last executing test programs:

1.190006783s ago: executing program 2 (id=659):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x5, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket(0x1d, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0xfffffefd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}]}, 0x54}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000680)={{0x0, 0x7, 0x48bd, 0x800000, 0x7fff, 0x81, 0x400, 0x5, 0x9, 0x7fff, 0x7fffffff, 0x7, 0x1, 0x7, 0x1}})
connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x3, @none, 0x9e1}, 0xe)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

811.708641ms ago: executing program 2 (id=662):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r5, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
sendmsg$nl_netfilter(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x33c, 0x1, 0x1, 0x201, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x9}, [@generic="4b5a970328d49270201619b33c73e4a4c2d090f1e5a1d4d9aa88cab70c8eb26e28b5000e4b24cc30e1c0d2a3390271b47b48af54705f93", @nested={0x1db, 0x2c, 0x0, 0x1, [@generic="f156c2783c23241909a709a0e0bf2065ee4a19277372248ebd00ee0918d79487cf50643cf62be72603cd2f08a5ed923fefe3134378d9daeabe52c4c09de5a7426d310e88274f426cab5be5e6ce815fde67f90e17620b4ec2a0ca69d70f66759a", @generic="8241543993dcbdede22616458d26e90348d999647c7428894ef2c7ed702b54120e42da99091563b7dd498b2bf99ff50d05b6a11d44f0f4fca5e06be65aadc28002499bbdee06c412d238fa5408491b4c292bb6e116163ecd1f81a40809", @nested={0x4, 0x97}, @typed={0x8, 0x58, 0x0, 0x0, @fd=r3}, @generic="358544a4e1f9dbb14b36e4614d365a6a9b31bbdbf07e", @typed={0x8, 0xf6, 0x0, 0x0, @fd=r2}, @generic="5044d5ee4b36fe1f53b4ea69356a81fd6b99faaa88cf674440b761580a5ccc4b8dd83e23162c09413edfe892eb61d8e0a6155f6fc31b2b0173e9f67035316b29589839c48a0141cc6f7f366d93accbceb2cc474ee92f71223b6ee483fc25c45c218604b1dc5d02ff8c496feb7341b8c2adc1301fc5d6e26422e32447bf595d27d1a645d31fd0bf1d713e45efeb5953dcf586a2cd17273cd944d6d0cd51025e6a422be0c1a93e7384a01a6953b61a07a565e9998705b2a646c2d1f901a6989b55222d5ae2f56dacb04147d3be8e3867d1d550ad903ceb2ad881e7e38859341c1184fa2c1fd9398988ee2f37cf", @nested={0x4, 0x129}]}, @typed={0x4, 0x9b}, @nested={0x110, 0x14b, 0x0, 0x1, [@nested={0x4, 0x138}, @nested={0x4, 0x11f}, @generic="821864980e3b7443d94c6f3bf93a23ffb28bcceed28c5cefc5b3df22afd3b5b3323c626151fdc2b992e304ebf3988ee8bc5a91adb672d852ad066f4e1ebc3b62e157a88be2c44b2b9edc46632d5264c9409bd2994585f1b6671db104c6c578665cfe21aa18afeb92442a7b613df12bfa6595325804aec2dc55232cf68f36e75c39dc1b13a328d31a3a46364470d6e2235cbd8d49f6c493480fafcd93d88f490baa9365230cc4df701f21cf659800c24f89ae58984ecb89b29a39bc358b20e5869e84a59d25110d29da", @generic="e74b09f178d38cade9c7ed7c5999dc5f10d53e1bc73f76cf9b7d01f9c160d24d2ec85740a5c1aad3b22c5bd3a5f6dae2244486", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0xffffff01}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x1}, 0x40080c1)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

811.166444ms ago: executing program 0 (id=663):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>r0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
listen(r0, 0x80)

751.519174ms ago: executing program 0 (id=664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="050000004500000000000000000008000300", @ANYRES32, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000036050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0)

650.938417ms ago: executing program 0 (id=666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x100})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xfff7}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x108, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000000500"}}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x4, 0x1, 0x8, 0x1, 0x6, 0xfffffffa, 0x6}}, {0x10, 0x2, [0x401, 0x5, 0xff, 0x0, 0x94b5, 0x2]}}, {{0x1c, 0x1, {0xe, 0x6, 0x2, 0x4, 0x2, 0x3, 0x9, 0x8}}, {0x14, 0x2, [0x2e94, 0x2, 0x6, 0x2, 0x0, 0x7, 0x0, 0x212a]}}, {{0x1c, 0x1, {0xf, 0x2, 0x5, 0x5, 0x0, 0x4, 0x10000, 0x7}}, {0x12, 0x2, [0x401, 0x2, 0xa01, 0x50, 0x6c2d, 0x5, 0x6]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r9 = socket(0x2a, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffffc2)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r11], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x1, 0x803, 0x0)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
getsockopt$netlink(r8, 0x10e, 0x1, &(0x7f0000000300)=""/182, &(0x7f0000000180)=0xb6)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50000000fedbdf2500"/20, @ANYRES8=r7, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r15], 0x50}}, 0x2)

599.562592ms ago: executing program 2 (id=667):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xa2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r2=>0x0}, 0x30) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = getpid()
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)={0x28c, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x27c, 0x4f, 0x0, 0x1, [@generic="c8d6a61d15b4ed4cc5d5c3b8c328500c311f19b70badce08cf4bb3d624dc4acec17c1e2657ee0a5c3b25dc5e086d10674c3a26c639f29b1d362cbd1d936882807b9f5482c5ccd39d529a03d8872256c0d5bd107e469a5bdd9ae92b79041cce0601746fa35aa276d923d00863918df56cfca6f6ea9d73d755e3a7f32ccbf7fa176a3c99da56c3fb76fbf71cc0bd348500d9b87e921ee190aa123fd7f92b2e581f5965b0b563d5782320a4876405cfba7fff439dd6615e551efe8861152bafaac7f5e95d8e781228bca863b6de522846a928ea25aab621eb5df9d6c5a4d471c347e25a7e11e98fe4c6217bbdb058a142f31e1a732ba4e4092a", @typed={0xb7, 0xc, 0x0, 0x0, @binary="909c762dbaee09c12597f2c455559ff205aca67750a59caf657f5a73b99612fd0dffa814708d2d4c79c286391313ed4b3dfe3d6efb776f8064a45221d720003b0532f6ee01c1710634d20015c344f6446a8f815d386d01d2c8ea8827347f8a73d4c6b1e0db127d6b4f3ffaae7c55a01ccceb1c06d5a76d057c3e70c890b26cd07008442b2c99e1b5d64a683958916605dd2c3c1fcd2afa882ec401f719940d3d8d93d124961bc7ad66d4dbd4cd661a614aea30"}, @nested={0xc7, 0x6, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}, @nested={0x1c, 0xef, 0x0, 0x1, [@typed={0xc, 0x7a, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xae}, @nested={0x4, 0x102}, @nested={0x4, 0x11c}]}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="aebb84d0cbaee13313e1203a9bd395d968ed88c98bd7161ce802ac159f55b9dee2876b6762bcacb3eed3e6660ded1b0820bf8ccfb026786d0af0fab803c50288d4547e33ac6ea1cd33bc271adcd350ad548bbae95623473f50da8d914076f36a13e2591421e337f6d84da2d70424a3c7f62c2bc0717eed7d354d7d5751ee2dff7bf0ab23166b9ea2e0de48ad20e20f61d4817f2283cf01"]}]}]}, 0x28c}], 0x1}, 0x80) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x10, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0x101, 0x100}}) (async, rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r9, @ANYBLOB="0a22b73b93c76d280c83bd405382d3787f876db2a4c816b71617c2ef238ea4247fcf21113d670588682533407e9b8e588260f5eed52b6e2d950b6ef5fb64b0f60000e9ffffff00"], 0x54}}, 0x0)

573.67253ms ago: executing program 1 (id=668):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x2, 0x1, 0x4}, 0xfe}, 0x18)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r1, 0x0, 0x0, 0x80c4)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r8, 0x6, 0x2, 0x2}, 0x10)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r9=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2ee26}]}}}]}, 0x48}}, 0x40)

499.25398ms ago: executing program 2 (id=669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=<r3=>r2, @ANYBLOB="92ca160a10ad7b78915dbe0e6ee5962921fcfe7d5c033668bc879b5d4fe97aaa2e3546d5f3955bd0b69d49a3b0c5268903f0c0d5164d401e786589660df42874da438dccb170fdd3f96e8f9eda42c231dcb5d9abf4ae0ec0579cd7196ae0dd32084df9cb49f21828ffbee094b60e18c0ea3b096227b6ab163c152d6a048ba1002625b12b14a9e59f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x199d2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={<r9=>0x0}, &(0x7f0000000580)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f00000005c0)={r9, 0x1}, &(0x7f0000000600)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0700b8bc17e3eaa82fc4afb9a66ee9126e13fbc65d45aa9cde658fd335464700ea58ca44f812c31550949d4da9a3836c2f2d46adc21a636a319f8eb0cf89725fb5681c896cbdff178b68285c626daf01e04a4c4e", @ANYRES64=r1, @ANYBLOB="010080000000000000000800000008000300", @ANYRES64=r3, @ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r11, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002abd7000a75aa628d5aea79d08000300", @ANYRES32=r13, @ANYBLOB="0c009900fcffffff1f000000060095004000000006009500ffff000006009500080000000600950004000000"], 0x48}, 0x1, 0x0, 0x0, 0x80c1}, 0x20004801)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES64=r14], 0x38}}, 0x0)

495.794805ms ago: executing program 0 (id=670):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000000000000100000d000008000200000001000000002e612e2000"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000001700))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107e0000000000040000000000000095f9be0000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendto$unix(r5, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0)
sendmsg$802154_raw(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001dd3f76b9eadf2a7bcaf3b9d3903cd2d6c64e23171dc66a14c85bdee1feeb83c18aafe8cac76745628660041224"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x11)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x4, 0x8, 0x5}, 0x50)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

419.063638ms ago: executing program 0 (id=671):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xc857}, 0x4000000)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x1, 0x8, @status={[0x1, 0xffffffffffffffc0, 0x3, 0x3, 0x72, 0x5]}, [0xfffffffffffffe01, 0x8000000000000000, 0xffffffffffffffff, 0x2, 0x7, 0x6, 0x27, 0x716, 0x6, 0xe4, 0x3, 0x7, 0x9, 0x4, 0x8, 0xf02, 0x8, 0x5f1e, 0x7, 0x3, 0xc, 0x25b, 0x2, 0x10, 0x53, 0x3, 0xb, 0x1, 0x1, 0x80, 0x8001, 0x1, 0x5, 0x9, 0x17c, 0xc81b, 0x100000000, 0x403, 0x4f5b692a, 0xfffffffffffffffc, 0x6, 0xf4, 0x3, 0x1407, 0xffffffff, 0x101, 0x173b, 0x80000000, 0x9, 0x0, 0x6, 0x7fffffff, 0x80, 0x28000000, 0x27f, 0x6, 0x5, 0x5, 0x5, 0x200, 0xf0, 0x472, 0x7, 0x83]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r5, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x50fad000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x1, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r7, 0x1000)
r8 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r8, 0x0, 0x0)
bind$l2tp6(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {}, 0xfd}, 0x18)

418.624934ms ago: executing program 1 (id=672):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x59}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

417.686624ms ago: executing program 2 (id=673):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
unshare(0x6a040000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@newtclass={0x38, 0x28, 0x0, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xaeff141036db34aa, 0x9}, {0x8, 0xe}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1004}, 0x4000815)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r8, 0x29, 0x42, 0x0, &(0x7f00000000c0))
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r10, 0x20, &(0x7f0000000100)={0x0, 0x0, <r11=>0x0, 0x0}}, 0x10)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r12, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1f, 0x1, 0x10001, 0x3, 0x40200, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x2d, &(0x7f0000000640)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xd, 0xa, 0x7, 0x20, 0x8}, @exit, @generic={0x5, 0x0, 0x1, 0x5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000007c0)='GPL\x00', 0x0, 0x69, &(0x7f0000000800)=""/105, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, r9, 0x8, &(0x7f00000008c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x6, 0x3, 0x10}, 0x10, r11, r1, 0x5, &(0x7f0000000ac0)=[r13, 0x1, r14, 0xffffffffffffffff, r15, r16], &(0x7f0000000b00)=[{0x1000001, 0x5, 0x1, 0x7}, {0x5, 0x2, 0x4, 0x9}, {0x5, 0x5, 0xf, 0xc}, {0x3, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xfffffffd, 0x4}], 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10)
r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r17}, 0x10)

301.16137ms ago: executing program 0 (id=674):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000080)
vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000ffffb7080000071d00007b8af8bfe251a3ea6befe4000000000007020000f8ffffff060000000000000050ce969a36e30400"/68, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010102}})
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
accept4(r8, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r10, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd)
r11 = accept4(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000140)=0x80, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r12 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)

241.01784ms ago: executing program 1 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000340)={0x4, {0x2, 0x1, 0x9, 0x8, 0x1}}) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000000140))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000020000399a765d8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000018000000ff01000000000000010000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000008013", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) (async, rerun: 64)
r5 = socket$inet(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r6=>0x0}) (async, rerun: 64)
r7 = accept(r5, &(0x7f0000000100)=@xdp, &(0x7f0000000200)=0x80) (rerun: 64)
connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x3a) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x9, 0xfff2}, {0xffff, 0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x402}]}, 0x20}}, 0x0)

181.477673ms ago: executing program 1 (id=676):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'hsr0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x8, 0x6, {0x3, @tcp_ip4_spec={@empty, @remote, 0x4e23, 0x4e23, 0x6d}, {0x0, @broadcast, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x401, 0x9]}, 0xff, 0x7fffffff}}}) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3d000000680001002abd7000fedbdf25020000000000000004000b0008000100010000001400060064011802000000000000000000000000596a5dbef5fed1c913cda25bbd35246e76c953c82dc6b11a216085d305ed3f45eea736b4"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYBLOB="00006b00000000001c0012800900010069706970000000000c00028006002f0204000000", @ANYRES32=0x0, @ANYRES8=r2], 0x3c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000f1dd0fccd5de059d3679f300", 0x17}, {&(0x7f0000000240)="37a8a6c41e", 0x5}, {&(0x7f00000029c0)="3de496b26cb156fc17de651b31059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e2ae5cb97fdc06714cf2f0d63fb06b9492202ed349bbdaf050397c4e8d14b95245d9d024874411b896dbf886c256ce9fa8ec0c18fd593", 0xea}], 0x4) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x14, r8, 0x9, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0xff, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x14, 0x0, 0x3e}, {@remote, 0x4e21, 0x1, 0x4, 0x1, 0x4}}, 0x44)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6)

89.061491ms ago: executing program 1 (id=677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0)
recvmmsg(r0, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000090560000280012800b000100697036746e6c0000180002801400020000000000000000000000ffffac14142a080004"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)

7.968981ms ago: executing program 2 (id=678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x101, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)

0s ago: executing program 1 (id=679):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, &(0x7f0000000140)="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", 0xfe, 0x4000, &(0x7f0000000240)={0xa, 0x4e24, 0x6, @mcast2, 0x116}, 0x1c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'caif0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x40, 0x14, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x4}, 0x7fff})
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000080)={0x80})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46663' (ED25519) to the list of known hosts.
syzkaller login: [   49.608653][ T5770] cgroup: Unknown subsys name 'net'
[   49.694278][ T5770] cgroup: Unknown subsys name 'cpuset'
[   49.702535][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.718022][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.395976][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.395990][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.403729][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.403771][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.406982][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.410368][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.411844][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.414003][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.416109][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.418948][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.527176][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.536996][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.540412][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.543522][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.546978][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.760979][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   57.845248][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   57.913733][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.917549][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.920136][ T5840] bridge_slave_0: entered allmulticast mode
[   57.922763][ T5840] bridge_slave_0: entered promiscuous mode
[   57.931854][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.934587][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.937555][ T5840] bridge_slave_1: entered allmulticast mode
[   57.940683][ T5840] bridge_slave_1: entered promiscuous mode
[   58.013265][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.018948][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.068131][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.071008][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.073290][ T5838] bridge_slave_0: entered allmulticast mode
[   58.076076][ T5838] bridge_slave_0: entered promiscuous mode
[   58.081006][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   58.087351][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.090026][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.092842][ T5838] bridge_slave_1: entered allmulticast mode
[   58.097855][ T5838] bridge_slave_1: entered promiscuous mode
[   58.102835][ T5840] team0: Port device team_slave_0 added
[   58.120755][ T5840] team0: Port device team_slave_1 added
[   58.141589][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.182584][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.210728][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.213450][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.222115][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.244648][ T5838] team0: Port device team_slave_0 added
[   58.247554][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.250300][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.260867][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.281643][ T5838] team0: Port device team_slave_1 added
[   58.306035][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.309448][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.312500][ T5848] bridge_slave_0: entered allmulticast mode
[   58.316562][ T5848] bridge_slave_0: entered promiscuous mode
[   58.363802][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.366113][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.369769][ T5848] bridge_slave_1: entered allmulticast mode
[   58.372606][ T5848] bridge_slave_1: entered promiscuous mode
[   58.395542][ T5840] hsr_slave_0: entered promiscuous mode
[   58.399102][ T5840] hsr_slave_1: entered promiscuous mode
[   58.419849][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.424159][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.428228][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.439355][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.445845][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.449232][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.459203][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.465973][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.521880][ T5848] team0: Port device team_slave_0 added
[   58.545301][ T5848] team0: Port device team_slave_1 added
[   58.603576][ T5838] hsr_slave_0: entered promiscuous mode
[   58.608138][ T5838] hsr_slave_1: entered promiscuous mode
[   58.611037][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   58.613354][ T5838] Cannot create hsr debugfs directory
[   58.641791][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.643904][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.667282][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.672761][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.675061][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.685259][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.856384][ T5848] hsr_slave_0: entered promiscuous mode
[   58.865263][ T5848] hsr_slave_1: entered promiscuous mode
[   58.868732][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   58.871028][ T5848] Cannot create hsr debugfs directory
[   59.029114][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.055927][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.079900][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.103543][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.143630][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.164003][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.179205][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.186533][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.260186][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.269059][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.279814][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.287716][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.349729][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.392618][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   59.410728][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.413074][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.424252][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.427183][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.448283][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.488632][ T5842] Bluetooth: hci1: command tx timeout
[   59.491081][ T5842] Bluetooth: hci0: command tx timeout
[   59.499470][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   59.523849][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.529592][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.532451][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.553169][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.556058][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.574658][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   59.577665][ T5842] Bluetooth: hci2: command tx timeout
[   59.585467][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.587850][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.600779][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.603128][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.752282][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.827600][ T5840] veth0_vlan: entered promiscuous mode
[   59.835163][ T5840] veth1_vlan: entered promiscuous mode
[   59.891095][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.911266][ T5840] veth0_macvtap: entered promiscuous mode
[   59.922614][ T5840] veth1_macvtap: entered promiscuous mode
[   59.929726][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.962830][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.974556][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.000682][ T5838] veth0_vlan: entered promiscuous mode
[   60.009979][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.013095][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.031316][ T5719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.040606][ T5848] veth0_vlan: entered promiscuous mode
[   60.043171][ T5719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.051286][ T5838] veth1_vlan: entered promiscuous mode
[   60.088319][ T5848] veth1_vlan: entered promiscuous mode
[   60.121555][ T5838] veth0_macvtap: entered promiscuous mode
[   60.134084][ T5838] veth1_macvtap: entered promiscuous mode
[   60.178854][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.183491][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.188716][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.192291][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.229293][ T5848] veth0_macvtap: entered promiscuous mode
[   60.238427][ T5870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.250946][ T5870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.255269][ T5848] veth1_macvtap: entered promiscuous mode
[   60.262414][ T5870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.269342][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.270734][ T5870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.275161][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.326949][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.352141][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.374451][ T5719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.384065][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.395253][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.402503][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.413334][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.429254][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.432382][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.504900][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.509751][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.524609][ T5909] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   60.566224][ T5909] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.574575][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.581305][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.635967][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.644342][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.773169][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.820997][ T5920] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5'.
[   60.852198][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.852509][ T5926] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   60.862185][ T5920] Zero length message leads to an empty skb
[   60.887157][ T5929] tipc: Can't bind to reserved service type 1
[   60.899978][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   61.079303][ T5937] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   61.096411][ T5937] ipvlan2: entered allmulticast mode
[   61.100301][ T5937] bridge0: entered allmulticast mode
[   61.130948][ T5937] bridge0: port 3(gretap1) entered blocking state
[   61.133492][ T5937] bridge0: port 3(gretap1) entered disabled state
[   61.135588][ T5937] gretap1: entered allmulticast mode
[   61.139988][ T5937] gretap1: entered promiscuous mode
[   61.145905][ T5933] netlink: 'syz.1.9': attribute type 13 has an invalid length.
[   61.149397][ T5933] netlink: 'syz.1.9': attribute type 17 has an invalid length.
[   61.160944][ T5933] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   61.189460][ T5942] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   61.196338][ T5941] syzkaller1: entered promiscuous mode
[   61.198864][ T5941] syzkaller1: entered allmulticast mode
[   61.263582][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.358749][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   61.362156][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13'.
[   61.370364][ T5952] gtp0: entered promiscuous mode
[   61.472398][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'.
[   61.567320][ T5842] Bluetooth: hci0: command tx timeout
[   61.569414][ T5233] Bluetooth: hci1: command tx timeout
[   61.657936][ T5842] Bluetooth: hci2: command tx timeout
[   61.776465][ T5961] infiniband syz0: set active
[   61.783201][ T5961] infiniband syz0: added veth1_to_hsr
[   61.829972][ T5961] RDS/IB: syz0: added
[   61.832009][ T5961] smc: adding ib device syz0 with port count 1
[   61.851222][ T5966] sctp: [Deprecated]: syz.2.16 (pid 5966) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.851222][ T5966] Use struct sctp_sack_info instead
[   61.860484][ T5961] smc:    ib device syz0 port 1 has no pnetid
[   61.917342][ T5973] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   61.920126][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[   61.922805][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'.
[   62.050624][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   62.065124][ T5982] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   62.083378][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'.
[   63.120860][ T6029] netlink: 'syz.0.32': attribute type 21 has an invalid length.
[   63.173501][ T6029] netlink: 'syz.0.32': attribute type 21 has an invalid length.
[   63.176811][ T5719] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.194672][ T5870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.206819][ T5870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.211285][ T5870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.320482][ T6045] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.656890][ T5842] Bluetooth: hci0: command tx timeout
[   63.659136][ T5842] Bluetooth: hci1: command tx timeout
[   63.727347][ T5842] Bluetooth: hci2: command tx timeout
[   63.783926][ T6063] netlink: 'syz.0.42': attribute type 41 has an invalid length.
[   63.792649][ T6063] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   64.371699][ T6076] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   64.375059][ T6076] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   64.383243][ T6076] bond1: (slave vcan1): making interface the new active one
[   64.387650][ T6076] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   64.396460][ T6076] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[   64.402019][ T6076] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[   64.406573][ T6076] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.502921][ T6082] : entered promiscuous mode
[   64.585419][ T6088] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   64.682235][ T6094] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.883217][ T6106] bond2: (slave geneve2): making interface the new active one
[   64.886240][ T6106] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   64.889556][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   64.895780][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   64.902118][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   64.907206][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   65.263774][ T6118] ip6erspan0: entered allmulticast mode
[   65.516036][ T6128] macvlan2: entered promiscuous mode
[   65.528400][ T6128] macvlan2: entered allmulticast mode
[   65.729241][ T5842] Bluetooth: hci1: command tx timeout
[   65.729530][ T5233] Bluetooth: hci0: command tx timeout
[   65.787806][ T6144] __nla_validate_parse: 22 callbacks suppressed
[   65.787818][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'.
[   65.808373][ T5233] Bluetooth: hci2: command tx timeout
[   65.860590][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'.
[   65.928279][ T6149] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.937325][ T6140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'.
[   65.941786][ T6140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'.
[   66.097040][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'.
[   66.195009][ T6165] validate_nla: 4 callbacks suppressed
[   66.195041][ T6165] netlink: 'syz.2.69': attribute type 41 has an invalid length.
[   66.209570][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'.
[   66.244307][ T6165] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   66.382550][ T6171] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   66.394659][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   66.402291][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'.
[   66.427384][ T6175] team0: entered promiscuous mode
[   66.429426][ T6175] team_slave_0: entered promiscuous mode
[   66.431740][ T6175] team_slave_1: entered promiscuous mode
[   66.439794][ T6175] bond0: entered promiscuous mode
[   66.441783][ T6175] bond_slave_0: entered promiscuous mode
[   66.444160][ T6175] bond_slave_1: entered promiscuous mode
[   66.446468][ T6175] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   66.519231][ T6180] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   66.627523][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.70'.
[   66.780891][ T6194] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   66.832507][ T6194] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.838858][ T6194] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   66.910517][ T6201] netlink: 'syz.0.76': attribute type 1 has an invalid length.
[   66.912505][ T6194] gretap1: entered promiscuous mode
[   66.918318][ T6194] bond4: (slave gretap1): making interface the new active one
[   66.927257][ T6194] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   66.945556][ T6201] dvmrp1: tun_chr_ioctl cmd 1074025677
[   66.950218][ T6201] dvmrp1: linktype set to 805
[   67.099529][ T6209] netlink: 'syz.1.78': attribute type 10 has an invalid length.
[   67.256829][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   67.281502][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.380144][ T6219] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   67.430022][ T6219] 8021q: adding VLAN 0 to HW filter on device bond5
[   67.435833][ T6221] syzkaller0: entered promiscuous mode
[   67.442608][ T6221] syzkaller0: entered allmulticast mode
[   67.653794][ T6230] veth1_macvtap: left promiscuous mode
[   67.662793][ T6232] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[   67.824059][ T6241] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   67.832435][ T6241] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   67.896624][ T6248] geneve2: entered promiscuous mode
[   67.911475][ T6248] geneve2: entered allmulticast mode
[   67.984306][ T6254] bridge2: entered promiscuous mode
[   67.994630][ T6254] bridge2: entered allmulticast mode
[   68.005507][ T6254] team0: Port device bridge2 added
[   68.080178][ T6260] batman_adv: batadv0: Adding interface: dummy0
[   68.082167][ T6260] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.106845][ T6260] batman_adv: batadv0: Interface activated: dummy0
[   68.127748][ T6260] batadv0: mtu less than device minimum
[   68.130233][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.134319][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.138611][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.143127][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.147688][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.151701][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.155724][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.159720][ T6260] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   68.206446][ T6264] batman_adv: batadv0: Adding interface: ip6gretap1
[   68.210307][ T6264] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.222303][ T6264] batman_adv: batadv0: Interface activated: ip6gretap1
[   68.247183][ T6261] lo speed is unknown, defaulting to 1000
[   68.251404][ T6261] lo speed is unknown, defaulting to 1000
[   68.275140][ T6261] lo speed is unknown, defaulting to 1000
[   68.280698][ T6261] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.292481][ T6261] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.355992][ T6261] lo speed is unknown, defaulting to 1000
[   68.362356][ T6261] lo speed is unknown, defaulting to 1000
[   68.365137][ T6261] lo speed is unknown, defaulting to 1000
[   68.369246][ T6268] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   68.372027][ T6261] lo speed is unknown, defaulting to 1000
[   68.970180][ T6289] lo speed is unknown, defaulting to 1000
[   69.344394][ T6301] netlink: 'syz.1.103': attribute type 11 has an invalid length.
[   69.462324][ T6305] netlink: 'syz.1.104': attribute type 41 has an invalid length.
[   69.695078][ T6316] warning: `syz.0.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.852730][ T6313] team0: Port device team_slave_0 removed
[   69.970126][ T6331] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   70.183299][ T6325] lo speed is unknown, defaulting to 1000
[   70.272883][ T6343] : entered promiscuous mode
[   70.570940][ T6360] bond6: entered promiscuous mode
[   70.578598][ T6360] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.651143][ T6360] 8021q: adding VLAN 0 to HW filter on device bond7
[   70.656287][ T6360] bond6: (slave bond7): making interface the new active one
[   70.668179][ T6360] bond7: entered promiscuous mode
[   70.670890][ T6360] bond6: (slave bond7): Enslaving as an active interface with an up link
[   70.831775][ T6354] lo speed is unknown, defaulting to 1000
[   70.973719][ T6359] lo speed is unknown, defaulting to 1000
[   71.085733][ T6370] 8021q: adding VLAN 0 to HW filter on device bond3
[   71.169376][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.366171][ T6382] batman_adv: batadv0: Interface deactivated: dummy0
[   71.369934][ T6382] batman_adv: batadv0: Removing interface: dummy0
[   71.375121][ T6382] bridge_slave_0: left allmulticast mode
[   71.377425][ T6382] bridge_slave_0: left promiscuous mode
[   71.379712][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.381195][ T6384] validate_nla: 4 callbacks suppressed
[   71.381206][ T6384] netlink: 'syz.1.122': attribute type 6 has an invalid length.
[   71.389724][ T6382] bridge_slave_1: left allmulticast mode
[   71.391477][ T6382] bridge_slave_1: left promiscuous mode
[   71.393233][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.399477][ T6382] bond0: (slave bond_slave_0): Releasing backup interface
[   71.404518][ T6382] bond0: (slave bond_slave_1): Releasing backup interface
[   71.412418][ T6382] team0: Port device team_slave_0 removed
[   71.419085][ T6382] team0: Port device team_slave_1 removed
[   71.421336][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.424065][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.429371][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.431761][ T6382] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.501186][ T6382] ieee802154 phy1 wpan1: encryption failed: -22
[   71.512101][ T6382] team0: Mode changed to "loadbalance"
[   71.514734][ T6386] netlink: 'syz.1.122': attribute type 12 has an invalid length.
[   71.518391][ T6386] __nla_validate_parse: 26 callbacks suppressed
[   71.518398][ T6386] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.122'.
[   71.565209][ T6388] netlink: 'syz.0.123': attribute type 10 has an invalid length.
[   71.575772][ T6388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'.
[   71.581577][ T6388] dummy0: entered promiscuous mode
[   71.584521][ T6388] bridge0: port 1(dummy0) entered blocking state
[   71.587232][ T6388] bridge0: port 1(dummy0) entered disabled state
[   71.589797][ T6388] dummy0: entered allmulticast mode
[   71.594384][ T6388] bridge0: port 1(dummy0) entered blocking state
[   71.597022][ T6388] bridge0: port 1(dummy0) entered forwarding state
[   71.653974][ T6395] tipc: Started in network mode
[   71.656098][ T6395] tipc: Node identity 0000000000000000005885d6a76549cc, cluster identity 4711
[   71.661965][ T6395] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   71.694865][ T6401] pim6reg99999999: entered allmulticast mode
[   71.749195][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'.
[   71.754092][ T6408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'.
[   71.820879][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.824817][ T6414] netlink: 'syz.2.130': attribute type 20 has an invalid length.
[   71.832963][ T5870] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.839567][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.130'.
[   71.843932][ T5870] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.848231][ T5870] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.850917][ T6414] netlink: 'syz.2.130': attribute type 20 has an invalid length.
[   71.853284][ T5870] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.895317][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'.
[   71.901432][ T6420] netlink: 156 bytes leftover after parsing attributes in process `syz.0.133'.
[   71.904289][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[   72.295879][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   72.598228][ T6454] netlink: 'syz.1.142': attribute type 2 has an invalid length.
[   72.609203][ T6454] k*]: entered promiscuous mode
[   72.629945][ T6454] net_ratelimit: 34 callbacks suppressed
[   72.629966][ T6454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.636208][ T2304] lo speed is unknown, defaulting to 1000
[   72.642091][ T2304] syz1: Port: 1 Link ACTIVE
[   72.646450][ T6454] veth0_to_team: entered promiscuous mode
[   72.648652][ T6454] veth0_to_team: entered allmulticast mode
[   72.742475][ T6456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   72.752688][ T6456] gretap1: entered promiscuous mode
[   72.757615][ T6456] gretap1: entered allmulticast mode
[   72.846001][ T6466] trusted_key: syz.2.147 sent an empty control message without MSG_MORE.
[   72.855143][ T6466] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   72.860314][ T6467] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   72.873457][ T6467] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.989884][ T6473] IPVS: length: 141 != 8
[   73.060617][ T6482] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   73.134225][ T6486] dummy0: left allmulticast mode
[   73.150113][ T6486] bridge0: port 1(dummy0) entered disabled state
[   73.165696][ T6486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   73.385486][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.389391][ T6502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.451633][ T6504] netlink: 'syz.0.158': attribute type 2 has an invalid length.
[   73.465997][ T6504] k*]: entered promiscuous mode
[   73.487171][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.490448][ T6502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.505206][ T6504] dummy0: left promiscuous mode
[   73.509212][ T6504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.519932][ T6504] veth0_to_team: entered promiscuous mode
[   73.521842][ T6504] veth0_to_team: entered allmulticast mode
[   73.526872][ T6504] Illegal XDP return value 16128 on prog  (id 49) dev syz_tun, expect packet loss!
[   73.553777][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.565285][ T6502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.624574][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.629175][ T6502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.719388][ T6511] netlink: 'syz.1.160': attribute type 6 has an invalid length.
[   73.722499][ T5870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.724964][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.751620][ T5870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.754123][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.756874][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.759272][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.762153][ T5870] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.764948][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.824608][ T6517] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   73.834530][ T6517] 8021q: adding VLAN 0 to HW filter on device team0
[   73.842999][ T6517] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.851831][ T6517] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   73.856338][ T6517] bond1: option mode: unable to set because the bond device has slaves
[   74.428237][ T6545] lo speed is unknown, defaulting to 1000
[   74.562083][ T6556] veth0: entered promiscuous mode
[   74.592820][ T6559] veth0: left promiscuous mode
[   74.998097][ T6570] openvswitch: netlink: Missing valid actions attribute.
[   75.001616][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.006708][ T6576] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.030234][ T6576] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.032941][ T6576] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[   75.039363][ T6576] bond5: (slave vxcan3): Error -95 calling set_mac_address
[   75.132456][ T6584] vlan1: entered allmulticast mode
[   75.134413][ T6584] bridge0: entered allmulticast mode
[   75.136328][ T6584] bridge4: port 1(vlan1) entered blocking state
[   75.140329][ T6584] bridge4: port 1(vlan1) entered disabled state
[   75.144644][ T6584] vlan1: entered promiscuous mode
[   75.146322][ T6584] bridge0: entered promiscuous mode
[   75.442484][ T6604] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   75.483670][ T6606] nr0: entered promiscuous mode
[   75.485525][ T6606] nr0: entered allmulticast mode
[   75.633609][ T6618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.637687][ T6618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.755746][ T6619] 8021q: adding VLAN 0 to HW filter on device batadv1
[   75.759414][ T6619] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   75.762314][ T6619] team0: Failed to send options change via netlink (err -105)
[   75.764703][ T6619] team0: Port device batadv1 added
[   75.830513][ T6618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.834016][ T6618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.944914][ T6618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.949855][ T6618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.165965][ T6618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   76.169990][ T6618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.360059][ T5869] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.363301][ T5869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.379223][ T5869] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.382104][ T5869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.392449][ T5869] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.401081][ T5869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.410616][ T5869] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.413286][ T5869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.544166][ T6630] validate_nla: 4 callbacks suppressed
[   76.544177][ T6630] netlink: 'syz.0.194': attribute type 1 has an invalid length.
[   76.739418][ T6647] pim6reg1: entered promiscuous mode
[   76.741579][ T6647] pim6reg1: entered allmulticast mode
[   76.848981][ T6651] __nla_validate_parse: 23 callbacks suppressed
[   76.848992][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   77.023078][ T6654] lo speed is unknown, defaulting to 1000
[   77.218851][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'.
[   77.580765][ T6678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.208'.
[   77.612343][ T6680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.209'.
[   77.713515][ T6687] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   77.723268][ T6687] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   77.733845][ T6687] netlink: 'syz.1.210': attribute type 10 has an invalid length.
[   77.741465][ T6687] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   77.871964][ T6689] veth3: entered promiscuous mode
[   77.998168][ T6696] bridge_slave_0: left allmulticast mode
[   78.000060][ T6696] bridge_slave_0: left promiscuous mode
[   78.001899][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.008100][ T6696] bridge_slave_1: left allmulticast mode
[   78.009839][ T6696] bridge_slave_1: left promiscuous mode
[   78.011724][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.020451][ T6696] bond0: (slave bond_slave_0): Releasing backup interface
[   78.028904][ T6696] bond0: (slave bond_slave_1): Releasing backup interface
[   78.040780][ T6696] team0: Port device team_slave_1 removed
[   78.043881][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.051606][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.056087][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.059529][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.064188][ T6696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   78.550859][  T973] cfg80211: failed to load regulatory.db
[   78.834575][ T6715] netlink: 'syz.2.216': attribute type 1 has an invalid length.
[   78.840843][ T6715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   78.879273][ T6723] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   78.885572][ T6723] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[   78.893567][ T6723] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[   78.899369][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.915205][ T6724] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   78.930998][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.935134][ T6724] batadv0: entered promiscuous mode
[   78.938353][ T6724] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   78.944391][ T6724] netlink: 'syz.1.215': attribute type 10 has an invalid length.
[   78.948303][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.952112][ T6724] batadv0: entered allmulticast mode
[   78.967656][ T6724] bond0: (slave batadv0): Releasing backup interface
[   78.975590][ T6724] bridge0: port 3(batadv0) entered blocking state
[   78.980253][ T6724] bridge0: port 3(batadv0) entered disabled state
[   79.032301][ T6713] lo speed is unknown, defaulting to 1000
[   79.316080][    T9] syz0: Port: 1 Link DOWN
[   79.343219][ T5869] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.345933][ T5869] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.362735][ T5869] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.366133][ T5869] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.374932][ T5869] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.381073][ T5869] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.384562][ T5869] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   79.389368][ T5869] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.433778][ T6743] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   79.436505][ T6743] netlink: 208 bytes leftover after parsing attributes in process `syz.1.224'.
[   79.439786][ T6743] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   79.442404][ T6743] netlink: 'syz.1.224': attribute type 2 has an invalid length.
[   79.456021][ T5869] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   79.460282][ T5869] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   79.469785][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'.
[   79.646088][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.648695][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.811744][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.830943][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.964782][  T973] lo speed is unknown, defaulting to 1000
[   79.973579][  T973] syz1: Port: 1 Link DOWN
[   79.982842][ T6748] geneve3: entered promiscuous mode
[   79.984654][ T6748] geneve3: entered allmulticast mode
[   79.988514][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.995492][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.007830][   T12] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[   80.011153][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.027573][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.030905][   T12] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[   80.040312][ T6739] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.043636][ T6739] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.051539][ T6739] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[   80.054884][ T6739] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.062480][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[   80.065836][ T6739] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.072345][ T6739] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[   80.101537][ T6754] 8021q: adding VLAN 0 to HW filter on device bond8
[   80.109489][ T6759] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   80.181726][ T6763] netlink: 276 bytes leftover after parsing attributes in process `syz.1.229'.
[   80.217994][ T6764] 8021q: adding VLAN 0 to HW filter on device bond6
[   80.222670][ T6764] bond0: (slave bond6): Enslaving as an active interface with an up link
[   80.412594][ T6779] netlink: 'syz.1.236': attribute type 4 has an invalid length.
[   80.419059][ T6779] netlink: 'syz.1.236': attribute type 10 has an invalid length.
[   80.429311][ T6779] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   80.444219][ T6779] bridge0: port 3(batadv0) entered disabled state
[   80.450099][ T6779] bridge_slave_1: left allmulticast mode
[   80.451878][ T6779] bridge_slave_1: left promiscuous mode
[   80.453808][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.458583][ T6779] bridge_slave_0: left allmulticast mode
[   80.460466][ T6779] bridge_slave_0: left promiscuous mode
[   80.462300][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.483973][ T6779] bond0: (slave bridge0): Releasing backup interface
[   80.494263][ T6779] vlan1 (unregistering): left promiscuous mode
[   80.496250][ T6779] bridge0 (unregistering): left promiscuous mode
[   80.499981][ T6779] bridge4: port 1(vlan1) entered disabled state
[   80.664696][ T6776] lo speed is unknown, defaulting to 1000
[   80.839830][ T6784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   81.194909][ T6792] lo speed is unknown, defaulting to 1000
[   81.247500][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0
[   81.253082][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0
[   81.262994][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0
[   81.273411][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0
[   81.373290][ T6739] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.379678][ T6739] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.383218][ T6739] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.389077][ T6739] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.522544][ T6819] openvswitch: netlink: Key type 10512 is out of range max 32
[   81.531493][ T6819] veth2: entered allmulticast mode
[   81.671774][ T6824] validate_nla: 2 callbacks suppressed
[   81.671792][ T6824] netlink: 'syz.1.247': attribute type 1 has an invalid length.
[   81.701577][ T6824] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[   81.705679][ T6824] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   81.713651][ T6824] bond9: (slave vcan1): making interface the new active one
[   81.717530][ T6824] bond9: (slave vcan1): Enslaving as an active interface with an up link
[   81.730320][ T6824] bond9: (slave vcan2): The slave device specified does not support setting the MAC address
[   81.738394][ T6824] bond9: (slave vcan2): Enslaving as a backup interface with an up link
[   81.747742][ T6824] 8021q: adding VLAN 0 to HW filter on device bond9
[   82.300001][ T6857] __nla_validate_parse: 5 callbacks suppressed
[   82.300019][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   82.315885][ T6859] pimreg: entered allmulticast mode
[   82.325608][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'.
[   82.343922][ T6851] netlink: 'syz.2.256': attribute type 5 has an invalid length.
[   82.348021][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   82.353152][ T6851] pimreg: left allmulticast mode
[   82.426303][ T6863] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   82.481367][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'.
[   82.492669][ T6869] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   82.499719][ T6871] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   82.539341][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'.
[   82.595569][ T6880] netlink: 71 bytes leftover after parsing attributes in process `syz.1.264'.
[   82.641900][ T6888] netlink: 5 bytes leftover after parsing attributes in process `syz.1.265'.
[   82.712792][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'.
[   82.775975][ T6903] netlink: 'syz.1.267': attribute type 1 has an invalid length.
[   82.818374][ T6903] bond10: (slave vti0): The slave device specified does not support setting the MAC address
[   82.822482][ T6903] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   82.833987][ T6903] bond10: (slave vti0): making interface the new active one
[   82.837991][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.269'.
[   82.838412][ T6903] bond10: (slave vti0): Enslaving as an active interface with an up link
[   82.878486][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'.
[   82.896946][ T6910] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   82.956186][ T6918] bridge5: entered promiscuous mode
[   82.964370][ T6918] bridge5: entered allmulticast mode
[   83.074432][ T6925] netlink: 'syz.1.273': attribute type 10 has an invalid length.
[   83.083990][ T6925] dummy0: entered promiscuous mode
[   83.087977][ T6925] team0: Port device dummy0 added
[   83.102901][ T6929] geneve2: entered promiscuous mode
[   83.104638][ T6929] geneve2: entered allmulticast mode
[   83.185423][ T6932] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   83.225010][ T6934] netlink: 'syz.2.279': attribute type 1 has an invalid length.
[   83.244439][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.270827][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.273814][ T6934] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   83.281796][ T6934] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   83.296928][ T6938] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.300650][ T6938] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.392300][ T6938] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.396405][ T6938] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.454407][ T6938] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.458787][ T6938] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.542470][ T6938] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.553565][ T6938] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.641697][ T6739] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.645332][ T6739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.675588][ T6739] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.678470][ T6739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.686561][ T6970] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   83.710208][ T6739] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.712903][ T6739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.718669][ T6972] netlink: get zone limit has 8 unknown bytes
[   83.722357][ T6739] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.731214][ T6739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.771603][ T6972] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   83.824118][ T6977] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   84.092713][ T6974] lo speed is unknown, defaulting to 1000
[   84.339546][ T7007] lo speed is unknown, defaulting to 1000
[   84.603976][ T7027] tipc: Started in network mode
[   84.605976][ T7027] tipc: Node identity 52046fd28fbd, cluster identity 4711
[   84.615276][ T7027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.621415][ T7027] syzkaller0: entered promiscuous mode
[   84.623718][ T7027] syzkaller0: entered allmulticast mode
[   84.629229][ T7026] batadv_slave_0: entered promiscuous mode
[   84.680013][ T7020] lo speed is unknown, defaulting to 1000
[   85.155120][ T7028] lo speed is unknown, defaulting to 1000
[   85.328764][ T7023] tipc: Resetting bearer <eth:syzkaller0>
[   85.362158][ T7023] tipc: Disabling bearer <eth:syzkaller0>
[   85.551937][ T7043] netlink: 'syz.1.302': attribute type 10 has an invalid length.
[   85.592911][ T7045] openvswitch: netlink: Actions may not be safe on all matching packets
[   85.601153][ T7046] openvswitch: netlink: Actions may not be safe on all matching packets
[   85.652118][ T7049] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[   85.855857][ T7058] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[   85.882095][ T7058] bond2: entered promiscuous mode
[   85.884098][ T7058] bond2: entered allmulticast mode
[   85.886140][ T7058] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.898419][ T7058] bridge7: entered promiscuous mode
[   85.900732][ T7058] bridge7: entered allmulticast mode
[   85.903404][ T7058] bond2: (slave bridge7): Enslaving as a backup interface with an up link
[   85.992536][ T7064] 8021q: adding VLAN 0 to HW filter on device bond11
[   86.270073][ T7086] gretap1: left allmulticast mode
[   86.271945][ T7086] gretap1: left promiscuous mode
[   86.274068][ T7086] bridge0: port 3(gretap1) entered disabled state
[   86.378997][ T7085] bond12: entered promiscuous mode
[   86.391817][ T7085] veth5: entered promiscuous mode
[   86.401066][ T7085] bond12: (slave veth5): Enslaving as a backup interface with a down link
[   86.405549][ T7085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   87.381664][ T7103] __nla_validate_parse: 28 callbacks suppressed
[   87.381681][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'.
[   87.455295][ T7103] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   87.484191][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'.
[   87.574879][ T7113] validate_nla: 3 callbacks suppressed
[   87.574894][ T7113] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   87.610453][ T7113] 8021q: adding VLAN 0 to HW filter on device bond13
[   87.621205][ T7113] bond13: (slave wlan0): Enslaving as an active interface with a down link
[   87.637460][ T7113] vlan1: entered allmulticast mode
[   87.639534][ T7113] veth1: entered allmulticast mode
[   87.642172][ T7113] bond13: (slave vlan1): Opening slave failed
[   88.112433][ T7130] bond0: entered promiscuous mode
[   88.114938][ T7130] batadv0: entered promiscuous mode
[   88.118601][ T7130] debugfs: 'hsr1' already exists in 'hsr'
[   88.120507][ T7130] Cannot create hsr debugfs directory
[   88.122366][ T7130] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   88.125460][ T7130] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   88.131485][ T7130] 8021q: adding VLAN 0 to HW filter on device hsr1
[   88.140611][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.248660][ T7136] netlink: 'syz.2.330': attribute type 21 has an invalid length.
[   88.304049][ T7139] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   88.385378][ T7146] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.334'.
[   88.390287][ T7145] netlink: 348 bytes leftover after parsing attributes in process `syz.1.333'.
[   88.427407][ T7150] netlink: 10 bytes leftover after parsing attributes in process `syz.1.335'.
[   88.453734][ T7150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.490917][ T7153] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.493517][ T7153] batadv1: entered promiscuous mode
[   88.495666][ T7153] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   88.500703][ T7153] team0: Failed to send options change via netlink (err -105)
[   88.503269][ T7153] team0: Port device batadv1 added
[   88.536169][ T7150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.624540][ T7150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.707395][ T7150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   88.795674][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.810446][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.824399][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.839044][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.893001][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'.
[   88.916606][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'.
[   88.928236][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   89.075068][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'.
[   89.088307][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'.
[   89.184370][ T7190] lo speed is unknown, defaulting to 1000
[   89.243033][ T7202] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   89.548328][ T7231] tipc: Started in network mode
[   89.550244][ T7231] tipc: Node identity 5232e0a19e46, cluster identity 4711
[   89.553100][ T7231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.560044][ T7231] syzkaller0: entered promiscuous mode
[   89.562224][ T7231] syzkaller0: entered allmulticast mode
[   89.576915][ T7231] tipc: Resetting bearer <eth:syzkaller0>
[   89.583998][ T7230] tipc: Resetting bearer <eth:syzkaller0>
[   89.599376][ T7230] tipc: Disabling bearer <eth:syzkaller0>
[   89.680527][ T7238] bond7: entered promiscuous mode
[   89.682787][ T7238] 8021q: adding VLAN 0 to HW filter on device bond7
[   89.847410][ T7241] lo speed is unknown, defaulting to 1000
[   90.081855][ T7253] netlink: 'syz.0.355': attribute type 10 has an invalid length.
[   90.094206][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.106214][ T7253] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.118587][ T7253] netlink: 'syz.0.355': attribute type 10 has an invalid length.
[   90.124209][ T7253] batadv0: entered promiscuous mode
[   90.132095][ T7253] batadv0: entered allmulticast mode
[   90.158143][ T7253] bond0: (slave batadv0): Releasing backup interface
[   90.183266][ T7253] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   90.222328][ T7263] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   90.313676][ T7258] lo speed is unknown, defaulting to 1000
[   90.329679][ T7265] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[   90.682913][ T7284] netlink: 'syz.2.364': attribute type 5 has an invalid length.
[   90.729100][ T7284] geneve2: entered promiscuous mode
[   90.730983][ T7284] geneve2: entered allmulticast mode
[   90.737579][ T7291] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[   90.745414][ T5869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   90.750827][ T5869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   90.770689][ T7291] 8021q: adding VLAN 0 to HW filter on device team0
[   90.773967][ T7291] team0: entered promiscuous mode
[   90.777418][ T7291] bond0: (slave team0): Enslaving as an active interface with an up link
[   90.782238][ T5869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   90.788883][ T5869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   90.791862][ T7284] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[   90.807174][ T7284] syz_tun: entered promiscuous mode
[   90.817460][ T7284] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   91.083723][ T7300] team0 (unregistering): left promiscuous mode
[   91.085711][ T7300] team_slave_0: left promiscuous mode
[   91.091172][ T7300] team_slave_1: left promiscuous mode
[   91.094084][ T7300] dummy0: left promiscuous mode
[   91.096141][ T7300] batadv1: left promiscuous mode
[   91.100029][ T7300] team0 (unregistering): Port device team_slave_0 removed
[   91.103351][ T7300] team0 (unregistering): Port device team_slave_1 removed
[   91.107207][ T7300] team0 (unregistering): Port device bridge2 removed
[   91.114421][ T7300] team0 (unregistering): Port device dummy0 removed
[   91.126557][ T7300] team0 (unregistering): Port device batadv1 removed
[   91.326783][ T7303] lo speed is unknown, defaulting to 1000
[   91.360618][ T7314] netlink: 'syz.1.372': attribute type 1 has an invalid length.
[   91.575995][ T7301] lo speed is unknown, defaulting to 1000
[   91.676163][ T7325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.737012][ T7336] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[   91.884829][ T7346] openvswitch: netlink: Flow key attr not present in new flow.
[   92.023187][ T7361] batadv0: left allmulticast mode
[   92.031732][ T7361] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.154259][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.164006][  T973] lo speed is unknown, defaulting to 1000
[   92.166358][  T973] syz1: Port: 1 Link ACTIVE
[   92.534807][ T7384] __nla_validate_parse: 25 callbacks suppressed
[   92.534823][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'.
[   92.549341][ T7384] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   92.598878][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[   92.618727][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'.
[   92.632145][ T7386] bridge12: entered promiscuous mode
[   92.634747][ T7386] macsec0: entered promiscuous mode
[   92.638159][ T7386] macsec0: entered allmulticast mode
[   92.640366][ T7386] bridge12: entered allmulticast mode
[   92.643880][ T7386] bridge12: port 1(macsec0) entered blocking state
[   92.646793][ T7386] bridge12: port 1(macsec0) entered disabled state
[   92.652282][ T7386] bridge12: left allmulticast mode
[   92.654104][ T7386] bridge12: left promiscuous mode
[   92.779802][ T7391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.390'.
[   92.780906][ T7392] netlink: 'syz.2.391': attribute type 1 has an invalid length.
[   92.792694][ T7391] gretap2: entered allmulticast mode
[   92.838698][ T7392] veth7: entered promiscuous mode
[   92.856060][ T7399] netlink: 'syz.0.393': attribute type 2 has an invalid length.
[   92.866082][ T7400] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   92.872751][ T7399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.909927][ T7405] netlink: 'syz.2.394': attribute type 1 has an invalid length.
[   92.918956][ T7406] siw: device registration error -23
[   92.925627][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.395'.
[   92.940523][ T7405] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.962339][ T7405] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.965465][ T7405] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.972209][ T7405] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   93.195434][ T7420] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[   93.206896][ T7420] batadv0: left promiscuous mode
[   93.212044][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.221643][ T7420] batadv0: entered promiscuous mode
[   93.230383][ T7420] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.257064][ T7420] netlink: 'syz.1.399': attribute type 10 has an invalid length.
[   93.260047][ T7420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.399'.
[   93.263428][ T7420] batadv0: entered allmulticast mode
[   93.297426][ T7420] bond0: (slave batadv0): Releasing backup interface
[   93.360356][ T7420] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   93.632883][ T7418] lo speed is unknown, defaulting to 1000
[   93.839583][ T7447] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   93.883663][ T7447] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.909627][ T7450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   93.922495][ T7447] netlink: 44 bytes leftover after parsing attributes in process `syz.2.405'.
[   93.954546][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'.
[   94.007105][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   94.130370][ T7465] bond0: (slave syz_tun): Releasing backup interface
[   94.135154][ T7465] syz_tun: left promiscuous mode
[   94.138795][ T7465] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.164300][ T7465] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.175592][ T7470] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.197219][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[   94.297777][ T7469] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   94.355283][ T7469] 8021q: adding VLAN 0 to HW filter on device bond14
[   94.381510][ T7485] 8021q: adding VLAN 0 to HW filter on device bond14
[   94.384151][ T7485] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[   94.395253][ T7485] bond14: (slave vxcan3): Error -95 calling set_mac_address
[   94.434089][ T7469] bond14: (slave bridge13): Enslaving as an active interface with a down link
[   94.491486][ T7489] vlan1: entered allmulticast mode
[   94.493366][ T7489] gretap0: entered allmulticast mode
[   94.653571][ T7496] bond13: (slave wlan0): Releasing active interface
[   94.674358][ T7487] lo speed is unknown, defaulting to 1000
[   95.022207][ T7515] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   95.070159][ T7492] lo speed is unknown, defaulting to 1000
[   95.460880][ T7515] batadv_slave_0: entered promiscuous mode
[   95.775205][ T7546] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   95.949916][ T7541] bond8: (slave bridge9): making interface the new active one
[   95.953732][ T7541] bond8: (slave bridge9): Enslaving as an active interface with an up link
[   95.956879][ T7540] lo speed is unknown, defaulting to 1000
[   96.004130][ T7554] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   96.030481][ T7554] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   96.182001][ T7561] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   96.466727][ T7571] netlink: 'syz.2.437': attribute type 1 has an invalid length.
[   96.487572][ T7571] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.513773][ T7571] bond6: (slave veth9): Enslaving as an active interface with a down link
[   96.608181][ T7571] gretap4: entered promiscuous mode
[   96.613889][ T7571] bond6: (slave gretap4): making interface the new active one
[   96.617836][ T7571] bond6: (slave gretap4): Enslaving as an active interface with an up link
[   96.855955][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.858868][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.861321][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.873942][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.952610][ T7596] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   97.125575][ T7610] team0: Port device geneve0 added
[   97.188511][ T7615] veth4: entered allmulticast mode
[   97.510302][ T7639] rdma_rxe: rxe_newlink: failed to add lo
[   97.591669][ T7645] Bluetooth: MGMT ver 1.23
[   97.647794][ T7657] __nla_validate_parse: 16 callbacks suppressed
[   97.647814][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'.
[   97.653426][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'.
[   97.670063][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[   97.670317][ T7657] bond0: (slave team0): Releasing backup interface
[   97.677336][ T7657] team0: left promiscuous mode
[   97.681296][ T7657] bridge9: port 1(team0) entered blocking state
[   97.683973][ T7657] bridge9: port 1(team0) entered disabled state
[   97.686574][ T7657] team0: entered allmulticast mode
[   97.775808][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'.
[   97.783759][ T7662] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   97.823740][ T7667] bond1: (slave vcan3): The slave device specified does not support setting the MAC address
[   97.832593][ T7667] bond1: (slave vcan3): Enslaving as a backup interface with an up link
[   97.843122][ T7667] bond1: (slave vcan4): The slave device specified does not support setting the MAC address
[   97.852145][ T7667] bond1: (slave vcan4): Enslaving as a backup interface with an up link
[   98.059330][ T7675] validate_nla: 9 callbacks suppressed
[   98.059346][ T7675] netlink: 'syz.1.471': attribute type 10 has an invalid length.
[   98.245120][ T7683] netlink: 52 bytes leftover after parsing attributes in process `syz.1.473'.
[   98.249010][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.473'.
[   98.835600][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[   99.041246][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.052750][ T7708] bond0: (slave rose0): Enslaving as an active interface with an up link
[  101.413383][ T7706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.590113][ T7744] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[  101.625883][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.652208][ T7749] sit2: entered promiscuous mode
[  101.665023][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.677901][ T7755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.678324][ T7747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.768078][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'.
[  101.819059][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  101.825990][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.487'.
[  101.831040][ T7762] netlink: 'syz.2.487': attribute type 10 has an invalid length.
[  102.053840][ T7787] pim6reg: entered allmulticast mode
[  102.058878][ T7787] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  102.151124][ T7780] lo speed is unknown, defaulting to 1000
[  102.184295][ T7790] netlink: 'syz.0.492': attribute type 11 has an invalid length.
[  102.254689][ T7792] netlink: 'syz.0.493': attribute type 2 has an invalid length.
[  102.261981][ T7792] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  102.319492][ T7794] netlink: 'syz.0.494': attribute type 39 has an invalid length.
[  102.518920][ T7798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.694464][ T7805] __nla_validate_parse: 5 callbacks suppressed
[  102.694474][ T7805] netlink: 256 bytes leftover after parsing attributes in process `syz.1.497'.
[  102.711208][ T7805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.497'.
[  102.736319][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'.
[  102.753005][ T7809] netlink: 'syz.0.498': attribute type 10 has an invalid length.
[  102.760021][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'.
[  102.764412][ T7809] dummy0: entered promiscuous mode
[  102.767515][ T7809] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  102.787818][ T7807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.790706][ T7807] syzkaller0: entered promiscuous mode
[  102.792659][ T7807] syzkaller0: entered allmulticast mode
[  102.805036][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[  102.815668][ T7807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.499'.
[  102.835933][ T7806] tipc: Resetting bearer <eth:syzkaller0>
[  102.839885][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.500'.
[  102.843567][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[  102.853597][ T7806] tipc: Disabling bearer <eth:syzkaller0>
[  102.980709][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'.
[  103.005895][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'.
[  103.115887][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv1
[  103.123386][ T7828] batadv1: entered allmulticast mode
[  103.126206][ T7828] team0: Failed to send options change via netlink (err -105)
[  103.136531][ T7828] team0: Port device batadv1 added
[  103.140155][ T7833] batadv0: left allmulticast mode
[  103.143561][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.545124][ T7837] netlink: 'syz.1.507': attribute type 10 has an invalid length.
[  103.550498][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'.
[  103.554106][ T7837] dummy0: entered promiscuous mode
[  103.557197][ T7837] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  103.619081][ T5869] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  103.622810][ T5869] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  103.692880][ T7840] bridge18: entered promiscuous mode
[  103.695239][ T7840] macsec0: entered promiscuous mode
[  103.697660][ T7840] macsec0: entered allmulticast mode
[  103.699983][ T7840] bridge18: entered allmulticast mode
[  103.703774][ T7840] bridge18: port 1(macsec0) entered blocking state
[  103.706428][ T7840] bridge18: port 1(macsec0) entered disabled state
[  103.714183][ T7840] bridge18: left allmulticast mode
[  103.716610][ T7840] bridge18: left promiscuous mode
[  103.802012][ T7843] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.996057][ T7861] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[  104.047557][ T7861] bond8: (slave bridge12): making interface the new active one
[  104.051059][ T7861] bond8: (slave bridge12): Enslaving as an active interface with an up link
[  104.149413][ T7874] netlink: 'syz.2.516': attribute type 10 has an invalid length.
[  104.152613][ T7874] dummy0: entered promiscuous mode
[  104.156493][ T7874] bridge9: port 2(dummy0) entered blocking state
[  104.158868][ T7874] bridge9: port 2(dummy0) entered disabled state
[  104.161547][ T7874] dummy0: entered allmulticast mode
[  104.176232][ T7874] team0: entered promiscuous mode
[  104.178841][ T7874] batadv1: entered promiscuous mode
[  104.204496][ T7874] bridge9: port 2(dummy0) entered blocking state
[  104.208253][ T7874] bridge9: port 2(dummy0) entered forwarding state
[  104.331807][ T7856] lo speed is unknown, defaulting to 1000
[  104.660054][ T7900] netlink: 'syz.0.524': attribute type 10 has an invalid length.
[  104.714634][ T7902] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  104.826219][ T7909] tipc: Failed to remove unknown binding: 66,1,1/0:2987814343/2987814345
[  104.831981][ T7909] tipc: Failed to remove unknown binding: 66,1,1/0:2987814343/2987814345
[  104.880272][ T7909] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[  104.910018][ T7909] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.962688][ T7915] macvtap1: entered promiscuous mode
[  104.964834][ T7915] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  104.980408][ T7920] netlink: 'syz.0.529': attribute type 11 has an invalid length.
[  105.093532][ T7924] bridge0: entered allmulticast mode
[  105.123273][ T7926] netlink: 'syz.2.531': attribute type 11 has an invalid length.
[  105.215964][ T7936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.219005][ T7936] syzkaller0: entered promiscuous mode
[  105.220737][ T7936] syzkaller0: entered allmulticast mode
[  105.314902][ T7936] tipc: Resetting bearer <eth:syzkaller0>
[  105.344565][ T7936] tipc: Disabling bearer <eth:syzkaller0>
[  105.355311][ T6146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.359519][ T6146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.542964][ T5719] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  105.590825][ T7956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.609228][ T7954] bridge20: entered promiscuous mode
[  105.622644][ T7954] bridge20: entered allmulticast mode
[  105.805695][ T7964] netlink: 'syz.1.541': attribute type 7 has an invalid length.
[  106.448592][ T7973] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  106.456305][ T7973] macsec0: entered promiscuous mode
[  106.465006][ T7973] macsec0: entered allmulticast mode
[  106.467824][ T7973] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  106.651506][ T7991] bond10: entered promiscuous mode
[  106.653591][ T7991] 8021q: adding VLAN 0 to HW filter on device bond10
[  106.680371][ T7971] lo speed is unknown, defaulting to 1000
[  106.719215][ T7996] netlink: 'syz.0.551': attribute type 10 has an invalid length.
[  106.772282][ T8002] macvtap1: entered promiscuous mode
[  106.775788][ T8002] vlan0: entered promiscuous mode
[  106.780602][ T8002] macvtap1: entered allmulticast mode
[  106.782351][ T8002] vlan0: entered allmulticast mode
[  106.783927][ T8002] dummy0: entered allmulticast mode
[  106.793321][ T8002] netlink: 'syz.1.553': attribute type 3 has an invalid length.
[  106.804334][ T8004] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  106.887289][ T8012] netlink: 'syz.2.558': attribute type 4 has an invalid length.
[  107.003894][ T8010] tipc: Enabled bearer <eth:team0>, priority 0
[  107.191897][ T8032] vlan2: entered allmulticast mode
[  107.193625][ T8032] bond0: entered allmulticast mode
[  107.195799][ T8032] bond_slave_0: entered allmulticast mode
[  107.200865][ T8032] bond_slave_1: entered allmulticast mode
[  107.203405][ T8032] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  107.304546][ T8039] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[  107.304715][ T8037] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  107.435731][ T8048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.439770][ T8048] syzkaller0: entered promiscuous mode
[  107.442194][ T8048] syzkaller0: entered allmulticast mode
[  107.466371][ T8048] tipc: Resetting bearer <eth:syzkaller0>
[  107.491210][ T8047] tipc: Resetting bearer <eth:syzkaller0>
[  107.514130][ T8047] tipc: Disabling bearer <eth:syzkaller0>
[  107.714180][ T8058] syzkaller1: entered promiscuous mode
[  107.718896][ T8058] syzkaller1: entered allmulticast mode
[  107.735379][ T8051] lo speed is unknown, defaulting to 1000
[  107.843612][ T8058] 8021q: adding VLAN 0 to HW filter on device bond17
[  107.848296][ T8070] __nla_validate_parse: 32 callbacks suppressed
[  107.848315][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'.
[  107.854535][ T8070] net_ratelimit: 2 callbacks suppressed
[  107.854549][ T8070] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  108.127640][ T5892] tipc: Node number set to 3430211745
[  108.491219][ T8088] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.523943][ T8095] bond11: (slave ip6erspan0): making interface the new active one
[  108.532931][ T8095] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link
[  108.577598][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'.
[  108.677107][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'.
[  108.749409][ T8112] validate_nla: 3 callbacks suppressed
[  108.749422][ T8112] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[  108.856386][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.580'.
[  108.918370][ T8091] lo speed is unknown, defaulting to 1000
[  108.971308][ T8119] Bluetooth: MGMT ver 1.23
[  109.133857][ T8122] netlink: 'syz.2.582': attribute type 2 has an invalid length.
[  109.147658][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'.
[  109.398946][ T8130] bridge14: entered promiscuous mode
[  109.404995][ T8130] bridge14: entered allmulticast mode
[  109.411913][ T8130] team0: Port device bridge14 added
[  109.498310][ T8138] netlink: 'syz.0.584': attribute type 1 has an invalid length.
[  109.513266][ T8138] 8021q: adding VLAN 0 to HW filter on device bond11
[  109.544256][ T8138] bond11: (slave veth5): Enslaving as an active interface with a down link
[  109.553524][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  109.556174][ T8141] netlink: 140 bytes leftover after parsing attributes in process `syz.2.585'.
[  109.718825][ T8154] netlink: 'syz.2.588': attribute type 10 has an invalid length.
[  109.721641][ T8154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.588'.
[  109.778482][ T8156] netlink: 92 bytes leftover after parsing attributes in process `syz.2.589'.
[  109.783944][ T8156] bond0: Device is already in use.
[  109.844893][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'.
[  109.958847][ T8152] hsr_slave_0: left promiscuous mode
[  109.962066][ T8152] hsr_slave_1: left promiscuous mode
[  110.101529][ T8173] syzkaller1: entered promiscuous mode
[  110.103376][ T8171] netlink: 'syz.2.592': attribute type 10 has an invalid length.
[  110.103539][ T8173] syzkaller1: entered allmulticast mode
[  110.375184][ T8202] netlink: 'syz.2.599': attribute type 10 has an invalid length.
[  110.435895][ T8207] netlink: 'syz.1.600': attribute type 10 has an invalid length.
[  110.439912][ T8207] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  110.634394][ T8228] netlink: 'syz.0.607': attribute type 10 has an invalid length.
[  110.639803][ T8228] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  110.672476][ T8234] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[  110.704930][ T8234] 8021q: adding VLAN 0 to HW filter on device bond12
[  110.712701][ T8235] vlan0: entered promiscuous mode
[  110.714552][ T8235] bond12: entered promiscuous mode
[  110.719242][ T8235] vlan0: entered allmulticast mode
[  110.721356][ T8235] bond12: entered allmulticast mode
[  110.763344][ T8242] netlink: 'syz.0.610': attribute type 13 has an invalid length.
[  110.921910][ T8250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.925401][ T8250] syzkaller0: entered promiscuous mode
[  110.928380][ T8250] syzkaller0: entered allmulticast mode
[  110.962662][ T8249] tipc: Resetting bearer <eth:syzkaller0>
[  110.974104][ T8249] tipc: Disabling bearer <eth:syzkaller0>
[  111.212448][ T8261] siw: device registration error -23
[  111.471649][ T8288] 8021q: adding VLAN 0 to HW filter on device bond18
[  111.486535][ T8287] delete_channel: no stack
[  111.569490][ T8295] bridge9: port 1(team0) entered blocking state
[  111.572044][ T8295] bridge9: port 1(team0) entered forwarding state
[  111.574751][ T8295] 8021q: adding VLAN 0 to HW filter on device team0
[  111.577799][ T8295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  111.751295][ T8293] lo speed is unknown, defaulting to 1000
[  111.895364][ T8313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.981159][ T8313] tipc: Disabling bearer <eth:syzkaller0>
[  112.448809][ T8328] lo speed is unknown, defaulting to 1000
[  112.767708][ T8337] lo speed is unknown, defaulting to 1000
[  112.820608][ T8369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.986248][ T8375] can: request_module (can-proto-0) failed.
[  113.002932][ T8372] vlan0 (unregistering): left allmulticast mode
[  113.015742][ T8372] dummy0: left allmulticast mode
[  113.031713][ T8372] vlan0 (unregistering): left promiscuous mode
[  113.034500][ T8380] __nla_validate_parse: 21 callbacks suppressed
[  113.034553][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'.
[  113.098880][ T8379] bridge_slave_0: entered allmulticast mode
[  113.125168][ T8363] lo speed is unknown, defaulting to 1000
[  113.166572][ T8384] netlink: 76 bytes leftover after parsing attributes in process `syz.2.644'.
[  113.213367][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.645'.
[  113.264698][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'.
[  113.333395][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.646'.
[  113.349625][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'.
[  113.392918][ T8394] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  113.573148][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[  113.676350][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'.
[  113.719587][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'.
[  113.777646][ T8416] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  114.218803][ T8428] lo speed is unknown, defaulting to 1000
[  114.662501][ T8444] can: request_module (can-proto-0) failed.
[  114.677371][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[  114.713894][ T8444] validate_nla: 4 callbacks suppressed
[  114.713912][ T8444] netlink: 'syz.2.659': attribute type 10 has an invalid length.
[  114.724303][ T8444] bridge9: port 2(dummy0) entered disabled state
[  114.733453][ T8444] dummy0: left allmulticast mode
[  114.735055][ T8444] dummy0: left promiscuous mode
[  114.745783][ T8444] bridge9: port 2(dummy0) entered disabled state
[  114.749527][ T8444] team0: left promiscuous mode
[  114.766886][ T8450] netlink: 'syz.2.659': attribute type 10 has an invalid length.
[  114.782200][ T8444] dummy0: entered allmulticast mode
[  114.795148][ T8444] dummy0: entered promiscuous mode
[  114.803661][ T8444] team0: Port device dummy0 added
[  114.814756][ T8450] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  114.820602][ T8450] dummy0: left allmulticast mode
[  114.823853][ T8450] team0: Failed to send options change via netlink (err -105)
[  114.827138][ T8450] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  114.832301][ T8450] team0: Port device dummy0 removed
[  114.839538][ T8450] dummy0: left promiscuous mode
[  114.842664][ T8450] dummy0: entered promiscuous mode
[  114.845068][ T8450] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  115.012204][ T8462] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  115.020199][ T8462] bridge_slave_0: invalid flags given to default FDB implementation
[  115.024373][ T8462] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  115.068290][ T8463] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  115.394537][ T8494] pim6reg1: entered promiscuous mode
[  115.396215][ T8494] pim6reg1: entered allmulticast mode
[  115.441884][ T8494] dummy0: left promiscuous mode
[  115.445846][ T8494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.634340][ T8496] lo speed is unknown, defaulting to 1000
[  115.831588][ T8516] ==================================================================
[  115.834820][ T8516] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  115.837637][ T8516] Read of size 4 at addr ffff888011bd40c4 by task syz.1.679/8516
[  115.841832][ T8516] 
[  115.842828][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.1.679 Not tainted syzkaller #0 PREEMPT(full) 
[  115.842847][ T8516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.842858][ T8516] Call Trace:
[  115.842866][ T8516]  <TASK>
[  115.842874][ T8516]  dump_stack_lvl+0x189/0x250
[  115.842898][ T8516]  ? __kasan_check_byte+0x12/0x40
[  115.842924][ T8516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.842941][ T8516]  ? lock_release+0x4b/0x3e0
[  115.842965][ T8516]  ? __virt_addr_valid+0x4a5/0x5c0
[  115.842986][ T8516]  print_report+0xca/0x240
[  115.843001][ T8516]  ? xfrm_alloc_spi+0x570/0xf30
[  115.843020][ T8516]  kasan_report+0x118/0x150
[  115.843039][ T8516]  ? xfrm_alloc_spi+0x570/0xf30
[  115.843062][ T8516]  xfrm_alloc_spi+0x570/0xf30
[  115.843081][ T8516]  ? xfrm_alloc_spi+0x2a0/0xf30
[  115.843104][ T8516]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  115.843119][ T8516]  ? xfrm_find_acq+0x87/0xa0
[  115.843139][ T8516]  xfrm_alloc_userspi+0x70b/0xc90
[  115.843171][ T8516]  ? apparmor_capable+0x137/0x1b0
[  115.843190][ T8516]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  115.843213][ T8516]  ? __nla_parse+0x40/0x60
[  115.843257][ T8516]  xfrm_user_rcv_msg+0x7a3/0xab0
[  115.843281][ T8516]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  115.843316][ T8516]  ? __pfx___mutex_trylock_common+0x10/0x10
[  115.843335][ T8516]  ? rcu_is_watching+0x15/0xb0
[  115.843350][ T8516]  ? trace_contention_end+0x39/0x120
[  115.843365][ T8516]  ? __mutex_lock+0x335/0x1350
[  115.843383][ T8516]  netlink_rcv_skb+0x208/0x470
[  115.843400][ T8516]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  115.843419][ T8516]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.843439][ T8516]  ? netlink_deliver_tap+0x2e/0x1b0
[  115.843452][ T8516]  ? netlink_deliver_tap+0x2e/0x1b0
[  115.843466][ T8516]  xfrm_netlink_rcv+0x79/0x90
[  115.843484][ T8516]  netlink_unicast+0x82f/0x9e0
[  115.843508][ T8516]  ? __pfx_netlink_unicast+0x10/0x10
[  115.843529][ T8516]  ? netlink_sendmsg+0x642/0xb30
[  115.843542][ T8516]  ? skb_put+0x11b/0x210
[  115.843558][ T8516]  netlink_sendmsg+0x805/0xb30
[  115.843576][ T8516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.843592][ T8516]  ? aa_sock_msg_perm+0xf1/0x1d0
[  115.843605][ T8516]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  115.843621][ T8516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.843635][ T8516]  __sock_sendmsg+0x21c/0x270
[  115.843656][ T8516]  ____sys_sendmsg+0x505/0x830
[  115.843674][ T8516]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.843693][ T8516]  ? import_iovec+0x74/0xa0
[  115.843710][ T8516]  ___sys_sendmsg+0x21f/0x2a0
[  115.843727][ T8516]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.843757][ T8516]  ? __fget_files+0x2a/0x420
[  115.843769][ T8516]  ? __fget_files+0x3a0/0x420
[  115.843785][ T8516]  __x64_sys_sendmsg+0x19b/0x260
[  115.843802][ T8516]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  115.843822][ T8516]  ? rcu_is_watching+0x15/0xb0
[  115.843838][ T8516]  ? do_syscall_64+0xbe/0x3b0
[  115.843855][ T8516]  do_syscall_64+0xfa/0x3b0
[  115.843870][ T8516]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.843884][ T8516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.843897][ T8516]  ? exc_page_fault+0x9f/0xf0
[  115.843910][ T8516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.843924][ T8516] RIP: 0033:0x7fea4178eba9
[  115.843939][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.843953][ T8516] RSP: 002b:00007fea425c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.843970][ T8516] RAX: ffffffffffffffda RBX: 00007fea419d5fa0 RCX: 00007fea4178eba9
[  115.843982][ T8516] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005
[  115.843991][ T8516] RBP: 00007fea41811e19 R08: 0000000000000000 R09: 0000000000000000
[  115.844000][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.844009][ T8498] lo speed is unknown, defaulting to 1000
[  115.844010][ T8516] R13: 00007fea419d6038 R14: 00007fea419d5fa0 R15: 00007ffe03f6f578
[  115.844029][ T8516]  </TASK>
[  115.844035][ T8516] 
[  115.978670][ T8516] The buggy address belongs to the physical page:
[  115.981075][ T8516] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888011bd4480 pfn:0x11bd4
[  115.984933][ T8516] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  115.987461][ T8516] raw: 00fff00000000000 ffffea00008c7b08 ffffea000101d008 0000000000000000
[  115.990154][ T8516] raw: ffff888011bd4480 00000000000e0000 00000000ffffffff 0000000000000000
[  115.992774][ T8516] page dumped because: kasan: bad access detected
[  115.994773][ T8516] page_owner tracks the page as freed
[  115.996359][ T8516] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6094, tgid 6093 (syz.1.52), ts 64668899084, free_ts 97867420064
[  116.002334][ T8516]  post_alloc_hook+0x240/0x2a0
[  116.003817][ T8516]  get_page_from_freelist+0x21e4/0x22c0
[  116.005539][ T8516]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.007439][ T8516]  alloc_pages_mpol+0x232/0x4a0
[  116.009003][ T8516]  allocate_slab+0x8a/0x370
[  116.010767][ T8516]  ___slab_alloc+0xbeb/0x1420
[  116.012644][ T8516]  kmem_cache_alloc_noprof+0x283/0x3c0
[  116.014764][ T8516]  xfrm_state_alloc+0x24/0x2f0
[  116.016546][ T8516]  __find_acq_core+0x8a7/0x1c00
[  116.018060][ T8516]  xfrm_find_acq+0x78/0xa0
[  116.019660][ T8516]  xfrm_alloc_userspi+0x6b3/0xc90
[  116.021571][ T8516]  xfrm_user_rcv_msg+0x7a3/0xab0
[  116.023556][ T8516]  netlink_rcv_skb+0x208/0x470
[  116.025421][ T8516]  xfrm_netlink_rcv+0x79/0x90
[  116.027049][ T8516]  netlink_unicast+0x82f/0x9e0
[  116.028889][ T8516]  netlink_sendmsg+0x805/0xb30
[  116.030799][ T8516] page last free pid 7667 tgid 7659 stack trace:
[  116.033193][ T8516]  __free_frozen_pages+0xbc4/0xd30
[  116.035001][ T8516]  __slab_free+0x303/0x3c0
[  116.036425][ T8516]  qlist_free_all+0x97/0x140
[  116.037842][ T8516]  kasan_quarantine_reduce+0x148/0x160
[  116.039701][ T8516]  __kasan_slab_alloc+0x22/0x80
[  116.041403][ T8516]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  116.043699][ T8516]  __alloc_skb+0x112/0x2d0
[  116.045087][ T8516]  alloc_skb_with_frags+0xca/0x890
[  116.046798][ T8516]  sock_alloc_send_pskb+0x857/0x990
[  116.048593][ T8516]  unix_stream_sendmsg+0x4bd/0xdf0
[  116.050306][ T8516]  __sock_sendmsg+0x21c/0x270
[  116.051929][ T8516]  ____sys_sendmsg+0x505/0x830
[  116.053509][ T8516]  ___sys_sendmsg+0x21f/0x2a0
[  116.054970][ T8516]  __x64_sys_sendmsg+0x19b/0x260
[  116.056517][ T8516]  do_syscall_64+0xfa/0x3b0
[  116.057909][ T8516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.059733][ T8516] 
[  116.060503][ T8516] Memory state around the buggy address:
[  116.062232][ T8516]  ffff888011bd3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  116.064696][ T8516]  ffff888011bd4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  116.067295][ T8516] >ffff888011bd4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  116.069860][ T8516]                                            ^
[  116.071781][ T8516]  ffff888011bd4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  116.074675][ T8516]  ffff888011bd4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  116.077352][ T8516] ==================================================================
[  116.080573][ T8516] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  116.083594][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.1.679 Not tainted syzkaller #0 PREEMPT(full) 
[  116.086764][ T8516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.089996][ T8516] Call Trace:
[  116.091382][ T8516]  <TASK>
[  116.092547][ T8516]  dump_stack_lvl+0x99/0x250
[  116.094398][ T8516]  ? __asan_memcpy+0x40/0x70
[  116.095806][ T8516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.097341][ T8516]  ? __pfx__printk+0x10/0x10
[  116.098729][ T8516]  vpanic+0x281/0x750
[  116.099990][ T8516]  ? __pfx_vpanic+0x10/0x10
[  116.101427][ T8516]  ? irqentry_exit+0x74/0x90
[  116.102889][ T8516]  panic+0xb9/0xc0
[  116.104058][ T8516]  ? __pfx_panic+0x10/0x10
[  116.105448][ T8516]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  116.107197][ T8516]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  116.109069][ T8516]  ? xfrm_alloc_spi+0x570/0xf30
[  116.110613][ T8516]  check_panic_on_warn+0x89/0xb0
[  116.112158][ T8516]  ? xfrm_alloc_spi+0x570/0xf30
[  116.113708][ T8516]  end_report+0x78/0x160
[  116.115055][ T8516]  kasan_report+0x129/0x150
[  116.116470][ T8516]  ? xfrm_alloc_spi+0x570/0xf30
[  116.118329][ T8516]  xfrm_alloc_spi+0x570/0xf30
[  116.120002][ T8516]  ? xfrm_alloc_spi+0x2a0/0xf30
[  116.121544][ T8516]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  116.123165][ T8516]  ? xfrm_find_acq+0x87/0xa0
[  116.124613][ T8516]  xfrm_alloc_userspi+0x70b/0xc90
[  116.126175][ T8516]  ? apparmor_capable+0x137/0x1b0
[  116.127776][ T8516]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  116.129488][ T8516]  ? __nla_parse+0x40/0x60
[  116.130899][ T8516]  xfrm_user_rcv_msg+0x7a3/0xab0
[  116.132467][ T8516]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  116.134499][ T8516]  ? __pfx___mutex_trylock_common+0x10/0x10
[  116.136527][ T8516]  ? rcu_is_watching+0x15/0xb0
[  116.138051][ T8516]  ? trace_contention_end+0x39/0x120
[  116.139927][ T8516]  ? __mutex_lock+0x335/0x1350
[  116.141742][ T8516]  netlink_rcv_skb+0x208/0x470
[  116.143303][ T8516]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  116.145252][ T8516]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  116.147079][ T8516]  ? netlink_deliver_tap+0x2e/0x1b0
[  116.148742][ T8516]  ? netlink_deliver_tap+0x2e/0x1b0
[  116.150487][ T8516]  xfrm_netlink_rcv+0x79/0x90
[  116.152117][ T8516]  netlink_unicast+0x82f/0x9e0
[  116.153854][ T8516]  ? __pfx_netlink_unicast+0x10/0x10
[  116.155798][ T8516]  ? netlink_sendmsg+0x642/0xb30
[  116.157504][ T8516]  ? skb_put+0x11b/0x210
[  116.158846][ T8516]  netlink_sendmsg+0x805/0xb30
[  116.160585][ T8516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.162608][ T8516]  ? aa_sock_msg_perm+0xf1/0x1d0
[  116.164229][ T8516]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  116.166223][ T8516]  ? __pfx_netlink_sendmsg+0x10/0x10
[  116.168183][ T8516]  __sock_sendmsg+0x21c/0x270
[  116.170040][ T8516]  ____sys_sendmsg+0x505/0x830
[  116.171678][ T8516]  ? __pfx_____sys_sendmsg+0x10/0x10
[  116.173340][ T8516]  ? import_iovec+0x74/0xa0
[  116.174739][ T8516]  ___sys_sendmsg+0x21f/0x2a0
[  116.176392][ T8516]  ? __pfx____sys_sendmsg+0x10/0x10
[  116.177982][ T8516]  ? __fget_files+0x2a/0x420
[  116.179437][ T8516]  ? __fget_files+0x3a0/0x420
[  116.180946][ T8516]  __x64_sys_sendmsg+0x19b/0x260
[  116.182546][ T8516]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  116.184264][ T8516]  ? rcu_is_watching+0x15/0xb0
[  116.185750][ T8516]  ? do_syscall_64+0xbe/0x3b0
[  116.187260][ T8516]  do_syscall_64+0xfa/0x3b0
[  116.188812][ T8516]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.190638][ T8516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.192522][ T8516]  ? exc_page_fault+0x9f/0xf0
[  116.193999][ T8516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.195852][ T8516] RIP: 0033:0x7fea4178eba9
[  116.197281][ T8516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.204437][ T8516] RSP: 002b:00007fea425c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  116.207177][ T8516] RAX: ffffffffffffffda RBX: 00007fea419d5fa0 RCX: 00007fea4178eba9
[  116.209665][ T8516] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005
[  116.212148][ T8516] RBP: 00007fea41811e19 R08: 0000000000000000 R09: 0000000000000000
[  116.214640][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.217064][ T8516] R13: 00007fea419d6038 R14: 00007fea419d5fa0 R15: 00007ffe03f6f578
[  116.219881][ T8516]  </TASK>
[  116.221828][ T8516] Kernel Offset: disabled
[  116.223444][ T8516] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:56:40  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff9200061fe74 RBX=ffffc900030ff3a0 RCX=1ffff9200061fe01 RDX=0000000000000010
RSI=0000000000000000 RDI=ffffc900030ff3b8 RBP=dffffc0000000000 RSP=ffffc900030ff228
R8 =0000000000000009 R9 =ffffffff8172c195 R10=ffffc900030ff368 R11=fffff5200061fe79
R12=ffffc900030ff368 R13=ffffc900030ff3b8 R14=ffffc900030ff368 R15=ffffc900030ff3b0
RIP=ffffffff82232505 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fea425056c0 CR3=000000012fd8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=60fc2402f994258c 64805ad2630b0016
XMM02=00000008000003b7 fffffff800000207 XMM03=000000c300000085 00000000000004b7
XMM04=95000000c3000000 8500000000000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b007abc00000008 b700000000000000
XMM08=6c2c0529f5a5dc60 9815346805344c4d XMM09=0000000000000000 00007f61e4612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012a7 RDI=00000000000012a8 RBP=00000000000003f8 RSP=ffffc9000627e9f0
R8 =ffff888106628237 R9 =1ffff11020cc5046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01913 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fea425c06c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000150 CR3=000000003881a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fea419a7498 00007fea419a7470 XMM03=00007fea419a74a8 00007fea419a74a0
XMM04=00007fea4250d100 00007fea419a7460 XMM05=00007fea419a7478 00007fea419a74c0
XMM06=00007fea419a74b8 00007fea419a74b0 XMM07=00007fea419a74a8 00007fea419a74a0
XMM08=0000000000000000 00007fea41812ee7 XMM09=0000000000000000 00007fea41812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
