last executing test programs:

4m1.17071224s ago: executing program 0 (id=13659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = epoll_create(0xe)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x60000002})
ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x5)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000000101"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1814)

4m1.084071906s ago: executing program 0 (id=13660):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0, 0x0, 0x4004}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

4m0.863908096s ago: executing program 0 (id=13664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m0.773877355s ago: executing program 0 (id=13665):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94)

4m0.693366663s ago: executing program 0 (id=13666):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0x6b3025b977026a30, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x7f, 0x180, 0x6, 0x9, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x80000001, 0x0, 0xffffffc1}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008031}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m0.614534812s ago: executing program 0 (id=13668):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94)

4m0.483301459s ago: executing program 32 (id=13668):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x100, &(0x7f0000000440)=""/216}, 0x94)

2m4.930233748s ago: executing program 3 (id=16261):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)

2m4.844118146s ago: executing program 3 (id=16262):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040))

2m4.843794521s ago: executing program 3 (id=16263):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x25c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
sendto$packet(r4, &(0x7f0000000000)="11b8086b43994ca161977ad15b63d2858ee0f04350610d7840d571fe6d8806c324999a4709b28b8a56780243", 0x2c, 0x2404c001, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @link_local}, 0x32)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

2m4.662901886s ago: executing program 3 (id=16269):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd5}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r2, r3, 0x0, 0x3ffffffffffffa)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x20050890)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

2m4.294978334s ago: executing program 3 (id=16274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

2m4.294611262s ago: executing program 3 (id=16276):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m48.900499871s ago: executing program 33 (id=16276):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m10.319886589s ago: executing program 4 (id=17435):
unshare(0x28000600)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0)

1m10.319747903s ago: executing program 4 (id=17436):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)

1m10.239478858s ago: executing program 4 (id=17437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x48}}, 0x4000880)

1m10.167397177s ago: executing program 4 (id=17438):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x12, 0x60420}, 0x38)

1m10.105342696s ago: executing program 4 (id=17439):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1m10.058057805s ago: executing program 4 (id=17440):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
unshare(0x6a040000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
close(r4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)

55.026302949s ago: executing program 34 (id=17440):
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
unshare(0x6a040000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100)=0xfffffffc, 0x4)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
close(r4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48)

2.272093182s ago: executing program 5 (id=18850):
r0 = socket(0x23, 0x80805, 0x0)
listen(r0, 0x0)
poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2)

2.213433194s ago: executing program 2 (id=18851):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x38, r3, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0)

2.213266533s ago: executing program 5 (id=18852):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x6a, 0x2, 0x0, 0x0)

2.132871306s ago: executing program 2 (id=18853):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000000b80)={0x2, 0x4, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x8, @loopback, 0xfffffffa}}]}, 0x70}, 0x1, 0x7}, 0x0)

2.132524318s ago: executing program 5 (id=18854):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x4a, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0)

2.053582457s ago: executing program 2 (id=18855):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x3d, 0x6, 0x6, 0x7})

2.053357225s ago: executing program 1 (id=18856):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

2.053198047s ago: executing program 2 (id=18857):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.99343246s ago: executing program 1 (id=18858):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)

1.992689463s ago: executing program 1 (id=18859):
unshare(0x28000600)
unshare(0x24040c00)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a4000140", 0x38}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x4180)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111df1800000000850000003b000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x18db8, 0x10000000})
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xfe33)

1.942226727s ago: executing program 2 (id=18860):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.242133054s ago: executing program 5 (id=18861):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00')
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x40000)
sendmsg$nl_route(r1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

1.083422289s ago: executing program 1 (id=18862):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3)
epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff)

1.08189659s ago: executing program 2 (id=18863):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

292.891158ms ago: executing program 5 (id=18864):
socket$alg(0x26, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) (async)
sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}], 0x1, 0x4000840)
shutdown(r2, 0x1) (async)
shutdown(r2, 0x1)
setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async)
setsockopt(r2, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x58, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8d}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x40048a1)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

63.044361ms ago: executing program 1 (id=18865):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x20, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000005)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10, 0x30}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x10, 0x9d, 0x3, 0x4}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x1, 0x4, 0x6, 0x8b}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004800)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xd}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xfffc}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40004}, 0x40)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x40004)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000680)=""/231, &(0x7f0000000780)=0xe7)
setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f00000007c0)={0x8, 0xb5}, 0x2)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r1)
r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r10 = accept(r1, &(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x80)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x18, 0x1407, 0x2, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
sendto$l2tp6(r10, &(0x7f0000000b40)="94fdedc8fb8d691511721f835f327c9756e5d8fe86a4e2b5114684947ba043b9c95ae600e50a850d59c99f17ace30f078b72750e60ce8465239e96320f1e3650e309fb198808170ecb304f2346e785b1ac9003187764dc06c21df5b57ac47c7543d400484a1e4634c9dd37e7fac0ae3ed97adfe6b925158b6cb8fcadfebec9a05a2a4b1b1da31654dfdf76badc517cc1163a5b35801c26602a11f23e5590b644", 0xa0, 0x8040, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000c40)=<r11=>0x0)
r12 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xd0, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000805}, 0x840)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f0000000e00)={0x0, 0x0, 0x1}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000e40)={<r13=>0x0, @in6={{0xa, 0x4e20, 0x725eab83, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x6, 0x9}, &(0x7f0000000f00)=0x90)
getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000f40)={<r14=>r13, 0x4}, &(0x7f0000000f80)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000fc0)={<r15=>r14, 0x1, 0x30, 0x9, 0x7}, &(0x7f0000001000)=0x18)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000001040)={r15, @in={{0x2, 0x4e22, @private=0xa010102}}, 0xffff, 0x259c}, 0x90)
r16 = accept4$packet(r10, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001140)=0x14, 0x80000)
getsockopt$packet_buf(r16, 0x107, 0x5, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=0x1000)

480.808µs ago: executing program 5 (id=18866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
r2 = socket(0x22, 0x2, 0x2)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006001700800a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000000380)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x4, 0x2, 0x5, 0x6, 0x3, 0xac, 0x4, {0x8, 0x2, "5d9ac5613540eda5"}, 0x7, 0x4, 0x6, 0xf8, 0x48, "a4797d6caf8d7eb7b7ea33376b046eca6f4ee4830638e927f996b33fb99aa7d3b5b7b465581f81859936dfb641c664166ee13091b76c1dc698397e98dc1ac19597d57216dea84e99"}}, 0x61)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x9e}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', <r8=>0x0, 0x1, 0x8, 0x7fffffff, 0x400, {{0x1c, 0x4, 0x2, 0x23, 0x70, 0x68, 0x0, 0x24, 0x0, 0x0, @rand_addr=0x64010102, @empty, {[@lsrr={0x83, 0xf, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @noop, @timestamp={0x44, 0x18, 0xa4, 0x0, 0xe, [0x100, 0x33e, 0x3, 0x7e8, 0x7fffffff]}, @generic={0x86, 0x11, "dddf69ff8093762893980da214fcbc"}, @lsrr={0x83, 0x17, 0x9a, [@empty, @loopback, @multicast2, @empty, @multicast2]}, @noop, @ssrr={0x89, 0x7, 0x1a, [@private=0xa010100]}, @end]}}}}})
sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x78, r7, 0x404, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000380)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0xfffffffffffffda3, 0x10, 0x20, 0x70bd2b, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

0s ago: executing program 1 (id=18867):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
r2 = socket(0x22, 0x2, 0x2)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYRES8=r5, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES16=r8, @ANYRESDEC=r5, @ANYRES16=r7, @ANYRES64=r5], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x40c1)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7105d1599e7ad5ac53ea08025d9ac5613540eda5070406f848a4797d6caf8d7eb7b7ea33376b046eca6f4eef830638e927f996b33fb99aa7d3b5abb465581f818599364c8eb7dadb618d5e0091b76c1dc698397e98dc1ac19597d57216dea84e992d70110d127b79e8564bc60bb56eec0180c5ed6f48f2a4fc34d990ada05af62c0c8b4dcb0c2e19af46368c8a97f221397d4a1b5daa8d0452ef73e657f368dc968078992906fac41f"], 0x61)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000fb07000000000000000800000091119e00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r11, 0x89e2, &(0x7f0000000380)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
recvmmsg(r1, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0xfffffffffffffda3, 0x10, 0x20, 0x70bd2b, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804)

kernel console output (not intermixed with test programs):

ver after parsing attributes in process `syz.2.14618'.
[  674.836693][ T7609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14635'.
[  675.111910][ T7629] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  675.115201][ T7629] syzkaller0: entered promiscuous mode
[  675.120417][ T7629] syzkaller0: entered allmulticast mode
[  675.150775][ T7629] tipc: Resetting bearer <eth:syzkaller0>
[  675.160402][ T7629] tipc: Resetting bearer <eth:syzkaller0>
[  675.198547][ T7629] tipc: Disabling bearer <eth:syzkaller0>
[  675.385555][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14650'.
[  675.615837][ T7663] lo speed is unknown, defaulting to 1000
[  676.458244][   T56] Bluetooth: hci0: link tx timeout
[  676.460755][   T56] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  677.306753][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6
[  678.107031][ T7794] __nla_validate_parse: 9 callbacks suppressed
[  678.107049][ T7794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14710'.
[  678.117122][ T7794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14710'.
[  678.123676][ T7794] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  678.194450][ T7797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14711'.
[  678.244324][   T56] Bluetooth: hci0: link tx timeout
[  678.246256][   T56] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  678.376077][ T7805] netlink: 'syz.1.14715': attribute type 1 has an invalid length.
[  678.379607][ T7805] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.14715'.
[  678.491489][   T56] Bluetooth: hci0: command 0x0406 tx timeout
[  678.763053][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14728'.
[  678.766066][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14728'.
[  679.085360][ T7872] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  679.089262][ T7872] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  679.092007][ T7872] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  679.096053][ T7872] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) !
[  679.162057][ T7879] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14748'.
[  679.494097][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14765'.
[  679.496927][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14765'.
[  679.503368][ T7918] vlan7: entered promiscuous mode
[  680.313603][ T7981] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  680.315133][ T7975] lo speed is unknown, defaulting to 1000
[  681.725520][ T8010] netlink: 'syz.3.14797': attribute type 13 has an invalid length.
[  681.884685][ T8025] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  682.227051][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14815'.
[  682.444395][ T8062] openvswitch: netlink: nsh attribute has 65512 unknown bytes.
[  682.446860][ T8062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.562066][ T8065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  682.760384][ T8071] netlink: 'syz.1.14823': attribute type 10 has an invalid length.
[  682.915047][ T8081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  682.919383][ T8081] syzkaller0: entered promiscuous mode
[  682.921517][ T8081] syzkaller0: entered allmulticast mode
[  682.952251][ T8081] tipc: Resetting bearer <eth:syzkaller0>
[  682.956932][ T8080] tipc: Resetting bearer <eth:syzkaller0>
[  682.975519][ T8080] tipc: Disabling bearer <eth:syzkaller0>
[  683.062078][ T8091] netlink: 'syz.3.14833': attribute type 10 has an invalid length.
[  683.065288][ T8091] batadv_slave_1: entered promiscuous mode
[  683.128970][ T8095] netlink: zone id is out of range
[  683.130958][ T8095] netlink: zone id is out of range
[  683.132932][ T8095] netlink: del zone limit has 8 unknown bytes
[  683.229166][ T8105] __nla_validate_parse: 2 callbacks suppressed
[  683.229183][ T8105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14840'.
[  683.271505][ T8104] lo speed is unknown, defaulting to 1000
[  683.326378][ T8110] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  683.809284][ T8136] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14854'.
[  684.186684][ T8172] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  684.197012][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14871'.
[  684.468579][ T8193] bond17: (slave bridge_slave_0): Device is not bonding slave
[  684.470752][ T8193] bond17: option active_slave: invalid value (bridge_slave_0)
[  684.474612][ T8193] bond17 (unregistering): Released all slaves
[  684.505926][ T8196] tunl0: Caught tx_queue_len zero misconfig
[  684.626629][ T8206] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  684.787766][ T8218] lo speed is unknown, defaulting to 1000
[  685.561093][ T8273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14912'.
[  685.692509][ T8283] veth0_to_bridge: entered promiscuous mode
[  685.695226][ T8283] veth0_to_bridge: left promiscuous mode
[  686.104690][ T8305] warn_alloc: 1 callbacks suppressed
[  686.104705][ T8305] syz.3.14924: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  686.111073][ T8305] CPU: 0 UID: 0 PID: 8305 Comm: syz.3.14924 Not tainted syzkaller #0 PREEMPT(full) 
[  686.111094][ T8305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  686.111105][ T8305] Call Trace:
[  686.111114][ T8305]  <TASK>
[  686.111123][ T8305]  dump_stack_lvl+0x189/0x250
[  686.111145][ T8305]  ? __pfx_dump_stack_lvl+0x10/0x10
[  686.111157][ T8305]  ? __pfx__printk+0x10/0x10
[  686.111166][ T8305]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  686.111178][ T8305]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  686.111190][ T8305]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  686.111202][ T8305]  warn_alloc+0x214/0x310
[  686.111214][ T8305]  ? stack_depot_save_flags+0x40/0x860
[  686.111230][ T8305]  ? __pfx_warn_alloc+0x10/0x10
[  686.111242][ T8305]  ? kasan_save_track+0x3e/0x80
[  686.111252][ T8305]  ? __kasan_kmalloc+0x93/0xb0
[  686.111264][ T8305]  ? xsk_setsockopt+0x4dc/0x8d0
[  686.111273][ T8305]  ? do_sock_setsockopt+0x17c/0x1b0
[  686.111282][ T8305]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  686.111288][ T8305]  ? do_syscall_64+0xfa/0xfa0
[  686.111299][ T8305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.111312][ T8305]  __vmalloc_node_range_noprof+0x125/0x12d0
[  686.111337][ T8305]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  686.111350][ T8305]  ? __kasan_kmalloc+0x93/0xb0
[  686.111364][ T8305]  vmalloc_user_noprof+0xad/0xf0
[  686.111375][ T8305]  ? xskq_create+0xbf/0x170
[  686.111386][ T8305]  xskq_create+0xbf/0x170
[  686.111404][ T8305]  xsk_init_queue+0xb0/0x110
[  686.111416][ T8305]  xsk_setsockopt+0x4dc/0x8d0
[  686.111428][ T8305]  ? __pfx_xsk_setsockopt+0x10/0x10
[  686.111439][ T8305]  ? __pfx_aa_sk_perm+0x10/0x10
[  686.111452][ T8305]  ? aa_sock_opt_perm+0xff/0x1b0
[  686.111472][ T8305]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  686.111486][ T8305]  ? __pfx_xsk_setsockopt+0x10/0x10
[  686.111503][ T8305]  do_sock_setsockopt+0x17c/0x1b0
[  686.111550][ T8305]  __x64_sys_setsockopt+0x13f/0x1b0
[  686.111572][ T8305]  do_syscall_64+0xfa/0xfa0
[  686.111591][ T8305]  ? lockdep_hardirqs_on+0x9c/0x150
[  686.111614][ T8305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.111630][ T8305]  ? exc_page_fault+0xab/0x100
[  686.111649][ T8305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.111657][ T8305] RIP: 0033:0x7f80c318efc9
[  686.111666][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.111675][ T8305] RSP: 002b:00007f80c405c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  686.111684][ T8305] RAX: ffffffffffffffda RBX: 00007f80c33e5fa0 RCX: 00007f80c318efc9
[  686.111690][ T8305] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  686.111696][ T8305] RBP: 00007f80c3211f91 R08: 0000000000000004 R09: 0000000000000000
[  686.111701][ T8305] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  686.111707][ T8305] R13: 00007f80c33e6038 R14: 00007f80c33e5fa0 R15: 00007ffec5b63e48
[  686.111722][ T8305]  </TASK>
[  686.111725][ T8305] Mem-Info:
[  686.205309][ T8305] active_anon:6106 inactive_anon:0 isolated_anon:0
[  686.205309][ T8305]  active_file:1349 inactive_file:38500 isolated_file:0
[  686.205309][ T8305]  unevictable:1768 dirty:170 writeback:0
[  686.205309][ T8305]  slab_reclaimable:12084 slab_unreclaimable:180138
[  686.205309][ T8305]  mapped:18155 shmem:2452 pagetables:1359
[  686.205309][ T8305]  sec_pagetables:0 bounce:0
[  686.205309][ T8305]  kernel_misc_reclaimable:0
[  686.205309][ T8305]  free:1032370 free_pcp:26606 free_cma:0
[  686.219166][ T8305] Node 0 active_anon:12800kB inactive_anon:0kB active_file:1832kB inactive_file:145896kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62640kB dirty:280kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9192kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  686.228755][ T8305] Node 1 active_anon:11624kB inactive_anon:0kB active_file:3564kB inactive_file:8104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9980kB dirty:400kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4872kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  686.238228][ T8305] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  686.246544][ T8305] lowmem_reserve[]: 0 1597 2129 2129 2129
[  686.248326][ T8305] Node 0 DMA32 free:1285236kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1684kB inactive_anon:0kB active_file:336kB inactive_file:152kB unevictable:0kB writepending:16kB zspages:0kB present:2080636kB managed:1635812kB mlocked:0kB bounce:0kB free_pcp:47684kB local_pcp:32816kB free_cma:0kB
[  686.257444][ T8305] lowmem_reserve[]: 0 0 531 531 531
[  686.258984][ T8305] Node 0 Normal free:10812kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11116kB inactive_anon:0kB active_file:1496kB inactive_file:145744kB unevictable:3536kB writepending:264kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:1880kB free_cma:0kB
[  686.268325][ T8305] lowmem_reserve[]: 0 0 0 0 0
[  686.269824][ T8305] Node 1 Normal free:2818072kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11624kB inactive_anon:0kB active_file:3564kB inactive_file:8104kB unevictable:3536kB writepending:400kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:56728kB local_pcp:27280kB free_cma:0kB
[  686.279754][ T8305] lowmem_reserve[]: 0 0 0 0 0
[  686.281189][ T8305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  686.284777][ T8305] Node 0 DMA32: 157*4kB (UME) 104*8kB (UME) 238*16kB (UME) 26*32kB (UM) 277*64kB (UM) 55*128kB (UM) 146*256kB (UM) 153*512kB (UM) 86*1024kB (UM) 1*2048kB (U) 256*4096kB (UM) = 1285268kB
[  686.290078][ T8305] Node 0 Normal: 232*4kB (UME) 34*8kB (UME) 19*16kB (UME) 72*32kB (UME) 66*64kB (UM) 16*128kB (UME) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10848kB
[  686.294701][ T8305] Node 1 Normal: 1883*4kB (UE) 821*8kB (UM) 415*16kB (UME) 1034*32kB (UME) 837*64kB (UM) 485*128kB (UM) 222*256kB (UME) 116*512kB (UME) 91*1024kB (UM) 15*2048kB (UME) 588*4096kB (UM) = 2818052kB
[  686.300316][ T8305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  686.302956][ T8305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  686.305692][ T8305] 42301 total pagecache pages
[  686.307041][ T8305] 0 pages in swap cache
[  686.308399][ T8305] Free swap  = 124996kB
[  686.309614][ T8305] Total swap = 124996kB
[  686.310812][ T8305] 1834877 pages RAM
[  686.311901][ T8305] 0 pages HighMem/MovableOnly
[  686.313234][ T8305] 387250 pages reserved
[  686.314446][ T8305] 0 pages cma reserved
[  686.503869][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14928'.
[  686.629652][   T33] audit: type=1800 audit(1762467359.375:12): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14928" name="memory.events" dev="tmpfs" ino=1969 res=0 errno=0
[  686.932523][ T8347] netlink: 844 bytes leftover after parsing attributes in process `syz.2.14945'.
[  687.088170][ T8361] tap0: tun_chr_ioctl cmd 1074025677
[  687.089880][ T8361] tap0: linktype set to 6
[  687.101669][ T8363] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  687.173393][ T8364] ip6gre5: entered promiscuous mode
[  687.174946][ T8364] ip6gre5: entered allmulticast mode
[  688.387102][ T8443] bond6: option arp_all_targets: invalid value (3)
[  688.392914][ T8443] bond6 (unregistering): Released all slaves
[  688.571100][ T8449] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14986'.
[  688.576952][ T8449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14986'.
[  688.639514][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14989'.
[  688.662061][ T8455] netlink: 'syz.2.14989': attribute type 5 has an invalid length.
[  688.664458][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14989'.
[  689.028150][ T8490] netlink: 'syz.2.15005': attribute type 1 has an invalid length.
[  689.030843][ T8490] netlink: 'syz.2.15005': attribute type 1 has an invalid length.
[  689.399251][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15017'.
[  689.449053][ T8525] netlink: 204 bytes leftover after parsing attributes in process `syz.1.15015'.
[  689.686516][ T8534] netlink: 'syz.2.15020': attribute type 2 has an invalid length.
[  690.132354][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15028'.
[  690.163362][ T8560] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  690.181404][ T8560] bond16: left allmulticast mode
[  690.182880][ T8560] bond16: left promiscuous mode
[  690.184588][ T8560] team0: port 1(bond16) entered disabled state
[  690.202299][ T8560] netlink: 'syz.2.15029': attribute type 10 has an invalid length.
[  690.204735][ T8560] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  690.207650][ T8560] .`: (slave wlan1): refused to change device type
[  690.211763][ T8560] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  690.214652][ T8560] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  690.217768][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.272475][ T8562] mac80211_hwsim hwsim28 wlan0: Caught tx_queue_len zero misconfig
[  690.367422][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  690.382010][ T8571] lo speed is unknown, defaulting to 1000
[  690.412992][ T8575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  690.531865][ T8579] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  690.635227][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15039'.
[  690.647503][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15039'.
[  690.667842][ T8583] gretap1: entered promiscuous mode
[  691.255981][ T8593] infiniband syz0: set down
[  691.263254][ T8593] infiniband syz0: added bond_slave_0
[  691.291281][ T8593] RDS/IB: syz0: added
[  691.294765][ T8593] smc: adding ib device syz0 with port count 1
[  691.297636][ T8593] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  691.817658][ T8631] netlink: ct family unspecified
[  691.819462][ T8631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  692.000816][ T8653] lo speed is unknown, defaulting to 1000
[  694.347787][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15112'.
[  694.351553][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15112'.
[  694.383019][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15112'.
[  694.456941][ T8770] netlink: 'syz.1.15115': attribute type 3 has an invalid length.
[  694.562384][ T8784] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15123'.
[  695.679933][ T8849] syzkaller0: entered promiscuous mode
[  695.691435][ T8849] syzkaller0: entered allmulticast mode
[  695.732517][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.736047][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.761471][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.764918][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.835790][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.840163][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15156'.
[  695.846184][ T8868] netlink: 'syz.3.15159': attribute type 19 has an invalid length.
[  695.849393][ T8868] netlink: 'syz.3.15159': attribute type 20 has an invalid length.
[  696.019712][ T8882] lo speed is unknown, defaulting to 1000
[  696.266642][ T8898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.781876][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  696.789409][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  696.791789][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  696.794259][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  697.029935][ T8925] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  697.033812][ T8925] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  698.194122][ T9027] netlink: 'syz.1.15228': attribute type 13 has an invalid length.
[  698.343332][ T9040] veth1: entered allmulticast mode
[  698.369523][ T9044] netlink: 'syz.1.15236': attribute type 6 has an invalid length.
[  698.699719][ T9084] sctp: [Deprecated]: syz.2.15255 (pid 9084) Use of int in maxseg socket option.
[  698.699719][ T9084] Use struct sctp_assoc_value instead
[  698.744153][ T9085] veth0_to_bridge: left allmulticast mode
[  698.745895][ T9085] veth0_to_bridge: left promiscuous mode
[  698.747920][ T9085] bridge0: port 1(veth0_to_bridge) entered disabled state
[  698.798001][ T9085] bond0: (slave bridge0): Releasing backup interface
[  698.808027][ T9085] vlan3 (unregistering): left allmulticast mode
[  698.809956][ T9085] bridge0 (unregistering): left allmulticast mode
[  698.811944][ T9085] vlan3 (unregistering): left promiscuous mode
[  698.813788][ T9085] bridge0 (unregistering): left promiscuous mode
[  698.814857][ T9091] netlink: 'syz.2.15258': attribute type 16 has an invalid length.
[  698.815688][ T9085] bridge8: port 1(vlan3) entered disabled state
[  699.138440][   T33] audit: type=1800 audit(1762467371.885:13): pid=9118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15269" name="memory.events" dev="tmpfs" ino=25239 res=0 errno=0
[  699.473777][ T9167] __nla_validate_parse: 11 callbacks suppressed
[  699.473790][ T9167] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15291'.
[  699.664784][ T9194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  699.666912][ T9194] IPv6: NLM_F_CREATE should be set when creating new route
[  699.669214][ T9194] IPv6: NLM_F_CREATE should be set when creating new route
[  699.736351][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15306'.
[  699.766816][ T9202] netlink: 240 bytes leftover after parsing attributes in process `syz.3.15301'.
[  699.821198][ T9205] can: request_module (can-proto-5) failed.
[  700.331379][ T9236] tap0: tun_chr_ioctl cmd 1074025677
[  700.333261][ T9236] tap0: linktype set to 804
[  700.481210][ T9246] netlink: 'syz.2.15324': attribute type 21 has an invalid length.
[  700.484264][ T9246] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15324'.
[  700.488480][ T9246] netlink: 'syz.2.15324': attribute type 4 has an invalid length.
[  700.491511][ T9246] netlink: 3 bytes leftover after parsing attributes in process `syz.2.15324'.
[  700.660047][ T9260] gtp2: entered promiscuous mode
[  700.666901][ T9260] gtp2: entered allmulticast mode
[  700.993629][ T9292] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  701.002735][ T9296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15349'.
[  701.224016][ T9296] bond3: (slave macvlan2): Removing an active aggregator
[  701.227009][ T9296] bond3: (slave macvlan2): Releasing backup interface
[  701.233815][ T9296] bond0 (unregistering): Released all slaves
[  701.250140][ T9307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.252531][ T9307] syzkaller0: entered promiscuous mode
[  701.254241][ T9307] syzkaller0: entered allmulticast mode
[  701.273489][ T9307] tipc: Resetting bearer <eth:syzkaller0>
[  701.276296][ T9306] tipc: Resetting bearer <eth:syzkaller0>
[  701.308535][ T9306] tipc: Disabling bearer <eth:syzkaller0>
[  701.427592][ T9316] lo speed is unknown, defaulting to 1000
[  701.649265][ T9328] netlink: 'syz.3.15362': attribute type 2 has an invalid length.
[  701.651683][ T9328] netlink: 119 bytes leftover after parsing attributes in process `syz.3.15362'.
[  701.987107][ T9341] lo speed is unknown, defaulting to 1000
[  702.153138][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15375'.
[  702.179816][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15376'.
[  702.518403][ T9372] bond17: option fail_over_mac: invalid value (127)
[  702.523576][ T9372] bond17 (unregistering): Released all slaves
[  702.683730][ T9377] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  703.382929][ T9415] macsec4: entered promiscuous mode
[  703.384492][ T9415] macsec4: entered allmulticast mode
[  703.956086][ T9467] netlink: 6 bytes leftover after parsing attributes in process `syz.1.15418'.
[  703.962371][ T9467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  704.054984][ T9480] syzkaller0: entered promiscuous mode
[  704.056591][ T9480] syzkaller0: entered allmulticast mode
[  706.153055][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15441'.
[  706.167911][ T9536] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  706.379986][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15449'.
[  706.383506][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15449'.
[  706.386756][ T9561] netlink: 'syz.3.15449': attribute type 18 has an invalid length.
[  706.642627][ T9587] netlink: 'syz.2.15458': attribute type 2 has an invalid length.
[  706.658822][ T9587] netlink: 'syz.2.15458': attribute type 1 has an invalid length.
[  706.661095][ T9587] netlink: 108 bytes leftover after parsing attributes in process `syz.2.15458'.
[  706.784403][ T6878] IPVS: starting estimator thread 0...
[  706.878604][ T9605] IPVS: using max 62 ests per chain, 148800 per kthread
[  706.933246][ T9619] syzkaller1: entered promiscuous mode
[  706.934950][ T9619] syzkaller1: entered allmulticast mode
[  707.022774][ T9626] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  708.111056][ T9685] lo speed is unknown, defaulting to 1000
[  708.848689][ T9723] tipc: Failed to remove unknown binding: 66,1,1/2636486217:4109637428/4109637430
[  708.852519][ T9723] tipc: Failed to remove unknown binding: 66,1,1/2636486217:4109637428/4109637430
[  708.855775][ T9723] tipc: Failed to remove unknown binding: 66,1,1/2636486217:4109637428/4109637430
[  709.292461][ T9744] netlink: 'syz.3.15527': attribute type 2 has an invalid length.
[  709.382884][ T9753] netlink: 'syz.2.15532': attribute type 298 has an invalid length.
[  709.950984][ T9782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15546'.
[  709.954611][ T9782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15546'.
[  709.958871][ T9782] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  710.070660][ T9790] netlink: 1053 bytes leftover after parsing attributes in process `syz.1.15548'.
[  710.245731][ T9807] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.15555'.
[  710.250010][ T9807] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  710.585189][ T9822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15564'.
[  711.149411][ T9855] netlink: 'syz.1.15576': attribute type 1 has an invalid length.
[  711.846255][ T9899] netlink: 'syz.2.15595': attribute type 1 has an invalid length.
[  711.850688][ T9899] netlink: 'syz.2.15595': attribute type 2 has an invalid length.
[  711.854254][ T9899] netlink: 'syz.2.15595': attribute type 1 has an invalid length.
[  711.856780][ T9899] netlink: 'syz.2.15595': attribute type 2 has an invalid length.
[  712.259377][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15602'.
[  712.275629][ T9925] team1: entered promiscuous mode
[  712.278728][ T9925] team1: entered allmulticast mode
[  712.281183][ T9925] 8021q: adding VLAN 0 to HW filter on device team1
[  712.693292][ T9932] lo speed is unknown, defaulting to 1000
[  713.206261][ T9948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15609'.
[  713.335287][   T57] block nbd3: Receive control failed (result -32)
[  713.575304][ T9976] bond0: Caught tx_queue_len zero misconfig
[  713.627278][ T9984] netlink: 'syz.2.15622': attribute type 10 has an invalid length.
[  713.772055][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.885991][T10010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15631'.
[  714.150574][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15640'.
[  714.777952][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15656'.
[  715.015117][T10108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15672'.
[  715.046984][T10112] netlink: 'syz.3.15674': attribute type 1 has an invalid length.
[  715.050104][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15674'.
[  715.163027][T10123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  716.226061][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15685'.
[  716.520732][T10175] netlink: 'syz.3.15698': attribute type 1 has an invalid length.
[  716.536341][T10179] netlink: 'syz.1.15701': attribute type 2 has an invalid length.
[  716.540567][T10175] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  716.548538][T10179] !: entered promiscuous mode
[  716.552076][   T12] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  716.552598][T10175] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.667380][ T5826] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  716.814957][T10201] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  716.839324][T10199] dvmrp0: left allmulticast mode
[  717.662074][T10251] netlink: 292 bytes leftover after parsing attributes in process `syz.2.15733'.
[  717.713647][T10255] netlink: 'syz.2.15735': attribute type 1 has an invalid length.
[  718.027938][T10279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15746'.
[  718.284577][T10299] netlink: 'syz.2.15754': attribute type 1 has an invalid length.
[  718.638000][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15766'.
[  718.640709][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15766'.
[  718.643344][T10325] netlink: 'syz.1.15766': attribute type 4 has an invalid length.
[  718.647989][T10325] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15766'.
[  718.992624][T10344] lo speed is unknown, defaulting to 1000
[  719.182683][T10332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  719.403194][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15778'.
[  719.963099][T10395] netlink: 'syz.1.15788': attribute type 3 has an invalid length.
[  719.965614][T10395] netlink: 'syz.1.15788': attribute type 7 has an invalid length.
[  719.972553][T10395] netlink: 'syz.1.15788': attribute type 8 has an invalid length.
[  719.975164][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15788'.
[  721.114473][T10424] bridge27: entered promiscuous mode
[  721.116682][T10424] bridge27: entered allmulticast mode
[  721.126843][T10427] tun0: tun_chr_ioctl cmd 1074025675
[  721.129866][T10427] tun0: persist disabled
[  721.165993][T10429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  721.290516][T10443] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15811'.
[  722.190676][T10453] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  722.208777][ T6878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  722.247386][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  722.649034][ T6878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  722.920362][T10512] netlink: 'syz.3.15836': attribute type 1 has an invalid length.
[  722.930148][T10512] netlink: 'syz.3.15836': attribute type 3 has an invalid length.
[  722.933063][T10512] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15836'.
[  723.104067][ T5826] bond19 (unregistering): (slave ip6gretap4): Releasing active interface
[  723.107767][ T5826] ip6gretap4 (unregistering): left promiscuous mode
[  723.110357][ T5826] ip6gretap4 (unregistering): left allmulticast mode
[  723.148749][ T5826] bond22 (unregistering): (slave ip6gretap5): Releasing active interface
[  723.151896][ T5826] bond22 (unregistering): (slave ip6gretap5): the permanent HWaddr of slave - e2:09:db:5a:98:8b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  723.159077][ T5826] ip6gretap5 (unregistering): left promiscuous mode
[  723.364748][ T5826] bond4 (unregistering): (slave gretap1): Releasing active interface
[  723.381373][ T5826] bond13 (unregistering): (slave gretap2): Releasing active interface
[  723.560198][ T5826] bond5 (unregistering): (slave geneve2): Releasing active interface
[  724.180723][ T5826] bond12 (unregistering): (slave macvlan4): Releasing backup interface
[  724.187860][ T5826] bond0 (unregistering): Released all slaves
[  724.288457][ T5826] bond1 (unregistering): Released all slaves
[  724.384444][ T5826] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[  724.387803][ T5826] bond2 (unregistering): (slave wireguard1): Releasing backup interface
[  724.390658][ T5826] bond2 (unregistering): Released all slaves
[  724.398534][ T5826] bond3 (unregistering): Released all slaves
[  724.407103][ T5826] bond4 (unregistering): Released all slaves
[  724.497750][ T5826] bond5 (unregistering): Released all slaves
[  724.581686][ T5826] bond6 (unregistering): Released all slaves
[  724.670337][ T5826] bond7 (unregistering): Released all slaves
[  724.761316][ T5826] bond8 (unregistering): Released all slaves
[  724.858822][ T5826] bond9 (unregistering): Released all slaves
[  724.865813][ T5826] bond10 (unregistering): Released all slaves
[  724.966101][ T5826] bond11 (unregistering): Released all slaves
[  725.082164][ T5826] bond12 (unregistering): Released all slaves
[  725.090708][ T5826] bond13 (unregistering): Released all slaves
[  725.198985][ T5826] bond14 (unregistering): Released all slaves
[  725.209868][ T5826] bond15 (unregistering): Released all slaves
[  725.331607][ T5826] bond16 (unregistering): Released all slaves
[  725.440396][ T5826] bond17 (unregistering): (slave bond18): Releasing backup interface
[  725.443815][ T5826] bond18 (unregistering): left promiscuous mode
[  725.446367][ T5826] bond17 (unregistering): Released all slaves
[  725.558676][ T5826] bond18 (unregistering): Released all slaves
[  725.566252][ T5826] bond19 (unregistering): Released all slaves
[  725.664564][ T5826] bond20 (unregistering): Released all slaves
[  725.675761][ T5826] bond21 (unregistering): Released all slaves
[  725.848505][ T5826] bond22 (unregistering): (slave veth13): Releasing active interface
[  725.851441][ T5826] bond22 (unregistering): Released all slaves
[  725.958659][ T5826] bond23 (unregistering): Released all slaves
[  725.966872][ T5826] bond24 (unregistering): Released all slaves
[  726.070869][ T5826] bond25 (unregistering): Released all slaves
[  726.161148][ T5826] bond26 (unregistering): Released all slaves
[  726.168318][ T5826] bond27 (unregistering): Released all slaves
[  726.215302][T10522] lo speed is unknown, defaulting to 1000
[  726.425215][T10541] : renamed from wg2
[  726.463227][ T5826] tipc: Disabling bearer <ib:caif0>
[  726.490389][ T5826] tipc: Disabling bearer <ib:macvlan0>
[  726.506125][ T5826] tipc: Left network mode
[  727.161742][T10573] lo speed is unknown, defaulting to 1000
[  727.167501][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15859'.
[  727.170735][T10579] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  727.263021][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15860'.
[  727.287645][T10587] netlink: 'syz.3.15860': attribute type 2 has an invalid length.
[  727.294786][T10587] netlink: 'syz.3.15860': attribute type 1 has an invalid length.
[  727.432108][T10593] netlink: 'syz.3.15862': attribute type 1 has an invalid length.
[  727.435110][T10593] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.15862'.
[  727.562543][T10599] bond0: (slave rose0): Releasing backup interface
[  728.105763][T10628] netlink: 'syz.1.15873': attribute type 6 has an invalid length.
[  728.116126][T10628] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15873'.
[  728.136425][T10628] nbd: couldn't find a device at index 0
[  728.183450][ T5826] hsr_slave_0: left promiscuous mode
[  728.594596][   T27] smc: removing ib device syz2
[  729.355499][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15884'.
[  729.450516][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15885'.
[  729.500343][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15887'.
[  729.523952][T10672] netlink: 'syz.1.15885': attribute type 1 has an invalid length.
[  729.620979][T10670] bond17: entered promiscuous mode
[  729.625079][T10679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  729.625294][T10670] 8021q: adding VLAN 0 to HW filter on device bond17
[  729.627310][T10679] IPv6: NLM_F_CREATE should be set when creating new route
[  729.627436][T10679] IPv6: NLM_F_CREATE should be set when creating new route
[  729.640904][T10679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  729.687906][T10670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  729.696714][T10670] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15887'.
[  729.720802][T10675] 8021q: adding VLAN 0 to HW filter on device bond17
[  729.723234][T10675] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  729.727165][T10675] bond17: (slave wireguard0): Error -95 calling set_mac_address
[  729.824283][T10679] bond17: (slave wireguard0): The slave device specified does not support setting the MAC address
[  729.841531][T10679] bond17: (slave wireguard0): Error -95 calling set_mac_address
[  730.240407][T10705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15899'.
[  730.246393][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15899'.
[  730.416443][T10711] bond0: (slave rose0): Enslaving as an active interface with an up link
[  730.992593][T10748] netlink: 'syz.2.15919': attribute type 13 has an invalid length.
[  730.995723][T10748] netlink: 'syz.2.15919': attribute type 17 has an invalid length.
[  731.227681][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  731.259273][T10748] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  731.597496][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  731.884387][T10783] netlink: 'syz.3.15934': attribute type 3 has an invalid length.
[  731.889078][T10783] syz_tun: entered allmulticast mode
[  732.008104][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.010514][ T5844] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.397412][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  732.929256][T10780] syz_tun: left allmulticast mode
[  733.192354][T10826] team0: Caught tx_queue_len zero misconfig
[  733.270137][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15956'.
[  734.225387][T10885] ip6gre6: entered allmulticast mode
[  734.332717][T10897] team0: Device gtp1 is up. Set it down before adding it as a team port
[  734.508609][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15985'.
[  734.647032][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15991'.
[  734.891358][T10936] lo: Caught tx_queue_len zero misconfig
[  735.264376][T10962] netlink: 'syz.2.16009': attribute type 8 has an invalid length.
[  735.609319][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16017'.
[  736.033364][T11002] netlink: 'syz.2.16024': attribute type 2 has an invalid length.
[  736.036462][T11002] netlink: 'syz.2.16024': attribute type 9 has an invalid length.
[  736.039739][T11002] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16024'.
[  736.087424][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  737.115318][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16042'.
[  737.293653][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16052'.
[  737.571577][T11088] netlink: zone id is out of range
[  737.692009][T11099] netlink: 'syz.2.16067': attribute type 13 has an invalid length.
[  737.694964][T11099] netlink: 'syz.2.16067': attribute type 17 has an invalid length.
[  737.728925][T11099] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  737.747811][ T9108] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  737.758524][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16072'.
[  737.978018][T11114] vlan2: entered promiscuous mode
[  737.980012][T11114] bond0: entered promiscuous mode
[  737.981940][T11114] ip6gretap2: entered promiscuous mode
[  737.987652][ T9108] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.267638][ T9374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.271030][ T9374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.329486][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  738.946350][T11187] ip6tnl0: Caught tx_queue_len zero misconfig
[  738.950231][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16103'.
[  739.032155][T11195] vxcan1: entered allmulticast mode
[  739.082021][T11200] netlink: 'syz.3.16107': attribute type 12 has an invalid length.
[  739.181961][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16111'.
[  739.243875][T11210] netlink: 'syz.3.16112': attribute type 2 has an invalid length.
[  739.256679][T11210] : entered promiscuous mode
[  739.264321][T11210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16112'.
[  739.360856][T11220] v: renamed from ip6_vti0 (while UP)
[  739.516699][T11235] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.16121'.
[  739.521570][T11235] openvswitch: netlink: Message has 6 unknown bytes.
[  739.554228][T11239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.752312][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16126'.
[  739.755657][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16126'.
[  740.541647][T11288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  740.618701][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16139'.
[  740.630217][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16139'.
[  740.945683][T11306] netlink: 'syz.2.16146': attribute type 8 has an invalid length.
[  740.948986][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16146'.
[  740.956045][T11306] bond0: entered promiscuous mode
[  740.961793][T11306] bond0: left promiscuous mode
[  740.997667][T11308] netlink: 'syz.2.16146': attribute type 8 has an invalid length.
[  741.000446][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16146'.
[  741.011807][T11308] bond0: entered promiscuous mode
[  741.014250][T11308] bond0: left promiscuous mode
[  741.091939][T11311] sctp: [Deprecated]: syz.3.16147 (pid 11311) Use of int in max_burst socket option deprecated.
[  741.091939][T11311] Use struct sctp_assoc_value instead
[  741.384174][T11330] tap0: tun_chr_ioctl cmd 1074025677
[  741.386522][T11330] tap0: linktype set to 825
[  741.544037][   T33] audit: type=1800 audit(1762467414.285:14): pid=11339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16159" name="$" dev="tmpfs" ino=26601 res=0 errno=0
[  742.124777][T11383] @: renamed from veth0_vlan
[  742.247466][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  742.282777][T11399] netlink: 'syz.3.16186': attribute type 1 has an invalid length.
[  742.397710][T11415] syzkaller1: entered promiscuous mode
[  742.399300][T11415] syzkaller1: entered allmulticast mode
[  742.595673][T11436] netlink: 'syz.1.16199': attribute type 12 has an invalid length.
[  742.981973][T11472] syzkaller0: entered promiscuous mode
[  742.985354][T11472] syzkaller0: entered allmulticast mode
[  743.147607][T11480] bond0: option lp_interval: invalid value (0)
[  743.150038][T11480] bond0: option lp_interval: allowed values 1 - 2147483647
[  743.201747][T11486] netlink: 'syz.3.16219': attribute type 12 has an invalid length.
[  743.750109][T11524] netlink: 'syz.2.16236': attribute type 6 has an invalid length.
[  744.126706][T11532] __nla_validate_parse: 2 callbacks suppressed
[  744.126726][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16239'.
[  744.181934][T11534] netlink: 'syz.1.16240': attribute type 33 has an invalid length.
[  744.184428][T11534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16240'.
[  744.556740][T11553] x9: renamed from bridge_slave_0
[  744.644481][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16254'.
[  745.521821][T11584] netlink: 'syz.3.16263': attribute type 33 has an invalid length.
[  745.525196][T11584] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16263'.
[  745.551303][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16263'.
[  745.656773][T11594] veth1_to_bond: entered allmulticast mode
[  745.660868][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16268'.
[  745.725767][T11594] veth1_to_bond (unregistering): left allmulticast mode
[  745.949796][T11603] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  746.355668][T11628] bridge0: port 1(macvtap3) entered blocking state
[  746.357935][T11628] bridge0: port 1(macvtap3) entered disabled state
[  746.360127][T11628] macvtap3: entered allmulticast mode
[  746.361760][T11628] bridge0: entered allmulticast mode
[  746.364609][T11628] macvtap3: left allmulticast mode
[  746.366180][T11628] bridge0: left allmulticast mode
[  747.199332][T11630] syz.1.16283: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  747.205245][T11630] CPU: 0 UID: 0 PID: 11630 Comm: syz.1.16283 Not tainted syzkaller #0 PREEMPT(full) 
[  747.205259][T11630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  747.205265][T11630] Call Trace:
[  747.205270][T11630]  <TASK>
[  747.205276][T11630]  dump_stack_lvl+0x189/0x250
[  747.205293][T11630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  747.205304][T11630]  ? __pfx__printk+0x10/0x10
[  747.205313][T11630]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  747.205325][T11630]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  747.205336][T11630]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  747.205348][T11630]  warn_alloc+0x214/0x310
[  747.205364][T11630]  ? __pfx_warn_alloc+0x10/0x10
[  747.205380][T11630]  ? __get_vm_area_node+0x28f/0x300
[  747.205392][T11630]  ? veth_dev_init+0x368/0x570
[  747.205402][T11630]  __vmalloc_node_range_noprof+0x690/0x12d0
[  747.205413][T11630]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  747.205438][T11630]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  747.205449][T11630]  ? __kasan_kmalloc_large+0x1c/0xa0
[  747.205464][T11630]  ? rcu_is_watching+0x15/0xb0
[  747.205474][T11630]  ? veth_dev_init+0x368/0x570
[  747.205482][T11630]  __kvmalloc_node_noprof+0x674/0x910
[  747.205494][T11630]  ? veth_dev_init+0x368/0x570
[  747.205502][T11630]  ? __pfx_netdev_lock_cmp_fn+0x10/0x10
[  747.205513][T11630]  veth_dev_init+0x368/0x570
[  747.205525][T11630]  register_netdevice+0x6bf/0x1ae0
[  747.205540][T11630]  ? snprintf+0xda/0x120
[  747.205551][T11630]  ? __pfx_register_netdevice+0x10/0x10
[  747.205560][T11630]  ? __pfx_snprintf+0x10/0x10
[  747.205569][T11630]  ? __asan_memset+0x22/0x50
[  747.205579][T11630]  ? dev_addr_mod+0x2ce/0x3d0
[  747.205591][T11630]  veth_newlink+0x5d4/0xa60
[  747.205600][T11630]  ? __pfx_veth_newlink+0x10/0x10
[  747.205607][T11630]  ? css_rstat_updated+0x23a/0x4f0
[  747.205623][T11630]  ? __pfx_css_rstat_updated+0x10/0x10
[  747.205661][T11630]  ? validate_linkmsg+0x765/0x950
[  747.205676][T11630]  ? __pfx_veth_newlink+0x10/0x10
[  747.205685][T11630]  rtnl_newlink_create+0x310/0xb00
[  747.205696][T11630]  ? __mutex_lock+0x5bb/0x1350
[  747.205710][T11630]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  747.205720][T11630]  ? __pfx___mutex_lock+0x10/0x10
[  747.205756][T11630]  ? ns_capable+0x8a/0xf0
[  747.205768][T11630]  rtnl_newlink+0x16e4/0x1c80
[  747.205781][T11630]  ? netlink_deliver_tap+0x19c/0x1b0
[  747.205795][T11630]  ? __pfx_rtnl_newlink+0x10/0x10
[  747.205841][T11630]  ? __dev_queue_xmit+0x1d79/0x3b50
[  747.205849][T11630]  ? kasan_save_track+0x3e/0x80
[  747.205859][T11630]  ? __kasan_slab_alloc+0x6c/0x80
[  747.205873][T11630]  ? __lock_acquire+0xab9/0xd20
[  747.205893][T11630]  ? __pfx_rtnl_newlink+0x10/0x10
[  747.205904][T11630]  rtnetlink_rcv_msg+0x7cf/0xb70
[  747.205917][T11630]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  747.205928][T11630]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  747.205938][T11630]  ? ref_tracker_free+0x63a/0x7d0
[  747.205947][T11630]  ? __asan_memcpy+0x40/0x70
[  747.205957][T11630]  ? __pfx_ref_tracker_free+0x10/0x10
[  747.205970][T11630]  netlink_rcv_skb+0x208/0x470
[  747.205983][T11630]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  747.205996][T11630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  747.206014][T11630]  ? netlink_deliver_tap+0x2e/0x1b0
[  747.206025][T11630]  netlink_unicast+0x82f/0x9e0
[  747.206040][T11630]  ? __pfx_netlink_unicast+0x10/0x10
[  747.206052][T11630]  ? netlink_sendmsg+0x642/0xb30
[  747.206059][T11630]  ? skb_put+0x11b/0x210
[  747.206069][T11630]  netlink_sendmsg+0x805/0xb30
[  747.206081][T11630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.206090][T11630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  747.206103][T11630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  747.206112][T11630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  747.206120][T11630]  __sock_sendmsg+0x21c/0x270
[  747.206133][T11630]  ____sys_sendmsg+0x505/0x830
[  747.206145][T11630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  747.206158][T11630]  ? import_iovec+0x74/0xa0
[  747.206170][T11630]  ___sys_sendmsg+0x21f/0x2a0
[  747.206180][T11630]  ? __pfx____sys_sendmsg+0x10/0x10
[  747.206206][T11630]  ? __fget_files+0x2a/0x420
[  747.206213][T11630]  ? __fget_files+0x3a0/0x420
[  747.206225][T11630]  __x64_sys_sendmsg+0x19b/0x260
[  747.206235][T11630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  747.206252][T11630]  ? do_syscall_64+0xbe/0xfa0
[  747.206265][T11630]  do_syscall_64+0xfa/0xfa0
[  747.206275][T11630]  ? lockdep_hardirqs_on+0x9c/0x150
[  747.206286][T11630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.206294][T11630]  ? exc_page_fault+0xab/0x100
[  747.206306][T11630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.206314][T11630] RIP: 0033:0x7f8cfcb8efc9
[  747.206324][T11630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  747.206331][T11630] RSP: 002b:00007f8cfda59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.206340][T11630] RAX: ffffffffffffffda RBX: 00007f8cfcde5fa0 RCX: 00007f8cfcb8efc9
[  747.206347][T11630] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003
[  747.206352][T11630] RBP: 00007f8cfcc11f91 R08: 0000000000000000 R09: 0000000000000000
[  747.206357][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  747.206362][T11630] R13: 00007f8cfcde6038 R14: 00007f8cfcde5fa0 R15: 00007ffd7f67d668
[  747.206377][T11630]  </TASK>
[  747.206380][T11630] Mem-Info:
[  747.361729][T11630] active_anon:5949 inactive_anon:0 isolated_anon:0
[  747.361729][T11630]  active_file:1349 inactive_file:38524 isolated_file:0
[  747.361729][T11630]  unevictable:1768 dirty:112 writeback:0
[  747.361729][T11630]  slab_reclaimable:12073 slab_unreclaimable:118170
[  747.361729][T11630]  mapped:18176 shmem:2450 pagetables:1348
[  747.361729][T11630]  sec_pagetables:0 bounce:0
[  747.361729][T11630]  kernel_misc_reclaimable:0
[  747.361729][T11630]  free:1103710 free_pcp:15676 free_cma:0
[  747.374612][T11630] Node 0 active_anon:11904kB inactive_anon:0kB active_file:1840kB inactive_file:145992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62648kB dirty:172kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8632kB pagetables:3188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  747.383875][T11630] Node 1 active_anon:11892kB inactive_anon:0kB active_file:3556kB inactive_file:8104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10056kB dirty:276kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4400kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  747.392509][T11630] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  747.400942][T11630] lowmem_reserve[]: 0 1597 2129 2129 2129
[  747.402581][T11630] Node 0 DMA32 free:1392488kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:852kB inactive_anon:0kB active_file:340kB inactive_file:232kB unevictable:0kB writepending:12kB zspages:0kB present:2080636kB managed:1635812kB mlocked:0kB bounce:0kB free_pcp:12840kB local_pcp:3844kB free_cma:0kB
[  747.411557][T11630] lowmem_reserve[]: 0 0 531 531 531
[  747.413081][T11630] Node 0 Normal free:12472kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11052kB inactive_anon:0kB active_file:1500kB inactive_file:145760kB unevictable:3536kB writepending:160kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:616kB local_pcp:144kB free_cma:0kB
[  747.422190][T11630] lowmem_reserve[]: 0 0 0 0 0
[  747.423517][T11630] Node 1 Normal free:2994520kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11892kB inactive_anon:0kB active_file:3556kB inactive_file:8104kB unevictable:3536kB writepending:276kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:49192kB local_pcp:27252kB free_cma:0kB
[  747.433932][T11630] lowmem_reserve[]: 0 0 0 0 0
[  747.435372][T11630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  747.440049][T11630] Node 0 DMA32: 250*4kB (UME) 248*8kB (UME) 96*16kB (ME) 92*32kB (UME) 27*64kB (UM) 109*128kB (UM) 155*256kB (UME) 163*512kB (UME) 87*1024kB (UME) 7*2048kB (UME) 279*4096kB (UM) = 1392488kB
[  747.446968][T11630] Node 0 Normal: 37*4kB (ME) 39*8kB (ME) 45*16kB (ME) 79*32kB (UME) 70*64kB (UME) 15*128kB (UM) 3*256kB (M) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 12412kB
[  747.452607][T11630] Node 1 Normal: 2366*4kB (UME) 1102*8kB (UME) 1299*16kB (UME) 1814*32kB (UME) 811*64kB (UME) 398*128kB (UME) 212*256kB (UE) 118*512kB (UME) 91*1024kB (UME) 9*2048kB (UM) 627*4096kB (UM) = 2994456kB
[  747.459255][T11630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  747.461921][T11630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  747.464512][T11630] 42323 total pagecache pages
[  747.465858][T11630] 0 pages in swap cache
[  747.467044][T11630] Free swap  = 124996kB
[  747.468448][T11630] Total swap = 124996kB
[  747.469651][T11630] 1834877 pages RAM
[  747.470759][T11630] 0 pages HighMem/MovableOnly
[  747.472103][T11630] 387250 pages reserved
[  747.473282][T11630] 0 pages cma reserved
[  748.673550][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16289'.
[  748.841355][T11661] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16297'.
[  748.863350][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16298'.
[  748.889643][T11663] nbd: socks must be embedded in a SOCK_ITEM attr
[  748.894040][T10532] block nbd64: NBD_DISCONNECT
[  749.787139][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16304'.
[  750.030842][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16315'.
[  750.085398][T11719] bridge29: the hash_elasticity option has been deprecated and is always 16
[  750.090201][T11719] bridge29: entered allmulticast mode
[  750.125004][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16317'.
[  750.407505][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  751.132334][T11761] vlan1: entered promiscuous mode
[  751.133808][T11761] geneve1: entered promiscuous mode
[  751.135383][T11761] vlan1: entered allmulticast mode
[  751.136814][T11761] geneve1: entered allmulticast mode
[  751.369949][T11773] sctp: [Deprecated]: syz.1.16340 (pid 11773) Use of struct sctp_assoc_value in delayed_ack socket option.
[  751.369949][T11773] Use struct sctp_sack_info instead
[  751.375006][T11773] sctp: [Deprecated]: syz.1.16340 (pid 11773) Use of struct sctp_assoc_value in delayed_ack socket option.
[  751.375006][T11773] Use struct sctp_sack_info instead
[  751.869345][T11819] IPVS: Error connecting to the multicast addr
[  752.161546][T11852] SET target dimension over the limit!
[  752.264351][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16374'.
[  752.776339][T11897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.017807][T11918] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  754.251037][T11934] bond19: entered allmulticast mode
[  754.261156][T11934] ip6gretap3: entered allmulticast mode
[  754.263125][T11934] bond19: (slave ip6gretap3): Enslaving as an active interface with an up link
[  754.342514][T11943] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  755.185843][T12003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16437'.
[  755.701028][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16453'.
[  758.085596][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16483'.
[  758.094321][T12115] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16483'.
[  758.096939][T12115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16483'.
[  758.170905][T12123] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16486'.
[  758.411228][T12142] netlink: 96 bytes leftover after parsing attributes in process `syz.1.16493'.
[  759.235004][T12152] netlink: 'syz.2.16497': attribute type 3 has an invalid length.
[  759.713843][T12166] netlink: 'syz.1.16503': attribute type 14 has an invalid length.
[  760.080247][T12182] netlink: 'syz.1.16511': attribute type 41 has an invalid length.
[  760.653211][T12228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16531'.
[  760.691081][T12230] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  761.694860][   T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  761.708788][   T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  761.712678][   T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  761.716112][   T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  761.720442][   T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  762.092663][T12244] chnl_net:caif_netlink_parms(): no params data found
[  762.160583][T12244] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.164442][T12244] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.166555][T12244] bridge_slave_0: entered allmulticast mode
[  762.169644][T12244] bridge_slave_0: entered promiscuous mode
[  762.172839][T12244] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.175016][T12244] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.178624][T12244] bridge_slave_1: entered allmulticast mode
[  762.181359][T12244] bridge_slave_1: entered promiscuous mode
[  762.210090][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  762.218643][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  762.249943][T12244] team0: Port device team_slave_0 added
[  762.253297][T12244] team0: Port device team_slave_1 added
[  762.281974][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  762.284040][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.291872][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  762.296085][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  762.298425][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.305766][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.352272][T12244] hsr_slave_0: entered promiscuous mode
[  762.354608][T12244] hsr_slave_1: entered promiscuous mode
[  762.356780][T12244] debugfs: 'hsr0' already exists in 'hsr'
[  762.358633][T12244] Cannot create hsr debugfs directory
[  762.528826][T12244] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  762.541312][T12244] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  762.545601][T12244] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  762.550018][T12244] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  762.574493][T12244] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.576556][T12244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.578741][T12244] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.580768][T12244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  762.620015][T12244] 8021q: adding VLAN 0 to HW filter on device bond0
[  762.631240][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.634174][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.646471][T12244] 8021q: adding VLAN 0 to HW filter on device team0
[  762.656419][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[  762.658574][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  762.668230][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[  762.670392][ T8503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  762.782540][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.980081][T12244] veth0_vlan: entered promiscuous mode
[  762.986791][T12244] veth1_vlan: entered promiscuous mode
[  763.023385][T12244] veth0_macvtap: entered promiscuous mode
[  763.034461][T12244] veth1_macvtap: entered promiscuous mode
[  763.046464][T12244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.059153][T12244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.069264][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.079247][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.082452][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.092605][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.173247][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.183030][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.240430][T12158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  763.243139][T12158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.315905][T12337] netlink: 'syz.2.16566': attribute type 29 has an invalid length.
[  763.319704][T12337] netlink: 'syz.2.16566': attribute type 29 has an invalid length.
[  763.756662][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16578'.
[  763.766279][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16578'.
[  763.770277][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16578'.
[  763.773772][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16578'.
[  763.780626][ T5202] Bluetooth: hci3: command tx timeout
[  765.618353][T12498] netlink: 'syz.1.16631': attribute type 13 has an invalid length.
[  765.621270][T12498] netlink: 'syz.1.16631': attribute type 17 has an invalid length.
[  765.699135][T12498] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  765.759703][T12498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  765.767418][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  765.847505][ T5202] Bluetooth: hci3: command tx timeout
[  767.465011][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16669'.
[  767.928675][ T5202] Bluetooth: hci3: command tx timeout
[  768.029285][T12591] netlink: 'syz.2.16673': attribute type 11 has an invalid length.
[  768.956263][T12651] netlink: 'syz.2.16698': attribute type 23 has an invalid length.
[  769.033221][T12655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  769.063490][T12659] pim6reg1: entered promiscuous mode
[  769.065103][T12659] pim6reg1: entered allmulticast mode
[  769.933411][T12692] netlink: 'syz.2.16718': attribute type 6 has an invalid length.
[  770.007350][ T5202] Bluetooth: hci3: command tx timeout
[  770.033852][T12702] netlink: 428 bytes leftover after parsing attributes in process `syz.4.16723'.
[  770.047330][T12702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16723'.
[  770.091346][T12709] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  770.286612][T12725] 8021q: adding VLAN 0 to HW filter on device bond20
[  770.416712][T12744] netlink: 124 bytes leftover after parsing attributes in process `syz.2.16739'.
[  770.803098][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16755'.
[  770.933011][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16761'.
[  770.935610][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16761'.
[  771.168836][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16773'.
[  771.370724][T12846] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.374036][T12846] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.628066][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16803'.
[  772.676221][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16807'.
[  772.710027][   T57] block nbd4: Receive control failed (result -107)
[  773.207799][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16819'.
[  773.312822][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16820'.
[  773.572491][T12962] bond1: option arp_validate: invalid value (32768)
[  773.577683][T12962] bond1 (unregistering): Released all slaves
[  773.951601][T12992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.966451][T12995] xt_TCPMSS: Only works on TCP SYN packets
[  774.029453][T12999] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  774.031686][T12999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  774.392619][T13039] netlink: 'syz.4.16860': attribute type 7 has an invalid length.
[  774.395533][T13039] netlink: 'syz.4.16860': attribute type 8 has an invalid length.
[  774.398338][T13039] netlink: 'syz.4.16860': attribute type 13 has an invalid length.
[  775.245160][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16901'.
[  775.524293][T13157] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16914'.
[  775.531168][T13157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16914'.
[  775.665728][T13172] batadv_slave_1: entered promiscuous mode
[  775.685536][T13169] batadv_slave_1: left promiscuous mode
[  776.022219][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16927'.
[  776.031921][T13188] macvtap0: entered promiscuous mode
[  776.033696][T13188] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  776.199891][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16931'.
[  776.476633][T13210] No such timeout policy "syz1"
[  777.252088][T13250] netlink: 'syz.4.16954': attribute type 14 has an invalid length.
[  777.432209][T13257] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.434382][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state
[  777.436719][T13257] bridge0: port 1(bridge_slave_0) entered blocking state
[  777.438801][T13257] bridge0: port 1(bridge_slave_0) entered forwarding state
[  777.445700][T13257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  778.141061][T13283] syzkaller1: entered promiscuous mode
[  778.143154][T13283] syzkaller1: entered allmulticast mode
[  778.556663][T13299] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  779.283539][T13318] netlink: 'syz.2.16983': attribute type 5 has an invalid length.
[  779.314560][   T33] audit: type=1107 audit(1762467452.055:15): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  779.333724][T13321] wg1 speed is unknown, defaulting to 1000
[  779.335433][T13321] wg1 speed is unknown, defaulting to 1000
[  779.337839][T13321] wg1 speed is unknown, defaulting to 1000
[  779.350326][T13321] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  779.390569][T13321] wg1 speed is unknown, defaulting to 1000
[  779.395882][T13321] wg1 speed is unknown, defaulting to 1000
[  779.399316][T13321] wg1 speed is unknown, defaulting to 1000
[  779.402776][T13321] wg1 speed is unknown, defaulting to 1000
[  779.409366][T13321] wg1 speed is unknown, defaulting to 1000
[  779.413529][T13321] wg1 speed is unknown, defaulting to 1000
[  779.418739][T13321] wg1 speed is unknown, defaulting to 1000
[  779.422891][T13321] wg1 speed is unknown, defaulting to 1000
[  779.427020][T13321] wg1 speed is unknown, defaulting to 1000
[  779.431231][T13321] wg1 speed is unknown, defaulting to 1000
[  779.435137][T13321] wg1 speed is unknown, defaulting to 1000
[  779.439222][T13321] wg1 speed is unknown, defaulting to 1000
[  779.443118][T13321] wg1 speed is unknown, defaulting to 1000
[  779.447103][T13321] wg1 speed is unknown, defaulting to 1000
[  779.451334][T13321] wg1 speed is unknown, defaulting to 1000
[  779.456321][T13321] wg1 speed is unknown, defaulting to 1000
[  779.460656][T13321] wg1 speed is unknown, defaulting to 1000
[  779.464650][T13321] wg1 speed is unknown, defaulting to 1000
[  779.468659][T13321] wg1 speed is unknown, defaulting to 1000
[  779.472536][T13321] wg1 speed is unknown, defaulting to 1000
[  780.049812][T13326] IPv6: Can't replace route, no match found
[  780.170914][T13331] netlink: 'syz.4.16988': attribute type 4 has an invalid length.
[  780.443328][T13358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17002'.
[  780.542181][T13366] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17005'.
[  780.585013][T13371] netlink: 'syz.1.17008': attribute type 4 has an invalid length.
[  781.434085][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17015'.
[  781.453343][T13388] veth23: entered promiscuous mode
[  781.760990][T13403] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  781.994956][T13402] wg1 speed is unknown, defaulting to 1000
[  782.082379][T13420] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  782.505016][T13445] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17039'.
[  783.030714][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17049'.
[  783.450805][T13499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  783.699907][T13527] tap0: tun_chr_ioctl cmd 35111
[  783.738651][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17075'.
[  783.798338][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17076'.
[  783.944518][T13554] batadv_slave_0: entered promiscuous mode
[  783.950448][T13554] batman_adv: batadv0: Adding interface: macsec1
[  783.952485][T13554] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  783.962024][T13554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  783.966006][T13554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  783.969630][T13554] batman_adv: batadv0: Interface activated: macsec1
[  784.270544][T13573] wg1 speed is unknown, defaulting to 1000
[  784.951325][ T9103] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4
[  784.955489][ T9103] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22
[  785.062001][T13603] netlink: 'syz.1.17104': attribute type 2 has an invalid length.
[  785.068619][T13603] netlink: 'syz.1.17104': attribute type 3 has an invalid length.
[  785.246732][T13613] netlink: 'syz.2.17110': attribute type 31 has an invalid length.
[  785.556500][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17123'.
[  785.561056][T13644] bond0: Unable to set down delay as MII monitoring is disabled
[  788.430951][T13768] netlink: 'syz.2.17176': attribute type 29 has an invalid length.
[  788.615414][   T33] audit: type=1107 audit(1762467461.355:16): pid=13783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%^DQ
[  788.615414][   T33] 4NG'
[  788.903087][T13810] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17192'.
[  789.240320][T13850] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  789.379106][T13858] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  789.686833][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17216'.
[  789.690772][T13871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17216'.
[  789.782606][T13875] netlink: 'syz.1.17218': attribute type 21 has an invalid length.
[  789.785217][T13875] netlink: 'syz.1.17218': attribute type 6 has an invalid length.
[  789.788654][T13875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17218'.
[  790.105009][T13882] netlink: 'syz.4.17222': attribute type 3 has an invalid length.
[  790.247578][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17223'.
[  790.371723][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17232'.
[  790.396044][T13887] wg1 speed is unknown, defaulting to 1000
[  790.721465][T13921] netlink: 'syz.1.17237': attribute type 298 has an invalid length.
[  790.869722][T13927] syzkaller0: entered promiscuous mode
[  790.871477][T13927] syzkaller0: entered allmulticast mode
[  791.566029][T13962] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17256'.
[  791.579587][T13962] netlink: 'syz.2.17256': attribute type 13 has an invalid length.
[  793.632411][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17306'.
[  793.636362][T14081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  793.642662][T14081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  793.744905][T14085] 8021q: adding VLAN 0 to HW filter on device bond11
[  793.771410][T14085] bond11: (slave macvlan2): Enslaving as an active interface with an up link
[  793.796900][T14091] ip6tnl1: entered promiscuous mode
[  794.266701][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17314'.
[  794.271875][T14103] netlink: 'syz.2.17314': attribute type 12 has an invalid length.
[  794.276313][T14103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17314'.
[  794.280075][T14103] netlink: 'syz.2.17314': attribute type 12 has an invalid length.
[  794.285249][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17314'.
[  794.289583][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17314'.
[  794.586841][T14121] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17323'.
[  797.393264][T14253] sctp: [Deprecated]: syz.4.17382 (pid 14253) Use of struct sctp_assoc_value in delayed_ack socket option.
[  797.393264][T14253] Use struct sctp_sack_info instead
[  797.462400][T14241] wg1 speed is unknown, defaulting to 1000
[  797.481205][T14259] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.649983][T14259] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.746916][T14259] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.814280][T14259] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  797.953425][ T9374] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  797.975654][ T9374] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  797.995115][ T9374] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  798.022839][ T9374] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  798.659385][T14296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17402'.
[  798.737050][T14301] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  798.739595][T14301] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  798.999018][T14321] 8021q: adding VLAN 0 to HW filter on device .`
[  799.006866][T14321] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  799.017607][ T5333] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  799.051051][T14329] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  799.053808][T14329] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  799.064287][T14319] wg1 speed is unknown, defaulting to 1000
[  799.109396][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17412'.
[  799.112110][T14331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17412'.
[  799.116657][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17412'.
[  799.122103][T14331] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17412'.
[  799.131418][T14333] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  799.186279][T14333] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  799.244134][T14333] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  799.295456][T14333] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  799.428574][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17424'.
[  799.647517][ T5333] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  799.735903][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  799.752528][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  799.768372][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  799.794635][ T9374] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  799.898472][ T9374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  800.544240][T14390] wg1 speed is unknown, defaulting to 1000
[  802.704129][ T9374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  802.705661][T14408] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  802.706487][ T9374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  802.710847][T14408] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  802.867563][ T9103] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  803.527262][ T5820] cgroup: fork rejected by pids controller in /syz2
[  803.919484][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  803.924209][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  803.929466][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  803.933275][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  803.936721][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  804.065381][T14463] wg1 speed is unknown, defaulting to 1000
[  804.179961][T14463] chnl_net:caif_netlink_parms(): no params data found
[  804.244300][T14463] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.247013][T14463] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.249856][T14463] bridge_slave_0: entered allmulticast mode
[  804.253053][T14463] bridge_slave_0: entered promiscuous mode
[  804.256713][T14463] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.259470][T14463] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.261793][T14463] bridge_slave_1: entered allmulticast mode
[  804.265406][T14463] bridge_slave_1: entered promiscuous mode
[  804.286238][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.291760][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  804.322405][T14463] team0: Port device team_slave_0 added
[  804.330075][T14463] team0: Port device team_slave_1 added
[  804.360410][T14463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  804.362904][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.371704][T14463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  804.375838][T14463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  804.378838][T14463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  804.386695][T14463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.416333][T14463] hsr_slave_0: entered promiscuous mode
[  804.418980][T14463] hsr_slave_1: entered promiscuous mode
[  804.420981][T14463] debugfs: 'hsr0' already exists in 'hsr'
[  804.422588][T14463] Cannot create hsr debugfs directory
[  804.864564][T14463] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  804.874103][T14463] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  804.880523][T14463] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  804.886665][T14463] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  804.918504][T14463] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.921291][T14463] bridge0: port 2(bridge_slave_1) entered forwarding state
[  804.924368][T14463] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.927123][T14463] bridge0: port 1(bridge_slave_0) entered forwarding state
[  804.985066][T14463] 8021q: adding VLAN 0 to HW filter on device bond0
[  804.999705][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.004243][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.018150][T14463] 8021q: adding VLAN 0 to HW filter on device team0
[  805.029809][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.031884][ T8503] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.040276][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.042409][ T8503] bridge0: port 2(bridge_slave_1) entered forwarding state
[  805.168707][T14463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  805.200127][T14463] veth0_vlan: entered promiscuous mode
[  805.206065][T14463] veth1_vlan: entered promiscuous mode
[  805.224411][T14463] veth0_macvtap: entered promiscuous mode
[  805.230765][T14463] veth1_macvtap: entered promiscuous mode
[  805.241101][T14463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  805.251665][T14463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  805.258570][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  805.262087][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  805.271079][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  805.273580][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  805.326882][ T8503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.330173][ T8503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.351949][ T8503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  805.354231][ T8503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  805.600137][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17491'.
[  805.602720][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17491'.
[  806.008038][ T5202] Bluetooth: hci2: command tx timeout
[  806.165748][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17515'.
[  806.235381][T14581] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  806.446477][T14590] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17520'.
[  806.727548][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  807.538557][T14615] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  807.560367][T14609] wg1 speed is unknown, defaulting to 1000
[  807.711404][T14623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  807.764571][T14627] netlink: 'syz.1.17536': attribute type 58 has an invalid length.
[  807.766977][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17536'.
[  808.087669][ T5202] Bluetooth: hci2: command tx timeout
[  808.288156][T14655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17549'.
[  808.339443][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17549'.
[  808.625863][T14658] wg1 speed is unknown, defaulting to 1000
[  808.691678][T14670] pim6reg1: entered promiscuous mode
[  808.693478][T14670] pim6reg1: entered allmulticast mode
[  808.743504][T14670] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  808.747125][T14670] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  808.855368][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17555'.
[  809.312138][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17556'.
[  809.624257][T14689] netlink: 'syz.2.17562': attribute type 6 has an invalid length.
[  809.682656][T14681] wg1 speed is unknown, defaulting to 1000
[  810.169662][ T5202] Bluetooth: hci2: command tx timeout
[  810.770909][T14746] netlink: 324 bytes leftover after parsing attributes in process `syz.2.17587'.
[  810.773992][T14746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17587'.
[  810.777842][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17587'.
[  811.035012][T14752] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17590'.
[  811.039073][T14752] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17590'.
[  811.043784][T14752] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17590'.
[  811.052101][T14752] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17590'.
[  811.088924][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17591'.
[  811.112050][T14754] bond1: entered promiscuous mode
[  811.114247][T14754] bond1: entered allmulticast mode
[  811.128706][T14754] ip6gretap1: entered promiscuous mode
[  811.130916][T14754] ip6gretap1: entered allmulticast mode
[  811.133315][T14754] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  811.140008][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17591'.
[  811.144423][T14754] bond1: left promiscuous mode
[  811.146344][T14754] ip6gretap1: left promiscuous mode
[  811.149021][T14754] bond1: left allmulticast mode
[  811.150919][T14754] ip6gretap1: left allmulticast mode
[  811.154404][T14754] 8021q: adding VLAN 0 to HW filter on device bond1
[  811.543811][T14789] netlink: 'syz.1.17606': attribute type 10 has an invalid length.
[  811.662209][T14787] wg1 speed is unknown, defaulting to 1000
[  812.139879][T14827] netlink: 'syz.1.17622': attribute type 58 has an invalid length.
[  812.142841][T14827] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17622'.
[  812.247450][ T5202] Bluetooth: hci2: command tx timeout
[  812.566327][T14845] wg1 speed is unknown, defaulting to 1000
[  815.053075][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  815.675288][   T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  815.694822][   T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  815.698748][   T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  815.702271][   T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  815.705782][   T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  815.763286][T14920] IPv6: addrconf: prefix option has invalid lifetime
[  815.838763][T14927] syzkaller1: entered promiscuous mode
[  815.840942][T14927] syzkaller1: entered allmulticast mode
[  815.922493][T14913] wg1 speed is unknown, defaulting to 1000
[  815.993864][T14937] __nla_validate_parse: 2 callbacks suppressed
[  815.993883][T14937] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17666'.
[  816.100851][T14913] chnl_net:caif_netlink_parms(): no params data found
[  816.204730][T14955] vlan0: entered promiscuous mode
[  816.206856][T14955] vlan0: entered allmulticast mode
[  816.213389][T14955] veth0_vlan: entered allmulticast mode
[  816.236103][T14913] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.239460][T14913] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.242119][T14913] bridge_slave_0: entered allmulticast mode
[  816.246120][T14913] bridge_slave_0: entered promiscuous mode
[  816.250763][T14913] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.253029][T14913] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.255212][T14913] bridge_slave_1: entered allmulticast mode
[  816.258636][T14913] bridge_slave_1: entered promiscuous mode
[  816.298554][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.303566][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.342599][T14913] team0: Port device team_slave_0 added
[  816.345876][T14913] team0: Port device team_slave_1 added
[  816.384336][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.386661][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.404025][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.410725][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.413330][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  816.421134][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.458978][T14913] hsr_slave_0: entered promiscuous mode
[  816.463845][T14913] hsr_slave_1: entered promiscuous mode
[  816.466683][T14913] debugfs: 'hsr0' already exists in 'hsr'
[  816.469754][T14913] Cannot create hsr debugfs directory
[  816.783455][T14913] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  816.792649][T14913] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  816.811870][T14913] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  816.822984][T14913] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  816.945906][T14913] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.965002][T14913] 8021q: adding VLAN 0 to HW filter on device team0
[  816.973367][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.975507][ T6942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  816.983960][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state
[  816.986290][ T6942] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.015216][T15006] netlink: 'syz.1.17695': attribute type 1 has an invalid length.
[  817.061870][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17697'.
[  817.125457][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  817.272450][T14913] veth0_vlan: entered promiscuous mode
[  817.285611][T14913] veth1_vlan: entered promiscuous mode
[  817.317956][T14913] veth0_macvtap: entered promiscuous mode
[  817.325480][T14913] veth1_macvtap: entered promiscuous mode
[  817.343878][T15034] syzkaller1: entered promiscuous mode
[  817.345863][T15034] syzkaller1: entered allmulticast mode
[  817.379767][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.386580][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  817.394516][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  817.399655][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  817.402986][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  817.406398][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  817.516090][T12433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  817.519481][T12433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  817.532218][T15042] syzkaller0: entered promiscuous mode
[  817.534251][T15042] syzkaller0: entered allmulticast mode
[  817.578332][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  817.581158][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  817.767512][   T56] Bluetooth: hci4: command tx timeout
[  818.575668][T15055] netlink: 'syz.5.17711': attribute type 1 has an invalid length.
[  818.583803][T15055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  818.748862][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  818.885340][T15092] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17728'.
[  819.161148][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17744'.
[  819.175360][T15127] erspan0: entered promiscuous mode
[  819.181476][T15127] macvtap1: entered promiscuous mode
[  819.184948][T15127] macvtap1: entered allmulticast mode
[  819.188353][T15127] erspan0: entered allmulticast mode
[  819.198891][T15127] erspan0: left allmulticast mode
[  819.204793][T15127] erspan0: left promiscuous mode
[  819.545329][T15171] netlink: 'syz.2.17766': attribute type 49 has an invalid length.
[  819.848421][   T56] Bluetooth: hci4: command tx timeout
[  820.294093][T15227] netlink: 356 bytes leftover after parsing attributes in process `syz.5.17790'.
[  821.417311][T15273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17810'.
[  821.932846][   T56] Bluetooth: hci4: command tx timeout
[  822.165864][T15306] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17825'.
[  822.234303][T15316] raw_sendmsg: syz.5.17831 forgot to set AF_INET. Fix it!
[  822.854095][T15348] netlink: 'syz.1.17845': attribute type 1 has an invalid length.
[  822.857014][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17845'.
[  823.148841][T15365] netlink: 'syz.5.17852': attribute type 1 has an invalid length.
[  823.176194][T15365] 8021q: adding VLAN 0 to HW filter on device bond1
[  823.205194][T15365] bond1: (slave ip6gretap1): making interface the new active one
[  823.215853][T15365] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  823.278636][T15365] veth3: entered promiscuous mode
[  823.284424][T15365] bond1: (slave veth3): Enslaving as an active interface with a down link
[  823.292915][T15365] erspan0: entered allmulticast mode
[  823.315072][T15365] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  823.359169][T15379] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17858'.
[  823.426631][T15381] bond2 (unregistering): Released all slaves
[  823.458903][T15386] netlink: 'syz.2.17862': attribute type 9 has an invalid length.
[  823.462598][T15386] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17862'.
[  824.020249][ T5202] Bluetooth: hci4: command tx timeout
[  824.126818][T15439] syz_tun: entered allmulticast mode
[  824.132280][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17885'.
[  824.165125][T15439] syz_tun (unregistering): left allmulticast mode
[  824.736126][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17893'.
[  824.772730][T15461] nbd: socks must be embedded in a SOCK_ITEM attr
[  825.130995][T15483] syzkaller0: entered promiscuous mode
[  825.133750][T15483] syzkaller0: entered allmulticast mode
[  825.376022][T15492] netlink: 'syz.5.17899': attribute type 10 has an invalid length.
[  825.410199][T15492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  825.415832][T15492] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  825.421979][T15492] netlink: 'syz.5.17899': attribute type 10 has an invalid length.
[  825.425354][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17899'.
[  825.431468][T15492] batadv0: entered promiscuous mode
[  825.438000][T15492] batadv0: entered allmulticast mode
[  825.449590][T15492] bond0: (slave batadv0): Releasing backup interface
[  825.458133][T15492] bridge0: port 3(batadv0) entered blocking state
[  825.465360][T15492] bridge0: port 3(batadv0) entered disabled state
[  825.757020][T15489] wg1 speed is unknown, defaulting to 1000
[  825.847607][ T5844] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  825.850479][ T5844] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  825.881654][T15512] xt_bpf: check failed: parse error
[  825.960384][T15522] netlink: 14 bytes leftover after parsing attributes in process `syz.5.17910'.
[  826.153361][T15522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  826.162226][T15522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  826.170854][T15522] bond0 (unregistering): Released all slaves
[  826.541331][T15547] syzkaller0: entered promiscuous mode
[  826.543686][T15547] syzkaller0: entered allmulticast mode
[  826.570126][T15547] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) !
[  826.742803][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17927'.
[  827.148610][T15592] bond0: option fail_over_mac: invalid value (127)
[  827.152541][T15592] bond0 (unregistering): Released all slaves
[  828.221935][T15681] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17980'.
[  828.226655][T15681] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.229947][T15681] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.493415][T15706] veth0: entered promiscuous mode
[  828.496468][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17988'.
[  828.503460][T15706] veth0 (unregistering): left promiscuous mode
[  828.545959][T15706] vlan4 (unregistering): left promiscuous mode
[  828.550580][T15706] veth1 (unregistering): left promiscuous mode
[  828.553170][T15706] bridge15: port 3(vlan4) entered disabled state
[  829.161775][T15741] Cannot find del_set index 2 as target
[  829.267066][T15747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18010'.
[  829.401749][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18013'.
[  829.405051][T15755] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  829.577385][T15767] netlink: 'syz.5.18019': attribute type 23 has an invalid length.
[  829.933574][ T5879] IPVS: starting estimator thread 0...
[  830.017400][T15809] IPVS: using max 62 ests per chain, 148800 per kthread
[  830.386302][T15846] netlink: 'syz.2.18056': attribute type 28 has an invalid length.
[  830.488662][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18064'.
[  830.491461][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18064'.
[  830.579310][T15873] netlink: 60 bytes leftover after parsing attributes in process `syz.5.18069'.
[  830.611852][T15875] netlink: 'syz.5.18070': attribute type 11 has an invalid length.
[  830.690362][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18071'.
[  830.792296][T15877] wg1 speed is unknown, defaulting to 1000
[  831.048408][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  831.727100][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18085'.
[  831.799477][T15914] __nla_validate_parse: 3 callbacks suppressed
[  831.799494][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18087'.
[  831.813107][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18087'.
[  831.822290][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18087'.
[  831.827672][T15914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18087'.
[  831.830509][T15914] netlink: 5 bytes leftover after parsing attributes in process `syz.1.18087'.
[  831.975882][T15924] netlink: 'syz.5.18092': attribute type 2 has an invalid length.
[  832.324151][T15966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18111'.
[  832.551040][T15972] vlan2: entered promiscuous mode
[  832.553221][T15972] vlan2: entered allmulticast mode
[  832.555312][T15972] hsr_slave_1: entered allmulticast mode
[  832.808665][T15984] tipc: Started in network mode
[  832.810221][T15984] tipc: Node identity e2a05b5845ea, cluster identity 4711
[  832.812451][T15984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.860253][T15984] syzkaller0: entered promiscuous mode
[  832.862293][T15984] syzkaller0: entered allmulticast mode
[  832.864812][T15984] tipc: Resetting bearer <eth:syzkaller0>
[  832.872631][T15983] tipc: Resetting bearer <eth:syzkaller0>
[  833.847550][ T9103] tipc: Node number set to 2806668120
[  834.867407][T15983] tipc: Disabling bearer <eth:syzkaller0>
[  835.294194][T16029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18138'.
[  835.635112][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18146'.
[  835.637974][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18146'.
[  835.903194][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18151'.
[  836.076451][T16074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.082363][T16074] syzkaller0: entered promiscuous mode
[  836.084394][T16074] syzkaller0: entered allmulticast mode
[  836.118043][T16074] tipc: Resetting bearer <eth:syzkaller0>
[  836.124177][T16069] tipc: Resetting bearer <eth:syzkaller0>
[  836.142929][T16069] tipc: Disabling bearer <eth:syzkaller0>
[  836.165964][T16082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.173538][T16082] syzkaller0: entered promiscuous mode
[  836.175307][T16082] syzkaller0: entered allmulticast mode
[  836.214980][T16082] tipc: Resetting bearer <eth:syzkaller0>
[  836.228310][T16081] tipc: Resetting bearer <eth:syzkaller0>
[  836.252505][T16081] tipc: Disabling bearer <eth:syzkaller0>
[  836.462603][T16113] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20004
[  836.706975][T16130] IPv6: Can't replace route, no match found
[  838.029888][T16165] netlink: 'syz.1.18200': attribute type 1 has an invalid length.
[  838.032846][T16165] __nla_validate_parse: 2 callbacks suppressed
[  838.032861][T16165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18200'.
[  839.634741][T16223] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  840.182199][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18248'.
[  840.452715][T16293] netlink: 'syz.2.18258': attribute type 3 has an invalid length.
[  840.455814][T16293] netlink: 'syz.2.18258': attribute type 7 has an invalid length.
[  840.459699][T16293] netlink: 'syz.2.18258': attribute type 8 has an invalid length.
[  840.462860][T16293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18258'.
[  841.009943][T16343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18280'.
[  841.090211][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18283'.
[  841.472855][T16393] netlink: 'syz.5.18304': attribute type 13 has an invalid length.
[  841.475307][T16393] netlink: 'syz.5.18304': attribute type 17 has an invalid length.
[  841.488713][T16393] erspan0: left allmulticast mode
[  841.519776][T16393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  841.799454][T16412] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  842.493423][T16424] wg1 speed is unknown, defaulting to 1000
[  842.885561][T16459] netlink: 64 bytes leftover after parsing attributes in process `syz.5.18332'.
[  843.261573][T16482] tls_set_device_offload: netdev not found
[  843.295414][T16484] xt_TCPMSS: Only works on TCP SYN packets
[  843.961968][T16517] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  844.016365][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18356'.
[  844.309945][T16495] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  844.312193][T16495] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  844.333217][T16495] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  844.336324][T16495] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  844.360006][T16538] netlink: 'syz.1.18364': attribute type 29 has an invalid length.
[  844.369266][T16495] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  844.372628][T16538] netlink: 'syz.1.18364': attribute type 29 has an invalid length.
[  844.376261][T16495] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  844.531857][T16535] wg1 speed is unknown, defaulting to 1000
[  844.865760][T16562] wg1 speed is unknown, defaulting to 1000
[  845.181725][T16607] netlink: 'syz.5.18395': attribute type 10 has an invalid length.
[  845.187670][T16607] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  845.319879][T16614] syzkaller0: entered promiscuous mode
[  845.321591][T16614] syzkaller0: entered allmulticast mode
[  845.597829][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18402'.
[  847.109935][T16635] Bluetooth: MGMT ver 1.23
[  847.246009][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18411'.
[  847.487678][T16623] bridge_slave_1: left allmulticast mode
[  847.489885][T16623] bridge_slave_1: left promiscuous mode
[  847.492212][T16623] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.499041][T16623] bridge_slave_0: left allmulticast mode
[  847.501501][T16623] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.078843][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18432'.
[  848.687646][T16712] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  848.735894][T16715] --map-set only usable from mangle table
[  849.251804][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.18473'.
[  849.254947][T16776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18473'.
[  849.408121][T16774] wg1 speed is unknown, defaulting to 1000
[  849.743128][T16819] netlink: 'syz.1.18491': attribute type 3 has an invalid length.
[  849.745521][T16819] netlink: 666 bytes leftover after parsing attributes in process `syz.1.18491'.
[  850.147804][T16835] wg1 speed is unknown, defaulting to 1000
[  850.166781][T16842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18499'.
[  850.192204][T16842] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18499'.
[  850.233478][T16856] geneve6: entered promiscuous mode
[  850.236412][ T5844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.239419][ T5844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.242295][ T5844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.244924][ T5844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.253090][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18508'.
[  850.487893][T16876] netlink: 'syz.1.18518': attribute type 3 has an invalid length.
[  850.590240][T16887] bond12: option tlb_dynamic_lb: invalid value (5)
[  850.599359][T16887] bond12 (unregistering): Released all slaves
[  850.738232][   T56] Bluetooth: hci2: command tx timeout
[  850.857893][T16904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  850.902302][T16904] syzkaller0: entered promiscuous mode
[  850.904044][T16904] syzkaller0: entered allmulticast mode
[  850.908282][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18532'.
[  850.911308][T16904] tipc: Resetting bearer <eth:syzkaller0>
[  850.917458][T16908] vlan2: entered promiscuous mode
[  850.919006][T16908] gretap0: entered promiscuous mode
[  850.943309][T16903] tipc: Resetting bearer <eth:syzkaller0>
[  853.185502][T16903] tipc: Disabling bearer <eth:syzkaller0>
[  853.394974][T16951] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18552'.
[  853.475968][T16956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18554'.
[  853.789319][T16980] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  853.806563][T16982] netlink: 'syz.1.18567': attribute type 3 has an invalid length.
[  853.921724][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18573'.
[  854.153109][T17019] netlink: 'syz.5.18582': attribute type 1 has an invalid length.
[  854.433159][T17034] vlan4: entered promiscuous mode
[  854.435115][T17034] bond0: entered promiscuous mode
[  854.439386][T17034] bond_slave_0: entered promiscuous mode
[  854.441525][T17034] bond_slave_1: entered promiscuous mode
[  855.143387][T17070] __nla_validate_parse: 3 callbacks suppressed
[  855.143399][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18609'.
[  855.662021][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18626'.
[  855.665253][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18626'.
[  855.826114][T17116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18631'.
[  855.943780][T17127] ip6tnl8: entered promiscuous mode
[  855.946026][T17127] ip6tnl8: entered allmulticast mode
[  856.313468][T17144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  856.427743][T17150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  856.511633][T17156] netlink: 'syz.1.18648': attribute type 1 has an invalid length.
[  856.564352][T17156] bond12: entered promiscuous mode
[  856.573273][T17156] 8021q: adding VLAN 0 to HW filter on device bond12
[  856.606780][T17160] 8021q: adding VLAN 0 to HW filter on device bond13
[  856.615953][T17160] bond12: (slave bond13): making interface the new active one
[  856.620836][T17160] bond13: entered promiscuous mode
[  856.623491][T17160] bond12: (slave bond13): Enslaving as an active interface with an up link
[  857.038033][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18663'.
[  857.041619][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18663'.
[  857.144398][T17196] tipc: Started in network mode
[  857.145846][T17196] tipc: Node identity 9e56f7a36c99, cluster identity 4711
[  857.153361][T17196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.226734][T17205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18668'.
[  857.239906][T17196] syzkaller0: entered promiscuous mode
[  857.241771][T17196] syzkaller0: entered allmulticast mode
[  857.245250][T17196] tipc: Resetting bearer <eth:syzkaller0>
[  857.418373][T17195] tipc: Resetting bearer <eth:syzkaller0>
[  858.260380][ T5878] tipc: Node number set to 4073715619
[  859.703410][T17195] tipc: Disabling bearer <eth:syzkaller0>
[  859.707625][T17193] wg1 speed is unknown, defaulting to 1000
[  859.830895][T17228] netlink: zone id is out of range
[  859.832845][T17228] netlink: zone id is out of range
[  859.834768][T17228] netlink: zone id is out of range
[  859.836689][T17228] netlink: zone id is out of range
[  859.862124][T17228] netlink: zone id is out of range
[  859.864022][T17228] netlink: zone id is out of range
[  859.865856][T17228] netlink: zone id is out of range
[  859.888996][T17228] netlink: zone id is out of range
[  859.898334][T17228] netlink: zone id is out of range
[  859.900174][T17228] netlink: zone id is out of range
[  860.091699][T17248] xt_TPROXY: Can be used only with -p tcp or -p udp
[  860.398452][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18705'.
[  860.405116][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18705'.
[  860.455505][T17287] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  861.364053][T17348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18734'.
[  863.047637][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  863.525440][T17396] warn_alloc: 1 callbacks suppressed
[  863.525450][T17396] syz.5.18755: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  863.533864][T17396] CPU: 0 UID: 0 PID: 17396 Comm: syz.5.18755 Not tainted syzkaller #0 PREEMPT(full) 
[  863.533886][T17396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  863.533897][T17396] Call Trace:
[  863.533904][T17396]  <TASK>
[  863.533911][T17396]  dump_stack_lvl+0x189/0x250
[  863.533940][T17396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  863.533961][T17396]  ? __pfx__printk+0x10/0x10
[  863.533978][T17396]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  863.533999][T17396]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  863.534021][T17396]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  863.534044][T17396]  warn_alloc+0x214/0x310
[  863.534072][T17396]  ? __pfx_warn_alloc+0x10/0x10
[  863.534103][T17396]  ? __get_vm_area_node+0x28f/0x300
[  863.534124][T17396]  ? veth_dev_init+0x368/0x570
[  863.534141][T17396]  __vmalloc_node_range_noprof+0x690/0x12d0
[  863.534164][T17396]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  863.534211][T17396]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  863.534225][T17396]  ? __kasan_kmalloc_large+0x1c/0xa0
[  863.534240][T17396]  ? rcu_is_watching+0x15/0xb0
[  863.534251][T17396]  ? veth_dev_init+0x368/0x570
[  863.534259][T17396]  __kvmalloc_node_noprof+0x674/0x910
[  863.534271][T17396]  ? veth_dev_init+0x368/0x570
[  863.534280][T17396]  ? __pfx_netdev_lock_cmp_fn+0x10/0x10
[  863.534292][T17396]  veth_dev_init+0x368/0x570
[  863.534303][T17396]  register_netdevice+0x6bf/0x1ae0
[  863.534319][T17396]  ? snprintf+0xda/0x120
[  863.534330][T17396]  ? __pfx_register_netdevice+0x10/0x10
[  863.534340][T17396]  ? __pfx_snprintf+0x10/0x10
[  863.534349][T17396]  ? __asan_memset+0x22/0x50
[  863.534360][T17396]  ? dev_addr_mod+0x2ce/0x3d0
[  863.534373][T17396]  veth_newlink+0x5d4/0xa60
[  863.534382][T17396]  ? __pfx_veth_newlink+0x10/0x10
[  863.534389][T17396]  ? css_rstat_updated+0x23a/0x4f0
[  863.534402][T17396]  ? __pfx_css_rstat_updated+0x10/0x10
[  863.534440][T17396]  ? validate_linkmsg+0x765/0x950
[  863.534456][T17396]  ? __pfx_veth_newlink+0x10/0x10
[  863.534465][T17396]  rtnl_newlink_create+0x310/0xb00
[  863.534476][T17396]  ? __lock_acquire+0xab9/0xd20
[  863.534487][T17396]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  863.534497][T17396]  ? __pfx___mutex_lock+0x10/0x10
[  863.534515][T17396]  ? ns_capable+0x8a/0xf0
[  863.534526][T17396]  rtnl_newlink+0x16e4/0x1c80
[  863.534539][T17396]  ? netlink_deliver_tap+0x19c/0x1b0
[  863.534553][T17396]  ? __pfx_rtnl_newlink+0x10/0x10
[  863.534606][T17396]  ? __dev_queue_xmit+0x1d79/0x3b50
[  863.534616][T17396]  ? kasan_save_track+0x3e/0x80
[  863.534626][T17396]  ? __kasan_slab_alloc+0x6c/0x80
[  863.534640][T17396]  ? __lock_acquire+0xab9/0xd20
[  863.534660][T17396]  ? __pfx_rtnl_newlink+0x10/0x10
[  863.534671][T17396]  rtnetlink_rcv_msg+0x7cf/0xb70
[  863.534685][T17396]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  863.534724][T17396]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  863.534737][T17396]  ? ref_tracker_free+0x63a/0x7d0
[  863.534746][T17396]  ? __asan_memcpy+0x40/0x70
[  863.534756][T17396]  ? __pfx_ref_tracker_free+0x10/0x10
[  863.534769][T17396]  netlink_rcv_skb+0x208/0x470
[  863.534784][T17396]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  863.534796][T17396]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  863.534815][T17396]  ? netlink_deliver_tap+0x2e/0x1b0
[  863.534827][T17396]  netlink_unicast+0x82f/0x9e0
[  863.534843][T17396]  ? __pfx_netlink_unicast+0x10/0x10
[  863.534857][T17396]  ? netlink_sendmsg+0x642/0xb30
[  863.534864][T17396]  ? skb_put+0x11b/0x210
[  863.534874][T17396]  netlink_sendmsg+0x805/0xb30
[  863.534887][T17396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.534897][T17396]  ? aa_sock_msg_perm+0xf1/0x1d0
[  863.534910][T17396]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  863.534919][T17396]  ? __pfx_netlink_sendmsg+0x10/0x10
[  863.534927][T17396]  __sock_sendmsg+0x21c/0x270
[  863.534941][T17396]  ____sys_sendmsg+0x505/0x830
[  863.534953][T17396]  ? __pfx_____sys_sendmsg+0x10/0x10
[  863.534966][T17396]  ? import_iovec+0x74/0xa0
[  863.534978][T17396]  ___sys_sendmsg+0x21f/0x2a0
[  863.534988][T17396]  ? __pfx____sys_sendmsg+0x10/0x10
[  863.535015][T17396]  ? __fget_files+0x2a/0x420
[  863.535023][T17396]  ? __fget_files+0x3a0/0x420
[  863.535036][T17396]  __x64_sys_sendmsg+0x19b/0x260
[  863.535046][T17396]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  863.535063][T17396]  ? do_syscall_64+0xbe/0xfa0
[  863.535077][T17396]  do_syscall_64+0xfa/0xfa0
[  863.535087][T17396]  ? lockdep_hardirqs_on+0x9c/0x150
[  863.535098][T17396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.535106][T17396]  ? exc_page_fault+0xab/0x100
[  863.535118][T17396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.535126][T17396] RIP: 0033:0x7f47ca78efc9
[  863.535136][T17396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.535144][T17396] RSP: 002b:00007f47c89f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.535154][T17396] RAX: ffffffffffffffda RBX: 00007f47ca9e5fa0 RCX: 00007f47ca78efc9
[  863.535160][T17396] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003
[  863.535165][T17396] RBP: 00007f47ca811f91 R08: 0000000000000000 R09: 0000000000000000
[  863.535171][T17396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  863.535176][T17396] R13: 00007f47ca9e6038 R14: 00007f47ca9e5fa0 R15: 00007ffe6d1c0108
[  863.535191][T17396]  </TASK>
[  863.535195][T17396] Mem-Info:
[  863.722659][T17396] active_anon:8598 inactive_anon:0 isolated_anon:0
[  863.722659][T17396]  active_file:1382 inactive_file:38576 isolated_file:0
[  863.722659][T17396]  unevictable:1768 dirty:158 writeback:0
[  863.722659][T17396]  slab_reclaimable:13034 slab_unreclaimable:192485
[  863.722659][T17396]  mapped:28418 shmem:2450 pagetables:1528
[  863.722659][T17396]  sec_pagetables:0 bounce:0
[  863.722659][T17396]  kernel_misc_reclaimable:0
[  863.722659][T17396]  free:993859 free_pcp:22751 free_cma:0
[  863.739145][T17396] Node 0 active_anon:21992kB inactive_anon:0kB active_file:1872kB inactive_file:146064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96464kB dirty:180kB writeback:0kB shmem:4792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9936kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  863.752029][T17396] Node 1 active_anon:12400kB inactive_anon:0kB active_file:3656kB inactive_file:8240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:17208kB dirty:452kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5556kB pagetables:2648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  863.763352][T17396] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  863.774310][T17396] lowmem_reserve[]: 0 1597 2129 2129 2129
[  863.776453][T17396] Node 0 DMA32 free:1122204kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7472kB inactive_anon:0kB active_file:376kB inactive_file:276kB unevictable:0kB writepending:44kB zspages:0kB present:2080636kB managed:1635812kB mlocked:0kB bounce:0kB free_pcp:21056kB local_pcp:6460kB free_cma:0kB
[  863.788108][T17396] lowmem_reserve[]: 0 0 531 531 531
[  863.790096][T17396] Node 0 Normal free:10548kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14520kB inactive_anon:0kB active_file:1496kB inactive_file:145788kB unevictable:3536kB writepending:136kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:3560kB local_pcp:3280kB free_cma:0kB
[  863.802186][T17396] lowmem_reserve[]: 0 0 0 0 0
[  863.804069][T17396] Node 1 Normal free:2827324kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12400kB inactive_anon:0kB active_file:3656kB inactive_file:8240kB unevictable:3536kB writepending:452kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:66664kB local_pcp:29840kB free_cma:0kB
[  863.816042][T17396] lowmem_reserve[]: 0 0 0 0 0
[  863.817971][T17396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  863.822730][T17396] Node 0 DMA32: 65*4kB (ME) 35*8kB (ME) 40*16kB (UME) 82*32kB (ME) 15*64kB (UM) 24*128kB (ME) 3*256kB (UME) 11*512kB (ME) 44*1024kB (UME) 7*2048kB (UM) 256*4096kB (UM) = 1122204kB
[  863.829836][T17396] Node 0 Normal: 7*4kB (UME) 59*8kB (UE) 54*16kB (UME) 119*32kB (UME) 48*64kB (UME) 10*128kB (U) 0*256kB 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 10548kB
[  863.835551][T17396] Node 1 Normal: 1559*4kB (UM) 1468*8kB (UME) 636*16kB (UME) 684*32kB (UM) 807*64kB (UM) 448*128kB (UM) 225*256kB (UM) 123*512kB (UM) 98*1024kB (UME) 3*2048kB (M) 596*4096kB (UM) = 2827324kB
[  863.843199][T17396] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  863.846749][T17396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  863.850438][T17396] 42408 total pagecache pages
[  863.852337][T17396] 0 pages in swap cache
[  863.853946][T17396] Free swap  = 124996kB
[  863.855560][T17396] Total swap = 124996kB
[  863.857138][T17396] 1834877 pages RAM
[  863.858726][T17396] 0 pages HighMem/MovableOnly
[  863.860393][T17396] 387250 pages reserved
[  863.861953][T17396] 0 pages cma reserved
[  865.042603][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18777'.
[  865.163148][T17453] netlink: 'syz.5.18782': attribute type 5 has an invalid length.
[  865.172137][T17455] IPVS: Error connecting to the multicast addr
[  865.335502][T17474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18790'.
[  865.354160][T17474] netlink: 'syz.2.18790': attribute type 4 has an invalid length.
[  866.472827][T17518] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.744137][T17520] wg1 speed is unknown, defaulting to 1000
[  867.012936][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18816'.
[  867.032767][T17541] veth3: entered promiscuous mode
[  867.406400][T17572] bond14: entered allmulticast mode
[  867.948638][T17601] wg1 speed is unknown, defaulting to 1000
[  868.192374][T17604] wg1 speed is unknown, defaulting to 1000
[  869.217430][T17647] wg1 speed is unknown, defaulting to 1000
[  870.209315][T17659] netlink: 1311 bytes leftover after parsing attributes in process `syz.5.18864'.
[  870.349952][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18866'.
[  870.355607][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18867'.
[  870.362897][T17666] net_ratelimit: 15 callbacks suppressed
[  870.362913][T17666] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  870.371513][T17668] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  870.378143][T17668] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.390118][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18866'.
[  870.393237][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18866'.
[  870.396380][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18866'.
[  870.399918][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18866'.
[  870.407792][ T5826] unregister_netdevice: waiting for veth0_to_team to become free. Usage count = 3
[  870.411383][ T5826] ref_tracker: netdev@ffff88811f974618 has 1/1 users at
[  870.411383][ T5826]      ib_device_set_netdev+0x31f/0x6d0
[  870.411383][ T5826]      siw_newlink+0x40c/0xd70
[  870.411383][ T5826]      nldev_newlink+0x4a5/0x5a0
[  870.411383][ T5826]      rdma_nl_rcv+0x6ae/0x980
[  870.411383][ T5826]      netlink_unicast+0x82f/0x9e0
[  870.411383][ T5826]      netlink_sendmsg+0x805/0xb30
[  870.411383][ T5826]      __sock_sendmsg+0x21c/0x270
[  870.411383][ T5826]      ____sys_sendmsg+0x505/0x830
[  870.411383][ T5826]      ___sys_sendmsg+0x21f/0x2a0
[  870.411383][ T5826]      __x64_sys_sendmsg+0x19b/0x260
[  870.411383][ T5826]      do_syscall_64+0xfa/0xfa0
[  870.411383][ T5826]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  870.411383][ T5826] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  870.474350][T17668] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  870.491274][T17668] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.511307][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18867'.
[  870.514937][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18867'.
[  870.610899][T17668] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  870.614381][T17668] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.688609][T17668] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  870.692012][T17668] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.797813][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  870.800222][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  870.819271][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  870.822286][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  870.833586][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  870.835939][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  870.855420][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  870.858418][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.850469][   T34] INFO: task kworker/u10:11:6941 blocked for more than 143 seconds.
[  875.853431][   T34]       Not tainted syzkaller #0
[  875.855261][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  875.859433][   T34] task:kworker/u10:11  state:D stack:21384 pid:6941  tgid:6941  ppid:2      task_flags:0x4208160 flags:0x00080000
[  875.863840][   T34] Workqueue: ib-unreg-wq ib_unregister_work
[  875.866048][   T34] Call Trace:
[  875.867440][   T34]  <TASK>
[  875.868625][   T34]  __schedule+0x1798/0x4cc0
[  875.870253][   T34]  ? validate_chain+0x897/0x2140
[  875.872241][   T34]  ? __lock_acquire+0xab9/0xd20
[  875.874232][   T34]  ? __pfx___schedule+0x10/0x10
[  875.876174][   T34]  ? schedule+0x91/0x360
[  875.878095][   T34]  schedule+0x165/0x360
[  875.879814][   T34]  schedule_timeout+0x9a/0x270
[  875.881720][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  875.883890][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  875.885975][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  875.888262][   T34]  ? wait_for_completion+0x267/0x5d0
[  875.890428][   T34]  wait_for_completion+0x2bf/0x5d0
[  875.892513][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  875.894765][   T34]  ? up_write+0x1c4/0x420
[  875.896456][   T34]  ? remove_client_context+0xc0/0x1e0
[  875.898829][   T34]  disable_device+0x1c6/0x320
[  875.900735][   T34]  ? __pfx_disable_device+0x10/0x10
[  875.902917][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  875.904922][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  875.906904][   T34]  ib_unregister_work+0x19/0x30
[  875.908852][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  875.910976][   T34]  process_scheduled_works+0xae1/0x17b0
[  875.913044][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  875.915254][   T34]  worker_thread+0x8a0/0xda0
[  875.917004][   T34]  kthread+0x711/0x8a0
[  875.918714][   T34]  ? __pfx_worker_thread+0x10/0x10
[  875.920632][   T34]  ? __pfx_kthread+0x10/0x10
[  875.922358][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  875.924286][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  875.926218][   T34]  ? __pfx_kthread+0x10/0x10
[  875.929269][   T34]  ret_from_fork+0x4bc/0x870
[  875.930967][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  875.932756][   T34]  ? __switch_to_asm+0x39/0x70
[  875.934364][   T34]  ? __switch_to_asm+0x33/0x70
[  875.936070][   T34]  ? __pfx_kthread+0x10/0x10
[  875.937876][   T34]  ret_from_fork_asm+0x1a/0x30
[  875.939589][   T34]  </TASK>
[  875.940856][   T34] 
[  875.940856][   T34] Showing all locks held in the system:
[  875.943584][   T34] 1 lock held by khungtaskd/34:
[  875.945318][   T34]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  875.949188][   T34] 2 locks held by getty/5639:
[  875.950905][   T34]  #0: ffff888174a770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  875.954499][   T34]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  875.959275][   T34] 3 locks held by kworker/u8:2/5826:
[  875.961206][   T34]  #0: ffff888100ef7948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  875.965185][   T34]  #1: ffffc900040cfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  875.969999][   T34]  #2: ffffffff8f2be330 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820
[  875.973449][   T34] 3 locks held by kworker/u10:11/6941:
[  875.975459][   T34]  #0: ffff888106688948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  875.979777][   T34]  #1: ffffc90004437ba0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  875.984505][   T34]  #2: ffff8881133e0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[  875.988783][   T34] 2 locks held by syz.3.16276/11613:
[  875.990733][   T34]  #0: ffffffff8f2be330 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  875.994090][   T34]  #1: ffff8881133e0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  875.998235][   T34] 2 locks held by syz.4.17440/14390:
[  876.000183][   T34]  #0: ffffffff8f2be330 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0
[  876.003619][   T34]  #1: ffff8881133e0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[  876.007792][   T34] 
[  876.008696][   T34] =============================================
[  876.008696][   T34] 
[  876.011746][   T34] NMI backtrace for cpu 0
[  876.011760][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  876.011775][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  876.011784][   T34] Call Trace:
[  876.011792][   T34]  <TASK>
[  876.011800][   T34]  dump_stack_lvl+0x189/0x250
[  876.011825][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  876.011844][   T34]  ? __pfx__printk+0x10/0x10
[  876.011869][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  876.011889][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  876.011906][   T34]  ? __pfx__printk+0x10/0x10
[  876.011924][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  876.011948][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  876.011965][   T34]  watchdog+0xf60/0xfa0
[  876.011984][   T34]  ? watchdog+0x1e2/0xfa0
[  876.012003][   T34]  kthread+0x711/0x8a0
[  876.012025][   T34]  ? __pfx_watchdog+0x10/0x10
[  876.012039][   T34]  ? __pfx_kthread+0x10/0x10
[  876.012059][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  876.012076][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  876.012094][   T34]  ? __pfx_kthread+0x10/0x10
[  876.012113][   T34]  ret_from_fork+0x4bc/0x870
[  876.012130][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  876.012150][   T34]  ? __switch_to_asm+0x39/0x70
[  876.012161][   T34]  ? __switch_to_asm+0x33/0x70
[  876.012171][   T34]  ? __pfx_kthread+0x10/0x10
[  876.012190][   T34]  ret_from_fork_asm+0x1a/0x30
[  876.012216][   T34]  </TASK>
[  876.012222][   T34] Sending NMI from CPU 0 to CPUs 1:
[  876.065732][    C1] NMI backtrace for cpu 1
[  876.065752][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  876.065766][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  876.065775][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  876.065798][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 f1 21 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  876.065809][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 00000286
[  876.065821][    C1] RAX: 87ac0d30fd031f00 RBX: ffffffff81967be7 RCX: 87ac0d30fd031f00
[  876.065829][    C1] RDX: 0000000000000001 RSI: ffffffff8d70d473 RDI: ffffffff8bbf05e0
[  876.065835][    C1] RBP: ffffc90000197f10 R08: ffff88823c632fdb R09: 1ffff110478c65fb
[  876.065840][    C1] R10: dffffc0000000000 R11: ffffed10478c65fc R12: ffffffff8f7cdb70
[  876.065846][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102c1d3000
[  876.065851][    C1] FS:  0000000000000000(0000) GS:ffff8882a9f3e000(0000) knlGS:0000000000000000
[  876.065857][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  876.065863][    C1] CR2: 00007fdc9e2e8866 CR3: 000000000dd38000 CR4: 00000000000006f0
[  876.065890][    C1] Call Trace:
[  876.065897][    C1]  <TASK>
[  876.065900][    C1]  default_idle+0x13/0x20
[  876.065909][    C1]  default_idle_call+0x73/0xb0
[  876.065918][    C1]  do_idle+0x1e7/0x510
[  876.065933][    C1]  ? __pfx_do_idle+0x10/0x10
[  876.065952][    C1]  cpu_startup_entry+0x44/0x60
[  876.065966][    C1]  start_secondary+0x101/0x110
[  876.065984][    C1]  common_startup_64+0x13e/0x147
[  876.066008][    C1]  </TASK>

VM DIAGNOSIS:
22:19:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff81738d42 RCX=b2d652d1bafb4300 RDX=0000000000000000
RSI=ffffffff81738d42 RDI=ffffffff8df3d2e0 RBP=ffffffff81738d25 RSP=ffffc90008f7e9f8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90008f7ebd8 R11=ffffffff81ac2d30
R12=0000000000000002 R13=ffffffff8df3d2e0 R14=ffffffff8df3d2e0 R15=0000000000000000
RIP=ffffffff8225a3d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fad4a1426c0 ffffffff 00c00000
GS =0000 ffff88818eb3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f47ca774f00 CR3=000000002d572000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fad4941315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff335d360 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99aea1b0 RSP=ffffc900040cee30
R8 =ffff88816ae28237 R9 =1ffff1102d5c5046 R10=dffffc0000000000 R11=ffffffff8514c990
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99ae9f20 R15=0000000000000000
RIP=ffffffff8514ca07 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f3e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007730 CR3=000000001a4ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f8cfcc1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
