last executing test programs:

2.060098847s ago: executing program 2 (id=5466):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5c, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x24000050)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, 0x0, 0x48850)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

1.73807794s ago: executing program 2 (id=5469):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x42}, 0x5, 0x2, 0x2, 0x1, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8)
r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r5)
sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fe02f7cf98a53fa9d264a9", @ANYRES32=0x0, @ANYBLOB="08000e0020000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40804)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004090}, 0x0)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000340)={0x2, &(0x7f0000000200)=[{0x0, 0x1, 0x7, 0x6}, {0x81, 0x66, 0x1, 0x8}]})
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000406f9513b23666c6747227f28c001ed00200001000a0000040000000000000065de000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a31000059bf92c38e1871c27ea8b822532f1792fe86b8bfbef311c19b5be44c9143f8435d420efb6a86a43b90a3f3eae3ed0019d3f93e31dbf72f9fa7b25c910b6075876282a058530d5ac01cb64d1a33fbeddb77034a590c1156132077f0f27f86a60e8330028f85c646ab0e244fa1186294ed428044b43df8c4300e7091a77b29297d68c30da95c5566f662b2e2974e1015907beba335950a8d000fba22b26d04cf10c5810100beb1ae87f854a7e589f59313992ef61681d2eba338a7d59d8ad25603e3de375f726690b818eb42f4de103b04a22c7ef014957117838f0f6bcbdeaebede86f9823cfc4f67ddb59952b63060c58351b2666cbf27"], 0x6c}}, 0x0)
sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0)
setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f0000000280)=0x7, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000040)

1.669461843s ago: executing program 2 (id=5471):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0xcf, 0x0, 0x4) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r5, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20008091) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) (async, rerun: 32)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x4004040) (rerun: 32)

1.609028869s ago: executing program 2 (id=5473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7d, 0x3, 0x5, 0x100}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x80000)
getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12, 0x4}]}}]}, 0x38}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}}, 0x20000050)

1.465033348s ago: executing program 2 (id=5477):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000011e0000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108)

1.388370448s ago: executing program 2 (id=5480):
unshare(0x20000400) (async)
unshare(0x20000400)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0)
getsockopt$bt_hci(r0, 0x11c, 0x1, 0x0, &(0x7f0000000c80))
socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c0}, 0x48000)
socket(0x2, 0x3, 0xff) (async)
r4 = socket(0x2, 0x3, 0xff)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r6, 0x3}, 0xc) (async)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r6, 0x3}, 0xc)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18)
recvmmsg(r7, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r2, 0x80000d7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r9, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r8, 0xe0, &(0x7f0000000f00)={0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r8, 0x7, 0x34, 0x0, @void, @void, @void, @value=r11, r10}, 0x20)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r13 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8)
socket$inet6(0xa, 0x2, 0x0)

539.767939ms ago: executing program 0 (id=5500):
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
listen(0xffffffffffffffff, 0x7)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x1, 0x3, 0x3, 0x6, 0x6, 0x3, 0x7e, {0x5, 0x9, "30ea56ccf61cab1d"}, 0x3, 0x3e, 0x2, 0x4, 0x1, "eb"}}, 0x1a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x44000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4)
recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000000240)=""/171, 0xab}], 0x3}, 0x158}], 0x1, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x1ff, 0x200}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x14}}, 0xc041)

429.978575ms ago: executing program 0 (id=5502):
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7673bb65}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
close(0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0xd4, r5, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x42, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad76"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0x7}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0x28c19c4be41a64e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x9, 0x3, 0x5, 0x153}, {0x0, 0x1, 0x1, 0x2, 0x3af4, 0xfffffffe}, 0x4, 0xff, 0x22d4}}]}}]}, 0x6c}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x1c}, [0xff000000, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'veth0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x6c, 0x79}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff, 0xff000000, 0xff], [0xff, 0xff, 0xff000000, 0xffffffff], 'nr0\x00', 'wg1\x00', {}, {0xff}, 0x3a, 0xc5, 0x6, 0x4e}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xff, 0xffffffff, 0xff000000], 'veth0_vlan\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x1, 0x49}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x220, 0x258, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x2, 0x80000001, 0x30, 0x471, 0x3, 0x86, 0x4, 0x80, 0x40}, {0x8000000000000000}}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0xb}, {0x2, 0x6, 0x1}, {0x0, 0x1, 0x1}, 0xc, 0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x1, {0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}}}, 0x32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r12, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x114, r12, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44002}, 0x44008)
ioctl$PPPIOCGL2TPSTATS(r9, 0x80487436, &(0x7f0000000540)="43210098")
sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001280)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aacb5bb724cfdd0a841911a9df7f17997e8df1f910a336268531d482d425c8482c89c8f68f7aae5ebe4da5635ed9dd11438f9009678f3076799901847cfd3d56b85e7e3ae784b416666c3fbb71bae0886b85916458cc80e14800874fc7e809b0b4b393c32093f9652dab1f37c2e75c4fa8"], 0x2c}, 0x1, 0x0, 0x0, 0x2044001}, 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078c2000700030000007f000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000000000000000000000518fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b65501653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbda5a19a02b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a14112300000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d7113604936643cb9868537d68e2d2c6393a9e2becd1a9f51a948b5b303f4f0032107f5000000000002000000000200000000000000000000000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81edfbd4e7fe926f09bede77f64bda5803dcbd78750f106a7d88c8d6a1593857a0d41f8ba6f6dbac4c3cc0d670c7897915f2ae9b0aed6370062aeda13d4776d83257057e29661d94552e98928e6f1adf8ae7489a865122ce3c0e9b992fc4b9784dffa25b0b182ab36b7c8da70d2d9359480df27306f889bbae64599ecca10258f1fe497b01c0edd3e5167dc023ca6de22722f4f4622c5cf1412c09eac2c8d831b833a9def8d4c969522059d4b83364ba5356812c0ecff289175f3933783790c0024b46ca4a8439f4a877d83c4deafe82557301acf5dcb08154388b2c1547f9d76d410bf05569"], 0x0)

395.792069ms ago: executing program 1 (id=5503):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
r5 = socket(0x29, 0x804, 0x7) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r6)
sendmsg$FOU_CMD_GET(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01012cbd7000fcdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a0000001400070000000000000000000000000000000008060001004e"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48020)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x110202920}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0xc080) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) (async)
listen(r8, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ff}, 0x28)
syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r11, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x91}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44800) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) (async)
write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34800000", @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300000c0070000400070004000500"], 0x34}}, 0x24040890)

394.578304ms ago: executing program 0 (id=5504):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff610, 0x0, 0x0, 0x0, 0x7fb}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (rerun: 64)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r3, r2, 0x26}, 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf2ff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

218.517461ms ago: executing program 1 (id=5505):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC, @ANYBLOB="d9f652c76daee85e8366c4a568babd217d8f4d918c3c807cb4ecf508f5f832507c311af5fe5006"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xfcc3})
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

218.128106ms ago: executing program 0 (id=5506):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r1=>0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000400)={@nfc_llcp={0x27, r1, 0x1, 0x4, 0x4, 0x8, "f2a51a10112563aca381c180b2c94758fc528e84cb53dc758a31339246a94e870a718d1a48d4e2157b69422bf6a91590c1526ecfe6cde112f5d858b4594115", 0x13}, {&(0x7f0000000300)=""/196, 0xc4}, &(0x7f00000000c0), 0x44}, 0xa0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x78, 0x0, 0x205, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0x73d, 0x57}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0x78}}, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000680"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000004)

192.115685ms ago: executing program 1 (id=5507):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x268, 0x0, 0x19, 0x0, 0xd8, 0x0, 0x1d0, 0x1f0, 0x1f0, 0x1d0, 0x1f0, 0x3, 0x0, {[{{@ip={@private=0x2000, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'gre0\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x6, 0xb, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x9e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8)

140.190523ms ago: executing program 0 (id=5508):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x898, 0x2c, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffff, 0x6}, {0x2, 0x4}, {0xfff1, 0xfff1}}, [@f_tcindex={{0xc}, {0x868, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfe01}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7fffffff}, @TCA_TCINDEX_POLICE={0x830, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfff, 0x7, 0x1000, 0x3, 0x0, 0x7, 0x4, 0x4, 0x4, 0x8, 0x80, 0x2, 0x7, 0x8, 0x81, 0x7, 0xf6d1, 0x5, 0x6, 0x9, 0x1, 0x7, 0x9, 0x8, 0x2, 0x7, 0x2, 0x4, 0xfffffffb, 0x3ff, 0x30, 0x0, 0x2, 0x7, 0x0, 0x7, 0xaf3, 0xaabf, 0x8, 0x5, 0x340, 0x9, 0x0, 0x9, 0xe, 0x7, 0xffff, 0x9, 0x1, 0x81, 0x2, 0x3ff, 0x200, 0x8, 0x6, 0x0, 0x3, 0x400, 0x80, 0x1, 0x9, 0x2, 0x4, 0xfffffffb, 0x0, 0x2, 0x1, 0x9, 0x9, 0x1, 0xffffffff, 0x6, 0x10000, 0xfffffffc, 0xfd1, 0x7, 0x1, 0x6, 0xd, 0xd085, 0x7, 0x3, 0x6, 0x7, 0x8, 0xf, 0x8001, 0x0, 0x1000, 0x3, 0x3da, 0x86a2, 0x6, 0xff30, 0x3, 0x7, 0x11f, 0x9, 0x3ff, 0x9, 0x3ff, 0x81, 0x7, 0x8708, 0x1, 0xe, 0x5, 0x23, 0x7ff, 0x7, 0x0, 0x8000, 0x5, 0x4, 0x7, 0x6, 0x7, 0xd, 0x4, 0x1, 0x1, 0xfffffff7, 0x1, 0x0, 0x1000, 0x8, 0x40, 0x3, 0xfffffff7, 0x1, 0x6, 0x2470, 0xffffff01, 0x46dd79ff, 0x8, 0x3, 0x8, 0x3ff, 0xe0d8, 0x7, 0x8a, 0x7, 0x1b18, 0x10, 0x6f1963fe, 0x3, 0x200, 0x900, 0x8001, 0xa, 0xff, 0x401, 0x2b2, 0xd, 0x1, 0x1eea, 0x4e, 0xc, 0x4, 0x8, 0x5, 0x8, 0xfffffff7, 0x3, 0xff, 0x5ef, 0x2, 0x1556, 0x5bcf, 0x8e3, 0x6, 0x4, 0x1, 0x80000001, 0x9, 0x1, 0x1000, 0x5, 0x7fff, 0x400, 0xd, 0x0, 0x3, 0xe, 0xf, 0x7, 0xf7fd, 0x401, 0x4, 0x4, 0xa, 0x6, 0x2, 0x6, 0x9, 0x7, 0x47b2, 0x81, 0x6, 0x0, 0x4, 0x2, 0x2, 0x7f, 0xf, 0x5, 0x7, 0x7, 0xf, 0x7, 0x1000, 0x9, 0xb3, 0x9, 0x3ff, 0x3, 0x1, 0x4, 0x6, 0x4, 0x7f, 0x7, 0x800, 0x100, 0x0, 0x6d88, 0x40cdde0d, 0x6, 0xe78f, 0x6, 0x4, 0x6, 0xfff, 0xe2e, 0x5, 0x8, 0xfffffffc, 0x4, 0x8, 0x2bb55b0e, 0x2, 0x0, 0x4c50, 0x5, 0x7, 0x3, 0x80000000, 0x10000, 0x8001, 0xfffffffd, 0x3, 0x4, 0x8, 0x6, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xf7c, 0x1ff, 0xd5, 0x6, 0x3, 0x5, 0x8000, 0x1, 0x4c, 0x5, 0x3, 0x81, 0x7, 0x810, 0x6, 0x7, 0x3, 0x5, 0x7, 0x10000, 0x8, 0x5, 0x8, 0x10, 0xc824, 0x1, 0x547f, 0x3, 0x80000001, 0x2, 0x4, 0x5, 0x1, 0x6, 0x4, 0x6, 0x7, 0x7, 0x9, 0x0, 0x9, 0x9, 0x79, 0xfffffffa, 0xa, 0x5, 0x1, 0x5, 0x1, 0x2, 0x7, 0xffff, 0x6, 0x1, 0x6, 0x1, 0x6, 0x29, 0xe4, 0x2f86, 0x0, 0x80000001, 0x3, 0x2, 0x19, 0x7, 0x9, 0x0, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x5, 0x3a, 0x9, 0x4, 0x5, 0x6, 0x2, 0x1, 0x6, 0x9, 0xf5, 0x3, 0xc, 0x876b, 0x9, 0xdf86, 0x4, 0x2, 0x4, 0x263b, 0x6, 0x7, 0x81, 0x0, 0x5, 0x2, 0x10, 0x3ff, 0x100, 0x0, 0x101, 0x0, 0x3, 0x0, 0x7, 0x0, 0x8000, 0x6, 0x7, 0x1ff, 0x0, 0x9, 0x9, 0x8, 0x2, 0x400, 0x7, 0x800, 0xa1b, 0x5, 0xdb9d, 0xe, 0x8000000, 0x7f, 0x7, 0x6, 0x2, 0x4, 0x62fc, 0x0, 0x3, 0xc82, 0x3e71, 0x7f, 0x10, 0x5, 0x1, 0x39, 0x2, 0x622c, 0x1d1, 0x3, 0x7, 0x9, 0x1, 0xfff, 0xc, 0x1, 0x0, 0x16, 0x5, 0xb9, 0xedf7, 0x2, 0x1806, 0x80, 0x1, 0xff, 0x2, 0x21f1, 0x80000001, 0x3, 0xfffffffe, 0x4, 0x0, 0x3, 0xff, 0x8, 0x0, 0x3, 0x0, 0xe, 0xfffffffa, 0x4, 0x7, 0x1, 0x7ff, 0xffffff81, 0x2, 0x9, 0x3, 0x4, 0x0, 0xffffffff, 0x2, 0x6, 0x1, 0x2, 0x2, 0x514, 0x97, 0x3, 0x200, 0x6, 0xcf, 0x9, 0x2, 0xbd, 0xfffffffd, 0x0, 0x3bab, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x8000, 0x0, 0xfffffff4, 0x3, 0x7615, 0x6, 0x3, 0x8d, 0xfc34, 0x9, 0x7, 0x3, 0x8, 0xc2fe, 0x2, 0x400, 0x10, 0xffffffff, 0x1, 0x2b, 0xffffffff, 0x6, 0x81, 0x80000001, 0x0, 0x2, 0x3, 0x100, 0xfff, 0x80000001, 0xfffffff9, 0x3, 0x8, 0x7, 0x6, 0xfffffff5, 0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0xedf2, 0x2, 0x5, 0x1ff, 0x5]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xffff28e8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0xfff3}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf, 0xffff}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x640a}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000305000000450000000000000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="df0fc17027521d5001140e4eeefb0000"], 0x4c}}, 0x28000000)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x898, 0x2c, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffff, 0x6}, {0x2, 0x4}, {0xfff1, 0xfff1}}, [@f_tcindex={{0xc}, {0x868, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xfe01}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7fffffff}, @TCA_TCINDEX_POLICE={0x830, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfff, 0x7, 0x1000, 0x3, 0x0, 0x7, 0x4, 0x4, 0x4, 0x8, 0x80, 0x2, 0x7, 0x8, 0x81, 0x7, 0xf6d1, 0x5, 0x6, 0x9, 0x1, 0x7, 0x9, 0x8, 0x2, 0x7, 0x2, 0x4, 0xfffffffb, 0x3ff, 0x30, 0x0, 0x2, 0x7, 0x0, 0x7, 0xaf3, 0xaabf, 0x8, 0x5, 0x340, 0x9, 0x0, 0x9, 0xe, 0x7, 0xffff, 0x9, 0x1, 0x81, 0x2, 0x3ff, 0x200, 0x8, 0x6, 0x0, 0x3, 0x400, 0x80, 0x1, 0x9, 0x2, 0x4, 0xfffffffb, 0x0, 0x2, 0x1, 0x9, 0x9, 0x1, 0xffffffff, 0x6, 0x10000, 0xfffffffc, 0xfd1, 0x7, 0x1, 0x6, 0xd, 0xd085, 0x7, 0x3, 0x6, 0x7, 0x8, 0xf, 0x8001, 0x0, 0x1000, 0x3, 0x3da, 0x86a2, 0x6, 0xff30, 0x3, 0x7, 0x11f, 0x9, 0x3ff, 0x9, 0x3ff, 0x81, 0x7, 0x8708, 0x1, 0xe, 0x5, 0x23, 0x7ff, 0x7, 0x0, 0x8000, 0x5, 0x4, 0x7, 0x6, 0x7, 0xd, 0x4, 0x1, 0x1, 0xfffffff7, 0x1, 0x0, 0x1000, 0x8, 0x40, 0x3, 0xfffffff7, 0x1, 0x6, 0x2470, 0xffffff01, 0x46dd79ff, 0x8, 0x3, 0x8, 0x3ff, 0xe0d8, 0x7, 0x8a, 0x7, 0x1b18, 0x10, 0x6f1963fe, 0x3, 0x200, 0x900, 0x8001, 0xa, 0xff, 0x401, 0x2b2, 0xd, 0x1, 0x1eea, 0x4e, 0xc, 0x4, 0x8, 0x5, 0x8, 0xfffffff7, 0x3, 0xff, 0x5ef, 0x2, 0x1556, 0x5bcf, 0x8e3, 0x6, 0x4, 0x1, 0x80000001, 0x9, 0x1, 0x1000, 0x5, 0x7fff, 0x400, 0xd, 0x0, 0x3, 0xe, 0xf, 0x7, 0xf7fd, 0x401, 0x4, 0x4, 0xa, 0x6, 0x2, 0x6, 0x9, 0x7, 0x47b2, 0x81, 0x6, 0x0, 0x4, 0x2, 0x2, 0x7f, 0xf, 0x5, 0x7, 0x7, 0xf, 0x7, 0x1000, 0x9, 0xb3, 0x9, 0x3ff, 0x3, 0x1, 0x4, 0x6, 0x4, 0x7f, 0x7, 0x800, 0x100, 0x0, 0x6d88, 0x40cdde0d, 0x6, 0xe78f, 0x6, 0x4, 0x6, 0xfff, 0xe2e, 0x5, 0x8, 0xfffffffc, 0x4, 0x8, 0x2bb55b0e, 0x2, 0x0, 0x4c50, 0x5, 0x7, 0x3, 0x80000000, 0x10000, 0x8001, 0xfffffffd, 0x3, 0x4, 0x8, 0x6, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xf7c, 0x1ff, 0xd5, 0x6, 0x3, 0x5, 0x8000, 0x1, 0x4c, 0x5, 0x3, 0x81, 0x7, 0x810, 0x6, 0x7, 0x3, 0x5, 0x7, 0x10000, 0x8, 0x5, 0x8, 0x10, 0xc824, 0x1, 0x547f, 0x3, 0x80000001, 0x2, 0x4, 0x5, 0x1, 0x6, 0x4, 0x6, 0x7, 0x7, 0x9, 0x0, 0x9, 0x9, 0x79, 0xfffffffa, 0xa, 0x5, 0x1, 0x5, 0x1, 0x2, 0x7, 0xffff, 0x6, 0x1, 0x6, 0x1, 0x6, 0x29, 0xe4, 0x2f86, 0x0, 0x80000001, 0x3, 0x2, 0x19, 0x7, 0x9, 0x0, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x5, 0x3a, 0x9, 0x4, 0x5, 0x6, 0x2, 0x1, 0x6, 0x9, 0xf5, 0x3, 0xc, 0x876b, 0x9, 0xdf86, 0x4, 0x2, 0x4, 0x263b, 0x6, 0x7, 0x81, 0x0, 0x5, 0x2, 0x10, 0x3ff, 0x100, 0x0, 0x101, 0x0, 0x3, 0x0, 0x7, 0x0, 0x8000, 0x6, 0x7, 0x1ff, 0x0, 0x9, 0x9, 0x8, 0x2, 0x400, 0x7, 0x800, 0xa1b, 0x5, 0xdb9d, 0xe, 0x8000000, 0x7f, 0x7, 0x6, 0x2, 0x4, 0x62fc, 0x0, 0x3, 0xc82, 0x3e71, 0x7f, 0x10, 0x5, 0x1, 0x39, 0x2, 0x622c, 0x1d1, 0x3, 0x7, 0x9, 0x1, 0xfff, 0xc, 0x1, 0x0, 0x16, 0x5, 0xb9, 0xedf7, 0x2, 0x1806, 0x80, 0x1, 0xff, 0x2, 0x21f1, 0x80000001, 0x3, 0xfffffffe, 0x4, 0x0, 0x3, 0xff, 0x8, 0x0, 0x3, 0x0, 0xe, 0xfffffffa, 0x4, 0x7, 0x1, 0x7ff, 0xffffff81, 0x2, 0x9, 0x3, 0x4, 0x0, 0xffffffff, 0x2, 0x6, 0x1, 0x2, 0x2, 0x514, 0x97, 0x3, 0x200, 0x6, 0xcf, 0x9, 0x2, 0xbd, 0xfffffffd, 0x0, 0x3bab, 0x6, 0x9, 0x4, 0x7fff, 0x7, 0x8000, 0x0, 0xfffffff4, 0x3, 0x7615, 0x6, 0x3, 0x8d, 0xfc34, 0x9, 0x7, 0x3, 0x8, 0xc2fe, 0x2, 0x400, 0x10, 0xffffffff, 0x1, 0x2b, 0xffffffff, 0x6, 0x81, 0x80000001, 0x0, 0x2, 0x3, 0x100, 0xfff, 0x80000001, 0xfffffff9, 0x3, 0x8, 0x7, 0x6, 0xfffffff5, 0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0xedf2, 0x2, 0x5, 0x1ff, 0x5]}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xffff28e8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0xfff3}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf, 0xffff}}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x640a}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0xc0}, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000305000000450000000000000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="df0fc17027521d5001140e4eeefb0000"], 0x4c}}, 0x28000000) (async)

139.011964ms ago: executing program 1 (id=5509):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000040)={0x17, 0x2, {0xa67, @usage=0xa587, <r2=>0x0, 0x0, 0x3, 0x2, 0xffffffff, 0x6, 0x80, @usage=0x7, 0x1d, 0x3, [0x9, 0x4, 0xd, 0x6, 0x6, 0xfe]}, {0x5, @struct={0x8, 0x5}, 0x0, 0x2, 0x80000000, 0x9, 0x401, 0xda, 0x421, @usage=0xfff, 0x1, 0x200, [0x1, 0x8, 0x0, 0x6be6, 0x3]}, {0x2, @usage=0x3, 0x0, 0xe9, 0x4, 0xffffffffffff8001, 0x6, 0x8, 0x4, @struct={0x200}, 0x2, 0x3ff, [0xa4aa, 0x400, 0x0, 0x9, 0xb35, 0x8]}, {0x5, 0xfff, 0xdad094}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000440)={r2, "f6fd0880a7a4ebba0ae435b01de8803b"})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001480)=@add_del={0x2, &(0x7f0000001440)='rose0\x00'})
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000014c0)={'wlan0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0xd, 0x0}}})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001500)="d20a46b9d6dac9c102e9c3f8203714572efb7e60874d7115017c98dd4069b1e58596a91ee8da4ea80cafda715b0bb5db6e52531ec2d6fca42c233b45b13d6897bbe0e357cafacd1c4a25565b8ce9243605b24f89f28c03fb95cab384551b81b001594cb96bacf8c211e950fb0908b2292165006d6ff9fbed12a339243675183bed268451135b1c42344a184940d8abb2faea1b7c5fed2e821964c20e5751e4f5ec57b04d6f89f3308661a9abcbe9ee722f0cf33c2578654abec8f7c9708fbb698cdf37dd64f225416b3968d04436194b15821bb9ba68f36cff85a746914c84095a7da693227ce06b56271b15dfdd108fff786a362d379b3d9fc464cba811e76f")
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001600), &(0x7f0000001640)=0x8)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000001680)=0xff00, &(0x7f00000016c0)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r4)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000001740)=[0x0, 0x3], 0x2)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, ',\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000001940)={'veth1_to_bridge\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001980)={'wlan0\x00'})
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, 0x140b, 0x8, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044084}, 0x20002080)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000001b00)='io.pressure\x00', 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f0000001b40))
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001b80)={'veth0\x00', @random="5b7fa6c6eb5e"})
getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000001bc0)=""/39, &(0x7f0000001c00)=0x27)
r8 = socket$nl_audit(0x10, 0x3, 0x9)
pipe(&(0x7f0000001c40)={<r9=>0xffffffffffffffff})
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000001c80)={0x0, r9, 0x1f6, 0xb, 0x8001, 0x1000200000})

79.059909ms ago: executing program 0 (id=5510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x4000002)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
epoll_create1(0x80000)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

618.825µs ago: executing program 1 (id=5511):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf25000c0000", @ANYRES32=r3, @ANYBLOB="01f50500000000001c0012800b00010067656e65766500000c0002800500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

0s ago: executing program 1 (id=5512):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004800) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0}) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r8, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x20000000) (async)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet6_udp_encap(r6, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) (async)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff}) (async)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0)
r12 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x7, 0x1, 0x3, 0x9, 0x0, 0xfffd}, 0x20)
setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async)
sendmmsg(r12, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="28000000000000000000020002000000e1f40b94cb97e400000000000000"], 0x28}}], 0x1, 0x0)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) (async)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x3, @any, 0x4, 0x2}, 0xe)
sendmmsg(r10, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002640)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, 0x0}}], 0x2, 0x10) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x148, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x40045}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x100, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x12, 0x4, "0efac88d289c8fc610f5788a1301"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "ba99a8"}, @NL80211_KEY_MODE={0x5}]}, {0x4}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "9a8abcdc1bb9f4abcec3641c4cedb107"}, @NL80211_KEY_SEQ={0xb, 0x4, "d8a9a7dc1ab3e0"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x9, 0x4, "390e3f3bdb"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x148}}, 0x0)

kernel console output (not intermixed with test programs):

 attr not present in new flow.
[  184.720757][T13569] xfrm0: entered promiscuous mode
[  184.722966][T13569] xfrm0: entered allmulticast mode
[  184.812909][T13577] __nla_validate_parse: 28 callbacks suppressed
[  184.812926][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'.
[  184.915109][T13593] Driver unsupported XDP return value 0 on prog  (id 653) dev N/A, expect packet loss!
[  184.928486][T13595] netlink: 'syz.2.2437': attribute type 1 has an invalid length.
[  184.957582][T13595] macvlan3: entered promiscuous mode
[  184.959439][T13595] macvlan3: entered allmulticast mode
[  184.961773][T13595] bond30: entered promiscuous mode
[  184.970667][T13595] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  184.978962][T13595] bond30: left promiscuous mode
[  185.042488][T13602] netlink: 'syz.0.2440': attribute type 1 has an invalid length.
[  185.085087][T13602] bond24: entered promiscuous mode
[  185.086969][T13602] bond24: entered allmulticast mode
[  185.089012][T13602] 8021q: adding VLAN 0 to HW filter on device bond24
[  185.125347][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2441'.
[  185.214302][T13602] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.219484][T13602] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.224149][T13602] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.227744][T13602] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.526361][T13626] bond0: (slave wlan1): Releasing backup interface
[  185.676717][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2454'.
[  185.753484][T13659] can: request_module (can-proto-0) failed.
[  185.841287][T13664] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  185.861861][T13664] macvlan3: entered promiscuous mode
[  185.867066][T13664] macvlan3: entered allmulticast mode
[  185.869572][T13664] bond23: entered promiscuous mode
[  185.871732][T13664] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  185.888121][T13664] bond23: left promiscuous mode
[  185.898774][T13667] netlink: 'syz.2.2461': attribute type 10 has an invalid length.
[  185.910512][T13667] team0: Port device dummy0 added
[  186.247180][T13702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2469'.
[  186.261030][T13703] netlink: 'syz.1.2473': attribute type 1 has an invalid length.
[  186.284224][T13703] macvlan3: entered promiscuous mode
[  186.286206][T13703] macvlan3: entered allmulticast mode
[  186.288526][T13703] bond24: entered promiscuous mode
[  186.290647][T13703] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  186.296022][T13703] bond24: left promiscuous mode
[  186.502708][T13716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2479'.
[  186.638983][T13732] netlink: 'syz.0.2484': attribute type 21 has an invalid length.
[  186.641609][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2484'.
[  186.701567][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'.
[  186.705159][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2486'.
[  186.821106][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2489'.
[  186.898136][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'.
[  188.183069][T13845] 8021q: adding VLAN 0 to HW filter on device bond25
[  188.349812][T13869] validate_nla: 4 callbacks suppressed
[  188.349832][T13869] netlink: 'syz.2.2529': attribute type 1 has an invalid length.
[  188.410711][T13869] macvlan3: entered promiscuous mode
[  188.413052][T13869] macvlan3: entered allmulticast mode
[  188.417370][T13869] bond31: entered promiscuous mode
[  188.420480][T13869] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  188.430719][T13869] bond31: left promiscuous mode
[  188.537080][T13885] netlink: 'syz.0.2534': attribute type 142 has an invalid length.
[  188.772867][T13917] sctp: [Deprecated]: syz.0.2545 (pid 13917) Use of int in max_burst socket option.
[  188.772867][T13917] Use struct sctp_assoc_value instead
[  188.789286][T13924] xt_hashlimit: max too large, truncated to 1048576
[  188.795604][T13924] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  188.861809][T13924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.055042][T13954] netlink: 'syz.1.2557': attribute type 1 has an invalid length.
[  189.087943][T13954] macvlan3: entered promiscuous mode
[  189.090241][T13954] macvlan3: entered allmulticast mode
[  189.092779][T13954] bond26: entered promiscuous mode
[  189.104219][T13954] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  189.112359][T13954] bond26: left promiscuous mode
[  189.489516][T13991] netlink: 'syz.2.2566': attribute type 1 has an invalid length.
[  189.595003][T13999] lo speed is unknown, defaulting to 1000
[  189.784680][T14017] syzkaller1: entered promiscuous mode
[  189.793644][T14017] syzkaller1: entered allmulticast mode
[  190.152356][T14032] netlink: 'syz.1.2577': attribute type 10 has an invalid length.
[  190.211911][T14032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  190.216719][T14032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  190.311603][T14055] __nla_validate_parse: 20 callbacks suppressed
[  190.311622][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.323677][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.334475][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.338234][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.343688][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.352143][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.356327][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.360283][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.364382][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.368379][T14055] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2585'.
[  190.475269][T14066] x_tables: duplicate underflow at hook 1
[  190.618498][T14080] netlink: 'syz.0.2597': attribute type 83 has an invalid length.
[  190.709226][T14084] 8021q: adding VLAN 0 to HW filter on device bond33
[  190.712482][T14083] bond33: option mode: unable to set because the bond device is up
[  190.725921][T14083] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  190.733463][T14083] bond33: (slave macvlan4): Enslaving as a backup interface with a down link
[  190.750583][T14084] team0: Port device dummy0 removed
[  190.758641][T14084] bond33: (slave macvlan4): Releasing backup interface
[  191.055824][T14107] netlink: 'syz.1.2607': attribute type 10 has an invalid length.
[  191.063646][T14107] macvlan0: entered promiscuous mode
[  191.081444][T14107] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  191.242228][T14123] geneve2: entered promiscuous mode
[  191.281242][T14127] bond0: (slave macvlan0): Releasing backup interface
[  191.307121][T14127] netlink: 'syz.1.2614': attribute type 10 has an invalid length.
[  191.375376][T14137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  191.378448][T14137] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  191.516961][T14147] netlink: 'syz.0.2619': attribute type 7 has an invalid length.
[  191.519622][T14147] netlink: 'syz.0.2619': attribute type 7 has an invalid length.
[  191.895501][T14196] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  191.962588][T14198] lo speed is unknown, defaulting to 1000
[  192.270049][T14225] unsupported nlmsg_type 40
[  192.341351][T14232] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  192.345884][T14232] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  193.033816][T14271] sctp: [Deprecated]: syz.1.2659 (pid 14271) Use of int in max_burst socket option.
[  193.033816][T14271] Use struct sctp_assoc_value instead
[  193.038903][T14271] 0: renamed from hsr0
[  193.042774][T14271] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  193.048139][T14271] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.051993][T14271] 0: entered allmulticast mode
[  193.055920][T14271] hsr_slave_0: entered allmulticast mode
[  193.058295][T14271] hsr_slave_1: entered allmulticast mode
[  193.061361][T14271] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  194.280547][T14322] validate_nla: 65 callbacks suppressed
[  194.280565][T14322] netlink: 'syz.0.2675': attribute type 10 has an invalid length.
[  194.288105][T14322] : (slave wlan1): Enslaving as an active interface with an up link
[  194.294799][T14322] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  194.300693][T14322] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  195.507268][T14371] netlink: 'syz.1.2691': attribute type 13 has an invalid length.
[  195.826419][T14432] netlink: 'syz.2.2712': attribute type 10 has an invalid length.
[  195.842744][T14432] team0: Port device dummy0 added
[  196.803422][T14474] syzkaller0: entered promiscuous mode
[  196.805878][T14474] syzkaller0: entered allmulticast mode
[  196.819365][T14473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.822869][T14473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.826982][T14473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.830561][T14473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.837655][T14473] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.854894][T14477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.870751][T14475] tipc: Resetting bearer <eth:syzkaller0>
[  196.899502][T14475] tipc: Disabling bearer <eth:syzkaller0>
[  196.979718][T14488] __nla_validate_parse: 39 callbacks suppressed
[  196.979732][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'.
[  197.100937][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2734'.
[  197.105007][T14492] macvlan3: entered allmulticast mode
[  197.107167][T14492] bridge0: entered allmulticast mode
[  197.110390][T14492] bridge0: port 1(macvlan3) entered blocking state
[  197.113074][T14492] bridge0: port 1(macvlan3) entered disabled state
[  197.119135][T14492] bridge0: left allmulticast mode
[  197.366368][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'.
[  197.371578][T14522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2743'.
[  197.382578][T14522] netlink: 'syz.2.2743': attribute type 19 has an invalid length.
[  197.551206][T14540] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2748'.
[  197.658996][T14544] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2750'.
[  197.708942][T14546] netlink: 'syz.2.2751': attribute type 24 has an invalid length.
[  198.145176][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2753'.
[  198.251833][T14556] lo speed is unknown, defaulting to 1000
[  198.375253][T14566] macsec0: entered promiscuous mode
[  198.377620][T14566] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  198.380544][T14566] macsec0: entered allmulticast mode
[  198.383028][T14566] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  198.806937][T14596] team0: Port device dummy0 removed
[  198.820598][T14596] netlink: 'syz.2.2769': attribute type 10 has an invalid length.
[  198.825209][T14596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  198.828395][T14596] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  198.847258][T14600] batadv_slave_0: entered promiscuous mode
[  198.892427][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'.
[  198.899129][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'.
[  198.981580][T14606] lo speed is unknown, defaulting to 1000
[  199.206591][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'.
[  199.211034][T14628] netlink: 'syz.1.2780': attribute type 18 has an invalid length.
[  199.214478][T14628] netlink: 'syz.1.2780': attribute type 18 has an invalid length.
[  199.560970][T14654] netlink: 'syz.1.2787': attribute type 1 has an invalid length.
[  200.478706][T14702] 0{X: entered promiscuous mode
[  200.490905][T14702] 1{X: renamed from 30{X
[  200.495141][T14702] 1{X: left promiscuous mode
[  200.496809][T14702] 1{X: entered allmulticast mode
[  200.499452][T14702] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  200.511850][T14702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.516865][T14702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.519834][T14702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.522450][T14702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.539858][T14704] lo speed is unknown, defaulting to 1000
[  200.548330][T14704] lo speed is unknown, defaulting to 1000
[  200.550970][T14704] lo speed is unknown, defaulting to 1000
[  200.642261][T14706] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.651348][T14706] 8021q: adding VLAN 0 to HW filter on device team0
[  200.658683][T14706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.673733][ T5298] lo speed is unknown, defaulting to 1000
[  200.676257][ T5298] syz1: Port: 1 Link ACTIVE
[  200.711630][T14712] vlan2: entered allmulticast mode
[  200.714144][T14712] veth1: entered allmulticast mode
[  200.736333][T14579] lo speed is unknown, defaulting to 1000
[  200.740296][T14579] syz0: Port: 1 Link ACTIVE
[  200.742467][T14704] infiniband syz0: set active
[  200.747559][T14704] infiniband syz0: added lo
[  200.784640][T14704] RDS/IB: syz0: added
[  200.787128][T14704] smc: adding ib device syz0 with port count 1
[  200.790843][T14704] smc:    ib device syz0 port 1 has pnetid 
[  200.796294][T14579] lo speed is unknown, defaulting to 1000
[  200.802928][T14704] lo speed is unknown, defaulting to 1000
[  200.959735][T14704] lo speed is unknown, defaulting to 1000
[  201.156632][T14704] lo speed is unknown, defaulting to 1000
[  201.606482][T14774] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  202.156684][T14785] netlink: 'syz.2.2836': attribute type 2 has an invalid length.
[  202.446492][T14799] netlink: 'syz.2.2840': attribute type 10 has an invalid length.
[  202.452519][T14799] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  202.457539][T14799] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  202.542559][T14802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.580734][T14802] syzkaller0: entered promiscuous mode
[  202.583665][T14802] syzkaller0: entered allmulticast mode
[  202.598824][T14802] tipc: Resetting bearer <eth:syzkaller0>
[  202.604311][T14801] tipc: Resetting bearer <eth:syzkaller0>
[  203.584946][ T1269] tipc: Node number set to 55046985
[  203.756093][T14801] tipc: Disabling bearer <eth:syzkaller0>
[  204.006873][T14817] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  204.038685][T14829] : (slave wlan1): Releasing backup interface
[  204.049272][T14829] netlink: 'syz.0.2852': attribute type 10 has an invalid length.
[  204.057007][T14829] : (slave wlan1): Enslaving as an active interface with an up link
[  204.062850][T14829] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  204.067542][T14829] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  204.084356][T14832] __nla_validate_parse: 16 callbacks suppressed
[  204.084368][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2853'.
[  204.515729][T14860] netlink: 'syz.1.2862': attribute type 10 has an invalid length.
[  204.526493][T14860] 8021q: adding VLAN 0 to HW filter on device team0
[  204.532683][T14860] bond0: (slave team0): Enslaving as an active interface with an up link
[  204.762506][T14869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2866'.
[  204.799529][T14870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2866'.
[  205.101913][T14897] 8021q: VLANs not supported on 
[  205.148188][   T33] audit: type=1804 audit(1753900533.142:4): pid=14904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2879" name="/newroot/896/cgroup.controllers" dev="tmpfs" ino=4581 res=1 errno=0
[  205.157991][   T33] audit: type=1800 audit(1753900533.142:5): pid=14904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2879" name="cgroup.controllers" dev="tmpfs" ino=4581 res=0 errno=0
[  205.199366][T14908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2881'.
[  205.248026][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2884'.
[  205.304782][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2886'.
[  205.362464][T14928] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2888'.
[  205.395077][T14930] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20000
[  205.510534][T14938] openvswitch: netlink: IPv4 tun info is not correct
[  205.718706][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'.
[  205.722658][T14958] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  205.728445][T14958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.749265][T14960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.752858][T14960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.759307][T14960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.764188][T14960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.767007][T14960] geneve3: entered promiscuous mode
[  205.942788][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'.
[  205.948499][T14974] lo speed is unknown, defaulting to 1000
[  205.986284][T14979] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  205.988238][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'.
[  206.255643][T15002] tipc: Enabled bearer <eth:gre0>, priority 10
[  206.352314][T15013] : (slave wlan1): Releasing backup interface
[  206.362675][T15013] netlink: 'syz.0.2925': attribute type 10 has an invalid length.
[  206.370925][T15013] : (slave wlan1): Enslaving as an active interface with an up link
[  206.377151][T15015] sctp: [Deprecated]: syz.2.2926 (pid 15015) Use of int in max_burst socket option.
[  206.377151][T15015] Use struct sctp_assoc_value instead
[  206.382668][T15013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  206.387361][T15013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  206.865193][T15045] ip6t_srh: unknown srh match flags  4000
[  206.871179][T15046] netlink: 'syz.2.2937': attribute type 58 has an invalid length.
[  206.877321][T15047] netlink: 'syz.2.2937': attribute type 58 has an invalid length.
[  207.170142][T15057] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  207.192260][T15057] vlan4: entered promiscuous mode
[  207.195239][T15057] team0: entered promiscuous mode
[  207.253918][ T5298] tipc: Node number set to 1010715731
[  207.778522][T15107] netlink: 'syz.2.2964': attribute type 2 has an invalid length.
[  207.927050][T15119] lo speed is unknown, defaulting to 1000
[  207.931122][T15122] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  207.942596][T15124] veth0: entered promiscuous mode
[  207.959789][T15121] veth0 (unregistering): left promiscuous mode
[  208.105227][T15134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  208.108078][T15134] IPv6: NLM_F_CREATE should be set when creating new route
[  208.110618][T15134] IPv6: NLM_F_CREATE should be set when creating new route
[  208.115665][T15134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  208.431892][T15171] bridge0: port 1(erspan0) entered blocking state
[  208.437693][T15171] bridge0: port 1(erspan0) entered disabled state
[  208.439853][T15171] erspan0: entered allmulticast mode
[  208.442801][T15171] erspan0: entered promiscuous mode
[  208.640336][T15203] syzkaller1: entered promiscuous mode
[  208.642285][T15203] syzkaller1: entered allmulticast mode
[  208.779407][T15223] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  208.801385][T15228] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.667905][T15264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.689253][T15264] syzkaller0: entered promiscuous mode
[  209.691334][T15264] syzkaller0: entered allmulticast mode
[  209.698836][T15263] tipc: Resetting bearer <eth:syzkaller0>
[  210.827628][T15263] tipc: Disabling bearer <eth:syzkaller0>
[  210.910605][T15282] __nla_validate_parse: 25 callbacks suppressed
[  210.910621][T15282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3024'.
[  210.988294][T15290] netlink: 'syz.2.3027': attribute type 6 has an invalid length.
[  210.995498][T15290] netlink: 'syz.2.3027': attribute type 6 has an invalid length.
[  211.719315][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3051'.
[  211.725992][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3051'.
[  211.729809][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'.
[  212.005878][T15369] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3056'.
[  212.511864][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3072'.
[  212.682982][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3081'.
[  212.782117][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3079'.
[  212.909299][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3089'.
[  212.917836][T15447] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3089'.
[  213.076314][T15456] netlink: 'syz.1.3093': attribute type 29 has an invalid length.
[  213.080615][T15456] netlink: 'syz.1.3093': attribute type 29 has an invalid length.
[  213.367667][T15469] erspan0: left allmulticast mode
[  213.369934][T15469] erspan0: left promiscuous mode
[  213.372218][T15469] bridge0: port 1(erspan0) entered disabled state
[  213.388738][T15469] bond0: (slave team0): Releasing backup interface
[  213.400259][ T5298] lo speed is unknown, defaulting to 1000
[  213.409686][T15469] netlink: 'syz.1.3099': attribute type 10 has an invalid length.
[  213.456201][T15469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  213.460315][T15469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  213.899006][T15493] netlink: 'syz.0.3106': attribute type 1 has an invalid length.
[  213.936255][T15493] bond25: (slave gretap2): making interface the new active one
[  213.940295][T15493] bond25: (slave gretap2): Enslaving as an active interface with an up link
[  214.095993][T15499] openvswitch: netlink: Flow actions attr not present in new flow.
[  214.186849][T15509] netlink: 'syz.0.3112': attribute type 1 has an invalid length.
[  214.444917][T15536] netlink: 'syz.2.3122': attribute type 13 has an invalid length.
[  214.448100][T15536] netlink: 'syz.2.3122': attribute type 13 has an invalid length.
[  214.493685][T15541] : (slave wlan1): Releasing backup interface
[  214.502098][T15541] bond25: (slave gretap2): Releasing active interface
[  214.521124][T15541] netlink: 'syz.0.3123': attribute type 10 has an invalid length.
[  214.528042][T15541] : (slave wlan1): Enslaving as an active interface with an up link
[  214.534200][T15541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  214.538190][T15541] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  214.652283][T15546] netlink: 'syz.2.3125': attribute type 1 has an invalid length.
[  214.769653][T15550] lo speed is unknown, defaulting to 1000
[  214.777037][T15550] lo speed is unknown, defaulting to 1000
[  215.255141][T15560] policy can only be matched on NF_INET_PRE_ROUTING
[  215.255157][T15560] unable to load match
[  215.384858][T15565] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  215.931872][T15611] gtp2: entered promiscuous mode
[  215.962313][T15611] netlink: 'syz.1.3142': attribute type 5 has an invalid length.
[  216.061830][T15624] __nla_validate_parse: 9 callbacks suppressed
[  216.061842][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3146'.
[  216.086717][T15624] team1: entered promiscuous mode
[  216.088806][T15624] team1: entered allmulticast mode
[  216.347566][T15643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.351060][T15643] syzkaller0: entered promiscuous mode
[  216.356815][T15643] syzkaller0: entered allmulticast mode
[  216.378816][T15648] tipc: Resetting bearer <eth:gre0>
[  216.492486][T15648] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  216.495248][T15648] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  216.499189][T15648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.502055][T15648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.506158][T15648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.509066][T15648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.527208][T14578] lo speed is unknown, defaulting to 1000
[  216.528136][T15651] tipc: Resetting bearer <eth:syzkaller0>
[  216.530260][T14578] syz0: Port: 1 Link DOWN
[  216.535733][T14578] lo speed is unknown, defaulting to 1000
[  216.542353][T15642] tipc: Resetting bearer <eth:syzkaller0>
[  216.553022][T15642] tipc: Disabling bearer <eth:syzkaller0>
[  216.639849][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3159'.
[  216.916536][T15699] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.122759][T15723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3177'.
[  217.176828][T15725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3178'.
[  217.179815][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  217.231306][T15735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3180'.
[  217.362517][T15752] 8021q: VLANs not supported on ip6_vti0
[  217.420019][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'.
[  217.571901][T15770] lo speed is unknown, defaulting to 1000
[  217.584409][T15771] lo speed is unknown, defaulting to 1000
[  217.590444][T15770] lo speed is unknown, defaulting to 1000
[  217.659313][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.890987][T15771] lo speed is unknown, defaulting to 1000
[  218.372648][T15806] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3209'.
[  218.408756][T15806] syzkaller1: entered promiscuous mode
[  218.411284][T15806] syzkaller1: entered allmulticast mode
[  218.419657][T15806] validate_nla: 4 callbacks suppressed
[  218.419671][T15806] netlink: 'syz.1.3209': attribute type 15 has an invalid length.
[  218.579293][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'.
[  218.589806][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'.
[  221.840514][T15842] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  221.930532][T15852] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  221.935108][T15854] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  222.119347][T15872] IPv6: NLM_F_CREATE should be specified when creating new route
[  222.131506][T15875] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  222.192497][T15882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.352841][T15895] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  222.836245][T15928] __nla_validate_parse: 21 callbacks suppressed
[  222.836265][T15928] netlink: 786 bytes leftover after parsing attributes in process `syz.0.3252'.
[  223.408689][T15972] netlink: 'syz.1.3265': attribute type 1 has an invalid length.
[  223.456416][T15972] gretap1: entered promiscuous mode
[  223.508742][T15977] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3267'.
[  223.566706][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'.
[  223.679974][T15989] netlink: 'syz.1.3270': attribute type 15 has an invalid length.
[  223.727664][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3272'.
[  223.732024][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'.
[  223.736547][T15993] openvswitch: netlink: Unknown nsh attribute 0
[  223.739524][T15993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.745752][T15995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3273'.
[  223.749608][T15995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3273'.
[  223.756392][T15995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3273'.
[  224.092565][T16010] netlink: 'syz.1.3280': attribute type 10 has an invalid length.
[  224.156383][T16018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  224.168183][T16018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  224.317710][T16028] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3283'.
[  224.642664][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'.
[  225.885078][T16108] netlink: 'syz.1.3310': attribute type 2 has an invalid length.
[  225.888805][T16108] netlink: 'syz.1.3310': attribute type 8 has an invalid length.
[  225.973075][T16118] 1{X: left allmulticast mode
[  226.069692][T16128] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  226.162502][T16134] 8021q: VLANs not supported on caif0
[  226.827941][T16188] netlink: 'syz.0.3339': attribute type 10 has an invalid length.
[  226.833053][T16188] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  226.836446][T16188] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  227.269647][T16217] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.296522][T16218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.332331][T16225] netlink: 'syz.1.3352': attribute type 1 has an invalid length.
[  227.370013][T16225] bond28: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  227.377262][T16226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.383882][T16225] tipc: Resetting bearer <eth:gre0>
[  227.401951][ T9839] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  227.410182][T16225] 8021q: adding VLAN 0 to HW filter on device bond28
[  227.523998][ T9839] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  227.782968][T16258] netlink: 'syz.2.3363': attribute type 1 has an invalid length.
[  228.214198][T16298] netlink: 'syz.2.3377': attribute type 2 has an invalid length.
[  228.364425][T16309] __nla_validate_parse: 14 callbacks suppressed
[  228.364440][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'.
[  228.469301][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3384'.
[  228.600865][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'.
[  228.752185][T16333] can: request_module (can-proto-4) failed.
[  228.841356][T16337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.848967][T16337] syzkaller0: entered promiscuous mode
[  228.850831][T16337] syzkaller0: entered allmulticast mode
[  228.894185][T16337] tipc: Resetting bearer <eth:syzkaller0>
[  228.906401][T16337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3389'.
[  228.916284][T16336] tipc: Resetting bearer <eth:syzkaller0>
[  228.932502][T16336] tipc: Disabling bearer <eth:syzkaller0>
[  229.038690][T16348] netlink: 'syz.0.3393': attribute type 10 has an invalid length.
[  229.044048][T16348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  229.047217][T16348] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  229.363416][T16368] netlink: 'syz.2.3398': attribute type 4 has an invalid length.
[  229.366503][T16368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3398'.
[  229.492329][T16379] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3402'.
[  229.596330][T16389] netlink: 'syz.1.3407': attribute type 9 has an invalid length.
[  229.600109][T16389] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.3407'.
[  229.616161][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3408'.
[  229.877636][T16406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3415'.
[  230.216661][T16431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3422'.
[  230.672539][T16446] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  230.677869][T16447] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  231.389267][T16452] block nbd0: server does not support multiple connections per device.
[  231.402173][T16452] block nbd0: shutting down sockets
[  231.759924][T16513] netlink: 'syz.0.3451': attribute type 1 has an invalid length.
[  231.815439][T16513] 8021q: adding VLAN 0 to HW filter on device bond28
[  231.819003][T16513] bond27: (slave bond28): making interface the new active one
[  231.821752][T16513] bond27: (slave bond28): Enslaving as an active interface with an up link
[  231.842482][T16513] bond27: (slave gretap3): Enslaving as a backup interface with an up link
[  231.851827][T16513] 8021q: adding VLAN 0 to HW filter on device bond27
[  231.893021][T16524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.985519][T16527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.988151][T16527] syzkaller0: entered promiscuous mode
[  231.990010][T16527] syzkaller0: entered allmulticast mode
[  232.009536][T16527] tipc: Resetting bearer <eth:syzkaller0>
[  232.014661][T16525] tipc: Resetting bearer <eth:syzkaller0>
[  232.029575][T16525] tipc: Disabling bearer <eth:syzkaller0>
[  232.122514][T16543] netlink: 'syz.0.3461': attribute type 21 has an invalid length.
[  232.172592][T16550] netlink: 'syz.0.3465': attribute type 4 has an invalid length.
[  232.398624][T16571] netlink: 'syz.0.3472': attribute type 10 has an invalid length.
[  232.401438][T16570] netlink: 'syz.0.3472': attribute type 10 has an invalid length.
[  232.433542][T16571] netlink: 'syz.0.3472': attribute type 12 has an invalid length.
[  232.460660][T16575] ipvlan2: entered promiscuous mode
[  232.466549][T16575] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  232.722322][T16602] macsec0: entered promiscuous mode
[  232.724728][T16602] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  232.727308][T16602] macsec0: entered allmulticast mode
[  232.729027][T16602] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  232.881593][T16614] ksmbd: Unknown IPC event: 3, ignore.
[  233.325502][T16639] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  233.435528][T16652] netlink: 'syz.2.3496': attribute type 10 has an invalid length.
[  233.457048][T16652] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  233.460909][T16652] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  233.481162][T16646] lo speed is unknown, defaulting to 1000
[  233.487908][T16646] lo speed is unknown, defaulting to 1000
[  234.197778][T16694] __nla_validate_parse: 12 callbacks suppressed
[  234.197789][T16694] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3509'.
[  234.477927][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'.
[  234.758938][T16721] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3518'.
[  235.124061][T16741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3525'.
[  235.225269][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'.
[  235.228715][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'.
[  235.355493][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.357640][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.359433][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.361982][T16755] dvmrp1: linktype set to 805
[  235.364741][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.367111][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.369176][T16755] dvmrp1: linktype set to 805
[  235.371289][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.377437][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.380593][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.383387][T16755] dvmrp1: linktype set to 805
[  235.385782][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.387678][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.389520][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.392025][T16755] dvmrp1: linktype set to 805
[  235.396372][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.398207][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.400023][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.402587][T16755] dvmrp1: linktype set to 805
[  235.405519][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.407604][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.410427][T16755] dvmrp1: linktype set to 805
[  235.412999][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.415207][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.417181][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.419081][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.421730][T16755] dvmrp1: linktype set to 805
[  235.424535][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.426611][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.429985][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.443374][T16755] dvmrp1: linktype set to 805
[  235.445226][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.447271][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.449705][T16755] dvmrp1: linktype set to 805
[  235.451884][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.454551][T16755] dvmrp1: linktype set to 805
[  235.456292][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.458233][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.460255][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.462301][T16755] dvmrp1: linktype set to 805
[  235.464270][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.466277][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.468291][T16755] dvmrp1: linktype set to 805
[  235.470112][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.474225][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.476049][T16755] dvmrp1: linktype set to 805
[  235.477824][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.479646][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.481535][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.483872][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.486695][T16755] dvmrp1: linktype set to 805
[  235.489240][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.491380][T16755] dvmrp1: linktype set to 805
[  235.493118][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.495588][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.497585][T16755] dvmrp1: linktype set to 805
[  235.503562][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.506070][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.507987][T16755] dvmrp1: linktype set to 805
[  235.510564][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.523496][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.525421][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.527643][T16755] dvmrp1: linktype set to 805
[  235.529402][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.531568][T16755] dvmrp1: linktype set to 805
[  235.533728][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.535600][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.537465][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.539420][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.541286][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.543062][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.547570][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.549457][T16755] dvmrp1: linktype set to 805
[  235.551153][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.553073][T16755] dvmrp1: linktype set to 805
[  235.555239][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.557082][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.563548][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.565825][T16755] dvmrp1: linktype set to 805
[  235.567595][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.569461][T16755] dvmrp1: linktype set to 805
[  235.571387][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.573997][T16755] dvmrp1: linktype set to 805
[  235.583414][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.585769][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.588244][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.590122][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.591947][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.594406][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.596489][T16755] dvmrp1: linktype set to 805
[  235.598284][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.600207][T16755] dvmrp1: linktype set to 805
[  235.601947][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.604140][T16755] dvmrp1: linktype set to 805
[  235.605860][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.607773][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.609770][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.611955][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.614578][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.616455][T16755] dvmrp1: linktype set to 805
[  235.618291][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.620175][T16755] dvmrp1: linktype set to 805
[  235.621897][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.623952][T16755] dvmrp1: linktype set to 805
[  235.625643][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.627510][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.629514][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.631375][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.633511][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.635413][T16755] dvmrp1: linktype set to 805
[  235.637146][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.638997][T16755] dvmrp1: linktype set to 805
[  235.640968][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.642858][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.644849][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.646721][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.648623][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.650404][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.652460][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.655591][T16755] dvmrp1: linktype set to 805
[  235.657672][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.659530][T16755] dvmrp1: linktype set to 805
[  235.661284][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.673598][T16755] dvmrp1: linktype set to 805
[  235.675301][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.677273][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.679575][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.681925][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.689763][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.691642][T16755] dvmrp1: linktype set to 805
[  235.693700][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.695528][T16755] dvmrp1: linktype set to 805
[  235.697147][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.698983][T16755] dvmrp1: linktype set to 805
[  235.700666][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.702475][T16755] dvmrp1: linktype set to 805
[  235.704652][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.706467][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.708289][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.710165][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.712016][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.714237][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.716084][T16755] dvmrp1: linktype set to 805
[  235.717844][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.719699][T16755] dvmrp1: linktype set to 805
[  235.721431][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.723686][T16755] dvmrp1: linktype set to 805
[  235.725497][T16754] dvmrp1: tun_chr_ioctl cmd 1074025673
[  235.727973][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.730364][T16755] dvmrp1: linktype set to 805
[  235.732111][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.734203][T16755] dvmrp1: linktype set to 805
[  235.735952][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.737842][T16755] dvmrp1: linktype set to 805
[  235.739546][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.741407][T16755] dvmrp1: linktype set to 805
[  235.743036][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.745105][T16755] dvmrp1: linktype set to 805
[  235.746763][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.748641][T16755] dvmrp1: linktype set to 805
[  235.750252][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.752112][T16755] dvmrp1: linktype set to 805
[  235.754232][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.756023][T16755] dvmrp1: linktype set to 805
[  235.757931][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.759756][T16755] dvmrp1: linktype set to 805
[  235.761447][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.763489][T16755] dvmrp1: linktype set to 805
[  235.765146][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.766952][T16755] dvmrp1: linktype set to 805
[  235.769712][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.771984][T16755] dvmrp1: linktype set to 805
[  235.773905][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.776167][T16755] dvmrp1: linktype set to 805
[  235.778147][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.780401][T16755] dvmrp1: linktype set to 805
[  235.782542][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.785277][T16755] dvmrp1: linktype set to 805
[  235.787330][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.789284][T16755] dvmrp1: linktype set to 805
[  235.791342][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.794195][T16755] dvmrp1: linktype set to 805
[  235.796161][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.798198][T16755] dvmrp1: linktype set to 805
[  235.800066][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.802217][T16755] dvmrp1: linktype set to 805
[  235.804711][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.806775][T16755] dvmrp1: linktype set to 805
[  235.808826][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.811024][T16755] dvmrp1: linktype set to 805
[  235.812897][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.815200][T16755] dvmrp1: linktype set to 805
[  235.817135][T16755] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.819182][T16755] dvmrp1: linktype set to 805
[  235.963716][T16768] macsec1: entered promiscuous mode
[  235.966003][T16768] macsec1: entered allmulticast mode
[  235.968119][T16768] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  236.230221][T16777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.233738][T16777] syzkaller0: entered promiscuous mode
[  236.235697][T16777] syzkaller0: entered allmulticast mode
[  236.252410][T16777] tipc: Resetting bearer <eth:syzkaller0>
[  236.255925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.259242][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.391232][T16783] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3540'.
[  236.394564][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.394597][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.403909][T16783] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3540'.
[  236.408939][T16783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3540'.
[  236.513006][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'.
[  236.600489][T16793] openvswitch: netlink: IP tunnel TTL not specified.
[  236.664138][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.809684][T16811] syzkaller1: entered promiscuous mode
[  236.811703][T16811] syzkaller1: entered allmulticast mode
[  237.055447][T16776] tipc: Resetting bearer <eth:syzkaller0>
[  237.067815][T16776] tipc: Disabling bearer <eth:syzkaller0>
[  237.106254][T16821] macvlan0: entered allmulticast mode
[  237.108269][T16821] veth1_vlan: entered allmulticast mode
[  237.677762][T16847] smc: removing ib device syz0
[  238.480400][T16869] netlink: 'syz.2.3568': attribute type 1 has an invalid length.
[  238.546700][T16872] netlink: 'syz.1.3570': attribute type 2 has an invalid length.
[  238.559871][T16873] geneve3: entered promiscuous mode
[  238.630379][T16879] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.636062][T16878] team_slave_1: mtu less than device minimum
[  238.779346][T16893] lo: entered allmulticast mode
[  238.792005][T16892] lo: left allmulticast mode
[  238.961394][T16913] 8021q: VLANs not supported on vcan0
[  239.170785][T16946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.207931][T16948] tipc: Disabling bearer <eth:syzkaller0>
[  239.239118][T16947] lo speed is unknown, defaulting to 1000
[  239.318145][T16962] __nla_validate_parse: 16 callbacks suppressed
[  239.318159][T16962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3603'.
[  239.354037][T16967] syz_tun: entered allmulticast mode
[  239.361779][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'.
[  239.419916][T16969] syz_tun: left allmulticast mode
[  239.444913][T16973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3605'.
[  239.449024][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3605'.
[  240.209943][T16989] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3612'.
[  240.240439][T16991] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3611'.
[  240.255983][T16991] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3611'.
[  240.259864][T16991] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3611'.
[  240.266024][T16991] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3611'.
[  240.279255][T16991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'.
[  240.338221][T17000] netlink: 'syz.0.3615': attribute type 1 has an invalid length.
[  240.434454][T17009] dvmrp0: entered allmulticast mode
[  242.355412][T17089] netlink: 'syz.2.3644': attribute type 10 has an invalid length.
[  242.385123][T17093] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  242.576602][T17116] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  242.617711][T17122] netlink: 'syz.2.3655': attribute type 2 has an invalid length.
[  242.636198][T17124] netlink: 'syz.1.3656': attribute type 1 has an invalid length.
[  242.699323][T17128] netlink: 'syz.2.3657': attribute type 13 has an invalid length.
[  242.850431][T17134] bridge: RTM_NEWNEIGH with invalid state 0x1
[  243.569436][T17168] netlink: 'syz.1.3672': attribute type 12 has an invalid length.
[  243.625022][T17173] netlink: 'syz.0.3674': attribute type 3 has an invalid length.
[  243.639628][T17173] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.922063][T17189] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  244.073638][T17206] nft_compat: unsupported protocol 0
[  244.109723][T17215] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  244.186539][T17219] netlink: 'syz.2.3691': attribute type 8 has an invalid length.
[  244.369906][T17247] __nla_validate_parse: 26 callbacks suppressed
[  244.369921][T17247] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3699'.
[  244.723109][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  244.736987][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  244.754908][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  244.758782][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  244.841777][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3713'.
[  244.860265][T17293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  244.949578][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'.
[  245.055363][T17312] netlink: 'syz.1.3720': attribute type 13 has an invalid length.
[  245.062003][T17312] netlink: 'syz.1.3720': attribute type 17 has an invalid length.
[  245.148401][T17312] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.152038][T17312] 8021q: adding VLAN 0 to HW filter on device team0
[  245.158687][T17312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.170579][T17316] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3721'.
[  245.173533][T17312] syz.1.3720 (17312) used greatest stack depth: 19168 bytes left
[  245.186868][T17313] lo speed is unknown, defaulting to 1000
[  245.802517][T17341] netlink: 'syz.2.3730': attribute type 10 has an invalid length.
[  245.808086][T17341] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3730'.
[  245.818732][T17341] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3730'.
[  246.027239][T17345] pimreg: entered allmulticast mode
[  246.040582][T17345] pimreg: left allmulticast mode
[  246.395142][T17375] team0: Port device sit1 added
[  246.492436][T17390] netlink: 'syz.1.3745': attribute type 1 has an invalid length.
[  246.521032][T17390] netlink: 'syz.1.3745': attribute type 1 has an invalid length.
[  246.548666][ T5298] hid-generic 0005:16C0:5507.0004: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa
[  246.556511][T17395] netlink: 'syz.2.3747': attribute type 2 has an invalid length.
[  246.579256][T17390] erspan0: entered allmulticast mode
[  246.674362][T17407] netlink: 'syz.1.3752': attribute type 14 has an invalid length.
[  246.853736][T17421] 8021q: adding VLAN 0 to HW filter on device bond29
[  247.343865][T17460] vlan4: entered promiscuous mode
[  247.345880][T17460] bond0: entered promiscuous mode
[  247.487991][T17473] lo speed is unknown, defaulting to 1000
[  247.937275][T17495] bond33: (slave vxcan5): The slave device specified does not support setting the MAC address
[  247.942054][T17495] bond33: (slave vxcan5): Error -95 calling set_mac_address
[  248.004922][T17499] macvlan3: entered promiscuous mode
[  248.010176][T17499] macvlan3: entered allmulticast mode
[  248.012707][T17499] bond33: entered promiscuous mode
[  248.019886][T17499] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  248.026779][T17499] bond33: left promiscuous mode
[  248.542612][T17550] pim6reg1: entered promiscuous mode
[  248.544849][T17550] pim6reg1: entered allmulticast mode
[  249.011330][T17556] validate_nla: 3 callbacks suppressed
[  249.011341][T17556] netlink: 'syz.1.3796': attribute type 1 has an invalid length.
[  249.155750][T17564] netlink: 'syz.1.3799': attribute type 4 has an invalid length.
[  249.165130][T14578] lo speed is unknown, defaulting to 1000
[  249.167660][T14578] syz1: Port: 1 Link DOWN
[  249.379720][T17584] __nla_validate_parse: 13 callbacks suppressed
[  249.379738][T17584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3805'.
[  249.393121][T17584] netlink: 'syz.1.3805': attribute type 1 has an invalid length.
[  249.428664][T17584] macvlan4: entered promiscuous mode
[  249.430777][T17584] macvlan4: entered allmulticast mode
[  249.433645][T17584] bond30: entered promiscuous mode
[  249.435777][T17584] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  249.442019][T17584] bond30: left promiscuous mode
[  249.526880][T17590] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  249.678116][T17604] netlink: 'syz.0.3813': attribute type 1 has an invalid length.
[  249.738166][T17607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.741683][T17607] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  249.747566][T17607] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  249.754247][T17607] tipc: Resetting bearer <eth:syzkaller0>
[  249.788295][T17614] openvswitch: netlink: Multiple metadata blocks provided
[  250.005996][T17629] tipc: New replicast peer: 255.255.255.255
[  250.010718][T17629] tipc: Enabled bearer <udp:syz2>, priority 10
[  250.549243][T17656] netlink: 'syz.0.3830': attribute type 1 has an invalid length.
[  250.565701][T17656] bond34: entered promiscuous mode
[  250.567803][T17656] 8021q: adding VLAN 0 to HW filter on device bond34
[  250.579008][T17656] 8021q: adding VLAN 0 to HW filter on device bond34
[  250.581761][T17656] bond34: (slave wireguard0): The slave device specified does not support setting the MAC address
[  250.586613][T17656] bond34: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  250.595443][T17656] bond34: (slave wireguard0): making interface the new active one
[  250.598856][T17656] wireguard0: entered promiscuous mode
[  250.602497][T17656] bond34: (slave wireguard0): Enslaving as an active interface with an up link
[  250.648412][T17649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.727577][T17665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3831'.
[  250.768618][T17670] syzkaller0: entered promiscuous mode
[  250.771232][T17670] syzkaller0: entered allmulticast mode
[  250.858556][T17680] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3838'.
[  250.874759][T17680] netlink: 'syz.2.3838': attribute type 1 has an invalid length.
[  250.877526][T17680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3838'.
[  250.938797][T17686] 8021q: VLANs not supported on sit0
[  251.229540][T17694] Bluetooth: hci0: Opcode 0x080f failed: -22
[  251.450729][T17716] netlink: 'syz.2.3849': attribute type 1 has an invalid length.
[  251.506490][T17722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3852'.
[  251.526184][T17722] netlink: 'syz.1.3852': attribute type 2 has an invalid length.
[  251.542925][T17721] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3851'.
[  251.547034][T17722] : entered promiscuous mode
[  251.601534][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3854'.
[  251.619035][T17727] netlink: 'syz.2.3854': attribute type 1 has an invalid length.
[  251.625748][T17729] netlink: 'syz.2.3854': attribute type 1 has an invalid length.
[  251.629097][T17727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3854'.
[  251.643760][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3854'.
[  251.660301][T17732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3856'.
[  251.981704][T17763] 8021q: adding VLAN 0 to HW filter on device 
[  251.988094][T17763] team0: Port device  added
[  251.995459][T17762] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  252.021078][T17765] lo speed is unknown, defaulting to 1000
[  253.293475][   T54] Bluetooth: hci0: command tx timeout
[  253.380537][T17820] tipc: New replicast peer: 255.255.255.255
[  253.384976][T17820] tipc: Enabled bearer <udp:syz2>, priority 10
[  253.390439][T17820] tipc: Disabling bearer <udp:syz2>
[  253.522416][T17827] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  253.692222][T17831] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002
[  253.776012][T17841] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  253.787341][T17841] bond0: (slave lo): making interface the new active one
[  253.791216][T17841] bond0: (slave lo): Enslaving as an active interface with an up link
[  253.796110][T17842] team0: Cannot enslave team device to itself
[  254.655197][T17885] sctp: [Deprecated]: syz.0.3909 (pid 17885) Use of int in max_burst socket option.
[  254.655197][T17885] Use struct sctp_assoc_value instead
[  254.831924][T17887] __nla_validate_parse: 12 callbacks suppressed
[  254.831936][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3910'.
[  254.850039][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'.
[  255.019869][T17902] validate_nla: 4 callbacks suppressed
[  255.019889][T17902] netlink: 'syz.1.3917': attribute type 29 has an invalid length.
[  255.030309][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'.
[  255.548555][T17931] veth1_to_team: entered allmulticast mode
[  255.551253][T17931] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  255.625531][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3929'.
[  255.840042][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3934'.
[  255.844484][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3934'.
[  255.885039][T17952] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3935'.
[  256.075855][T17963] netlink: 'syz.0.3940': attribute type 1 has an invalid length.
[  256.078872][T17963] netlink: 'syz.0.3940': attribute type 3 has an invalid length.
[  256.081725][T17963] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3940'.
[  256.171318][T17980] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3945'.
[  256.212837][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'.
[  256.339002][T17994] bridge0: entered allmulticast mode
[  256.351742][T17994] pim6reg: entered allmulticast mode
[  256.432929][T18005] netlink: 'syz.0.3954': attribute type 18 has an invalid length.
[  256.979383][T18066] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:0
[  256.989466][T18066] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  257.521401][T18080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.622737][T18090] netlink: 'syz.1.3978': attribute type 10 has an invalid length.
[  257.626158][T18091] netlink: 'syz.1.3978': attribute type 10 has an invalid length.
[  257.697156][T18099] sctp: [Deprecated]: syz.0.3981 (pid 18099) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.697156][T18099] Use struct sctp_sack_info instead
[  257.857260][T18109] IPVS: Error connecting to the multicast addr
[  258.011008][T18120] nbd: must specify at least one socket
[  258.184191][T18144] netlink: 'syz.2.3996': attribute type 4 has an invalid length.
[  258.238924][T18152] netlink: 'syz.0.4000': attribute type 7 has an invalid length.
[  258.242366][T18152] netlink: 'syz.0.4000': attribute type 8 has an invalid length.
[  258.759428][   T54] Bluetooth: hci2: link tx timeout
[  258.762781][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  258.767904][ T5827] Bluetooth: hci2: link tx timeout
[  258.769833][ T5827] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  259.280179][T18190] 1{X: entered promiscuous mode
[  259.285527][T18190] 0{X: renamed from 31{X
[  259.290641][T18190] 0{X: left promiscuous mode
[  259.292826][T18190] 0{X: entered allmulticast mode
[  259.297267][T18190] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  259.742922][T18210] openvswitch: netlink: IPv4 tun info is not correct
[  260.005409][T18229] __nla_validate_parse: 24 callbacks suppressed
[  260.005422][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4025'.
[  260.146866][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4029'.
[  260.190476][T18242] netlink: 'syz.0.4030': attribute type 2 has an invalid length.
[  260.378925][T18253] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  260.402628][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'.
[  260.459752][T18257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4037'.
[  260.814094][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  260.920943][T18274] netlink: 'syz.1.4040': attribute type 1 has an invalid length.
[  260.927833][T18274] netlink: 'syz.1.4040': attribute type 2 has an invalid length.
[  261.465782][T18280] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  261.482800][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'.
[  261.501411][T18278] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  261.511649][T18282] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  261.709898][T18302] netlink: 'syz.2.4050': attribute type 1 has an invalid length.
[  261.712847][T18302] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4050'.
[  261.736182][T18302] @: renamed from bond_slave_0
[  261.811857][T18309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4053'.
[  261.816302][T18309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4053'.
[  261.855557][T18312] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  261.862698][T18314] netlink: 'syz.1.4054': attribute type 1 has an invalid length.
[  261.920933][T18320] syzkaller1: entered promiscuous mode
[  261.928112][T18320] syzkaller1: entered allmulticast mode
[  262.009964][T18324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4059'.
[  262.264981][T18328] netlink: 'syz.2.4060': attribute type 1 has an invalid length.
[  262.267531][T18328] netlink: 'syz.2.4060': attribute type 1 has an invalid length.
[  262.271654][T18329] netlink: 'syz.2.4060': attribute type 1 has an invalid length.
[  262.274882][T18329] netlink: 'syz.2.4060': attribute type 1 has an invalid length.
[  262.350002][T18334] lo speed is unknown, defaulting to 1000
[  262.566540][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'.
[  263.801087][T18399] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  263.841633][T18408] lo speed is unknown, defaulting to 1000
[  264.010776][T18416] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  264.041670][T18419] netlink: 'syz.2.4089': attribute type 3 has an invalid length.
[  264.623666][T18454] 8021q: VLANs not supported on tunl0
[  264.676565][T18454] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  264.731484][T18472] lo speed is unknown, defaulting to 1000
[  265.064788][T18502] __nla_validate_parse: 45 callbacks suppressed
[  265.064803][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4119'.
[  265.071698][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'.
[  265.075935][T18505] team0: Master is either lo or non-ether device
[  265.338325][T18522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'.
[  265.342097][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4125'.
[  265.476164][T18527] validate_nla: 4 callbacks suppressed
[  265.476183][T18527] netlink: 'syz.1.4127': attribute type 2 has an invalid length.
[  265.902491][T18544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4133'.
[  265.911210][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'.
[  265.916692][T18544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  265.919933][T18544] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  265.978698][T18548] 8021q: VLANs not supported on ipvlan1
[  265.982852][T18549] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4135'.
[  265.997054][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4135'.
[  266.082500][T18561] netlink: 'syz.2.4139': attribute type 2 has an invalid length.
[  266.183894][T18570] netlink: 'syz.2.4143': attribute type 2 has an invalid length.
[  266.289651][T18582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4147'.
[  266.319908][T18586] openvswitch: netlink: Unknown key attributes 2
[  266.326935][T18586] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4148'.
[  266.449768][T18595] netlink: 'syz.2.4150': attribute type 7 has an invalid length.
[  267.021509][T18653] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  267.227167][T18677] tun0: tun_chr_ioctl cmd 2147767520
[  267.366308][T18693] x_tables: duplicate underflow at hook 3
[  267.410712][T18696] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  267.459807][T18696] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  267.559172][T18707] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  267.583897][T18707] 8021q: adding VLAN 0 to HW filter on device bond35
[  267.602487][T18706] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  267.669307][T18712] bridge0: failed insert local address into bridge forwarding table
[  267.695996][T18712] bridge0 (unregistering): left allmulticast mode
[  267.925685][T18721] xt_CT: No such helper "snmp"
[  268.109474][T18730] batadv_slave_1: entered promiscuous mode
[  268.291558][T18745] siw: device registration error -23
[  268.379592][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.384753][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.388309][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.391247][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.394362][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.397983][T18753] netlink: 'syz.0.4208': attribute type 142 has an invalid length.
[  268.448344][T18759] lo speed is unknown, defaulting to 1000
[  269.936650][T18823] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.940721][T18823] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.988674][T18823] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.992337][T18823] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.058247][T18823] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.061682][T18823] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.098887][T18823] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.102769][T18823] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.144867][T18830] __nla_validate_parse: 26 callbacks suppressed
[  270.144884][T18830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4234'.
[  270.182670][T18833] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  270.210927][T18823] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  270.214633][T18823] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.229249][T18832] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  270.239507][T18823] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  270.242680][T18823] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.250522][T18823] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  270.254931][T18823] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.263506][T18823] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  270.266341][T18823] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.306123][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4236'.
[  270.356774][T18841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4239'.
[  270.395156][T18844] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4241'.
[  270.531736][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4244'.
[  270.556885][T18854] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  270.827622][T18872] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  271.523747][T18885] validate_nla: 33 callbacks suppressed
[  271.523763][T18885] netlink: 'syz.0.4254': attribute type 1 has an invalid length.
[  271.563875][T18885] 8021q: adding VLAN 0 to HW filter on device bond36
[  271.575481][T18885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'.
[  271.632406][T18890] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  271.737450][T18900] netlink: 'syz.0.4257': attribute type 13 has an invalid length.
[  271.740818][T18900] netlink: 'syz.0.4257': attribute type 17 has an invalid length.
[  271.763874][T18900] 8021q: adding VLAN 0 to HW filter on device team0
[  271.767430][T18900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.493382][T18908] sch_tbf: burst 2 is lower than device lo mtu (1514) !
[  272.502620][T18908] sch_tbf: burst 2 is lower than device lo mtu (1514) !
[  272.505993][T18908] sch_tbf: burst 2 is lower than device lo mtu (1514) !
[  272.568997][T18916] netlink: 'syz.1.4265': attribute type 1 has an invalid length.
[  272.600158][T18919] Cannot find set identified by id 1 to match
[  272.605872][T18922] netlink: 'syz.0.4267': attribute type 2 has an invalid length.
[  272.622136][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4266'.
[  272.757038][T18916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4265'.
[  272.790221][T18932] netlink: 'syz.0.4271': attribute type 64 has an invalid length.
[  272.868067][   T33] audit: type=1107 audit(1753900600.862:6): pid=18933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  272.875754][T18934] netlink: 'syz.0.4272': attribute type 1 has an invalid length.
[  272.970355][T18943] lo speed is unknown, defaulting to 1000
[  272.981288][T18945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4276'.
[  273.401286][T18962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4282'.
[  273.946716][T19002] netlink: 'syz.2.4294': attribute type 1 has an invalid length.
[  274.437172][T19041] netlink: 'syz.0.4303': attribute type 2 has an invalid length.
[  274.523318][T19046] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  274.698309][T19057] lo speed is unknown, defaulting to 1000
[  274.770588][T19060] tipc: Can't bind to reserved service type 0
[  274.858677][T19067] netlink: 'syz.1.4312': attribute type 4 has an invalid length.
[  274.870998][ T5298] lo speed is unknown, defaulting to 1000
[  274.872914][ T5298] syz1: Port: 1 Link ACTIVE
[  274.951557][T19073] ipt_ECN: cannot use operation on non-tcp rule
[  275.472440][T19121] __nla_validate_parse: 21 callbacks suppressed
[  275.472453][T19121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4329'.
[  275.474670][T19122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4329'.
[  275.609130][T19135] bond0: Device is already in use.
[  275.764049][T19143] dvmrp8: left allmulticast mode
[  275.772425][T19142] sctp: [Deprecated]: syz.0.4336 (pid 19142) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.772425][T19142] Use struct sctp_sack_info instead
[  275.878494][T19152] IPv6: sit1: Disabled Multicast RS
[  275.902443][T19155] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4341'.
[  275.930657][T19157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.026285][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4344'.
[  276.127243][T19172] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  276.888739][T19224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4359'.
[  276.915696][T19230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'.
[  277.021105][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4366'.
[  277.025036][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4366'.
[  277.028720][T19245] validate_nla: 3 callbacks suppressed
[  277.028732][T19245] netlink: 'syz.1.4366': attribute type 11 has an invalid length.
[  277.034898][T19245] netlink: 'syz.1.4366': attribute type 6 has an invalid length.
[  277.118970][T19251] batadv_slave_1: entered promiscuous mode
[  277.125588][T19251] bond0: entered promiscuous mode
[  277.127177][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4370'.
[  277.127372][T19251] bond0: entered allmulticast mode
[  277.140436][T19250] batadv_slave_1: left promiscuous mode
[  277.242395][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4373'.
[  277.391593][T19293] netlink: 'syz.2.4380': attribute type 1 has an invalid length.
[  277.406776][T19293] 8021q: adding VLAN 0 to HW filter on device bond35
[  277.419100][T19293] bond35: (slave geneve4): making interface the new active one
[  277.427025][T19293] bond35: (slave geneve4): Enslaving as an active interface with an up link
[  277.469293][T19298] atomic_op ffff88811133b998 conn xmit_atomic 0000000000000000
[  277.502821][T19300] netlink: 'syz.2.4382': attribute type 9 has an invalid length.
[  277.512798][T19300] macvlan6: entered promiscuous mode
[  277.516374][T19300] hsr0: entered promiscuous mode
[  277.518169][T19300] macvlan6: entered allmulticast mode
[  277.520018][T19300] hsr0: entered allmulticast mode
[  277.521799][T19300] hsr_slave_0: entered allmulticast mode
[  277.525401][T19300] hsr_slave_1: entered allmulticast mode
[  277.985862][T19346] netlink: 'syz.2.4397': attribute type 74 has an invalid length.
[  278.184225][T19361] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  278.212568][T19360] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  278.317986][T19371] netlink: 'syz.0.4406': attribute type 1 has an invalid length.
[  278.320918][T19371] netlink: 'syz.0.4406': attribute type 1 has an invalid length.
[  278.326093][T19369] netlink: 'syz.1.4407': attribute type 4 has an invalid length.
[  278.382979][T19378] netlink: 'syz.2.4409': attribute type 5 has an invalid length.
[  278.485488][T19395] netlink: 'syz.2.4414': attribute type 1 has an invalid length.
[  278.845408][T19427] smc: net device bond0 applied user defined pnetid SYZ2
[  279.411490][T19454] bond36: (slave bridge8): Enslaving as an active interface with an up link
[  279.441530][T19454] macvlan7: entered promiscuous mode
[  279.444933][T19454] macvlan7: entered allmulticast mode
[  279.447924][T19454] bond36: entered promiscuous mode
[  279.450257][T19454] bridge8: entered promiscuous mode
[  279.454139][T19454] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  279.459252][T19454] bond36: left promiscuous mode
[  279.461511][T19454] bridge8: left promiscuous mode
[  280.040029][T19511] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.045219][T19511] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.049205][T19511] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.052795][T19511] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.146434][T19519] 0{X: left allmulticast mode
[  280.151159][T19519] 0{X: refused to change device tx_queue_len
[  280.155087][T19519] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  280.475379][T19543] __nla_validate_parse: 33 callbacks suppressed
[  280.475393][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'.
[  280.482114][T19543] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4467'.
[  280.494459][T19543] vlan3: entered allmulticast mode
[  280.496807][T19543] veth1: entered allmulticast mode
[  280.765766][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'.
[  281.083089][T19577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4480'.
[  281.087928][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'.
[  281.210224][T19583] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  281.328525][T19593] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4485'.
[  281.332141][T19586] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4485'.
[  281.417947][T19600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4489'.
[  281.537231][T19612] delete_channel: no stack
[  281.579745][T19622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4498'.
[  281.591326][T19621] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4497'.
[  281.811241][T19650] sctp: [Deprecated]: syz.1.4509 (pid 19650) Use of int in max_burst socket option.
[  281.811241][T19650] Use struct sctp_assoc_value instead
[  281.837217][T19650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.845754][T19650] macvlan0: entered allmulticast mode
[  281.847810][T19650] veth1_vlan: entered allmulticast mode
[  281.865734][T19650] tipc: Resetting bearer <eth:syzkaller0>
[  281.882081][T19649] tipc: Disabling bearer <eth:syzkaller0>
[  282.264186][T19689] validate_nla: 11 callbacks suppressed
[  282.264205][T19689] netlink: 'syz.2.4521': attribute type 1 has an invalid length.
[  282.436564][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.439431][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.442122][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.452427][T19719] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  282.460085][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.469993][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.472809][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.477183][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.482029][T19716] netlink: 'syz.1.4530': attribute type 1 has an invalid length.
[  282.487750][T19716] netlink: 'syz.1.4530': attribute type 2 has an invalid length.
[  282.491300][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.501434][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.504779][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.511590][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.521746][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.531910][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.537566][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.551620][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.556094][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.559242][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.566199][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.569326][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.572471][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.576326][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.579921][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.583824][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.590063][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.593106][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.596187][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.599290][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.602377][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.605782][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.608975][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.612109][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.615297][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.618514][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.621608][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.624768][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.627925][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.630978][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.634174][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.637219][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.640321][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.644120][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.647248][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.650446][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.653850][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.657123][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.660137][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.663196][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.666297][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.669193][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.672238][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.675387][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.678534][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.681597][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.684721][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.687849][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.690980][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.694531][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.697593][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.700728][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.703842][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.706899][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.708245][   T33] audit: type=1800 audit(1753900610.702:7): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4539" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7546 res=0 errno=0
[  282.709912][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.720696][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.723907][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.727160][T19720] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5
[  282.730490][   T33] audit: type=1800 audit(1753900610.722:8): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4539" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7546 res=0 errno=0
[  282.792642][T19750] lo speed is unknown, defaulting to 1000
[  283.143577][T19788] netlink: 'syz.1.4553': attribute type 10 has an invalid length.
[  283.146436][T19788] team0: Device veth0_vlan is of different type
[  283.595235][T19820] netlink: 'syz.0.4563': attribute type 4 has an invalid length.
[  283.612162][T19820] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  283.634458][T19819] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  283.859182][T19837] pimreg: entered allmulticast mode
[  283.863352][T19837] pimreg: left allmulticast mode
[  284.060649][T19858] netlink: 'syz.1.4578': attribute type 5 has an invalid length.
[  284.068525][T19859] netlink: 'syz.1.4578': attribute type 5 has an invalid length.
[  284.076805][T19858] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  284.242092][T19874] netlink: 'syz.0.4583': attribute type 5 has an invalid length.
[  284.570550][T19889] netlink: 'syz.1.4589': attribute type 1 has an invalid length.
[  284.681747][T19900] netlink: 'syz.1.4592': attribute type 6 has an invalid length.
[  285.068683][T19934] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  285.504922][T19946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  285.736764][T19964] macvlan0: left promiscuous mode
[  285.845117][T19968] __nla_validate_parse: 30 callbacks suppressed
[  285.845132][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'.
[  286.158970][T19979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4618'.
[  286.248587][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'.
[  286.431425][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'.
[  286.435504][   T33] audit: type=1800 audit(1753900614.432:9): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4619" name="cgroup.controllers" dev="tmpfs" ino=7790 res=0 errno=0
[  286.581082][T19996] tipc: Resetting bearer <eth:gre0>
[  286.660794][T19996] veth1_vlan: left allmulticast mode
[  286.746670][T14578] lo speed is unknown, defaulting to 1000
[  286.749271][T14578] syz1: Port: 1 Link DOWN
[  286.800797][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'.
[  286.855203][T20010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4627'.
[  287.084078][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4634'.
[  287.087220][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'.
[  287.297473][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'.
[  287.520874][T20058] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4643'.
[  287.887159][T20094] x_tables: duplicate underflow at hook 1
[  288.046314][T20112] syzkaller0: entered promiscuous mode
[  288.048463][T20112] syzkaller0: entered allmulticast mode
[  288.111475][T20121] Bluetooth: MGMT ver 1.23
[  288.509416][T20154] syzkaller1: entered promiscuous mode
[  288.511842][T20154] syzkaller1: entered allmulticast mode
[  288.798413][T20164] veth1_vlan: left allmulticast mode
[  288.801060][T20164] macvlan0: left allmulticast mode
[  288.808283][T20164] validate_nla: 1 callbacks suppressed
[  288.808297][T20164] netlink: 'syz.2.4682': attribute type 1 has an invalid length.
[  288.814873][T20164] netlink: 'syz.2.4682': attribute type 2 has an invalid length.
[  288.939072][T20174] veth0_to_hsr: entered allmulticast mode
[  288.953427][T20174] veth0_to_hsr: left allmulticast mode
[  289.031244][T20177] netlink: 'syz.1.4687': attribute type 8 has an invalid length.
[  289.244175][T20209] sctp: [Deprecated]: syz.0.4696 (pid 20209) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.244175][T20209] Use struct sctp_sack_info instead
[  289.248597][T20210] lo speed is unknown, defaulting to 1000
[  289.285064][T20211] lo speed is unknown, defaulting to 1000
[  290.073062][ T5298] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  290.137323][T20281] dummy0: entered allmulticast mode
[  290.260545][T20292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.272254][T20297] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.283917][T20292] syzkaller0: entered promiscuous mode
[  290.286338][T20292] syzkaller0: entered allmulticast mode
[  290.317982][T20291] tipc: Resetting bearer <eth:syzkaller0>
[  290.336401][T20291] tipc: Disabling bearer <eth:syzkaller0>
[  290.441546][T20311] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  290.444726][T20311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.629023][T20332] syzkaller0: entered promiscuous mode
[  290.631488][T20332] syzkaller0: entered allmulticast mode
[  290.690849][T20332] macvlan0: left allmulticast mode
[  290.693082][T20332] netlink: 'syz.1.4739': attribute type 2 has an invalid length.
[  290.918178][T20354] netlink: 'syz.1.4746': attribute type 10 has an invalid length.
[  290.921686][T20354] bond0: (slave team0): refused to change device type
[  290.925702][T20356] netlink: 'syz.2.4747': attribute type 1 has an invalid length.
[  290.955534][T20356] bond37: entered promiscuous mode
[  290.960620][T20356] 8021q: adding VLAN 0 to HW filter on device bond37
[  290.966586][T20356] __nla_validate_parse: 29 callbacks suppressed
[  290.966600][T20356] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4747'.
[  290.979757][T20356] batadv1: entered promiscuous mode
[  290.982148][T20356] batadv1: entered allmulticast mode
[  290.991701][T20356] 8021q: adding VLAN 0 to HW filter on device batadv1
[  290.999697][T20356] bond37: (slave batadv1): making interface the new active one
[  291.007525][T20356] bond37: (slave batadv1): Enslaving as an active interface with an up link
[  291.057163][T20364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4749'.
[  291.128696][T20356] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4747'.
[  291.210650][T20371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  291.227212][T20371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'.
[  291.231322][T20371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4751'.
[  291.237571][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'.
[  291.246511][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4752'.
[  291.257553][T20377] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  291.337270][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4758'.
[  291.395876][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4761'.
[  291.436430][T20404] Cannot find add_set index 3 as target
[  291.457051][T20404] batadv_slave_1: left promiscuous mode
[  291.461316][T20404] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  291.473383][T20404] macsec0: left promiscuous mode
[  291.475401][T20404] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  291.478876][T20404] geneve3: left promiscuous mode
[  291.482866][T20404] macvlan6: left promiscuous mode
[  291.485315][T20404] hsr0: left promiscuous mode
[  291.488096][T20404] bond37: left promiscuous mode
[  291.490298][T20404] batadv1: left promiscuous mode
[  291.505467][T20404] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  291.547144][T20404] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4763'.
[  291.680033][T20422] netlink: 'syz.0.4769': attribute type 11 has an invalid length.
[  291.696537][T20422] netlink: 'syz.0.4769': attribute type 178 has an invalid length.
[  292.059141][T20469] netlink: 'syz.1.4784': attribute type 1 has an invalid length.
[  292.105614][T20469] bond32: (slave vxcan1): The slave device specified does not support setting the MAC address
[  292.111403][T20469] bond32: (slave vxcan1): Error -95 calling set_mac_address
[  292.162980][T20478] macvlan4: entered promiscuous mode
[  292.165500][T20478] macvlan4: entered allmulticast mode
[  292.168132][T20478] bond32: entered promiscuous mode
[  292.170238][T20478] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  292.176437][T20478] bond32: left promiscuous mode
[  292.216197][T20481] netlink: 'syz.0.4789': attribute type 9 has an invalid length.
[  292.231041][T20481] macvlan3: entered promiscuous mode
[  292.233970][T20481] hsr0: entered promiscuous mode
[  292.236669][T20481] macvlan3: entered allmulticast mode
[  292.238798][T20481] hsr0: entered allmulticast mode
[  292.241313][T20481] hsr_slave_0: entered allmulticast mode
[  292.247077][T20481] hsr_slave_1: entered allmulticast mode
[  292.368012][T20487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.889660][T20559] atomic_op ffff888022c36998 conn xmit_atomic 0000000000000000
[  294.590589][T20582] validate_nla: 6 callbacks suppressed
[  294.590608][T20582] netlink: 'syz.2.4829': attribute type 1 has an invalid length.
[  294.616694][T20582] 8021q: adding VLAN 0 to HW filter on device bond38
[  295.071178][T20616] IPv6: sit2: Disabled Multicast RS
[  295.074341][T20616] sit2: entered allmulticast mode
[  295.162085][T20623] netlink: 'syz.1.4844': attribute type 7 has an invalid length.
[  295.165417][T20623] netlink: 'syz.1.4844': attribute type 8 has an invalid length.
[  295.407674][T20655] team0: No ports can be present during mode change
[  295.464637][T20659] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.468884][T20659] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.507803][T20659] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.512106][T20659] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.559403][T20659] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.564142][T20659] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.607525][T20659] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.611475][T20659] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.702340][T20659] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.707191][T20659] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.715767][T20659] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.718790][T20659] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.731074][T20659] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.734750][T20659] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.742484][T20659] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.747062][T20659] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.034999][T20673] __nla_validate_parse: 97 callbacks suppressed
[  296.035014][T20673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4863'.
[  296.072282][T20673] netlink: 'syz.2.4863': attribute type 1 has an invalid length.
[  296.077081][T20673] netlink: 'syz.2.4863': attribute type 2 has an invalid length.
[  296.153833][T20678] netlink: 'syz.2.4865': attribute type 10 has an invalid length.
[  296.158205][T20678] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4865'.
[  296.164099][T20678] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  296.167837][T20678] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4865'.
[  296.349109][T20692] netlink: 'syz.1.4873': attribute type 1 has an invalid length.
[  296.667330][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4882'.
[  296.670571][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'.
[  296.690354][T20723] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.707927][T20725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4883'.
[  296.711600][T20725] netlink: 'syz.0.4883': attribute type 4 has an invalid length.
[  296.787528][T20733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4887'.
[  296.841759][T20739] netlink: 'syz.1.4890': attribute type 23 has an invalid length.
[  296.892589][T20744] pim6reg: entered allmulticast mode
[  296.910928][T20744] pim6reg: left allmulticast mode
[  296.929968][T20741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4891'.
[  296.989394][T20749] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4892'.
[  296.994939][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'.
[  297.005704][T20748] netlink: 'syz.1.4892': attribute type 1 has an invalid length.
[  297.288121][T20761] netlink: 'syz.1.4895': attribute type 11 has an invalid length.
[  298.014043][T20780] xt_CT: You must specify a L4 protocol and not use inversions on it
[  298.188700][T20795] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  298.204610][T20793] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  298.241352][T20794] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  298.259865][T20797] vxcan0: entered promiscuous mode
[  298.527089][T20826] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  298.598179][T20832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  298.602615][T20837] macsec0: entered promiscuous mode
[  298.605840][T20832] syzkaller0: entered promiscuous mode
[  298.608317][T20832] syzkaller0: entered allmulticast mode
[  298.634562][T20832] tipc: Resetting bearer <eth:syzkaller0>
[  298.639473][T20831] tipc: Resetting bearer <eth:syzkaller0>
[  298.651115][T20831] tipc: Disabling bearer <eth:syzkaller0>
[  298.678602][T20842] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  298.719541][T20841] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  299.629467][T20917] bond0: (slave lo): Releasing active interface
[  299.635560][T20917] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  299.652841][T20917] team0: Port device  removed
[  299.659032][T20917] : (slave wlan1): Releasing backup interface
[  299.663821][T20917] bond27: (slave bond28): Releasing backup interface
[  299.667065][T20917] bond27: (slave bond28): the permanent HWaddr of slave - 86:17:70:07:1b:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  299.672825][T20917] bond27: (slave gretap3): making interface the new active one
[  299.680499][T20917] bond27: (slave gretap3): Releasing backup interface
[  299.688877][T20917] bond34: (slave wireguard0): Releasing backup interface
[  299.691827][T20917] wireguard0: left promiscuous mode
[  299.799164][T20932] validate_nla: 6 callbacks suppressed
[  299.799176][T20932] netlink: 'syz.1.4961': attribute type 4 has an invalid length.
[  299.812718][T20932] syzkaller1: entered promiscuous mode
[  299.834884][T20932] syzkaller1: entered allmulticast mode
[  300.022171][T20949] tc_dump_action: action bad kind
[  300.264539][T20963] netlink: 'syz.1.4973': attribute type 3 has an invalid length.
[  300.267193][T20966] netlink: 'syz.1.4973': attribute type 3 has an invalid length.
[  300.269844][T20963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.285269][T20963] syzkaller0: entered promiscuous mode
[  300.287613][T20963] syzkaller0: entered allmulticast mode
[  300.301561][T20962] tipc: Resetting bearer <eth:syzkaller0>
[  300.315637][T20962] tipc: Disabling bearer <eth:syzkaller0>
[  300.731922][T21002] netlink: 'syz.0.4985': attribute type 1 has an invalid length.
[  300.777059][T21002] veth5: entered promiscuous mode
[  301.063105][T21024] bond39: entered promiscuous mode
[  301.067610][T21024] bond39: entered allmulticast mode
[  301.070508][T21024] 8021q: adding VLAN 0 to HW filter on device bond39
[  301.131399][T21034] __nla_validate_parse: 36 callbacks suppressed
[  301.131418][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4996'.
[  301.408074][T21051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5001'.
[  301.426961][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5001'.
[  301.519034][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5004'.
[  301.718224][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5009'.
[  301.752644][T21074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5010'.
[  301.765428][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'.
[  301.858536][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5012'.
[  301.907602][T21088] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5015'.
[  301.968195][T21088] lo speed is unknown, defaulting to 1000
[  302.007086][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5016'.
[  302.411780][T21105] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  302.867105][T21127] lo speed is unknown, defaulting to 1000
[  302.923037][T21132] netlink: 'syz.0.5030': attribute type 21 has an invalid length.
[  302.930055][T21132] netlink: 'syz.0.5030': attribute type 6 has an invalid length.
[  303.441954][T21174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.447908][T21174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.451587][T21174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.457095][T21174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.460315][T21174] geneve4: entered promiscuous mode
[  303.492892][T21176] netlink: 'syz.0.5046': attribute type 3 has an invalid length.
[  303.495866][T21176] netlink: 'syz.0.5046': attribute type 3 has an invalid length.
[  303.550998][T21176] xt_hashlimit: size too large, truncated to 1048576
[  303.609893][T21180] SET target dimension over the limit!
[  303.936919][T21205] netlink: 'syz.2.5053': attribute type 3 has an invalid length.
[  303.939487][T21205] netlink: 'syz.2.5053': attribute type 1 has an invalid length.
[  304.116047][T21220] vlan4: entered promiscuous mode
[  304.118329][T21220] gretap0: entered promiscuous mode
[  304.240542][T21233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.486808][T21255] lo speed is unknown, defaulting to 1000
[  304.546462][T21264] lo speed is unknown, defaulting to 1000
[  304.629775][T21267] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  304.665174][T21273] tap0: tun_chr_ioctl cmd 1074025677
[  304.669205][T21273] tap0: linktype set to 769
[  304.732954][T21279] openvswitch: netlink: Message has 8 unknown bytes.
[  305.045667][T21303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.279554][T21317] lo speed is unknown, defaulting to 1000
[  306.036523][T21326] validate_nla: 2 callbacks suppressed
[  306.036543][T21326] netlink: 'syz.2.5096': attribute type 3 has an invalid length.
[  306.090023][T21329] netlink: 'syz.0.5097': attribute type 15 has an invalid length.
[  306.092739][T21329] netlink: 'syz.0.5097': attribute type 15 has an invalid length.
[  306.308428][T21346] netlink: 'syz.2.5102': attribute type 2 has an invalid length.
[  306.395876][T21349] SET target dimension over the limit!
[  307.246878][T21361] __nla_validate_parse: 21 callbacks suppressed
[  307.246892][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'.
[  307.297768][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5109'.
[  307.618450][T21380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5113'.
[  307.717450][T21386] x_tables: duplicate underflow at hook 2
[  307.872811][T21402] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.5122'.
[  307.877145][T21402] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  308.250227][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  308.250813][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5129'.
[  308.297634][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5129'.
[  308.404364][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5131'.
[  308.514087][T21433] xt_CT: You must specify a L4 protocol and not use inversions on it
[  308.664706][T21438] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5135'.
[  308.678645][T21443] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  308.719537][T21446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5137'.
[  308.742117][T21448] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  308.900105][T21470] SET target dimension over the limit!
[  309.024344][T21480] netlink: 'syz.0.5148': attribute type 1 has an invalid length.
[  309.027009][T21479] netlink: 'syz.0.5148': attribute type 1 has an invalid length.
[  309.089779][T21485] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  309.971206][T21576] xt_CT: You must specify a L4 protocol and not use inversions on it
[  310.117138][T21586] SET target dimension over the limit!
[  310.211907][T21592] dvmrp8: entered allmulticast mode
[  310.226199][T21591] dvmrp8: left allmulticast mode
[  310.328709][T21594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.458534][T21602] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  310.523674][T21602] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  310.851751][T21634] netlink: 'syz.1.5201': attribute type 1 has an invalid length.
[  310.878546][T21636] sch_tbf: burst 0 is lower than device bridge12 mtu (1514) !
[  311.082785][T21646] SET target dimension over the limit!
[  311.138890][T21652] netlink: 'syz.1.5206': attribute type 1 has an invalid length.
[  311.223081][T21656] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.370816][T21660] netlink: 'syz.1.5209': attribute type 22 has an invalid length.
[  311.429711][T21661] netlink: 'syz.1.5209': attribute type 22 has an invalid length.
[  311.433390][T21661] netlink: 'syz.1.5209': attribute type 22 has an invalid length.
[  311.561788][T21663] netlink: 'syz.2.5210': attribute type 4 has an invalid length.
[  312.479331][T21691] __nla_validate_parse: 28 callbacks suppressed
[  312.479347][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'.
[  312.487808][T21691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5220'.
[  312.492518][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'.
[  312.527627][T21695] xt_CT: You must specify a L4 protocol and not use inversions on it
[  312.548191][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5221'.
[  312.573268][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  312.598997][T21699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5224'.
[  312.607906][T21701] IPVS: Unknown mcast interface: veth1_macvtap
[  312.652687][T21706] netlink: 604 bytes leftover after parsing attributes in process `syz.0.5223'.
[  312.689809][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5228'.
[  312.697778][T21709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5228'.
[  312.778873][T21716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5231'.
[  312.869956][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5230'.
[  312.979259][T21731] netlink: 'syz.2.5234': attribute type 8 has an invalid length.
[  313.166305][T21745] netlink: 'syz.1.5239': attribute type 1 has an invalid length.
[  313.362878][T21749] xt_CT: You must specify a L4 protocol and not use inversions on it
[  313.537334][T21757] lo speed is unknown, defaulting to 1000
[  313.862606][T21773] ipt_ECN: cannot use operation on non-tcp rule
[  314.023701][T21776] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  314.084863][T21780] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  314.088063][T21780] netlink: 'syz.0.5252': attribute type 32 has an invalid length.
[  314.287590][T21818] netlink: 'syz.0.5261': attribute type 29 has an invalid length.
[  314.295421][T21818] netlink: 'syz.0.5261': attribute type 29 has an invalid length.
[  314.312919][T21818] unsupported nla_type 58
[  314.528522][T21839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.682829][T21854] syzkaller0: entered promiscuous mode
[  314.685826][T21854] syzkaller0: entered allmulticast mode
[  314.849835][T21865] geneve0: entered allmulticast mode
[  314.975538][T21869] 8021q: adding VLAN 0 to HW filter on device bond39
[  315.030863][T21874] sctp: [Deprecated]: syz.1.5277 (pid 21874) Use of int in max_burst socket option.
[  315.030863][T21874] Use struct sctp_assoc_value instead
[  315.117425][T21886] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  315.127674][T21887] openvswitch: netlink: Missing key (keys=40, expected=100)
[  315.199742][T21893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.245858][T21897] tipc: New replicast peer: 127.0.0.1
[  315.697964][ T5298] hid-generic 0005:16C0:5507.0006: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa
[  315.721103][T21962] dummy0 (unregistering): left promiscuous mode
[  315.822617][T21983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  316.008482][T22002] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  316.088830][T22001] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  317.100968][T22053] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.207775][T22061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.418632][T22084] netlink: 'syz.1.5346': attribute type 11 has an invalid length.
[  317.484780][T22090] validate_nla: 3 callbacks suppressed
[  317.484790][T22090] netlink: 'syz.2.5348': attribute type 8 has an invalid length.
[  317.616558][T22104] netlink: 'syz.1.5353': attribute type 142 has an invalid length.
[  317.619569][T22104] __nla_validate_parse: 90 callbacks suppressed
[  317.619576][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'.
[  317.674681][T22110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5354'.
[  317.678699][T22110] netlink: 83 bytes leftover after parsing attributes in process `syz.0.5354'.
[  317.967388][T22142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5366'.
[  317.971648][T22142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5366'.
[  317.972674][T22143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.982857][T22139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5364'.
[  318.008759][T22142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5366'.
[  318.095922][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  318.126830][T22153] netlink: 'syz.0.5369': attribute type 1 has an invalid length.
[  318.155955][T22152] netlink: 'syz.1.5368': attribute type 29 has an invalid length.
[  318.159867][T22152] netlink: 'syz.1.5368': attribute type 29 has an invalid length.
[  318.170888][T22161] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5368'.
[  318.172749][T22153] bond40: (slave bridge13): making interface the new active one
[  318.179121][T22153] bond40: (slave bridge13): Enslaving as an active interface with an up link
[  318.185862][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5369'.
[  318.189365][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5369'.
[  318.296842][T22177] siw: device registration error -23
[  318.363052][   T33] audit: type=1107 audit(1753900646.352:10): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Y3^Kf1fĽsQÔ'b_et]L	'2#v
[  318.363052][   T33] 1
[  318.363052][   T33] >hReٸDĜeύ֖;Td_Myϼ7|2ץJ_q%+=e 옩9aI	'"5r3K$p7,	]23rxL7Ί]/	;5=
[  318.363052][   T33] m[5i-u)>ii'
[  318.486818][T22203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.578460][T22213] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  318.627934][T22217] openvswitch: netlink: Flow key attr not present in new flow.
[  318.871767][T22242] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  319.041166][T22252] netlink: 'syz.2.5395': attribute type 3 has an invalid length.
[  319.047116][T22253] netlink: 'syz.2.5395': attribute type 3 has an invalid length.
[  319.207886][T22263] netlink: 'syz.2.5399': attribute type 11 has an invalid length.
[  319.309742][T22267] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  319.319098][T22265] sch_tbf: burst 88 is lower than device veth1 mtu (1514) !
[  319.535643][T22283] netlink: 'syz.2.5409': attribute type 29 has an invalid length.
[  319.539766][T22283] netlink: 'syz.2.5409': attribute type 29 has an invalid length.
[  319.862486][T22306] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  319.888373][T22308] vlan3: entered allmulticast mode
[  319.890126][T22308] erspan0: entered allmulticast mode
[  319.982849][T22314] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  319.987718][T22314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.039360][T22314] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.044305][T22314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.096116][T22314] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.100237][T22314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.171522][T22314] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.175637][T22314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.249334][T22314] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.253603][T22314] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.260654][T22314] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.263812][T22314] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.270703][T22314] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.273754][T22314] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.276828][T22332] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.287808][T22314] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.290581][T22314] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.769731][T22357] bond28: (slave ip6gretap1): Removing an active aggregator
[  320.772650][T22357] bond28: (slave ip6gretap1): Releasing backup interface
[  320.777680][T22357] team0: Port device sit1 removed
[  320.976261][T22392] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  320.978538][T22392] macsec0: entered promiscuous mode
[  320.980189][T22392] macsec0: left allmulticast mode
[  321.000066][T22394] ipt_ECN: cannot use operation on non-tcp rule
[  321.040526][T22398] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  321.064275][T22398] bond35: (slave geneve4): Releasing active interface
[  321.080768][T22398] bond36: (slave bridge8): Releasing backup interface
[  321.089044][T22401] netlink: 'syz.0.5452': attribute type 21 has an invalid length.
[  321.096412][T22398] bond37: (slave batadv1): Releasing active interface
[  321.107461][T22399] syzkaller0: entered allmulticast mode
[  321.126172][T22398] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  321.129826][T22398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  321.133040][T22398] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  321.267472][T22404]  (unregistering): Released all slaves
[  321.276906][T22393] syzkaller0: left allmulticast mode
[  321.451624][T22416] 8021q: adding VLAN 0 to HW filter on device bond35
[  321.464859][T22416] bond35: (slave gretap3): making interface the new active one
[  321.467960][T22416] bond35: (slave gretap3): Enslaving as an active interface with an up link
[  321.756459][T22429] macvlan0: entered allmulticast mode
[  321.758946][T22429] veth1_vlan: entered allmulticast mode
[  321.992075][T22440] tipc: Resetting bearer <eth:syzkaller0>
[  322.010619][T22440] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  322.014068][T22440] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  322.017266][T22440] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  322.020351][T22440] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  322.082809][T22440] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.086682][T22440] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.090293][T22440] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.097120][T22440] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  322.120252][T22440] hsr0: left allmulticast mode
[  322.122518][T22440] hsr_slave_0: left allmulticast mode
[  322.125325][T22440] hsr_slave_1: left allmulticast mode
[  322.236225][T22448] xt_CT: No such helper "snmp"
[  322.664584][T22507] validate_nla: 3 callbacks suppressed
[  322.664594][T22507] netlink: 'syz.0.5483': attribute type 1 has an invalid length.
[  322.683057][T22507] 8021q: adding VLAN 0 to HW filter on device bond41
[  322.695416][T22507] bond41: entered promiscuous mode
[  322.743979][T22515] __nla_validate_parse: 33 callbacks suppressed
[  322.743990][T22515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5485'.
[  322.857254][T22519] netlink: 'syz.1.5487': attribute type 1 has an invalid length.
[  322.871989][T22519] 8021q: adding VLAN 0 to HW filter on device bond36
[  322.885288][T22519] bond36: (slave bridge8): making interface the new active one
[  322.888994][T22519] bond36: (slave bridge8): Enslaving as an active interface with an up link
[  322.898096][T22519] bond36: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  323.116063][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5491'.
[  323.119251][T22531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5491'.
[  323.133458][T22531] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5491'.
[  323.138251][T22531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5491'.
[  323.142057][T22531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5491'.
[  323.227798][T22537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5494'.
[  323.254711][T22543] syzkaller1: entered promiscuous mode
[  323.256707][T22543] syzkaller1: entered allmulticast mode
[  323.259812][T22543] netlink: 'syz.1.5496': attribute type 11 has an invalid length.
[  323.263010][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5496'.
[  323.266436][T22543] netlink: 'syz.1.5496': attribute type 11 has an invalid length.
[  323.269335][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5496'.
[  323.352229][T22549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5497'.
[  323.369760][T22551] netlink: 'syz.1.5498': attribute type 10 has an invalid length.
[  323.384394][T22551] bond0: left promiscuous mode
[  323.387013][T22551] bond0: left allmulticast mode
[  323.390574][T22551] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.401167][T22554] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.403681][T22551] team0: Device bond0 failed to register rx_handler
[  323.484598][ T5855] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  323.562281][T22566] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  323.600449][T22568] syzkaller1: entered promiscuous mode
[  323.602901][T22568] syzkaller1: entered allmulticast mode
[  323.777250][T22580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.798265][T22583] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.880123][T22586] veth1_to_bridge: mtu less than device minimum
[  323.886960][T22593] pim6reg1: entered promiscuous mode
[  323.888885][T22593] pim6reg1: entered allmulticast mode
Connection to localhost closed by remote host.
[  324.093918][T22613] xt_CT: You must specify a L4 protocol and not use inversions on it
[  342.413541][    C1] ==================================================================
[  342.416827][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  342.419940][    C1] Read of size 2 at addr ffff888112ac7c2a by task swapper/1/0
[  342.423004][    C1] 
[  342.424021][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  342.424035][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.424043][    C1] Call Trace:
[  342.424049][    C1]  <IRQ>
[  342.424056][    C1]  dump_stack_lvl+0x189/0x250
[  342.424071][    C1]  ? rcu_is_watching+0x15/0xb0
[  342.424085][    C1]  ? __kasan_check_byte+0x12/0x40
[  342.424101][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.424113][    C1]  ? rcu_is_watching+0x15/0xb0
[  342.424132][    C1]  ? lock_release+0x4b/0x3e0
[  342.424144][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  342.424159][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  342.424173][    C1]  print_report+0xca/0x230
[  342.424183][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  342.424195][    C1]  kasan_report+0x118/0x150
[  342.424211][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  342.424226][    C1]  rose_timer_expiry+0x471/0x4b0
[  342.424239][    C1]  call_timer_fn+0x17e/0x5f0
[  342.424251][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.424262][    C1]  ? call_timer_fn+0xbe/0x5f0
[  342.424272][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  342.424309][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.424327][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.424338][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.424351][    C1]  __run_timer_base+0x61a/0x860
[  342.424367][    C1]  ? ktime_get+0x3e/0x1f0
[  342.424384][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  342.424399][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  342.424418][    C1]  run_timer_softirq+0xb7/0x180
[  342.424434][    C1]  handle_softirqs+0x286/0x870
[  342.424448][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  342.424462][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  342.424475][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  342.424492][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.424503][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  342.424518][    C1]  irq_exit_rcu+0x9/0x30
[  342.424529][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.424540][    C1]  </IRQ>
[  342.424544][    C1]  <TASK>
[  342.424548][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.424560][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  342.424571][    C1] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  342.424581][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  342.424593][    C1] RAX: c9a920e84fcb2900 RBX: ffffffff81976a48 RCX: c9a920e84fcb2900
[  342.424601][    C1] RDX: 0000000000000001 RSI: ffffffff8d996116 RDI: ffffffff8be28c00
[  342.424609][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  342.424617][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d6f0
[  342.424625][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  342.424634][    C1]  ? do_idle+0x1e8/0x510
[  342.424650][    C1]  default_idle+0x13/0x20
[  342.424662][    C1]  default_idle_call+0x74/0xb0
[  342.424674][    C1]  do_idle+0x1e8/0x510
[  342.424688][    C1]  ? __pfx_do_idle+0x10/0x10
[  342.424704][    C1]  ? do_idle+0xc/0x510
[  342.424716][    C1]  cpu_startup_entry+0x44/0x60
[  342.424728][    C1]  start_secondary+0x101/0x110
[  342.424738][    C1]  common_startup_64+0x13e/0x147
[  342.424758][    C1]  </TASK>
[  342.424762][    C1] 
[  342.553244][    C1] Allocated by task 11342:
[  342.555046][    C1]  kasan_save_track+0x3e/0x80
[  342.557004][    C1]  __kasan_kmalloc+0x93/0xb0
[  342.558973][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  342.561195][    C1]  rose_add_node+0x23a/0xde0
[  342.563129][    C1]  rose_rt_ioctl+0xa48/0xfb0
[  342.565083][    C1]  rose_ioctl+0x3ce/0x8b0
[  342.566918][    C1]  sock_do_ioctl+0xdc/0x300
[  342.568825][    C1]  sock_ioctl+0x576/0x790
[  342.570601][    C1]  __se_sys_ioctl+0xfc/0x170
[  342.572554][    C1]  do_syscall_64+0xfa/0x3b0
[  342.574456][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.576935][    C1] 
[  342.577958][    C1] Freed by task 22380:
[  342.579656][    C1]  kasan_save_track+0x3e/0x80
[  342.581620][    C1]  kasan_save_free_info+0x46/0x50
[  342.583716][    C1]  __kasan_slab_free+0x62/0x70
[  342.585762][    C1]  kfree+0x18e/0x440
[  342.587460][    C1]  rose_rt_device_down+0x473/0x4c0
[  342.589631][    C1]  rose_device_event+0x603/0x6a0
[  342.591717][    C1]  notifier_call_chain+0x1b6/0x3e0
[  342.593881][    C1]  __dev_notify_flags+0x18d/0x2e0
[  342.595964][    C1]  netif_change_flags+0xe8/0x1a0
[  342.598010][    C1]  dev_change_flags+0x130/0x260
[  342.600071][    C1]  dev_ioctl+0x7b4/0x1150
[  342.601875][    C1]  sock_do_ioctl+0x22c/0x300
[  342.603827][    C1]  sock_ioctl+0x576/0x790
[  342.605652][    C1]  __se_sys_ioctl+0xfc/0x170
[  342.607585][    C1]  do_syscall_64+0xfa/0x3b0
[  342.609477][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.611931][    C1] 
[  342.612963][    C1] The buggy address belongs to the object at ffff888112ac7c00
[  342.612963][    C1]  which belongs to the cache kmalloc-512 of size 512
[  342.618578][    C1] The buggy address is located 42 bytes inside of
[  342.618578][    C1]  freed 512-byte region [ffff888112ac7c00, ffff888112ac7e00)
[  342.624209][    C1] 
[  342.625258][    C1] The buggy address belongs to the physical page:
[  342.627870][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888112ac6c00 pfn:0x112ac4
[  342.631971][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  342.635532][    C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  342.638381][    C1] page_type: f5(slab)
[  342.639749][    C1] raw: 057ff00000000240 ffff88801a441c80 ffffea000448ce10 ffffea00044a2510
[  342.642554][    C1] raw: ffff888112ac6c00 000000000010000d 00000000f5000000 0000000000000000
[  342.645901][    C1] head: 057ff00000000240 ffff88801a441c80 ffffea000448ce10 ffffea00044a2510
[  342.648666][    C1] head: ffff888112ac6c00 000000000010000d 00000000f5000000 0000000000000000
[  342.651442][    C1] head: 057ff00000000002 ffffea00044ab101 00000000ffffffff 00000000ffffffff
[  342.654519][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  342.657541][    C1] page dumped because: kasan: bad access detected
[  342.659891][    C1] page_owner tracks the page as allocated
[  342.661777][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 57375744729, free_ts 57363666035
[  342.669524][    C1]  post_alloc_hook+0x240/0x2a0
[  342.671106][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  342.673226][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  342.675338][    C1]  alloc_pages_mpol+0x232/0x4a0
[  342.677181][    C1]  allocate_slab+0x8a/0x3b0
[  342.678945][    C1]  ___slab_alloc+0xbfc/0x1480
[  342.680767][    C1]  __kmalloc_cache_noprof+0x296/0x3d0
[  342.682860][    C1]  device_add+0xbe/0xb50
[  342.684624][    C1]  netdev_register_kobject+0x156/0x2f0
[  342.686751][    C1]  register_netdevice+0x126c/0x1ae0
[  342.688815][    C1]  veth_newlink+0x42f/0xa50
[  342.690568][    C1]  rtnl_newlink_create+0x310/0xb00
[  342.692563][    C1]  rtnl_newlink+0x16d6/0x1c70
[  342.694397][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  342.696273][    C1]  netlink_rcv_skb+0x208/0x470
[  342.698144][    C1]  netlink_unicast+0x75c/0x8e0
[  342.700008][    C1] page last free pid 5834 tgid 5834 stack trace:
[  342.702474][    C1]  __free_frozen_pages+0xc71/0xe70
[  342.704448][    C1]  __slab_free+0x326/0x400
[  342.706171][    C1]  qlist_free_all+0x97/0x140
[  342.707974][    C1]  kasan_quarantine_reduce+0x148/0x160
[  342.710103][    C1]  __kasan_slab_alloc+0x22/0x80
[  342.712072][    C1]  __kmalloc_node_track_caller_noprof+0x216/0x4e0
[  342.714621][    C1]  kstrdup+0x42/0x100
[  342.716164][    C1]  kobject_set_name_vargs+0x61/0x110
[  342.718219][    C1]  dev_set_name+0xd4/0x120
[  342.719948][    C1]  netdev_register_kobject+0xb7/0x2f0
[  342.722088][    C1]  register_netdevice+0x126c/0x1ae0
[  342.724134][    C1]  ipvlan_link_new+0x407/0xa90
[  342.726035][    C1]  rtnl_newlink_create+0x310/0xb00
[  342.728048][    C1]  rtnl_newlink+0x16d6/0x1c70
[  342.729890][    C1]  rtnetlink_rcv_msg+0x7cf/0xb70
[  342.731855][    C1]  netlink_rcv_skb+0x208/0x470
[  342.733729][    C1] 
[  342.734681][    C1] Memory state around the buggy address:
[  342.736861][    C1]  ffff888112ac7b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  342.739878][    C1]  ffff888112ac7b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  342.742929][    C1] >ffff888112ac7c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.745986][    C1]                                   ^
[  342.748070][    C1]  ffff888112ac7c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.751124][    C1]  ffff888112ac7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  342.754171][    C1] ==================================================================
[  342.757417][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  342.760110][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  342.763973][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.767215][    C1] Call Trace:
[  342.768345][    C1]  <IRQ>
[  342.769303][    C1]  dump_stack_lvl+0x99/0x250
[  342.770821][    C1]  ? __asan_memcpy+0x40/0x70
[  342.772352][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.774044][    C1]  ? __pfx__printk+0x10/0x10
[  342.775581][    C1]  panic+0x2db/0x790
[  342.776851][    C1]  ? __pfx_panic+0x10/0x10
[  342.778351][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  342.780323][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  342.782367][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  342.784577][    C1]  ? print_memory_metadata+0x314/0x400
[  342.786405][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  342.788162][    C1]  check_panic_on_warn+0x89/0xb0
[  342.789808][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  342.791517][    C1]  end_report+0x78/0x160
[  342.792980][    C1]  kasan_report+0x129/0x150
[  342.794518][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  342.796223][    C1]  rose_timer_expiry+0x471/0x4b0
[  342.797969][    C1]  call_timer_fn+0x17e/0x5f0
[  342.799558][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.801349][    C1]  ? call_timer_fn+0xbe/0x5f0
[  342.802889][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  342.804569][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.806266][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.807960][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.809750][    C1]  __run_timer_base+0x61a/0x860
[  342.811352][    C1]  ? ktime_get+0x3e/0x1f0
[  342.812773][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  342.814515][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  342.816562][    C1]  run_timer_softirq+0xb7/0x180
[  342.818146][    C1]  handle_softirqs+0x286/0x870
[  342.819675][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  342.821222][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  342.823198][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  342.825046][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.826821][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  342.828705][    C1]  irq_exit_rcu+0x9/0x30
[  342.830115][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.831926][    C1]  </IRQ>
[  342.832902][    C1]  <TASK>
[  342.833872][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.835914][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  342.838021][    C1] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  342.845175][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  342.847562][    C1] RAX: c9a920e84fcb2900 RBX: ffffffff81976a48 RCX: c9a920e84fcb2900
[  342.850590][    C1] RDX: 0000000000000001 RSI: ffffffff8d996116 RDI: ffffffff8be28c00
[  342.853633][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  342.856660][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d6f0
[  342.859755][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  342.862726][    C1]  ? do_idle+0x1e8/0x510
[  342.864313][    C1]  default_idle+0x13/0x20
[  342.865861][    C1]  default_idle_call+0x74/0xb0
[  342.867542][    C1]  do_idle+0x1e8/0x510
[  342.868837][    C1]  ? __pfx_do_idle+0x10/0x10
[  342.870401][    C1]  ? do_idle+0xc/0x510
[  342.871970][    C1]  cpu_startup_entry+0x44/0x60
[  342.873975][    C1]  start_secondary+0x101/0x110
[  342.876126][    C1]  common_startup_64+0x13e/0x147
[  342.878228][    C1]  </TASK>
[  342.880364][    C1] Kernel Offset: disabled
[  342.882120][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:37:42  Registers:
info registers vcpu 0

CPU#0
RAX=e9e98f828aa33500 RBX=ffffffff81976a48 RCX=e9e98f828aa33500 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efc25983178 CR3=0000000029480000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=04000ac003001000 0ab0030010000aa0
XMM02=0001ffffffffffff ffffc5080ac40350 XMM03=0000000000000000 0000000000000000
XMM04=000afe0300000000 0000000000000000 XMM05=010b901000000401 8008000480808080
XMM06=8080800800010000 0008060a016a961f XMM07=fffffffc08000b80 030802000afe0300
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c9a920e84fcb2900 RBX=ffffffff81976a48 RCX=c9a920e84fcb2900 RDX=0000000000000001
RSI=ffffffff8d996116 RDI=ffffffff8be28c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8ec11802d8 CR3=0000000029480000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=04000ac003001000 0ab0030010000aa0
XMM02=0001ffffffffffff ffffc5080ac40350 XMM03=0000000000000000 0000000000000000
XMM04=000afe0300000000 0000000000000000 XMM05=010b901000000401 8008000480808080
XMM06=8080800800010000 0008060a016a961f XMM07=fffffffc08000b80 030802000afe0300
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
