last executing test programs:

1.834243321s ago: executing program 1 (id=1514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2200}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)

1.833684823s ago: executing program 1 (id=1516):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3bf}, 0x50)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00006dbffc)=0x400c3, 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950f", 0x55}, {&(0x7f0000000900)="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", 0x3d8}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=@mpls_newroute={0x1c, 0x18, 0x101, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x3, 0x2, 0xa, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4080)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000060002404e22000008000500", @ANYRES32=r3], 0x4c}}, 0x20000004)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r3, 0x3, {0x1, 0x0, 0x3}, 0xff}, 0x18)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @multicast1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})
sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xffffe000)

1.740284061s ago: executing program 1 (id=1518):
r0 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={<r1=>0x0, 0xac}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r1, 0x0, 0x2, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={<r8=>r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0xffff, 0x0, 0x9, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
r11 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@dev, @in=@remote}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x8, 0x0, 0x8000}, {0x0, 0x4000000}, 0x0, 0x1000000, 0xa}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x40, "25cac521"}}]}, 0x140}}, 0x4000080)
sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r11, 0x12, 0x3, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

1.389956325s ago: executing program 0 (id=1525):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0xfffe, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0xfffe, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1.339868171s ago: executing program 0 (id=1527):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x11, 0xa, 0x300)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r6}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r7, 0x0, 0x80000000000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20)
pipe(&(0x7f0000000040)={<r9=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x5761, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0x5, [@volatile={0x4}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x3, [{0x9, 0x2, 0x255}, {0x2, 0x4, 0x5}, {0x5, 0x5, 0x2cc}, {0xa, 0x5, 0x6}, {0x8, 0x3, 0x6}]}, @datasec={0x3, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x0, 0xfffffff8}, {0x4, 0x9f0}], "8343"}, @fwd={0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x1, 0x3}, {0xc, 0x5}, {0x10}, {0x9, 0x1}]}]}, {0x0, [0x61, 0x0, 0x5f]}}, &(0x7f0000000600)=""/47, 0xf1, 0x2f, 0x0, 0x2, 0x10000, @value=r9}, 0x28)
writev(r0, &(0x7f00000027c0)=[{&(0x7f0000002480)="c050e9380bdbe29e5abb9a861e1e241147ada8e424a7ca03b2a902c80575f815df2f4e641c9a469766799196579fea5c587bcf2517c4c10d81e69c397da49db9c812d39ea4ecaeb3ac8f33f6cffc1f479bace7fb9c5e54a27c62c2b89608cb1f93a63465740a18a497849428ce7d487469f5b60ab93a4a1e7f109bd88f94d9b9d24d9806876e2e116d0cc3d718103bba3b2a4c4ec5fc81d7525d720eaccac223e6b2bd3d4d39dd4dd0a41f29b3beca5cd2bf0a98e6", 0xb5}, {&(0x7f0000002540)="e32d7d6aceb0c8b66d1f83c8e7be80ad6a6a978f8bfc0ac94101590bc83c", 0x1e}, {&(0x7f0000002580)="63bb465749e646d945dafd4d83a8c85324c13cee582dbbd360e60601cf05130bdbdad6eb28f7b1f1cd8b9a825b5943d9149c1ec5d28940a23116d27aca9b3b4971581a176a0e9ca4996d311728ff5597f910d58315b669d2ff78e2bcfb882fda92b50112fd75c2b844182a8df60f220c85e3a750f0fd27eb6e5d2621", 0x7c}, {&(0x7f0000002600)="b0bc59f5387fa8b4e9f8f882d7aa843ce2242fe5a7dac9e33cabd941e02c4f84659f4308bfc0ffb85514c6a56d4d1cba4333f4a043cbc7014ea46ca96f699c0dddc9abb80f3d0e99d0700dfd2343495f466088ab7ecda549a52aabf35f9a1ee80121faf35abc52913160463ba9b259b339ebb31c77ac47dad74a5cd98625a292192b6212b7349993b6fbb5825245543ac6c28d7112ce693173857f238f1eb2830adc6d9a99070430e90bc78effad7f7b38", 0xb1}, {&(0x7f00000026c0)="6c79a392de32ab8ebeccc9539711b7ec2e13298fc8e9cb40514506cb3e399b147c22516d6b949c35c4a4adde0c4e57b397f26796cef0de6995e79c1e5b7b1958a5d01272d09cf40e40ea1c961fe9fad1436da5bd78d4a769020391bc6d4b4377145c90ef6292dd1c29a1ae37e5e5ed345aa0efa8128b0ff5dc26c4b6fdf6369aa7a91d5734243ade692e5b9ea0e06d7144e1848f14224210961d1c489d11bf7ab42e84a945b76baa5b77e5c5c109191fb349ed38efd98f1ffd773fb56d9549c870a330bc86e86a0075f3d1d8c3d5c443b05066", 0xd3}], 0x5)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000002b40)={0xa, 0x4e21, 0xd1d5, @mcast1, 0x8}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000002b80)="46bf43f78db717329d5d0abe7e24306036ebeaf54433ecc50862a937d3cd5b7732bbcff8683a6a7d14cad9e27d339064c825058899f208039488a95263b1a8d7b386f303b38d82b21a610b9d19aa903c71915a8fb1f21071511f56cb2b07008045a6db4a6895b53c18496e1a548a4c45007f5a63e404189aadd8264960e92440b4f2bef8971003fa9a8b4c46b2a6c790aa0b2bf806a831", 0x97}, {&(0x7f0000002c40)="2abae8930766d701a4b0de6a2c5f2599c449403dd9d176b0765be5a38df66b203f9798f4190e710aae229aa730c302edea8d040e677b7ea135a44132f3dedb129f832844e53677adf38237efff6f70629b634a66578a95afc0231cf578c02f15f5a867b316780d7500c68e74ef18a1e391c089b2e6e48aea6d", 0x79}], 0x2, &(0x7f0000002d00)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x87, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002d40)="7794bc3746e55f42aa5a10bef605f30bd01fceb41711ec9f8caa662c9ead357ce86c668b3a9baed198a809c429dfe9bc2d5adffa97d950f00fecc80fe8a770e3027ea3503d4dbed515c4749f8ddb4948906948705a6aabccca22beaf5cedb04bad92d4e4641f7b64ddfad20171571055d37d378cfdf10306d81f66a8a8ad3732562c91bea724ac7b0fb0f3cb3c996b78e75ae13814c51efdd7", 0x99}, {&(0x7f0000002e00)="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", 0xfa}], 0x2, &(0x7f0000002fc0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x87, 0x6, 0x2, 0x7, 0x0, [@loopback, @private0, @remote]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x1, [0x3, 0x2, 0x9, 0x80]}}, @enc_lim={0x4, 0x1, 0xa}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], 0x100}}, {{&(0x7f00000030c0)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000003100)="aaf1321eccd4004efe75c8d268811e94e44dbe163bbbd10d60c09999c569036200deeaa9fb2bcbc807ec9c196a13a706e4105ce20bd8421385a0b0fd9eeed4bd0fa2ce0ab8ebc31f735b883813446a893ec5f496fffcb364dc3ef6bc5323e03ce4ee813475c35376ad41ebce1f15843308c97f706f09a1b4199dc482997efeacce05d0f5af45e1febcbd3e79e5a54bc89629ce3815f576d73cbe10bbb14d08f44408b9f00c16eaf8e1c6b057053df7d83ee9b74d42972d9c8df12e1d8258bfc10fa06b4915afc2ca5bf81c8577", 0xcd}], 0x1, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x3a, 0x1c, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x24, 0x25, [0x4fde, 0x2230, 0x9ccd, 0x8, 0x7, 0x0]}}, @generic={0x4d, 0xab, "63c95fd458807be6bc2c54e7d3ce233d1bf910c663412b3bf35ee70734b6f2dd7195eb06ce4170ffe468777181e61425fb715441f523dfb2ab6494ac8e0080e629dfba3dbbc981d7798f149acfd7ede49caf34495c089eda5d53c32462b1a4cfc2f0386c426102ec805dce5d12d0a4cfe4f1346cdc6227795cba1d8bf2b206ea88bcce3de833fa10f1a89c4d82ded97480130f03241bc6bfdfa22143f282d52a61807d2f87074c71c30a3e"}]}}}], 0x128}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000032c0)="4b753fbaca72e2d65f268acf9ae27f40a59f1027182349dc570a427f40e91182c8", 0x21}, {&(0x7f0000003300)="5e25022990561ce842bab2e16542019dacadcf79ff47357b63f9f4d585238278344df4c909cd5dcd4d06ecd38d679a6019a50ea69c32efc72f409a52e58fc59abc7c9b3793f76dfe3e46a001ee2d588f1a2182c19e876af7a9d3344024841f06c39ae9f89f9e33390414e205668db46e5a", 0x71}, {&(0x7f0000003380)="e23141759eeb86eb42eae421611a6782d0a6423cc1c57af8c6e39001ce27bb355c420adc6c20b50f9b514db7d8b8feffa6878eaf9798ab3c5b7d897302f7d0793e5673ad19514d9b", 0x48}, {&(0x7f0000003400)="ea5f6e94c42239b7d07c763ab7a938410e5453ee8e96532d612b42fb3646dd875a4ad09d09cfe9e24fc2a98a1b5b79b42439b49a094b234ff169e665ec097ded0388a341e0ac16228f0acf1a26d5987dfb4c68b21b29b00a", 0x58}], 0x4, &(0x7f0000000080)=[@dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@jumbo]}}}, @dontfrag={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x11, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xa9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3855}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x33, 0x1, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xa8}}], 0x4, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000003680))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP_VS_SO_GET_INFO(r10, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)

1.339185919s ago: executing program 2 (id=1528):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071103f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000030000000000000004000145008009886c64f6fcb5333c05f51300a2b899fd02cd2e7a24713ec63c3ec20c7ff2468dd250bc8cbfab4b326a588b00b2e761f6b072e520d2395e751624d0816c0a6a86a6749870d693a0a7bac7cb1ea9aa5de8480d0e455cf8cd127cd04d52bb34a0075ddb1d00"/132], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000001500000f0000000700000000006ef0a9f865573baed131e5e29c3cbb82b2a1646a5cc5c02f5da3a5c94cb0f9470bfe9e2ea4716ac95109ee34d97bde72e4f9b14af5c9753f81a39a5c69da38d54cc27661b4b81917c4d05d527c539ec1c9f401cb06125bc231e1968f1384509560fc02ded264d1ef1728660ebd02ca59f715ca0eb9f7626c4c7a23b8038f5cbf99c04dd64a2c4f47adebba40555880490d49a875cb6b534b0b4eeceeab93f86c238d7f8e8cf4a949a3b6bf448961"], 0xa8)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000180)={r0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4)
setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='test_pages_isolated\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r9)

1.159988861s ago: executing program 2 (id=1529):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0x1003, 0x84, 0x7, 0xfc, 0x90, "e758b24000", "39e80000000000000000e30300"})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

1.15948211s ago: executing program 0 (id=1530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x855}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

990.532879ms ago: executing program 2 (id=1531):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x100000000001f, &(0x7f0000000180)=0x1, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

990.187377ms ago: executing program 0 (id=1532):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0xa8b7c000)

986.742714ms ago: executing program 1 (id=1533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r4, 0x25, 0x8, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x20}}, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x7c, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r7=>0x0})
bind$can_raw(r5, &(0x7f0000000040), 0xffffffffffffff96)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80)

986.458359ms ago: executing program 0 (id=1534):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce)
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000400)
r4 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x80088a02, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) (async)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
unshare(0x20000400) (async)
epoll_create1(0x0) (async)
ioctl$FS_IOC_SETFLAGS(r4, 0x80088a02, &(0x7f0000000000)) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)

986.109482ms ago: executing program 2 (id=1535):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}}, 0x41)
r1 = socket(0x10, 0x803, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010100000000000000075ec2ab13bba5da000a0000000900020073797a300000000005000100"], 0x30}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

56.556498ms ago: executing program 2 (id=1536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) (async)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}]}}]}, 0x7c}}, 0x20040054) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r8, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000084010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000"], 0x23c}}, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=@flushsa={0x94, 0x1c, 0x311, 0x70bd2d, 0x25dfdbfc, {0x3c}, [@algo_auth={0x6b, 0x1, {{'tgr192-generic\x00'}, 0x118, "45e81451ed26543698e944f31302620f2ab175bcf3fac82b99bc735965b798556aca60"}}, @replay_thresh={0x8, 0xb, 0x9}, @policy_type={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80004}, 0x80) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async)
r10 = socket(0x10, 0x2, 0x0)
sendto$inet6(r10, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0200000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160005000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff)

56.233643ms ago: executing program 1 (id=1537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000040)=""/254, 0xfe}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x6}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4107, 0x100b}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000240)=""/101, 0x65}], 0x5, 0x0, 0x4000}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010060, 0x0)

611.24µs ago: executing program 2 (id=1538):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x6, 0x4)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
r6 = socket(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r6, 0x0, 0xb00, 0x48812, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x40101)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1334a}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x6, 0x3, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x65, 0x0, 0x7, 0x9167e0c99303165b, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @empty, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x1f, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @generic={0x89, 0x7, "704c1dae74"}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="020e0000180000000000000000000100030005000000000002000000ac1e0001000000000000000003000600ff0c00000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000100000006000000000000000000000000200000ff020000000000000000000000000001ffffffff00000000000000e86412470000000000f4943f19a43d2700000000000000000000000000000000000000000200000000000000"], 0xc0}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x8, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0xfffff800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xa}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

349.594µs ago: executing program 0 (id=1539):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x855}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

0s ago: executing program 1 (id=1540):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)})
socket$packet(0x11, 0x3, 0x300)
writev(r0, &(0x7f00000027c0)=[{&(0x7f0000002480)="c050e9380bdbe29e5abb9a861e1e241147ada8e424a7ca03b2a902c80575f815df2f4e641c9a469766799196579fea5c587bcf2517c4c10d81e69c397da49db9c812d39ea4ecaeb3ac8f33f6cffc1f479bace7fb9c5e54a27c62c2b89608cb1f93a63465740a18a497849428ce7d487469f5b60ab93a4a1e7f109bd88f94d9b9d24d9806876e2e116d0cc3d718103bba3b2a4c4ec5fc81d7525d720eaccac223e6b2bd3d4d39dd4dd0a41f29b3beca5cd2bf0a98e6", 0xb5}, {&(0x7f0000002540)="e32d7d6aceb0c8b66d1f83c8e7be80ad6a6a978f8bfc0ac94101590bc83c", 0x1e}, {&(0x7f0000002580)="63bb465749e646d945dafd4d83a8c85324c13cee582dbbd360e60601cf05130bdbdad6eb28f7b1f1cd8b9a825b5943d9149c1ec5d28940a23116d27aca9b3b4971581a176a0e9ca4996d311728ff5597f910d58315b669d2ff78e2bcfb882fda92b50112fd75c2b844182a8df60f220c85e3a750f0fd27eb6e5d2621", 0x7c}, {&(0x7f0000002600)="b0bc59f5387fa8b4e9f8f882d7aa843ce2242fe5a7dac9e33cabd941e02c4f84659f4308bfc0ffb85514c6a56d4d1cba4333f4a043cbc7014ea46ca96f699c0dddc9abb80f3d0e99d0700dfd2343495f466088ab7ecda549a52aabf35f9a1ee80121faf35abc52913160463ba9b259b339ebb31c77ac47dad74a5cd98625a292192b6212b7349993b6fbb5825245543ac6c28d7112ce693173857f238f1eb2830adc6d9a99070430e90bc78effad7f7b38", 0xb1}, {&(0x7f00000026c0)="6c79a392de32ab8ebeccc9539711b7ec2e13298fc8e9cb40514506cb3e399b147c22516d6b949c35c4a4adde0c4e57b397f26796cef0de6995e79c1e5b7b1958a5d01272d09cf40e40ea1c961fe9fad1436da5bd78d4a769020391bc6d4b4377145c90ef6292dd1c29a1ae37e5e5ed345aa0efa8128b0ff5dc26c4b6fdf6369aa7a91d5734243ade692e5b9ea0e06d7144e1848f14224210961d1c489d11bf7ab42e84a945b76baa5b77e5c5c109191fb349ed38efd98f1ffd773fb56d9549c870a330bc86e86a0075f3d1d8c3d5c443b05066", 0xd3}], 0x5)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r3])
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000003900)=[{&(0x7f0000000340)=@in6={0xa, 0x4e21, 0x285, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000240)="d10263c377f237", 0x7}], 0x1, &(0x7f0000000340)=ANY=[], 0x18, 0x5}], 0x1, 0x24040010)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000900000000000000008500000087000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4050)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
socket$kcm(0x2, 0xa, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37491' (ED25519) to the list of known hosts.
syzkaller login: [   48.714170][ T5780] cgroup: Unknown subsys name 'net'
[   48.826846][ T5780] cgroup: Unknown subsys name 'cpuset'
[   48.830919][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.734894][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.037262][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.043743][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.048239][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.051827][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.055659][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.086277][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.090297][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.095032][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.099586][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.103334][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.182439][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.187411][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.192848][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.215169][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.219177][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.384067][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.463270][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.515446][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.518469][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.521665][ T5848] bridge_slave_0: entered allmulticast mode
[   55.524960][ T5848] bridge_slave_0: entered promiscuous mode
[   55.529277][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.532065][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.534874][ T5848] bridge_slave_1: entered allmulticast mode
[   55.537861][ T5848] bridge_slave_1: entered promiscuous mode
[   55.608129][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.642340][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.677450][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.679917][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.682529][ T5852] bridge_slave_0: entered allmulticast mode
[   55.686249][ T5852] bridge_slave_0: entered promiscuous mode
[   55.698004][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.700327][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.703384][ T5852] bridge_slave_1: entered allmulticast mode
[   55.708772][ T5852] bridge_slave_1: entered promiscuous mode
[   55.712974][ T5848] team0: Port device team_slave_0 added
[   55.718738][ T5848] team0: Port device team_slave_1 added
[   55.725215][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   55.797539][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.800775][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.813207][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.822463][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.831449][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.841366][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.844562][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.855685][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.892340][ T5852] team0: Port device team_slave_0 added
[   55.919819][ T5852] team0: Port device team_slave_1 added
[   55.931760][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.934660][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.937055][ T5856] bridge_slave_0: entered allmulticast mode
[   55.940163][ T5856] bridge_slave_0: entered promiscuous mode
[   55.958954][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.961935][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.967406][ T5856] bridge_slave_1: entered allmulticast mode
[   55.970793][ T5856] bridge_slave_1: entered promiscuous mode
[   55.974173][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.976886][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.988775][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.020407][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.023188][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.032293][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.044549][ T5848] hsr_slave_0: entered promiscuous mode
[   56.047441][ T5848] hsr_slave_1: entered promiscuous mode
[   56.076462][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.081334][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.097789][ T5852] hsr_slave_0: entered promiscuous mode
[   56.100191][ T5852] hsr_slave_1: entered promiscuous mode
[   56.102939][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.105378][ T5852] Cannot create hsr debugfs directory
[   56.175463][ T5856] team0: Port device team_slave_0 added
[   56.200341][ T5856] team0: Port device team_slave_1 added
[   56.269709][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.272615][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.285215][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.302222][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.306927][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.318015][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.440889][ T5856] hsr_slave_0: entered promiscuous mode
[   56.444137][ T5856] hsr_slave_1: entered promiscuous mode
[   56.446720][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   56.449000][ T5856] Cannot create hsr debugfs directory
[   56.529392][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.554344][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.561741][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.595456][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.646716][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.659071][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.665948][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.676630][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.721721][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.730614][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.738171][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.755677][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.826779][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.853955][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.868326][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.870975][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.897348][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.900049][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.914426][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.945386][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.960439][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.963324][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.975965][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.978352][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.028761][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.075726][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   57.086601][  T998] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.089125][  T998] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.096049][  T998] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.098495][  T998] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.134944][   T54] Bluetooth: hci0: command tx timeout
[   57.134952][ T5235] Bluetooth: hci1: command tx timeout
[   57.175242][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.181312][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.210703][ T5852] veth0_vlan: entered promiscuous mode
[   57.223148][ T5852] veth1_vlan: entered promiscuous mode
[   57.260849][ T5848] veth0_vlan: entered promiscuous mode
[   57.270341][ T5852] veth0_macvtap: entered promiscuous mode
[   57.295990][ T5852] veth1_macvtap: entered promiscuous mode
[   57.301343][ T5235] Bluetooth: hci2: command tx timeout
[   57.305532][ T5848] veth1_vlan: entered promiscuous mode
[   57.336331][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.367482][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.389206][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.396491][ T5848] veth0_macvtap: entered promiscuous mode
[   57.401320][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.408929][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.423248][ T5848] veth1_macvtap: entered promiscuous mode
[   57.427951][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.462554][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.471216][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.497721][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.527854][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.548717][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.561733][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.568607][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.580534][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.590868][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.650199][  T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.662859][  T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.704085][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.712394][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.718150][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.729746][ T5856] veth0_vlan: entered promiscuous mode
[   57.761678][  T433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.764321][ T5856] veth1_vlan: entered promiscuous mode
[   57.769389][  T433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.820158][ T5856] veth0_macvtap: entered promiscuous mode
[   57.826388][ T5856] veth1_macvtap: entered promiscuous mode
[   57.863106][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.881623][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.906221][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.910538][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.927710][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.943642][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.087470][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.090795][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.145891][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.154977][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.247225][ T5934] Zero length message leads to an empty skb
[   58.262015][ T5934] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   58.313285][ T5942] netlink: 'syz.1.9': attribute type 3 has an invalid length.
[   58.390491][ T5947] netlink: 'syz.1.10': attribute type 3 has an invalid length.
[   58.399276][ T5947] netlink: 666 bytes leftover after parsing attributes in process `syz.1.10'.
[   58.404631][ T5947] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10'.
[   58.436315][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.507498][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   58.511623][ T5950] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   58.520956][ T5950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.601659][ T5958] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.604833][ T5958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'.
[   58.615794][ T5958] lo speed is unknown, defaulting to 1000
[   58.628002][ T5958] lo speed is unknown, defaulting to 1000
[   58.637893][ T5958] lo speed is unknown, defaulting to 1000
[   58.640004][ T5960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.680104][ T5961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.726983][ T5962] ieee802154 phy0 wpan0: encryption failed: -90
[   58.785117][ T5958] infiniband syz0: set active
[   58.788638][ T5897] lo speed is unknown, defaulting to 1000
[   58.791800][ T5958] infiniband syz0: added lo
[   58.824347][ T5958] RDS/IB: syz0: added
[   58.826965][ T5958] smc: adding ib device syz0 with port count 1
[   58.829996][ T5958] smc:    ib device syz0 port 1 has pnetid 
[   58.833185][ T5897] lo speed is unknown, defaulting to 1000
[   58.838626][ T5958] lo speed is unknown, defaulting to 1000
[   59.096657][ T5958] lo speed is unknown, defaulting to 1000
[   59.216951][ T5235] Bluetooth: hci1: command tx timeout
[   59.224464][ T5235] Bluetooth: hci0: command tx timeout
[   59.268044][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.284949][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   59.350278][ T5980] tipc: Started in network mode
[   59.352500][ T5980] tipc: Node identity fe0179ba167a, cluster identity 4711
[   59.358642][ T5980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.361482][ T5958] lo speed is unknown, defaulting to 1000
[   59.364177][ T5980] syzkaller0: entered promiscuous mode
[   59.366123][ T5980] syzkaller0: entered allmulticast mode
[   59.374071][ T5235] Bluetooth: hci2: command tx timeout
[   59.391315][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   59.422886][ T5984] tipc: Resetting bearer <eth:syzkaller0>
[   59.440075][ T5984] tipc: Disabling bearer <eth:syzkaller0>
[   59.600479][ T5991] netlink: 180 bytes leftover after parsing attributes in process `syz.0.23'.
[   59.804929][ T5997] syz.0.26 (5997) used greatest stack depth: 19000 bytes left
[   59.910614][ T6014] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.060325][ T6025] erspan1: entered promiscuous mode
[   60.135276][ T6029] Bluetooth: MGMT ver 1.23
[   60.188641][ T6032] tipc: Started in network mode
[   60.190460][ T6032] tipc: Node identity ea4e7162ff7f, cluster identity 4711
[   60.195820][ T6032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.199502][ T6032] syzkaller0: entered promiscuous mode
[   60.201737][ T6032] syzkaller0: entered allmulticast mode
[   60.218501][ T6032] tipc: Resetting bearer <eth:syzkaller0>
[   60.225303][ T6031] tipc: Resetting bearer <eth:syzkaller0>
[   60.234293][ T6031] tipc: Disabling bearer <eth:syzkaller0>
[   60.365628][ T5867] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.371130][ T5867] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.377436][ T5867] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.380760][ T5867] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.405322][ T6038] netlink: 'syz.0.38': attribute type 10 has an invalid length.
[   60.409203][ T6038] bond0: option arp_all_targets: invalid value (196616)
[   60.907076][ T6056] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   60.921022][ T5258] IPVS: starting estimator thread 0...
[   60.959732][ T6059] syzkaller0: entered promiscuous mode
[   60.962229][ T6059] syzkaller0: entered allmulticast mode
[   61.024299][ T6062] IPVS: using max 47 ests per chain, 112800 per kthread
[   61.072588][ T6074] nbd: illegal input index -1
[   61.293675][   T54] Bluetooth: hci1: command tx timeout
[   61.296297][ T5235] Bluetooth: hci0: command tx timeout
[   61.455123][ T5235] Bluetooth: hci2: command tx timeout
[   61.875122][ T6067] warning: `syz.2.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.317372][ T6120] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   62.320274][ T6028] IPVS: starting estimator thread 0...
[   62.339428][ T6124] lo speed is unknown, defaulting to 1000
[   62.393003][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.403656][ T6128] IPVS: using max 65 ests per chain, 156000 per kthread
[   62.536795][ T6137] dvmrp8: entered allmulticast mode
[   62.580795][ T6137] bridge_slave_0: left allmulticast mode
[   62.586859][ T6137] bridge_slave_0: left promiscuous mode
[   62.591940][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.602521][ T6137] bridge_slave_1: left allmulticast mode
[   62.609823][ T6137] bridge_slave_1: left promiscuous mode
[   62.612607][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.620451][ T6137] bond0: (slave bond_slave_0): Releasing backup interface
[   62.630973][ T6137] bond0: (slave bond_slave_1): Releasing backup interface
[   62.643002][ T6137] team0: Port device team_slave_0 removed
[   62.654133][ T6137] team0: Port device team_slave_1 removed
[   62.657733][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.660783][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.667288][ T6137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.670746][ T6137] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.690774][ T6131] lo speed is unknown, defaulting to 1000
[   62.709403][ T6136] dvmrp8: left allmulticast mode
[   63.341407][ T6171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.385816][   T54] Bluetooth: hci1: command tx timeout
[   63.388629][ T5235] Bluetooth: hci0: command tx timeout
[   63.535002][ T5235] Bluetooth: hci2: command tx timeout
[   63.640183][ T6189] netlink: 'syz.0.84': attribute type 1 has an invalid length.
[   63.712691][ T6189] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   63.810555][ T6193] lo speed is unknown, defaulting to 1000
[   63.871409][ T6201] netlink: 'syz.1.87': attribute type 178 has an invalid length.
[   63.943979][ T6206] block nbd0: NBD_DISCONNECT
[   63.961408][ T6206] team_slave_0: entered promiscuous mode
[   63.963588][ T6206] team_slave_1: entered promiscuous mode
[   63.965657][ T6206] macsec1: entered promiscuous mode
[   63.967478][ T6206] team0: entered promiscuous mode
[   64.038857][ T6208] __nla_validate_parse: 9 callbacks suppressed
[   64.038870][ T6208] netlink: 188 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.051273][ T6209] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.055590][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.055744][ T6208] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.082349][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.086646][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'.
[   64.258392][ T6223] lo speed is unknown, defaulting to 1000
[   64.261016][ T6223] lo speed is unknown, defaulting to 1000
[   64.270718][ T6223] lo speed is unknown, defaulting to 1000
[   64.278292][ T6223] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.286478][ T6223] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   64.354049][ T6223] lo speed is unknown, defaulting to 1000
[   64.368766][ T6223] lo speed is unknown, defaulting to 1000
[   64.372584][ T6223] lo speed is unknown, defaulting to 1000
[   64.520377][ T6245] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'.
[   64.531780][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'.
[   64.611799][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'.
[   64.630192][ T6253] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   64.735792][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   64.941883][ T6285] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   64.945667][ T6285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.110'.
[   65.382726][ T6322] netlink: 'syz.0.120': attribute type 10 has an invalid length.
[   65.390927][ T6322] netlink: 'syz.0.120': attribute type 10 has an invalid length.
[   65.409871][ T6322] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   65.431671][ T6322] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.436066][ T6322] IPv6: NLM_F_REPLACE set, but no existing node found!
[   65.454767][ T6326] : renamed from bond_slave_0 (while UP)
[   65.664268][ T6341] nbd0: detected capacity change from 0 to 549764202496
[   65.675030][ T6351] block nbd0: Receive control failed (result -32)
[   65.687113][ T5999] block nbd0: Dead connection, failed to find a fallback
[   65.689967][ T5999] block nbd0: shutting down sockets
[   65.692283][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.711972][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.720195][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.731304][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.736580][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.740291][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.744314][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.748283][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.751542][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.755692][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.759128][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.762782][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.766564][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.779305][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.782594][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.787087][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.790232][ T5999] ldm_validate_partition_table(): Disk read failed.
[   65.792915][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.796912][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.799934][ T5999] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   65.803282][ T5999] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.806968][ T5999] Dev nbd0: unable to read RDB block 0
[   65.813427][ T5999]  nbd0: unable to read partition table
[   65.836139][ T5999] ldm_validate_partition_table(): Disk read failed.
[   65.839262][ T5999] Dev nbd0: unable to read RDB block 0
[   65.841389][ T5999]  nbd0: unable to read partition table
[   65.967828][ T5258] IPVS: starting estimator thread 0...
[   66.054992][ T6375] IPVS: using max 57 ests per chain, 136800 per kthread
[   66.096845][ T6384] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   66.100009][ T6384] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'.
[   66.291525][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'.
[   66.413376][ T6406] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   66.530114][ T6420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.545664][ T6427] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   66.548265][ T6427] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   66.621810][ T6431] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   66.725990][ T6438] tipc: Started in network mode
[   66.727734][ T6438] tipc: Node identity , cluster identity 4711
[   66.729790][ T6438] tipc: Failed to obtain node identity
[   66.733135][ T6438] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.743196][ T6438] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   66.755266][ T6438] syzkaller0: entered promiscuous mode
[   66.757184][ T6438] syzkaller0: entered allmulticast mode
[   67.893795][ T6485] tipc: Started in network mode
[   67.895768][ T6485] tipc: Node identity 3eb3b4b8edf1, cluster identity 4711
[   67.902551][ T6485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.909939][ T6485] syzkaller0: entered promiscuous mode
[   67.911928][ T6485] syzkaller0: entered allmulticast mode
[   67.927816][ T6485] tipc: Resetting bearer <eth:syzkaller0>
[   67.938159][ T6483] tipc: Resetting bearer <eth:syzkaller0>
[   67.947737][ T6483] tipc: Disabling bearer <eth:syzkaller0>
[   68.003212][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.244577][ T6512] geneve3: entered promiscuous mode
[   68.246418][ T6512] geneve3: entered allmulticast mode
[   68.255817][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   68.259418][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   68.279814][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   68.307542][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   69.276117][ T6570] validate_nla: 5 callbacks suppressed
[   69.276127][ T6570] netlink: 'syz.1.190': attribute type 58 has an invalid length.
[   69.282436][ T6570] __nla_validate_parse: 16 callbacks suppressed
[   69.282445][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.190'.
[   69.371851][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   69.377062][ T6573] netlink: 'syz.1.191': attribute type 1 has an invalid length.
[   69.378612][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   69.381234][ T6573] netlink: 'syz.1.191': attribute type 2 has an invalid length.
[   69.384472][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'.
[   69.392434][ T6573] netlink: 80 bytes leftover after parsing attributes in process `syz.1.191'.
[   69.543716][ T6565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.188'.
[   69.555909][ T6587] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.631201][ T6597] dvmrp0: entered allmulticast mode
[   69.740831][ T6608] netlink: 108 bytes leftover after parsing attributes in process `syz.2.199'.
[   69.775295][ T6596] netlink: 'syz.0.196': attribute type 5 has an invalid length.
[   69.887951][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'.
[   70.082753][ T6622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.086468][ T6622] syzkaller0: entered promiscuous mode
[   70.088759][ T6622] syzkaller0: entered allmulticast mode
[   70.106826][ T6626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.206'.
[   70.130540][ T6622] tipc: Resetting bearer <eth:syzkaller0>
[   70.133093][ T6626] C: renamed from lo (while UP)
[   70.137859][ T6626] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   70.145541][ T6621] tipc: Resetting bearer <eth:syzkaller0>
[   70.160328][ T6621] tipc: Disabling bearer <eth:syzkaller0>
[   70.316627][ T6647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.211'.
[   70.513697][   T33] audit: type=1800 audit(1756817854.122:2): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.212" name="x000000000000000b00000000000000000000013" dev="tmpfs" ino=411 res=0 errno=0
[   70.524120][   T33] audit: type=1804 audit(1756817854.132:3): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.212" name="/newroot/77/x000000000000000b00000000000000000000013" dev="tmpfs" ino=411 res=1 errno=0
[   71.125281][ T6657] netlink: 'syz.2.215': attribute type 1 has an invalid length.
[   71.508201][ T6686] netlink: 'syz.1.224': attribute type 29 has an invalid length.
[   71.662573][ T6692] C speed is unknown, defaulting to 1000
[   71.751193][ T6692] lo speed is unknown, defaulting to 1000
[   71.898181][ T6710] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.075661][ T6719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.078864][ T6718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.082972][ T6719] syzkaller0: entered promiscuous mode
[   72.085911][ T6719] syzkaller0: entered allmulticast mode
[   72.187683][ T6717] tipc: Resetting bearer <eth:syzkaller0>
[   72.205020][ T6717] tipc: Disabling bearer <eth:syzkaller0>
[   72.463833][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.467144][ T6751] syzkaller0: entered promiscuous mode
[   72.469649][ T6751] syzkaller0: entered allmulticast mode
[   72.487174][ T6755] syzkaller1: entered promiscuous mode
[   72.489295][ T6755] syzkaller1: entered allmulticast mode
[   72.493905][ T6751] tipc: Resetting bearer <eth:syzkaller0>
[   72.498068][ T6750] tipc: Resetting bearer <eth:syzkaller0>
[   72.509354][ T6750] tipc: Disabling bearer <eth:syzkaller0>
[   72.672915][ T6769] netlink: 'syz.2.253': attribute type 58 has an invalid length.
[   72.869416][ T6791] IPVS: length: 49 != 24
[   73.126677][ T6819] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   73.319831][ T6839] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP)
[   73.561028][ T6855] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.609775][ T6859] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   73.835435][ T6874] netlink: 'syz.2.288': attribute type 21 has an invalid length.
[   73.850519][ T6874] ipvlan1: entered promiscuous mode
[   73.855215][ T6874] bridge0: port 3(ipvlan1) entered blocking state
[   73.858142][ T6874] bridge0: port 3(ipvlan1) entered disabled state
[   73.863124][ T6874] ipvlan1: entered allmulticast mode
[   73.867381][ T6874] gretap0: entered allmulticast mode
[   73.871579][ T6874] ipvlan1: left allmulticast mode
[   73.882615][ T6874] gretap0: left allmulticast mode
[   73.911077][ T6880] openvswitch: netlink: Flow actions attr not present in new flow.
[   74.059696][ T6888] netlink: 'syz.0.291': attribute type 1 has an invalid length.
[   74.349024][ T6922] netlink: 'syz.2.300': attribute type 2 has an invalid length.
[   74.352536][ T6922] netlink: 'syz.2.300': attribute type 8 has an invalid length.
[   74.356866][ T6922] __nla_validate_parse: 19 callbacks suppressed
[   74.356878][ T6922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.300'.
[   74.448796][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   74.518053][ T6938] bridge_slave_1: left allmulticast mode
[   74.519930][ T6938] bridge_slave_1: left promiscuous mode
[   74.521988][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.527632][ T6938] bridge_slave_0: left allmulticast mode
[   74.529954][ T6938] bridge_slave_0: left promiscuous mode
[   74.532379][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.589329][ T6949] IPVS: set_ctl: invalid protocol: 20334 10.1.1.0:20002
[   74.830007][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   74.833796][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[   74.846622][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   74.847037][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.850366][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'.
[   74.858474][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.870338][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.877990][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.940602][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'.
[   75.028250][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[   75.032023][ T6987] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   75.135873][ T6994] netlink: 'syz.0.324': attribute type 4 has an invalid length.
[   75.293255][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.301896][ T6994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.400185][  T791] C speed is unknown, defaulting to 1000
[   75.402220][  T791] syz0: Port: 1 Link DOWN
[   75.413347][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.419259][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.432835][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   75.438611][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.442085][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.463551][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   75.471897][  T791] C speed is unknown, defaulting to 1000
[   75.471931][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.477759][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.493886][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   75.498354][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.501871][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.510891][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   75.548331][ T7016] netlink: 80 bytes leftover after parsing attributes in process `syz.1.327'.
[   75.574743][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'.
[   75.589629][ T7019] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.609727][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[   75.632951][   T13] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[   75.642687][   T13] bond0: (slave syz_tun): link status definitely down, disabling slave
[   75.652775][   T13] bond0: now running without any active interface!
[   75.864061][ T7041] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.990853][ T7045] netlink: 'syz.0.339': attribute type 4 has an invalid length.
[   76.042408][ T7045] netlink: 'syz.0.339': attribute type 9 has an invalid length.
[   76.689911][ T7061] syzkaller1: entered promiscuous mode
[   76.692192][ T7061] syzkaller1: entered allmulticast mode
[   76.697120][ T7061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.277281][ T7110] syzkaller0: entered promiscuous mode
[   77.279306][ T7110] syzkaller0: entered allmulticast mode
[   77.282193][ T7107] bond0: up delay (18673) is not a multiple of miimon (33271), value rounded to 0 ms
[   77.287462][ T7107] bond0: entered promiscuous mode
[   77.289701][ T7107] bond_slave_0: entered promiscuous mode
[   77.292527][ T7107] bond_slave_1: entered promiscuous mode
[   77.295901][ T7107] syz_tun: entered promiscuous mode
[   77.298695][ T7107] bond0: entered allmulticast mode
[   77.301055][ T7107] bond_slave_0: entered allmulticast mode
[   77.304129][ T7107] bond_slave_1: entered allmulticast mode
[   77.306678][ T7107] syz_tun: entered allmulticast mode
[   78.210373][ T7124] C speed is unknown, defaulting to 1000
[   78.231226][ T7130] vlan2: entered allmulticast mode
[   78.241068][ T7132] netlink: 'syz.0.367': attribute type 1 has an invalid length.
[   78.389711][ T7124] lo speed is unknown, defaulting to 1000
[   78.627355][ T7162] C speed is unknown, defaulting to 1000
[   78.763030][ T7162] lo speed is unknown, defaulting to 1000
[   78.847970][ T7176] netlink: 'syz.1.377': attribute type 3 has an invalid length.
[   79.788160][ T7194] __nla_validate_parse: 9 callbacks suppressed
[   79.788173][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.384'.
[   79.990849][ T7210] syzkaller1: entered promiscuous mode
[   79.996383][ T7210] syzkaller1: entered allmulticast mode
[   80.491940][ T7253] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[   80.527228][ T7253] bond3: (slave gretap2): making interface the new active one
[   80.531094][ T7253] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   80.546539][ T7245] C speed is unknown, defaulting to 1000
[   80.643777][ T7256] syzkaller0: entered promiscuous mode
[   80.648967][ T7256] syzkaller0: entered allmulticast mode
[   80.714503][ T7245] lo speed is unknown, defaulting to 1000
[   80.726520][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'.
[   81.298393][   T10] cfg80211: failed to load regulatory.db
[   81.762228][ T7291] netlink: 27 bytes leftover after parsing attributes in process `syz.1.408'.
[   81.774938][ T7291] netlink: 'syz.1.408': attribute type 30 has an invalid length.
[   81.836388][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'.
[   81.882850][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'.
[   81.885974][ T7295] netlink: 'syz.2.410': attribute type 18 has an invalid length.
[   81.892601][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'.
[   81.901021][ T7295] netlink: 'syz.2.410': attribute type 18 has an invalid length.
[   81.918654][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[   81.998731][ T7311] netlink: 'syz.2.415': attribute type 5 has an invalid length.
[   82.019350][ T7310] C speed is unknown, defaulting to 1000
[   82.046162][ T7317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.417'.
[   82.131350][ T7323] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   82.161344][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'.
[   82.327959][ T7310] lo speed is unknown, defaulting to 1000
[   82.329399][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   82.636138][ T7339] netlink: 'syz.1.424': attribute type 83 has an invalid length.
[   82.675629][ T5715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.680448][ T5715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.703813][ T6028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.333973][ T6028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.459775][ T6028] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.661730][ T7402] C speed is unknown, defaulting to 1000
[   83.826220][ T7402] lo speed is unknown, defaulting to 1000
[   84.377335][ T7423] xfrm1: entered promiscuous mode
[   84.379027][ T7423] xfrm1: entered allmulticast mode
[   84.555873][ T7430] can: request_module (can-proto-5) failed.
[   84.711551][ T7438] netlink: 'syz.0.451': attribute type 1 has an invalid length.
[   84.736802][ T7438] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.820331][ T7449] team0: Device gtp0 is of different type
[   84.846786][ T7456] ip6tnl2: entered promiscuous mode
[   84.849191][ T7456] __nla_validate_parse: 11 callbacks suppressed
[   84.849200][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   84.855419][ T7458] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.860616][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[   84.863939][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[   84.864458][ T7458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'.
[   84.870200][ T7456] vlan3: entered promiscuous mode
[   84.873261][ T7456] bridge0: entered promiscuous mode
[   84.878488][ T7456] bridge0: port 1(vlan3) entered blocking state
[   84.880760][ T7456] bridge0: port 1(vlan3) entered disabled state
[   84.883809][ T7456] vlan3: entered allmulticast mode
[   84.886520][ T7456] bridge0: entered allmulticast mode
[   84.893348][ T7456] vlan3: left allmulticast mode
[   84.899601][ T7456] bridge0: left allmulticast mode
[   84.976178][ T7466] netlink: 'syz.2.458': attribute type 12 has an invalid length.
[   85.772424][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'.
[   85.855941][ T7493] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[   85.858919][ T7493] netlink: 176 bytes leftover after parsing attributes in process `syz.2.468'.
[   85.982068][ T7504] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   85.990616][ T7504] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   86.020645][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'.
[   86.059908][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'.
[   86.065379][ T7513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   86.077019][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'.
[   86.082006][ T7513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   86.743638][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.066660][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'.
[   87.204796][ T7565] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[   87.247477][ T7567] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[   87.251899][ T7567] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   87.461697][ T7586] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[   87.470055][ T7586] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   87.479189][ T7586] gretap1: entered promiscuous mode
[   88.415356][ T7597] vlan0: entered promiscuous mode
[   88.417733][ T7597] vlan0: entered allmulticast mode
[   88.419988][ T7597] veth0_vlan: entered allmulticast mode
[   88.430758][ T7600] vlan3: entered allmulticast mode
[   88.433378][ T7600] bridge0: entered allmulticast mode
[   88.437923][ T7600] bridge3: port 1(vlan3) entered blocking state
[   88.440784][ T7600] bridge3: port 1(vlan3) entered disabled state
[   88.445968][ T7600] vlan3: entered promiscuous mode
[   88.448113][ T7600] bridge0: entered promiscuous mode
[   88.459336][ T7603] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   89.007154][ T7650] syz_tun: entered allmulticast mode
[   89.014720][ T7650] dvmrp8: entered allmulticast mode
[   89.071910][ T7653] syz_tun: left allmulticast mode
[   89.074329][ T7653] dvmrp8: left allmulticast mode
[   89.642126][ T7665] tc_dump_action: action bad kind
[   89.668785][ T7669] netlink: 'syz.1.523': attribute type 10 has an invalid length.
[   89.672006][ T7669] team0: entered promiscuous mode
[   89.675204][ T7669] bridge0: port 1(team0) entered blocking state
[   89.677851][ T7669] bridge0: port 1(team0) entered disabled state
[   89.680382][ T7669] team0: entered allmulticast mode
[   89.956385][ T7679] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[   89.958935][ T7679] __nla_validate_parse: 10 callbacks suppressed
[   89.958942][ T7679] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.526'.
[   90.050504][ T7691] netlink: 'syz.0.531': attribute type 11 has an invalid length.
[   90.273227][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.538'.
[   90.276855][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.538'.
[   90.282634][ T7710] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   90.288322][ T7709] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   90.300484][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'.
[   90.362239][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.540'.
[   90.607227][ T7742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'.
[   90.885452][ T7763] netlink: 'syz.2.553': attribute type 13 has an invalid length.
[   90.888798][ T7763] netlink: 'syz.2.553': attribute type 17 has an invalid length.
[   90.944987][ T7763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.977967][ T7756] C speed is unknown, defaulting to 1000
[   91.031480][ T7763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.139957][ T7756] lo speed is unknown, defaulting to 1000
[   91.944098][ T7773] Bluetooth: hci2: Opcode 0x0401 failed: -4
[   91.947842][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'.
[   91.953084][ T7790] openvswitch: netlink: Flow actions attr not present in new flow.
[   92.014644][ T7793] netlink: 17 bytes leftover after parsing attributes in process `syz.0.566'.
[   92.225326][ T7820] bond0: left promiscuous mode
[   92.227122][ T7820] bond_slave_0: left promiscuous mode
[   92.229519][ T7820] bond_slave_1: left promiscuous mode
[   92.231804][ T7820] syz_tun: left promiscuous mode
[   92.236651][ T7820] bond0: left allmulticast mode
[   92.238722][ T7820] bond_slave_0: left allmulticast mode
[   92.240688][ T7820] bond_slave_1: left allmulticast mode
[   92.242900][ T7820] syz_tun: left allmulticast mode
[   92.332079][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.579'.
[   92.340196][ T7826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'.
[   92.820306][ T7848] !: renamed from dummy0
[   92.910568][ T7852] netlink: zone id is out of range
[   92.917186][ T7852] netlink: zone id is out of range
[   92.919677][ T7854] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   92.921383][ T7852] netlink: zone id is out of range
[   92.927469][ T7852] netlink: zone id is out of range
[   92.995797][ T7852] netlink: set zone limit has 4 unknown bytes
[   93.007800][ T7855] netlink: del zone limit has 4 unknown bytes
[   93.134042][ T5235] Bluetooth: hci2: command 0x0401 tx timeout
[   93.197895][ T7882] trusted_key: syz.1.595 sent an empty control message without MSG_MORE.
[   93.320504][ T7893] team0: left allmulticast mode
[   93.322317][ T7893] bridge0: port 1(team0) entered disabled state
[   93.378577][   T10] lo speed is unknown, defaulting to 1000
[   93.413960][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   93.511183][ T7899] tun0: tun_chr_ioctl cmd 1074025675
[   93.513568][ T7899] tun0: persist enabled
[   93.516814][ T7899] tun0: tun_chr_ioctl cmd 1074025675
[   93.518922][ T7899] tun0: persist disabled
[   93.795093][ T7905] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.797875][ T7905] syzkaller0: entered promiscuous mode
[   93.799794][ T7905] syzkaller0: entered allmulticast mode
[   93.806352][ T7905] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   93.845448][ T7905] tipc: Resetting bearer <eth:syzkaller0>
[   93.849095][ T7904] tipc: Resetting bearer <eth:syzkaller0>
[   93.859299][ T7904] tipc: Disabling bearer <eth:syzkaller0>
[   94.100502][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   94.147161][ T7912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.150663][ T7912] syzkaller0: entered promiscuous mode
[   94.153072][ T7912] syzkaller0: entered allmulticast mode
[   94.172160][ T7912] tipc: Resetting bearer <eth:syzkaller0>
[   94.185591][ T7911] tipc: Resetting bearer <eth:syzkaller0>
[   94.204805][ T7911] tipc: Disabling bearer <eth:syzkaller0>
[   94.466926][ T7943] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[   94.469496][ T7943] netlink: 'syz.0.613': attribute type 2 has an invalid length.
[   94.472099][ T7943] netlink: 'syz.0.613': attribute type 8 has an invalid length.
[   94.519562][ T7948] nbd: nbd0 already in use
[   94.692278][ T7955] delete_channel: no stack
[   94.776257][ T7957] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   94.989420][ T7971] __nla_validate_parse: 8 callbacks suppressed
[   94.989433][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[   95.033425][ T7976] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[   95.057921][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[   95.255766][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'.
[   95.362786][ T8004] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.634'.
[   95.373680][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   95.601480][ T8024] C speed is unknown, defaulting to 1000
[   95.605306][ T8026] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   95.617464][ T8026] syzkaller0: entered promiscuous mode
[   95.619997][ T8026] syzkaller0: entered allmulticast mode
[   95.832810][ T8027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.639'.
[   96.102254][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'.
[   96.217396][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[   96.519551][ T8024] lo speed is unknown, defaulting to 1000
[   96.629536][ T8039] netlink: 'syz.1.644': attribute type 4 has an invalid length.
[   96.665136][   T51] lo speed is unknown, defaulting to 1000
[   96.667262][   T51] syz1: Port: 1 Link DOWN
[   96.671985][ T8040] netlink: 256 bytes leftover after parsing attributes in process `syz.0.645'.
[   96.676232][ T8040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.645'.
[   96.875020][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'.
[   96.966056][ T8069] netlink: 'syz.0.655': attribute type 1 has an invalid length.
[   97.010972][ T8075] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.117179][ T8084] C speed is unknown, defaulting to 1000
[   97.202189][ T8084] lo speed is unknown, defaulting to 1000
[   97.636580][ T8109] syzkaller0: entered promiscuous mode
[   97.638838][ T8109] syzkaller0: entered allmulticast mode
[   98.687365][ T8139] netlink: 'syz.2.675': attribute type 8 has an invalid length.
[   98.697156][ T8139] bond0: entered promiscuous mode
[   98.699380][ T8139] : entered promiscuous mode
[   98.706194][ T8139] bond_slave_1: entered promiscuous mode
[   98.710650][ T8139] bond0: left promiscuous mode
[   98.712703][ T8139] : left promiscuous mode
[   98.722640][ T8139] bond_slave_1: left promiscuous mode
[   99.005185][ T8151] sock: sock_timestamping_bind_phc: sock not bind to device
[   99.134560][ T8157] block nbd2: NBD_DISCONNECT
[   99.342214][ T8175] syzkaller1: entered promiscuous mode
[   99.344537][ T8175] syzkaller1: entered allmulticast mode
[   99.348569][ T8175] syzkaller1: left promiscuous mode
[   99.350432][ T8175] syzkaller1: left allmulticast mode
[   99.691064][ T8192] netlink: 'syz.1.693': attribute type 1 has an invalid length.
[   99.885214][ T8220] team1: entered promiscuous mode
[   99.887617][ T8220] team1: entered allmulticast mode
[   99.889983][ T8220] 8021q: adding VLAN 0 to HW filter on device team1
[   99.950826][ T8222] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  100.109681][ T8228] __nla_validate_parse: 17 callbacks suppressed
[  100.109691][ T8228] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.707'.
[  100.156349][ T8237] netlink: 'syz.2.710': attribute type 7 has an invalid length.
[  100.186397][ T8237] : entered promiscuous mode
[  100.200293][ T8237] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  100.207506][ T8240] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  100.218023][ T8237] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.310256][ T8246] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.714'.
[  100.340750][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[  100.344926][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[  100.398958][   T33] audit: type=1804 audit(1756817884.012:4): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.713" name="/newroot/242/cgroup.controllers" dev="tmpfs" ino=1250 res=1 errno=0
[  100.407656][   T33] audit: type=1800 audit(1756817884.012:5): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.713" name="cgroup.controllers" dev="tmpfs" ino=1250 res=0 errno=0
[  100.433096][ T8256] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.716'.
[  100.497212][ T8263] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'.
[  100.500342][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'.
[  100.513343][ T8263] smc: removing ib device syz0
[  100.566076][ T8268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.570534][ T8268] veth0_to_bridge: entered promiscuous mode
[  100.579189][ T8268] veth0_to_bridge: entered allmulticast mode
[  100.776812][ T8271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'.
[  100.781374][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'.
[  100.788800][ T8271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.829819][ T8273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'.
[  100.900362][ T8262] tipc: Disabling bearer <eth:syzkaller0>
[  101.153392][ T8297] netlink: 'syz.2.730': attribute type 3 has an invalid length.
[  101.156476][ T8295] netlink: 'syz.0.732': attribute type 1 has an invalid length.
[  101.296423][ T5235] Bluetooth: hci2: command 0x0401 tx timeout
[  101.487741][ T8322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.492139][ T8322] tipc: Resetting bearer <eth:syzkaller0>
[  101.503266][ T5715] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.507758][ T5715] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.512202][ T5715] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.524589][ T8321] tipc: Disabling bearer <eth:syzkaller0>
[  101.531457][ T5715] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.642223][ T8326] lo speed is unknown, defaulting to 1000
[  101.646975][ T8332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.668834][ T8332] syzkaller0: entered promiscuous mode
[  101.671261][ T8332] syzkaller0: entered allmulticast mode
[  101.688927][ T8332] tipc: Resetting bearer <eth:syzkaller0>
[  101.713845][ T8331] tipc: Resetting bearer <eth:syzkaller0>
[  101.722959][ T8331] tipc: Disabling bearer <eth:syzkaller0>
[  101.784040][ T8337] netlink: 'syz.2.748': attribute type 10 has an invalid length.
[  101.791803][ T8337] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  102.950275][ T8365] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.061501][ T8383] netlink: 'syz.1.755': attribute type 7 has an invalid length.
[  103.069698][ T8383] netlink: 'syz.1.755': attribute type 8 has an invalid length.
[  103.168838][ T8393] netlink: 'syz.1.760': attribute type 10 has an invalid length.
[  103.218510][ T8393] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  103.298624][ T8405] netlink: 'syz.2.765': attribute type 11 has an invalid length.
[  103.676271][ T8438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.687037][ T8438] syzkaller0: entered promiscuous mode
[  103.689414][ T8438] syzkaller0: entered allmulticast mode
[  103.718525][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  103.742504][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  103.764605][ T8438] tipc: Disabling bearer <eth:syzkaller0>
[  103.903177][ T8465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.949080][ T8465] syzkaller0: entered promiscuous mode
[  103.951482][ T8465] syzkaller0: entered allmulticast mode
[  103.963740][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[  103.970036][ T8464] tipc: Resetting bearer <eth:syzkaller0>
[  104.965782][ T6028] tipc: Node number set to 3900406202
[  104.970272][ T8464] tipc: Disabling bearer <eth:syzkaller0>
[  104.977057][ T8472] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  104.979656][ T8472] netlink: 'syz.0.787': attribute type 2 has an invalid length.
[  105.424960][ T8510] __nla_validate_parse: 22 callbacks suppressed
[  105.424974][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.802'.
[  105.857994][ T8541] netlink: 'syz.0.814': attribute type 6 has an invalid length.
[  105.860894][ T8541] netlink: 'syz.0.814': attribute type 1 has an invalid length.
[  105.934756][ T8544] netlink: 'syz.0.815': attribute type 1 has an invalid length.
[  105.937761][ T8544] netlink: 224 bytes leftover after parsing attributes in process `syz.0.815'.
[  106.041361][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[  106.048064][ T8555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.055746][ T8555] syzkaller0: entered promiscuous mode
[  106.058165][ T8555] syzkaller0: entered allmulticast mode
[  106.086962][ T8555] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  106.117647][ T8555] tipc: Resetting bearer <eth:syzkaller0>
[  106.121412][ T8554] tipc: Resetting bearer <eth:syzkaller0>
[  106.137676][ T8554] tipc: Disabling bearer <eth:syzkaller0>
[  106.229891][ T8569] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  106.237369][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'.
[  106.257945][ T8571] block nbd0: NBD_DISCONNECT
[  106.263185][ T8571] block nbd0: Send disconnect failed -32
[  106.538870][ T8608] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.832'.
[  107.131658][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.836'.
[  107.275634][ T8644] openvswitch: netlink: Actions may not be safe on all matching packets
[  107.633156][ T8650] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[  107.636969][ T8650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.839'.
[  107.938005][ T8656] netlink: 112 bytes leftover after parsing attributes in process `syz.0.841'.
[  107.982925][ T8660] netlink: 3 bytes leftover after parsing attributes in process `syz.1.843'.
[  108.001506][ T8660] batadv1: entered promiscuous mode
[  108.005805][ T8660] batadv1: entered allmulticast mode
[  108.165497][ T8664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.174682][ T8664] syzkaller0: entered promiscuous mode
[  108.176865][ T8664] syzkaller0: entered allmulticast mode
[  108.202316][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  108.207226][ T8663] tipc: Resetting bearer <eth:syzkaller0>
[  108.218203][ T8663] tipc: Disabling bearer <eth:syzkaller0>
[  108.327358][ T8666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.362627][ T8666] syzkaller0: entered promiscuous mode
[  108.370219][ T8666] syzkaller0: entered allmulticast mode
[  108.388219][ T8666] tipc: Resetting bearer <eth:syzkaller0>
[  108.398366][ T8665] tipc: Resetting bearer <eth:syzkaller0>
[  109.352716][ T8665] tipc: Disabling bearer <eth:syzkaller0>
[  109.475069][ T8689] bridge0: port 1(erspan0) entered blocking state
[  109.478557][ T8689] bridge0: port 1(erspan0) entered disabled state
[  109.481130][ T8689] erspan0: entered allmulticast mode
[  109.485639][ T8689] erspan0: entered promiscuous mode
[  109.488838][ T8689] bridge0: port 1(erspan0) entered blocking state
[  109.491857][ T8689] bridge0: port 1(erspan0) entered forwarding state
[  109.506165][ T8689] erspan0: left allmulticast mode
[  109.508353][ T8689] erspan0: left promiscuous mode
[  109.516805][ T8689] bridge0: port 1(erspan0) entered disabled state
[  109.630294][ T8706] netlink: 256 bytes leftover after parsing attributes in process `syz.2.858'.
[  109.653431][ T8706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.691918][ T8709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.757134][ T8709] syzkaller0: entered promiscuous mode
[  109.759463][ T8709] syzkaller0: entered allmulticast mode
[  109.771835][ T8713] vlan2: entered allmulticast mode
[  109.797404][ T8709] tipc: Resetting bearer <eth:syzkaller0>
[  109.805339][ T8708] tipc: Resetting bearer <eth:syzkaller0>
[  109.976775][ T8724] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[  110.776048][ T8708] tipc: Disabling bearer <eth:syzkaller0>
[  110.786818][ T8725] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.817421][ T8733] syz_tun: refused to change device tx_queue_len
[  110.822499][ T8733] netlink: 'syz.2.865': attribute type 3 has an invalid length.
[  110.846637][ T8733] __nla_validate_parse: 3 callbacks suppressed
[  110.846652][ T8733] netlink: 13 bytes leftover after parsing attributes in process `syz.2.865'.
[  110.861630][ T8733] bond0: (slave netdevsim0): Releasing backup interface
[  110.876818][ T8733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  110.889684][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.867'.
[  110.889990][ T8739] netlink: 'syz.1.868': attribute type 5 has an invalid length.
[  111.095980][ T8760] netlink: 'syz.1.874': attribute type 1 has an invalid length.
[  111.100282][ T8760] netlink: 172 bytes leftover after parsing attributes in process `syz.1.874'.
[  111.138352][ T8764] ip6gre1: entered allmulticast mode
[  111.211055][ T8773] syzkaller1: entered allmulticast mode
[  111.370298][ T8786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.382479][ T8786] syzkaller0: entered promiscuous mode
[  111.389882][ T8786] syzkaller0: entered allmulticast mode
[  111.430200][ T8785] tipc: Resetting bearer <eth:syzkaller0>
[  111.446038][ T8785] tipc: Disabling bearer <eth:syzkaller0>
[  111.674647][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  111.678111][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'.
[  111.681229][ T8810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.681896][ T8811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.800644][ T8820] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[  111.804539][ T8820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.883'.
[  111.907642][ T8832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.944987][ T8833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.888'.
[  111.948453][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'.
[  111.957446][   T51] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  111.961113][   T51] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  111.964606][ T8832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.971666][ T1089] wlan1: authenticated
[  111.974336][ T1089] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  112.023176][ T1089] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  112.027652][ T8832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.030270][ T1089] wlan1: associated
[  112.138670][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'.
[  112.190467][ T8863] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.896'.
[  112.192409][ T8865] netlink: 'syz.1.897': attribute type 1 has an invalid length.
[  112.235745][ T8868] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  112.239947][ T8868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.271979][ T8873] netlink: 'syz.1.900': attribute type 1 has an invalid length.
[  112.277772][ T8873] netlink: 'syz.1.900': attribute type 1 has an invalid length.
[  112.436968][ T8885] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  112.458885][ T8884] netlink: 'syz.1.905': attribute type 1 has an invalid length.
[  112.608586][ T8902] openvswitch: netlink: Message has 1 unknown bytes.
[  112.611622][ T8902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.653765][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  112.757927][ T8919] openvswitch: netlink: Multiple metadata blocks provided
[  113.200807][ T8952] bridge0: entered promiscuous mode
[  113.608193][ T8978] syzkaller0: entered promiscuous mode
[  113.610239][ T8978] syzkaller0: entered allmulticast mode
[  113.612811][ T8980] netlink: 'syz.2.934': attribute type 1 has an invalid length.
[  113.639151][ T8980] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.668840][ T8980] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.671574][ T8980] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  113.676239][ T8980] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  113.706713][ T8982] bond2: (slave bridge3): Enslaving as an active interface with a down link
[  114.272613][ T8998] netlink: 'syz.1.941': attribute type 29 has an invalid length.
[  114.597949][ T9003] netlink: 'syz.0.942': attribute type 13 has an invalid length.
[  114.601171][ T9003] netlink: 'syz.0.942': attribute type 17 has an invalid length.
[  114.617565][ T9003] gretap0: refused to change device tx_queue_len
[  114.620069][ T9003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  114.787173][ T9018] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  114.792726][ T9018] netlink: 'syz.0.947': attribute type 10 has an invalid length.
[  115.269187][ T9045] syzkaller0: entered promiscuous mode
[  115.271311][ T9045] syzkaller0: entered allmulticast mode
[  115.279903][ T9045] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  115.909936][ T9051] __nla_validate_parse: 23 callbacks suppressed
[  115.909946][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'.
[  116.994024][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'.
[  117.020791][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.961'.
[  117.062030][ T9070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.966'.
[  117.091080][ T9070] netlink: 'syz.0.966': attribute type 4 has an invalid length.
[  117.175553][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.969'.
[  117.259261][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'.
[  117.265845][ T9094] openvswitch: netlink: Flow actions attr not present in new flow.
[  117.340290][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[  117.594782][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'.
[  117.598851][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'.
[  117.810805][ T9125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.817942][ T9125] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  117.832125][ T9125] syzkaller0: entered promiscuous mode
[  117.834941][ T9125] syzkaller0: entered allmulticast mode
[  117.848521][ T9125] tipc: Resetting bearer <eth:syzkaller0>
[  117.854596][ T9124] tipc: Resetting bearer <eth:syzkaller0>
[  118.592706][ T9127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  119.060201][ T9124] tipc: Disabling bearer <eth:syzkaller0>
[  119.076593][ T9139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.195141][ T9134] tipc: Disabling bearer <eth:syzkaller0>
[  119.582163][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.585556][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.588953][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.591829][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.597412][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.600325][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.603390][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.607999][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.671850][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'.
[  119.872285][ T9195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.880573][ T9195] syzkaller0: entered promiscuous mode
[  119.887578][ T9195] syzkaller0: entered allmulticast mode
[  119.897072][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.916827][ T9194] tipc: Resetting bearer <eth:syzkaller0>
[  119.945979][ T9194] tipc: Disabling bearer <eth:syzkaller0>
[  120.017014][ T9202] tc_dump_action: action bad kind
[  120.183128][ T9217] team0: left promiscuous mode
[  120.190004][ T9217] vlan0: left promiscuous mode
[  120.191827][ T9217] vlan0: left allmulticast mode
[  120.199801][ T9217] veth0_vlan: left allmulticast mode
[  120.203058][ T9217] erspan1: left promiscuous mode
[  120.215547][ T9217] xfrm1: left promiscuous mode
[  120.217925][ T9217] xfrm1: left allmulticast mode
[  120.223744][ T9217] ip6tnl2: left promiscuous mode
[  120.225872][ T9217] gretap1: left promiscuous mode
[  120.314058][ T9230] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.317645][ T9226] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  120.478553][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.491661][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.702810][ T9263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.707410][ T9263] syzkaller0: entered promiscuous mode
[  120.709446][ T9263] syzkaller0: entered allmulticast mode
[  120.732084][ T9263] tipc: Resetting bearer <eth:syzkaller0>
[  120.744532][ T9262] tipc: Resetting bearer <eth:syzkaller0>
[  120.759099][ T9262] tipc: Disabling bearer <eth:syzkaller0>
[  121.121852][ T9307] __nla_validate_parse: 7 callbacks suppressed
[  121.121867][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  121.194423][ T9301] block nbd0: server does not support multiple connections per device.
[  121.198663][ T9301] block nbd0: shutting down sockets
[  121.372390][ T9327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.379822][ T9327] syzkaller0: entered promiscuous mode
[  121.389267][ T9327] syzkaller0: entered allmulticast mode
[  121.450104][ T9334] sch_tbf: burst 127 is lower than device wg0 mtu (1420) !
[  121.475693][ T9334] tipc: Resetting bearer <eth:syzkaller0>
[  121.543279][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'.
[  121.564253][ T9346] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1042'.
[  121.711260][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'.
[  121.757627][ T9360] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  121.784048][ T9360] 8021q: adding VLAN 0 to HW filter on device bond3
[  121.795242][ T9360] ip6erspan0: entered promiscuous mode
[  121.855796][ T9366] netlink: 'syz.0.1049': attribute type 21 has an invalid length.
[  121.862213][ T9366] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1049'.
[  121.866810][ T9366] netlink: 'syz.0.1049': attribute type 5 has an invalid length.
[  121.870335][ T9366] netlink: 'syz.0.1049': attribute type 6 has an invalid length.
[  121.876423][ T9366] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1049'.
[  121.949474][ T9372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.953259][ T9372] syzkaller0: entered promiscuous mode
[  121.956235][ T9372] syzkaller0: entered allmulticast mode
[  121.970152][ T9372] tipc: Resetting bearer <eth:syzkaller0>
[  121.976270][ T9370] tipc: Resetting bearer <eth:syzkaller0>
[  122.001369][ T9370] tipc: Disabling bearer <eth:syzkaller0>
[  122.082160][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'.
[  122.147614][ T9386] netlink: 'syz.0.1058': attribute type 1 has an invalid length.
[  122.147752][ T9385] netlink: 'syz.0.1058': attribute type 1 has an invalid length.
[  122.177188][ T9386] 8021q: adding VLAN 0 to HW filter on device bond5
[  122.189720][ T9385] bond5: (slave gretap5): making interface the new active one
[  122.195266][ T9385] bond5: (slave gretap5): Enslaving as an active interface with an up link
[  122.199092][ T9324] tipc: Resetting bearer <eth:syzkaller0>
[  122.207403][ T9324] tipc: Disabling bearer <eth:syzkaller0>
[  122.229438][ T9386] macvlan2: entered promiscuous mode
[  122.231834][ T9386] macvlan2: entered allmulticast mode
[  122.235406][ T9386] bond5: entered promiscuous mode
[  122.237143][ T9386] gretap5: entered promiscuous mode
[  122.239204][ T9386] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  122.241951][ T9386] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  122.256360][ T9386] bond5: left promiscuous mode
[  122.257918][ T9386] gretap5: left promiscuous mode
[  122.278832][ T9385] macvlan2: entered promiscuous mode
[  122.280935][ T9385] macvlan2: entered allmulticast mode
[  122.283762][ T9385] bond5: entered promiscuous mode
[  122.285646][ T9385] gretap5: entered promiscuous mode
[  122.288437][ T9385] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  122.291749][ T9385] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  122.301238][ T9385] bond5: left promiscuous mode
[  122.305846][ T9385] gretap5: left promiscuous mode
[  122.312506][ T9392] netlink: 896 bytes leftover after parsing attributes in process `syz.1.1060'.
[  122.407894][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'.
[  122.408213][ T9398] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  122.420927][ T9401] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  122.567016][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'.
[  122.576281][ T9415] openvswitch: netlink: Flow actions attr not present in new flow.
[  122.695017][ T9421] netlink: 'syz.0.1067': attribute type 13 has an invalid length.
[  122.757234][ T9429] netlink: 'syz.1.1068': attribute type 1 has an invalid length.
[  122.782008][ T9431] syzkaller0: entered promiscuous mode
[  122.785902][ T9431] syzkaller0: entered allmulticast mode
[  122.894481][ T5235] Bluetooth: hci2: command 0x0401 tx timeout
[  122.952954][ T9446] vxcan1: entered allmulticast mode
[  122.966565][ T9446] vxcan1: left allmulticast mode
[  123.118890][ T9459] netlink: 'syz.0.1075': attribute type 11 has an invalid length.
[  123.132175][ T9461] netlink: 'syz.1.1076': attribute type 1 has an invalid length.
[  123.374612][ T9484] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  123.386619][ T9484] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  123.759709][ T9505] 8021q: adding VLAN 0 to HW filter on device bond6
[  123.827676][ T9505] bond6: (slave batadv3): Opening slave failed
[  123.868935][ T9509] bridge3: entered promiscuous mode
[  123.871280][ T9509] bridge3: entered allmulticast mode
[  124.172350][ T9531] lo speed is unknown, defaulting to 1000
[  124.549270][ T9558] gtp0: entered promiscuous mode
[  124.918993][ T9585] xt_policy: neither incoming nor outgoing policy selected
[  125.456754][ T5235] Bluetooth: hci0: command tx timeout
[  125.768523][ T9623] IPVS: Scheduler module ip_vs_sip not found
[  125.772583][ T9628] tc_dump_action: action bad kind
[  125.773320][ T9625] validate_nla: 3 callbacks suppressed
[  125.773332][ T9625] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  125.863995][ T9632] nbd: device at index 2 is going down
[  126.041076][ T9642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.078534][ T9642] syzkaller0: entered promiscuous mode
[  126.080614][ T9642] syzkaller0: entered allmulticast mode
[  126.093957][ T9642] tipc: Resetting bearer <eth:syzkaller0>
[  126.111070][ T9641] tipc: Resetting bearer <eth:syzkaller0>
[  126.264447][ T9653] __nla_validate_parse: 23 callbacks suppressed
[  126.264461][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1134'.
[  126.276561][ T9653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'.
[  127.099658][ T9641] tipc: Disabling bearer <eth:syzkaller0>
[  127.111453][ T9653] bridge0: port 1(vlan3) entered blocking state
[  127.113802][ T9653] bridge0: port 1(vlan3) entered disabled state
[  127.115883][ T9653] vlan3: entered allmulticast mode
[  127.117557][ T9653] bridge0: entered allmulticast mode
[  127.120874][ T9653] vlan3: left allmulticast mode
[  127.122986][ T9653] bridge0: left allmulticast mode
[  127.272564][ T9666] tipc: New replicast peer: 255.255.255.255
[  127.277402][ T9666] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.422992][ T9681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.438171][ T9681] syzkaller0: entered promiscuous mode
[  127.440534][ T9681] syzkaller0: entered allmulticast mode
[  127.460897][ T9681] tipc: Resetting bearer <eth:syzkaller0>
[  127.464869][ T9681] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  127.580169][ T9698] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1149'.
[  127.619996][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'.
[  127.640836][ T9680] tipc: Resetting bearer <eth:syzkaller0>
[  127.650408][ T9680] tipc: Disabling bearer <eth:syzkaller0>
[  127.665439][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'.
[  127.854636][ T9712] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.945804][ T9717] openvswitch: netlink: IP tunnel dst address not specified
[  127.956509][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'.
[  127.956522][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'.
[  128.086497][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'.
[  128.090024][ T9731] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001
[  128.093381][ T9728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.142882][ T9734] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  128.149919][ T9734] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  128.195225][ T9731] lo speed is unknown, defaulting to 1000
[  128.218588][ T9734] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1160'.
[  128.266142][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1162'.
[  128.287342][ T9731] lo speed is unknown, defaulting to 1000
[  128.410091][ T9731] lo speed is unknown, defaulting to 1000
[  128.517155][ T9731] lo speed is unknown, defaulting to 1000
[  128.619341][ T9731] lo speed is unknown, defaulting to 1000
[  128.735637][ T9731] lo speed is unknown, defaulting to 1000
[  128.822613][ T9731] lo speed is unknown, defaulting to 1000
[  128.899192][ T9731] lo speed is unknown, defaulting to 1000
[  129.009130][ T9772] netlink: 'syz.0.1172': attribute type 11 has an invalid length.
[  129.447390][ T9792] lo speed is unknown, defaulting to 1000
[  129.672822][ T9811] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  130.274629][ T9861] openvswitch: netlink: Flow actions attr not present in new flow.
[  130.613389][ T9889] netlink: 'syz.1.1188': attribute type 1 has an invalid length.
[  130.767193][ T9902] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  130.773157][ T9902] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  130.786560][ T9902] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  131.017280][ T9918] syzkaller0: entered promiscuous mode
[  131.027678][ T9918] syzkaller0: entered allmulticast mode
[  131.165098][ T9928] openvswitch: netlink: Flow actions attr not present in new flow.
[  131.570532][ T9945] __nla_validate_parse: 6 callbacks suppressed
[  131.570546][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  132.619215][ T9953] netlink: 'syz.2.1201': attribute type 1 has an invalid length.
[  132.622377][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1201'.
[  132.681686][ T9962] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1205'.
[  132.696643][ T9961] batadv_slave_1: entered promiscuous mode
[  132.705838][ T9959] batadv_slave_1: left promiscuous mode
[  132.794179][ T9976] C: renamed from lo (while UP)
[  132.807499][ T9976] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  132.855359][   T33] audit: type=1800 audit(1756817916.462:6): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1210" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2100 res=0 errno=0
[  132.879451][ T9983] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  132.903251][ T9983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.911529][ T9983] syzkaller0: entered promiscuous mode
[  132.914511][ T9983] syzkaller0: entered allmulticast mode
[  132.927985][ T9983] tipc: Resetting bearer <eth:syzkaller0>
[  132.933286][ T9982] tipc: Resetting bearer <eth:syzkaller0>
[  132.948108][ T9982] tipc: Disabling bearer <eth:syzkaller0>
[  132.951792][ T9989] netlink: 'syz.2.1215': attribute type 1 has an invalid length.
[  132.966265][ T9989] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1215'.
[  133.185043][T10001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.189440][T10001] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  133.204844][T10001] syzkaller0: entered promiscuous mode
[  133.206678][T10001] syzkaller0: entered allmulticast mode
[  133.211412][T10001] tipc: Resetting bearer <eth:syzkaller0>
[  133.214958][T10000] tipc: Resetting bearer <eth:syzkaller0>
[  134.196134][ T5911] tipc: Node number set to 355561826
[  134.232592][T10000] tipc: Disabling bearer <eth:syzkaller0>
[  134.339146][T10014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1222'.
[  134.386171][T10020] ;: renamed from vxcan1
[  134.433193][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1221'.
[  134.452961][T10025] syzkaller1: entered allmulticast mode
[  134.557919][T10034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.722337][T10043] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  134.728664][T10042] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  134.732437][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'.
[  134.954793][T10049] openvswitch: netlink: Flow actions attr not present in new flow.
[  135.062881][T10058] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1237'.
[  135.082480][T10060] netlink: 'syz.0.1238': attribute type 1 has an invalid length.
[  135.136825][T10058] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.257515][T10077] netlink: 'syz.1.1243': attribute type 21 has an invalid length.
[  135.261063][T10077] netlink: 'syz.1.1243': attribute type 22 has an invalid length.
[  135.266925][T10077] netlink: 'syz.1.1243': attribute type 23 has an invalid length.
[  135.270167][T10077] netlink: 'syz.1.1243': attribute type 25 has an invalid length.
[  135.277925][T10077] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1243'.
[  135.289130][T10079] openvswitch: netlink: Flow actions attr not present in new flow.
[  136.140309][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  136.433156][T10114] syzkaller1: entered promiscuous mode
[  136.435743][T10114] syzkaller1: entered allmulticast mode
[  136.667165][T10120] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1255'.
[  136.740232][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'.
[  137.438804][T10140] netlink: 'syz.2.1262': attribute type 11 has an invalid length.
[  137.518250][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  137.524618][T10145] bridge_slave_1: left allmulticast mode
[  137.527504][T10145] bridge_slave_1: left promiscuous mode
[  137.530774][T10145] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.540560][T10145] bridge_slave_0: left promiscuous mode
[  137.543098][T10145] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.555685][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1264'.
[  137.627059][T10149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  137.829006][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1265'.
[  137.911985][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'.
[  137.916931][T10166] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.921041][T10166] netlink: 'syz.0.1269': attribute type 1 has an invalid length.
[  137.939228][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'.
[  138.008116][T10162] openvswitch: netlink: Flow key attr not present in new flow.
[  138.042557][T10173] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1270'.
[  138.208550][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'.
[  138.298741][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  138.736418][T10215] netlink: 'syz.0.1283': attribute type 11 has an invalid length.
[  139.054110][T10231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.067056][T10231] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  139.079006][T10231] syzkaller0: entered promiscuous mode
[  139.081417][T10231] syzkaller0: entered allmulticast mode
[  139.092314][T10231] syzkaller0: mtu greater than device maximum
[  139.102223][T10230] tipc: Resetting bearer <eth:syzkaller0>
[  139.378565][T10244] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  140.360067][T10230] tipc: Disabling bearer <eth:syzkaller0>
[  140.498563][T10260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.501927][T10260] syzkaller0: entered promiscuous mode
[  140.505045][T10260] syzkaller0: entered allmulticast mode
[  140.525093][T10260] tipc: Resetting bearer <eth:syzkaller0>
[  140.530467][T10259] tipc: Resetting bearer <eth:syzkaller0>
[  140.553304][T10259] tipc: Disabling bearer <eth:syzkaller0>
[  140.667240][T10273] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.847864][T10285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.910624][T10285] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  140.930254][T10285] syzkaller0: entered promiscuous mode
[  140.932411][T10285] syzkaller0: entered allmulticast mode
[  140.977227][T10285] syzkaller0: mtu greater than device maximum
[  140.980773][T10284] tipc: Resetting bearer <eth:syzkaller0>
[  141.956733][ T5897] tipc: Node number set to 3544364216
[  142.018078][T10284] tipc: Disabling bearer <eth:syzkaller0>
[  142.155616][T10319] __nla_validate_parse: 8 callbacks suppressed
[  142.155630][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  142.177528][T10321] netlink: 'syz.1.1313': attribute type 4 has an invalid length.
[  142.184525][ T5897] lo speed is unknown, defaulting to 1000
[  142.186577][ T5897] syz1: Port: 1 Link ACTIVE
[  142.227315][T10326] netlink: zone id is out of range
[  142.229428][T10326] netlink: zone id is out of range
[  142.231525][T10326] netlink: zone id is out of range
[  142.234406][T10326] netlink: zone id is out of range
[  142.239560][T10326] netlink: zone id is out of range
[  142.241389][T10326] netlink: zone id is out of range
[  142.246511][T10326] netlink: zone id is out of range
[  142.248615][T10326] netlink: zone id is out of range
[  142.300128][T10329] bond0: (slave syz_tun): Releasing backup interface
[  142.307078][T10329] bond0: (slave bond_slave_0): Releasing backup interface
[  142.311755][T10329] bond0: (slave bond_slave_1): Releasing backup interface
[  142.318762][T10329] team_slave_0: left promiscuous mode
[  142.323027][T10329] team0: Port device team_slave_0 removed
[  142.328132][T10329] team_slave_1: left promiscuous mode
[  142.331050][T10329] team0: Port device team_slave_1 removed
[  142.335196][T10329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.338684][T10329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.343424][T10329] bond1: (slave ip6gretap1): Releasing backup interface
[  142.352207][T10329] bond3: (slave gretap2): Releasing active interface
[  142.356901][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'.
[  142.359508][T10329] vlan3: left promiscuous mode
[  142.362518][T10329] bridge0: left promiscuous mode
[  142.368067][T10329] bridge3: port 1(vlan3) entered disabled state
[  142.376822][T10329] bond5: (slave gretap5): Releasing active interface
[  142.471393][T10333] netlink: 'syz.0.1319': attribute type 4 has an invalid length.
[  142.474812][T10333] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1319'.
[  142.751472][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'.
[  142.997794][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1326'.
[  143.011793][    C0] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82
[  143.080274][T10360] netlink: 'syz.1.1329': attribute type 21 has an invalid length.
[  143.086484][T10361] netlink: 'syz.1.1329': attribute type 21 has an invalid length.
[  143.360195][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'.
[  143.377715][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'.
[  143.384900][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'.
[  143.539011][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1335'.
[  143.705577][T10385] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1336'.
[  143.991806][T10396] infiniband syz0: set down
[  143.993755][T10396] infiniband syz0: added veth1_to_hsr
[  144.038710][T10396] RDS/IB: syz0: added
[  144.040378][T10396] smc: adding ib device syz0 with port count 1
[  144.049713][T10396] smc:    ib device syz0 port 1 has pnetid 
[  144.096773][T10397] sctp: [Deprecated]: syz.0.1339 (pid 10397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.096773][T10397] Use struct sctp_sack_info instead
[  144.297394][T10424] netlink: 'syz.2.1344': attribute type 1 has an invalid length.
[  144.339393][T10422] Driver unsupported XDP return value 0 on prog  (id 382) dev N/A, expect packet loss!
[  144.826432][T10454] netlink: 'syz.0.1354': attribute type 3 has an invalid length.
[  144.841438][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.900457][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.911370][T10456] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  144.917240][T10456] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  144.956340][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.021053][T10460] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  145.245415][T10478] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  145.360490][T10484] netlink: 'syz.2.1363': attribute type 1 has an invalid length.
[  145.883135][T10519] lo speed is unknown, defaulting to 1000
[  145.931359][T10523] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000
[  146.062951][T10527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.228984][T10526] tipc: Disabling bearer <eth:syzkaller0>
[  146.451942][T10553] net_ratelimit: 39 callbacks suppressed
[  146.451952][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.549527][ T5911] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  146.556321][ T5911] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  146.559119][ T5911] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[  146.568680][ T5911] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  146.777681][T10590] openvswitch: netlink: Flow actions attr not present in new flow.
[  147.516262][T10660] __nla_validate_parse: 17 callbacks suppressed
[  147.516272][T10660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1412'.
[  147.576253][ T5867] tipc: Subscription rejected, illegal request
[  147.611064][T10673] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1417'.
[  147.689310][T10681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.697406][T10678] tipc: Disabling bearer <eth:syzkaller0>
[  147.888357][T10694] netlink: 'syz.0.1426': attribute type 10 has an invalid length.
[  147.896839][T10694] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1426'.
[  147.904483][T10694] 8021q: adding VLAN 0 to HW filter on device team0
[  147.911208][T10694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1426'.
[  147.939045][T10697] raw_sendmsg: syz.1.1427 forgot to set AF_INET. Fix it!
[  148.042792][T10707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1431'.
[  148.056512][T10705] batadv1: entered allmulticast mode
[  148.059950][T10705] 8021q: adding VLAN 0 to HW filter on device batadv1
[  148.063212][T10707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1431'.
[  148.223997][T10720] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1437'.
[  148.229493][T10720] netlink: 'syz.1.1437': attribute type 1 has an invalid length.
[  148.325935][T10724] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1438'.
[  148.329352][T10724] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1438'.
[  148.461039][T10740] lo speed is unknown, defaulting to 1000
[  148.648246][T10760] netlink: 'syz.2.1450': attribute type 3 has an invalid length.
[  148.651164][T10760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1450'.
[  148.711810][T10766] netlink: 'syz.2.1453': attribute type 2 has an invalid length.
[  148.719467][T10767] netlink: 'syz.2.1453': attribute type 2 has an invalid length.
[  148.731925][T10766] : entered promiscuous mode
[  148.737316][T10768] syzkaller1: entered promiscuous mode
[  148.739697][T10768] syzkaller1: entered allmulticast mode
[  148.763444][T10740] netlink: 'syz.0.1444': attribute type 1 has an invalid length.
[  148.766730][T10740] netlink: 'syz.0.1444': attribute type 2 has an invalid length.
[  148.901570][T10777] x9: renamed from bridge_slave_0
[  149.177425][T10795] dvmrp8: entered allmulticast mode
[  149.258630][T10795] lo speed is unknown, defaulting to 1000
[  149.739984][T10844] netlink: 'syz.0.1476': attribute type 23 has an invalid length.
[  149.915529][T10852] team_slave_0: entered promiscuous mode
[  149.918174][T10852] team_slave_1: entered promiscuous mode
[  149.921076][T10852] macsec0: entered promiscuous mode
[  149.924015][T10852] team0: entered promiscuous mode
[  150.226900][T10876] netlink: 'syz.2.1486': attribute type 3 has an invalid length.
[  150.441238][T10889] netlink: 'syz.0.1492': attribute type 5 has an invalid length.
[  150.616390][T10907] netlink: 'syz.2.1497': attribute type 74 has an invalid length.
[  150.628973][T10907] syzkaller1: entered promiscuous mode
[  150.631603][T10907] syzkaller1: entered allmulticast mode
[  150.964390][T10935] netlink: zone id is out of range
[  150.966881][T10935] netlink: zone id is out of range
[  150.969609][T10935] netlink: zone id is out of range
[  150.972947][T10935] netlink: zone id is out of range
[  151.005240][T10935] netlink: set zone limit has 4 unknown bytes
[  151.012653][T10935] netlink: del zone limit has 4 unknown bytes
[  151.468616][T10976] bridge0: port 1(erspan0) entered blocking state
[  151.471066][T10976] bridge0: port 1(erspan0) entered disabled state
[  151.473340][T10976] erspan0: entered allmulticast mode
[  151.477080][T10976] erspan0: entered promiscuous mode
[  151.481463][T10976] erspan0: left allmulticast mode
[  151.484243][T10976] erspan0: left promiscuous mode
[  151.485975][T10976] bridge0: port 1(erspan0) entered disabled state
[  151.806345][T10992] macvlan2: entered promiscuous mode
[  151.808893][T10992] macvlan2: entered allmulticast mode
[  151.812398][T10992] bond7: (slave macvlan2): Opening slave failed
[  151.828311][T10993] macvlan2: entered promiscuous mode
[  151.830266][T10993] macvlan2: entered allmulticast mode
[  151.832651][T10993] bond7: (slave macvlan2): Opening slave failed
[  151.995972][T11006] syzkaller1: entered promiscuous mode
[  151.998154][T11006] syzkaller1: entered allmulticast mode
[  152.827812][T11006] gretap0: refused to change device tx_queue_len
[  152.831488][T11006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  152.939871][T11027] ==================================================================
[  152.942627][T11027] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  152.945758][T11027] Read of size 1 at addr ffff888119fb47b0 by task syz.2.1538/11027
[  152.949728][T11027] 
[  152.950608][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.2.1538 Not tainted syzkaller #0 PREEMPT(full) 
[  152.950617][T11027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.950622][T11027] Call Trace:
[  152.950626][T11027]  <TASK>
[  152.950630][T11027]  dump_stack_lvl+0x189/0x250
[  152.950642][T11027]  ? __kasan_check_byte+0x12/0x40
[  152.950653][T11027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.950662][T11027]  ? lock_release+0x4b/0x3e0
[  152.950673][T11027]  ? __virt_addr_valid+0x4a5/0x5c0
[  152.950682][T11027]  print_report+0xca/0x240
[  152.950689][T11027]  ? xfrm_state_find+0x2cf2/0x5400
[  152.950697][T11027]  kasan_report+0x118/0x150
[  152.950706][T11027]  ? xfrm_state_find+0x2cf2/0x5400
[  152.950713][T11027]  xfrm_state_find+0x2cf2/0x5400
[  152.950720][T11027]  ? __lock_acquire+0xab9/0xd20
[  152.950730][T11027]  ? validate_chain+0x897/0x2140
[  152.950738][T11027]  ? xfrm_state_find+0x1da/0x5400
[  152.950745][T11027]  ? __pfx_xfrm_state_find+0x10/0x10
[  152.950755][T11027]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  152.950770][T11027]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  152.950780][T11027]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  152.950790][T11027]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  152.950801][T11027]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  152.950816][T11027]  ? xfrm_expand_policies+0x41f/0x6a0
[  152.950826][T11027]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  152.950836][T11027]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  152.950846][T11027]  xfrm_lookup_route+0x3c/0x1c0
[  152.950855][T11027]  raw_sendmsg+0x1039/0x18b0
[  152.950871][T11027]  ? __pfx_raw_sendmsg+0x10/0x10
[  152.950882][T11027]  ? aa_sk_perm+0x81e/0x950
[  152.950893][T11027]  ? __pfx_aa_sk_perm+0x10/0x10
[  152.950903][T11027]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  152.950911][T11027]  ? sock_rps_record_flow+0x19/0x410
[  152.950923][T11027]  ? inet_sendmsg+0x2f4/0x370
[  152.950931][T11027]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.950939][T11027]  __sock_sendmsg+0x19c/0x270
[  152.950950][T11027]  __sys_sendto+0x3bd/0x520
[  152.950957][T11027]  ? __pfx___sys_sendto+0x10/0x10
[  152.950963][T11027]  ? do_futex+0x395/0x420
[  152.950975][T11027]  ? rcu_is_watching+0x15/0xb0
[  152.950982][T11027]  __x64_sys_sendto+0xde/0x100
[  152.950989][T11027]  do_syscall_64+0xfa/0x3b0
[  152.950999][T11027]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.951005][T11027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.951011][T11027]  ? exc_page_fault+0x9f/0xf0
[  152.951017][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.951024][T11027] RIP: 0033:0x7fcd0db8ebe9
[  152.951031][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.951037][T11027] RSP: 002b:00007fcd0e97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  152.951045][T11027] RAX: ffffffffffffffda RBX: 00007fcd0ddc5fa0 RCX: 00007fcd0db8ebe9
[  152.951050][T11027] RDX: 0000000000000b00 RSI: 0000000000000000 RDI: 0000000000000007
[  152.951054][T11027] RBP: 00007fcd0dc11e19 R08: 0000200000000000 R09: 0000000000000010
[  152.951058][T11027] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000
[  152.951062][T11027] R13: 00007fcd0ddc6038 R14: 00007fcd0ddc5fa0 R15: 00007ffcfe726818
[  152.951091][T11027]  </TASK>
[  152.951095][T11027] 
[  153.076735][T11027] Allocated by task 10649:
[  153.078727][T11027]  kasan_save_track+0x3e/0x80
[  153.080730][T11027]  __kasan_slab_alloc+0x6c/0x80
[  153.082730][T11027]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  153.084951][T11027]  xfrm_state_alloc+0x24/0x2f0
[  153.086896][T11027]  xfrm_add_acquire+0xf7/0xb20
[  153.088828][T11027]  xfrm_user_rcv_msg+0x7a3/0xab0
[  153.090837][T11027]  netlink_rcv_skb+0x208/0x470
[  153.092768][T11027]  xfrm_netlink_rcv+0x79/0x90
[  153.094685][T11027]  netlink_unicast+0x82f/0x9e0
[  153.096634][T11027]  netlink_sendmsg+0x805/0xb30
[  153.098567][T11027]  __sock_sendmsg+0x21c/0x270
[  153.100494][T11027]  ____sys_sendmsg+0x505/0x830
[  153.102458][T11027]  ___sys_sendmsg+0x21f/0x2a0
[  153.104374][T11027]  __x64_sys_sendmsg+0x19b/0x260
[  153.106391][T11027]  do_syscall_64+0xfa/0x3b0
[  153.108278][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.110763][T11027] 
[  153.111796][T11027] Freed by task 10649:
[  153.113485][T11027]  kasan_save_track+0x3e/0x80
[  153.115381][T11027]  kasan_save_free_info+0x46/0x50
[  153.117417][T11027]  __kasan_slab_free+0x5b/0x80
[  153.119326][T11027]  kmem_cache_free+0x18f/0x400
[  153.121279][T11027]  xfrm_add_acquire+0x280/0xb20
[  153.123291][T11027]  xfrm_user_rcv_msg+0x7a3/0xab0
[  153.125458][T11027]  netlink_rcv_skb+0x208/0x470
[  153.127572][T11027]  xfrm_netlink_rcv+0x79/0x90
[  153.129583][T11027]  netlink_unicast+0x82f/0x9e0
[  153.131541][T11027]  netlink_sendmsg+0x805/0xb30
[  153.133491][T11027]  __sock_sendmsg+0x21c/0x270
[  153.135432][T11027]  ____sys_sendmsg+0x505/0x830
[  153.137394][T11027]  ___sys_sendmsg+0x21f/0x2a0
[  153.139288][T11027]  __x64_sys_sendmsg+0x19b/0x260
[  153.141328][T11027]  do_syscall_64+0xfa/0x3b0
[  153.143175][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.145578][T11027] 
[  153.146584][T11027] The buggy address belongs to the object at ffff888119fb4480
[  153.146584][T11027]  which belongs to the cache xfrm_state of size 928
[  153.151780][T11027] The buggy address is located 816 bytes inside of
[  153.151780][T11027]  freed 928-byte region [ffff888119fb4480, ffff888119fb4820)
[  153.156282][T11027] 
[  153.157113][T11027] The buggy address belongs to the physical page:
[  153.159220][T11027] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888119fb4480 pfn:0x119fb4
[  153.162548][T11027] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  153.165474][T11027] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  153.168027][T11027] page_type: f5(slab)
[  153.169386][T11027] raw: 057ff00000000040 ffff88801bb2dc80 dead000000000122 0000000000000000
[  153.172231][T11027] raw: ffff888119fb4480 00000000800e000c 00000000f5000000 0000000000000000
[  153.175037][T11027] head: 057ff00000000040 ffff88801bb2dc80 dead000000000122 0000000000000000
[  153.177882][T11027] head: ffff888119fb4480 00000000800e000c 00000000f5000000 0000000000000000
[  153.180744][T11027] head: 057ff00000000002 ffffea000467ed01 00000000ffffffff 00000000ffffffff
[  153.183581][T11027] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  153.186413][T11027] page dumped because: kasan: bad access detected
[  153.188543][T11027] page_owner tracks the page as allocated
[  153.190531][T11027] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7656, tgid 7655 (syz.1.520), ts 89475884429, free_ts 89303948253
[  153.198157][T11027]  post_alloc_hook+0x240/0x2a0
[  153.200183][T11027]  get_page_from_freelist+0x21e4/0x22c0
[  153.202456][T11027]  __alloc_frozen_pages_noprof+0x181/0x370
[  153.204821][T11027]  alloc_pages_mpol+0x232/0x4a0
[  153.206806][T11027]  allocate_slab+0x8a/0x370
[  153.208662][T11027]  ___slab_alloc+0xbeb/0x1410
[  153.210599][T11027]  kmem_cache_alloc_noprof+0x283/0x3c0
[  153.212543][T11027]  xfrm_state_alloc+0x24/0x2f0
[  153.214273][T11027]  xfrm_add_sa+0x17d1/0x4070
[  153.216049][T11027]  xfrm_user_rcv_msg+0x7a3/0xab0
[  153.218031][T11027]  netlink_rcv_skb+0x208/0x470
[  153.219884][T11027]  xfrm_netlink_rcv+0x79/0x90
[  153.221618][T11027]  netlink_unicast+0x82f/0x9e0
[  153.223344][T11027]  netlink_sendmsg+0x805/0xb30
[  153.225040][T11027]  __sock_sendmsg+0x21c/0x270
[  153.226714][T11027]  ____sys_sendmsg+0x505/0x830
[  153.228324][T11027] page last free pid 0 tgid 0 stack trace:
[  153.230259][T11027]  __free_frozen_pages+0xbc4/0xd30
[  153.231955][T11027]  stack_depot_save_flags+0x436/0x860
[  153.233746][T11027]  kasan_save_track+0x4f/0x80
[  153.235363][T11027]  __kasan_slab_alloc+0x6c/0x80
[  153.236973][T11027]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  153.239150][T11027]  __alloc_skb+0x112/0x2d0
[  153.241052][T11027]  alloc_skb_with_frags+0xca/0x890
[  153.243254][T11027]  sock_alloc_send_pskb+0x857/0x990
[  153.245186][T11027]  __ip6_append_data+0x2b43/0x3f30
[  153.246838][T11027]  ip6_append_data+0x1c4/0x380
[  153.248434][T11027]  icmp6_send+0x1205/0x1940
[  153.249939][T11027]  ip6_link_failure+0x3b/0x4c0
[  153.251538][T11027]  ndisc_error_report+0x118/0x160
[  153.253224][T11027]  neigh_invalidate+0x235/0x460
[  153.254841][T11027]  neigh_timer_handler+0x949/0x1150
[  153.256569][T11027]  call_timer_fn+0x17e/0x5f0
[  153.258183][T11027] 
[  153.259033][T11027] Memory state around the buggy address:
[  153.260976][T11027]  ffff888119fb4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.263623][T11027]  ffff888119fb4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.266332][T11027] >ffff888119fb4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  153.268955][T11027]                                      ^
[  153.270819][T11027]  ffff888119fb4800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  153.273532][T11027]  ffff888119fb4880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  153.276187][T11027] ==================================================================
[  153.302972][T11032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.310248][T11027] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  153.313418][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.2.1538 Not tainted syzkaller #0 PREEMPT(full) 
[  153.317147][T11027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.321166][T11027] Call Trace:
[  153.322539][T11027]  <TASK>
[  153.323768][T11027]  dump_stack_lvl+0x99/0x250
[  153.325562][T11027]  ? __asan_memcpy+0x40/0x70
[  153.327564][T11027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.329953][T11027]  ? __pfx__printk+0x10/0x10
[  153.331978][T11027]  vpanic+0x281/0x750
[  153.333606][T11027]  ? preempt_schedule+0xae/0xc0
[  153.335385][T11027]  ? __pfx_vpanic+0x10/0x10
[  153.337116][T11027]  ? preempt_schedule_common+0x83/0xd0
[  153.339086][T11027]  ? preempt_schedule+0xae/0xc0
[  153.340724][T11027]  ? __pfx_preempt_schedule+0x10/0x10
[  153.342759][T11027]  panic+0xb9/0xc0
[  153.344208][T11027]  ? __pfx_panic+0x10/0x10
[  153.345900][T11027]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  153.347869][T11027]  ? xfrm_state_find+0x2cf2/0x5400
[  153.349717][T11027]  check_panic_on_warn+0x89/0xb0
[  153.351718][T11027]  ? xfrm_state_find+0x2cf2/0x5400
[  153.353694][T11027]  end_report+0x78/0x160
[  153.355341][T11027]  kasan_report+0x129/0x150
[  153.356900][T11027]  ? xfrm_state_find+0x2cf2/0x5400
[  153.358636][T11027]  xfrm_state_find+0x2cf2/0x5400
[  153.360356][T11027]  ? __lock_acquire+0xab9/0xd20
[  153.362040][T11027]  ? validate_chain+0x897/0x2140
[  153.363763][T11027]  ? xfrm_state_find+0x1da/0x5400
[  153.365595][T11027]  ? __pfx_xfrm_state_find+0x10/0x10
[  153.367498][T11027]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  153.369787][T11027]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  153.371904][T11027]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  153.374173][T11027]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  153.376331][T11027]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  153.378357][T11027]  ? xfrm_expand_policies+0x41f/0x6a0
[  153.380218][T11027]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  153.382083][T11027]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  153.384089][T11027]  xfrm_lookup_route+0x3c/0x1c0
[  153.385923][T11027]  raw_sendmsg+0x1039/0x18b0
[  153.387506][T11027]  ? __pfx_raw_sendmsg+0x10/0x10
[  153.389236][T11027]  ? aa_sk_perm+0x81e/0x950
[  153.390805][T11027]  ? __pfx_aa_sk_perm+0x10/0x10
[  153.392557][T11027]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  153.394796][T11027]  ? sock_rps_record_flow+0x19/0x410
[  153.396680][T11027]  ? inet_sendmsg+0x2f4/0x370
[  153.398290][T11027]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  153.400061][T11027]  __sock_sendmsg+0x19c/0x270
[  153.401729][T11027]  __sys_sendto+0x3bd/0x520
[  153.403315][T11027]  ? __pfx___sys_sendto+0x10/0x10
[  153.405179][T11027]  ? do_futex+0x395/0x420
[  153.406758][T11027]  ? rcu_is_watching+0x15/0xb0
[  153.408431][T11027]  __x64_sys_sendto+0xde/0x100
[  153.410086][T11027]  do_syscall_64+0xfa/0x3b0
[  153.411621][T11027]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.413361][T11027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.415629][T11027]  ? exc_page_fault+0x9f/0xf0
[  153.417267][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.419374][T11027] RIP: 0033:0x7fcd0db8ebe9
[  153.420917][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.427646][T11027] RSP: 002b:00007fcd0e97f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  153.431041][T11027] RAX: ffffffffffffffda RBX: 00007fcd0ddc5fa0 RCX: 00007fcd0db8ebe9
[  153.434141][T11027] RDX: 0000000000000b00 RSI: 0000000000000000 RDI: 0000000000000007
[  153.436753][T11027] RBP: 00007fcd0dc11e19 R08: 0000200000000000 R09: 0000000000000010
[  153.439696][T11027] R10: 0000000000048812 R11: 0000000000000246 R12: 0000000000000000
[  153.442372][T11027] R13: 00007fcd0ddc6038 R14: 00007fcd0ddc5fa0 R15: 00007ffcfe726818
[  153.445136][T11027]  </TASK>
[  153.447203][T11027] Kernel Offset: disabled
[  153.449091][T11027] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:58:56  Registers:
info registers vcpu 0

CPU#0
RAX=17f03b1d9f06b800 RBX=ffffffff819683c8 RCX=17f03b1d9f06b800 RDX=0000000000000001
RSI=ffffffff8d9b95c1 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555565a4e808 CR3=0000000020bc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f018ba12e53
XMM06=0000000000000000 00007f018ba12e4d XMM07=0000000000000000 00007f018ba12e61
XMM08=0000000000000000 00007f018ba12ee7 XMM09=0000000000000000 00007f018ba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001377 RDI=0000000000001378 RBP=00000000000003f8 RSP=ffffc9000328eb90
R8 =ffff888106a28237 R9 =1ffff11020d45046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b01907 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcd0e97f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcd0db74c40 CR3=0000000119ce8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fcd0e8fd100 00007fcd0dd97460 XMM05=00007fcd0dd97478 00007fcd0dd974c0
XMM06=00007fcd0dd974b8 00007fcd0dd974b0 XMM07=00007fcd0dd974a8 00007fcd0dd974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fcd0dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
