last executing test programs:

2.725682767s ago: executing program 1 (id=1507):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x0, 0xfff0}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

2.640288068s ago: executing program 1 (id=1509):
socket(0xa, 0x3, 0x3a)
socket$key(0xf, 0x3, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c21", 0xc7}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r3, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227}, {&(0x7f0000000200)=""/210}, {&(0x7f0000000300)=""/169}, {&(0x7f00000003c0)=""/152}, {&(0x7f0000000480)=""/4096}, {&(0x7f0000001480)=""/4096}, {&(0x7f0000002480)=""/136}, {&(0x7f0000002540)=""/157}, {&(0x7f0000002600)=""/111}], 0x0, &(0x7f0000003f40)=""/253}}, {{&(0x7f0000002840)=@tipc=@name, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)=""/193}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096}, {&(0x7f0000003a80)=""/253}, {&(0x7f0000003b80)=""/215}, {&(0x7f0000003c80)=""/166}], 0x0, &(0x7f0000003ec0)=""/91}}], 0x4f, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000003080))
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x40, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.971810955s ago: executing program 2 (id=1525):
socketpair(0x26, 0x1, 0x6, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0xd, 0x3, 0x1, 0x12, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7, 0x2b, 0xfffffffd}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', <r4=>0x0, 0x40, 0x8, 0x1, 0x6, {{0x25, 0x4, 0x0, 0x2f, 0x94, 0x64, 0x0, 0xa7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0xa, "60bfb935ad054447"}, {0x0, 0x2}, {0x1, 0x7, "655be2829e"}, {0x2, 0x10, "60ade7dfd919e47792764c7e9120"}, {0x0, 0x10, "63accb3144eac3b3735bc5ae3a37"}, {0x5, 0x7, "0fb5da7518"}, {0x6, 0x10, "ea82ca3f966543490859582b6e09"}, {0x6, 0xa, "b2e5ec66793245c7"}]}, @timestamp_prespec={0x44, 0x24, 0x81, 0x3, 0x4, [{@loopback, 0x2}, {@loopback, 0xe}, {@loopback, 0x9}, {@multicast2, 0x4}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r5=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@local, @multicast2, <r6=>0x0}, &(0x7f0000000300)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'gre0\x00', <r8=>0x0, 0x80, 0x10, 0x0, 0x3ab, {{0x11, 0x4, 0x0, 0x3e, 0x44, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x1f, 0xef, [@remote, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2]}, @rr={0x7, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x29}]}, @ssrr={0x89, 0x7, 0xcd, [@multicast2]}, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000004}, 0x50)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000740)=[@window={0x3, 0x7ff, 0x8001}, @mss], 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x9, 0x81, 0xfb, 0x9}, {0xf800, 0x6, 0x1, 0xfa7}, {0x5d, 0x81, 0x4, 0x544b}, {0x6, 0xc6, 0x8, 0x5}, {0x566, 0x37, 0x6, 0x8001}]}, 0x10)
r10 = socket$unix(0x1, 0x5, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000800)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4)
r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r11, 0xc008af7b, &(0x7f0000000940)={0x1, 0x4})
connect$unix(r1, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r12, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x39}, @void, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x24004010)
setsockopt(r10, 0xd7, 0x8, &(0x7f0000000b80)="ebee508964eaa9d52e05f94292d29db414d44f499c20f7c151576db12668a755654d22f9dfeadac36fac18064abe6d52fc5b81b7a5173bea442d1245041237", 0x3f)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4400002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44800)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000010c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000d80)={0x2ec, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd55}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5eb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x62}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "06baed40124cbbe6ba854e7cb608dfcddd1d3e189cb631c8afad5685fb11e1f07c"}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6cbc55b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @local, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb1}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x585}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1d363628b03fa604e481247b94504239b2de548f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "750f9070d79f42edda1b2e81a924b1c7c05a7c17e24f"}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0xc4}, 0x4040000)
setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000011c0)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x2, 0x2, 0x4}}, {&(0x7f0000001100)=""/118, 0x76}, &(0x7f0000001180), 0x89}, 0xa0)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001380)={'ip6tnl0\x00', &(0x7f0000001300)={'syztnl2\x00', <r16=>r7, 0x29, 0x0, 0x9, 0x6, 0x42, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8, 0x700, 0x1}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, r15, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44080)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001580)={0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)

1.971055725s ago: executing program 2 (id=1526):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="270e283d8437da000400010000000900010073797a3200"], 0x34}, 0x1, 0x400300f0ffffff}, 0x0)

1.929206566s ago: executing program 2 (id=1527):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x3a, 0x0, 0x82}, 0x2c)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
shutdown(r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28d}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000a00000000000000000000000000266b00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r4], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="000000000000000065404d7900000000850000002f000000b7090000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000d00)=r6, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000091bb00005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002009300000000800000000001000000000200000000000000aa000000000d0001007264703a73c7087122285c6f488b7f26e5b1cd5d3bbf20a07574b14305caad55542522a1c34d765dcd47ff6d3f84146ac836911aabe0baf24a41cc1ece03ff0ad27181eb71a41adec84a7cfd95d7a37275bb24856a2f7c1419ceeafd2ff98e28a18e6ce071bc478c32c837eaf99d09e8e5e6e0abb9a8d5430527a932d4dba97a4e"], 0x6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.742115038s ago: executing program 1 (id=1528):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x58000000}}}}]}]}, 0x70}}, 0x0)

1.691929554s ago: executing program 1 (id=1529):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r4, 0x1ad72f7)
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="00ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
accept4$netrom(r4, 0x0, 0x0, 0x80000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0)

970.959769ms ago: executing program 2 (id=1534):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket(0x10, 0x80002, 0x0)
socket(0x200000000000011, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3, 0xa000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

830.959473ms ago: executing program 1 (id=1535):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000040), 0x0}, 0x20)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r5, 0x1ad72f7)
socket$igmp6(0xa, 0x3, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="00ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
accept4$netrom(r5, 0x0, 0x0, 0x80000)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

291.463257ms ago: executing program 0 (id=1537):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x1000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x98, r3, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x100, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
connect(r1, &(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x80)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1004, r5}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r4}, 0x66)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000110000000000000200000000000009000000000600150006000000200016801c0002f5"], 0x44}}, 0x44890)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'wg2\x00', @local})
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
write$cgroup_devices(r7, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48)

222.376205ms ago: executing program 0 (id=1538):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f0000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x48, 0xf0, 0x1}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)

222.065995ms ago: executing program 0 (id=1539):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x5, 0x84)
pipe(&(0x7f0000000040))
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x2000000}, 0x0)

221.985661ms ago: executing program 0 (id=1540):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102000000000000008100000000", @ANYRES32=0x0, @ANYBLOB="a570222abb2b5973aaac310dc0de7d02874a5423d24faf8dd21a652179623b7dfcb8b6912af14c4a1f99479332ae70e3ee1fd6d8a08456541610ca96f155764af5e9b6e616d217b9a3e674c1ed3f"], 0x1c}}, 0x0)

142.141831ms ago: executing program 0 (id=1541):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
unshare(0x22020400) (async)
unshare(0x22020400)
r2 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0x2) (async)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r3}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000340)="07000000010000", 0x7)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={r6, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x2, 0xd, 0x4c9, 0xa, 0x7fffffff, 0x1ff, 0x6, 0x47, 0xffffffffffffff64, 0x7, 0x0, 0xfd, 0x4, 0x6, 0x9]}, &(0x7f0000000840)=0x100) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={r6, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x2, 0xd, 0x4c9, 0xa, 0x7fffffff, 0x1ff, 0x6, 0x47, 0xffffffffffffff64, 0x7, 0x0, 0xfd, 0x4, 0x6, 0x9]}, &(0x7f0000000840)=0x100)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r9}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

50.814848ms ago: executing program 0 (id=1542):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020101080000000000c40000060ad7da5300000a0800034000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x1000) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020101080000000000c40000060ad7da5300000a0800034000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x1000)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$isdn_base(0x22, 0x3, 0x0) (async)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x27, &(0x7f00000020c0)=""/44, &(0x7f0000002100)=0x2c)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="7bd4afb0ac32f6ba8375f92663abfc8c3fdc7fc9fc3b231c14cf7f57a7c027d4050fdc784dfa9ed0cc97477b0d4ea3d4494353dfc17101e02ee7a5b03a19f559fc18", 0x42)
r6 = epoll_create1(0x0)
socket$rxrpc(0x21, 0x2, 0x2) (async)
r7 = socket$rxrpc(0x21, 0x2, 0x2)
epoll_pwait(r6, &(0x7f0000000080)=[{}], 0x1, 0x81, 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x50, r7, 0xe92f6000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0x50000013})

508.039µs ago: executing program 2 (id=1543):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r2)

265.243µs ago: executing program 2 (id=1544):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x40}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x40080)

0s ago: executing program 1 (id=1545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'vxcan1\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value=0x6000000}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26149' (ED25519) to the list of known hosts.
syzkaller login: [   48.612984][ T5784] cgroup: Unknown subsys name 'net'
[   48.730123][ T5784] cgroup: Unknown subsys name 'cpuset'
[   48.739432][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.342296][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.037226][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.052540][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.055912][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.058920][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.062140][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.065144][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.068866][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.071496][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.073955][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.075760][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.077622][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.081957][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.085016][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.088505][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.091034][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.339943][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.379698][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.432644][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.496422][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.500320][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.503530][ T5841] bridge_slave_0: entered allmulticast mode
[   55.507995][ T5841] bridge_slave_0: entered promiscuous mode
[   55.560914][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.564026][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.567194][ T5841] bridge_slave_1: entered allmulticast mode
[   55.571007][ T5841] bridge_slave_1: entered promiscuous mode
[   55.613048][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.616492][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.621943][ T5849] bridge_slave_0: entered allmulticast mode
[   55.625863][ T5849] bridge_slave_0: entered promiscuous mode
[   55.659758][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.662315][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.664745][ T5849] bridge_slave_1: entered allmulticast mode
[   55.667889][ T5849] bridge_slave_1: entered promiscuous mode
[   55.672868][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.678405][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.681454][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.684583][ T5845] bridge_slave_0: entered allmulticast mode
[   55.689092][ T5845] bridge_slave_0: entered promiscuous mode
[   55.707444][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.711477][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.714473][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.719127][ T5845] bridge_slave_1: entered allmulticast mode
[   55.722953][ T5845] bridge_slave_1: entered promiscuous mode
[   55.776447][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.789793][ T5841] team0: Port device team_slave_0 added
[   55.793304][ T5841] team0: Port device team_slave_1 added
[   55.803756][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.809478][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.818130][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.834527][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.839357][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.851090][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.880348][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.883296][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.895667][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.934173][ T5845] team0: Port device team_slave_0 added
[   55.946172][ T5849] team0: Port device team_slave_0 added
[   55.950968][ T5845] team0: Port device team_slave_1 added
[   55.963930][ T5849] team0: Port device team_slave_1 added
[   55.969997][ T5841] hsr_slave_0: entered promiscuous mode
[   55.972360][ T5841] hsr_slave_1: entered promiscuous mode
[   56.024835][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.027779][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.038309][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.043278][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.046200][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.058658][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.078603][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.080876][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.090092][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.095266][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.100204][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.110860][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.223723][ T5849] hsr_slave_0: entered promiscuous mode
[   56.227664][ T5849] hsr_slave_1: entered promiscuous mode
[   56.230506][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.232923][ T5849] Cannot create hsr debugfs directory
[   56.240184][ T5845] hsr_slave_0: entered promiscuous mode
[   56.243369][ T5845] hsr_slave_1: entered promiscuous mode
[   56.246250][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.249666][ T5845] Cannot create hsr debugfs directory
[   56.410312][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.424580][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.452268][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.457801][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.573037][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.580311][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.587934][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.599788][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.645951][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.651954][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.662177][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.670725][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.717950][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.752243][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.770260][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.773366][ T1913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.787975][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.796144][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.798816][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.820555][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.836969][ T1913] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.839889][ T1913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.844536][ T1913] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.847593][ T1913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.891214][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.938695][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.999153][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.001970][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.019891][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.022866][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.059995][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.063464][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.079814][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.109292][ T5846] Bluetooth: hci2: command tx timeout
[   57.128008][ T5841] veth0_vlan: entered promiscuous mode
[   57.140916][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.143791][ T5841] veth1_vlan: entered promiscuous mode
[   57.187136][ T5846] Bluetooth: hci1: command tx timeout
[   57.189302][ T5846] Bluetooth: hci0: command tx timeout
[   57.189659][ T5841] veth0_macvtap: entered promiscuous mode
[   57.205932][ T5841] veth1_macvtap: entered promiscuous mode
[   57.211640][ T5845] veth0_vlan: entered promiscuous mode
[   57.226108][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.228832][ T5845] veth1_vlan: entered promiscuous mode
[   57.235064][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.243975][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.254195][ T5695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.258144][ T5695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.261662][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.268923][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.303002][ T5845] veth0_macvtap: entered promiscuous mode
[   57.319939][ T5845] veth1_macvtap: entered promiscuous mode
[   57.336488][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.340022][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.350367][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.372461][ T5849] veth0_vlan: entered promiscuous mode
[   57.376287][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.383465][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.386228][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.391744][ T5849] veth1_vlan: entered promiscuous mode
[   57.400858][ T5695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.404078][ T5695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.441512][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.448087][ T5695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.451208][ T5695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.486720][ T5849] veth0_macvtap: entered promiscuous mode
[   57.501574][ T5849] veth1_macvtap: entered promiscuous mode
[   57.521115][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.548251][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.553675][ T5695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.564909][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.569305][ T5695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.569886][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.572449][ T5695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.572476][ T5695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.624480][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.632129][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.668804][ T5919] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET)
[   57.681324][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.692309][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.715696][ T5919] syzkaller1: entered promiscuous mode
[   57.718413][ T5919] syzkaller1: entered allmulticast mode
[   57.760252][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.762753][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.811204][ T5923] syzkaller1: entered promiscuous mode
[   57.813027][ T5923] syzkaller1: entered allmulticast mode
[   57.866154][ T5924] bridge_slave_0: left allmulticast mode
[   57.870393][ T5924] bridge_slave_0: left promiscuous mode
[   57.873557][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.881703][ T5924] bridge_slave_1: left allmulticast mode
[   57.884104][ T5924] bridge_slave_1: left promiscuous mode
[   57.886633][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.898166][ T5924] bond0: (slave bond_slave_0): Releasing backup interface
[   57.904258][ T5924] bond0: (slave bond_slave_1): Releasing backup interface
[   57.918685][ T5924] team0: Port device team_slave_0 removed
[   57.929862][ T5924] team0: Port device team_slave_1 removed
[   57.932879][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.935833][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.941356][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.944513][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.675778][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.889907][ T5942] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   58.911059][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.188225][ T5851] Bluetooth: hci2: command tx timeout
[   59.206788][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.267413][ T5851] Bluetooth: hci0: command tx timeout
[   59.269633][ T5851] Bluetooth: hci1: command tx timeout
[   59.304502][ T5981] syzkaller1: entered promiscuous mode
[   59.306490][ T5981] syzkaller1: entered allmulticast mode
[   60.572562][ T6019] Zero length message leads to an empty skb
[   60.609333][ T6022] netlink: 16122 bytes leftover after parsing attributes in process `syz.2.33'.
[   60.943280][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.021943][ T6046] netlink: 1 bytes leftover after parsing attributes in process `syz.1.40'.
[   61.063989][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'.
[   61.280157][ T5846] Bluetooth: hci2: command tx timeout
[   61.359099][ T5846] Bluetooth: hci1: command tx timeout
[   61.360905][ T5846] Bluetooth: hci0: command tx timeout
[   61.913286][ T6107] netlink: 1 bytes leftover after parsing attributes in process `syz.2.54'.
[   62.082347][ T6118] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   62.088553][ T6118] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   63.241489][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.76'.
[   63.278308][ T6176] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.348191][ T5851] Bluetooth: hci2: command tx timeout
[   63.427525][ T5846] Bluetooth: hci1: command tx timeout
[   63.431146][ T5851] Bluetooth: hci0: command tx timeout
[   63.879010][ T6206] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.85'.
[   63.883225][ T6206] netlink: zone id is out of range
[   63.884941][ T6206] netlink: zone id is out of range
[   63.886644][ T6206] netlink: zone id is out of range
[   63.891121][ T6206] netlink: zone id is out of range
[   63.892846][ T6206] netlink: zone id is out of range
[   63.894856][ T6206] netlink: get zone limit has 8 unknown bytes
[   64.320465][ T6218] sctp: [Deprecated]: syz.0.87 (pid 6218) Use of int in max_burst socket option deprecated.
[   64.320465][ T6218] Use struct sctp_assoc_value instead
[   64.328390][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   64.331331][ T6218] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   64.333818][ T6218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.682240][ T6240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.94'.
[   64.710196][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'.
[   64.965600][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'.
[   65.033744][ T6262] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[   65.054356][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.067701][ T6262] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.070228][ T6262] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.075288][ T6262] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   65.134847][ T6265] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   65.141982][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'.
[   65.443620][ T6271] tipc: Started in network mode
[   65.445708][ T6271] tipc: Node identity 0000000000000000005885d6a76549cc, cluster identity 4711
[   65.449725][ T6271] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   65.755123][ T6288] netlink: 1 bytes leftover after parsing attributes in process `syz.2.111'.
[   65.958937][ T6309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.120'.
[   66.183492][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'.
[   66.250126][ T6340] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.255364][ T6340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   66.363653][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[   66.368383][ T6360] netlink: 'syz.2.138': attribute type 18 has an invalid length.
[   66.383635][ T6362] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   66.566099][ T6389] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   66.620309][ T6397] netlink: 'syz.1.152': attribute type 6 has an invalid length.
[   66.647765][ T6400] netlink: 'syz.0.151': attribute type 4 has an invalid length.
[   66.656663][ T6400] netlink: 'syz.0.151': attribute type 4 has an invalid length.
[   66.661219][ T6402] netlink: 'syz.1.154': attribute type 62 has an invalid length.
[   66.960216][ T6436] netlink: 'syz.1.164': attribute type 3 has an invalid length.
[   67.056289][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.061813][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.065755][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.071457][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.100733][ T6449] tipc: Started in network mode
[   67.102421][ T6449] tipc: Node identity ee2bddf01a62, cluster identity 4711
[   67.105709][ T6449] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.110423][ T6449] syzkaller0: entered promiscuous mode
[   67.112579][ T6449] syzkaller0: entered allmulticast mode
[   67.119758][ T6449] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   67.137126][ T6449] tipc: Resetting bearer <eth:syzkaller0>
[   67.200085][ T6448] tipc: Resetting bearer <eth:syzkaller0>
[   67.217022][ T6448] tipc: Disabling bearer <eth:syzkaller0>
[   67.344096][ T6459] tipc: Started in network mode
[   67.347031][ T6459] tipc: Node identity 469dad8c9b93, cluster identity 4711
[   67.350239][ T6459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.354619][ T6460] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   67.360193][ T6463] netlink: 'syz.1.174': attribute type 3 has an invalid length.
[   67.364753][ T6459] syzkaller0: entered promiscuous mode
[   67.368381][ T6459] syzkaller0: entered allmulticast mode
[   67.444761][ T6458] tipc: Resetting bearer <eth:syzkaller0>
[   67.458603][ T6458] tipc: Disabling bearer <eth:syzkaller0>
[   67.531976][ T6469] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   67.896483][ T6508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.955684][ T6508] syzkaller0: entered promiscuous mode
[   67.958319][ T6508] syzkaller0: entered allmulticast mode
[   67.970239][ T6507] tipc: Resetting bearer <eth:syzkaller0>
[   68.739516][ T6507] tipc: Disabling bearer <eth:syzkaller0>
[   69.040878][ T6550] veth0: entered promiscuous mode
[   69.054996][ T6546] veth1_macvtap: left promiscuous mode
[   69.060692][ T6546] macsec0: entered promiscuous mode
[   69.062660][ T6546] macsec0: entered allmulticast mode
[   69.072039][ T6541] veth1_macvtap: entered promiscuous mode
[   69.074322][ T6541] veth1_macvtap: entered allmulticast mode
[   69.077364][ T6541] macsec0: left promiscuous mode
[   69.079299][ T6541] macsec0: left allmulticast mode
[   69.081115][ T6541] veth1_macvtap: left allmulticast mode
[   69.720755][ T6570] __nla_validate_parse: 14 callbacks suppressed
[   69.720772][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'.
[   69.766606][ T6574] netlink: 3 bytes leftover after parsing attributes in process `syz.2.212'.
[   69.771214][ T6574] 0X: renamed from caif0
[   69.780600][   T10] cfg80211: failed to load regulatory.db
[   69.791366][ T6574] 0X: entered allmulticast mode
[   69.798058][ T6574] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   69.839981][ T6584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.952011][ T6590] pimreg: tun_chr_ioctl cmd 2147767506
[   69.963600][ T6590] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.044477][ T6598] vcan0: tx drop: invalid da for name 0x0000000000000001
[   70.221358][ T6613] ip_vti0: Master is either lo or non-ether device
[   70.260548][ T6615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.226'.
[   70.423078][ T6629] validate_nla: 2 callbacks suppressed
[   70.423095][ T6629] netlink: 'syz.2.232': attribute type 3 has an invalid length.
[   70.429132][ T6629] netlink: 'syz.2.232': attribute type 3 has an invalid length.
[   70.432412][ T6629] netlink: 'syz.2.232': attribute type 3 has an invalid length.
[   70.534690][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'.
[   70.594785][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'.
[   70.653227][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'.
[   70.833862][ T6657] netlink: 'syz.0.243': attribute type 3 has an invalid length.
[   70.836693][ T6657] netlink: 'syz.0.243': attribute type 3 has an invalid length.
[   71.037156][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.042587][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.079179][ T6664] netlink: 1 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.116305][ T6668] netlink: 104 bytes leftover after parsing attributes in process `syz.2.247'.
[   71.214608][ T6672] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   71.222637][ T6672] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   71.292721][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811161c000: rx timeout, send abort
[   71.453728][ T6690] netlink: 1 bytes leftover after parsing attributes in process `syz.2.255'.
[   71.489972][ T6694] netlink: 144 bytes leftover after parsing attributes in process `syz.2.257'.
[   71.497416][ T6692] netlink: 'syz.0.256': attribute type 2 has an invalid length.
[   71.797296][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811161c000: abort rx timeout. Force session deactivation
[   71.888530][ T6719] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   72.075590][ T6727] Driver unsupported XDP return value 0 on prog  (id 57) dev N/A, expect packet loss!
[   72.097742][ T6727] lo speed is unknown, defaulting to 1000
[   72.100359][ T6727] lo speed is unknown, defaulting to 1000
[   72.129616][ T6727] lo speed is unknown, defaulting to 1000
[   72.135117][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.138361][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.139946][ T6727] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.150761][ T6730] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   72.158153][ T6727] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   72.211804][ T6727] lo speed is unknown, defaulting to 1000
[   72.216232][ T6727] lo speed is unknown, defaulting to 1000
[   72.225749][ T6727] lo speed is unknown, defaulting to 1000
[   72.265667][ T6739] vlan2: entered allmulticast mode
[   72.270364][ T6739] bridge_slave_0: entered allmulticast mode
[   72.463874][ T6757] netlink: 'syz.2.279': attribute type 13 has an invalid length.
[   72.522489][ T6757] sctp: [Deprecated]: syz.2.279 (pid 6757) Use of int in max_burst socket option.
[   72.522489][ T6757] Use struct sctp_assoc_value instead
[   72.634209][ T6773] lo: Caught tx_queue_len zero misconfig
[   72.955941][ T6806] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   73.235586][ T6825] ip6_vti0: Caught tx_queue_len zero misconfig
[   73.710451][ T6855] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   73.722629][ T6853] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   73.770865][ T6859] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[   73.822894][ T6861] netlink: 'syz.1.322': attribute type 6 has an invalid length.
[   74.078853][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.081840][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.089100][ T6881] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   74.574061][ T6908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.850265][ T6926] __nla_validate_parse: 23 callbacks suppressed
[   74.850282][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'.
[   74.865976][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   74.873965][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'.
[   74.933059][ T6937] openvswitch: netlink: Flow key attribute not present in set flow.
[   75.075053][ T6946] openvswitch: netlink: Key type 16144 is out of range max 32
[   75.522831][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   75.744889][ T6974] lo speed is unknown, defaulting to 1000
[   75.892161][ T6976] lo speed is unknown, defaulting to 1000
[   75.954420][ T6978] xfrm1: entered allmulticast mode
[   76.385511][ T6992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.521334][ T7002] netlink: 'syz.1.374': attribute type 29 has an invalid length.
[   76.524809][ T7002] netlink: 'syz.1.374': attribute type 29 has an invalid length.
[   76.530831][ T7002] netlink: 500 bytes leftover after parsing attributes in process `syz.1.374'.
[   76.534177][ T7002] unsupported nla_type 58
[   76.544018][ T7002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.550439][ T7002] syzkaller0: entered promiscuous mode
[   76.552619][ T7002] syzkaller0: entered allmulticast mode
[   76.566036][ T7002] tipc: Resetting bearer <eth:syzkaller0>
[   76.572769][ T7001] tipc: Resetting bearer <eth:syzkaller0>
[   76.584885][ T7001] tipc: Disabling bearer <eth:syzkaller0>
[   76.793413][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[   77.027934][ T5851] Bluetooth: hci2: command tx timeout
[   77.181467][ T7035] netlink: 1 bytes leftover after parsing attributes in process `syz.1.387'.
[   77.385711][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'.
[   77.475710][ T7060] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   77.581752][ T7071] lo speed is unknown, defaulting to 1000
[   77.673538][ T7077] lo speed is unknown, defaulting to 1000
[   77.785614][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'.
[   78.093456][ T7117] netlink: 128 bytes leftover after parsing attributes in process `syz.0.412'.
[   78.323607][ T7134] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   78.338014][ T7134] team0: Device ipvlan1 failed to register rx_handler
[   78.406034][ T7142] netlink: 'syz.1.419': attribute type 11 has an invalid length.
[   78.412002][ T7142] netlink: 'syz.1.419': attribute type 11 has an invalid length.
[   78.415465][ T7145] "syz.0.421" (7145) uses obsolete ecb(arc4) skcipher
[   78.471370][ T7145] netlink: 'syz.0.421': attribute type 7 has an invalid length.
[   78.473971][ T7145] netlink: 'syz.0.421': attribute type 8 has an invalid length.
[   78.480457][ T7145] syz_tun: entered promiscuous mode
[   78.483286][ T7145] gretap0: entered promiscuous mode
[   78.486040][ T7145] syz_tun: left promiscuous mode
[   78.492135][ T7145] gretap0: left promiscuous mode
[   78.629999][ T7163] dvmrp0: entered allmulticast mode
[   78.689023][ T7163] lo speed is unknown, defaulting to 1000
[   78.890908][ T7177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.895181][ T7177] syzkaller0: entered promiscuous mode
[   78.898250][ T7177] syzkaller0: entered allmulticast mode
[   78.963654][ T7178] tipc: Resetting bearer <eth:syzkaller0>
[   79.727520][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[   79.746145][ T7176] tipc: Disabling bearer <eth:syzkaller0>
[   79.867752][ T7236] __nla_validate_parse: 8 callbacks suppressed
[   79.867768][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   79.897125][ T7230] lo speed is unknown, defaulting to 1000
[   80.013997][ T7245] netlink: 'syz.0.456': attribute type 12 has an invalid length.
[   80.125592][ T7252] syzkaller1: entered promiscuous mode
[   80.129046][ T7252] syzkaller1: entered allmulticast mode
[   80.135610][ T7250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.172531][ T7250] syzkaller0: entered promiscuous mode
[   80.174568][ T7250] syzkaller0: entered allmulticast mode
[   80.207213][ T7250] tipc: Resetting bearer <eth:syzkaller0>
[   80.211352][ T7249] tipc: Resetting bearer <eth:syzkaller0>
[   80.232220][ T7249] tipc: Disabling bearer <eth:syzkaller0>
[   80.378571][ T7266] netlink: 64 bytes leftover after parsing attributes in process `syz.2.464'.
[   80.478931][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   80.571428][ T7292] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (125855)
[   80.585766][ T7292] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   80.632400][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[   80.636119][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[   80.664960][ T7304] netlink: 1 bytes leftover after parsing attributes in process `syz.0.479'.
[   80.886646][ T7328] netlink: 'syz.2.488': attribute type 21 has an invalid length.
[   80.890294][ T7328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.488'.
[   80.894938][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'.
[   80.966151][ T7334] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.490'.
[   81.151605][  T792] IPVS: starting estimator thread 0...
[   81.191923][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'.
[   81.199873][ T7358] netlink: 'syz.2.499': attribute type 12 has an invalid length.
[   81.269129][ T7354] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.282678][ T7364] netlink: 'syz.2.502': attribute type 2 has an invalid length.
[   81.295618][ T7367] netlink: 'syz.2.502': attribute type 2 has an invalid length.
[   81.749214][ T7392] syzkaller1: entered promiscuous mode
[   81.751319][ T7392] syzkaller1: entered allmulticast mode
[   81.762544][ T7392] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   81.949204][ T7414] lo speed is unknown, defaulting to 1000
[   82.619938][ T7449] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[   82.635719][ T7449] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.649468][ T7449] bond2: (slave gretap1): making interface the new active one
[   82.653394][ T7449] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   82.664047][ T7449] bond_slave_0: entered promiscuous mode
[   82.666160][ T7449] bond_slave_1: entered promiscuous mode
[   82.669487][ T7449] macsec1: entered promiscuous mode
[   82.671659][ T7449] bond0: entered promiscuous mode
[   82.675896][ T7449] bond0: left promiscuous mode
[   82.678242][ T7449] bond_slave_0: left promiscuous mode
[   82.680089][ T7449] bond_slave_1: left promiscuous mode
[   82.951819][ T7473] netlink: 'syz.0.539': attribute type 4 has an invalid length.
[   83.793622][ T7511] pim6reg: entered allmulticast mode
[   83.887207][ T7515] lo speed is unknown, defaulting to 1000
[   84.386283][   T24] IPVS: starting estimator thread 0...
[   84.390290][ T7534] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.393868][ T7532] IPVS: stopping backup sync thread 7534 ...
[   84.445714][ T7536] gretap0: entered promiscuous mode
[   84.449448][ T7536] vlan2: entered promiscuous mode
[   84.486911][ T7533] IPVS: using max 80 ests per chain, 192000 per kthread
[   84.560782][ T7545] netlink: 'syz.1.565': attribute type 2 has an invalid length.
[   84.888225][ T7583] gre3: entered allmulticast mode
[   85.073798][ T7596] __nla_validate_parse: 24 callbacks suppressed
[   85.073814][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'.
[   85.082389][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'.
[   85.089527][ T7596] syz_tun: entered promiscuous mode
[   85.092086][ T7596] syz_tun: left promiscuous mode
[   85.158947][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'.
[   85.442227][ T7620] lo speed is unknown, defaulting to 1000
[   85.481507][ T7620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'.
[   85.485464][ T7620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'.
[   85.489463][ T7620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.594'.
[   85.496376][    T9] IPVS: starting estimator thread 0...
[   85.499013][ T7620] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[   85.504074][ T7620] ieee802154 phy0 wpan0: encryption failed: -22
[   85.587533][ T7622] IPVS: using max 81 ests per chain, 194400 per kthread
[   85.715620][ T5695] IPVS: stop unused estimator thread 0...
[   85.770270][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.597'.
[   85.796485][ T7629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.848636][ T7629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.930159][ T7629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.935952][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[   85.984087][ T7629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.052859][ T5695] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.073595][ T5695] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.078372][ T7655] netlink: 27 bytes leftover after parsing attributes in process `syz.0.607'.
[   86.079733][ T5695] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.090093][ T7655] netlink: 'syz.0.607': attribute type 21 has an invalid length.
[   86.093578][ T7655] netlink: 'syz.0.607': attribute type 22 has an invalid length.
[   86.097235][ T5695] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.100815][ T7655] netlink: 'syz.0.607': attribute type 23 has an invalid length.
[   86.104050][ T7655] netlink: 'syz.0.607': attribute type 25 has an invalid length.
[   86.107537][ T7655] netlink: 'syz.0.607': attribute type 26 has an invalid length.
[   86.110848][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.607'.
[   86.574499][ T7696] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   86.740302][ T7722] veth0: Caught tx_queue_len zero misconfig
[   86.743762][ T7722] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.767462][ T7722] gretap0: entered promiscuous mode
[   86.769482][ T7722] vlan2: entered promiscuous mode
[   86.900702][ T5695] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.903722][ T5695] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.908946][ T5695] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.912521][ T5695] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.977797][ T5695] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   87.733310][ T7739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   87.843406][ T7769] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[   87.866539][ T7769] bond2: entered promiscuous mode
[   87.869708][ T7769] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.302010][ T7816] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   88.402614][ T7840] bridge3: entered promiscuous mode
[   88.405121][ T7840] bridge3: entered allmulticast mode
[   88.787970][ T7869] bond_slave_0: Caught tx_queue_len zero misconfig
[   88.878455][ T7882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.322997][ T7891] "syz.0.685" (7891) uses obsolete ecb(arc4) skcipher
[   89.603939][ T7914] netlink: 'syz.1.693': attribute type 13 has an invalid length.
[   89.607793][ T7914] netlink: 'syz.1.693': attribute type 17 has an invalid length.
[   89.663560][ T7914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.725276][ T7914] lo speed is unknown, defaulting to 1000
[   89.872060][ T7932] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   89.875791][ T7928] IPVS: stopping backup sync thread 7932 ...
[   89.899079][ T7933] tc_dump_action: action bad kind
[   89.963141][ T7940] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   89.969576][ T7937] IPVS: stopping backup sync thread 7940 ...
[   90.092299][ T7944] netlink: 'syz.2.703': attribute type 3 has an invalid length.
[   90.244775][ T7966] netlink: 'syz.1.712': attribute type 11 has an invalid length.
[   90.503223][ T7986] ip6tnl0: Caught tx_queue_len zero misconfig
[   90.520957][ T7986] ip6gretap0: entered promiscuous mode
[   90.521353][ T7988] __nla_validate_parse: 57 callbacks suppressed
[   90.521361][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[   90.528933][ T7988] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   90.531431][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.759074][ T8004] netlink: 'syz.1.724': attribute type 10 has an invalid length.
[   91.100818][ T8011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.726'.
[   91.133718][ T8013] netlink: 45 bytes leftover after parsing attributes in process `syz.0.727'.
[   91.219325][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[   91.292401][ T8029] raw_sendmsg: syz.0.735 forgot to set AF_INET. Fix it!
[   91.305723][ T8031] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   91.349719][ T8035] netlink: 1 bytes leftover after parsing attributes in process `syz.2.736'.
[   91.444571][ T8046] openvswitch: netlink: IPv4 tun info is not correct
[   91.535669][ T8058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.741'.
[   91.562997][ T8060] netlink: 'syz.1.744': attribute type 5 has an invalid length.
[   91.576038][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[   91.581525][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[   91.584508][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[   91.588361][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[   91.601980][ T8057] ip6gretap0: entered promiscuous mode
[   91.604314][ T8057] macsec1: entered allmulticast mode
[   91.606472][ T8057] ip6gretap0: entered allmulticast mode
[   91.611558][ T8057] ip6gretap0: left allmulticast mode
[   91.613862][ T8057] ip6gretap0: left promiscuous mode
[   91.623433][ T8065] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[   91.632622][ T8065] netlink: 'syz.2.746': attribute type 10 has an invalid length.
[   91.756773][ T8083] IPVS: set_ctl: invalid protocol: 12 172.30.0.2:20002
[   91.913019][ T8100] xfrm2: entered promiscuous mode
[   91.914813][ T8100] xfrm2: entered allmulticast mode
[   91.925915][ T8110] netlink: 'syz.1.762': attribute type 1 has an invalid length.
[   91.968633][ T8114] netlink: del zone limit has 8 unknown bytes
[   92.225702][ T8142] netlink: 'syz.0.773': attribute type 12 has an invalid length.
[   92.349907][ T8153] openvswitch: netlink: Message has 8 unknown bytes.
[   92.412797][ T8152] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.425031][ T8152] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   92.504218][ T8167] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.509160][ T8167] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address
[   92.512955][ T8167] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[   92.547009][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[   92.570666][ T8171] syzkaller0: entered promiscuous mode
[   92.572987][ T8171] syzkaller0: entered allmulticast mode
[   93.446181][ T8191] x9: renamed from bridge_slave_0 (while UP)
[   94.038020][ T8256] syzkaller0: refused to change device tx_queue_len
[   94.043884][ T8257] syzkaller0: entered promiscuous mode
[   94.046243][ T8257] syzkaller0: entered allmulticast mode
[   94.051062][ T8256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.064989][ T8256] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.093771][ T8257] tipc: Resetting bearer <eth:syzkaller0>
[   94.223101][ T8275] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   94.223190][ T8274] IPVS: stopping backup sync thread 8275 ...
[   94.314435][ T8280] unsupported nlmsg_type 40
[   94.624945][ T8301] dvmrp8: entered allmulticast mode
[   94.629370][ T8300] dvmrp8: left allmulticast mode
[   95.108627][ T5896] tipc: Node number set to 2805845018
[   95.706943][ T8319] validate_nla: 2 callbacks suppressed
[   95.706959][ T8319] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   95.712904][ T8319] __nla_validate_parse: 66 callbacks suppressed
[   95.712917][ T8319] netlink: 224 bytes leftover after parsing attributes in process `syz.2.835'.
[   95.840725][ T8250] tipc: Resetting bearer <eth:syzkaller0>
[   95.849732][ T8250] tipc: Disabling bearer <eth:syzkaller0>
[   95.939626][ T8327] netlink: 248 bytes leftover after parsing attributes in process `syz.2.838'.
[   96.002752][ T8331] netlink: 204 bytes leftover after parsing attributes in process `syz.0.840'.
[   96.036485][ T8327] syzkaller1: entered promiscuous mode
[   96.039138][ T8327] syzkaller1: entered allmulticast mode
[   96.103546][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'.
[   96.215700][ T8347] netlink: 1 bytes leftover after parsing attributes in process `syz.2.842'.
[   96.430094][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
[   96.486136][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'.
[   96.508366][ T8376] netlink: 'syz.0.849': attribute type 4 has an invalid length.
[   96.633627][ T8391] netlink: 1 bytes leftover after parsing attributes in process `syz.1.855'.
[   96.741067][   T10] IPVS: starting estimator thread 0...
[   96.744274][ T8412] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   96.749169][ T8409] IPVS: stopping backup sync thread 8412 ...
[   96.756352][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[   96.762914][ T8406] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.795087][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'.
[   96.830773][ T8411] IPVS: using max 81 ests per chain, 194400 per kthread
[   96.936163][ T8434] syzkaller1: entered promiscuous mode
[   96.943338][ T8434] syzkaller1: entered allmulticast mode
[   96.976308][ T8437] netlink: 'syz.0.869': attribute type 22 has an invalid length.
[   97.066023][ T8443] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.070791][ T8442] IPVS: stopping backup sync thread 8443 ...
[   97.125160][ T8453] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   97.158733][ T8455] vcan0: tx drop: invalid da for name 0x0000000000000800
[   97.296302][ T8467] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.300734][ T8466] IPVS: stopping backup sync thread 8467 ...
[   97.385319][ T8478] netlink: 'syz.0.883': attribute type 5 has an invalid length.
[   97.394121][ T8480] netlink: 'syz.0.883': attribute type 5 has an invalid length.
[   97.499137][ T8490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.528964][ T8490] openvswitch: netlink: Flow actions attr not present in new flow.
[   97.893320][ T8512] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   97.899070][ T8512] macvtap1: entered allmulticast mode
[   97.901591][ T8512] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   97.906296][ T8512] batman_adv: batadv0: Adding interface: macvtap1
[   97.911911][ T8512] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.923543][ T8512] batman_adv: batadv0: Interface activated: macvtap1
[   98.183700][ T8528] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.188400][ T8528] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.242105][ T8528] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.245811][ T8528] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.299744][ T8528] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.304132][ T8528] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.375175][ T8528] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.380787][ T8528] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.413327][ T8535] syzkaller0: entered promiscuous mode
[   98.415923][ T8535] syzkaller0: entered allmulticast mode
[   98.462452][ T5876] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.465687][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.485276][ T5876] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.489327][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.499508][ T5876] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.502230][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.510409][ T5876] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.517010][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.582754][ T8539] netlink: 'syz.0.904': attribute type 30 has an invalid length.
[   98.585575][ T8539] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[   98.688442][ T8556] netlink: 'syz.0.910': attribute type 32 has an invalid length.
[   98.691274][ T8556] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   98.851517][ T8576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.856708][ T8577] tipc: Resetting bearer <eth:syzkaller0>
[   98.887529][ T8575] tipc: Disabling bearer <eth:syzkaller0>
[   98.933010][ T8576] syz.2.917 (8576) used greatest stack depth: 19952 bytes left
[   99.152263][ T8598] netlink: 'syz.1.925': attribute type 9 has an invalid length.
[   99.160802][ T8598] hsr0: entered promiscuous mode
[   99.163348][ T8598] macvlan2: entered promiscuous mode
[   99.165854][ T8598] macvlan2: entered allmulticast mode
[   99.177776][ T8598] hsr0: entered allmulticast mode
[   99.180069][ T8598] hsr_slave_0: entered allmulticast mode
[   99.182398][ T8598] hsr_slave_1: entered allmulticast mode
[   99.553558][ T8628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   99.579783][ T8628] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.606963][ T8628] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.023494][ T8661] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  100.027115][ T8660] IPVS: stopping backup sync thread 8661 ...
[  100.143696][ T8665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.206742][ T8665] syzkaller0: entered promiscuous mode
[  100.211426][ T8665] syzkaller0: entered allmulticast mode
[  100.215207][ T8665] tipc: Resetting bearer <eth:syzkaller0>
[  100.231816][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  101.068042][ T8664] tipc: Disabling bearer <eth:syzkaller0>
[  101.072241][ T8681] __nla_validate_parse: 21 callbacks suppressed
[  101.072251][ T8681] netlink: 1 bytes leftover after parsing attributes in process `syz.1.952'.
[  101.078048][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'.
[  101.247251][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  101.248228][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  101.253092][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'.
[  101.255698][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  101.328958][ T8714] netlink: 1 bytes leftover after parsing attributes in process `syz.0.962'.
[  101.354886][ T8718] block nbd2: not configured, cannot reconfigure
[  101.396428][ T8722] netlink: 'syz.1.967': attribute type 23 has an invalid length.
[  101.456671][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[  102.020247][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  102.178898][ T8782] netlink: 1 bytes leftover after parsing attributes in process `syz.0.985'.
[  102.339330][ T8789] IPVS: stopping backup sync thread 7060 ...
[  102.479321][ T8802] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  102.479360][ T8800] IPVS: stopping backup sync thread 8802 ...
[  102.829325][ T8826] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  102.961116][ T8853] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  102.964294][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.085548][ T8860] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.095343][ T8858] IPVS: stopping backup sync thread 8860 ...
[  103.325062][ T8874] can: request_module (can-proto-4) failed.
[  103.420460][ T8884] lo speed is unknown, defaulting to 1000
[  103.540807][ T8894] Unsupported ieee802154 address type: 0
[  103.549077][ T8889] Bluetooth: MGMT ver 1.23
[  103.869584][ T8920] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.869587][ T8919] IPVS: stopping backup sync thread 8920 ...
[  104.498118][ T8937] netlink: 'syz.1.1037': attribute type 11 has an invalid length.
[  104.550542][ T8945] netlink: 'syz.0.1040': attribute type 2 has an invalid length.
[  104.932365][ T8979] openvswitch: netlink: Key type 2702 is out of range max 32
[  104.936072][ T8975] lo speed is unknown, defaulting to 1000
[  104.967181][ T8979] sctp: [Deprecated]: syz.2.1050 (pid 8979) Use of int in max_burst socket option.
[  104.967181][ T8979] Use struct sctp_assoc_value instead
[  105.272563][ T9002] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.275818][ T9002] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.341839][ T9002] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.346373][ T9002] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.438911][ T9002] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.442894][ T9002] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.504128][ T9018] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  105.508534][ T9016] IPVS: stopping backup sync thread 9018 ...
[  105.526689][ T9002] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.537824][ T9002] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.685887][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.691046][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.709215][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.712692][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.724139][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.730496][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.746381][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.762911][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.115003][ T9045] vlan0: entered promiscuous mode
[  106.552807][ T5837] lo speed is unknown, defaulting to 1000
[  106.560998][ T9072] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.589356][ T9072] __nla_validate_parse: 13 callbacks suppressed
[  106.589365][ T9072] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1074'.
[  106.662451][ T9080] tap0: tun_chr_ioctl cmd 1074025680
[  106.665114][ T9082] tap0: tun_chr_ioctl cmd 1074025680
[  106.722271][ T9082] D: renamed from syzkaller0
[  106.762902][ T9091] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1080'.
[  107.015285][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'.
[  107.032594][ T9118] netlink: 'syz.1.1088': attribute type 4 has an invalid length.
[  107.035196][ T9118] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1088'.
[  107.090926][ T9118] : renamed from bond0 (while UP)
[  107.177364][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1093'.
[  107.312458][ T9147] netlink: 'syz.2.1101': attribute type 1 has an invalid length.
[  107.326790][ T9147] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  107.335553][ T9146] lo speed is unknown, defaulting to 1000
[  107.418261][ T9161] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  107.424609][ T9163] C: renamed from lo (while UP)
[  107.432078][ T9163] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  107.492802][ T9146] syz_tun: entered allmulticast mode
[  107.523192][ T9168] bridge_slave_0: left allmulticast mode
[  107.525866][ T9168] bridge_slave_0: left promiscuous mode
[  107.535636][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.547616][ T9168] bridge_slave_1: left allmulticast mode
[  107.550289][ T9168] bridge_slave_1: left promiscuous mode
[  107.552923][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.562732][ T9168] bond0: (slave bond_slave_0): Releasing backup interface
[  107.571233][ T9168] bond0: (slave bond_slave_1): Releasing backup interface
[  107.588194][ T9168] team0: Port device team_slave_0 removed
[  107.594376][ T9168] team0: Port device team_slave_1 removed
[  107.602426][ T9168] bond0: (slave wlan1): Releasing backup interface
[  107.606666][ T9168] bond2: (slave gretap1): Releasing active interface
[  107.622773][ T9169] team0: Mode changed to "broadcast"
[  107.632924][ T9170] team0: Port device vlan0 added
[  107.643917][ T9168] tipc: Enabled bearer <eth:team0>, priority 0
[  107.649280][ T9168] syz.2.1107 (9168) used greatest stack depth: 19904 bytes left
[  107.684373][ T9172] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[  107.689764][ T9172] netlink: 'syz.2.1108': attribute type 3 has an invalid length.
[  107.693292][ T9172] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1108'.
[  107.697302][ T9172] NCSI netlink: No device for ifindex 246
[  107.703945][ T9172] netlink: 198660 bytes leftover after parsing attributes in process `syz.2.1108'.
[  107.816395][ T9180] sock: sock_set_timeout: `syz.2.1110' (pid 9180) tries to set negative timeout
[  108.139424][ T9143] syz_tun: left allmulticast mode
[  108.239315][ T9202] : renamed from bond_slave_0 (while UP)
[  108.302502][ T9208] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  108.325248][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.346414][ T9208] bond0: (slave veth3): Enslaving as an active interface with a down link
[  108.355088][ T9211] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  108.358695][ T9211] netlink: 632 bytes leftover after parsing attributes in process `syz.0.1119'.
[  108.360758][ T9208] gretap2: entered promiscuous mode
[  108.369933][ T9208] bond0: (slave gretap2): making interface the new active one
[  108.378068][ T9208] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  108.390693][ T9208] macvlan4: entered promiscuous mode
[  108.394095][ T9208] macvlan4: entered allmulticast mode
[  108.396634][ T9208] bond0: entered promiscuous mode
[  108.399448][ T9208] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  108.402122][ T9208] bond0: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  108.408825][ T9208] bond0: left promiscuous mode
[  108.424640][ T9214] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1120'.
[  108.458757][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'.
[  108.463931][ T9218] veth1: entered promiscuous mode
[  108.471129][ T9207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.757062][ T5896] tipc: Node number set to 3708726668
[  109.115332][ T9257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.119378][ T9257] syzkaller0: entered promiscuous mode
[  109.121756][ T9257] syzkaller0: entered allmulticast mode
[  109.134176][ T9257] tipc: Resetting bearer <eth:syzkaller0>
[  109.139089][ T9256] tipc: Resetting bearer <eth:syzkaller0>
[  109.151070][ T9256] tipc: Disabling bearer <eth:syzkaller0>
[  110.539846][ T9343] lo speed is unknown, defaulting to 1000
[  110.632779][ T9352] tipc: New replicast peer: 208.253.78.183
[  110.635421][ T9352] tipc: Enabled bearer <udp:s>, priority 6
[  110.784730][ T9364] ip6tnl0: entered promiscuous mode
[  110.788452][ T9364] ip6tnl0: entered allmulticast mode
[  110.791889][ T9364] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  110.810808][ T9366] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  110.823430][ T9366] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  110.958278][ T9379] netlink: 'syz.0.1175': attribute type 1 has an invalid length.
[  110.961675][ T9379] netlink: 'syz.0.1175': attribute type 1 has an invalid length.
[  111.012402][ T9388] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  111.032177][ T9388] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  111.152385][ T9410] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  111.164572][ T9410] team1: entered promiscuous mode
[  111.166237][ T9410] team1: entered allmulticast mode
[  111.269194][ T9426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.272199][ T9426] syzkaller0: entered promiscuous mode
[  111.274581][ T9426] syzkaller0: entered allmulticast mode
[  111.288843][ T9426] tipc: Resetting bearer <eth:syzkaller0>
[  111.292907][ T9424] tipc: Resetting bearer <eth:syzkaller0>
[  111.300246][ T9424] tipc: Disabling bearer <eth:syzkaller0>
[  111.349154][ T9430] netlink: 'syz.1.1190': attribute type 1 has an invalid length.
[  111.379647][ T9430] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.389197][ T9432] 8021q: adding VLAN 0 to HW filter on device bond4
[  111.391849][ T9432] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  111.396445][ T9432] bond4: (slave vcan0): Error -95 calling set_mac_address
[  111.939591][ T9456] __nla_validate_parse: 20 callbacks suppressed
[  111.939608][ T9456] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1197'.
[  112.018331][ T9460] netlink: 'syz.2.1199': attribute type 12 has an invalid length.
[  112.021678][ T9460] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1199'.
[  112.191000][ T9484] tc_dump_action: action bad kind
[  112.310695][ T9495] xt_HMARK: proto mask must be zero with L3 mode
[  112.415940][ T9509] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1221'.
[  112.457682][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'.
[  112.496695][ T9519] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1225'.
[  112.638839][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1231'.
[  112.818849][ T9567] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1238'.
[  112.843161][ T9570] tc_dump_action: action bad kind
[  113.696666][ T9593] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1243'.
[  113.716815][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'.
[  113.775366][ T9599] tc_dump_action: action bad kind
[  113.789608][ T9601] tunl0: Caught tx_queue_len zero misconfig
[  113.875351][ T9615] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1251'.
[  113.881183][ T9615] bond0: Caught tx_queue_len zero misconfig
[  113.970574][ T9626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  113.973309][ T9626] IPv6: NLM_F_CREATE should be set when creating new route
[  113.975785][ T9626] IPv6: NLM_F_CREATE should be set when creating new route
[  113.978307][ T9626] IPv6: NLM_F_CREATE should be set when creating new route
[  114.076379][ T9637] netlink: 'syz.1.1260': attribute type 1 has an invalid length.
[  114.095691][ T9631] lo speed is unknown, defaulting to 1000
[  114.205341][ T9645] syzkaller0: entered promiscuous mode
[  114.208564][ T9645] syzkaller0: entered allmulticast mode
[  115.119030][ T9653] lo speed is unknown, defaulting to 1000
[  115.246426][ T9674] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  115.246547][ T9673] IPVS: stopping backup sync thread 9674 ...
[  115.259127][ T9669] tap0: tun_chr_ioctl cmd 1074025680
[  115.262568][ T9669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.265397][ T9669] D: renamed from syzkaller0
[  115.270055][ T9669] tipc: Disabling bearer <eth:syzkaller0>
[  115.322413][ T9678] openvswitch: netlink: Flow key attr not present in new flow.
[  115.396576][ T9680] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  115.400359][ T9680] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  115.454799][ T9695] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  115.454833][ T9694] IPVS: stopping backup sync thread 9695 ...
[  115.489951][ T9697] veth1: mtu greater than device maximum
[  115.518634][ T9704] netlink: 'syz.2.1283': attribute type 21 has an invalid length.
[  115.591823][ T9713] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  115.596666][ T9713] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  115.602767][ T9713] netlink: 'syz.1.1285': attribute type 2 has an invalid length.
[  115.993398][ T9755] lo speed is unknown, defaulting to 1000
[  116.356496][ T9783] tc_dump_action: action bad kind
[  116.382192][ T9788] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  116.386704][ T9787] IPVS: stopping backup sync thread 9788 ...
[  116.391907][ T9778] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  116.549175][ T9806] netlink: 'syz.0.1304': attribute type 2 has an invalid length.
[  116.563137][ T9806] ip6tnl0: left promiscuous mode
[  116.564948][ T9806] ip6tnl0: left allmulticast mode
[  116.570914][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.573550][ T9806] bridge0: port 2(bridge_slave_1) entered listening state
[  116.576377][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.578870][ T9806] bridge0: port 1(bridge_slave_0) entered listening state
[  116.590123][ T9806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.025993][ T9857] tap0: tun_chr_ioctl cmd 1074025676
[  117.028533][ T9857] tap0: owner set to 0
[  117.109632][ T9860] __nla_validate_parse: 19 callbacks suppressed
[  117.109644][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'.
[  117.115166][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'.
[  117.180577][ T9864] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1324'.
[  117.330611][ T9877] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1327'.
[  117.728659][ T9899] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  117.735325][ T9898] IPVS: stopping backup sync thread 9899 ...
[  117.802271][ T9901] netlink: 'syz.1.1338': attribute type 10 has an invalid length.
[  117.814785][ T9901] : (slave batadv_slave_0): Enslaving as an active interface with an up link
[  117.956258][ T9919] tc_dump_action: action bad kind
[  118.149054][ T9940] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  118.152761][ T9939] IPVS: stopping backup sync thread 9940 ...
[  118.157217][    C1] IPv4: Oversized IP packet from 172.20.20.10
[  118.194342][ T9943] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  118.200442][ T9943] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.263587][ T9950] batman_adv: batadv0: Interface deactivated: macvtap1
[  118.266249][ T9950] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  118.279859][ T9950] batman_adv: batadv0: Removing interface: macvtap1
[  118.376885][ T9953] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1357'.
[  118.432848][ T9957] syzkaller0: entered promiscuous mode
[  118.435108][ T9957] syzkaller0: entered allmulticast mode
[  118.723718][ T9969] pimreg3: entered allmulticast mode
[  118.801058][ T9972] openvswitch: netlink: Message has 110 unknown bytes.
[  118.804215][ T9972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.852365][ T9976] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.942207][ T9979] macvlan1: mtu less than device minimum
[  119.016613][ T9983] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  119.055014][ T9988] vlan2: entered promiscuous mode
[  119.351194][T10001] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.354997][T10000] IPVS: stopping backup sync thread 10001 ...
[  119.508844][T10012] tc_dump_action: action bad kind
[  119.539632][T10017] delete_channel: no stack
[  119.579613][T10023] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1383'.
[  119.645458][T10028] netlink: 'syz.0.1386': attribute type 2 has an invalid length.
[  119.650197][T10028] netlink: 'syz.0.1386': attribute type 1 has an invalid length.
[  119.652796][T10028] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1386'.
[  119.679482][T10034] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  119.821687][T10053] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.826311][T10052] IPVS: stopping backup sync thread 10053 ...
[  119.862966][T10055] pim6reg1: entered promiscuous mode
[  119.865431][T10055] pim6reg1: entered allmulticast mode
[  119.870227][T10055] netlink: 'syz.1.1392': attribute type 5 has an invalid length.
[  119.873573][T10055] netlink: 'syz.1.1392': attribute type 5 has an invalid length.
[  119.971530][T10061] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  119.976086][T10060] IPVS: stopping backup sync thread 10061 ...
[  119.981552][T10060] tipc: New replicast peer: 255.255.255.255
[  119.984140][T10060] tipc: Enabled bearer <udp:syz2>, priority 6
[  120.185492][T10075] xfrm0: entered promiscuous mode
[  120.190020][T10075] xfrm0: entered allmulticast mode
[  120.194097][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'.
[  120.208175][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1398'.
[  120.491898][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'.
[  120.495544][T10082] IPVS: Error joining to the multicast group
[  121.097050][   T51] tipc: Node number set to 4098481648
[  121.191401][T10148] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.194831][T10147] IPVS: stopping backup sync thread 10148 ...
[  121.339077][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.353555][T10163] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.547503][T10174] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.552094][T10173] IPVS: stopping backup sync thread 10174 ...
[  121.714677][T10195] netlink: 'syz.0.1439': attribute type 4 has an invalid length.
[  121.727354][T10198] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  121.730937][T10197] IPVS: stopping backup sync thread 10198 ...
[  122.007389][T10225] netlink: 'syz.2.1447': attribute type 3 has an invalid length.
[  122.018841][T10228] sctp: [Deprecated]: syz.0.1450 (pid 10228) Use of int in max_burst socket option deprecated.
[  122.018841][T10228] Use struct sctp_assoc_value instead
[  122.024581][T10228] net_ratelimit: 1 callbacks suppressed
[  122.024589][T10228] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  122.128837][T10232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.138593][T10232] syzkaller0: entered promiscuous mode
[  122.140929][T10232] syzkaller0: entered allmulticast mode
[  122.147731][T10232] IPVS: ip_vs_add_dest(): server weight less than zero
[  122.155174][T10241] veth1_to_bridge: entered promiscuous mode
[  122.160883][T10241] macsec2: entered promiscuous mode
[  122.166400][T10241] veth1_to_bridge: left promiscuous mode
[  122.192518][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  122.207386][T10231] tipc: Disabling bearer <eth:syzkaller0>
[  122.216048][T10245] veth1_to_bridge: entered promiscuous mode
[  122.221503][T10245] macsec2: entered promiscuous mode
[  122.224658][T10245] veth1_to_bridge: left promiscuous mode
[  122.251496][T10249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.338391][T10249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.415908][T10249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.448683][T10268] netlink: 'syz.0.1463': attribute type 1 has an invalid length.
[  122.474938][T10249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.562640][ T5873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.580186][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.596868][ T5873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.609671][ T5873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.756382][T10302] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  122.761258][T10301] IPVS: stopping backup sync thread 10302 ...
[  122.821515][T10305] team0: Mode "l" not found
[  122.852650][T10311] lo speed is unknown, defaulting to 1000
[  122.913916][T10320] __nla_validate_parse: 10 callbacks suppressed
[  122.913927][T10320] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1484'.
[  122.929494][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'.
[  123.050481][T10341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1490'.
[  123.054898][T10341] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.113060][T10347] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  123.115754][T10346] IPVS: stopping backup sync thread 10347 ...
[  123.240252][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.268414][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.272048][T10355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.287593][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.294564][T10355] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.348834][T10355] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1496'.
[  123.460477][T10363] sctp: [Deprecated]: syz.2.1499 (pid 10363) Use of int in max_burst socket option.
[  123.460477][T10363] Use struct sctp_assoc_value instead
[  123.486422][T10371] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1501'.
[  123.548557][T10378] IPVS: stopping backup sync thread 10380 ...
[  123.550179][T10380] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  123.938556][T10415] netlink: 'syz.0.1518': attribute type 2 has an invalid length.
[  123.977946][T10417] netlink: 'syz.2.1519': attribute type 2 has an invalid length.
[  124.494551][T10448] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  124.541924][T10450] tc_dump_action: action bad kind
[  124.557501][T10445] IPVS: stopping backup sync thread 10448 ...
[  125.186790][T10473] veth0: entered promiscuous mode
[  126.371921][T10512] 
[  126.372994][T10512] ======================================================
[  126.375871][T10512] WARNING: possible circular locking dependency detected
[  126.378698][T10512] syzkaller #0 Not tainted
[  126.381144][T10512] ------------------------------------------------------
[  126.384433][T10512] syz.1.1546/10512 is trying to acquire lock:
[  126.387117][T10512] ffffffff8f68e7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  126.391010][T10512] 
[  126.391010][T10512] but task is already holding lock:
[  126.394075][T10512] ffffffff8f68e758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  126.398049][T10512] 
[  126.398049][T10512] which lock already depends on the new lock.
[  126.398049][T10512] 
[  126.401997][T10512] 
[  126.401997][T10512] the existing dependency chain (in reverse order) is:
[  126.405006][T10512] 
[  126.405006][T10512] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  126.407884][T10512]        lock_acquire+0x120/0x360
[  126.409581][T10512]        _raw_spin_lock_bh+0x36/0x50
[  126.411347][T10512]        nr_rt_ioctl+0x390/0xd50
[  126.412923][T10512]        sock_do_ioctl+0xdc/0x300
[  126.414721][T10512]        sock_ioctl+0x576/0x790
[  126.416635][T10512]        __se_sys_ioctl+0xfc/0x170
[  126.418492][T10512]        do_syscall_64+0xfa/0x3b0
[  126.420313][T10512]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.422667][T10512] 
[  126.422667][T10512] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  126.425711][T10512]        lock_acquire+0x120/0x360
[  126.427539][T10512]        _raw_spin_lock_bh+0x36/0x50
[  126.429444][T10512]        nr_rt_ioctl+0x193/0xd50
[  126.431121][T10512]        sock_do_ioctl+0xdc/0x300
[  126.432825][T10512]        sock_ioctl+0x576/0x790
[  126.434651][T10512]        __se_sys_ioctl+0xfc/0x170
[  126.436596][T10512]        do_syscall_64+0xfa/0x3b0
[  126.438377][T10512]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.441055][T10512] 
[  126.441055][T10512] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  126.443969][T10512]        validate_chain+0xb9b/0x2140
[  126.445725][T10512]        __lock_acquire+0xab9/0xd20
[  126.447446][T10512]        lock_acquire+0x120/0x360
[  126.449354][T10512]        _raw_spin_lock_bh+0x36/0x50
[  126.451430][T10512]        nr_rt_device_down+0xa9/0x720
[  126.453198][T10512]        nr_device_event+0x137/0x150
[  126.455001][T10512]        notifier_call_chain+0x1b6/0x3e0
[  126.456783][T10512]        __dev_notify_flags+0x18d/0x2e0
[  126.458585][T10512]        netif_change_flags+0xe8/0x1a0
[  126.460367][T10512]        dev_change_flags+0x130/0x260
[  126.462357][T10512]        dev_ioctl+0x7b4/0x1150
[  126.464039][T10512]        sock_do_ioctl+0x22c/0x300
[  126.466148][T10512]        sock_ioctl+0x576/0x790
[  126.468119][T10512]        __se_sys_ioctl+0xfc/0x170
[  126.469860][T10512]        do_syscall_64+0xfa/0x3b0
[  126.471631][T10512]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.473892][T10512] 
[  126.473892][T10512] other info that might help us debug this:
[  126.473892][T10512] 
[  126.477479][T10512] Chain exists of:
[  126.477479][T10512]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  126.477479][T10512] 
[  126.481705][T10512]  Possible unsafe locking scenario:
[  126.481705][T10512] 
[  126.484053][T10512]        CPU0                    CPU1
[  126.485745][T10512]        ----                    ----
[  126.487461][T10512]   lock(nr_neigh_list_lock);
[  126.488958][T10512]                                lock(&nr_node->node_lock);
[  126.491267][T10512]                                lock(nr_neigh_list_lock);
[  126.493592][T10512]   lock(nr_node_list_lock);
[  126.495104][T10512] 
[  126.495104][T10512]  *** DEADLOCK ***
[  126.495104][T10512] 
[  126.497685][T10512] 2 locks held by syz.1.1546/10512:
[  126.499378][T10512]  #0: ffffffff8f538d48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  126.502138][T10512]  #1: ffffffff8f68e758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  126.505401][T10512] 
[  126.505401][T10512] stack backtrace:
[  126.507177][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.1.1546 Not tainted syzkaller #0 PREEMPT(full) 
[  126.507187][T10512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.507193][T10512] Call Trace:
[  126.507199][T10512]  <TASK>
[  126.507205][T10512]  dump_stack_lvl+0x189/0x250
[  126.507217][T10512]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.507227][T10512]  ? __pfx__printk+0x10/0x10
[  126.507238][T10512]  ? print_lock_name+0xde/0x100
[  126.507248][T10512]  print_circular_bug+0x2ee/0x310
[  126.507258][T10512]  check_noncircular+0x134/0x160
[  126.507266][T10512]  validate_chain+0xb9b/0x2140
[  126.507278][T10512]  __lock_acquire+0xab9/0xd20
[  126.507291][T10512]  ? nr_rt_device_down+0xa9/0x720
[  126.507300][T10512]  lock_acquire+0x120/0x360
[  126.507309][T10512]  ? nr_rt_device_down+0xa9/0x720
[  126.507348][T10512]  ? nr_rt_device_down+0xa9/0x720
[  126.507358][T10512]  _raw_spin_lock_bh+0x36/0x50
[  126.507371][T10512]  ? nr_rt_device_down+0xa9/0x720
[  126.507381][T10512]  nr_rt_device_down+0xa9/0x720
[  126.507392][T10512]  ? do_raw_spin_unlock+0x4d/0x240
[  126.507402][T10512]  nr_device_event+0x137/0x150
[  126.507410][T10512]  notifier_call_chain+0x1b6/0x3e0
[  126.507420][T10512]  __dev_notify_flags+0x18d/0x2e0
[  126.507428][T10512]  ? __pfx___dev_notify_flags+0x10/0x10
[  126.507435][T10512]  ? __dev_change_flags+0x4cc/0x6d0
[  126.507442][T10512]  ? __pfx___dev_change_flags+0x10/0x10
[  126.507449][T10512]  ? full_name_hash+0x92/0xe0
[  126.507459][T10512]  netif_change_flags+0xe8/0x1a0
[  126.507469][T10512]  dev_change_flags+0x130/0x260
[  126.507477][T10512]  dev_ioctl+0x7b4/0x1150
[  126.507483][T10512]  sock_do_ioctl+0x22c/0x300
[  126.507492][T10512]  ? __pfx_sock_do_ioctl+0x10/0x10
[  126.507500][T10512]  ? __lock_acquire+0xab9/0xd20
[  126.507512][T10512]  sock_ioctl+0x576/0x790
[  126.507520][T10512]  ? __pfx_sock_ioctl+0x10/0x10
[  126.507528][T10512]  ? __fget_files+0x2a/0x420
[  126.507534][T10512]  ? __fget_files+0x3a0/0x420
[  126.507539][T10512]  ? __fget_files+0x2a/0x420
[  126.507544][T10512]  ? bpf_lsm_file_ioctl+0x9/0x20
[  126.507553][T10512]  ? __pfx_sock_ioctl+0x10/0x10
[  126.507560][T10512]  __se_sys_ioctl+0xfc/0x170
[  126.507569][T10512]  do_syscall_64+0xfa/0x3b0
[  126.507576][T10512]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.507582][T10512]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.507588][T10512]  ? exc_page_fault+0x9f/0xf0
[  126.507594][T10512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.507600][T10512] RIP: 0033:0x7fe308d8ebe9
[  126.507608][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.507614][T10512] RSP: 002b:00007fe309b61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.507623][T10512] RAX: ffffffffffffffda RBX: 00007fe308fc5fa0 RCX: 00007fe308d8ebe9
[  126.507628][T10512] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005
[  126.507632][T10512] RBP: 00007fe308e11e19 R08: 0000000000000000 R09: 0000000000000000
[  126.507637][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.507641][T10512] R13: 00007fe308fc6038 R14: 00007fe308fc5fa0 R15: 00007ffde7bdb8d8
[  126.507649][T10512]  </TASK>
[  126.622944][T10500] base_sock_release(ffff888130819800) sk=ffff8881139dd000
[  126.627435][T10500] base_sock_release(ffff88813081aa00) sk=ffff8881139df000
[  131.836985][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  131.839560][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  132.469894][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.473142][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
10:31:15  Registers:
info registers vcpu 0

CPU#0
RAX=b9805f6d02876d00 RBX=ffffffff819683c8 RCX=b9805f6d02876d00 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003000 CR3=00000001246ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=d427c0a7577fcf14 1c233bfcc97fdc3f
XMM02=d4a34e0d7b4797cc d09efa4d78dc0f05 XMM03=59f5193ab0a5e72e e00171c1df534349
XMM04=18fc59f5193ab0a5 e72ee00171c1df53 XMM05=4349d4a34e0d7b47 97ccd09efa4d78dc
XMM06=0f05d427c0a7577f cf141c233bfcc97f XMM07=dc3f8cfcab6326f9 7583baf632acb0af
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fadeb412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=00000000000003f9
RSI=000000000000260e RDI=000000000000260f RBP=00000000000003f9 RSP=ffffc90002bef030
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe309b616c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe309b60fc8 CR3=00000001244ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe308f97498 00007fe308f97470 XMM03=00007fe308f974a8 00007fe308f974a0
XMM04=00007fe309afd100 00007fe308f97460 XMM05=00007fe308f97478 00007fe308f974c0
XMM06=00007fe308f974b8 00007fe308f974b0 XMM07=00007fe308f974a8 00007fe308f974a0
XMM08=0000000000000000 00007fe308e12ee7 XMM09=0000000000000000 00007fe308e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
