: 3 callbacks suppressed
[  313.799800][T14181] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3450'.
[  313.923411][T14181] tipc: Cannot configure node identity twice
[  313.961422][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3456'.
[  314.020192][T14197] netlink: 'syz.4.3458': attribute type 4 has an invalid length.
[  314.294571][T14222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3470'.
[  314.325647][T14222] team0: Port device team_slave_0 removed
[  314.339423][T14226] bridge_slave_0: left allmulticast mode
[  314.343228][T14226] bridge_slave_0: left promiscuous mode
[  314.346318][T14226] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.353661][T14226] bridge_slave_1: left allmulticast mode
[  314.355952][T14226] bridge_slave_1: left promiscuous mode
[  314.358262][T14226] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.375621][T14226] bond0: (slave bond_slave_0): Releasing backup interface
[  314.381681][T14226] bond0: (slave bond_slave_1): Releasing backup interface
[  314.393326][T14226] team0: Port device team_slave_0 removed
[  314.404698][T14226] team0: Port device team_slave_1 removed
[  314.408607][T14226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.413824][T14226] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.417057][T14226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.423511][T14226] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.427375][T14226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  314.637163][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3481'.
[  314.957157][T14276] ip6gre2: entered allmulticast mode
[  315.308065][T14316] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3515'.
[  315.312070][T14316] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  315.315693][T14316] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  315.356364][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3517'.
[  315.497155][T14335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3524'.
[  315.554991][T14341] netlink: 'syz.5.3527': attribute type 1 has an invalid length.
[  315.712593][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3536'.
[  315.715529][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3536'.
[  315.724930][ T5709] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.727657][ T5709] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.730823][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3536'.
[  315.734000][ T5709] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.737989][ T5709] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.573884][T14418] bridge_slave_0: invalid flags given to default FDB implementation
[  316.947200][T14441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.324536][T14476] lo: entered allmulticast mode
[  317.326331][T14476] tunl0: entered allmulticast mode
[  317.328195][T14476] gre0: entered allmulticast mode
[  317.330262][T14476] gretap0: entered allmulticast mode
[  317.332177][T14476] erspan0: entered allmulticast mode
[  317.334067][T14476] ip_vti0: entered allmulticast mode
[  317.335991][T14476] ip6_vti0: entered allmulticast mode
[  317.337933][T14476] sit0: entered allmulticast mode
[  317.341975][T14476] ip6tnl0: entered allmulticast mode
[  317.343887][T14476] ip6gre0: entered allmulticast mode
[  317.345939][T14476] syz_tun: entered allmulticast mode
[  317.347856][T14476] ip6gretap0: entered allmulticast mode
[  317.350469][T14476] bridge0: entered allmulticast mode
[  317.359471][T14476] vcan0: entered allmulticast mode
[  317.361934][T14476] bond0: entered allmulticast mode
[  317.364341][T14476] bond_slave_0: entered allmulticast mode
[  317.366413][T14476] bond_slave_1: entered allmulticast mode
[  317.368600][T14476] team0: entered allmulticast mode
[  317.371248][T14476] team_slave_1: entered allmulticast mode
[  317.373722][T14476] dummy0: entered allmulticast mode
[  317.375989][T14476] nlmon0: entered allmulticast mode
[  317.378250][T14476] caif0: entered allmulticast mode
[  317.380715][T14476] batadv0: entered allmulticast mode
[  317.383050][T14476] vxcan0: entered allmulticast mode
[  317.385268][T14476] vxcan1: entered allmulticast mode
[  317.387422][T14476] veth0: entered allmulticast mode
[  317.391117][T14476] veth1: entered allmulticast mode
[  317.393394][T14476] wg0: entered allmulticast mode
[  317.395323][T14476] wg1: entered allmulticast mode
[  317.397249][T14476] wg2: entered allmulticast mode
[  317.399335][T14476] veth0_to_bridge: entered allmulticast mode
[  317.402014][T14476] veth1_to_bridge: entered allmulticast mode
[  317.404621][T14476] veth0_to_bond: entered allmulticast mode
[  317.407109][T14476] veth1_to_bond: entered allmulticast mode
[  317.409686][T14476] veth1_to_team: entered allmulticast mode
[  317.411883][T14476] veth0_to_batadv: entered allmulticast mode
[  317.414389][T14476] batadv_slave_0: entered allmulticast mode
[  317.416978][T14476] veth1_to_batadv: entered allmulticast mode
[  317.419520][T14476] batadv_slave_1: entered allmulticast mode
[  317.422240][T14476] xfrm0: entered allmulticast mode
[  317.424426][T14476] veth0_to_hsr: entered allmulticast mode
[  317.426860][T14476] hsr_slave_0: entered allmulticast mode
[  317.429313][T14476] veth1_to_hsr: entered allmulticast mode
[  317.431808][T14476] hsr_slave_1: entered allmulticast mode
[  317.434203][T14476] hsr0: entered allmulticast mode
[  317.436167][T14476] veth1_virt_wifi: entered allmulticast mode
[  317.438230][T14476] veth0_virt_wifi: entered allmulticast mode
[  317.448629][T14476] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  317.451293][T14476] veth1_vlan: entered allmulticast mode
[  317.453330][T14476] veth0_vlan: entered allmulticast mode
[  317.455618][T14476] vlan0: entered allmulticast mode
[  317.457818][T14476] vlan1: entered allmulticast mode
[  317.459810][T14476] macvlan0: entered allmulticast mode
[  317.461755][T14476] macvlan1: entered allmulticast mode
[  317.463890][T14476] ipvlan0: entered allmulticast mode
[  317.465902][T14476] ipvlan1: entered allmulticast mode
[  317.468343][T14476] veth1_macvtap: entered allmulticast mode
[  317.473157][T14476] veth0_macvtap: entered allmulticast mode
[  317.480613][T14476] macvtap0: entered allmulticast mode
[  317.482468][T14476] macsec0: entered allmulticast mode
[  317.484319][T14476] geneve0: entered allmulticast mode
[  317.486180][T14476] geneve1: entered allmulticast mode
[  317.488199][T14476] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  317.490898][T14476] netdevsim netdevsim3 netdevsim1: entered allmulticast mode
[  317.493378][T14476] netdevsim netdevsim3 netdevsim2: entered allmulticast mode
[  317.497995][T14476] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  317.501078][T14476] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  317.503498][T14476] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  317.505968][T14476] syztnl2: entered allmulticast mode
[  317.507766][T14476] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode
[  317.511379][T14476] syztnl0: entered allmulticast mode
[  317.513307][T14476] vxlan0: entered allmulticast mode
[  317.515163][T14476] ipip0: entered allmulticast mode
[  317.517606][T14476] sit1: entered allmulticast mode
[  317.520075][T14476] gretap1: entered allmulticast mode
[  317.521909][T14476] ipip1: entered allmulticast mode
[  317.526353][T14476] geneve2: left promiscuous mode
[  317.528090][T14476] geneve2: entered allmulticast mode
[  317.532265][T14476] bridge1: entered allmulticast mode
[  317.534096][T14476] vlan2: entered allmulticast mode
[  317.536489][T14476] gtp0: entered allmulticast mode
[  317.539516][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.543247][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.548791][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.557755][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.091629][    T9] IPVS: starting estimator thread 0...
[  318.154721][T14549] wg1 speed is unknown, defaulting to 1000
[  318.156993][T14549] wg1 speed is unknown, defaulting to 1000
[  318.162482][T14549] wg1 speed is unknown, defaulting to 1000
[  318.167511][T14549] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  318.176053][T14549] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  318.193349][T14551] vxcan1 speed is unknown, defaulting to 1000
[  318.196110][T14543] IPVS: using max 79 ests per chain, 189600 per kthread
[  318.200969][T14549] wg1 speed is unknown, defaulting to 1000
[  318.212747][T14552] vxcan1 speed is unknown, defaulting to 1000
[  318.217070][T14549] wg1 speed is unknown, defaulting to 1000
[  318.237573][T14549] wg1 speed is unknown, defaulting to 1000
[  318.256067][T14549] wg1 speed is unknown, defaulting to 1000
[  318.276756][T14549] wg1 speed is unknown, defaulting to 1000
[  318.295850][T14549] wg1 speed is unknown, defaulting to 1000
[  318.476199][T14568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.596396][T14581] tipc: Started in network mode
[  318.598372][T14581] tipc: Node identity 0e7cf04c189e, cluster identity 4711
[  318.603749][T14581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  318.607381][T14581] syzkaller0: entered promiscuous mode
[  318.609396][T14581] syzkaller0: entered allmulticast mode
[  318.613699][T14581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  318.624355][T14581] tipc: Resetting bearer <eth:syzkaller0>
[  318.628368][T14580] tipc: Resetting bearer <eth:syzkaller0>
[  318.641585][T14580] tipc: Disabling bearer <eth:syzkaller0>
[  319.029731][T14615] netlink: 'syz.4.3647': attribute type 1 has an invalid length.
[  319.032973][T14615] __nla_validate_parse: 9 callbacks suppressed
[  319.032983][T14615] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3647'.
[  319.174784][T14631] !: renamed from dummy0 (while UP)
[  319.502830][T14634] vxcan1 speed is unknown, defaulting to 1000
[  319.568395][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3659'.
[  319.738639][T14634] wg1 speed is unknown, defaulting to 1000
[  319.950780][T14666] Bluetooth: MGMT ver 1.23
[  319.961939][T14668] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  319.964471][T14668] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3669'.
[  320.283585][T14688] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  320.313941][T14689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.342392][T14693] netdevsim netdevsim3: Direct firmware load for .
[  320.342392][T14693]  failed with error -2
[  320.346740][T14693] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  320.346740][T14693] 
[  321.093874][T14709] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3688'.
[  321.097018][T14709] netem: unknown loss type 12
[  321.105587][T14709] netem: change failed
[  321.284311][T14724] vxcan1 speed is unknown, defaulting to 1000
[  321.458445][T14724] wg1 speed is unknown, defaulting to 1000
[  321.548196][T14747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.714592][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  321.897587][T14767] vxcan1 speed is unknown, defaulting to 1000
[  322.015822][T14767] wg1 speed is unknown, defaulting to 1000
[  322.633237][T14783] vxcan1 speed is unknown, defaulting to 1000
[  322.951386][T14783] wg1 speed is unknown, defaulting to 1000
[  323.257713][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3730'.
[  323.276408][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3730'.
[  323.281117][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3730'.
[  323.945272][T14856] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3750'.
[  324.313286][T14887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.341804][T14896] trusted_key: syz.3.3769 sent an empty control message without MSG_MORE.
[  324.416778][   T33] audit: type=1800 audit(1757708181.893:4): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3773" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2461 res=0 errno=0
[  324.431544][   T33] audit: type=1804 audit(1757708181.903:5): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3773" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2461 res=1 errno=0
[  324.654329][   T33] audit: type=1107 audit(1757708182.133:6): pid=14927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  324.795247][T14940] netlink: 'syz.4.3790': attribute type 11 has an invalid length.
[  324.806072][T14940] netlink: 'syz.4.3790': attribute type 11 has an invalid length.
[  324.809260][T14940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3790'.
[  324.926034][T14951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.346883][T14988] ip6tnl1: entered promiscuous mode
[  325.348920][T14988] ip6tnl1: entered allmulticast mode
[  325.353039][T14988] team0: Device ip6tnl1 is of different type
[  325.632563][T14997] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3815'.
[  325.702610][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'.
[  325.706031][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3817'.
[  325.714641][T15001] geneve3: entered promiscuous mode
[  325.716643][T15001] geneve3: entered allmulticast mode
[  325.719398][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.724338][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.727560][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.732925][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.003955][T15019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3826'.
[  326.015323][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3826'.
[  326.386277][T15041] vxcan1 speed is unknown, defaulting to 1000
[  326.659078][T15041] wg1 speed is unknown, defaulting to 1000
[  326.802267][T15076] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3851'.
[  326.877986][T15080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3852'.
[  326.956082][T15086] netlink: 'syz.5.3857': attribute type 10 has an invalid length.
[  326.959460][T15086] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3857'.
[  326.967062][T15086] veth0_vlan: left promiscuous mode
[  326.974017][T15086] veth0_vlan: entered promiscuous mode
[  326.976414][T15086] veth0_vlan: entered allmulticast mode
[  326.988544][T15086] bridge0: port 1(veth0_vlan) entered blocking state
[  327.000473][T15086] bridge0: port 1(veth0_vlan) entered disabled state
[  327.007076][T15086] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  327.185988][T15104] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3865'.
[  327.506422][T15125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.510671][T15125] syzkaller0: entered promiscuous mode
[  327.513135][T15125] syzkaller0: entered allmulticast mode
[  327.528819][T15125] tipc: Resetting bearer <eth:syzkaller0>
[  327.535738][T15124] tipc: Resetting bearer <eth:syzkaller0>
[  327.545765][T15124] tipc: Disabling bearer <eth:syzkaller0>
[  327.716163][T15133] netlink: 'syz.4.3878': attribute type 1 has an invalid length.
[  327.826291][T15136] bridge_slave_0: entered promiscuous mode
[  328.233432][T15162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.236916][T15162] syzkaller0: entered promiscuous mode
[  328.239111][T15162] syzkaller0: entered allmulticast mode
[  328.263334][T15160] netlink: 'syz.3.3885': attribute type 10 has an invalid length.
[  328.266655][T15160] dummy0: left allmulticast mode
[  328.281230][T15160] dummy0: entered allmulticast mode
[  328.284017][T15160] team0: Port device dummy0 added
[  328.289072][T15160] netlink: 'syz.3.3885': attribute type 10 has an invalid length.
[  328.289165][T15162] tipc: Resetting bearer <eth:syzkaller0>
[  328.306574][T15160] dummy0: left allmulticast mode
[  328.314761][T15160] team0: Port device dummy0 removed
[  328.321042][T15160] dummy0: entered allmulticast mode
[  328.324406][T15160] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  328.328048][T15159] tipc: Resetting bearer <eth:syzkaller0>
[  328.340233][T15159] tipc: Disabling bearer <eth:syzkaller0>
[  329.699514][T15217] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  329.754406][T15220] openvswitch: netlink: nsh attr 20 is out of range max 3
[  329.757478][T15220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.294708][T15262] netlink: 'syz.4.3933': attribute type 32 has an invalid length.
[  330.617571][T15284] __nla_validate_parse: 8 callbacks suppressed
[  330.617585][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3944'.
[  330.891766][T15302] vxcan1 speed is unknown, defaulting to 1000
[  330.943942][T15305] netlink: 'syz.3.3953': attribute type 5 has an invalid length.
[  331.024401][T15313] netlink: 'syz.4.3956': attribute type 39 has an invalid length.
[  331.027860][T15313] veth0_macvtap: left promiscuous mode
[  331.094492][T15302] wg1 speed is unknown, defaulting to 1000
[  331.774782][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'.
[  332.518385][T15381] openvswitch: netlink: Key type 251 is out of range max 32
[  332.598813][T15386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3989'.
[  332.647468][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3993'.
[  332.776304][T15397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3996'.
[  332.787877][T15397] netlink: 'syz.5.3996': attribute type 7 has an invalid length.
[  332.791697][T15397] netlink: 'syz.5.3996': attribute type 8 has an invalid length.
[  332.795278][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3996'.
[  332.819089][T15394] bridge0: entered promiscuous mode
[  332.822668][T15394] bridge0: port 1(macsec1) entered blocking state
[  332.825453][T15394] bridge0: port 1(macsec1) entered disabled state
[  332.828178][T15394] macsec1: entered allmulticast mode
[  332.835180][T15394] bridge0: entered allmulticast mode
[  332.841927][T15394] macsec1: left allmulticast mode
[  332.843747][T15394] bridge0: left allmulticast mode
[  332.847218][T15394] bridge0: left promiscuous mode
[  332.994578][T15405] wg2: entered promiscuous mode
[  332.996729][T15405] wg2: entered allmulticast mode
[  333.439145][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4014'.
[  333.525504][T15445] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  333.624045][T15451] vxcan1 speed is unknown, defaulting to 1000
[  333.836760][T15451] wg1 speed is unknown, defaulting to 1000
[  334.858561][T15493] veth0_to_bridge: entered promiscuous mode
[  334.862220][T15491] veth0_to_bridge: left promiscuous mode
[  335.076193][T15504] netlink: 'syz.3.4046': attribute type 1 has an invalid length.
[  335.079392][T15504] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4046'.
[  335.174290][T15512] bridge4: entered allmulticast mode
[  335.223747][T15518] netlink: 'syz.4.4053': attribute type 1 has an invalid length.
[  335.253155][T15518] gretap1: entered allmulticast mode
[  335.261479][T15518] bond1: (slave gretap1): making interface the new active one
[  335.265291][T15518] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  335.297339][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4054'.
[  335.300479][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4054'.
[  335.313023][ T5709] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.316559][ T5709] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.327538][ T5709] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  335.478991][T15538] netlink: 'syz.5.4061': attribute type 4 has an invalid length.
[  335.804675][T15568] netlink: 'syz.3.4076': attribute type 32 has an invalid length.
[  335.916175][T15576] geneve3: left promiscuous mode
[  335.922285][ T9834] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.925983][ T9834] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.933005][ T9834] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.936619][ T9834] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.165359][T15591] netlink: 'syz.3.4083': attribute type 1 has an invalid length.
[  336.189452][T15580] __nla_validate_parse: 2 callbacks suppressed
[  336.189462][T15580] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4081'.
[  336.596815][T15601] netlink: 'syz.3.4087': attribute type 83 has an invalid length.
[  336.801991][T15612] pim6reg1: entered allmulticast mode
[  336.891550][T15623] syzkaller1: entered promiscuous mode
[  336.893690][T15623] syzkaller1: entered allmulticast mode
[  336.923331][T15627] pim6reg99999999: entered allmulticast mode
[  337.152264][T15645] bond0: (slave dummy0): Releasing backup interface
[  337.164678][T15645] dummy0: left allmulticast mode
[  337.175207][T15645] batman_adv: batadv0: Adding interface: dummy0
[  337.177734][T15645] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.200604][T15645] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  337.296526][T15658] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4113'.
[  337.311605][T15660] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4110'.
[  337.315194][T15660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4110'.
[  337.398348][T15664] syzkaller0: entered promiscuous mode
[  337.400497][T15664] syzkaller0: entered allmulticast mode
[  337.406505][T15664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.409873][T15663] tipc: Resetting bearer <eth:syzkaller0>
[  337.447380][T15666] netlink: 'syz.4.4116': attribute type 33 has an invalid length.
[  337.450046][T15666] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4116'.
[  338.509931][T15663] tipc: Disabling bearer <eth:syzkaller0>
[  338.667570][T15684] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  338.671247][T15684] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  338.674077][T15684] netlink: 'syz.5.4125': attribute type 12 has an invalid length.
[  338.953579][T15712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4139'.
[  338.968429][T15714] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  338.972746][T15714] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  339.125122][T15731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4147'.
[  339.228122][T15738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4149'.
[  339.246268][T15738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4149'.
[  339.971730][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4169'.
[  340.046174][T15786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  340.052842][T15786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  340.299143][T15800] netlink: 'syz.4.4178': attribute type 1 has an invalid length.
[  340.322663][T15800] 8021q: adding VLAN 0 to HW filter on device bond2
[  340.355028][T15800] bond2: (slave veth7): Enslaving as an active interface with a down link
[  340.374130][T15800] macvlan2: entered promiscuous mode
[  340.376300][T15800] macvlan2: entered allmulticast mode
[  340.379223][T15800] bond2: entered promiscuous mode
[  340.382699][T15800] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  340.386687][T15800] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  340.410667][T15800] bond2: left promiscuous mode
[  340.494777][T15807] netlink: zone id is out of range
[  340.497070][T15807] netlink: zone id is out of range
[  340.499053][T15807] netlink: zone id is out of range
[  340.502443][T15807] netlink: zone id is out of range
[  340.504891][T15807] netlink: zone id is out of range
[  340.506731][T15807] netlink: zone id is out of range
[  340.508800][T15807] netlink: zone id is out of range
[  340.514471][T15807] netlink: zone id is out of range
[  341.327934][T15880] netlink: 'syz.4.4214': attribute type 1 has an invalid length.
[  341.357441][T15880] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.370059][T15880] __nla_validate_parse: 6 callbacks suppressed
[  341.370072][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4214'.
[  341.429314][T15885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.433943][T15885] syzkaller0: entered promiscuous mode
[  341.435956][T15885] syzkaller0: entered allmulticast mode
[  341.451897][T15888] macvtap1: entered allmulticast mode
[  341.473709][T15885] tipc: Resetting bearer <eth:syzkaller0>
[  341.477831][T15884] tipc: Resetting bearer <eth:syzkaller0>
[  341.498427][T15884] tipc: Disabling bearer <eth:syzkaller0>
[  341.655544][T15906] netlink: 'syz.3.4225': attribute type 1 has an invalid length.
[  341.658983][T15906] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4225'.
[  341.812220][T15917] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4230'.
[  341.855152][T15919] netlink: 'syz.3.4231': attribute type 1 has an invalid length.
[  342.103019][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4238'.
[  342.535520][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'.
[  342.665624][T15972] netlink: 'syz.5.4256': attribute type 3 has an invalid length.
[  342.764989][T15981] vxcan1 speed is unknown, defaulting to 1000
[  342.924113][T15981] wg1 speed is unknown, defaulting to 1000
[  343.185383][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'.
[  343.189152][T15994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4264'.
[  343.193269][T15994] tipc: Invalid UDP bearer configuration
[  343.193307][T15994] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  343.733241][T16025] net_ratelimit: 9 callbacks suppressed
[  343.733255][T16025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.104314][T16048] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4291'.
[  344.121204][T16049] netlink: 'syz.5.4290': attribute type 4 has an invalid length.
[  344.179245][T16053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4293'.
[  344.300832][T16065] netlink: 'syz.5.4299': attribute type 1 has an invalid length.
[  344.466379][T16087] netlink: 'syz.3.4310': attribute type 21 has an invalid length.
[  344.469513][T16087] netlink: 'syz.3.4310': attribute type 1 has an invalid length.
[  344.472569][T16087] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4310'.
[  345.473714][T16127] 8021q: adding VLAN 0 to HW filter on device bond4
[  345.764721][T16148] vxcan1 speed is unknown, defaulting to 1000
[  345.842000][T16156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.853966][T16158] nftables ruleset with unbound chain
[  345.927131][T16164] veth0_to_bond: entered allmulticast mode
[  346.051424][T16148] wg1 speed is unknown, defaulting to 1000
[  346.138453][T16177] bond0: entered promiscuous mode
[  346.144432][T16177] bond_slave_0: entered promiscuous mode
[  346.146903][T16177] bond_slave_1: entered promiscuous mode
[  346.155491][T16177] batadv0: entered promiscuous mode
[  346.158618][T16177] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  346.172115][T16177] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  346.176295][T16177] 8021q: adding VLAN 0 to HW filter on device hsr1
[  346.271338][T16184] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  346.274846][T16184] vlan2: entered promiscuous mode
[  346.277611][T16184] team0: entered promiscuous mode
[  346.451151][T16202] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  346.674635][T16222] netlink: zone id is out of range
[  346.681013][T16222] netlink: zone id is out of range
[  346.683301][T16222] netlink: zone id is out of range
[  346.697285][T16222] netlink: set zone limit has 4 unknown bytes
[  346.703302][T16222] netlink: del zone limit has 4 unknown bytes
[  346.722395][T16224] netlink: 'syz.3.4369': attribute type 13 has an invalid length.
[  346.886156][T16241] macvlan3: entered allmulticast mode
[  346.888369][T16241] syz_tun: entered promiscuous mode
[  346.895805][T16241] syz_tun: entered allmulticast mode
[  346.899252][T16241] macvlan3: entered promiscuous mode
[  346.903618][T16241] team0: Port device macvlan3 added
[  347.170934][T16256] syzkaller0: entered promiscuous mode
[  347.173282][T16256] syzkaller0: entered allmulticast mode
[  348.378817][T16265] __nla_validate_parse: 5 callbacks suppressed
[  348.378833][T16265] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4387'.
[  348.461007][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4396'.
[  348.883494][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'.
[  348.888212][T16330] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.894106][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4420'.
[  348.897728][T16330] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.902840][T16330] batman_adv: batadv0: Removing interface: dummy0
[  348.946022][T16330] batadv0 (unregistering): left promiscuous mode
[  348.978404][T16342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.983235][T16342] syzkaller0: entered promiscuous mode
[  348.988934][T16342] syzkaller0: entered allmulticast mode
[  349.021886][T16342] tipc: Resetting bearer <eth:syzkaller0>
[  349.025522][T16342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.029352][T16342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.070025][T16338] tipc: Resetting bearer <eth:syzkaller0>
[  349.083931][T16338] tipc: Disabling bearer <eth:syzkaller0>
[  349.095920][T16347] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  349.104200][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4426'.
[  349.115514][T16347] bridge2: entered promiscuous mode
[  349.117765][T16347] bridge2: entered allmulticast mode
[  349.122487][T16347] team0: Port device bridge2 added
[  349.549233][T16399] netlink: 'syz.4.4450': attribute type 2 has an invalid length.
[  349.660012][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4455'.
[  349.776513][T16421] sctp: [Deprecated]: syz.4.4462 (pid 16421) Use of int in max_burst socket option deprecated.
[  349.776513][T16421] Use struct sctp_assoc_value instead
[  349.803255][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4462'.
[  350.197159][T16439] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4466'.
[  350.505209][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'.
[  350.602787][T16422] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  350.606917][T16422] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  350.614799][T16422] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  350.621017][T16422] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  350.627432][T16422] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  350.635495][T16422] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  350.845159][T16486] vlan3: entered promiscuous mode
[  350.846959][T16486] team0: entered promiscuous mode
[  350.848913][T16486] team_slave_1: entered promiscuous mode
[  351.238991][T16526] vxcan1 speed is unknown, defaulting to 1000
[  351.348240][T16539] netlink: 'syz.4.4506': attribute type 1 has an invalid length.
[  351.350964][T16539] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4506'.
[  351.353926][T16539] netlink: 'syz.4.4506': attribute type 1 has an invalid length.
[  351.406310][T16544] netlink: 'syz.3.4500': attribute type 1 has an invalid length.
[  351.418321][T16526] wg1 speed is unknown, defaulting to 1000
[  352.656882][T16570] dvmrp8: entered allmulticast mode
[  352.690536][T16572] vxcan1 speed is unknown, defaulting to 1000
[  352.795108][T16572] wg1 speed is unknown, defaulting to 1000
[  353.026824][T16573] dvmrp8: left allmulticast mode
[  353.101158][T16599] batadv_slave_1: entered promiscuous mode
[  353.105214][T16598] batadv_slave_1: left promiscuous mode
[  353.276291][T16609] xt_time: unknown flags 0xf4
[  353.516577][T16624] __nla_validate_parse: 2 callbacks suppressed
[  353.516592][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'.
[  353.523663][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4539'.
[  353.568706][T16626] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.4540'.
[  353.653508][T16634] sch_fq: defrate 0 ignored.
[  353.690690][T16638] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4545'.
[  353.796147][T16645] sctp: [Deprecated]: syz.5.4548 (pid 16645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.796147][T16645] Use struct sctp_sack_info instead
[  353.831960][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4549'.
[  353.835952][T16647] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  353.839683][T16647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  354.277848][T16671] netlink: 277 bytes leftover after parsing attributes in process `syz.5.4561'.
[  354.559110][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4567'.
[  354.564575][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4567'.
[  355.054778][T16717] netlink: 'syz.3.4583': attribute type 3 has an invalid length.
[  355.058448][T16717] netlink: 'syz.3.4583': attribute type 3 has an invalid length.
[  356.333506][T16752] bond0: Caught tx_queue_len zero misconfig
[  356.369320][T16757] sit0: Caught tx_queue_len zero misconfig
[  356.458117][T16763] netlink: 'syz.4.4601': attribute type 1 has an invalid length.
[  356.476692][T16763] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4601'.
[  357.136682][T16796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  357.186144][T16796] syzkaller0: entered promiscuous mode
[  357.187910][T16796] syzkaller0: entered allmulticast mode
[  357.190475][T16796] tipc: Resetting bearer <eth:syzkaller0>
[  357.249483][T16795] tipc: Resetting bearer <eth:syzkaller0>
[  358.347434][T16795] tipc: Disabling bearer <eth:syzkaller0>
[  358.481633][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4628'.
[  358.613092][T16831] netlink: 212296 bytes leftover after parsing attributes in process `syz.5.4632'.
[  359.168575][T16882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.176167][T16882] syzkaller0: entered promiscuous mode
[  359.178094][T16882] syzkaller0: entered allmulticast mode
[  359.191207][T16882] tipc: Resetting bearer <eth:syzkaller0>
[  359.194755][T16881] tipc: Resetting bearer <eth:syzkaller0>
[  359.203296][T16881] tipc: Disabling bearer <eth:syzkaller0>
[  359.337439][T16893] vxcan1 speed is unknown, defaulting to 1000
[  359.471676][T16893] wg1 speed is unknown, defaulting to 1000
[  359.625549][T16913] netlink: 'syz.5.4670': attribute type 10 has an invalid length.
[  359.657540][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'.
[  359.661443][T16913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4670'.
[  359.732623][T16919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'.
[  359.763572][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'.
[  359.899020][T16927] delete_channel: no stack
[  360.081984][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4681'.
[  360.119021][T16953] netlink: 'syz.4.4686': attribute type 3 has an invalid length.
[  360.153783][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4687'.
[  360.159097][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'.
[  360.178913][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4687'.
[  360.336266][T16981] syzkaller1: entered promiscuous mode
[  360.338345][T16981] syzkaller1: entered allmulticast mode
[  360.530903][T16996] lo: entered allmulticast mode
[  360.533055][T16996] lo: left allmulticast mode
[  360.890804][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4710'.
[  361.554638][T17039] netlink: 'syz.4.4724': attribute type 1 has an invalid length.
[  361.609856][T17043] syzkaller0: entered promiscuous mode
[  361.615562][T17043] syzkaller0: entered allmulticast mode
[  361.624834][T17043] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  362.254635][T17078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.125342][T17132] netlink: 'syz.4.4768': attribute type 2 has an invalid length.
[  363.128649][T17132] netlink: 'syz.4.4768': attribute type 1 has an invalid length.
[  363.182921][T17134] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  363.700807][T17189] __nla_validate_parse: 7 callbacks suppressed
[  363.700820][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4778'.
[  363.879255][T17206] netlink: 'syz.5.4788': attribute type 1 has an invalid length.
[  363.884807][T17206] netlink: 'syz.5.4788': attribute type 2 has an invalid length.
[  364.011844][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4798'.
[  364.028408][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4799'.
[  364.064639][T17233] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4800'.
[  364.068684][T17233] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4800'.
[  364.193516][T17241] netlink: 'syz.5.4804': attribute type 10 has an invalid length.
[  364.198769][T17241] 8021q: adding VLAN 0 to HW filter on device team0
[  364.268636][   T12] syzkaller0: tun_net_xmit 76
[  364.276252][   T12] syzkaller0: tun_net_xmit 48
[  364.278574][T17243] syzkaller0: create flow: hash 25035217 index 1
[  364.290074][    T9] syzkaller0: tun_net_xmit 76
[  364.327814][T17243] syzkaller0: delete flow: hash 25035217 index 1
[  365.763645][T17263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.766292][T17263] syzkaller0: entered promiscuous mode
[  365.768646][T17263] syzkaller0: entered allmulticast mode
[  365.794334][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'.
[  365.797470][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'.
[  365.802253][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'.
[  365.805256][T17265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'.
[  365.809197][T17263] tipc: Resetting bearer <eth:syzkaller0>
[  365.818979][T17262] tipc: Resetting bearer <eth:syzkaller0>
[  365.841548][T17262] tipc: Disabling bearer <eth:syzkaller0>
[  365.854050][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4818'.
[  365.857095][T17271] netlink: 'syz.3.4818': attribute type 6 has an invalid length.
[  366.120324][T17300] vxcan1 speed is unknown, defaulting to 1000
[  366.254693][T17300] wg1 speed is unknown, defaulting to 1000
[  366.402335][T17336] netlink: 'syz.3.4844': attribute type 3 has an invalid length.
[  366.405300][T17336] netlink: 'syz.3.4844': attribute type 3 has an invalid length.
[  367.320999][T17374] xt_limit: Overflow, try lower: 271964/0
[  367.430740][T17384] netlink: 'syz.3.4866': attribute type 11 has an invalid length.
[  367.478829][T17392] vxcan1 speed is unknown, defaulting to 1000
[  367.523609][T17398] dvmrp8: entered allmulticast mode
[  367.628726][T17392] wg1 speed is unknown, defaulting to 1000
[  367.628779][T17398] vxcan1 speed is unknown, defaulting to 1000
[  367.816590][T17398] wg1 speed is unknown, defaulting to 1000
[  367.951635][T17433] 0X: renamed from caif0
[  367.955249][T17433] 0X: entered allmulticast mode
[  367.957980][T17433] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  368.114970][T17452] lo: Caught tx_queue_len zero misconfig
[  368.205529][T17460] team0: Caught tx_queue_len zero misconfig
[  368.336140][T17468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  368.348658][T17397] dvmrp8: left allmulticast mode
[  368.625562][T17494] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  368.870172][T17526] __nla_validate_parse: 9 callbacks suppressed
[  368.870187][T17526] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4933'.
[  368.941983][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4936'.
[  369.013895][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'.
[  369.438035][T17585] netlink: 'syz.4.4958': attribute type 1 has an invalid length.
[  369.440838][T17585] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4958'.
[  369.443860][T17585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4958'.
[  369.732470][T17606] syzkaller1: entered promiscuous mode
[  369.734953][T17606] syzkaller1: entered allmulticast mode
[  369.828938][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4969'.
[  370.149285][T17627] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4978'.
[  370.623854][T17677] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5002'.
[  370.919914][T17713] syzkaller1: entered promiscuous mode
[  370.922251][T17713] syzkaller1: entered allmulticast mode
[  371.133005][T17734] xt_socket: unknown flags 0x50
[  371.317810][T17761] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  371.321624][T17759] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5042'.
[  371.494994][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5037'.
[  371.891634][T17784] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  372.221556][T17790] ip6tnl0: Caught tx_queue_len zero misconfig
[  372.295949][T17794] netlink: 'syz.4.5056': attribute type 27 has an invalid length.
[  372.308651][T17794] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  372.541810][T17810] netlink: 'syz.4.5062': attribute type 1 has an invalid length.
[  373.057412][T17840] netlink: 'syz.4.5073': attribute type 4 has an invalid length.
[  373.262849][T17850] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  373.368864][T17862] netlink: 'syz.5.5084': attribute type 1 has an invalid length.
[  373.393558][T17862] 8021q: adding VLAN 0 to HW filter on device bond4
[  373.411689][T17862] veth7: entered promiscuous mode
[  373.421835][T17862] bond4: (slave veth7): Enslaving as an active interface with an up link
[  373.787011][T17896] vxcan1 speed is unknown, defaulting to 1000
[  374.005813][T17896] wg1 speed is unknown, defaulting to 1000
[  374.007692][T17918] __nla_validate_parse: 3 callbacks suppressed
[  374.007703][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5106'.
[  374.659087][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5128'.
[  374.879050][T17988] vxcan1 speed is unknown, defaulting to 1000
[  375.082882][T17988] wg1 speed is unknown, defaulting to 1000
[  375.118662][T18003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5145'.
[  375.377371][T18022] netlink: 504 bytes leftover after parsing attributes in process `syz.5.5155'.
[  375.852097][T18061] netlink: 'syz.5.5173': attribute type 9 has an invalid length.
[  375.855366][T18061] netlink: 'syz.5.5173': attribute type 7 has an invalid length.
[  375.858745][T18061] netlink: 'syz.5.5173': attribute type 8 has an invalid length.
[  375.908105][T18065] macvlan2: entered promiscuous mode
[  375.911800][T18065] vlan0: entered promiscuous mode
[  376.105106][T18075] lo: left allmulticast mode
[  376.111604][T18075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  376.382377][T18101] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5192'.
[  376.451702][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5196'.
[  376.781774][T18144] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5213'.
[  376.786334][T18144] netlink: 'syz.5.5213': attribute type 7 has an invalid length.
[  376.789445][T18144] netlink: 'syz.5.5213': attribute type 8 has an invalid length.
[  376.795517][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5213'.
[  377.072135][T18175] netlink: 'syz.5.5223': attribute type 8 has an invalid length.
[  377.376317][T18202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5236'.
[  377.930543][   T33] audit: type=1800 audit(1757708235.403:7): pid=18222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5245" name="cgroup.controllers" dev="tmpfs" ino=5125 res=0 errno=0
[  378.283111][T18249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5258'.
[  378.308934][T18253] netlink: 'syz.4.5259': attribute type 7 has an invalid length.
[  378.449374][T18270] sock: sock_timestamping_bind_phc: sock not bind to device
[  379.262559][T18288] vxcan1 speed is unknown, defaulting to 1000
[  379.413299][T18288] wg1 speed is unknown, defaulting to 1000
[  379.508441][T18298] netlink: 'syz.5.5278': attribute type 2 has an invalid length.
[  379.565021][T18305] __nla_validate_parse: 3 callbacks suppressed
[  379.565035][T18305] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.5281'.
[  379.729283][T18321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.732991][T18321] syzkaller0: entered promiscuous mode
[  379.735445][T18321] syzkaller0: entered allmulticast mode
[  379.758083][T18321] tipc: Resetting bearer <eth:syzkaller0>
[  379.765801][T18320] tipc: Resetting bearer <eth:syzkaller0>
[  379.778883][T18320] tipc: Disabling bearer <eth:syzkaller0>
[  380.936222][T18364] netlink: 'syz.3.5307': attribute type 1 has an invalid length.
[  381.020438][T18364] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  381.038858][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  381.040994][T18364] 8021q: adding VLAN 0 to HW filter on device bond1
[  381.098885][T18364] veth3: entered promiscuous mode
[  381.107019][T18364] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  381.113846][T18370] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  381.121504][T18374] tipc: Cannot configure node identity twice
[  381.172292][ T5709] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  381.515955][T18391] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5319'.
[  381.546656][T18393] openvswitch: netlink: Flow key attribute not present in set flow.
[  381.567746][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'.
[  381.671306][T18409] sctp: [Deprecated]: syz.3.5328 (pid 18409) Use of int in max_burst socket option deprecated.
[  381.671306][T18409] Use struct sctp_assoc_value instead
[  381.706287][T18415] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5331'.
[  381.711464][T18415] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5331'.
[  381.714692][T18415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5331'.
[  381.766880][T18421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5333'.
[  381.795029][T18421] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  381.869420][T18425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.876304][T18425] syzkaller0: entered promiscuous mode
[  381.878650][T18425] syzkaller0: entered allmulticast mode
[  381.904693][T18425] tipc: Resetting bearer <eth:syzkaller0>
[  381.908187][T18424] tipc: Resetting bearer <eth:syzkaller0>
[  381.918006][T18424] tipc: Disabling bearer <eth:syzkaller0>
[  381.977716][T18429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5338'.
[  382.241910][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5346'.
[  382.275742][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5341'.
[  382.374779][T18438] ..0: left allmulticast mode
[  382.376892][T18438] hsr_slave_0: left allmulticast mode
[  382.379154][T18438] hsr_slave_1: left allmulticast mode
[  382.469229][T18438] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  382.474554][T18438] veth5: left promiscuous mode
[  382.485494][T18438] bridge4: left allmulticast mode
[  382.487922][T18438] gretap1: left allmulticast mode
[  382.504469][T18438] syz_tun: left allmulticast mode
[  382.511984][T18438] macvlan3: left allmulticast mode
[  382.521744][ T5709] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.524667][ T5709] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.528070][ T5709] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.532828][ T5709] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.547431][T18466] vxcan1 speed is unknown, defaulting to 1000
[  382.550075][ T5709] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  382.552956][ T5709] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  382.667785][T18466] wg1 speed is unknown, defaulting to 1000
[  382.822858][T18490] netlink: 'syz.4.5361': attribute type 2 has an invalid length.
[  382.832270][T18490] netlink: 'syz.4.5361': attribute type 1 has an invalid length.
[  382.865062][T18488] vxcan1 speed is unknown, defaulting to 1000
[  383.075643][T18488] wg1 speed is unknown, defaulting to 1000
[  383.162816][T18506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.166497][T18506] syzkaller0: entered promiscuous mode
[  383.168930][T18506] syzkaller0: entered allmulticast mode
[  383.256796][T18506] tipc: Resetting bearer <eth:syzkaller0>
[  383.266875][T18505] tipc: Resetting bearer <eth:syzkaller0>
[  383.284747][T18505] tipc: Disabling bearer <eth:syzkaller0>
[  385.328181][T18618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.343899][T18618] syzkaller0: entered promiscuous mode
[  385.345711][T18618] syzkaller0: entered allmulticast mode
[  385.376827][T18618] tipc: Resetting bearer <eth:syzkaller0>
[  385.380352][T18617] tipc: Resetting bearer <eth:syzkaller0>
[  385.412233][T18617] tipc: Disabling bearer <eth:syzkaller0>
[  385.757831][T18634] nbd3: detected capacity change from 0 to 127
[  385.762886][T18284] block nbd3: Send control failed (result -32)
[  385.763289][   T57] block nbd3: Receive control failed (result -32)
[  385.780383][T18284] block nbd3: Request send failed, requeueing
[  385.788318][T11223] block nbd3: Dead connection, failed to find a fallback
[  385.791588][T11223] block nbd3: shutting down sockets
[  385.796818][T11223] blk_print_req_error: 138 callbacks suppressed
[  385.796828][T11223] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.805342][T11223] buffer_io_error: 138 callbacks suppressed
[  385.805352][T11223] Buffer I/O error on dev nbd3, logical block 0, async page read
[  385.810954][T18284] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.814643][T18284] Buffer I/O error on dev nbd3, logical block 1, async page read
[  385.819720][T18284] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.823529][T18284] Buffer I/O error on dev nbd3, logical block 2, async page read
[  385.826886][T18284] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.832432][T18284] Buffer I/O error on dev nbd3, logical block 3, async page read
[  385.837834][T18284] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.842414][T18284] Buffer I/O error on dev nbd3, logical block 0, async page read
[  385.845259][T18284] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.848150][T18284] Buffer I/O error on dev nbd3, logical block 1, async page read
[  385.858994][T18284] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.868385][T18284] Buffer I/O error on dev nbd3, logical block 2, async page read
[  385.871655][T18284] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.874743][T18284] Buffer I/O error on dev nbd3, logical block 3, async page read
[  385.877430][T18284] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.880797][T18284] Buffer I/O error on dev nbd3, logical block 0, async page read
[  385.889907][T18284] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  385.892880][T18284] Buffer I/O error on dev nbd3, logical block 1, async page read
[  385.897396][T18284] ldm_validate_partition_table(): Disk read failed.
[  385.900963][T18284] Dev nbd3: unable to read RDB block 0
[  385.904016][T18284]  nbd3: unable to read partition table
[  385.908724][T18284] ldm_validate_partition_table(): Disk read failed.
[  385.912692][T18284] Dev nbd3: unable to read RDB block 0
[  385.915727][T18284]  nbd3: unable to read partition table
[  386.159266][T18591] Set syz1 is full, maxelem 65536 reached
[  386.256650][T18678] __nla_validate_parse: 6 callbacks suppressed
[  386.256660][T18678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5447'.
[  386.501185][T18709] netlink: 'syz.5.5462': attribute type 4 has an invalid length.
[  386.504010][T18709] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5462'.
[  386.514402][T18709] : renamed from bond0
[  386.517865][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5461'.
[  386.531573][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5461'.
[  386.531645][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  386.538276][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  386.545140][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  386.793499][T18729] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  387.152496][T18751] syzkaller1: entered promiscuous mode
[  387.154477][T18751] syzkaller1: entered allmulticast mode
[  387.359838][T18764] vxcan1 speed is unknown, defaulting to 1000
[  387.539193][T18764] wg1 speed is unknown, defaulting to 1000
[  387.585944][T18774] xfrm0: Caught tx_queue_len zero misconfig
[  387.735147][T18782] netlink: 'syz.3.5494': attribute type 1 has an invalid length.
[  387.737747][T18782] netlink: 'syz.3.5494': attribute type 1 has an invalid length.
[  387.743301][T18782] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5494'.
[  387.884944][T18789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  387.888075][T18789] syzkaller0: entered promiscuous mode
[  387.890582][T18789] syzkaller0: entered allmulticast mode
[  387.909324][T18789] tipc: Resetting bearer <eth:syzkaller0>
[  387.912937][T18788] tipc: Resetting bearer <eth:syzkaller0>
[  387.922445][T18788] tipc: Disabling bearer <eth:syzkaller0>
[  389.052372][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5519'.
[  389.055776][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5519'.
[  389.323047][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5534'.
[  389.411039][T18878] IPv6: sit2: Disabled Multicast RS
[  389.519453][T18887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.525145][T18887] syzkaller0: entered promiscuous mode
[  389.527452][T18887] syzkaller0: entered allmulticast mode
[  389.533560][T18890] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  389.552502][T18887] tipc: Resetting bearer <eth:syzkaller0>
[  389.563059][T18886] tipc: Resetting bearer <eth:syzkaller0>
[  389.583770][T18886] tipc: Disabling bearer <eth:syzkaller0>
[  389.700085][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5552'.
[  389.722202][T18903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5552'.
[  389.747897][T18907] tipc: Enabled bearer <eth:gre0>, priority 10
[  389.786382][T18912] sctp: [Deprecated]: syz.4.5556 (pid 18912) Use of int in max_burst socket option deprecated.
[  389.786382][T18912] Use struct sctp_assoc_value instead
[  390.126370][T18952] macsec2: entered promiscuous mode
[  390.128198][T18952] batadv0: entered promiscuous mode
[  390.132601][T18952] batadv0: left promiscuous mode
[  390.712400][T18998] vxcan1 speed is unknown, defaulting to 1000
[  390.819680][T18998] wg1 speed is unknown, defaulting to 1000
[  390.870006][  T791] tipc: Node number set to 383971404
[  391.590768][T19085] syzkaller0: entered promiscuous mode
[  391.593212][T19085] syzkaller0: entered allmulticast mode
[  391.597134][   T12] syzkaller0: tun_net_xmit 70
[  391.600791][T19085] syzkaller0: tun_chr_ioctl cmd 1074025677
[  391.604301][T19085] syzkaller0: Linktype set failed because interface is up
[  391.799486][T19091] netlink: 'syz.5.5635': attribute type 8 has an invalid length.
[  393.698994][T19140] vxcan1 speed is unknown, defaulting to 1000
[  393.818273][T19140] wg1 speed is unknown, defaulting to 1000
[  394.038644][T19154] pim6reg1: entered promiscuous mode
[  394.042742][T19154] pim6reg1: entered allmulticast mode
[  394.090398][T19093] Set syz1 is full, maxelem 65536 reached
[  394.334174][T19166] IPVS: Error connecting to the multicast addr
[  394.373643][T19170] __nla_validate_parse: 2 callbacks suppressed
[  394.373656][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'.
[  394.883439][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5684'.
[  394.993695][T19228] netlink: 'syz.5.5686': attribute type 1 has an invalid length.
[  395.005361][T19228] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5686'.
[  395.170997][T19238] netlink: 'syz.5.5691': attribute type 142 has an invalid length.
[  395.627670][T19259] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5701'.
[  395.631992][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5701'.
[  395.635952][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5701'.
[  395.783053][T19271] vlan0: entered promiscuous mode
[  396.212494][T19311] veth1_macvtap: mtu less than device minimum
[  396.277566][T19317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.285622][T19317] syzkaller0: entered promiscuous mode
[  396.288072][T19317] syzkaller0: entered allmulticast mode
[  396.304805][T19317] tipc: Resetting bearer <eth:syzkaller0>
[  396.310987][T19315] tipc: Resetting bearer <eth:syzkaller0>
[  396.324708][T19315] tipc: Disabling bearer <eth:syzkaller0>
[  396.383297][T19323] netlink: 'syz.3.5732': attribute type 4 has an invalid length.
[  396.386464][T19323] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5732'.
[  396.546404][T19335] syzkaller1: entered promiscuous mode
[  396.550685][T19335] syzkaller1: entered allmulticast mode
[  396.740315][T19349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5743'.
[  396.743957][T19349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5743'.
[  396.745988][T19352] ==================================================================
[  396.747491][T19349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5743'.
[  396.751012][T19352] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  396.751039][T19352] Read of size 1 at addr ffff88801178d530 by task syz.3.5744/19352
[  396.751050][T19352] 
[  396.751058][T19352] CPU: 1 UID: 0 PID: 19352 Comm: syz.3.5744 Not tainted syzkaller #0 PREEMPT(full) 
[  396.751090][T19352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.751099][T19352] Call Trace:
[  396.751106][T19352]  <TASK>
[  396.751112][T19352]  dump_stack_lvl+0x189/0x250
[  396.751129][T19352]  ? __kasan_check_byte+0x12/0x40
[  396.751148][T19352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.751162][T19352]  ? lock_release+0x4b/0x3e0
[  396.751181][T19352]  ? __virt_addr_valid+0x4a5/0x5c0
[  396.751197][T19352]  print_report+0xca/0x240
[  396.751210][T19352]  ? __xfrm_state_insert+0x8af/0x1450
[  396.751224][T19352]  kasan_report+0x118/0x150
[  396.751240][T19352]  ? __xfrm_state_insert+0x8af/0x1450
[  396.751257][T19352]  __xfrm_state_insert+0x8af/0x1450
[  396.751272][T19352]  ? xfrm_state_insert+0x44/0x60
[  396.751287][T19352]  xfrm_state_insert+0x54/0x60
[  396.751301][T19352]  ipcomp6_init_state+0x655/0x900
[  396.751317][T19352]  __xfrm_init_state+0xa76/0x13f0
[  396.751334][T19352]  ? __xfrm_init_state+0x7ef/0x13f0
[  396.751350][T19352]  xfrm_init_state+0x18/0xa0
[  396.751365][T19352]  pfkey_add+0x1d38/0x2e00
[  396.751383][T19352]  ? __pfx_pfkey_add+0x10/0x10
[  396.751396][T19352]  ? kmem_cache_free+0x18f/0x400
[  396.751415][T19352]  pfkey_sendmsg+0xbfe/0x1090
[  396.751435][T19352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  396.751455][T19352]  ? aa_sock_msg_perm+0xf1/0x1d0
[  396.751466][T19352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  396.751478][T19352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  396.751491][T19352]  __sock_sendmsg+0x21c/0x270
[  396.751511][T19352]  ____sys_sendmsg+0x505/0x830
[  396.751528][T19352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  396.751545][T19352]  ? import_iovec+0x74/0xa0
[  396.751557][T19352]  ___sys_sendmsg+0x21f/0x2a0
[  396.751569][T19352]  ? __pfx____sys_sendmsg+0x10/0x10
[  396.751588][T19352]  ? __fget_files+0x2a/0x420
[  396.751598][T19352]  ? __fget_files+0x3a0/0x420
[  396.751610][T19352]  __x64_sys_sendmsg+0x19b/0x260
[  396.751622][T19352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  396.751636][T19352]  ? rcu_is_watching+0x15/0xb0
[  396.751650][T19352]  ? do_syscall_64+0xbe/0x3b0
[  396.751663][T19352]  do_syscall_64+0xfa/0x3b0
[  396.751672][T19352]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.751683][T19352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.751694][T19352]  ? exc_page_fault+0x9f/0xf0
[  396.751705][T19352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.751714][T19352] RIP: 0033:0x7f4cc098eba9
[  396.751723][T19352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.751731][T19352] RSP: 002b:00007f4cc1764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  396.751742][T19352] RAX: ffffffffffffffda RBX: 00007f4cc0bd5fa0 RCX: 00007f4cc098eba9
[  396.751749][T19352] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  396.751757][T19352] RBP: 00007f4cc0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  396.751764][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  396.751771][T19352] R13: 00007f4cc0bd6038 R14: 00007f4cc0bd5fa0 R15: 00007ffc891ec268
[  396.751782][T19352]  </TASK>
[  396.751786][T19352] 
[  396.875694][T19352] Allocated by task 17332:
[  396.877547][T19352]  kasan_save_track+0x3e/0x80
[  396.879150][T19352]  __kasan_slab_alloc+0x6c/0x80
[  396.880851][T19352]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  396.882693][T19352]  xfrm_state_alloc+0x24/0x2f0
[  396.884454][T19352]  __find_acq_core+0x8a7/0x1c00
[  396.886544][T19352]  xfrm_find_acq+0x78/0xa0
[  396.888421][T19352]  xfrm_alloc_userspi+0x6b3/0xc90
[  396.890447][T19352]  xfrm_user_rcv_msg+0x7a3/0xab0
[  396.892467][T19352]  netlink_rcv_skb+0x208/0x470
[  396.894445][T19352]  xfrm_netlink_rcv+0x79/0x90
[  396.896439][T19352]  netlink_unicast+0x82f/0x9e0
[  396.898107][T19352]  netlink_sendmsg+0x805/0xb30
[  396.899973][T19352]  __sock_sendmsg+0x21c/0x270
[  396.901943][T19352]  ____sys_sendmsg+0x505/0x830
[  396.904033][T19352]  ___sys_sendmsg+0x21f/0x2a0
[  396.906102][T19352]  __x64_sys_sendmsg+0x19b/0x260
[  396.908277][T19352]  do_syscall_64+0xfa/0x3b0
[  396.910255][T19352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.912427][T19352] 
[  396.913487][T19352] Freed by task 8129:
[  396.915203][T19352]  kasan_save_track+0x3e/0x80
[  396.917263][T19352]  kasan_save_free_info+0x46/0x50
[  396.919325][T19352]  __kasan_slab_free+0x5b/0x80
[  396.921360][T19352]  kmem_cache_free+0x18f/0x400
[  396.923384][T19352]  xfrm_state_gc_task+0x52d/0x6b0
[  396.925456][T19352]  process_scheduled_works+0xae1/0x17b0
[  396.927723][T19352]  worker_thread+0x8a0/0xda0
[  396.929624][T19352]  kthread+0x711/0x8a0
[  396.931324][T19352]  ret_from_fork+0x3fc/0x770
[  396.933243][T19352]  ret_from_fork_asm+0x1a/0x30
[  396.935212][T19352] 
[  396.936237][T19352] The buggy address belongs to the object at ffff88801178d200
[  396.936237][T19352]  which belongs to the cache xfrm_state of size 928
[  396.941747][T19352] The buggy address is located 816 bytes inside of
[  396.941747][T19352]  freed 928-byte region [ffff88801178d200, ffff88801178d5a0)
[  396.947216][T19352] 
[  396.948257][T19352] The buggy address belongs to the physical page:
[  396.950988][T19352] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801178ed00 pfn:0x1178c
[  396.955169][T19352] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  396.958667][T19352] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  396.961802][T19352] page_type: f5(slab)
[  396.963494][T19352] raw: 00fff00000000040 ffff88801cb933c0 dead000000000122 0000000000000000
[  396.967036][T19352] raw: ffff88801178ed00 00000000800e000a 00000000f5000000 0000000000000000
[  396.970074][T19352] head: 00fff00000000040 ffff88801cb933c0 dead000000000122 0000000000000000
[  396.973336][T19352] head: ffff88801178ed00 00000000800e000a 00000000f5000000 0000000000000000
[  396.976808][T19352] head: 00fff00000000002 ffffea000045e301 00000000ffffffff 00000000ffffffff
[  396.980415][T19352] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  396.983929][T19352] page dumped because: kasan: bad access detected
[  396.986597][T19352] page_owner tracks the page as allocated
[  396.989004][T19352] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6393, tgid 6381 (syz.2.190), ts 74148962158, free_ts 73684061671
[  396.996760][T19352]  post_alloc_hook+0x240/0x2a0
[  396.998792][T19352]  get_page_from_freelist+0x21e4/0x22c0
[  397.001162][T19352]  __alloc_frozen_pages_noprof+0x181/0x370
[  397.003554][T19352]  alloc_pages_mpol+0x232/0x4a0
[  397.005602][T19352]  allocate_slab+0x8a/0x370
[  397.007496][T19352]  ___slab_alloc+0xbeb/0x1420
[  397.009509][T19352]  kmem_cache_alloc_noprof+0x283/0x3c0
[  397.011751][T19352]  xfrm_state_alloc+0x24/0x2f0
[  397.013807][T19352]  pfkey_add+0x6e4/0x2e00
[  397.015640][T19352]  pfkey_sendmsg+0xbfe/0x1090
[  397.017641][T19352]  __sock_sendmsg+0x21c/0x270
[  397.019590][T19352]  ____sys_sendmsg+0x52d/0x830
[  397.021681][T19352]  ___sys_sendmsg+0x21f/0x2a0
[  397.023718][T19352]  __sys_sendmmsg+0x227/0x430
[  397.025768][T19352]  __x64_sys_sendmmsg+0xa0/0xc0
[  397.027888][T19352]  do_syscall_64+0xfa/0x3b0
[  397.029811][T19352] page last free pid 6386 tgid 6385 stack trace:
[  397.032509][T19352]  __free_frozen_pages+0xbc4/0xd30
[  397.034753][T19352]  stack_depot_save_flags+0x436/0x860
[  397.037039][T19352]  kasan_save_track+0x4f/0x80
[  397.039102][T19352]  __kasan_slab_alloc+0x6c/0x80
[  397.041217][T19352]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  397.043725][T19352]  __alloc_skb+0x112/0x2d0
[  397.045706][T19352]  rtmsg_ifinfo_build_skb+0x84/0x260
[  397.048000][T19352]  rtmsg_ifinfo+0x8c/0x1a0
[  397.049973][T19352]  register_netdevice+0x1712/0x1ae0
[  397.052235][T19352]  l2tp_eth_create+0x7ef/0xbd0
[  397.054280][T19352]  l2tp_nl_cmd_session_create+0x733/0xc20
[  397.056733][T19352]  genl_family_rcv_msg_doit+0x215/0x300
[  397.059137][T19352]  genl_rcv_msg+0x60e/0x790
[  397.061064][T19352]  netlink_rcv_skb+0x208/0x470
[  397.063132][T19352]  genl_rcv+0x28/0x40
[  397.064846][T19352]  netlink_unicast+0x82f/0x9e0
[  397.066851][T19352] 
[  397.067905][T19352] Memory state around the buggy address:
[  397.070167][T19352]  ffff88801178d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  397.073344][T19352]  ffff88801178d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  397.076593][T19352] >ffff88801178d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  397.079845][T19352]                                      ^
[  397.082202][T19352]  ffff88801178d580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  397.085547][T19352]  ffff88801178d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  397.088716][T19352] ==================================================================
[  397.092321][T19352] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  397.095365][T19352] CPU: 1 UID: 0 PID: 19352 Comm: syz.3.5744 Not tainted syzkaller #0 PREEMPT(full) 
[  397.099320][T19352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  397.103392][T19352] Call Trace:
[  397.104663][T19352]  <TASK>
[  397.105901][T19352]  dump_stack_lvl+0x99/0x250
[  397.107841][T19352]  ? __asan_memcpy+0x40/0x70
[  397.109470][T19352]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.111292][T19352]  ? __pfx__printk+0x10/0x10
[  397.112810][T19352]  vpanic+0x281/0x750
[  397.114252][T19352]  ? __pfx_vpanic+0x10/0x10
[  397.116204][T19352]  ? irqentry_exit+0x74/0x90
[  397.118059][T19352]  panic+0xb9/0xc0
[  397.119287][T19352]  ? __pfx_panic+0x10/0x10
[  397.120750][T19352]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  397.123187][T19352]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  397.125582][T19352]  ? __xfrm_state_insert+0x8af/0x1450
[  397.127751][T19352]  check_panic_on_warn+0x89/0xb0
[  397.129850][T19352]  ? __xfrm_state_insert+0x8af/0x1450
[  397.132099][T19352]  end_report+0x78/0x160
[  397.133877][T19352]  kasan_report+0x129/0x150
[  397.135844][T19352]  ? __xfrm_state_insert+0x8af/0x1450
[  397.138078][T19352]  __xfrm_state_insert+0x8af/0x1450
[  397.139756][T19352]  ? xfrm_state_insert+0x44/0x60
[  397.141360][T19352]  xfrm_state_insert+0x54/0x60
[  397.142893][T19352]  ipcomp6_init_state+0x655/0x900
[  397.144672][T19352]  __xfrm_init_state+0xa76/0x13f0
[  397.146743][T19352]  ? __xfrm_init_state+0x7ef/0x13f0
[  397.148610][T19352]  xfrm_init_state+0x18/0xa0
[  397.150544][T19352]  pfkey_add+0x1d38/0x2e00
[  397.152511][T19352]  ? __pfx_pfkey_add+0x10/0x10
[  397.154403][T19352]  ? kmem_cache_free+0x18f/0x400
[  397.156446][T19352]  pfkey_sendmsg+0xbfe/0x1090
[  397.158490][T19352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  397.160601][T19352]  ? aa_sock_msg_perm+0xf1/0x1d0
[  397.162636][T19352]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.164750][T19352]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  397.166849][T19352]  __sock_sendmsg+0x21c/0x270
[  397.168761][T19352]  ____sys_sendmsg+0x505/0x830
[  397.170748][T19352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.173096][T19352]  ? import_iovec+0x74/0xa0
[  397.175068][T19352]  ___sys_sendmsg+0x21f/0x2a0
[  397.177176][T19352]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.179421][T19352]  ? __fget_files+0x2a/0x420
[  397.181380][T19352]  ? __fget_files+0x3a0/0x420
[  397.183311][T19352]  __x64_sys_sendmsg+0x19b/0x260
[  397.185353][T19352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  397.187598][T19352]  ? rcu_is_watching+0x15/0xb0
[  397.189620][T19352]  ? do_syscall_64+0xbe/0x3b0
[  397.191552][T19352]  do_syscall_64+0xfa/0x3b0
[  397.193171][T19352]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.194933][T19352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.196953][T19352]  ? exc_page_fault+0x9f/0xf0
[  397.198411][T19352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.200470][T19352] RIP: 0033:0x7f4cc098eba9
[  397.202291][T19352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  397.209879][T19352] RSP: 002b:00007f4cc1764038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  397.213220][T19352] RAX: ffffffffffffffda RBX: 00007f4cc0bd5fa0 RCX: 00007f4cc098eba9
[  397.216321][T19352] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  397.219385][T19352] RBP: 00007f4cc0a11e19 R08: 0000000000000000 R09: 0000000000000000
[  397.222193][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  397.224645][T19352] R13: 00007f4cc0bd6038 R14: 00007f4cc0bd5fa0 R15: 00007ffc891ec268
[  397.227350][T19352]  </TASK>
[  397.229251][T19352] Kernel Offset: disabled
[  397.230621][T19352] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:17:34  Registers:
info registers vcpu 0

CPU#0
RAX=0c3caef50e6fd900 RBX=ffffffff819683f8 RCX=0c3caef50e6fd900 RDX=0000000000000001
RSI=ffffffff8d9b9a56 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a93f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d517ff8 CR3=0000000122e5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=0020000200058001 ffffffff8168842d XMM03=0003000600080000 0002000100060000
XMM04=0300080000000300 0600080000000200 XMM05=0100060000002000 0200058001004800
XMM06=0000010003000800 0000000005000500 XMM07=0000000002000800 00000125dfdbfb00
XMM08=0000000000000000 00007f692a212ee7 XMM09=0000000000000000 00007f692a212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000003a2b9 RDI=000000000003a2ba RBP=00000000000003f8 RSP=ffffc900047fedb0
R8 =ffff888021748237 R9 =1ffff110042e9046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b0190a R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4cc17646c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000001c0 CR3=0000000028532000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4cc0ba7498 00007f4cc0ba7470 XMM03=00007f4cc0ba74a8 00007f4cc0ba74a0
XMM04=00007f4cc170d100 00007f4cc0ba7460 XMM05=00007f4cc0ba7478 00007f4cc0ba74c0
XMM06=00007f4cc0ba74b8 00007f4cc0ba74b0 XMM07=00007f4cc0ba74a8 00007f4cc0ba74a0
XMM08=0000000000000000 00007f4cc0a12ee7 XMM09=0000000000000000 00007f4cc0a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
