last executing test programs:

801.806637ms ago: executing program 1 (id=2144):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5d800e853fccad25dd2323bab60742d2"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB="080025bd7012fbdbdf272b00000208000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048845}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x5, 0x70bd2a, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xfff3, 0x9}, {0x2, 0xf}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

659.613824ms ago: executing program 0 (id=2146):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0x6d, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0x20, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2bf}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @exit, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x10000, 0xaa, &(0x7f0000000800)=""/170, 0x41100, 0x48, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x4, 0x6, 0x45e9}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x0, 0x4, 0x1, 0xb}, {0x1, 0x5, 0x2, 0x5}, {0x3, 0x4, 0xf, 0x5}, {0x2, 0x2, 0x1, 0xb}, {0x0, 0x2, 0x8, 0x1}, {0x4, 0x5, 0x10, 0xa}, {0x3, 0x4, 0xa, 0x4}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x12}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xd, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x8000}, [@generic={0x9, 0x4, 0x5, 0x7f, 0x10000}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x5, 0x0, 0x4, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}, @ldst={0x0, 0x0, 0x6, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0x4a, &(0x7f00000002c0)=""/74, 0x41000, 0x22, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x5, 0x6, 0x2}, 0x10, r3, r4, 0x0, &(0x7f0000000b80)=[r5], 0x0, 0x10, 0x2}, 0x94)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)={0x120, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x10c, 0x11, 0x0, 0x1, [@nested={0x108, 0x13e, 0x0, 0x1, [@nested={0x101, 0x23, 0x0, 0x1, [@generic="ff12228a20f57c5a6e243065e767b6e40ba937d2550d4e8f43ee84b04ca3ba78f6e5bf095489c17a2b40410c80112f5e5246be915aec2f15c2d99dbdfcae02cc95809cc5712c137c4d827e761ec1702b322b18dc8dd01d27cc97dc819677766817841adf9f661f374dc35192b6011f23d228a365a96f0b812d441f576e4e6ab26889061fadb3eb4bbbeece4eb37bb68b3c8568e52fdaa17188db756e8e405575c5ba12ab3298abff9510e5670a7970350a9ddded1f9beb944c0ef3eaf983bf964bf1463c9be8bdf61f9018132ea5769ef11840989d60", @typed={0x8, 0x137, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x127}, @generic="a6baa71b38fe4e", @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@mcast1}]}]}]}]}, 0x120}], 0x1}, 0x300)

658.956005ms ago: executing program 1 (id=2147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001008078da0ce40073797a30000000002c000000030a01010000000000f00400010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002200000000000000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000"], 0x100}}, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r6, 0x0, r8, 0x0, 0x1, 0x0)
vmsplice(r7, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1106}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}}, 0x40080c0)
vmsplice(r8, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
write(r5, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000003b00), 0x0, 0x4004044)
socket(0x27, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xbffffffe}, {0x80000006, 0x80, 0x9, 0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000000000000070000000000100000000000000a02000000002e00"], &(0x7f00000000c0)=""/63, 0x33, 0x3f, 0x0, 0x6}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r12, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/33, 0x21, 0x0, &(0x7f0000000180)=""/51, 0x33}}, 0x10)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@remote, 0x0, 0x33}, @in6=@local, {}, {}, {0x0, 0x8}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="09000000010000", 0x7)

493.798354ms ago: executing program 2 (id=2149):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x3e, 0xfffffffffffffffd, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20, '\x00', r3}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', <r4=>0x0, 0x4, 0x9, 0x0, 0xfffffffa, 0x7d67b6eefd94da79, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0x0, 0x101}})
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000040900010073797a30000000000900020073797a320000000070000000050a010300000000000000000200000008000b40000000020900010073797a300000000008000a40000000030b00070066696c74657200000c000240000000000000000128"], 0x3518}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r4, r5, 0x4, 0x3, 0x5}, 0x50)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)

489.74078ms ago: executing program 0 (id=2150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010000108fdffffff000000005f000000", @ANYRES32=0x0, @ANYBLOB="00000000e106020008001b00000000003c001a8038002d80010008008000000005000800000000000500080007000000050008003400000014000700ff010000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 64)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (rerun: 64)
getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@local, @dev, <r5=>0x0}, &(0x7f00000001c0)=0xc)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', r5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

420.921552ms ago: executing program 2 (id=2151):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4000005)

419.767596ms ago: executing program 0 (id=2152):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x328, 0x200, 0x0, 0x148, 0x200, 0x148, 0x290, 0x240, 0x240, 0x290, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0xffffffff, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)

361.292259ms ago: executing program 0 (id=2153):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r3=>0x0, @broadcast, @multicast1}, &(0x7f00000000c0)=0xc)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x90, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)

360.585681ms ago: executing program 1 (id=2154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0x1ff, 0x600000, 0x4, 0xdf, 0x2}, &(0x7f00000002c0)={0x3, 0x8000, 0x3, 0xfffffffffffffffb, 0x4d, 0x1, 0x8000, 0x3}, &(0x7f0000000300)={0x7, 0x6, 0x1, 0xd, 0x6, 0x7ff, 0x9, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7]}, 0x8}) (async)
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x28}}, 0x802) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "727afffa97"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pwrite64(r6, &(0x7f0000000480)="8d9f3aff114e54198c94bddd2c8df8712872a0aa848f9fd5ffcae546794a21a7554f7b0e6dd81262df8a51f9c6c6e88b54efad3c2130be199316325ade9d68d080177cf0fa663ab34790d5bfc9be2d70303db7", 0x53, 0x200) (async)
r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
readv(r11, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="9d5ab229d99f6a8e10bb5fd52316e117eee892d86a067b4ae693515c2f15508e4d2d7c3d8a0ca7d2f3469320bce3097147e2e1816fe001f04afec25f5b9aaa55646b232a465b2c0deb426a084a2220ab94ff8be945f2a80ac0b0d740961893e41b80741213be111e59de4d56b3f64fb98fbf7b1153833e89545ca0f5b265", 0x7e) (async)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004) (async)
writev(r0, &(0x7f0000019440), 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r12=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0)

359.796389ms ago: executing program 2 (id=2155):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d739b0cde00010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001300010000000000000000938d00000100000000000000000000000000000000000000000000ffffe0000002000000000000000002000000000000006e366efc8e9fc720651c7f010f342141333e074e2261faca8f9cb48204df5ca0c1f6c750128dc05a26c1b44d226297ed6101cc7fb1f677cf7fba6ff37396238fef545c70027b80bb2663cb6b14208fbc3ef41b81e3d4822528e7a56bf778917656b2b50bd1ac4ac73b836e8b25b17e0d1502d11a9d049d754d02503bd4a73fcf0e5991c5e67f258b68c656b08d37a2c14eef767639b34dc684f4771700d66c361d7649eb8f0614b2e070f2ef9eb5f362713679c72ffa3607323a1ac498b2a0ed9e45daf5df6758d3f43289673ad8e52bc20a0a5c806074204c485d83ef56e05c645a6f91bc10c6549a104e8bf0d240768add737574d958167187d4b02b09375626dfa9c9ac28561b7fba00a24e473f2f43298e17ac643fbe9845b2466276d5f370e3a6f0420fa116fe5d5b99142e34f0e787d729bf03f133bdd3134a72ab69b70209b0334ac2825f0cf76813c01575b72f8f40b2a0ad10165b7ebcee1d3203ed3a4fca41d2ee05a9978ee9657e0eacdfe6b357a93de027b5263e65481389310d98ac10c1b01a1151f21bda3be5c579d7afb8b015385578d1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0010000800080000000000"], 0xc4}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r11, &(0x7f0000000380)="9f16b1b7841214bf57ce11d0059eb74ee1765865fcbef0f68966a7e97babc330112bd4cb43a8970d2b45a8c1ecbb9824f819ed6e82b0b34892c996b085e35a234c83fc585b61777875b2e0e1d8b391a87854afdf02601b2b8a55f3547d0551f03a7d2f4ac4985f5d198edf28cb3d4cdc", 0x70, 0x0, &(0x7f0000000500)={0x2, 0x4e20, @private=0xa010102}, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=@newtclass={0x884, 0x28, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffe0, 0xc}, {0x1, 0x8}, {0x9, 0x6}}, [@tclass_kind_options=@c_htb={{0x8}, {0x858, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x4, 0x9, 0x3, 0x5, 0x6, 0x8, 0x29e2, 0x5684, 0x1, 0x2, 0x5, 0x6, 0x1, 0x1, 0x8000, 0x1, 0x1, 0x101, 0x10, 0x0, 0x8d, 0x9, 0x8d53, 0x9f, 0x0, 0xc, 0x3, 0x9, 0x1, 0x10000, 0x7, 0x3, 0x3, 0x2, 0x0, 0x6, 0x7ff, 0xff7f, 0x2, 0x2, 0xfffffffa, 0x6, 0xd6d, 0x6, 0x1, 0xf1c, 0xffffff0c, 0xfffffffa, 0x9, 0x3, 0x8, 0x0, 0xfffffffc, 0xffffffff, 0x7, 0x1, 0x1000, 0x8ff2, 0x2, 0x6, 0x8, 0x4503, 0x2, 0x6, 0x8, 0x71e5, 0x64, 0x4, 0x555, 0x3, 0x4, 0xfffffffd, 0x6, 0x3, 0xffffff01, 0x1, 0x6, 0xfffff045, 0xa5, 0x7, 0x9, 0x7, 0x4, 0x15, 0x5, 0x4, 0x81, 0x7, 0xf2a, 0x2, 0x5, 0x40, 0x9, 0x6, 0x0, 0x101, 0x1, 0xff, 0xfe, 0xafa, 0x8, 0x100, 0xfffffff6, 0x0, 0x8, 0x9e, 0x100, 0x5, 0xbc1, 0x1ff, 0x8, 0x2, 0x2df8, 0x2, 0x800, 0x3829, 0xff, 0x4, 0x80000000, 0xffff, 0x6, 0x5, 0x6, 0x5, 0x1, 0x6, 0x8, 0x8, 0x11b3, 0xea17, 0x5, 0x6, 0x6, 0xa9, 0x8, 0xd7, 0x401, 0x9, 0x10, 0x7, 0x1, 0x10000, 0x8000000, 0x7, 0x4, 0x80000001, 0x1, 0xea, 0x4, 0x7f, 0xa, 0x8, 0xe55, 0x7, 0xfffffeff, 0x6, 0xb, 0x400, 0xe, 0x1, 0x6b7, 0x4, 0x10000, 0x10, 0x100, 0x2, 0x6, 0x1, 0x5, 0x8, 0x100, 0x5, 0x6, 0xe, 0xfb4, 0x2a, 0xf2e5, 0x2, 0x2, 0x0, 0x6, 0x6, 0x8, 0x0, 0x3ff, 0xb, 0xb, 0x7, 0x6, 0x6, 0x9, 0x73, 0x252, 0x4, 0x7, 0x9, 0x6, 0x1, 0x40, 0x7, 0x8, 0x1, 0x0, 0x259f, 0x6, 0x7, 0xd7f, 0xfffffffd, 0x427, 0xfffffff9, 0x1, 0x1, 0xffffffff, 0x0, 0xfff, 0x2988, 0x4, 0x1, 0x3ff, 0x7f, 0xffffff28, 0x8, 0x81, 0xa, 0x24, 0x1, 0xff, 0x9, 0x6, 0x3, 0x59, 0x1, 0x3, 0x3, 0x200, 0xabc, 0x7, 0xfa1, 0x2, 0x1000, 0x5f501986, 0x2, 0x3, 0x2, 0xffffffff, 0x1ff, 0xffff0001, 0xffffe875, 0x9, 0x10001, 0xfffffff9, 0x1ff, 0xffffffff, 0xe, 0x9]}, @TCA_HTB_RTAB={0x404, 0x4, [0x80000001, 0x69e0e9cf, 0x8, 0xde2c, 0x852, 0x6, 0x7ff, 0x7fffffff, 0x800, 0x5, 0x5, 0xffffff80, 0x1, 0x3, 0x1000, 0x4, 0x3f1, 0x7, 0x5, 0xfffffff9, 0x2, 0xfa, 0x9, 0x80, 0x0, 0x1, 0x8, 0x0, 0x6, 0x4, 0x5, 0x1ad4e30a, 0x6f1, 0x7ff, 0x7, 0xfffffffe, 0x9, 0x9, 0x7, 0xff, 0x6, 0x8, 0x6, 0xd4, 0x9, 0x4, 0x4, 0x3, 0x284, 0xefe5, 0x200000, 0x5, 0x7, 0x5, 0x7f, 0x4, 0x3c1, 0x8, 0x8, 0x9, 0x37, 0xfff, 0x1ff, 0x8001, 0x7, 0x80, 0x7, 0x2, 0x0, 0x1ff, 0x1, 0x0, 0x9, 0x7, 0x40, 0xfffffffe, 0x10, 0x79, 0x1, 0x3, 0xa, 0x1, 0x5, 0xfffffffb, 0x3, 0x2, 0x10000, 0x3, 0x80000000, 0x7, 0xc, 0x5, 0xfffffff8, 0x401, 0x0, 0x9, 0x2, 0x8b, 0x401, 0x1, 0x2682, 0x6, 0x80000000, 0x8305, 0xffffa023, 0x80000000, 0x1000, 0x6, 0x83, 0xb97, 0xfffffffb, 0x7, 0x2, 0x0, 0x2, 0x9459, 0x3, 0xa, 0x46, 0x9, 0x8, 0x7, 0x5, 0x7, 0x3, 0x0, 0xd, 0x8, 0x9, 0x1, 0x7, 0x3, 0x6, 0x8, 0x80000001, 0x1, 0x0, 0x8, 0x9, 0x800, 0x0, 0x7, 0x2, 0x9, 0x5874, 0xfffffc01, 0x6c57, 0x40, 0x4, 0x0, 0x4, 0x7, 0x8, 0x4, 0x7, 0x6e3e, 0x93e5, 0x3, 0x9, 0x1c, 0x3, 0x2, 0x5, 0x2, 0x1, 0x265d, 0x6, 0xbe, 0x7, 0x7fff, 0x6, 0x9, 0xbe6d, 0x7fff, 0x2, 0x7ff, 0xfd0e, 0x8, 0x3, 0x4, 0x3c2, 0x9, 0x2, 0x7fffffff, 0x1ff, 0x9e52, 0x1, 0x0, 0x8, 0xffffffff, 0x8, 0x3229206e, 0xe0000000, 0x2, 0x4, 0x10, 0xffff, 0x50149326, 0x1, 0x9, 0x3, 0xde9, 0x8e40, 0x4, 0x80000000, 0x81, 0x6, 0xff, 0x1, 0xd0, 0x60aa981e, 0x9, 0x0, 0x8, 0xb, 0x4, 0x8, 0x1, 0x0, 0x8, 0x0, 0x8, 0xffff, 0x2, 0x3c8, 0x8, 0x1, 0x3, 0x8, 0x2, 0xd, 0x101, 0x0, 0x6, 0x400, 0x6, 0x2, 0x10000, 0x5fe, 0x1, 0x4, 0x1, 0x2, 0x8, 0x5dd, 0xa, 0x200, 0x6, 0x3, 0x5, 0x7, 0x10001, 0x7, 0x80000001, 0x9b75, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0xc9, 0x0, 0x2, 0x1, 0x7, 0x7fff}, {0x56, 0x1, 0x4, 0x1, 0x9, 0xd}, 0x9, 0x10001, 0x1, 0x4, 0x3}}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c4)
close(r7)
r12 = socket$unix(0x1, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040001)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r14, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000180)=<r15=>0x0)
syz_open_procfs$namespace(r15, &(0x7f0000000300)='ns/net\x00')
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

248.503204ms ago: executing program 1 (id=2156):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)

247.369935ms ago: executing program 0 (id=2157):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x18, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x2c8, 0x360, 0x98, 0x98, 0x130, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0x0, 'gretap0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0xc, 0x1, 0x72}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x158, 0x198, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x9, 0x1}}, @common=@unspec=@string={{0xc0}, {0xff00, 0x4, 'bm\x00', "8b3e8a7854b359cc21e02ff3ac624ed85956c880a152b103d852bdc4a687815e52a3aadf118e92178b225af4662970f944d32225f4aedf99ae21313e311cdf89564373bbed724dd3debc6f774a01a2a0b94888d28cef3c9ca9e430d83b7120665f8eb163c97f637fa763dab1da6e87fc9ba6e35236a909a3b26f6ae23dba8d3f", 0x2e, 0x0, {0xfffffffffffffffe}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'veth1_vlan\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'lo\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r9, &(0x7f00000001c0), 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', <r10=>0x0})
bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4)
sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004)
sendto$packet(r0, &(0x7f0000000900)="31696ddd20c5926100ea235ce7a83eab06143fabee8e8ee3ff95e1", 0x1b, 0x40, &(0x7f0000000200)={0x11, 0x8100, r12, 0x1, 0x7, 0x6, @random="734c594dead2"}, 0x14)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x1ff)

190.469092ms ago: executing program 1 (id=2158):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000040)={0x675c, {{0xa, 0x4e20, 0x5, @loopback, 0x4acc}}}, 0x88)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvfrom$rose(r4, 0x0, 0x0, 0x9637f83aea13cb50, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)

119.844476ms ago: executing program 2 (id=2159):
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

61.867929ms ago: executing program 2 (id=2160):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x328, 0x200, 0x0, 0x148, 0x200, 0x148, 0x290, 0x240, 0x240, 0x290, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x1b8, 0x200, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@comment={{0x120}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0xffffffff, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)

61.073726ms ago: executing program 1 (id=2161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400fefe0d5dee940b2c000000967c5b9d480000", @ANYRES32, @ANYBLOB="00000000000000001c001a8008000280fe"], 0x44}}, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4)
sendmmsg$inet(r6, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4999fa8a21843244)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000003af19e48c02a86c55d0000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"/4408], 0x113c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

58.637102ms ago: executing program 0 (id=2162):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="080008000400020000001400052753bd74ccf6ee0045a00fc000680000f93fdda3d0596d48cd61b5030690780a010100e00000014e204e28f7d460b5711d12586821311b39d80bd3de5dfab9f8aa7edf5e7d8d7584c41b5a8b00be5cd2467d46bc8e13a8c49de48f8f61ad515c285f34dc8766c08e36ed8e5e86f0f8eccaa05e539604ff25be568029ae5c67ce41903f52000000000000ff153444e02bb4213fc77184625ef284d5132174ee", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) (async)
bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0)

0s ago: executing program 2 (id=2163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000104030000000000000000480000", @ANYRES32=r1, @ANYBLOB="36543d09ce00c119f95fe7ee1e3c1a85ee353f"], 0x20}}, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000380)={'wlan1\x00', @local})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x40012000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000000000000000030c00078008001220000000000500040003000000050005bb00c8e9101902000000d3355045afbf07c16804fa40c5678f6d06613c4cdfa5b52cd4436a00000000000000000000000000000000000000000000000000013af32457aa0516c95a131e011290909b5e77ccdc583148241a54b046e756f9ec29"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20044454)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r11)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r14, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r15 = socket$unix(0x1, 0x2, 0x0)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r17, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

kernel console output (not intermixed with test programs):

nection found
[   74.071708][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.074186][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.076594][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.078942][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.081472][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.083845][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.086180][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.088546][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.090979][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.093265][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.095573][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.097862][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.100221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.102648][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.105014][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.107374][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.109998][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.112819][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.115555][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.117847][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.120241][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.122673][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.125086][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.127470][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.129916][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.132683][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.135182][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.137911][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.141251][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.144056][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.146614][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.149881][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.152786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.155600][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.157948][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.160243][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.162709][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.165202][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.167553][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.169832][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.172723][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.175593][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.178565][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.181553][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.184558][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.187495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.190537][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.193559][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.196624][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.199549][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.202658][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.205603][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.208588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   74.210770][ T5847] Bluetooth: hci2: command tx timeout
[   74.211565][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   74.213424][ T5220] Bluetooth: hci1: command tx timeout
[   74.217915][ T5847] Bluetooth: hci0: command tx timeout
[   74.234558][ T6128] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.294838][ T6132] __nla_validate_parse: 18 callbacks suppressed
[   74.294851][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.338633][ T6135] syzkaller0: entered promiscuous mode
[   74.340543][ T6135] syzkaller0: entered allmulticast mode
[   74.377619][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.405927][ T6135] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[   74.588949][ T6154] netlink: 56 bytes leftover after parsing attributes in process `syz.2.71'.
[   74.617547][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'.
[   74.628644][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   74.744948][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'.
[   74.754568][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.73'.
[   74.782182][ T6160] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.73'.
[   75.049473][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   75.126898][ T6188] netlink: 124 bytes leftover after parsing attributes in process `syz.0.81'.
[   75.244607][ T6195] veth1_to_batadv: entered promiscuous mode
[   75.269597][ T6204] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[   75.287878][ T6204] bridge1: the hash_elasticity option has been deprecated and is always 16
[   75.405330][ T6209] netlink: 'syz.2.87': attribute type 2 has an invalid length.
[   75.414475][ T6209] netlink: 'syz.2.87': attribute type 29 has an invalid length.
[   75.586128][ T6209] netlink: 'syz.2.87': attribute type 29 has an invalid length.
[   75.819496][ T6235] net_ratelimit: 15 callbacks suppressed
[   75.819512][ T6235] openvswitch: netlink: Message has 5 unknown bytes.
[   76.228359][ T6275] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   76.277326][  T972] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.290913][  T972] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.303345][  T972] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   76.452044][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.457335][ T6275] batadv_slave_0: entered promiscuous mode
[   76.720100][ T6313] IPv6: Can't replace route, no match found
[   76.838740][ T6322] bond0: entered promiscuous mode
[   76.841427][ T6322] bond_slave_0: entered promiscuous mode
[   76.855017][ T6322] bond_slave_1: entered promiscuous mode
[   76.863583][ T6322] batadv0: entered promiscuous mode
[   76.867757][ T6322] hsr1: entered allmulticast mode
[   76.869715][ T6322] bond0: entered allmulticast mode
[   76.874733][ T6322] bond_slave_0: entered allmulticast mode
[   76.876990][ T6322] bond_slave_1: entered allmulticast mode
[   76.879162][ T6322] batadv0: entered allmulticast mode
[   76.882458][ T6322] 8021q: adding VLAN 0 to HW filter on device hsr1
[   76.887181][ T6322] bond0: left promiscuous mode
[   76.888841][ T6322] bond_slave_0: left promiscuous mode
[   76.891663][ T6322] bond_slave_1: left promiscuous mode
[   76.894590][ T6322] batadv0: left promiscuous mode
[   76.997487][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.137197][ T6342] netlink: 'syz.2.115': attribute type 1 has an invalid length.
[   77.251170][ T6355] syzkaller0: entered promiscuous mode
[   77.253580][ T6355] syzkaller0: entered allmulticast mode
[   77.963316][ T6365] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   77.990378][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.994284][ T6365] team0: Port device bond0 added
[   78.321736][ T6385] delete_channel: no stack
[   78.414097][ T6393] sctp: [Deprecated]: syz.0.127 (pid 6393) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.414097][ T6393] Use struct sctp_sack_info instead
[   78.425503][ T6393] tipc: Started in network mode
[   78.427627][ T6393] tipc: Node identity 5ecb4308eda3, cluster identity 4711
[   78.437197][ T6393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.442156][ T6393] syzkaller0: entered promiscuous mode
[   78.444088][ T6393] syzkaller0: entered allmulticast mode
[   78.462286][ T6393] tipc: Resetting bearer <eth:syzkaller0>
[   78.466780][ T6393] netlink: 'syz.0.127': attribute type 8 has an invalid length.
[   78.479777][ T6390] wireguard0: entered promiscuous mode
[   78.482674][ T6390] wireguard0: entered allmulticast mode
[   78.576761][ T6392] wireguard0: entered promiscuous mode
[   78.579249][ T6392] wireguard0: entered allmulticast mode
[   78.716632][ T6402] bpq0: entered promiscuous mode
[   78.724251][ T6402] bpq0: entered allmulticast mode
[   78.729920][ T6402] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   78.775936][ T6402] bond1: entered promiscuous mode
[   78.778678][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.848930][ T6404] bond1: (slave bridge2): making interface the new active one
[   78.853784][ T6404] bridge2: entered promiscuous mode
[   78.859742][ T6404] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   79.045573][ T6420] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   79.441895][ T5893] tipc: Node number set to 3009954568
[   79.651730][ T6447] __nla_validate_parse: 25 callbacks suppressed
[   79.651745][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'.
[   79.860356][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[   80.043003][ T6462] netlink: 27 bytes leftover after parsing attributes in process `syz.0.147'.
[   80.180911][  T791] IPVS: starting estimator thread 0...
[   80.282846][ T6481] IPVS: using max 45 ests per chain, 108000 per kthread
[   80.324827][ T6486] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   80.328945][ T6486] x9: renamed from bridge_slave_0 (while UP)
[   80.366608][ T6490] netlink: 152 bytes leftover after parsing attributes in process `syz.0.153'.
[   80.381314][ T6488] tipc: Started in network mode
[   80.384596][ T6488] tipc: Node identity 2ed51ba24aa2, cluster identity 4711
[   80.401334][ T6488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.417181][ T6488] syzkaller0: entered promiscuous mode
[   80.419048][ T6488] syzkaller0: entered allmulticast mode
[   80.459599][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   80.473398][ T6493] tipc: Cannot configure node identity twice
[   80.492264][ T6493] netlink: 104 bytes leftover after parsing attributes in process `syz.1.155'.
[   80.543233][  T972] IPVS: starting estimator thread 0...
[   80.548205][ T6487] tipc: Resetting bearer <eth:syzkaller0>
[   80.582581][ T6503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.157'.
[   80.611703][ T6487] tipc: Disabling bearer <eth:syzkaller0>
[   80.641991][ T6498] IPVS: using max 38 ests per chain, 91200 per kthread
[   80.758500][ T6516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'.
[   80.803209][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[   80.914580][ T6523] syz.2.163 (6523) used greatest stack depth: 19512 bytes left
[   80.947736][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'.
[   81.228491][ T6563] netlink: 'syz.0.174': attribute type 7 has an invalid length.
[   81.240780][ T6563] netlink: 'syz.0.174': attribute type 8 has an invalid length.
[   81.678219][ T6572] sctp: [Deprecated]: syz.1.176 (pid 6572) Use of int in maxseg socket option.
[   81.678219][ T6572] Use struct sctp_assoc_value instead
[   81.695831][ T6586] team0: Port device bond0 removed
[   81.699855][ T6586] bridge_slave_0: left allmulticast mode
[   81.702324][ T6586] bridge_slave_0: left promiscuous mode
[   81.705024][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.718370][ T6586] bridge_slave_1: left allmulticast mode
[   81.720490][ T6586] bridge_slave_1: left promiscuous mode
[   81.725149][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.733818][ T6586] bond0: (slave bond_slave_0): Releasing backup interface
[   81.737835][ T6586] bond_slave_0: left allmulticast mode
[   81.744014][ T6586] bond0: (slave bond_slave_1): Releasing backup interface
[   81.747459][ T6586] bond_slave_1: left allmulticast mode
[   81.758293][ T6586] team0: Port device team_slave_0 removed
[   81.765537][ T6586] team0: Port device team_slave_1 removed
[   81.768079][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.773331][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.778412][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.794719][ T6586] bond1: (slave bridge2): Releasing backup interface
[   81.797046][ T6586] bridge2: left promiscuous mode
[   82.176445][ T6594] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.179452][ T6594] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.182798][ T6594] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.185898][ T6594] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.245425][ T6594] tipc: Resetting bearer <eth:syzkaller0>
[   82.324181][ T6603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.347002][ T6607] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   82.373168][ T6607] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   82.377954][ T6607] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   82.426402][ T6609] gretap1: entered promiscuous mode
[   82.430546][ T6609] bond2: (slave gretap1): making interface the new active one
[   82.439103][ T6609] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   82.449608][ T6607] macvlan2: entered promiscuous mode
[   82.453061][ T6607] macvlan2: entered allmulticast mode
[   82.457030][ T6607] bond2: entered promiscuous mode
[   82.459824][ T6607] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.465122][ T6607] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   82.482105][ T6607] bond2: left promiscuous mode
[   82.679694][ T6615] pim6reg1: entered promiscuous mode
[   82.681577][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.690031][ T6615] pim6reg1: entered allmulticast mode
[   83.752956][ T6664] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.756880][ T6664] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.760482][ T6664] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.764376][ T6664] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.837173][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.073966][ T6688] netlink: 'syz.1.208': attribute type 3 has an invalid length.
[   84.085789][ T6688] syz_tun: entered allmulticast mode
[   84.100176][ T6688] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   84.158983][ T6688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.170130][ T6685] syz_tun: left allmulticast mode
[   84.314930][ T6703] netlink: 'syz.0.212': attribute type 21 has an invalid length.
[   84.330118][ T6703] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   84.459355][ T6710] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   84.489544][ T6710] bond1: entered promiscuous mode
[   84.491990][ T6710] bond1: entered allmulticast mode
[   84.556045][ T6716] x_tables: duplicate underflow at hook 2
[   84.561269][ T6716] sctp: [Deprecated]: syz.0.215 (pid 6716) Use of int in maxseg socket option.
[   84.561269][ T6716] Use struct sctp_assoc_value instead
[   84.781134][ T6735] netlink: 'syz.2.220': attribute type 1 has an invalid length.
[   84.993376][ T6743] netlink: 'syz.0.219': attribute type 16 has an invalid length.
[   84.996337][ T6743] netlink: 'syz.0.219': attribute type 17 has an invalid length.
[   85.035087][ T6743] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.038564][ T6743] 8021q: adding VLAN 0 to HW filter on device team0
[   85.046311][ T6743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.565110][ T6769] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   85.569316][ T6769] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   85.704810][ T6771] netlink: 'syz.0.222': attribute type 26 has an invalid length.
[   85.820900][ T6776] syzkaller0: entered promiscuous mode
[   85.824017][ T6776] syzkaller0: entered allmulticast mode
[   86.576023][   T24] cfg80211: failed to load regulatory.db
[   87.433393][ T6798] __nla_validate_parse: 20 callbacks suppressed
[   87.433414][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.229'.
[   87.439101][ T6798] tc_dump_action: action bad kind
[   87.468951][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   87.585204][ T6812] netlink: 'syz.0.231': attribute type 4 has an invalid length.
[   87.691199][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[   87.834730][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   88.006816][ T6830] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[   88.013549][ T6830] netlink: 208 bytes leftover after parsing attributes in process `syz.2.237'.
[   88.473734][ T6850] veth0: entered promiscuous mode
[   88.481732][ T6850] vlan2: entered promiscuous mode
[   88.526686][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'.
[   88.726309][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.730137][ T6856] bridge0: port 1(1x9) entered disabled state
[   88.769581][ T6856] batman_adv: batadv0: Interface deactivated: dummy0
[   88.886430][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.899583][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.012847][ T6856] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.017770][ T6856] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.021353][ T6856] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.024788][ T6856] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.156513][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.247'.
[   89.167156][ T6866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.171594][ T6866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.174959][ T6866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.177774][ T6866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.356733][ T6872] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.382898][ T6872] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.386919][ T6872] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.393696][ T6872] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.500201][ T6882] netlink: 'syz.1.251': attribute type 10 has an invalid length.
[   89.513610][ T6882] batman_adv: batadv0: Adding interface: netdevsim0
[   89.516712][ T6882] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.529326][ T6882] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   89.552592][ T6886] netlink: zone id is out of range
[   89.554853][ T6886] netlink: zone id is out of range
[   89.557055][ T6886] netlink: zone id is out of range
[   89.559287][ T6886] netlink: zone id is out of range
[   89.565777][ T6886] netlink: zone id is out of range
[   89.568199][ T6886] netlink: zone id is out of range
[   89.588984][ T6886] netlink: zone id is out of range
[   89.591324][ T6886] netlink: zone id is out of range
[   89.593404][ T6886] netlink: zone id is out of range
[   89.595416][ T6886] netlink: zone id is out of range
[   89.610280][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'.
[   89.649924][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[   90.053195][ T6916] netlink: 'syz.2.262': attribute type 10 has an invalid length.
[   90.075880][ T6918] netlink: 404 bytes leftover after parsing attributes in process `syz.0.263'.
[   90.088523][ T6916] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.142541][ T6916] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   90.174877][ T6923] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.366283][ T6941] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   90.426926][ T6942] tap0: tun_chr_ioctl cmd 1074025677
[   90.429248][ T6942] tap0: linktype set to 270
[   90.821991][ T6964] netlink: 'syz.1.276': attribute type 1 has an invalid length.
[   91.110616][ T6978] hsr_slave_1 (unregistering): left promiscuous mode
[   91.126405][ T6980] netlink: 'syz.1.281': attribute type 1 has an invalid length.
[   91.272001][ T6988] macsec0: entered promiscuous mode
[   91.274785][ T6988] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   91.278485][ T6988] macsec0: entered allmulticast mode
[   91.284707][ T6988] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   91.295003][ T6988] batman_adv: batadv0: Adding interface: macsec0
[   91.297887][ T6988] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.309737][ T6988] batman_adv: batadv0: Interface activated: macsec0
[   91.408155][ T6995] netlink: 'syz.0.286': attribute type 10 has an invalid length.
[   91.424509][ T6995] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   91.429694][ T6995] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   91.451723][ T6992] netlink: 'syz.1.285': attribute type 10 has an invalid length.
[   91.457628][ T6992] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   91.679621][ T7012] bond0: Unable to set down delay as MII monitoring is disabled
[   92.179804][ T7046] sctp: [Deprecated]: syz.1.297 (pid 7046) Use of int in max_burst socket option deprecated.
[   92.179804][ T7046] Use struct sctp_assoc_value instead
[   92.737247][ T7082] netlink: 'syz.0.307': attribute type 11 has an invalid length.
[   92.741974][ T7082] __nla_validate_parse: 18 callbacks suppressed
[   92.741986][ T7082] netlink: 244 bytes leftover after parsing attributes in process `syz.0.307'.
[   92.747015][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[   92.809211][ T7088] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.308'.
[   92.815900][ T7087] syzkaller1: entered promiscuous mode
[   92.817766][ T7087] syzkaller1: entered allmulticast mode
[   92.824470][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[   92.918970][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   93.078770][ T7107] smc: net device bond0 applied user defined pnetid SYZ2
[   93.136666][ T7120] netlink: 156 bytes leftover after parsing attributes in process `syz.1.316'.
[   93.613010][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'.
[   93.703452][ T7136] netlink: 316 bytes leftover after parsing attributes in process `syz.0.321'.
[   93.740609][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.322'.
[   93.748425][ T7138] bpq0: left promiscuous mode
[   93.750037][ T7138] bpq0: left allmulticast mode
[   93.856761][ T7142] netlink: 'syz.0.324': attribute type 4 has an invalid length.
[   94.010416][ T7147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.326'.
[   94.207343][ T7163] netlink: 'syz.1.332': attribute type 1 has an invalid length.
[   94.210221][ T7166] netlink: 'syz.1.332': attribute type 1 has an invalid length.
[   94.243603][ T7164] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.251399][ T7164] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   94.293238][ T7165] macvlan3: entered promiscuous mode
[   94.295243][ T7165] macvlan3: entered allmulticast mode
[   94.297157][ T7165] bond2: (slave macvlan3): Error -98 calling set_mac_address
[   94.310602][ T7175] macvlan3: entered promiscuous mode
[   94.312573][ T7175] macvlan3: entered allmulticast mode
[   94.314450][ T7175] bond2: (slave macvlan3): Error -98 calling set_mac_address
[   94.380130][ T7177] ip6t_srh: unknown srh invflags 4449
[   94.391548][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.500159][ T7181] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[   94.506954][ T7181] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[   95.102533][ T7211] Illegal XDP return value 4294967282 on prog  (id 109) dev N/A, expect packet loss!
[   95.205281][ T7221] netlink: 'syz.0.346': attribute type 1 has an invalid length.
[   95.209218][ T7222] netlink: 'syz.0.346': attribute type 1 has an invalid length.
[   95.268513][ T7224] netlink: 'syz.1.347': attribute type 32 has an invalid length.
[   95.370492][ T7231] xfrm0: entered promiscuous mode
[   95.375227][ T7231] xfrm0: entered allmulticast mode
[   95.814904][ T7269] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[   95.840555][ T7269] bond3: entered promiscuous mode
[   95.844564][ T7269] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.862662][ T7269] batadv1: entered promiscuous mode
[   95.864996][ T7269] batadv1: entered allmulticast mode
[   95.869625][ T7269] 8021q: adding VLAN 0 to HW filter on device batadv1
[   95.875438][ T7269] bond3: (slave batadv1): making interface the new active one
[   95.879966][ T7269] bond3: (slave batadv1): Enslaving as an active interface with an up link
[   96.062199][ T7275] netlink: 'syz.0.360': attribute type 10 has an invalid length.
[   96.070533][ T7275] team0: Device ipvlan1 failed to register rx_handler
[   96.179460][ T7279] bridge0: port 1(vlan3) entered blocking state
[   96.185273][ T7279] bridge0: port 1(vlan3) entered disabled state
[   96.187436][ T7279] vlan3: entered allmulticast mode
[   96.189032][ T7279] bridge0: entered allmulticast mode
[   96.194547][ T7279] vlan3: left allmulticast mode
[   96.196242][ T7279] bridge0: left allmulticast mode
[   96.327360][ T7283] syzkaller1: entered promiscuous mode
[   96.329648][ T7283] syzkaller1: entered allmulticast mode
[   96.335398][ T7283] netlink: 'syz.0.364': attribute type 2 has an invalid length.
[   96.338835][ T7283] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   96.364470][ T7283] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.669893][ T7292] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   96.693749][ T7292] bridge_slave_0: left allmulticast mode
[   96.695750][ T7292] bridge_slave_0: left promiscuous mode
[   96.698068][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.714736][ T7292] bridge_slave_1: left allmulticast mode
[   96.717101][ T7292] bridge_slave_1: left promiscuous mode
[   96.719615][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.729973][ T7292] bond0: (slave bond_slave_0): Releasing backup interface
[   96.736815][ T7292] bond0: (slave bond_slave_1): Releasing backup interface
[   96.757155][ T7292] team0: Port device team_slave_0 removed
[   96.767989][ T7292] team0: Port device team_slave_1 removed
[   96.773814][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.777071][ T7292] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.785636][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.788861][ T7292] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.803628][ T7292] bond0: (slave wlan1): Releasing backup interface
[   96.814059][ T7292] batman_adv: batadv0: Removing interface: bridge1
[   96.854163][   T10] syz1: Port: 1 Link DOWN
[   97.278806][ T7339] delete_channel: no stack
[   97.392798][ T7345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   97.396311][ T7345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   97.399251][ T7345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   97.402359][ T7345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   97.441466][ T7347] tun0: tun_chr_ioctl cmd 2147767520
[   98.214506][ T7362] __nla_validate_parse: 31 callbacks suppressed
[   98.214532][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   98.221935][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.386'.
[   98.225987][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   98.229942][ T7362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.386'.
[   98.516054][ T7369] net_ratelimit: 197 callbacks suppressed
[   98.516079][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.865076][ T7384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.393'.
[   98.913280][ T7389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.075235][ T7403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.078980][ T7403] syzkaller0: entered promiscuous mode
[   99.081852][ T7403] syzkaller0: entered allmulticast mode
[   99.094944][ T7403] validate_nla: 2 callbacks suppressed
[   99.094986][ T7403] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   99.105642][ T7402] tipc: Resetting bearer <eth:syzkaller0>
[   99.119010][ T7402] tipc: Disabling bearer <eth:syzkaller0>
[   99.426467][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.399'.
[   99.446567][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[   99.481898][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'.
[   99.567086][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[   99.595425][ T7446] netlink: 'syz.0.405': attribute type 2 has an invalid length.
[   99.598007][ T7446] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   99.600452][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[   99.624812][ T7455] netlink: 'syz.0.405': attribute type 39 has an invalid length.
[   99.923001][ T7476] ipt_ECN: cannot use operation on non-tcp rule
[   99.926501][ T7475] ipt_ECN: cannot use operation on non-tcp rule
[  100.085759][ T7492] netlink: 'syz.2.413': attribute type 13 has an invalid length.
[  100.107015][ T7492] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  100.485190][ T7517] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  100.589443][ T7526] netlink: 'syz.0.420': attribute type 11 has an invalid length.
[  100.607462][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.787517][ T7540] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[  100.799432][ T7540] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  100.806643][   T24] syz1: Port: 1 Link ACTIVE
[  100.812869][ T7540] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.067114][ T7546] netlink: 'syz.2.425': attribute type 1 has an invalid length.
[  101.261492][ T7556] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  101.610433][ T7579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.665160][ T7579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.747346][ T7579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.823045][ T7579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.954231][ T7579] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.973967][ T7579] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.991655][ T7579] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.003099][ T7579] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.165111][ T7602] trusted_key: syz.1.439 sent an empty control message without MSG_MORE.
[  102.218680][ T7601] dvmrp8: entered allmulticast mode
[  102.276394][ T7594] dvmrp8: left allmulticast mode
[  102.285841][ T7609] netlink: 'syz.0.442': attribute type 11 has an invalid length.
[  102.698498][ T7628] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  103.010848][ T7646] netlink: 'syz.0.449': attribute type 8 has an invalid length.
[  103.039511][ T7646] IPVS: ip_vs_add_dest(): server weight less than zero
[  103.176136][ T7658] netlink: 'syz.1.452': attribute type 1 has an invalid length.
[  103.225764][ T7660] sctp: [Deprecated]: syz.0.453 (pid 7660) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.225764][ T7660] Use struct sctp_sack_info instead
[  103.342545][ T7658] xt_CT: No such helper "snmp"
[  103.348609][ T7667] __nla_validate_parse: 18 callbacks suppressed
[  103.348622][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[  103.358788][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'.
[  103.367291][ T7667] netlink: 224 bytes leftover after parsing attributes in process `syz.0.455'.
[  103.373231][ T7667] netlink: 224 bytes leftover after parsing attributes in process `syz.0.455'.
[  103.476922][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[  103.590072][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[  103.622383][ T7669] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.456'.
[  103.938469][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'.
[  104.190330][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'.
[  105.246101][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'.
[  106.188366][ T7781] validate_nla: 3 callbacks suppressed
[  106.188378][ T7781] netlink: 'syz.0.478': attribute type 20 has an invalid length.
[  106.192111][ T7782] netlink: 'syz.0.478': attribute type 20 has an invalid length.
[  106.199620][ T7781] netlink: 'syz.0.478': attribute type 20 has an invalid length.
[  106.204573][ T7782] netlink: 'syz.0.478': attribute type 20 has an invalid length.
[  106.559767][ T7806] pim6reg: entered allmulticast mode
[  106.897521][ T7837] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  107.013105][ T7854] netlink: 'syz.0.494': attribute type 1 has an invalid length.
[  108.196035][ T7905] netlink: zone id is out of range
[  108.379668][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.382680][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.403469][ T7924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.419933][ T7927] team0: entered promiscuous mode
[  108.426759][ T7926] team0: left promiscuous mode
[  108.564065][ T7933] __nla_validate_parse: 60 callbacks suppressed
[  108.564079][ T7933] netlink: 248 bytes leftover after parsing attributes in process `syz.0.517'.
[  108.816052][ T7951] netlink: 'syz.2.520': attribute type 83 has an invalid length.
[  109.143888][ T7974] netlink: 'syz.1.524': attribute type 12 has an invalid length.
[  109.219539][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'.
[  109.223262][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'.
[  109.226091][ T7976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'.
[  109.275279][ T7981] netlink: 52 bytes leftover after parsing attributes in process `syz.0.525'.
[  109.543376][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'.
[  109.669480][ T8024] netlink: 'syz.2.535': attribute type 6 has an invalid length.
[  109.676843][ T8024] netlink: 'syz.2.535': attribute type 6 has an invalid length.
[  109.706955][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[  109.769161][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'.
[  109.967653][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  110.012037][ T8044] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  110.092549][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'.
[  110.170991][ T8050] syzkaller1: entered promiscuous mode
[  110.173437][ T8050] syzkaller1: entered allmulticast mode
[  110.625936][ T8078] syzkaller1: entered promiscuous mode
[  110.628260][ T8078] syzkaller1: entered allmulticast mode
[  110.796777][ T8091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.800504][ T8091] syzkaller0: entered promiscuous mode
[  110.805700][ T8091] syzkaller0: entered allmulticast mode
[  110.828162][ T8091] tipc: Resetting bearer <eth:syzkaller0>
[  110.836629][ T8090] tipc: Resetting bearer <eth:syzkaller0>
[  110.851564][ T8090] tipc: Disabling bearer <eth:syzkaller0>
[  110.931446][ T8098] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  110.977061][ T8098] bond2: entered promiscuous mode
[  110.979896][ T8098] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.993999][ T8102] batadv1: entered promiscuous mode
[  110.996071][ T8102] batadv1: entered allmulticast mode
[  110.999682][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv1
[  111.006655][ T8102] bond2: (slave batadv1): making interface the new active one
[  111.010843][ T8102] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  111.234441][ T8117] batadv_slave_1: entered promiscuous mode
[  111.236650][ T8114] can: request_module (can-proto-5) failed.
[  111.296889][ T8121] validate_nla: 1 callbacks suppressed
[  111.296903][ T8121] netlink: 'syz.0.565': attribute type 13 has an invalid length.
[  111.395691][ T8130] openvswitch: netlink: Actions may not be safe on all matching packets
[  111.558278][ T8147] netlink: 'syz.2.571': attribute type 6 has an invalid length.
[  111.913636][ T8141] netlink: 'syz.0.570': attribute type 6 has an invalid length.
[  112.042526][ T8176] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[  112.229483][ T8187] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  112.234029][ T5704] bond0: (slave bridge0): interface is now down
[  112.256481][ T5704] bond0: (slave bridge0): interface is now down
[  112.271528][ T5872] bond0: (slave bridge0): interface is now down
[  112.291524][ T6605] bond0: (slave bridge0): interface is now down
[  112.349349][ T5704] bond0: (slave bridge0): interface is now down
[  112.372299][ T5872] bond0: (slave bridge0): interface is now down
[  112.391191][ T5872] bond0: (slave bridge0): interface is now down
[  112.415786][ T6601] bond0: (slave bridge0): interface is now down
[  112.435018][ T6601] bond0: (slave bridge0): interface is now down
[  112.440359][ T6601] bond0: now running without any active interface!
[  112.504498][ T8193] netlink: 'syz.0.585': attribute type 6 has an invalid length.
[  112.508610][ T8193] netlink: 'syz.0.585': attribute type 6 has an invalid length.
[  112.590260][ T8199] ipt_ECN: cannot use operation on non-tcp rule
[  112.633716][ T8201] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  112.730344][ T8206] tipc: Disabling bearer <eth:syzkaller0>
[  112.761219][ T5220] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  112.989363][ T8217] openvswitch: netlink: Flow actions attr not present in new flow.
[  113.044779][ T8220] x_tables: duplicate underflow at hook 1
[  113.168414][ T8224] D: renamed from syzkaller0
[  113.355233][ T8239] openvswitch: netlink: Flow actions attr not present in new flow.
[  113.366589][ T8239] macvtap1: entered promiscuous mode
[  113.368532][ T8239] batadv0: entered promiscuous mode
[  113.373777][ T8239] macvtap1: entered allmulticast mode
[  113.376685][ T8239] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  113.394397][ T8239] netlink: 'syz.0.598': attribute type 5 has an invalid length.
[  113.509523][ T8251] x_tables: duplicate underflow at hook 1
[  113.512928][ T8249] netlink: 'syz.2.601': attribute type 3 has an invalid length.
[  113.843446][ T8275] netlink: 'syz.2.609': attribute type 6 has an invalid length.
[  113.847906][ T8275] netlink: 'syz.2.609': attribute type 6 has an invalid length.
[  114.046151][ T8279] __nla_validate_parse: 30 callbacks suppressed
[  114.046164][ T8279] netlink: 192 bytes leftover after parsing attributes in process `syz.2.611'.
[  114.366067][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'.
[  114.613113][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[  114.734632][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'.
[  114.752527][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.617'.
[  114.807795][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'.
[  114.909721][ T8332] batman_adv: batadv0: Interface deactivated: macsec0
[  114.915626][ T8332] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  114.928111][ T8332] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.935043][ T8332] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.938388][ T8332] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.942483][ T8332] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  114.946522][ T8336] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.622'.
[  115.037844][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'.
[  115.051686][ T8343] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  115.061909][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.090614][ T8349] netlink: 9 bytes leftover after parsing attributes in process `syz.2.626'.
[  115.096672][ T8349] gretap0: entered promiscuous mode
[  115.099593][ T8349] netlink: 5 bytes leftover after parsing attributes in process `syz.2.626'.
[  115.104032][ T8349] 0{X: renamed from gretap0
[  115.116938][ T8349] 0{X: left promiscuous mode
[  115.119423][ T8349] 0{X: entered allmulticast mode
[  115.124831][ T8349] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  116.135111][ T8419] bridge0: entered allmulticast mode
[  116.146525][ T8419] pim6reg: entered allmulticast mode
[  116.629709][ T8437] validate_nla: 8 callbacks suppressed
[  116.629723][ T8437] netlink: 'syz.0.646': attribute type 6 has an invalid length.
[  116.636987][ T8437] netlink: 'syz.0.646': attribute type 6 has an invalid length.
[  116.728815][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.753845][ T8443] bond0: (slave rose0): Enslaving as an active interface with an up link
[  116.886110][ T8448] tap0: tun_chr_ioctl cmd 1074025677
[  116.888751][ T8448] tap0: linktype set to 270
[  117.033010][ T8464] netlink: 'syz.2.653': attribute type 6 has an invalid length.
[  117.056035][ T8464] netlink: 'syz.2.653': attribute type 6 has an invalid length.
[  117.242517][ T8474] netlink: 'syz.2.656': attribute type 29 has an invalid length.
[  117.247158][ T8474] netlink: 'syz.2.656': attribute type 29 has an invalid length.
[  117.264418][ T8474] unsupported nla_type 58
[  117.518424][ T8491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.525886][ T8491] syzkaller0: entered promiscuous mode
[  117.530045][ T8491] syzkaller0: entered allmulticast mode
[  117.659189][ T8505] tipc: Resetting bearer <eth:syzkaller0>
[  117.678999][ T8490] tipc: Resetting bearer <eth:syzkaller0>
[  117.706730][ T8490] tipc: Disabling bearer <eth:syzkaller0>
[  118.073371][ T8526] netlink: 'syz.1.667': attribute type 12 has an invalid length.
[  118.153429][ T8529] netlink: 'syz.1.668': attribute type 10 has an invalid length.
[  118.163381][ T8529] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  118.300014][ T8534] ipvlan2: entered promiscuous mode
[  118.303234][ T8534] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  118.793263][ T8567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  118.930108][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.934577][ T8576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  118.988068][ T8586] wireguard0: entered promiscuous mode
[  118.989963][ T8586] wireguard0: entered allmulticast mode
[  119.255226][ T8599] __nla_validate_parse: 17 callbacks suppressed
[  119.255246][ T8599] netlink: 108 bytes leftover after parsing attributes in process `syz.2.688'.
[  119.260998][ T8600] netlink: 108 bytes leftover after parsing attributes in process `syz.2.688'.
[  119.307808][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  119.379434][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[  119.441052][ T8573] batman_adv: batadv0: Removing interface: netdevsim0
[  119.450053][ T8606] wg2: entered promiscuous mode
[  119.455130][ T8606] wg2: entered allmulticast mode
[  119.588565][ T8609] syzkaller0: entered promiscuous mode
[  119.591559][ T8609] syzkaller0: entered allmulticast mode
[  119.848774][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'.
[  120.011527][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  121.081148][ T8630] netlink: 'syz.1.697': attribute type 39 has an invalid length.
[  121.086355][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'.
[  121.119882][ T8632] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  121.246706][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.701'.
[  121.333490][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  121.383649][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[  121.695261][ T8687] netlink: 'syz.0.712': attribute type 30 has an invalid length.
[  121.899965][ T8692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  121.906037][ T8691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.033946][ T8715] smc: net device bond0 erased user defined pnetid SYZ2
[  122.365176][ T8725] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  122.756131][ T8759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  122.759418][ T8759] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  122.807312][ T8756] netlink: 'syz.2.726': attribute type 64 has an invalid length.
[  123.290932][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f583c00: rx timeout, send abort
[  123.576594][ T8767] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[  123.606884][ T8767] 8021q: adding VLAN 0 to HW filter on device bond3
[  123.644131][ T8767] bond3: (slave veth3): Enslaving as an active interface with a down link
[  123.726653][ T8770] netlink: 'syz.0.730': attribute type 11 has an invalid length.
[  123.726654][ T8771] netlink: 'syz.0.730': attribute type 11 has an invalid length.
[  123.792969][ T8778] rdma_rxe: rxe_newlink: failed to add lo
[  123.796235][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f583c00: abort rx timeout. Force session deactivation
[  124.084317][ T8803] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  124.234464][ T8820] netlink: 'syz.1.744': attribute type 13 has an invalid length.
[  124.242485][ T8820] netlink: 'syz.1.744': attribute type 17 has an invalid length.
[  124.320197][ T8820] 8021q: adding VLAN 0 to HW filter on device team0
[  124.324141][ T8820] batman_adv: batadv0: Interface activated: dummy0
[  124.327365][ T8820] batadv0: mtu less than device minimum
[  124.330057][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.334043][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.338200][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.342404][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.346304][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.350343][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.354558][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.356585][ T8827] netlink: 'syz.0.745': attribute type 10 has an invalid length.
[  124.358459][ T8820] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  124.365513][ T8827] __nla_validate_parse: 18 callbacks suppressed
[  124.365531][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.745'.
[  124.384919][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'.
[  124.391002][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'.
[  124.400186][ T8827] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  124.428020][ T8829] netlink: 'syz.1.746': attribute type 1 has an invalid length.
[  124.435023][ T8829] netlink: 3 bytes leftover after parsing attributes in process `syz.1.746'.
[  124.443430][ T8829] batadv2: entered promiscuous mode
[  124.445705][ T8829] batadv2: entered allmulticast mode
[  124.493624][ T8834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.748'.
[  124.601938][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.750'.
[  124.603153][ T8832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.746'.
[  124.605627][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.750'.
[  124.688258][ T8845] netlink: 180 bytes leftover after parsing attributes in process `syz.1.751'.
[  124.727543][ T8848] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  124.731754][ T8848] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  124.788450][ T8850] bond0: (slave bridge0): Releasing backup interface
[  124.819490][ T8850] batman_adv: batadv0: Interface deactivated: dummy0
[  124.822713][ T8850] batman_adv: batadv0: Removing interface: dummy0
[  124.826924][ T8850] x9: left allmulticast mode
[  124.828973][ T8850] x9: left promiscuous mode
[  124.832684][ T8850] bridge0: port 1(1x9) entered disabled state
[  124.838312][ T8850] bridge_slave_1: left allmulticast mode
[  124.840460][ T8850] bridge_slave_1: left promiscuous mode
[  124.844231][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.852692][ T8850] bond0: (slave bond_slave_0): Releasing backup interface
[  124.857088][ T8850] bond0: (slave bond_slave_1): Releasing backup interface
[  124.864870][ T8850] team0: Port device team_slave_0 removed
[  124.868034][ T8850] team0: Port device team_slave_1 removed
[  124.876611][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.881911][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.885388][ T8850] batman_adv: batadv0: Removing interface: macsec0
[  124.889876][ T8850] bond2: (slave batadv1): Releasing active interface
[  125.004067][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  125.115888][ T8869] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  125.669581][ T8919] atomic_op ffff88810f14b198 conn xmit_atomic 0000000000000000
[  125.724478][ T8923] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[  125.726626][ T8923] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[  125.983482][ T8931] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.987511][ T8931] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.991993][ T8931] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.995867][ T8931] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.019169][ T8931] batadv0: left promiscuous mode
[  126.050255][ T8937] IPVS: Error connecting to the multicast addr
[  126.535386][ T8952] dummy0: entered promiscuous mode
[  126.539072][ T8952] vlan0: entered promiscuous mode
[  126.756436][ T8959] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.769417][ T8959] bridge0: entered promiscuous mode
[  126.772688][ T8959] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  126.777936][ T8959] bond4: (slave macvlan3): Enslaving as a backup interface with a down link
[  126.803502][ T8959] bond0: (slave bridge0): Releasing backup interface
[  126.823041][ T8959] bridge0: left promiscuous mode
[  126.864756][ T8959] bond3: (slave veth3): Releasing active interface
[  126.877390][ T8959] bond4: (slave macvlan3): Releasing backup interface
[  126.886117][ T5873] syz1: Port: 1 Link DOWN
[  127.126365][ T8975] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  127.129590][ T8973] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  128.162796][ T9007] validate_nla: 53 callbacks suppressed
[  128.162818][ T9007] netlink: 'syz.2.796': attribute type 32 has an invalid length.
[  128.780615][ T9017] netlink: 'syz.0.798': attribute type 83 has an invalid length.
[  129.777352][ T9044] __nla_validate_parse: 20 callbacks suppressed
[  129.777372][ T9044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'.
[  129.855792][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'.
[  130.264028][ T9061] 8021q: VLANs not supported on gre0
[  130.407523][ T9074] netlink: 228 bytes leftover after parsing attributes in process `syz.2.816'.
[  130.421083][ T9074] netlink: 252 bytes leftover after parsing attributes in process `syz.2.816'.
[  130.424648][ T9074] netlink: 764 bytes leftover after parsing attributes in process `syz.2.816'.
[  130.427680][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'.
[  130.455972][ T9076] netlink: 'syz.1.817': attribute type 10 has an invalid length.
[  130.459053][ T9076] netlink: 'syz.1.817': attribute type 49 has an invalid length.
[  130.477203][ T9077] dvmrp0: entered allmulticast mode
[  130.484160][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  130.525155][ T9082] netlink: 'syz.1.819': attribute type 2 has an invalid length.
[  130.530227][ T9082] netlink: 51 bytes leftover after parsing attributes in process `syz.1.819'.
[  130.564812][ T9084] netlink: 'syz.2.820': attribute type 10 has an invalid length.
[  130.567624][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.820'.
[  130.590126][ T9084] team0: Port device geneve0 added
[  130.612306][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'.
[  131.604576][ T9107] netlink: 'syz.1.827': attribute type 83 has an invalid length.
[  131.712249][ T9103] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  131.731132][ T9113] net_ratelimit: 14 callbacks suppressed
[  131.731154][ T9113] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  131.780335][ T9120] netlink: 'syz.0.832': attribute type 2 has an invalid length.
[  132.151849][ T9137] nbd: couldn't find a device at index 65546
[  132.242578][ T9143] netlink: 'syz.2.841': attribute type 21 has an invalid length.
[  132.249263][ T9143] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  132.506530][ T9168] syzkaller0: entered promiscuous mode
[  132.511949][ T9168] syzkaller0: entered allmulticast mode
[  132.657327][ T9173] netlink: 'syz.1.847': attribute type 3 has an invalid length.
[  132.769996][ T9187] 0{X: left allmulticast mode
[  132.775931][ T9187] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  132.825266][ T9183] 8021q: adding VLAN 0 to HW filter on device bond7
[  132.830014][ T9183] bond7: entered allmulticast mode
[  132.833540][ T9183] bond0: (slave bond7): Enslaving as an active interface with an up link
[  133.169747][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.173889][ T9199] 8021q: adding VLAN 0 to HW filter on device team0
[  133.183034][ T9199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.537796][ T9216] validate_nla: 2 callbacks suppressed
[  133.537820][ T9216] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  133.667624][ T9229] netlink: 'syz.2.862': attribute type 21 has an invalid length.
[  133.681373][ T9229] netlink: 'syz.2.862': attribute type 21 has an invalid length.
[  134.067801][ T9262] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  134.074636][ T9262] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  134.152917][ T9266] netlink: 'syz.0.869': attribute type 3 has an invalid length.
[  134.428643][ T9281] netlink: 'syz.1.873': attribute type 5 has an invalid length.
[  134.506484][ T9285] netlink: 'syz.2.875': attribute type 1 has an invalid length.
[  134.509605][ T9285] netlink: 'syz.2.875': attribute type 4 has an invalid length.
[  134.518560][ T9285] tipc: Enabling <ib:lo> not permitted
[  134.522537][ T9285] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  135.195962][ T9298] __nla_validate_parse: 24 callbacks suppressed
[  135.195982][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'.
[  135.203026][ T9298] netlink: 'syz.0.879': attribute type 1 has an invalid length.
[  135.206290][ T9298] netlink: 92 bytes leftover after parsing attributes in process `syz.0.879'.
[  135.263597][ T9301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.299066][ T9301] tipc: Resetting bearer <eth:syzkaller0>
[  135.406914][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'.
[  135.458677][ T9322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.475153][ T9322] netlink: 232 bytes leftover after parsing attributes in process `syz.0.885'.
[  135.478014][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'.
[  135.693235][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'.
[  135.743037][ T9338] netlink: 136 bytes leftover after parsing attributes in process `syz.0.889'.
[  135.808180][ T9347] netlink: 47 bytes leftover after parsing attributes in process `syz.2.894'.
[  135.812037][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[  135.815429][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'.
[  136.109995][ T9359] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  136.433046][ T9372] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.445612][ T9372] bond3: entered promiscuous mode
[  136.733364][ T9401] 0{X: entered promiscuous mode
[  136.739161][ T9402] 1{X: renamed from 30{X
[  136.746810][ T9402] 1{X: left promiscuous mode
[  136.748801][ T9402] 1{X: entered allmulticast mode
[  136.755229][ T9402] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  137.011880][ T9427] veth7: entered promiscuous mode
[  137.598964][ T9459] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  137.603799][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.296181][ T9483] 1{X: left allmulticast mode
[  138.374291][ T9483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.674008][ T9503] macsec2: entered allmulticast mode
[  138.676126][ T9503] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  138.685058][ T9503] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  139.732738][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  139.966599][ T9562] 8021q: VLANs not supported on wg0
[  140.007989][ T9569] validate_nla: 13 callbacks suppressed
[  140.008003][ T9569] netlink: 'syz.0.958': attribute type 6 has an invalid length.
[  140.016451][ T9569] netlink: 'syz.0.958': attribute type 6 has an invalid length.
[  140.240083][ T9589] __nla_validate_parse: 17 callbacks suppressed
[  140.240104][ T9589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.964'.
[  140.299325][ T9591] gre13: entered allmulticast mode
[  140.334222][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'.
[  140.337768][ T9593] netlink: 'syz.1.966': attribute type 7 has an invalid length.
[  140.341416][ T9593] netlink: 'syz.1.966': attribute type 8 has an invalid length.
[  140.344239][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'.
[  140.351278][ T9593] gretap0: entered promiscuous mode
[  140.354444][ T9593] batadv_slave_1: entered promiscuous mode
[  140.357396][ T9593] batadv_slave_1: left promiscuous mode
[  140.360065][ T9593] gretap0: left promiscuous mode
[  140.463387][ T9596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.466698][ T9596] syzkaller0: entered promiscuous mode
[  140.468840][ T9596] syzkaller0: entered allmulticast mode
[  140.470205][ T9598] netlink: 'syz.1.967': attribute type 2 has an invalid length.
[  140.479774][ T9596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.498824][ T9596] tipc: Resetting bearer <eth:syzkaller0>
[  140.520346][ T9595] tipc: Resetting bearer <eth:syzkaller0>
[  140.533453][ T9595] tipc: Disabling bearer <eth:syzkaller0>
[  140.556196][ T9601] netlink: 'syz.1.969': attribute type 2 has an invalid length.
[  140.559551][ T9601] netlink: 'syz.1.969': attribute type 8 has an invalid length.
[  140.564178][ T9601] netlink: 132 bytes leftover after parsing attributes in process `syz.1.969'.
[  140.654610][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  140.658358][ T9605] veth0_to_bond: entered allmulticast mode
[  140.700860][ T9603] syzkaller0: entered promiscuous mode
[  140.703020][ T9603] syzkaller0: entered allmulticast mode
[  140.756102][ T9605] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.971'.
[  140.759536][ T9605] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  140.765349][ T9605] openvswitch: netlink: Message has 1 unknown bytes.
[  140.810388][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'.
[  140.814971][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'.
[  140.818991][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'.
[  140.823852][ T9612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'.
[  140.882043][ T9619] syzkaller0: entered promiscuous mode
[  140.884306][ T9619] syzkaller0: entered allmulticast mode
[  140.926365][ T9623] netlink: 'syz.1.977': attribute type 2 has an invalid length.
[  140.928946][ T9623] netlink: 'syz.1.977': attribute type 8 has an invalid length.
[  140.939145][ T9623] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  140.943332][ T9623] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  140.947277][ T9623] openvswitch: netlink: Missing valid actions attribute.
[  140.949636][ T9623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.146969][ T9640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.287223][ T9651] veth9: entered promiscuous mode
[  141.332378][ T9653] erspan0: entered allmulticast mode
[  141.644856][ T9674] lo: entered allmulticast mode
[  141.660566][ T9674] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  141.707381][ T9674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.719736][ T9673] lo: left allmulticast mode
[  141.749021][ T9678] tipc: Trying to set illegal importance in message
[  142.082496][ T9697] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  142.656353][ T9728] team0: Port device geneve0 removed
[  143.441378][ T9777] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  143.444524][ T9777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.824467][ T9795] vlan3: entered promiscuous mode
[  143.827028][ T9795] bond0: entered promiscuous mode
[  143.829448][ T9795] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  143.832981][ T9795] bond7: entered promiscuous mode
[  144.719397][ T9839] ipt_ECN: cannot use operation on non-tcp rule
[  145.204437][ T9861] validate_nla: 22 callbacks suppressed
[  145.204451][ T9861] netlink: 'syz.0.1042': attribute type 6 has an invalid length.
[  145.210308][ T9861] netlink: 'syz.0.1042': attribute type 6 has an invalid length.
[  145.260155][ T9867] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  145.334018][ T9873] No such timeout policy "syz1"
[  145.354482][ T9874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.372176][ T9874] syzkaller0: entered promiscuous mode
[  145.382679][ T9874] syzkaller0: entered allmulticast mode
[  145.408709][ T9874] tipc: Resetting bearer <eth:syzkaller0>
[  145.421333][ T9871] tipc: Resetting bearer <eth:syzkaller0>
[  145.445069][ T9871] tipc: Disabling bearer <eth:syzkaller0>
[  145.528840][ T9883] netlink: 'syz.2.1047': attribute type 4 has an invalid length.
[  145.535839][ T9883] netlink: 'syz.2.1047': attribute type 62 has an invalid length.
[  145.547621][ T9885] __nla_validate_parse: 21 callbacks suppressed
[  145.547645][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'.
[  145.728678][ T9894] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1052'.
[  145.733246][ T9894] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  145.758377][ T9896] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  145.764602][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'.
[  145.768772][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'.
[  145.779797][ T9896] bond0: entered promiscuous mode
[  145.793043][ T9896] bond0: left promiscuous mode
[  145.809226][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'.
[  145.965651][ T9903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  145.973234][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1054'.
[  146.053124][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  146.056598][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'.
[  146.061612][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'.
[  146.065053][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'.
[  146.167609][ T9915] netlink: 'syz.1.1059': attribute type 4 has an invalid length.
[  146.170246][ T9915] netlink: 'syz.1.1059': attribute type 17 has an invalid length.
[  146.650170][ T9960] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  146.652896][ T9960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.835283][ T9972] tipc: Cannot configure node identity twice
[  146.895972][ T9974] netlink: 'syz.1.1076': attribute type 4 has an invalid length.
[  146.919779][ T9974] netlink: 'syz.1.1076': attribute type 4 has an invalid length.
[  147.103245][ T9980] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  147.108263][ T9980] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  147.114849][ T9980] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  147.204816][ T9989] syzkaller1: entered promiscuous mode
[  147.207180][ T9989] syzkaller1: entered allmulticast mode
[  147.327136][ T9992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.468172][ T9999] netlink: 'syz.2.1083': attribute type 29 has an invalid length.
[  148.144881][T10015] erspan0: left allmulticast mode
[  148.198765][T10015] veth0_to_bond: left allmulticast mode
[  148.203219][T10015] xfrm0: left promiscuous mode
[  148.205474][T10015] xfrm0: left allmulticast mode
[  148.209776][T10015] bond1: left promiscuous mode
[  148.215787][T10015] bond1: left allmulticast mode
[  148.218425][T10015] macsec0: left promiscuous mode
[  148.220261][T10015] macsec0: left allmulticast mode
[  148.224221][T10015] bond2: left promiscuous mode
[  148.226318][T10015] batadv1: left promiscuous mode
[  148.228697][T10015] batadv1: left allmulticast mode
[  148.239725][T10015] ipvlan2: left promiscuous mode
[  148.255170][T10015] bond3: left promiscuous mode
[  148.257620][T10015] veth7: left promiscuous mode
[  148.259949][T10015] gre13: left allmulticast mode
[  148.457726][T10034] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.471918][T10034] 8021q: adding VLAN 0 to HW filter on device team0
[  148.491127][T10034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.660580][T10054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.963853][T10065] pimreg: entered allmulticast mode
[  149.444140][T10091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.447199][T10092] syzkaller0: entered promiscuous mode
[  149.449084][T10092] syzkaller0: entered allmulticast mode
[  149.471045][T10092] tipc: Resetting bearer <eth:syzkaller0>
[  149.477116][T10091] tipc: Cannot configure node identity twice
[  149.479387][T10092] tipc: Cannot configure node identity twice
[  149.488708][T10090] tipc: Resetting bearer <eth:syzkaller0>
[  149.507795][T10090] tipc: Disabling bearer <eth:syzkaller0>
[  149.598342][T10097] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  149.653002][T10101] smc: net device bond0 applied user defined pnetid SYZ
[  149.728550][T10105] 8021q: adding VLAN 0 to HW filter on device bond8
[  149.742737][T10105] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.749142][T10105] bond8: (slave macvlan2): Enslaving as a backup interface with an up link
[  149.767150][T10105] bond2: (slave gretap1): Releasing active interface
[  149.775588][T10105] bond3: (slave batadv1): Releasing active interface
[  149.782563][T10105] bond0: (slave bond7): Releasing backup interface
[  149.786056][T10105] bond7: left promiscuous mode
[  149.788824][T10105] bond7: left allmulticast mode
[  149.800889][T10105] bond8: (slave macvlan2): Releasing backup interface
[  149.851686][T10112] geneve2: entered promiscuous mode
[  150.317807][T10139] x_tables: duplicate underflow at hook 1
[  150.564897][T10147] __nla_validate_parse: 63 callbacks suppressed
[  150.564920][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1126'.
[  150.572633][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1126'.
[  150.764739][T10155] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1129'.
[  150.796609][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  150.857495][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  150.861822][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'.
[  150.877424][T10153] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.881193][T10153] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.884593][T10153] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.888102][T10153] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.145210][T10173] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  151.381282][T10181] block nbd0: server does not support multiple connections per device.
[  151.394941][T10181] block nbd0: shutting down sockets
[  151.439007][T10161] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.442716][T10161] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.445283][T10161] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.447942][T10161] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.530939][T10186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'.
[  152.040043][T10216] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004
[  152.216578][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'.
[  152.426804][T10240] validate_nla: 4 callbacks suppressed
[  152.426825][T10240] netlink: 'syz.2.1152': attribute type 2 has an invalid length.
[  152.445459][T10240] k*]: entered promiscuous mode
[  152.450274][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'.
[  152.508594][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'.
[  152.753107][T10269] netlink: 'syz.1.1162': attribute type 10 has an invalid length.
[  153.048150][T10289] vlan0: entered promiscuous mode
[  153.050530][T10289] batadv0: entered promiscuous mode
[  153.456550][T10305] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.776219][T10323] ipt_ECN: cannot use operation on non-tcp rule
[  153.918700][T10323] syzkaller0: entered allmulticast mode
[  153.937034][T10323] syzkaller0 (unregistering): left allmulticast mode
[  154.136893][T10342] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  188.638136][T10366] __nla_validate_parse: 10 callbacks suppressed
[  188.638157][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1190'.
[  188.691858][T10366] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1190'.
[  188.744361][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1193'.
[  188.824795][T10384] 8021q: adding VLAN 0 to HW filter on device bond5
[  188.831051][T10384] bond0: (slave bond5): Enslaving as an active interface with a down link
[  188.894880][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  188.907089][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  188.923299][T10390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.135840][T10408] vxcan2: entered promiscuous mode
[  189.165486][T10411] netlink: 'syz.2.1199': attribute type 21 has an invalid length.
[  189.179956][T10411] netlink: 'syz.2.1199': attribute type 6 has an invalid length.
[  189.190804][T10411] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1199'.
[  189.206111][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  189.211475][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  189.215918][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  189.392557][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'.
[  189.549857][T10433] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  189.556919][T10431] netlink: 'syz.1.1204': attribute type 32 has an invalid length.
[  189.630442][T10439] netlink: 'syz.1.1207': attribute type 30 has an invalid length.
[  189.633243][T10439] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  189.675678][T10439] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.692800][T10443] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  189.733021][T10439] bond5: (slave bridge13): making interface the new active one
[  189.737859][T10439] bond5: (slave bridge13): Enslaving as an active interface with an up link
[  189.767595][T10439] macsec1: entered allmulticast mode
[  189.769953][T10439] macsec0: entered allmulticast mode
[  189.787056][T10439] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  190.270540][T10482] hsr_slave_1 (unregistering): left promiscuous mode
[  190.448841][T10499] netlink: 'syz.0.1223': attribute type 39 has an invalid length.
[  190.697639][T10509] bond6: (slave bridge14): Enslaving as an active interface with an up link
[  190.710195][T10509] macvlan0: entered promiscuous mode
[  190.716408][T10509] macvlan0: entered allmulticast mode
[  190.725655][T10509] bond6: entered promiscuous mode
[  190.735642][T10509] bridge14: entered promiscuous mode
[  190.745578][T10509] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  190.756424][T10509] bond6: left promiscuous mode
[  190.758778][T10509] bridge14: left promiscuous mode
[  190.992269][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  191.466113][T10558] macsec2: entered promiscuous mode
[  191.468726][T10558] macsec2: entered allmulticast mode
[  191.696121][T10562] delete_channel: no stack
[  191.892617][T10578] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  192.042965][T10590] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  192.084866][T10590] 8021q: adding VLAN 0 to HW filter on device bond8
[  192.095688][T10590] bond8: entered promiscuous mode
[  192.149161][T10598] netlink: 'syz.0.1247': attribute type 2 has an invalid length.
[  192.438013][T10626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.442006][T10626] syzkaller0: entered promiscuous mode
[  192.443977][T10626] syzkaller0: entered allmulticast mode
[  192.471039][T10626] tipc: Resetting bearer <eth:syzkaller0>
[  192.475259][T10625] tipc: Resetting bearer <eth:syzkaller0>
[  192.498299][T10625] tipc: Disabling bearer <eth:syzkaller0>
[  192.539859][T10629] syzkaller1: entered promiscuous mode
[  192.541859][T10629] syzkaller1: entered allmulticast mode
[  192.605836][T10631] IPVS: length: 209 != 24
[  192.700989][T10635] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  192.705007][T10635] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  193.388784][T10668] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  193.919294][T10700] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  193.926848][T10700] __nla_validate_parse: 34 callbacks suppressed
[  193.926871][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  193.932312][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'.
[  194.068287][T10706] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1277'.
[  194.111790][T10708] sctp: [Deprecated]: syz.0.1279 (pid 10708) Use of struct sctp_assoc_value in delayed_ack socket option.
[  194.111790][T10708] Use struct sctp_sack_info instead
[  194.244584][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'.
[  194.301422][T10717] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1283'.
[  194.481627][T10733] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1288'.
[  194.516248][T10735] gretap0: entered promiscuous mode
[  194.523903][T10735] gretap0: entered allmulticast mode
[  194.725314][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'.
[  194.987785][T10765] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  194.990386][T10765] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.112858][T10775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1296'.
[  195.116243][T10775] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1296'.
[  195.119212][T10775] validate_nla: 3 callbacks suppressed
[  195.119222][T10775] netlink: 'syz.2.1296': attribute type 6 has an invalid length.
[  195.121623][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  195.129952][T10775] netlink: 'syz.2.1296': attribute type 5 has an invalid length.
[  195.140168][T10777] netlink: 'syz.1.1297': attribute type 10 has an invalid length.
[  195.148370][T10775] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1296'.
[  195.349369][T10796] 8021q: adding VLAN 0 to HW filter on device bond7
[  195.400753][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  195.930952][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  196.276605][T10880] netlink: 'syz.1.1321': attribute type 7 has an invalid length.
[  196.277237][T10881] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  196.280034][T10880] netlink: 'syz.1.1321': attribute type 8 has an invalid length.
[  196.819701][T10903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.057855][T10913] netlink: 'syz.0.1331': attribute type 21 has an invalid length.
[  197.501971][T10939] netlink: 'syz.1.1336': attribute type 13 has an invalid length.
[  197.510208][T10939] netlink: 'syz.1.1336': attribute type 17 has an invalid length.
[  197.580223][T10939] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.585736][T10939] 8021q: adding VLAN 0 to HW filter on device team0
[  197.595426][T10939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.959111][T10957] can: request_module (can-proto-0) failed.
[  198.259331][T10983] netlink: 'syz.1.1348': attribute type 9 has an invalid length.
[  198.551465][T11003] bond0 (unregistering): Released all slaves
[  198.702800][T11014] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  198.756176][T11016] netlink: 'syz.0.1353': attribute type 2 has an invalid length.
[  198.766862][T11016] delete_channel: no stack
[  198.990509][T11025] __nla_validate_parse: 22 callbacks suppressed
[  198.990533][T11025] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1357'.
[  199.173582][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'.
[  199.194630][ T5220] Bluetooth: hci2: link tx timeout
[  199.197629][ T5220] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  199.348504][T11038] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1362'.
[  199.357391][T11039] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1362'.
[  199.382337][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1363'.
[  199.665781][T11066] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001
[  199.676509][T11067] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  200.061551][T11079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1373'.
[  200.246784][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'.
[  200.653871][T11110] validate_nla: 1 callbacks suppressed
[  200.653895][T11110] netlink: 'syz.1.1381': attribute type 1 has an invalid length.
[  200.689386][T11110] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.721667][T11110] bond0: (slave veth11): Enslaving as an active interface with a down link
[  200.737380][T11110] 8021q: adding VLAN 0 to HW filter on device batadv2
[  200.741501][T11110] bond0: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  200.881718][T11113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'.
[  200.888631][T11113] openvswitch: netlink: Flow key attr not present in new flow.
[  200.907846][T11118] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1383'.
[  200.915692][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  200.919029][T11118] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  201.230871][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  201.811763][T11183] lo: entered promiscuous mode
[  202.187601][T11177] lo: left promiscuous mode
[  202.567115][T11215] netlink: 'syz.1.1408': attribute type 1 has an invalid length.
[  202.706642][T11213] netlink: 'syz.0.1407': attribute type 13 has an invalid length.
[  202.710410][T11213] netlink: 'syz.0.1407': attribute type 17 has an invalid length.
[  202.746771][T11213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.771240][T11226] dvmrp0: left allmulticast mode
[  202.838464][T11227] rdma_rxe: rxe_newlink: failed to add lo
[  202.970260][T11243] netlink: 'syz.0.1414': attribute type 10 has an invalid length.
[  203.024146][T11247] netlink: 'syz.1.1413': attribute type 13 has an invalid length.
[  203.045139][T11247] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  203.087686][T11246] vlan3: entered promiscuous mode
[  203.090026][T11246] bridge0: entered promiscuous mode
[  203.098156][T11246] vlan3: entered allmulticast mode
[  203.169217][T11251] IPv6: sit2: Disabled Multicast RS
[  203.251883][T11255] veth1_to_bond: entered allmulticast mode
[  203.313785][T11255] veth1_to_bond (unregistering): left allmulticast mode
[  204.058083][T11274] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  204.158900][T11279] __nla_validate_parse: 15 callbacks suppressed
[  204.158916][T11279] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1424'.
[  204.167258][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  204.214720][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  204.562631][T11307] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  204.565190][T11307] netlink: 'syz.2.1429': attribute type 49 has an invalid length.
[  204.645044][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1431'.
[  204.797248][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1431'.
[  204.810336][T11315] openvswitch: netlink: Flow key attr not present in new flow.
[  204.873049][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1432'.
[  205.045900][T11342] netlink: 'syz.2.1434': attribute type 1 has an invalid length.
[  205.049244][T11342] netlink: 'syz.2.1434': attribute type 2 has an invalid length.
[  205.053455][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'.
[  205.284863][T11358] IPVS: set_ctl: invalid protocol: 135 172.20.20.38:20003
[  205.306691][T11354] bond8: (slave bridge4): making interface the new active one
[  205.310415][T11354] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  205.315479][T11358] smc: net device bond0 erased user defined pnetid SYZ
[  205.405278][T11362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1439'.
[  205.424148][T11365] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1440'.
[  205.510591][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'.
[  206.349011][T11387] sch_tbf: burst 2 is lower than device bridge9 mtu (1514) !
[  206.383410][T11393] bond0: (slave bond5): Releasing backup interface
[  206.403830][T11393] bond8: (slave bridge4): Releasing active interface
[  206.419709][T11396] validate_nla: 2 callbacks suppressed
[  206.419731][T11396] netlink: 'syz.2.1446': attribute type 10 has an invalid length.
[  206.443243][T11396] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  206.447570][T11396] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  206.455833][T11396] netlink: 'syz.2.1446': attribute type 10 has an invalid length.
[  206.491480][T11403] siw: device registration error -23
[  207.214792][T11439] netlink: 'syz.2.1453': attribute type 64 has an invalid length.
[  207.686990][T11466] netlink: 'syz.0.1458': attribute type 29 has an invalid length.
[  207.753089][T11470] netlink: 'syz.0.1459': attribute type 11 has an invalid length.
[  207.905287][T11476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.331495][T11505] netem: change failed
[  208.410080][T11510] netlink: 'syz.0.1470': attribute type 10 has an invalid length.
[  208.768093][T11536] netlink: 'syz.2.1480': attribute type 7 has an invalid length.
[  208.795182][T11537] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  209.029839][T11548] 8021q: adding VLAN 0 to HW filter on device bond9
[  209.033826][T11548] bond9: entered promiscuous mode
[  209.035594][T11548] bond9: entered allmulticast mode
[  209.037641][T11548] bond0: (slave bond9): Enslaving as an active interface with an up link
[  209.048865][T11554] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  209.273268][T11582] __nla_validate_parse: 28 callbacks suppressed
[  209.273285][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'.
[  209.619967][T11618] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1499'.
[  209.633973][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'.
[  209.944865][T11645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.947842][T11645] syzkaller0: entered promiscuous mode
[  209.949596][T11645] syzkaller0: entered allmulticast mode
[  210.028378][T11659] tipc: Resetting bearer <eth:syzkaller0>
[  210.071356][T11665] IPv6: NLM_F_REPLACE set, but no existing node found!
[  210.079489][T11644] tipc: Resetting bearer <eth:syzkaller0>
[  210.103032][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'.
[  210.106886][T11644] tipc: Disabling bearer <eth:syzkaller0>
[  210.132258][T11667] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  210.139580][T11667] bond8: (slave macvlan3): Enslaving as a backup interface with an up link
[  210.172339][T11667] bond0: (slave bond9): Releasing backup interface
[  210.180080][T11667] bond9: left promiscuous mode
[  210.183959][T11667] bond9: left allmulticast mode
[  210.203583][T11667] bond8: (slave macvlan3): Releasing backup interface
[  210.209695][T11674] netlink: 'syz.1.1510': attribute type 1 has an invalid length.
[  210.250127][T11677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1512'.
[  210.253735][T11674] 8021q: adding VLAN 0 to HW filter on device bond9
[  210.283165][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  210.466404][T11696] netlink: 'syz.1.1515': attribute type 3 has an invalid length.
[  210.627191][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'.
[  210.631549][T11712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1518'.
[  210.641092][T11709] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  210.647194][T11707] unknown channel width for channel at 909000KHz?
[  210.649403][T11707] unknown channel width for channel at 909000KHz?
[  210.655483][T11709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.659167][T11707] unknown channel width for channel at 909000KHz?
[  210.675909][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1519'.
[  210.686048][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'.
[  210.783703][T11723] pim6reg1: entered allmulticast mode
[  210.991678][ T5220] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  212.152797][T11774] openvswitch: netlink: Message has 4 unknown bytes.
[  212.420919][T11786] bond0: Device is already in use.
[  212.538467][T11795] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  212.545661][T11795] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  212.602585][T11801] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  212.770003][T11812] netlink: 'syz.2.1544': attribute type 1 has an invalid length.
[  212.798251][T11812] 8021q: adding VLAN 0 to HW filter on device bond9
[  212.872444][T11812] 8021q: adding VLAN 0 to HW filter on device bond9
[  212.875852][T11812] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  212.905887][T11812] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  212.938720][T11824] erspan0: entered allmulticast mode
[  212.969962][T11824] bond9: (slave erspan0): making interface the new active one
[  212.984878][T11824] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  212.996617][T11831] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.182664][T11845] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  213.189042][T11845] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  213.199347][T11845] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  213.205814][T11845] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  213.313202][ T5847] Bluetooth: hci2: command 0x0406 tx timeout
[  213.373310][T11856] bond5: (slave bridge13): Releasing active interface
[  213.379400][T11856] bond6: (slave bridge14): Releasing backup interface
[  213.398629][T11856] bond0: (slave veth11): Releasing active interface
[  213.630799][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  213.635760][T11890] netlink: 'syz.2.1560': attribute type 64 has an invalid length.
[  213.686846][T11895] netlink: 'syz.1.1564': attribute type 1 has an invalid length.
[  213.689520][T11895] netlink: 'syz.1.1564': attribute type 4 has an invalid length.
[  213.714617][T11880] pimreg: left allmulticast mode
[  213.793948][T11902] netlink: 'syz.1.1564': attribute type 11 has an invalid length.
[  213.796481][T11902] netlink: 'syz.1.1564': attribute type 4 has an invalid length.
[  214.385896][T11935] 8021q: adding VLAN 0 to HW filter on device bond10
[  214.403226][T11942] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  214.410782][T11942] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  214.519460][T11951] __nla_validate_parse: 15 callbacks suppressed
[  214.519481][T11951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1573'.
[  214.534614][T11952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1573'.
[  214.592503][T11950] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  214.666309][T11960] bond10: entered promiscuous mode
[  214.668243][T11960] bond10: entered allmulticast mode
[  214.670509][T11960] 8021q: adding VLAN 0 to HW filter on device bond10
[  214.670872][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  214.729719][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1577'.
[  214.741939][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1577'.
[  214.809827][T11980] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1581'.
[  214.815779][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'.
[  214.856956][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  214.862185][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  214.950396][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1583'.
[  215.030180][T11991] netlink: 'syz.1.1585': attribute type 2 has an invalid length.
[  215.036888][T11991] netlink: 'syz.1.1585': attribute type 21 has an invalid length.
[  215.044487][T11991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1585'.
[  215.075635][T11993] netlink: 'syz.0.1586': attribute type 1 has an invalid length.
[  215.105401][T11995] SET target dimension over the limit!
[  215.265685][T12001] bond10: entered promiscuous mode
[  215.267895][T12001] bond10: entered allmulticast mode
[  215.270455][T12001] 8021q: adding VLAN 0 to HW filter on device bond10
[  215.464780][T12015] netlink: 'syz.0.1595': attribute type 2 has an invalid length.
[  215.710854][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  215.757876][T12049] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  215.800031][T12058] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  215.908890][T12070] tipc: Enabling of bearer <et:g> rejected, media not registered
[  215.938252][T12073] syzkaller1: entered promiscuous mode
[  215.944423][T12073] syzkaller1: entered allmulticast mode
[  216.019244][T12081] macvlan4: entered promiscuous mode
[  216.021601][T12081] macvlan4: entered allmulticast mode
[  216.026019][T12081] bond11: (slave macvlan4): Opening slave failed
[  216.073247][T12083] macvlan4: entered promiscuous mode
[  216.075137][T12083] macvlan4: entered allmulticast mode
[  216.078181][T12083] bond11: (slave macvlan4): Opening slave failed
[  216.244196][T12113] IPv6: Can't replace route, no match found
[  216.247673][T12116] netlink: 'syz.2.1615': attribute type 1 has an invalid length.
[  216.282486][T12116] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  216.285665][T12116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  216.289456][T12116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  216.295582][T12116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  216.304097][T12116] bond11: (slave geneve3): making interface the new active one
[  216.307690][T12116] bond11: (slave geneve3): Enslaving as an active interface with an up link
[  216.343125][T12116] bond11: (slave ip6gretap3): Enslaving as an active interface with an up link
[  216.353738][T12116] 8021q: adding VLAN 0 to HW filter on device bond11
[  216.644809][T12173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.750847][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  217.298167][T12202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.304885][T12202] syzkaller0: entered promiscuous mode
[  217.307328][T12202] syzkaller0: entered allmulticast mode
[  217.332013][T12202] tipc: Resetting bearer <eth:syzkaller0>
[  217.339468][T12201] tipc: Resetting bearer <eth:syzkaller0>
[  217.360784][T12201] tipc: Disabling bearer <eth:syzkaller0>
[  217.737856][T12234] nbd: illegal input index 65508
[  217.745634][T12234] nbd: illegal input index 65508
[  217.790757][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  217.839969][T12244] validate_nla: 1 callbacks suppressed
[  217.839985][T12244] netlink: 'syz.0.1647': attribute type 4 has an invalid length.
[  218.174589][T12276] netlink: 'syz.0.1654': attribute type 10 has an invalid length.
[  218.398680][T12297] netlink: 'syz.0.1655': attribute type 1 has an invalid length.
[  218.830806][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  219.530348][T12373] netlink: zone id is out of range
[  219.534913][T12373] netlink: zone id is out of range
[  219.536728][T12373] netlink: zone id is out of range
[  219.538553][T12373] netlink: zone id is out of range
[  219.545422][T12373] netlink: zone id is out of range
[  219.548179][T12373] netlink: zone id is out of range
[  219.552547][T12373] netlink: zone id is out of range
[  219.574723][T12373] netlink: zone id is out of range
[  219.577343][T12373] netlink: zone id is out of range
[  219.587461][T12381] __nla_validate_parse: 36 callbacks suppressed
[  219.587476][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'.
[  219.593716][T12381] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1683'.
[  219.596481][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'.
[  219.644067][T12385] netlink: 'syz.0.1684': attribute type 29 has an invalid length.
[  219.657023][T12385] netlink: 'syz.0.1684': attribute type 29 has an invalid length.
[  219.680530][T12385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1684'.
[  219.821036][T12396] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  219.824262][T12396] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  219.839024][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  219.949217][T12409] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.969967][T12409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1690'.
[  220.086719][T12423] can: request_module (can-proto-3) failed.
[  220.099090][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'.
[  220.121191][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1694'.
[  220.327343][T12449] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1699'.
[  220.331946][T12453] netlink: 'syz.0.1700': attribute type 21 has an invalid length.
[  220.334885][T12453] netlink: 'syz.0.1700': attribute type 22 has an invalid length.
[  220.338642][T12453] netlink: 'syz.0.1700': attribute type 23 has an invalid length.
[  220.345403][T12453] netlink: 'syz.0.1700': attribute type 25 has an invalid length.
[  220.349832][T12453] netlink: 'syz.0.1700': attribute type 26 has an invalid length.
[  220.354420][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'.
[  220.609886][T12480] smc: net device bond0 applied user defined pnetid SYZ
[  220.892859][T12492] bond12: (slave vcan0): The slave device specified does not support setting the MAC address
[  220.904608][T12492] bond12: (slave vcan0): Error -95 calling set_mac_address
[  221.075487][T12506] : entered promiscuous mode
[  221.248764][T12517] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  221.294351][T12517] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  221.367845][T12517] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  221.437630][T12517] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  221.526948][T12517] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  221.539739][T12517] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  221.553766][T12517] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  221.566287][T12517] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  222.318584][T12592] IPVS: set_ctl: invalid protocol: 59 172.30.0.1:20000
[  223.900890][T12686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.030784][    C1] net_ratelimit: 18 callbacks suppressed
[  224.030793][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  224.288653][T12711] validate_nla: 1 callbacks suppressed
[  224.288663][T12711] netlink: 'syz.0.1751': attribute type 39 has an invalid length.
[  224.432167][T12727] netlink: 'syz.2.1755': attribute type 1 has an invalid length.
[  224.503161][T12740] netlink: 'syz.0.1757': attribute type 1 has an invalid length.
[  224.624897][T12741] __nla_validate_parse: 22 callbacks suppressed
[  224.624913][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'.
[  224.699868][T12750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1759'.
[  224.994488][T12775] xt_bpf: check failed: parse error
[  225.070863][    C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  225.311372][T12793] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  225.504115][T12805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1769'.
[  225.700833][T12821] netlink: 'syz.2.1772': attribute type 83 has an invalid length.
[  225.720880][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1772'.
[  225.807393][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'.
[  225.922473][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'.
[  225.934765][T12840] netlink: 'syz.0.1775': attribute type 18 has an invalid length.
[  225.937594][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1775'.
[  225.940312][T12840] netlink: 'syz.0.1775': attribute type 18 has an invalid length.
[  226.015845][T12849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.152144][T12859] batadv1: entered promiscuous mode
[  226.177842][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'.
[  226.184576][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1783'.
[  226.202996][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1783'.
[  226.355081][T12875] x_tables: ip_tables: osf match: only valid for protocol 6
[  226.705465][T12905] tun0: tun_chr_ioctl cmd 2147767520
[  227.551102][ T5220] Bluetooth: hci2: command 0x0406 tx timeout
[  227.614573][T12938] gretap0: mtu less than device minimum
[  227.628741][T12938] netlink: 'syz.1.1797': attribute type 30 has an invalid length.
[  227.636588][T12938] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  227.644144][T12938] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  227.822545][T12953] openvswitch: netlink: IP tunnel TTL not specified.
[  227.886542][T12956] vlan4: entered allmulticast mode
[  227.888388][T12956] dummy0: entered allmulticast mode
[  227.916287][T12957] vlan4: entered allmulticast mode
[  228.035915][T12964] macvtap0: entered allmulticast mode
[  228.038277][T12964] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  228.229220][T12982] netlink: 'syz.2.1811': attribute type 13 has an invalid length.
[  228.232862][T12982] netlink: 'syz.2.1811': attribute type 17 has an invalid length.
[  228.249204][T12982] erspan0: left allmulticast mode
[  228.280211][T12982] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.290440][T12982] 8021q: adding VLAN 0 to HW filter on device team0
[  228.297268][T12982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.422637][T12993] netlink: 'syz.2.1813': attribute type 10 has an invalid length.
[  228.432103][T12994] bond9: (slave erspan0): Releasing active interface
[  228.448595][T12994] bond0: (slave wlan1): Releasing backup interface
[  228.455456][T12994] bond11: (slave geneve3): Releasing active interface
[  228.458362][T12994] bond11: (slave geneve3): the permanent HWaddr of slave - 9a:b3:26:db:75:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  228.468878][T12994] bond11: (slave ip6gretap3): making interface the new active one
[  228.475320][T12994] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  228.478930][T12994] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  228.487019][T12994] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  228.492245][T12994] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  228.498379][T12994] bond11: (slave ip6gretap3): Releasing active interface
[  228.512083][T12993] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  229.149840][T13026] bond0: (slave wlan1): Releasing backup interface
[  229.230565][T13034] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  229.392646][T13041] validate_nla: 2 callbacks suppressed
[  229.392662][T13041] netlink: 'syz.2.1826': attribute type 20 has an invalid length.
[  229.409136][T13041] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.412715][T13041] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.416224][T13041] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.419574][T13041] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.424795][T13041] netlink: 'syz.2.1826': attribute type 20 has an invalid length.
[  229.633993][T13052] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  229.637343][T13052] __nla_validate_parse: 10 callbacks suppressed
[  229.637356][T13052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1830'.
[  229.644478][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1830'.
[  229.663084][T13052] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1830'.
[  229.857877][T13074] netlink: 'syz.2.1835': attribute type 10 has an invalid length.
[  229.868933][T13074] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  229.966411][T13084] netlink: 'syz.0.1839': attribute type 1 has an invalid length.
[  229.982353][T13084] bond12: entered promiscuous mode
[  229.984220][T13084] bond12: entered allmulticast mode
[  229.992030][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'.
[  229.999611][T13084] bridge11: the hash_elasticity option has been deprecated and is always 16
[  230.004827][T13084] bond12: (slave bridge11): making interface the new active one
[  230.007291][T13084] bridge11: entered promiscuous mode
[  230.009038][T13084] bridge11: entered allmulticast mode
[  230.011788][T13084] bond12: (slave bridge11): Enslaving as an active interface with an up link
[  230.255807][T13097] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1842'.
[  230.619430][T13109] 8021q: adding VLAN 0 to HW filter on device bond14
[  230.622755][T13109] bond0: (slave bond14): Enslaving as an active interface with a down link
[  230.716063][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  230.778570][T13124] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1850'.
[  230.938989][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'.
[  230.950808][T13135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1852'.
[  230.954421][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'.
[  230.967321][T13135] bond0: (slave wlan1): Releasing backup interface
[  230.969350][T13135] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  231.002779][T13135] bond0: (slave bond14): Releasing backup interface
[  231.025934][T13135] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  231.303816][T13154] netlink: 'syz.0.1856': attribute type 23 has an invalid length.
[  231.337676][T13158] netlink: 'syz.0.1856': attribute type 23 has an invalid length.
[  232.147872][T13182] netlink: 'syz.2.1858': attribute type 4 has an invalid length.
[  232.328147][T13201] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  232.433634][T13208] netlink: 'syz.2.1865': attribute type 32 has an invalid length.
[  233.001698][T13243] netlink: 'syz.2.1875': attribute type 32 has an invalid length.
[  233.124983][T13259] ip6t_srh: unknown srh invflags 4000
[  233.926413][T13306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.929550][T13306] syzkaller0: entered promiscuous mode
[  233.932304][T13306] syzkaller0: entered allmulticast mode
[  233.938638][T13306] tipc: Resetting bearer <eth:syzkaller0>
[  233.945620][T13305] tipc: Resetting bearer <eth:syzkaller0>
[  233.954840][T13305] tipc: Disabling bearer <eth:syzkaller0>
[  234.239762][T13342] pim6reg1: entered promiscuous mode
[  234.243058][T13342] pim6reg1: entered allmulticast mode
[  234.432451][T13369] validate_nla: 10 callbacks suppressed
[  234.432463][T13369] netlink: 'syz.2.1906': attribute type 1 has an invalid length.
[  234.446520][T13369] netlink: zone id is out of range
[  234.454411][T13369] netlink: zone id is out of range
[  234.457566][T13369] netlink: zone id is out of range
[  234.460473][T13369] netlink: zone id is out of range
[  234.465872][T13369] netlink: get zone limit has 8 unknown bytes
[  234.659449][T13399] netlink: 'syz.0.1912': attribute type 17 has an invalid length.
[  234.679933][T13401] netlink: 'syz.2.1915': attribute type 12 has an invalid length.
[  234.687786][T13401] __nla_validate_parse: 29 callbacks suppressed
[  234.689874][T13401] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1915'.
[  234.698823][T13399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.757456][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'.
[  234.997690][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'.
[  235.037836][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1925'.
[  235.077149][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[  235.199156][T13446] : entered promiscuous mode
[  235.514102][T13470] netlink: 'syz.1.1933': attribute type 2 has an invalid length.
[  235.588234][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'.
[  236.014390][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1943'.
[  236.134157][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'.
[  236.147073][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'.
[  236.148081][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'.
[  236.154177][T13527] sch_tbf: burst 88 is lower than device veth1 mtu (1514) !
[  236.527919][T13545] netlink: 'syz.1.1953': attribute type 13 has an invalid length.
[  236.535018][T13545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.741694][T13573] openvswitch: netlink: Flow key attr not present in new flow.
[  237.014635][T13598] netlink: 'syz.2.1970': attribute type 10 has an invalid length.
[  237.747390][T13670] netlink: 'syz.1.1987': attribute type 1 has an invalid length.
[  237.813665][T13676] veth7: entered promiscuous mode
[  237.829786][ T5873] IPVS: starting estimator thread 0...
[  237.936384][T13695] netlink: 'syz.2.1992': attribute type 39 has an invalid length.
[  237.939969][T13681] IPVS: using max 62 ests per chain, 148800 per kthread
[  238.047680][T13706] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  238.075609][T13710] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  238.270085][T13727] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.357785][T13727] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.415821][T13727] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.475846][T13727] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.528202][T13727] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.536619][T13727] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.546475][T13727] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.556227][T13727] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.263854][T13788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.358507][T13795] netlink: 'syz.1.2021': attribute type 21 has an invalid length.
[  239.871373][T13830] __nla_validate_parse: 25 callbacks suppressed
[  239.871384][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2027'.
[  240.298778][T13854] batadv_slave_0: left promiscuous mode
[  240.301814][T13854] batadv_slave_1: left promiscuous mode
[  240.308087][T13854] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  240.311243][T13854] bond1: left promiscuous mode
[  240.313176][T13854] gretap1: left promiscuous mode
[  240.315788][T13854] bond3: left promiscuous mode
[  240.317379][T13854] batadv1: left promiscuous mode
[  240.318998][T13854] batadv1: left allmulticast mode
[  240.322336][T13854] macvtap1: left promiscuous mode
[  240.323109][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  240.324272][T13854] macvtap1: left allmulticast mode
[  240.329985][T13854] tipc: Resetting bearer <eth:syzkaller0>
[  240.334246][T13854] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  240.336587][T13854] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  240.357365][T13854] vlan3: left promiscuous mode
[  240.359120][T13854] bridge0: left promiscuous mode
[  240.361297][T13854] vlan3: left allmulticast mode
[  240.370201][T13854] bond12: left promiscuous mode
[  240.377077][T13854] bridge11: left promiscuous mode
[  240.379208][T13854] bond12: left allmulticast mode
[  240.381276][T13854] bridge11: left allmulticast mode
[  240.465371][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2034'.
[  240.816377][T13890] netlink: 'syz.1.2040': attribute type 83 has an invalid length.
[  240.829090][T13893] netlink: 'syz.2.2041': attribute type 2 has an invalid length.
[  240.878108][T13896] siw: device registration error -23
[  240.889632][T13896] ipvlan0: entered promiscuous mode
[  241.247140][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'.
[  241.440340][T13935] netlink: del zone limit has 4 unknown bytes
[  241.650139][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.696502][T13959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.411412][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'.
[  242.585475][T13969] nbd: must specify a size in bytes for the device
[  242.702198][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'.
[  242.706282][T13979] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2061'.
[  242.726582][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'.
[  242.984621][T13993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2064'.
[  243.197293][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  243.337464][T14030] netlink: 'syz.2.2072': attribute type 4 has an invalid length.
[  243.352326][T14031] netlink: 'syz.2.2072': attribute type 4 has an invalid length.
[  243.352372][T14030] netlink: 'syz.2.2072': attribute type 4 has an invalid length.
[  243.379449][T14031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.429707][T14037] netlink: 'syz.0.2073': attribute type 1 has an invalid length.
[  243.434147][T14037] netlink: 'syz.0.2073': attribute type 3 has an invalid length.
[  243.573902][T14049] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  244.232850][T14074] nbd: must specify at least one socket
[  244.612805][T14095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.708483][T14111] xfrm1: entered allmulticast mode
[  244.803157][T14121] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  244.806017][T14121] team0: Device ipvlan1 is already an upper device of the team interface
[  244.903216][T14129] __nla_validate_parse: 27 callbacks suppressed
[  244.903232][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  244.905792][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  244.950368][T14125] xt_TPROXY: Can be used only with -p tcp or -p udp
[  245.562942][T14165] erspan0: entered promiscuous mode
[  245.566234][T14165] batman_adv: batadv0: Adding interface: macvlan0
[  245.568323][T14165] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.578342][T14165] batman_adv: batadv0: Interface activated: macvlan0
[  245.597055][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'.
[  246.329351][T14211] netlink: 'syz.0.2114': attribute type 1 has an invalid length.
[  246.726255][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  246.755435][T14230] netlink: 'syz.0.2118': attribute type 13 has an invalid length.
[  246.760033][T14230] netlink: 'syz.0.2118': attribute type 17 has an invalid length.
[  246.801744][T14230] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.807062][T14230] 8021q: adding VLAN 0 to HW filter on device team0
[  246.826011][T14230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.026219][T14238] netlink: 'syz.2.2120': attribute type 3 has an invalid length.
[  247.028724][T14238] netlink: 'syz.2.2120': attribute type 3 has an invalid length.
[  247.088796][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2121'.
[  247.129258][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  247.132686][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  247.135742][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  247.138840][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  247.144695][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2122'.
[  247.344307][T14248] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  247.566225][T14253] netlink: 'syz.1.2124': attribute type 29 has an invalid length.
[  247.570294][T14253] netlink: 'syz.1.2124': attribute type 29 has an invalid length.
[  247.575525][T14253] xt_policy: neither incoming nor outgoing policy selected
[  248.071154][T14270] netlink: 'syz.1.2130': attribute type 7 has an invalid length.
[  248.096824][T14272] ip6erspan0: entered allmulticast mode
[  248.114186][T14274] netlink: 'syz.0.2132': attribute type 10 has an invalid length.
[  248.122727][T14274] 8021q: adding VLAN 0 to HW filter on device team0
[  248.126590][T14274] team0: entered promiscuous mode
[  248.128388][T14274] team0: entered allmulticast mode
[  248.130486][T14274] bond0: (slave team0): Enslaving as an active interface with an up link
[  248.196922][T14277] netlink: 'syz.2.2133': attribute type 2 has an invalid length.
[  248.714258][T14315] 8021q: adding VLAN 0 to HW filter on device bond11
[  248.719135][T14315] bond0: (slave bond11): Enslaving as an active interface with a down link
[  248.975422][T14337] sctp: [Deprecated]: syz.2.2148 (pid 14337) Use of int in max_burst socket option.
[  248.975422][T14337] Use struct sctp_assoc_value instead
[  249.133562][T14346] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  249.266979][T14360] 8021q: adding VLAN 0 to HW filter on device bond12
[  249.271138][T14360] bond0: (slave bond12): Enslaving as an active interface with a down link
[  249.288687][T14368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.295954][T14368] syzkaller0: entered promiscuous mode
[  249.301636][T14368] syzkaller0: entered allmulticast mode
[  249.321839][T14368] tipc: Resetting bearer <eth:syzkaller0>
[  249.338417][T14367] tipc: Resetting bearer <eth:syzkaller0>
[  249.373186][T14367] tipc: Disabling bearer <eth:syzkaller0>
[  249.623965][T14396] syzkaller1: entered promiscuous mode
[  249.626122][T14396] syzkaller1: entered allmulticast mode
[  249.673774][    C1] ------------[ cut here ]------------
[  249.676001][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  249.680427][    C1] WARNING: CPU: 1 PID: 14398 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  249.684293][    C1] Modules linked in:
[  249.686112][    C1] CPU: 1 UID: 0 PID: 14398 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  249.691215][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.694162][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  249.696058][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 74 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  249.701808][    C1] RSP: 0000:ffffc900001e0538 EFLAGS: 00010246
[  249.703671][    C1] RAX: 94e07477fa0c1b00 RBX: 000000000000000c RCX: ffff8880216a5640
[  249.706217][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  249.708709][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  249.711231][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88810e127b28
[  249.713655][    C1] R13: 0000000000000000 R14: ffff8880313b8e40 R15: ffff8880313bb0d8
[  249.716086][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  249.718910][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.721066][    C1] CR2: 00007f383437f0f0 CR3: 000000010e888000 CR4: 00000000000006f0
[  249.723488][    C1] Call Trace:
[  249.724572][    C1]  <IRQ>
[  249.725565][    C1]  rate_control_send_low+0x194/0x7a0
[  249.727257][    C1]  rate_control_get_rate+0x20b/0x5d0
[  249.728957][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  249.730893][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  249.732907][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.734595][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  249.736385][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  249.738145][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  249.739950][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.741687][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.743339][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  249.745045][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.746924][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  249.748791][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  249.751022][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  249.753113][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  249.755627][    C1]  __iterate_interfaces+0x2ab/0x590
[  249.757231][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  249.759125][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  249.761404][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  249.763270][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  249.765395][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  249.767068][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  249.768842][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  249.770429][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  249.772224][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  249.773993][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  249.775633][    C1]  handle_softirqs+0x286/0x870
[  249.777085][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  249.778585][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  249.780185][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  249.781840][    C1]  __irq_exit_rcu+0xca/0x1f0
[  249.783286][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  249.784879][    C1]  irq_exit_rcu+0x9/0x30
[  249.786174][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  249.787938][    C1]  </IRQ>
[  249.788859][    C1]  <TASK>
[  249.789798][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  249.791680][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  249.793269][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 93 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  249.799073][    C1] RSP: 0000:ffffc900073b78c8 EFLAGS: 00000206
[  249.801040][    C1] RAX: 94e07477fa0c1b00 RBX: 0000000000000000 RCX: 94e07477fa0c1b00
[  249.803472][    C1] RDX: 0000000000000000 RSI: ffffffff8db83abb RDI: ffffffff8be28c00
[  249.805940][    C1] RBP: ffffffff81f5ff8c R08: 0000000000000000 R09: ffffffff81f5ff8c
[  249.808337][    C1] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000002
[  249.810781][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  249.813564][    C1]  ? folio_try_get+0x1c/0x340
[  249.815508][    C1]  ? folio_try_get+0x1c/0x340
[  249.817378][    C1]  ? folio_try_get+0x1c/0x340
[  249.819271][    C1]  folio_try_get+0x38/0x340
[  249.821130][    C1]  ? folio_try_get+0x1c/0x340
[  249.822929][    C1]  next_uptodate_folio+0xcb/0x5d0
[  249.824834][    C1]  filemap_map_pages+0x1025/0x1740
[  249.826790][    C1]  ? filemap_map_pages+0x14b/0x1740
[  249.828741][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  249.831023][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  249.833052][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  249.835085][    C1]  __handle_mm_fault+0x368a/0x5620
[  249.837064][    C1]  ? __lock_acquire+0xab9/0xd20
[  249.839145][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  249.841370][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  249.843366][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  249.845407][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  249.847494][    C1]  handle_mm_fault+0x40a/0x8e0
[  249.849357][    C1]  do_user_addr_fault+0xa81/0x1390
[  249.851286][    C1]  ? rcu_is_watching+0x15/0xb0
[  249.853162][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  249.855222][    C1]  exc_page_fault+0x76/0xf0
[  249.856940][    C1]  asm_exc_page_fault+0x26/0x30
[  249.858488][    C1] RIP: 0033:0x7f383463d661
[  249.860208][    C1] Code: 4c 8d 35 38 ca 01 00 41 55 41 54 41 bc 0c 00 00 00 55 53 48 8b 1f 4c 8b 6a 28 48 03 5a 10 49 29 dc 4a 8d 04 23 4c 39 e8 73 3b <8b> 2b 83 fd 04 75 1b 83 7b 08 05 75 15 48 8d 7b 0c ba 04 00 00 00
[  249.867362][    C1] RSP: 002b:00007ffce7e11670 EFLAGS: 00010283
[  249.869294][    C1] RAX: 000000000000000c RBX: 00007f383437f0f0 RCX: 00007f383465e350
[  249.872066][    C1] RDX: 00007f383432d190 RSI: 0000000000000003 RDI: 00007f383462e4b0
[  249.875061][    C1] RBP: 00007ffce7e11800 R08: 000000006ffffdff R09: 000000006ffffeff
[  249.877551][    C1] R10: 000000006fffff41 R11: 000000006ffffe35 R12: ffff80c7cbc80f1c
[  249.880021][    C1] R13: 0000000000000030 R14: 00007f383465a076 R15: 00000000effffef5
[  249.882938][    C1]  </TASK>
[  249.884101][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  249.886835][    C1] CPU: 1 UID: 0 PID: 14398 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  249.891606][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.895462][    C1] Call Trace:
[  249.896766][    C1]  <IRQ>
[  249.897840][    C1]  dump_stack_lvl+0x99/0x250
[  249.899603][    C1]  ? __asan_memcpy+0x40/0x70
[  249.901346][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.903321][    C1]  ? __pfx__printk+0x10/0x10
[  249.905079][    C1]  panic+0x2db/0x790
[  249.906708][    C1]  ? __pfx_panic+0x10/0x10
[  249.908423][    C1]  __warn+0x31b/0x4b0
[  249.909987][    C1]  ? __rate_control_send_low+0x5df/0x820
[  249.912192][    C1]  ? __rate_control_send_low+0x5df/0x820
[  249.914272][    C1]  report_bug+0x2be/0x4f0
[  249.915913][    C1]  ? __rate_control_send_low+0x5df/0x820
[  249.917706][    C1]  ? __rate_control_send_low+0x5df/0x820
[  249.919438][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  249.921186][    C1]  handle_bug+0x84/0x160
[  249.922782][    C1]  exc_invalid_op+0x1a/0x50
[  249.924468][    C1]  asm_exc_invalid_op+0x1a/0x20
[  249.926030][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  249.927934][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 74 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  249.934389][    C1] RSP: 0000:ffffc900001e0538 EFLAGS: 00010246
[  249.936699][    C1] RAX: 94e07477fa0c1b00 RBX: 000000000000000c RCX: ffff8880216a5640
[  249.939446][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  249.942299][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  249.945237][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff88810e127b28
[  249.947779][    C1] R13: 0000000000000000 R14: ffff8880313b8e40 R15: ffff8880313bb0d8
[  249.950323][    C1]  ? __rate_control_send_low+0x5de/0x820
[  249.952336][    C1]  rate_control_send_low+0x194/0x7a0
[  249.954305][    C1]  rate_control_get_rate+0x20b/0x5d0
[  249.956051][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  249.958103][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  249.960460][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  249.962187][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  249.964027][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  249.966121][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  249.968402][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.970299][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.972316][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[  249.974343][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  249.976481][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  249.978553][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  249.980703][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  249.982499][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  249.984633][    C1]  __iterate_interfaces+0x2ab/0x590
[  249.986175][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  249.988028][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  249.990347][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  249.992272][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  249.994373][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  249.996001][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  249.997795][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  249.999408][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  250.001078][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  250.002798][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  250.004333][    C1]  handle_softirqs+0x286/0x870
[  250.005769][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  250.007187][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  250.008738][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  250.010267][    C1]  __irq_exit_rcu+0xca/0x1f0
[  250.011696][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  250.013290][    C1]  irq_exit_rcu+0x9/0x30
[  250.014584][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  250.016257][    C1]  </IRQ>
[  250.017147][    C1]  <TASK>
[  250.018020][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  250.019803][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  250.021377][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 93 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  250.027014][    C1] RSP: 0000:ffffc900073b78c8 EFLAGS: 00000206
[  250.028836][    C1] RAX: 94e07477fa0c1b00 RBX: 0000000000000000 RCX: 94e07477fa0c1b00
[  250.031217][    C1] RDX: 0000000000000000 RSI: ffffffff8db83abb RDI: ffffffff8be28c00
[  250.033584][    C1] RBP: ffffffff81f5ff8c R08: 0000000000000000 R09: ffffffff81f5ff8c
[  250.036030][    C1] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000002
[  250.038407][    C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246
[  250.040800][    C1]  ? folio_try_get+0x1c/0x340
[  250.042573][    C1]  ? folio_try_get+0x1c/0x340
[  250.044325][    C1]  ? folio_try_get+0x1c/0x340
[  250.046011][    C1]  folio_try_get+0x38/0x340
[  250.047686][    C1]  ? folio_try_get+0x1c/0x340
[  250.049458][    C1]  next_uptodate_folio+0xcb/0x5d0
[  250.051213][    C1]  filemap_map_pages+0x1025/0x1740
[  250.052784][    C1]  ? filemap_map_pages+0x14b/0x1740
[  250.054390][    C1]  ? __pfx_filemap_map_pages+0x10/0x10
[  250.056369][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  250.058206][    C1]  ? __handle_mm_fault+0x296f/0x5620
[  250.059890][    C1]  __handle_mm_fault+0x368a/0x5620
[  250.061428][    C1]  ? __lock_acquire+0xab9/0xd20
[  250.062939][    C1]  ? __pfx___handle_mm_fault+0x10/0x10
[  250.064576][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  250.066135][    C1]  ? lock_vma_under_rcu+0xf8/0x710
[  250.067695][    C1]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  250.069305][    C1]  handle_mm_fault+0x40a/0x8e0
[  250.070769][    C1]  do_user_addr_fault+0xa81/0x1390
[  250.072297][    C1]  ? rcu_is_watching+0x15/0xb0
[  250.073763][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  250.075351][    C1]  exc_page_fault+0x76/0xf0
[  250.076724][    C1]  asm_exc_page_fault+0x26/0x30
[  250.078273][    C1] RIP: 0033:0x7f383463d661
[  250.079671][    C1] Code: 4c 8d 35 38 ca 01 00 41 55 41 54 41 bc 0c 00 00 00 55 53 48 8b 1f 4c 8b 6a 28 48 03 5a 10 49 29 dc 4a 8d 04 23 4c 39 e8 73 3b <8b> 2b 83 fd 04 75 1b 83 7b 08 05 75 15 48 8d 7b 0c ba 04 00 00 00
[  250.085247][    C1] RSP: 002b:00007ffce7e11670 EFLAGS: 00010283
[  250.087055][    C1] RAX: 000000000000000c RBX: 00007f383437f0f0 RCX: 00007f383465e350
[  250.089367][    C1] RDX: 00007f383432d190 RSI: 0000000000000003 RDI: 00007f383462e4b0
[  250.091678][    C1] RBP: 00007ffce7e11800 R08: 000000006ffffdff R09: 000000006ffffeff
[  250.094102][    C1] R10: 000000006fffff41 R11: 000000006ffffe35 R12: ffff80c7cbc80f1c
[  250.096493][    C1] R13: 0000000000000030 R14: 00007f383465a076 R15: 00000000effffef5
[  250.098904][    C1]  </TASK>
[  250.100518][    C1] Kernel Offset: disabled
[  250.101883][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:54:42  Registers:
info registers vcpu 0

CPU#0
RAX=48ef72f3b7325000 RBX=ffffffff81976a48 RCX=48ef72f3b7325000 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007380 CR3=000000010e60a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc534811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff888020fe0237 R9 =1ffff110041fc046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18ce R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f383437f0f0 CR3=000000010e888000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
