last executing test programs:

980.883065ms ago: executing program 1 (id=3423):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000020000000000000063014900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)

860.053281ms ago: executing program 1 (id=3427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030077797a32000000002800048008000240000000000800014000000005140003d3d9734ad9e04f406f5f687372000000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xe8}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
close(0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000140)="b2fa1aeb6e6b1f3d0a29edb2bb0a28df6845ef9407dac5f475d0eb0eed701588791e0c8925b2b9fe89b4a76a16ffe576e87ab8fab1a3b2c1a3738e9806062d89c51cca6a07a852c529b9007b9da15bd8bad889745951eff460af9464d1a20f3de6b1339bcecf2f9470ef77ba29dcad721d5967de941308749e5008b6f6394933b0ac1d8f72bca1de159b943d24ac14a6107f5530c60ed133d3ebe43be8fdd2a6", 0xfffffffffffffffd, 0x4}, 0x20)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "83edcec9f2ffbdaf61a8f96836d86074cb82773316fce4441cabf558643e5ca60b9a82c7f4edab133919e1956cbe1d627525b8276eb421aa907d45d3ec7a97057a4010061975b98a9bc6403ad7b2b1dcf10502b7a0ce4670f05f61abc3ba3db7854757cbd30115568a3dca26998ccf0bf0000ed211e468c32bb90881f2a5ddf0036e240157e69efc36da13b87755f692f580a3fc87f2e82ed865062f282a765bb9e7bb2f2704280978bf18e12dfb1c73a6ffdbc61c96e3fe8c9bdcbfed00b93171280c0841a0b214e336e0c455286823f6bb0bafd23f2c7e3a41b001854230f691c9e98deef5f300546dd1313e8fad9cb1dc89cf1c4d194326384e414fe437d4e03a210f12483b1d05b192b2a77598cbaee0019ae446356b4fb4569af0712013584a34da088b6c12591083ad8309d0e709c7a9cc43f2d9f4884a62266b493003813a2507fff8d0cc52b91d5e870168d353d46b9a3ace399ba2ae2887d5aa17919b9676af68eadacc46915419c6906badc3421d07d41004726855f3145154346fcd278aa3670b3a0cc275ce1d5bcd6279cd4e063d3d73f1ab571092e7f9877915ffd1fd8b85e921f974ab701bfe117eeafc818121e5233c9638de16981db76c26060325e754688d73ef7a5bb25702b44063c311e1bad5c89440e4a0eb3537cbe7a6fe972b8cdfae4763d755d2c98d4b8d624e2d1bb9b1ae8984ad5b0e82cfdf7e8f5ba740ac6f42acd0850272cfa2f0ad51decd8a4ff98b7ad35c156cad5688f966cb2930b65862ebe52356a58ad053b7df435dc8bd835eb9e0ff2da822ccd3280350e45cf502326a72ff73a5ab45979056184dadce078e07828e1baca541d6ebc1219d5d99f87e9a439b175e60361ee31312c98dab4c2ff6773be9b85823377748450a12f57f233d8b49ea5fd26eb7a995854ef95889b5cb8a0749bb97f3d3dcb9de5520b2f7fd8c72974b6a99aa636b1a01889e5acb5a1259d65733d53bc90431534c5423fa79c7d30204af25ecc25c2715d537ccbc2cb82cf8fb4d5735f3b7af87c469c858d2fe6e549d18402bc9c06749fb1e1d750d87ac6a067dfd3fe804741d7e5520e1ba26489d8e890a9f43857e6a22c4d68f6ecf47ad44ef7289d361d65ee70e2a010e6eb0b3216a94157a7fb5727afc70e3d69c2d9625dce7bbc6e481c8d04bbdb084b326b1316c38cf6985058d2001a90f4658a3c040c289e31a78cb782760f60a2494b91441c3213d0d85cbc2bc81a3cf64ce4f9a3507cf8049762d47ecd219185f8906fbe86dc1280a403ef1124d04cf74ac88ed6f56a9037238e4ba8d4df228560784a766d1bcffc726b125788fefec929f3b9a1f2114b13cfe0291b1f1893497a0a4adef1dc440e98c474f5b2165276ce11dc6175604595c9083b2b83d4206c9ee2efb15561bbaaec006b6c402dcb904290f013b96a0ba41c991", "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"}})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r5, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x2, 0x0, 0x0)
recvmsg(r5, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f0000003d40)=""/173, 0xad}], 0x1}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x74, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff3b92}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x35}, @NFULA_CFG_MODE={0xa, 0x2, {0x74ff, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40040c1}, 0x4000810)
syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r3)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00'})
bind$bt_rfcomm(r1, &(0x7f0000000480)={0x1f, @none, 0x5}, 0xa)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_macvtap\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x240448c5)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
pipe(&(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

768.745449ms ago: executing program 1 (id=3429):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001100)={<r2=>0x0, @remote, @local}, &(0x7f0000001140)=0xc)
sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="f6ce07acd9ab508d34ae030f1d5096e744215e58fb39a35bca38ae2eed0980de8fca2ccf04b45706ab56a107bb73f4e15e", 0x31}, {&(0x7f0000000280)="80fcfb4577acebc7ac475213dfa85bfb159439ff4a7eb30749aaea96cb9211827ed902fdb498e0d6499daaac79ae0f1ea7a538ad43d2475c05f5b860e809126a98030ef872602f672eb32cad9b84cadb1cac428f0466825c5af733efadf282cde9a876f6e6731299bc86afbd214af8fdcc017d6fb56c25d1368f07838605e4cad21cb4cc084c0707bba8bc1e29b146ee14af34c0359bd9d14cdfb275281953266d96e7ef9af72a956d2cb619cb0d624fd6d8b8ed92e8fbe5e677944670bc3c6a42f57b6c0d51562a0ea9fd9d3721a998e43570c063bc81a3ffdbc6fbd7560c9aa652", 0xe2}], 0x2, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x8, [{@multicast2, 0xfff}]}, @ssrr={0x89, 0xb, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="30292e7c640680a989c3ffd84860415125a92ad470591eb6cbd4947448fbe621096f74206e3e588da4bf3578e0519a287895fad140063e4d27934d67e2b7d26a3f83e8a14107a36b0f5f82dd835b78518573be838ce772f52b1054ee20ead76ad330b9eaeec7783839783ea64a4644554051701a0b4cb16dc5fddd8b547a0d65d1572375a5377b877eff02166d8354c22d102a36587bcc584794d849c69cec00ff3451da9d6108d0b5d5288cf4a3748e880b3d9c972657c5907c4c8c28516ac7af0fe33786eb20bbe9a0cf3f3ef399d4e32c1994e35e30f38a1714066c31616ea3ca20fd0a04ce4909088783785c75690e18ded3dc77", 0xf6}, {&(0x7f00000003c0)="f9df80c55465df3ccf0ae49868d52709b146", 0x12}, {&(0x7f0000000500)="c0c355c92511fd6002c62135afc6848fb25530cd0526e904931e004a889bbef2e57dec9b81f69e474055413ca00cc17dfb47a2", 0x33}, {&(0x7f0000000540)="78e63fec90fadba96dd87033534996533944169bde708fe90b", 0x19}, {&(0x7f0000000580)="ec093d9aa0392a01f99293b049171dc717c5b386d3963d6f1fad8bd763d1f601768b4a6de70c", 0x26}], 0x5, &(0x7f0000001040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000001080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000010c0), 0x0, &(0x7f0000001180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe88}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @private=0xa010101}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x80}}], 0x3, 0x4020090)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000010c0)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x10, 0x5, 0x800, 0x70180, r4, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @value=r5}, 0x50)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd26, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xfffc}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0x5, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0x10000a, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0x4, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xc, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x6, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0xb, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x8000080, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x4000003, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x769, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x7fff, 0x4, 0x3e76, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0xe034, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x5, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x5, 0x5, 0xff, 0x80000006, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000001300)={{0x67, @broadcast, 0x4e24, 0x4, 'none\x00', 0x2e, 0x0, 0x1e}, {@broadcast, 0x4e20, 0x1, 0xffff8000, 0x8, 0x4}}, 0x44)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0xfff, 0x4, 0xffffffff, 0x7fff}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100001042abd70000200000000000000", @ANYRES32=0x0, @ANYBLOB="0d1f06001221000024001280110001006272696467655f736c617665000000000c001770f2bbf214b6396c233c6eca006272696467655f736c6176655f300000cdb7dda2cad7d9864708714baa2398fbbde69cdb37ff619b5d3dd14e5b9379907c53bda8c95494d246f95d46f64f1e5347198b8a20ba90d09aa00ba15289a3af20b0d6288a37a481a8fcda950c104ba2599526ed3d11b2"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

590.991311ms ago: executing program 0 (id=3436):
socket$rxrpc(0x21, 0x2, 0xa) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600b40900"/16], 0x2c}}, 0x4001000)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000002c0)) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async, rerun: 64)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0xffffffff, 0x0, 0x4}}, 0x2e) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="aa55a7a055e18884bb0e77de42a7e564b679bd1ffa00"/34], 0x22) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff}) (async, rerun: 32)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffffff1100008000000006"], 0x0) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r7, &(0x7f0000000240)="94", 0x1) (async)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async)
tee(r6, r9, 0x8f5, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) (async)
write(r8, 0x0, 0x0) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (rerun: 64)

590.615517ms ago: executing program 1 (id=3437):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10)
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002340), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x84)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='dctcp-reno\x00', 0xb)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x10, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r7, {0x1, 0xffe1}, {0x0, 0x3}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

500.576968ms ago: executing program 0 (id=3438):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff251202a6475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r8, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x403, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd2656}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000610}, 0x0) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x3c}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000005d40)={0x20, r2, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x7101})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xffffffffffffffff) (async)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r12, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)

499.894524ms ago: executing program 0 (id=3439):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES8=r3, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0xb7c206daabac39f5)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000110f002c00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="b9330f55a58f219b4d8c627b2073fffd800000000000001000000069dd834d500afb2e459633ce7c57b1a166ec2f"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

361.732535ms ago: executing program 2 (id=3442):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000030000000000000063014900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)

361.351567ms ago: executing program 1 (id=3443):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'bond0\x00'}}, 0x1e) (async)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000000c0))
socket$inet_udplite(0x2, 0x2, 0x88)

361.027997ms ago: executing program 2 (id=3444):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000080)) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="cbf4e9c42a6c0e16d44dd814d9caa6605822923b346e387b70126fff62f97d0cfc6f781918c70f65", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r1], 0x3c}, 0x1, 0x11}, 0x0)

299.723615ms ago: executing program 1 (id=3445):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x7f, 0x2, 0x7, 0x1, @empty, @empty, 0x700, 0xabd4b550a0135cf2, 0xfd0, 0xf22}})
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x21, 0x80000, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES16=r5, @ANYBLOB, @ANYRESOCT], 0x38}}, 0x0)
unshare(0x6a040000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a2e000000002e3a0c0003"], 0x30}}, 0x20088004)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x7}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)

297.554258ms ago: executing program 2 (id=3446):
syz_emit_ethernet(0x7a, &(0x7f0000000380)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @mcast1, [@routing={0x4, 0x0, 0x2, 0xa3}], "42a475f32cd1fdc8"}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', <r1=>0x0, 0x80, 0x8000, 0xe, 0x200, {{0x42, 0x4, 0x0, 0x6, 0x108, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, {[@cipso={0x86, 0x4f, 0x3, [{0xb, 0x8, "8e3c944dc529"}, {0x0, 0x2}, {0x5, 0xe, "0f10448bed66f649b4519844"}, {0x0, 0x9, "325b150fc84190"}, {0x1, 0xe, "a813c5f2e912d455cf18577d"}, {0x2, 0x6, "cb3c19c2"}, {0x7, 0xe, "5b36e281f4614d0d996445c8"}, {0x1, 0x6, "5058b142"}]}, @end, @end, @ssrr={0x89, 0x17, 0x9c, [@loopback, @dev={0xac, 0x14, 0x14, 0x18}, @local, @remote, @multicast2]}, @cipso={0x86, 0x4d, 0x0, [{0x1, 0xb, "63dd40db38472de7dd"}, {0x7, 0xd, "8b3b348bf7d5738457dcf4"}, {0x2, 0xc, "d1d6ab07ff9ff1f3f33a"}, {0x6, 0x9, "50c07090b9ae24"}, {0x1, 0x2}, {0x6, 0x4, "29ec"}, {0x0, 0x9, "d355170fbaa9a9"}, {0x2, 0xb, "b1c37be932ec843ee7"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x60, [@broadcast, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x5, [{@private=0xa010102, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x84, [@local, @local, @multicast2]}]}}}}})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.time\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000440)={'tunl0\x00', <r3=>0x0, 0x20, 0x20, 0xcbe, 0x9d6, {{0x25, 0x4, 0x3, 0x3, 0x94, 0x65, 0x0, 0xa8, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x26, [@multicast2]}, @noop, @rr={0x7, 0xb, 0xeb, [@rand_addr=0x64010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x24, 0xf0, 0x3, 0x6, [{@broadcast, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80000000}, {@rand_addr=0x64010102, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x6, 0x1, 0x4, [{@multicast1, 0x1}, {@broadcast, 0x8b0c}, {@local, 0xffff}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8b4}]}, @end, @generic={0x86, 0xa, "6539aba44bca8e46"}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@local, 0x1ff}]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[@ANYBLOB="940200001e00000126bd7000fddc022507000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="140014006970766c616e3100000000000000000008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00 \x00\t\x00\x00\x00'], 0x294}, 0x1, 0x0, 0x0, 0x40}, 0x20000081)
r4 = socket$inet(0xa, 0x801, 0x6)
listen(r4, 0x8)
accept4(r4, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@cgroup=r2, 0x48, 0x1, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@cgroup, r2, 0x3f, 0x2000, 0x0, @value=r2, @void, @void, @void, r7}, 0x20)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r8, &(0x7f00000001c0)={0x1f, 0x7, @none, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r6, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

295.638958ms ago: executing program 0 (id=3447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r2, 0x241a07f23122330d, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x64, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x52}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfff, 0x7]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x80}, @device_b, @device_b, @random="dab60300003b", {0x4, 0x1}, @value=@ver_80211n={0x0, 0x2e88, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x20, @void}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48}, 0x844)

148.201184ms ago: executing program 2 (id=3448):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f00000006c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}]}, 0x54}}, 0x40)

81.434714ms ago: executing program 0 (id=3449):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async, rerun: 32)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

81.111619ms ago: executing program 2 (id=3450):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc080)
r0 = socket$netlink(0x10, 0x3, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.96999ms ago: executing program 2 (id=3451):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x5802}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffc3d}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$kcm(0x10, 0x2, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'})
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x646, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r4 = socket(0x10, 0x1, 0x7)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x5c}}, 0x20000000)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x5}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffb1)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(0xffffffffffffffff, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)
bind$x25(r6, &(0x7f0000000080), 0x12)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'hsr0\x00', 0xc400})
r8 = socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES8=r5], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
close(0x4)
ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

0s ago: executing program 0 (id=3452):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400800000000000000000000000000065b353a842142d31d7cf358db478fae17b684089f782", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400800000000000000000000000000065b353a842142d31d7cf358db478fae17b684089f782", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00dfffffff0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00dfffffff0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) (async)
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000280), 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2b5cb}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x28000000)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r4, 0x89e3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11d, 0x2081}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x44}}, 0x28000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

ast mode
[  134.228682][ T9262] 8021q: adding VLAN 0 to HW filter on device bond39
[  134.242211][ T9262] bond40: entered promiscuous mode
[  134.244304][ T9262] bond40: entered allmulticast mode
[  134.246633][ T9262] 8021q: adding VLAN 0 to HW filter on device bond40
[  134.266694][ T9262] bond41: entered promiscuous mode
[  134.268919][ T9262] bond41: entered allmulticast mode
[  134.271280][ T9262] 8021q: adding VLAN 0 to HW filter on device bond41
[  134.293439][ T9262] bond42: entered promiscuous mode
[  134.295556][ T9262] bond42: entered allmulticast mode
[  134.297924][ T9262] 8021q: adding VLAN 0 to HW filter on device bond42
[  134.318890][ T9262] bond43: entered promiscuous mode
[  134.321019][ T9262] bond43: entered allmulticast mode
[  134.323552][ T9262] 8021q: adding VLAN 0 to HW filter on device bond43
[  134.374508][ T9262] bond44: entered promiscuous mode
[  134.376293][ T9262] bond44: entered allmulticast mode
[  134.378118][ T9262] 8021q: adding VLAN 0 to HW filter on device bond44
[  134.409859][ T9262] bond45: entered promiscuous mode
[  134.415917][ T9262] bond45: entered allmulticast mode
[  134.418937][ T9262] 8021q: adding VLAN 0 to HW filter on device bond45
[  134.459667][ T9262] bond46: entered promiscuous mode
[  134.461858][ T9262] bond46: entered allmulticast mode
[  134.464771][ T9262] 8021q: adding VLAN 0 to HW filter on device bond46
[  134.531286][ T9262] bond47: entered promiscuous mode
[  134.533427][ T9262] bond47: entered allmulticast mode
[  134.535856][ T9262] 8021q: adding VLAN 0 to HW filter on device bond47
[  134.707268][ T9300] validate_nla: 8 callbacks suppressed
[  134.707284][ T9300] netlink: 'syz.1.1066': attribute type 1 has an invalid length.
[  134.756000][ T9300] 8021q: adding VLAN 0 to HW filter on device bond48
[  134.764751][ T9303] IPv6: sit1: Disabled Multicast RS
[  134.768918][ T9303] sit1: entered allmulticast mode
[  134.808434][ T9304] 8021q: adding VLAN 0 to HW filter on device bond48
[  134.811766][ T9304] bond48: (slave vxcan3): The slave device specified does not support setting the MAC address
[  134.817768][ T9304] bond48: (slave vxcan3): Error -95 calling set_mac_address
[  134.856737][ T9305] xt_hashlimit: overflow, rate too high: 1125899906842624
[  134.863888][ T9300] bond48: (slave bridge6): Enslaving as an active interface with a down link
[  135.416464][ T9336] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  135.423666][ T9336] netlink: 'syz.0.1077': attribute type 29 has an invalid length.
[  135.624651][ T9355] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[  135.686846][ T9362] netlink: 'syz.0.1085': attribute type 29 has an invalid length.
[  135.693653][ T9362] netlink: 'syz.0.1085': attribute type 29 has an invalid length.
[  135.831651][ T9372] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  135.835832][ T9372] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  135.839706][ T9372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  136.443989][ T9382] netlink: 'syz.2.1092': attribute type 1 has an invalid length.
[  136.777240][ T9393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.819544][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.821960][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.825152][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.831253][ T9401] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  136.841078][ T9401] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  136.847268][ T9393] tipc: Disabling bearer <eth:syzkaller0>
[  136.882089][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.919214][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.921914][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.927520][ T9401] wg1 speed is unknown, defaulting to 1000
[  136.981321][ T9407] __nla_validate_parse: 9 callbacks suppressed
[  136.981337][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'.
[  137.195169][ T9425] wg1 speed is unknown, defaulting to 1000
[  137.201736][ T9427] ip6t_srh: unknown srh invflags 4449
[  137.246324][ T9428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.251730][ T9428] D: renamed from syzkaller0 (while UP)
[  137.255897][ T9428] tipc: Disabling bearer <eth:syzkaller0>
[  137.343247][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1107'.
[  137.357860][ T9431] gretap2: entered promiscuous mode
[  137.360367][ T9431] gretap2: entered allmulticast mode
[  137.718888][ T9437] batman_adv: batadv0: Adding interface: ipvlan2
[  137.721323][ T9437] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.731953][ T9437] batman_adv: batadv0: Interface activated: ipvlan2
[  138.012213][ T9446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.016381][ T9446] D: renamed from syzkaller0
[  138.023652][ T9446] tipc: Disabling bearer <eth:syzkaller0>
[  138.131176][ T9451] wg1 speed is unknown, defaulting to 1000
[  138.223635][ T9459] netlink: 'syz.0.1117': attribute type 1 has an invalid length.
[  138.226870][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'.
[  138.307011][ T9462] IPv6: sit1: Disabled Multicast RS
[  138.311512][ T9462] sit1: entered allmulticast mode
[  138.482180][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'.
[  138.700079][ T9482] netlink: 'syz.0.1124': attribute type 1 has an invalid length.
[  138.719055][ T9482] veth15: entered promiscuous mode
[  138.801160][ T9484] Bluetooth: hci1: Opcode 0x080f failed: -4
[  138.890514][ T9488] IPv6: sit1: Disabled Multicast RS
[  138.893686][ T9488] sit1: entered allmulticast mode
[  139.032833][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'.
[  139.036630][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'.
[  139.066435][ T9497] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  139.271539][ T9508] wg1 speed is unknown, defaulting to 1000
[  139.300575][ T9510] IPv6: sit1: Disabled Multicast RS
[  139.304172][ T9510] sit1: entered allmulticast mode
[  139.432749][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'.
[  139.502272][ T9520] syzkaller0: entered promiscuous mode
[  139.504142][ T9520] syzkaller0: entered allmulticast mode
[  139.582496][ T9522] wg1 speed is unknown, defaulting to 1000
[  139.781285][ T9528] xt_l2tp: v2 sid > 0xffff: 4294901760
[  139.819261][ T9531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1141'.
[  139.834803][ T9531] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  139.837408][ T9531] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1141'.
[  139.884670][ T9533] vcan0: left promiscuous mode
[  139.901174][ T9533] vlan0: left promiscuous mode
[  139.905947][ T9533] veth3: left promiscuous mode
[  139.909797][ T9533] bond4: left promiscuous mode
[  139.912435][ T9533] bond4: left allmulticast mode
[  139.915391][ T9533] veth7: left promiscuous mode
[  139.917998][ T9533] veth9: left promiscuous mode
[  139.920506][ T9533] veth11: left promiscuous mode
[  139.922810][ T9533] veth13: left promiscuous mode
[  139.946751][ T9533] veth21: left promiscuous mode
[  139.955523][ T9533] veth23: left promiscuous mode
[  139.960511][ T9533] D: left promiscuous mode
[  139.962462][ T9533] D: left allmulticast mode
[  139.973530][ T9533] veth25: left promiscuous mode
[  139.977373][ T9533] veth27: left promiscuous mode
[  139.980864][ T9533] gretap2: left promiscuous mode
[  139.982527][ T9533] gretap2: left allmulticast mode
[  139.985721][ T9533] batman_adv: batadv0: Interface deactivated: ipvlan2
[  139.994529][ T9539] netlink: 'syz.0.1144': attribute type 29 has an invalid length.
[  139.999499][ T9539] netlink: 'syz.0.1144': attribute type 29 has an invalid length.
[  140.002667][ T9539] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1144'.
[  140.160783][ T9550] netlink: 'syz.2.1148': attribute type 1 has an invalid length.
[  140.244870][ T9555] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  140.300954][ T9555] veth29: entered promiscuous mode
[  140.305107][ T9555] bond16: (slave veth29): Enslaving as a backup interface with a down link
[  140.401289][ T9567] ip_vti0: left allmulticast mode
[  140.492010][ T9576] IPv6: sit2: Disabled Multicast RS
[  140.494352][ T9576] sit2: entered allmulticast mode
[  140.516129][ T9580] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  140.543855][ T9586] netlink: 'syz.2.1156': attribute type 29 has an invalid length.
[  140.548996][ T9586] netlink: 'syz.2.1156': attribute type 29 has an invalid length.
[  140.550251][ T9581] rdma_rxe: rxe_newlink: failed to add lo
[  140.554184][ T9581] lo: left allmulticast mode
[  140.557846][ T9581] tunl0: left allmulticast mode
[  140.560256][ T9581] gre0: left allmulticast mode
[  140.564158][ T9581] gretap0: left allmulticast mode
[  140.566888][ T9581] erspan0: left allmulticast mode
[  140.573714][ T9581] ip6_vti0: left allmulticast mode
[  140.577012][ T9581] sit0: left allmulticast mode
[  140.590630][ T9581] ip6tnl0: left allmulticast mode
[  140.595599][ T9581] ip6gre0: left allmulticast mode
[  140.597971][ T9581] ip6gretap0: left allmulticast mode
[  140.601232][ T9581] bridge0: left allmulticast mode
[  140.603722][ T9581] vcan0: left allmulticast mode
[  140.606601][ T9581] bond0: left allmulticast mode
[  140.608226][ T9581] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  140.614486][ T9581] veth13: left allmulticast mode
[  140.620401][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.623718][ T9581] dummy0: left allmulticast mode
[  140.626326][ T9581] batman_adv: batadv0: Interface activated: dummy0
[  140.630279][ T9581] nlmon0: left allmulticast mode
[  140.633071][ T9581] caif0: left allmulticast mode
[  140.634653][ T9581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.704915][ T9596] netlink: 'syz.2.1159': attribute type 1 has an invalid length.
[  140.722073][ T9589] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[  140.801436][ T9605] wg1 speed is unknown, defaulting to 1000
[  140.828495][ T5810] Bluetooth: hci1: command 0x080f tx timeout
[  140.836028][ T9602] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  140.871471][ T9605] tipc: Started in network mode
[  140.873028][ T9605] tipc: Node identity 12fe385794eb, cluster identity 4711
[  140.875774][ T9605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.882674][ T9605] D: renamed from syzkaller0
[  140.885099][ T9605] tipc: Disabling bearer <eth:syzkaller0>
[  140.950814][ T9612] netlink: 'syz.2.1164': attribute type 20 has an invalid length.
[  141.035074][ T9624] IPv6: sit1: Disabled Multicast RS
[  141.040658][ T9624] sit1: entered allmulticast mode
[  141.098972][ T5824] tipc: Left network mode
[  141.176466][ T9645] wg1 speed is unknown, defaulting to 1000
[  141.234060][ T9646] D: renamed from syzkaller0
[  141.383063][ T9660] IPv6: sit2: Disabled Multicast RS
[  141.390472][ T9660] sit2: entered allmulticast mode
[  141.436432][ T9662] veth15: entered promiscuous mode
[  141.441761][ T9662] bond11: (slave veth15): Enslaving as a backup interface with a down link
[  141.713462][ T9686] pimreg: entered allmulticast mode
[  141.773309][ T9696] IPv6: sit1: Disabled Multicast RS
[  141.775994][ T9696] sit1: entered allmulticast mode
[  141.806321][ T9697] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  141.811223][ T9697] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  141.964817][ T9696] batman_adv: batadv0: Interface deactivated: dummy0
[  141.983672][ T9696] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[  141.987219][ T9696] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[  141.991870][ T9696] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[  141.995290][ T9696] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[  142.065341][ T9708] veth31: entered promiscuous mode
[  142.070990][ T9708] bond17: (slave veth31): Enslaving as a backup interface with a down link
[  142.384429][ T9726] xt_hashlimit: max too large, truncated to 1048576
[  142.389856][ T9726] __nla_validate_parse: 147 callbacks suppressed
[  142.389869][ T9726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'.
[  142.758015][ T9744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1206'.
[  142.815788][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'.
[  142.864519][ T9754] IPv6: sit2: Disabled Multicast RS
[  142.867400][ T9754] sit2: entered allmulticast mode
[  143.006809][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1213'.
[  143.111163][ T9771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1216'.
[  143.228593][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  143.347691][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'.
[  143.389529][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'.
[  143.408392][ T9804] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  143.411729][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1226'.
[  143.415021][ T9809] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  143.696761][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1233'.
[  143.910895][ T9847] wg1 speed is unknown, defaulting to 1000
[  143.968065][ T9850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.981141][ T9850] D: renamed from syzkaller0
[  143.985132][ T9850] tipc: Disabling bearer <eth:syzkaller0>
[  143.994143][ T9852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1240'.
[  144.002113][ T9852] xt_TPROXY: Can be used only with -p tcp or -p udp
[  144.506803][ T9871] x_tables: ip_tables: ah match: only valid for protocol 51
[  144.510523][ T9869] wg1 speed is unknown, defaulting to 1000
[  144.904849][ T9891] wg1 speed is unknown, defaulting to 1000
[  144.987560][ T9894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.057999][ T9894] tipc: Disabling bearer <eth:syzkaller0>
[  145.126075][ T9910] validate_nla: 74 callbacks suppressed
[  145.126090][ T9910] netlink: 'syz.2.1264': attribute type 1 has an invalid length.
[  145.260321][ T9919] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003
[  145.276700][ T9919] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003
[  145.304481][ T9919] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003
[  145.307162][ T9919] IPVS: set_ctl: invalid protocol: 46 10.1.1.2:20003
[  145.440787][ T9936] netlink: 'syz.1.1271': attribute type 4 has an invalid length.
[  145.466588][ T9936] netlink: 'syz.1.1271': attribute type 4 has an invalid length.
[  145.591483][ T9944] netlink: 'syz.1.1275': attribute type 1 has an invalid length.
[  145.621611][ T9947] netlink: 'syz.2.1277': attribute type 29 has an invalid length.
[  145.625694][ T9947] netlink: 'syz.2.1277': attribute type 29 has an invalid length.
[  145.744148][ T9958] bond0: (slave bond_slave_1): Releasing backup interface
[  145.747386][ T9958] bond_slave_1 (unregistering): left promiscuous mode
[  145.752074][ T9958] bond_slave_1 (unregistering): left allmulticast mode
[  146.081263][ T9976] netlink: 'syz.1.1287': attribute type 29 has an invalid length.
[  146.089928][ T9978] ip6erspan0: entered promiscuous mode
[  146.091998][ T9976] netlink: 'syz.1.1287': attribute type 29 has an invalid length.
[  146.169231][ T9980] wg1 speed is unknown, defaulting to 1000
[  146.245440][ T9982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.313619][ T9982] tipc: Disabling bearer <eth:syzkaller0>
[  146.699423][ T9995] xt_CT: No such helper "netbios-ns"
[  147.459211][T10021] __nla_validate_parse: 13 callbacks suppressed
[  147.459228][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'.
[  147.463896][T10021] netlink: 'syz.2.1303': attribute type 7 has an invalid length.
[  147.466706][T10021] netlink: 'syz.2.1303': attribute type 8 has an invalid length.
[  147.472669][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'.
[  147.555247][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'.
[  147.601061][T10031] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1307'.
[  147.802649][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'.
[  148.795444][T10069] IPv6: sit1: Disabled Multicast RS
[  149.001401][T10088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'.
[  149.005000][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  149.061684][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'.
[  149.185086][T10104] xt_l2tp: wrong L2TP version: 0
[  149.234912][T10109] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1332'.
[  149.237817][T10110] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1333'.
[  149.242406][T10110] 8021q: VLANs not supported on ip6_vti0
[  149.371742][T10112] wg1 speed is unknown, defaulting to 1000
[  149.851246][T10145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.073057][T10171] xt_policy: output policy not valid in PREROUTING and INPUT
[  150.383091][T10188] validate_nla: 9 callbacks suppressed
[  150.383106][T10188] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  150.771050][T10207] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  150.785229][T10210] netlink: 'syz.1.1365': attribute type 10 has an invalid length.
[  150.808083][T10208] batman_adv: batadv0: Interface deactivated: dummy0
[  150.821660][T10208] batman_adv: batadv0: Removing interface: dummy0
[  150.836770][T10208] bridge_slave_0: left promiscuous mode
[  150.848104][T10208] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.862055][T10208] bridge_slave_1: left promiscuous mode
[  150.864808][T10208] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.882855][T10208] bond0: (slave bond_slave_0): Releasing backup interface
[  150.890382][T10208] bond0: (slave bond_slave_1): Releasing backup interface
[  150.894757][T10214] netlink: 'syz.2.1366': attribute type 1 has an invalid length.
[  150.894898][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.905851][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.912830][T10208] bond0: (slave wlan1): Releasing backup interface
[  150.917901][T10208] bond2: (slave ip6gretap1): Releasing backup interface
[  150.923330][T10208] bond7: (slave veth5): Releasing backup interface
[  150.928122][T10208] bond8: (slave veth7): Releasing backup interface
[  150.933066][T10208] bond9: (slave geneve2): Releasing active interface
[  150.939244][T10208] bond10: (slave veth9): Releasing backup interface
[  150.946081][T10208] bond12: (slave veth11): Releasing backup interface
[  150.952546][T10208] bond0: (slave veth13): Releasing backup interface
[  150.962606][T10208] bond15: (slave veth19): Releasing backup interface
[  150.970663][T10208] bond16: (slave veth21): Releasing backup interface
[  150.977337][T10208] bond17: (slave veth23): Releasing backup interface
[  150.997597][T10208] bond48: (slave bridge6): Releasing active interface
[  151.009111][T10210] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  151.017530][T10210] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.067606][T10216] veth33: entered promiscuous mode
[  151.076509][T10216] bond18: (slave veth33): Enslaving as a backup interface with a down link
[  151.240954][T10227] SET target dimension over the limit!
[  151.393865][T10241] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  151.432743][T10246] netlink: 'syz.1.1377': attribute type 1 has an invalid length.
[  151.484408][T10246] veth25: entered promiscuous mode
[  151.491617][T10246] bond51: (slave veth25): Enslaving as a backup interface with a down link
[  151.729053][T10260] batman_adv: batadv0: Removing interface: dummy0
[  151.739352][T10260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.743119][T10260] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.911636][T10267] pim6reg1: entered promiscuous mode
[  151.913301][T10267] pim6reg1: entered allmulticast mode
[  152.122966][T10287] netlink: 'syz.2.1391': attribute type 29 has an invalid length.
[  152.135265][T10287] netlink: 'syz.2.1391': attribute type 29 has an invalid length.
[  152.169442][T10290] netlink: 'syz.0.1392': attribute type 1 has an invalid length.
[  152.216307][T10296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.285390][T10298] wg1 speed is unknown, defaulting to 1000
[  152.344028][T10306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.420391][T10306] tipc: Disabling bearer <eth:syzkaller0>
[  153.181907][T10331] sctp: [Deprecated]: syz.2.1398 (pid 10331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.181907][T10331] Use struct sctp_sack_info instead
[  153.239863][T10336] netlink: 'syz.2.1401': attribute type 29 has an invalid length.
[  153.242944][T10336] netlink: 'syz.2.1401': attribute type 29 has an invalid length.
[  153.246494][T10336] __nla_validate_parse: 18 callbacks suppressed
[  153.246508][T10336] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1401'.
[  153.291018][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1404'.
[  153.310582][T10345] wg1 speed is unknown, defaulting to 1000
[  153.501870][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'.
[  153.539552][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1411'.
[  153.587735][T10371] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1409'.
[  153.615761][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'.
[  153.622366][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  153.767375][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  153.782309][T10394] syzkaller1: entered allmulticast mode
[  153.784751][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  153.825638][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  153.870423][ T5810] Bluetooth: hci2: link tx timeout
[  153.872775][ T5810] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.877303][   T54] Bluetooth: hci2: link tx timeout
[  153.879450][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.882546][   T54] Bluetooth: hci2: link tx timeout
[  153.884522][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.890559][   T54] Bluetooth: hci2: link tx timeout
[  153.892573][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.895928][   T54] Bluetooth: hci2: link tx timeout
[  153.898681][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.976591][T10408] No such timeout policy "syz1"
[  153.990979][T10408] No such timeout policy "syz1"
[  153.993798][T10408] No such timeout policy "syz1"
[  153.996357][T10408] No such timeout policy "syz1"
[  154.000258][T10408] No such timeout policy "syz1"
[  154.006815][T10408] No such timeout policy "syz1"
[  154.012625][T10408] No such timeout policy "syz1"
[  154.015033][T10408] No such timeout policy "syz1"
[  154.017518][T10408] No such timeout policy "syz1"
[  154.020851][T10408] No such timeout policy "syz1"
[  154.063526][T10411] wg1 speed is unknown, defaulting to 1000
[  154.525395][T10437] sctp: [Deprecated]: syz.0.1430 (pid 10437) Use of int in max_burst socket option deprecated.
[  154.525395][T10437] Use struct sctp_assoc_value instead
[  154.606117][T10444] delete_channel: no stack
[  154.681783][T10447] veth35: entered promiscuous mode
[  154.685321][T10447] bond19: (slave veth35): Enslaving as a backup interface with a down link
[  154.890774][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.530064][T10509] validate_nla: 1 callbacks suppressed
[  155.530076][T10509] netlink: 'syz.0.1441': attribute type 1 has an invalid length.
[  155.585238][T10509] veth17: entered promiscuous mode
[  155.593282][T10509] bond12: (slave veth17): Enslaving as a backup interface with a down link
[  155.649807][T10516] x_tables: duplicate underflow at hook 1
[  155.847514][T10541] tipc: Can't bind to reserved service type 0
[  155.950356][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  157.203206][T10643] netlink: 'syz.1.1472': attribute type 1 has an invalid length.
[  157.245392][T10643] veth27: entered promiscuous mode
[  157.251380][T10643] bond52: (slave veth27): Enslaving as a backup interface with a down link
[  157.254357][T10642] netlink: 'syz.2.1471': attribute type 2 has an invalid length.
[  157.296413][T10652] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  157.303089][T10654] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  157.331975][T10652] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  157.357400][T10662] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  157.473364][T10675] 0XD: renamed from gretap0
[  157.482192][T10675] 0XD: left promiscuous mode
[  157.490803][T10675] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  157.558839][T10684] netlink: 'syz.0.1488': attribute type 1 has an invalid length.
[  157.583842][T10684] 8021q: adding VLAN 0 to HW filter on device bond13
[  157.600144][T10684] bond13: (slave veth19): Enslaving as an active interface with a down link
[  157.606755][T10684] vlan4: entered allmulticast mode
[  157.608866][T10684] bond13: entered allmulticast mode
[  157.611606][T10684] bond13: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.706959][T10690] batadv0: left allmulticast mode
[  157.710568][T10690] veth0: left allmulticast mode
[  157.712723][T10690] veth1: left allmulticast mode
[  157.714887][T10690] wg0: left allmulticast mode
[  157.717068][T10690] wg1: left allmulticast mode
[  157.721232][T10690] wg2: left allmulticast mode
[  157.723030][T10690] veth0_to_bridge: left allmulticast mode
[  157.725159][T10690] bridge_slave_0: left allmulticast mode
[  157.727111][T10690] veth1_to_bridge: left allmulticast mode
[  157.730182][T10690] bridge_slave_1: left allmulticast mode
[  157.732577][T10690] veth0_to_bond: left allmulticast mode
[  157.734366][T10690] bond_slave_0: left allmulticast mode
[  157.736122][T10690] veth1_to_bond: left allmulticast mode
[  157.737993][T10690] bond_slave_1: left allmulticast mode
[  157.739965][T10690] veth0_to_team: left allmulticast mode
[  157.742226][T10690] team_slave_0: left allmulticast mode
[  157.743949][T10690] veth1_to_team: left allmulticast mode
[  157.745727][T10690] team_slave_1: left allmulticast mode
[  157.747463][T10690] veth0_to_batadv: left allmulticast mode
[  157.749607][T10690] batadv_slave_0: left allmulticast mode
[  157.751805][T10690] veth1_to_batadv: left allmulticast mode
[  157.753792][T10690] batadv_slave_1: left allmulticast mode
[  157.755812][T10690] xfrm0: left allmulticast mode
[  157.757833][T10690] veth0_to_hsr: left allmulticast mode
[  157.760471][T10690] veth1_to_hsr: left allmulticast mode
[  157.764238][T10690] hsr0: left allmulticast mode
[  157.766143][T10690] hsr_slave_0: left allmulticast mode
[  157.768706][T10690] veth1_virt_wifi: left allmulticast mode
[  157.770824][T10690] veth0_virt_wifi: left allmulticast mode
[  157.773000][T10690] veth1_vlan: left allmulticast mode
[  157.775064][T10690] vlan0: left allmulticast mode
[  157.777043][T10690] vlan1: left allmulticast mode
[  157.779036][T10690] macvlan1: left allmulticast mode
[  157.781043][T10690] ipvlan0: left allmulticast mode
[  157.783106][T10690] ipvlan1: left allmulticast mode
[  157.784933][T10690] veth0_vlan: left allmulticast mode
[  157.787211][T10690] veth1_macvtap: left allmulticast mode
[  157.789700][T10690] veth0_macvtap: left allmulticast mode
[  157.791630][T10690] macvtap0: left allmulticast mode
[  157.793358][T10690] macsec0: left allmulticast mode
[  157.795357][T10690] geneve0: left allmulticast mode
[  157.797544][T10690] geneve1: left allmulticast mode
[  157.800520][T10690] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  157.803529][T10690] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[  157.806546][T10690] netdevsim netdevsim1 netdevsim2: left allmulticast mode
[  157.809873][T10690] netdevsim netdevsim1 netdevsim3: left allmulticast mode
[  157.812943][T10690] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  157.816387][T10690] bond1: left allmulticast mode
[  157.818610][T10690] syztnl1: left allmulticast mode
[  157.821015][T10690] batadv1: left allmulticast mode
[  157.823172][T10690] macvlan2: left allmulticast mode
[  157.825527][T10690] bond2: left allmulticast mode
[  157.827781][T10690] ip6gretap1: left allmulticast mode
[  157.830776][T10690] bond3: left allmulticast mode
[  157.833009][T10690] bond4: left allmulticast mode
[  157.835196][T10690] bridge1: left allmulticast mode
[  157.837472][T10690] veth2: left allmulticast mode
[  157.839611][T10690] veth3: left allmulticast mode
[  157.841271][T10690] vxlan0: left allmulticast mode
[  157.842984][T10690] bridge2: left allmulticast mode
[  157.844689][T10690] bond5: left allmulticast mode
[  157.846364][T10690] bond6: left allmulticast mode
[  157.848685][T10690] vlan2: left allmulticast mode
[  157.850761][T10690] 0: left allmulticast mode
[  157.852786][T10690] xfrm1: left allmulticast mode
[  157.854973][T10690] bond7: left allmulticast mode
[  157.857055][T10690] veth4: left allmulticast mode
[  157.859275][T10690] veth5: left allmulticast mode
[  157.861444][T10690] bond8: left allmulticast mode
[  157.863569][T10690] veth6: left allmulticast mode
[  157.865688][T10690] veth7: left allmulticast mode
[  157.867880][T10690] bond9: left allmulticast mode
[  157.870387][T10690] geneve2: left allmulticast mode
[  157.872668][T10690] ;: left allmulticast mode
[  157.874700][T10690] veth9: left promiscuous mode
[  157.876859][T10690] bridge3: left promiscuous mode
[  157.878956][T10690] bridge3: left allmulticast mode
[  157.881506][T10690] veth11: left promiscuous mode
[  157.883708][T10690] veth13: left promiscuous mode
[  157.885895][T10690] veth15: left promiscuous mode
[  157.888038][T10690] veth17: left promiscuous mode
[  157.890650][T10690] veth19: left promiscuous mode
[  157.894226][T10690] veth21: left promiscuous mode
[  157.896355][T10690] veth23: left promiscuous mode
[  157.899080][T10690] bond20: left promiscuous mode
[  157.901114][T10690] bond20: left allmulticast mode
[  157.903560][T10690] bond21: left promiscuous mode
[  157.905660][T10690] bond21: left allmulticast mode
[  157.908134][T10690] bond22: left promiscuous mode
[  157.910519][T10690] bond22: left allmulticast mode
[  157.913127][T10690] bond23: left promiscuous mode
[  157.915191][T10690] bond23: left allmulticast mode
[  157.917724][T10690] bond24: left promiscuous mode
[  157.920110][T10690] bond24: left allmulticast mode
[  157.922679][T10690] bond25: left promiscuous mode
[  157.924776][T10690] bond25: left allmulticast mode
[  157.927429][T10690] bond26: left promiscuous mode
[  157.930057][T10690] bond26: left allmulticast mode
[  157.932605][T10690] bond27: left promiscuous mode
[  157.934687][T10690] bond27: left allmulticast mode
[  157.937264][T10690] bond28: left promiscuous mode
[  157.939479][T10690] bond28: left allmulticast mode
[  157.942181][T10690] bond29: left promiscuous mode
[  157.944200][T10690] bond29: left allmulticast mode
[  157.946649][T10690] bond30: left promiscuous mode
[  157.948991][T10690] bond30: left allmulticast mode
[  157.952085][T10690] bond31: left promiscuous mode
[  157.954099][T10690] bond31: left allmulticast mode
[  157.956587][T10690] bond32: left promiscuous mode
[  157.958716][T10690] bond32: left allmulticast mode
[  157.961345][T10690] bond33: left promiscuous mode
[  157.963370][T10690] bond33: left allmulticast mode
[  157.965847][T10690] bond34: left promiscuous mode
[  157.967857][T10690] bond34: left allmulticast mode
[  157.970679][T10690] bond35: left promiscuous mode
[  157.972806][T10690] bond35: left allmulticast mode
[  157.975313][T10690] bond36: left promiscuous mode
[  157.977352][T10690] bond36: left allmulticast mode
[  157.979967][T10690] bond37: left promiscuous mode
[  157.981983][T10690] bond37: left allmulticast mode
[  157.984477][T10690] bond38: left promiscuous mode
[  157.986507][T10690] bond38: left allmulticast mode
[  157.989260][T10690] bond39: left promiscuous mode
[  157.991279][T10690] bond39: left allmulticast mode
[  157.993283][T10690] bond40: left promiscuous mode
[  157.994881][T10690] bond40: left allmulticast mode
[  157.997156][T10690] bond41: left promiscuous mode
[  157.999376][T10690] bond41: left allmulticast mode
[  158.001769][T10690] bond42: left promiscuous mode
[  158.003382][T10690] bond42: left allmulticast mode
[  158.005371][T10690] bond43: left promiscuous mode
[  158.007231][T10690] bond43: left allmulticast mode
[  158.010096][T10690] bond44: left promiscuous mode
[  158.012206][T10690] bond44: left allmulticast mode
[  158.014785][T10690] bond45: left promiscuous mode
[  158.016903][T10690] bond45: left allmulticast mode
[  158.019447][T10690] bond46: left promiscuous mode
[  158.021512][T10690] bond46: left allmulticast mode
[  158.024101][T10690] bond47: left promiscuous mode
[  158.026129][T10690] bond47: left allmulticast mode
[  158.029368][T10690] veth25: left promiscuous mode
[  158.032086][T10690] veth27: left promiscuous mode
[  158.034585][T10698] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.240060][T10717] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  158.242422][T10717] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  158.244945][T10717] netlink: 'syz.1.1496': attribute type 2 has an invalid length.
[  158.287553][T10727] bond0: option lp_interval: invalid value (18446744073709551604)
[  158.291259][T10727] bond0: option lp_interval: allowed values 1 - 2147483647
[  158.334438][T10731] __nla_validate_parse: 17 callbacks suppressed
[  158.334454][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'.
[  158.349676][T10731] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  158.353292][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.360769][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'.
[  158.366539][T10731] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  158.370492][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.407742][T10737] netlink: 'syz.0.1501': attribute type 29 has an invalid length.
[  158.417375][T10737] netlink: 'syz.0.1501': attribute type 29 has an invalid length.
[  158.422307][T10737] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1501'.
[  158.475788][T10743] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  158.488876][T10746] x_tables: duplicate underflow at hook 1
[  158.529626][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'.
[  158.552400][T10750] batadv_slave_0: entered promiscuous mode
[  158.621751][T10757] netlink: 'syz.0.1509': attribute type 4 has an invalid length.
[  158.892183][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1513'.
[  159.451984][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'.
[  159.726643][T10795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  159.943044][T10807] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1524'.
[  159.972911][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  159.980146][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'.
[  160.397067][T10834] wg1 speed is unknown, defaulting to 1000
[  160.457975][T10838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.465682][T10834] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.742920][T10863] wg1 speed is unknown, defaulting to 1000
[  160.771753][T10867] IPVS: Unknown mcast interface: pim6reg0
[  160.814386][T10871] validate_nla: 3 callbacks suppressed
[  160.814397][T10871] netlink: 'syz.1.1545': attribute type 29 has an invalid length.
[  160.822799][T10871] netlink: 'syz.1.1545': attribute type 29 has an invalid length.
[  160.850659][T10863] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.866034][T10863] i: renamed from sit0
[  160.884394][T10878] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  160.914838][T10878] bond14: entered promiscuous mode
[  160.916934][T10878] bond14: entered allmulticast mode
[  160.919984][T10878] 8021q: adding VLAN 0 to HW filter on device bond14
[  160.935718][T10878] bridge3: entered promiscuous mode
[  160.937938][T10878] bridge3: entered allmulticast mode
[  160.940956][T10878] bond14: (slave bridge3): Enslaving as a backup interface with an up link
[  160.971680][T10878] xt_CT: No such helper "netbios-ns"
[  161.019341][   T13] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  161.129469][   T13] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  161.262916][T10891] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  161.403303][T10895] netlink: 'syz.0.1554': attribute type 29 has an invalid length.
[  161.406654][T10895] netlink: 'syz.0.1554': attribute type 29 has an invalid length.
[  161.472939][T10899] syz.0.1556 (10899) used obsolete PPPIOCDETACH ioctl
[  161.598184][T10901] pimreg: left allmulticast mode
[  162.070108][T10923] wg1 speed is unknown, defaulting to 1000
[  162.137861][T10924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.150092][T10924] D: renamed from syzkaller0
[  162.156927][T10924] tipc: Disabling bearer <eth:syzkaller0>
[  162.379249][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  162.381783][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  162.398931][   T51] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  162.529244][T10938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.535509][T10938] syzkaller0: entered promiscuous mode
[  162.546878][T10938] syzkaller0: entered allmulticast mode
[  162.570312][T10938] tipc: Resetting bearer <eth:syzkaller0>
[  162.596303][T10938] tipc: Resetting bearer <eth:syzkaller0>
[  162.611232][T10938] tipc: Disabling bearer <eth:syzkaller0>
[  162.903784][T10964] netlink: 'syz.2.1574': attribute type 1 has an invalid length.
[  163.140799][T10967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.148804][T10967] syzkaller0: entered promiscuous mode
[  163.150572][T10967] syzkaller0: entered allmulticast mode
[  163.171482][T10966] tipc: Resetting bearer <eth:syzkaller0>
[  163.191496][T10966] tipc: Disabling bearer <eth:syzkaller0>
[  163.441613][T10993] __nla_validate_parse: 12 callbacks suppressed
[  163.441624][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'.
[  163.463654][T10991] wg1 speed is unknown, defaulting to 1000
[  163.603250][T10994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.684811][T10994] tipc: Disabling bearer <eth:syzkaller0>
[  163.727443][T10999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1584'.
[  163.787277][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'.
[  163.860581][T11004] wg1 speed is unknown, defaulting to 1000
[  163.941882][T11002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1586'.
[  164.394015][T11021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1590'.
[  164.401496][T11021] netlink: 'syz.2.1590': attribute type 10 has an invalid length.
[  164.739382][T11035] wg1 speed is unknown, defaulting to 1000
[  164.796740][T11038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.800214][T11038] D: renamed from syzkaller0
[  164.820367][T11038] tipc: Disabling bearer <eth:syzkaller0>
[  165.923550][T11054] netlink: 'syz.1.1599': attribute type 29 has an invalid length.
[  165.927031][T11054] netlink: 'syz.1.1599': attribute type 29 has an invalid length.
[  165.935362][T11054] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1599'.
[  166.144813][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'.
[  166.211345][T10424] hid-generic 0005:10CF:05DF.0002: item fetching failed at offset 0/1
[  166.214424][T10424] hid-generic 0005:10CF:05DF.0002: probe with driver hid-generic failed with error -22
[  166.311591][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1608'.
[  166.357031][T11078] batadv_slave_0: left promiscuous mode
[  166.361115][T11078] veth29: left promiscuous mode
[  166.365989][T11078] veth31: left promiscuous mode
[  166.371081][T11078] veth33: left promiscuous mode
[  166.377843][T11078] veth35: left promiscuous mode
[  166.723817][T11086] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  166.726771][T11086] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  166.956578][T11100] netlink: 'syz.1.1617': attribute type 1 has an invalid length.
[  166.982325][T11100] 8021q: adding VLAN 0 to HW filter on device bond53
[  167.006637][T11100] bond53: (slave veth29): Enslaving as an active interface with a down link
[  167.012407][T11102] netlink: 'syz.2.1615': attribute type 16 has an invalid length.
[  167.015211][T11102] netlink: 'syz.2.1615': attribute type 17 has an invalid length.
[  167.015900][T11100] vlan4: entered allmulticast mode
[  167.020955][T11100] bond53: entered allmulticast mode
[  167.023476][T11100] bond53: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  167.055762][T11102] batman_adv: batadv0: Interface activated: dummy0
[  167.060717][T11102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.205345][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'.
[  167.325336][T11120] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1624'.
[  167.540871][T11133] wg1 speed is unknown, defaulting to 1000
[  167.634773][T11133] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  167.679146][T11137] veth1_to_bond: entered allmulticast mode
[  167.682647][T11136] veth1_to_bond: left allmulticast mode
[  167.732046][T11139] netlink: 'syz.2.1631': attribute type 1 has an invalid length.
[  167.767094][T11145] IPv6: sit2: Disabled Multicast RS
[  167.769845][T11145] sit2: entered allmulticast mode
[  167.862800][T11152] openvswitch: netlink: IPv4 tun info is not correct
[  167.867123][T11152] x_tables: duplicate underflow at hook 3
[  168.020251][T11165] wg1 speed is unknown, defaulting to 1000
[  168.132161][T11165] lo speed is unknown, defaulting to 1000
[  168.137731][T11165] lo speed is unknown, defaulting to 1000
[  168.151158][T11165] lo speed is unknown, defaulting to 1000
[  168.176222][T11165] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  168.207626][T11165] lo speed is unknown, defaulting to 1000
[  168.222058][T11165] lo speed is unknown, defaulting to 1000
[  168.229788][T11165] lo speed is unknown, defaulting to 1000
[  168.233656][T11165] lo speed is unknown, defaulting to 1000
[  168.729147][T11199] __nla_validate_parse: 3 callbacks suppressed
[  168.729164][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'.
[  169.112331][T11214] syzkaller1: entered promiscuous mode
[  169.114582][T11214] syzkaller1: entered allmulticast mode
[  169.551355][T11231] ipvlan2: entered promiscuous mode
[  169.554890][T11231] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  169.661116][T11235] netlink: 'syz.0.1662': attribute type 9 has an invalid length.
[  169.664524][T11235] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  169.667448][T11235] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1662'.
[  169.675323][T11235] netlink: 'syz.0.1662': attribute type 9 has an invalid length.
[  169.679430][T11235] netlink: 'syz.0.1662': attribute type 1 has an invalid length.
[  169.682973][T11235] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1662'.
[  170.016258][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'.
[  170.022600][T11252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'.
[  170.253066][T11272] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.1674'.
[  170.274570][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'.
[  170.345418][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'.
[  170.391713][T11281] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1677'.
[  170.709575][T11296] IPVS: rr: UDP 224.0.0.2:20004 - no destination available
[  171.069831][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'.
[  171.214631][T11342] validate_nla: 3 callbacks suppressed
[  171.214648][T11342] netlink: 'syz.2.1691': attribute type 1 has an invalid length.
[  171.575096][T11362] syzkaller1: entered promiscuous mode
[  171.584739][T11362] syzkaller1: entered allmulticast mode
[  171.875968][T11377] netlink: 'syz.2.1700': attribute type 29 has an invalid length.
[  171.880419][T11377] netlink: 'syz.2.1700': attribute type 29 has an invalid length.
[  172.699122][T11414] batadv_slave_0: entered promiscuous mode
[  172.701470][T11414] batadv_slave_0: entered allmulticast mode
[  172.838153][T11400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.996453][T11419] netlink: 'syz.2.1714': attribute type 1 has an invalid length.
[  173.131283][T11419] veth37: entered promiscuous mode
[  173.136883][T11419] bond22: (slave veth37): Enslaving as a backup interface with a down link
[  173.639349][T11444] netlink: 'syz.1.1722': attribute type 25 has an invalid length.
[  174.258936][T11471] __nla_validate_parse: 6 callbacks suppressed
[  174.258955][T11471] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1730'.
[  174.307548][T11478] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  174.312070][T11478] netlink: 'syz.2.1733': attribute type 29 has an invalid length.
[  174.315159][T11478] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1733'.
[  174.485105][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'.
[  174.490221][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'.
[  174.516230][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'.
[  174.552078][T11496] bond23: (slave vcan0): The slave device specified does not support setting the MAC address
[  174.556417][T11496] bond23: (slave vcan0): Error -95 calling set_mac_address
[  174.590965][T11502] netlink: 'syz.0.1740': attribute type 29 has an invalid length.
[  174.595865][T11502] netlink: 'syz.0.1740': attribute type 29 has an invalid length.
[  174.598867][T11502] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1740'.
[  174.693698][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1744'.
[  174.756085][T11522] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1744'.
[  174.763170][T11521] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1746'.
[  174.799893][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  174.811697][T11526] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  174.841830][T11529] netlink: 'syz.1.1749': attribute type 29 has an invalid length.
[  174.927005][T11533] veth31: entered promiscuous mode
[  174.931141][T11533] bond54: (slave veth31): Enslaving as a backup interface with a down link
[  175.197281][T11551] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  175.201413][T11551] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  175.947817][T11575] unsupported nlmsg_type 40
[  176.633663][T11626] nftables ruleset with unbound chain
[  176.782997][T11633] validate_nla: 3 callbacks suppressed
[  176.783012][T11633] netlink: 'syz.2.1776': attribute type 1 has an invalid length.
[  176.817788][T11633] veth39: entered promiscuous mode
[  176.822113][T11633] bond24: (slave veth39): Enslaving as a backup interface with a down link
[  177.088936][T11651] netlink: 'syz.2.1781': attribute type 29 has an invalid length.
[  177.093090][T11651] netlink: 'syz.2.1781': attribute type 29 has an invalid length.
[  177.178154][T11661] 8021q: VLANs not supported on ip6_vti0
[  177.308739][T11670] netlink: 'syz.1.1787': attribute type 58 has an invalid length.
[  177.473657][T11680] netlink: 'syz.0.1790': attribute type 29 has an invalid length.
[  177.477819][T11680] netlink: 'syz.0.1790': attribute type 29 has an invalid length.
[  177.538731][T11682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.592929][T11685] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  178.100582][T11701] netlink: 'syz.2.1798': attribute type 5 has an invalid length.
[  178.160238][T11707] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  178.162879][T11707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.463920][T11725] netlink: 'syz.2.1806': attribute type 9 has an invalid length.
[  178.478660][T11725] netlink: 'syz.2.1806': attribute type 9 has an invalid length.
[  178.693603][T11745] netlink: 'syz.0.1812': attribute type 1 has an invalid length.
[  179.039227][T11756] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  179.337335][T11780] __nla_validate_parse: 24 callbacks suppressed
[  179.337356][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1819'.
[  179.387867][T11784] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1821'.
[  179.602961][T11774] infiniband syz0: set down
[  179.606787][T11774] infiniband syz0: added batadv_slave_1
[  179.651487][T11774] RDS/IB: syz0: added
[  179.660171][T11774] smc: adding ib device syz0 with port count 1
[  179.665545][T11774] smc:    ib device syz0 port 1 has pnetid 
[  180.207321][T11808] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1826'.
[  180.303406][T11820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1830'.
[  180.307138][T11820] NCSI netlink: No device for ifindex 246
[  181.687696][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'.
[  182.033762][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'.
[  182.077094][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'.
[  182.234630][T11876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1843'.
[  182.381673][T11849] lo speed is unknown, defaulting to 1000
[  182.384168][T11849] lo speed is unknown, defaulting to 1000
[  182.387023][T11849] lo speed is unknown, defaulting to 1000
[  182.404589][T11849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  182.429565][T11849] lo speed is unknown, defaulting to 1000
[  182.437126][T11849] lo speed is unknown, defaulting to 1000
[  182.449414][T11849] lo speed is unknown, defaulting to 1000
[  182.453164][T11849] lo speed is unknown, defaulting to 1000
[  182.896242][T11917] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  182.973167][T11925] validate_nla: 4 callbacks suppressed
[  182.973181][T11925] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  183.071208][T11939] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1862'.
[  183.180495][T11953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1870'.
[  183.184139][T11953] netlink: 'syz.2.1870': attribute type 1 has an invalid length.
[  183.187289][T11954] netlink: 'syz.2.1870': attribute type 1 has an invalid length.
[  183.192858][T11957] netlink: 'syz.1.1868': attribute type 1 has an invalid length.
[  183.197314][T11952] netlink: 'syz.0.1869': attribute type 1 has an invalid length.
[  183.209249][T11959] bridge0: entered promiscuous mode
[  183.211966][T11953] batadv_slave_1: entered promiscuous mode
[  184.180128][T11999] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.410560][T12031] __nla_validate_parse: 9 callbacks suppressed
[  184.410572][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  184.415391][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  184.520355][T12070] bond0: entered promiscuous mode
[  184.521898][T12070] veth9: entered promiscuous mode
[  184.522923][T12073] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  184.524058][T12070] bond0: left promiscuous mode
[  184.539337][T12070] veth9: left promiscuous mode
[  184.542562][T12075] netlink: 'syz.0.1887': attribute type 9 has an invalid length.
[  184.545258][T12075] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1887'.
[  184.829009][T12092] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1893'.
[  184.913522][T12097] : entered promiscuous mode
[  185.027433][T12105] openvswitch: netlink: Key 23 has unexpected len 12 expected 2
[  185.130076][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  185.136093][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'.
[  185.257217][T12107] batman_adv: batadv0: Adding interface: ip6gretap2
[  185.260060][T12107] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.269879][T12107] batman_adv: batadv0: Interface activated: ip6gretap2
[  185.348025][T12114] netlink: 'syz.1.1903': attribute type 1 has an invalid length.
[  185.356101][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  185.360062][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  185.363566][T12116] netlink: 'syz.2.1902': attribute type 11 has an invalid length.
[  185.394049][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'.
[  185.597839][T12135] netlink: 'syz.2.1910': attribute type 1 has an invalid length.
[  185.828664][T12141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1912'.
[  186.163577][T12180] netlink: 'syz.2.1924': attribute type 29 has an invalid length.
[  186.390494][T12187] 1: renamed from c0
[  186.394313][T12187] 1: entered allmulticast mode
[  186.403905][T12187] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  187.561611][T12227] xt_bpf: check failed: parse error
[  187.794408][T12241] batman_adv: batadv0: Interface deactivated: dummy0
[  187.816988][T12241] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  187.973553][T12243] batadv_slave_0: left promiscuous mode
[  187.975344][T12243] batadv_slave_0: left allmulticast mode
[  187.980659][T12243] 1: left allmulticast mode
[  187.984697][T12243] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.987597][T12243] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.990950][T12243] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.993728][T12243] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.094848][T12243] veth31: left promiscuous mode
[  188.104261][T12257] C: renamed from team_slave_0
[  188.111273][T12257] validate_nla: 5 callbacks suppressed
[  188.111287][T12257] netlink: 'syz.0.1947': attribute type 4 has an invalid length.
[  188.120717][T12257] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  188.292448][T12265] batman_adv: batadv0: Removing interface: dummy0
[  188.297249][T12265] bond8: (slave veth0_to_bond): Releasing active interface
[  188.304019][T12265] bond3: (slave veth3): Releasing backup interface
[  188.309517][T12265] bond5: (slave veth7): Releasing backup interface
[  188.314769][T12265] bond0: (slave veth9): Releasing backup interface
[  188.321734][T12265] bond6: (slave veth11): Releasing backup interface
[  188.326949][T12265] bond7: (slave veth13): Releasing backup interface
[  188.332395][T12265] bond8: (slave veth15): Releasing active interface
[  188.337027][T12265] bond9: (slave veth17): Releasing active interface
[  188.342397][T12265] bond11: (slave veth21): Releasing backup interface
[  188.352598][T12265] bond12: (slave veth23): Releasing backup interface
[  188.363914][T12265] bond13: (slave veth25): Releasing backup interface
[  188.370818][T12265] bond15: (slave veth27): Releasing backup interface
[  188.374869][T12265] batman_adv: batadv0: Removing interface: ipvlan2
[  188.381587][T12265] bond16: (slave veth29): Releasing backup interface
[  188.386652][T12265] bond17: (slave veth31): Releasing backup interface
[  188.392469][T12265] bond18: (slave veth33): Releasing backup interface
[  188.397187][T12265] bond19: (slave veth35): Releasing backup interface
[  188.406146][T12265] bond22: (slave veth37): Releasing backup interface
[  188.411048][T12265] bond24: (slave veth39): Releasing backup interface
[  188.415047][T12265] batman_adv: batadv0: Removing interface: ip6gretap2
[  188.551483][T12267] netlink: 'syz.2.1951': attribute type 10 has an invalid length.
[  188.675437][T12278] netlink: 'syz.2.1954': attribute type 1 has an invalid length.
[  189.109124][T12299] netlink: 'syz.2.1963': attribute type 1 has an invalid length.
[  189.443147][T12335] netlink: 'syz.0.1973': attribute type 1 has an invalid length.
[  189.636017][T12357] netlink: 'syz.2.1979': attribute type 9 has an invalid length.
[  189.648640][T12357] __nla_validate_parse: 14 callbacks suppressed
[  189.648651][T12357] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1979'.
[  189.692825][T12359] netlink: 'syz.1.1980': attribute type 16 has an invalid length.
[  189.695865][T12359] netlink: 'syz.1.1980': attribute type 2 has an invalid length.
[  189.699150][T12359] netlink: 64098 bytes leftover after parsing attributes in process `syz.1.1980'.
[  189.723761][T12364] netlink: 'syz.2.1979': attribute type 1 has an invalid length.
[  189.762426][T12366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  189.802260][T12366] netlink: 'syz.0.1983': attribute type 39 has an invalid length.
[  189.837859][T12370] macsec3: entered allmulticast mode
[  189.844317][T12370] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  189.848515][T12370] batman_adv: batadv0: Adding interface: macsec3
[  189.851148][T12370] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.861439][T12370] batman_adv: batadv0: Interface activated: macsec3
[  189.950418][T12372] x_tables: duplicate underflow at hook 1
[  189.961073][T12378] IPv6: sit2: Disabled Multicast RS
[  189.966211][T12378] sit2: entered allmulticast mode
[  190.425856][T12423] openvswitch: netlink: Flow key attr not present in new flow.
[  190.504251][T12433] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2003'.
[  190.526233][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'.
[  190.615339][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2007'.
[  190.631495][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'.
[  190.756460][ T5810] Bluetooth: hci1: command 0x080f tx timeout
[  190.806801][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'.
[  190.814870][T12469] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2016'.
[  191.238523][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'.
[  191.243721][T12474] SET target dimension over the limit!
[  191.724162][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'.
[  191.835553][T12486] C: left promiscuous mode
[  191.837044][T12486] C: left allmulticast mode
[  191.840826][T12486] team0 (unregistering): Port device C removed
[  191.842919][T12486] team_slave_1: left promiscuous mode
[  191.844688][T12486] team_slave_1: left allmulticast mode
[  191.847140][T12486] team0 (unregistering): Port device team_slave_1 removed
[  191.856168][T12486] geneve0: left promiscuous mode
[  191.857849][T12486] geneve0: left allmulticast mode
[  191.860748][T12486] team0 (unregistering): Port device geneve0 removed
[  191.952055][T12501] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  192.188051][T12518] IPv6: sit2: Disabled Multicast RS
[  192.191298][T12518] sit2: entered allmulticast mode
[  192.673256][T12540] syzkaller0: entered promiscuous mode
[  192.675642][T12540] syzkaller0: entered allmulticast mode
[  192.687573][T12543] IPv6: sit2: Disabled Multicast RS
[  192.690500][T12543] sit2: entered allmulticast mode
[  192.911998][T12562] xt_policy: too many policy elements
[  192.962397][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.970632][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.975757][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.982132][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.322577][T12585] chnl_net:caif_netlink_parms(): no params data found
[  194.641144][T12612] bridge5: entered promiscuous mode
[  194.643301][T12612] bridge5: entered allmulticast mode
[  194.954815][T12621] __nla_validate_parse: 6 callbacks suppressed
[  194.954832][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2053'.
[  195.137407][T12630] validate_nla: 3 callbacks suppressed
[  195.137426][T12630] netlink: 'syz.0.2057': attribute type 29 has an invalid length.
[  195.143484][T12630] netlink: 'syz.0.2057': attribute type 29 has an invalid length.
[  195.147255][T12630] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2057'.
[  195.209186][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'.
[  195.212830][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'.
[  195.216378][T12634] netlink: 'syz.0.2059': attribute type 14 has an invalid length.
[  195.219677][T12634] netlink: 'syz.0.2059': attribute type 13 has an invalid length.
[  195.243671][T12636] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2060'.
[  195.384899][T12646] netlink: 'syz.0.2065': attribute type 16 has an invalid length.
[  195.422535][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'.
[  195.516060][T12658] netlink: 'syz.2.2067': attribute type 29 has an invalid length.
[  195.530941][T12658] netlink: 'syz.2.2067': attribute type 29 has an invalid length.
[  195.540148][T12658] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2067'.
[  195.565985][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'.
[  195.570583][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'.
[  195.691413][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  195.697985][T12672] netlink: 'syz.0.2072': attribute type 1 has an invalid length.
[  195.703236][T12672] netlink: 'syz.0.2072': attribute type 1 has an invalid length.
[  195.811435][T12680] netlink: 'syz.2.2075': attribute type 29 has an invalid length.
[  196.323444][T12722] IPv6: sit2: Disabled Multicast RS
[  196.326371][T12722] sit2: entered allmulticast mode
[  196.361415][T12726] IPv6: sit2: Disabled Multicast RS
[  196.365178][T12726] sit2: entered allmulticast mode
[  196.497791][T12734] openvswitch: netlink: Message has 4 unknown bytes.
[  197.245166][T12766] IPVS: length: 68 != 24
[  197.247493][T12765] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  197.387709][T12770] vlan0: entered promiscuous mode
[  198.106099][T12786] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  198.157001][T12786] batman_adv: batadv0: Interface deactivated: macsec3
[  198.160635][T12786] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  198.519607][   T96] IPVS: starting estimator thread 0...
[  198.608602][T12813] IPVS: using max 41 ests per chain, 98400 per kthread
[  198.880047][T12842] C: renamed from team_slave_0
[  198.889996][T12842] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  198.985386][   T13] IPVS: stop unused estimator thread 0...
[  199.110592][T12866] syzkaller1: entered promiscuous mode
[  199.112773][T12866] syzkaller1: entered allmulticast mode
[  200.114517][T12924] __nla_validate_parse: 15 callbacks suppressed
[  200.114532][T12924] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2138'.
[  200.543202][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2146'.
[  200.654399][T12964] validate_nla: 16 callbacks suppressed
[  200.654414][T12964] netlink: 'syz.0.2149': attribute type 1 has an invalid length.
[  201.187232][T12983] bridge_slave_0: left allmulticast mode
[  201.194560][T12983] bridge_slave_0: left promiscuous mode
[  201.196624][T12983] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.204513][T12983] bridge_slave_1: left allmulticast mode
[  201.243100][   T51] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  201.255194][T12983] bridge_slave_1: left promiscuous mode
[  201.257632][T12983] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.266045][T12983] bond9: (slave veth0_to_bond): Releasing active interface
[  201.273035][T12983] bond0: (slave bond_slave_0): Releasing backup interface
[  201.278038][T12983] bond_slave_0: left promiscuous mode
[  201.280559][T12983] bond_slave_0: left allmulticast mode
[  201.283365][T12983] bond1: left allmulticast mode
[  201.285302][T12983] bond1: left promiscuous mode
[  201.287444][T12983] bridge0: port 3(bond1) entered disabled state
[  201.296938][T12983] bond4: (slave ip6gretap1): Releasing backup interface
[  201.305422][   T51] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  201.316753][T12983] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 66:cb:14:6b:6c:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  201.339756][T12983] bond4: (slave veth3): Releasing backup interface
[  201.344132][T12983] bond6: (slave veth7): Releasing backup interface
[  201.352508][T12983] bond7: (slave veth9): Releasing backup interface
[  201.356724][T12983] bond8: (slave veth11): Releasing backup interface
[  201.360635][T12983] bond9: (slave veth13): Releasing active interface
[  201.365361][T12983] bond11: (slave veth15): Releasing backup interface
[  201.369506][T12983] bond12: (slave veth17): Releasing backup interface
[  201.375135][T12983] bond13: (slave veth19): Releasing active interface
[  201.384681][T12983] bond14: (slave bridge3): Removing an active aggregator
[  201.389274][T12983] bond14: (slave bridge3): Releasing backup interface
[  201.393619][T12983] bridge3: left promiscuous mode
[  201.395766][T12983] bridge3: left allmulticast mode
[  201.426486][T12987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.552022][T13003] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2159'.
[  201.558035][T12999] netlink: 'syz.0.2158': attribute type 4 has an invalid length.
[  201.688116][T13013] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  201.821576][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'.
[  201.846490][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'.
[  201.871160][T13032] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2167'.
[  201.915169][T13034] syz.0.2168: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  201.950387][T13034] CPU: 0 UID: 0 PID: 13034 Comm: syz.0.2168 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  201.950416][T13034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.950426][T13034] Call Trace:
[  201.950432][T13034]  <TASK>
[  201.950439][T13034]  dump_stack_lvl+0x189/0x250
[  201.950481][T13034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.950502][T13034]  ? __pfx__printk+0x10/0x10
[  201.950518][T13034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  201.950534][T13034]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  201.950551][T13034]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  201.950569][T13034]  warn_alloc+0x214/0x310
[  201.950590][T13034]  ? __pfx_warn_alloc+0x10/0x10
[  201.950613][T13034]  ? __get_vm_area_node+0x28f/0x300
[  201.950627][T13034]  ? packet_set_ring+0x6f4/0x2380
[  201.950648][T13034]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  201.950688][T13034]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  201.950704][T13034]  ? alloc_pages_mpol+0x3cd/0x4a0
[  201.950720][T13034]  ? packet_set_ring+0x6f4/0x2380
[  201.950736][T13034]  vzalloc_noprof+0xb2/0xf0
[  201.950750][T13034]  ? packet_set_ring+0x6f4/0x2380
[  201.950768][T13034]  packet_set_ring+0x6f4/0x2380
[  201.950801][T13034]  ? __pfx_packet_set_ring+0x10/0x10
[  201.950833][T13034]  ? _copy_from_user+0x94/0xb0
[  201.950850][T13034]  packet_setsockopt+0xc5a/0x12c0
[  201.950870][T13034]  ? __pfx_packet_setsockopt+0x10/0x10
[  201.950885][T13034]  ? futex_wait+0x285/0x360
[  201.950905][T13034]  ? __pfx_futex_wait+0x10/0x10
[  201.950928][T13034]  ? aa_sk_perm+0x81e/0x950
[  201.950948][T13034]  ? __pfx_aa_sk_perm+0x10/0x10
[  201.950961][T13034]  ? __lock_acquire+0xab9/0xd20
[  201.950983][T13034]  ? aa_sock_opt_perm+0x74/0x110
[  201.951000][T13034]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  201.951016][T13034]  ? __pfx_packet_setsockopt+0x10/0x10
[  201.951035][T13034]  do_sock_setsockopt+0x25a/0x3e0
[  201.951054][T13034]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  201.951074][T13034]  ? __fget_files+0x2a/0x420
[  201.951096][T13034]  __x64_sys_setsockopt+0x18b/0x220
[  201.951117][T13034]  do_syscall_64+0xfa/0x3b0
[  201.951130][T13034]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.951149][T13034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.951163][T13034]  ? exc_page_fault+0x9f/0xf0
[  201.951217][T13034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.951231][T13034] RIP: 0033:0x7fb7fd98e929
[  201.951244][T13034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.951256][T13034] RSP: 002b:00007fb7fe898038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  201.951271][T13034] RAX: ffffffffffffffda RBX: 00007fb7fdbb5fa0 RCX: 00007fb7fd98e929
[  201.951281][T13034] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004
[  201.951289][T13034] RBP: 00007fb7fda10b39 R08: 000000000000001c R09: 0000000000000000
[  201.951297][T13034] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  201.951306][T13034] R13: 0000000000000000 R14: 00007fb7fdbb5fa0 R15: 00007ffe89c63ca8
[  201.951327][T13034]  </TASK>
[  201.951333][T13034] Mem-Info:
[  202.076327][T13034] active_anon:5435 inactive_anon:0 isolated_anon:0
[  202.076327][T13034]  active_file:1346 inactive_file:38259 isolated_file:0
[  202.076327][T13034]  unevictable:1768 dirty:91 writeback:0
[  202.076327][T13034]  slab_reclaimable:10340 slab_unreclaimable:72303
[  202.076327][T13034]  mapped:18470 shmem:2555 pagetables:1232
[  202.076327][T13034]  sec_pagetables:0 bounce:0
[  202.076327][T13034]  kernel_misc_reclaimable:0
[  202.076327][T13034]  free:270306 free_pcp:28144 free_cma:0
[  202.101234][T13034] Node 0 active_anon:12492kB inactive_anon:0kB active_file:3652kB inactive_file:10320kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34932kB dirty:80kB writeback:0kB shmem:5348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11328kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  202.131231][T13034] Node 1 active_anon:9316kB inactive_anon:0kB active_file:1732kB inactive_file:142716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38948kB dirty:284kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4748kB pagetables:2700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  202.168430][T13034] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  202.178078][T13034] lowmem_reserve[]: 0 815 815 815 815
[  202.185816][T13034] Node 0 DMA32 free:313592kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12492kB inactive_anon:0kB active_file:3652kB inactive_file:10320kB unevictable:3536kB writepending:80kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:57768kB local_pcp:38204kB free_cma:0kB
[  202.197999][T13034] lowmem_reserve[]: 0 0 0 0 0
[  202.200231][T13034] Node 1 DMA32 free:437532kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:19068kB local_pcp:8640kB free_cma:0kB
[  202.213035][T13034] lowmem_reserve[]: 0 0 854 854 854
[  202.215019][T13034] Node 1 Normal free:313800kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9444kB inactive_anon:0kB active_file:1664kB inactive_file:142716kB unevictable:3536kB writepending:284kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35688kB local_pcp:20852kB free_cma:0kB
[  202.229399][T13052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  202.238868][T13034] lowmem_reserve[]: 0 0 0 0 0
[  202.240732][T13034] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  202.247209][T13034] Node 0 DMA32: 2*4kB (UE) 204*8kB (UE) 35*16kB (UM) 11*32kB (ME) 1*64kB (E) 14*128kB (UE) 87*256kB (UME) 88*512kB (UME) 74*1024kB (UM) 5*2048kB (ME) 38*4096kB (M) = 313400kB
[  202.296884][T13034] Node 1 DMA32: 71*4kB (UM) 66*8kB (UM) 67*16kB (UM) 64*32kB (UM) 65*64kB (UM) 61*128kB (UM) 63*256kB (U) 54*512kB (U) 47*1024kB (U) 1*2048kB (U) 80*4096kB (M) = 437532kB
[  202.303319][T13034] Node 1 Normal: 424*4kB (ME) 209*8kB (ME) 397*16kB (UME) 427*32kB (UME) 379*64kB (UME) 233*128kB (UM) 174*256kB (UM) 141*512kB (UM) 97*1024kB (UME) 1*2048kB (U) 4*4096kB (UM) = 311960kB
[  202.313283][T13034] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  202.316905][T13034] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  202.323915][T13034] 42160 total pagecache pages
[  202.327230][T13034] 0 pages in swap cache
[  202.334516][T13034] Free swap  = 124996kB
[  202.335838][T13034] Total swap = 124996kB
[  202.337321][T13034] 786301 pages RAM
[  202.339257][T13034] 0 pages HighMem/MovableOnly
[  202.341043][T13034] 240368 pages reserved
[  202.342631][T13034] 0 pages cma reserved
[  202.385208][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2173'.
[  202.534372][T13067] netlink: 'syz.0.2175': attribute type 10 has an invalid length.
[  202.647183][T13072] netlink: 'syz.0.2176': attribute type 16 has an invalid length.
[  202.650980][T13072] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2176'.
[  202.663222][T13072] macsec1: entered promiscuous mode
[  202.665274][T13072] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  202.678930][T13072] macsec1: entered allmulticast mode
[  202.682233][T13072] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  202.869397][T13082] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2180'.
[  202.877000][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'.
[  202.922010][T13082] bond29: entered promiscuous mode
[  202.924182][T13082] bond29: entered allmulticast mode
[  202.926648][T13082] 8021q: adding VLAN 0 to HW filter on device bond29
[  203.233745][T13112] nbd: must specify at least one socket
[  203.370275][T13119] netlink: 'syz.2.2193': attribute type 1 has an invalid length.
[  203.443469][T13119] bond30: (slave gretap3): making interface the new active one
[  203.446584][T13119] bond30: (slave gretap3): Enslaving as an active interface with an up link
[  203.594556][T13135] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  203.601557][T13135] bond0 (unregistering): Released all slaves
[  203.824846][T13144] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  203.851129][T13144] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  204.605150][T13164] netlink: 'syz.2.2208': attribute type 4 has an invalid length.
[  204.693980][T13179] netlink: 'syz.0.2210': attribute type 29 has an invalid length.
[  205.270265][T13203] __nla_validate_parse: 10 callbacks suppressed
[  205.270282][T13203] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2219'.
[  205.362605][T13207] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  205.413515][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'.
[  205.424157][T13209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2222'.
[  205.427625][T13209] erspan0: left allmulticast mode
[  205.474057][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'.
[  205.482422][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2224'.
[  205.529979][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2226'.
[  205.740805][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'.
[  205.785932][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'.
[  205.836924][T13240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2232'.
[  206.026517][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2236'.
[  206.560993][T13283] validate_nla: 5 callbacks suppressed
[  206.561005][T13283] netlink: 'syz.0.2247': attribute type 32 has an invalid length.
[  206.565962][T13283] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28)
[  206.845530][T13305] vxcan0: entered promiscuous mode
[  206.926227][T13316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  206.971694][T13319] netlink: 'syz.1.2259': attribute type 13 has an invalid length.
[  207.384836][T13376] netlink: 'syz.1.2272': attribute type 42 has an invalid length.
[  207.756013][T13395] x_tables: ip6_tables: mh match: only valid for protocol 135
[  207.948742][ T5810] Bluetooth: hci2: command 0x0405 tx timeout
[  208.099787][T13417] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  208.108562][T13418] netlink: 'syz.1.2278': attribute type 4 has an invalid length.
[  208.160490][T13418] netlink: 'syz.1.2278': attribute type 4 has an invalid length.
[  208.296456][T13429] netlink: 'syz.0.2283': attribute type 7 has an invalid length.
[  208.300918][T13429] netlink: 'syz.0.2283': attribute type 8 has an invalid length.
[  208.305324][T13429] netlink: 'syz.0.2283': attribute type 4 has an invalid length.
[  208.441055][T13444] pim6reg1: entered promiscuous mode
[  208.444123][T13444] pim6reg1: entered allmulticast mode
[  209.154977][T13490] ip6erspan1: entered allmulticast mode
[  209.157849][T13490] netlink: 'syz.1.2302': attribute type 9 has an invalid length.
[  209.455811][T13514] batadv_slave_1: left promiscuous mode
[  209.458227][T13514] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  209.466156][T13514] veth37: left promiscuous mode
[  209.468747][T13514] veth39: left promiscuous mode
[  209.487308][T13514] bond29: left promiscuous mode
[  209.489759][T13514] bond29: left allmulticast mode
[  209.669023][T13521] openvswitch: netlink: nsh attr 1 has unexpected len 36 expected 8
[  209.672170][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.831057][T13538] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  209.841477][T13540] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  209.886796][T13545] veth0: entered promiscuous mode
[  209.890929][T13544] macvlan0: entered promiscuous mode
[  209.892862][T13544] macvlan0: entered allmulticast mode
[  209.894978][T13544] openvswitch: netlink: Flow key attr not present in new flow.
[  209.897958][T13543] veth0: left promiscuous mode
[  209.994166][T13547] syzkaller1: entered promiscuous mode
[  209.996523][T13547] syzkaller1: entered allmulticast mode
[  210.000486][T13547] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  210.359941][   T69] wlan1: Trigger new scan to find an IBSS to join
[  210.410679][T13565] bridge: RTM_NEWNEIGH with invalid state 0x31
[  210.533996][T13570] __nla_validate_parse: 13 callbacks suppressed
[  210.534014][T13570] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2330'.
[  210.590619][T13575] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2331'.
[  210.767871][T13583] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2335'.
[  210.942093][T13594] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.965614][T13594] veth35: entered promiscuous mode
[  210.974794][T13594] bond0: (slave veth35): Enslaving as an active interface with a down link
[  210.986355][T13594] erspan0: entered allmulticast mode
[  210.993643][T13594] bond0: (slave erspan0): making interface the new active one
[  210.997745][T13594] erspan0: entered promiscuous mode
[  211.001224][T13594] bond0: (slave erspan0): Enslaving as an active interface with an up link
[  211.127629][T13601] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2341'.
[  211.132651][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'.
[  211.138531][T13601] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2341'.
[  211.141987][T13601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2341'.
[  211.150872][T13596] lo speed is unknown, defaulting to 1000
[  211.159639][T13596] lo speed is unknown, defaulting to 1000
[  211.163242][T13596] lo speed is unknown, defaulting to 1000
[  211.185976][T13596] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  211.211828][T13596] lo speed is unknown, defaulting to 1000
[  211.215229][T13596] lo speed is unknown, defaulting to 1000
[  211.221039][T13596] lo speed is unknown, defaulting to 1000
[  211.225090][T13596] lo speed is unknown, defaulting to 1000
[  211.422495][T13616] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2346'.
[  211.622629][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2349'.
[  212.475816][T13637] atomic_op ffff888032539198 conn xmit_atomic 0000000000000000
[  212.532371][T13639] xt_ecn: cannot match TCP bits for non-tcp packets
[  212.679071][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'.
[  212.882051][T13670] veth1_to_bond: entered allmulticast mode
[  212.893687][T13669] veth1_to_bond: left allmulticast mode
[  213.205434][T13694] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  213.208934][T13694] tipc: Disabling bearer <udp:syz2>
[  213.216803][T13694] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  213.241524][T13674] lo speed is unknown, defaulting to 1000
[  213.398509][ T6954] wlan1: Trigger new scan to find an IBSS to join
[  213.461620][T13708] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  213.466038][T13708] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  213.511159][T13710] validate_nla: 12 callbacks suppressed
[  213.511177][T13710] netlink: 'syz.1.2378': attribute type 29 has an invalid length.
[  213.517536][T13710] netlink: 'syz.1.2378': attribute type 29 has an invalid length.
[  213.572029][T13712] netlink: 'syz.1.2379': attribute type 4 has an invalid length.
[  213.642915][T13716] netlink: 'syz.1.2380': attribute type 2 has an invalid length.
[  213.648514][T13716] netlink: 'syz.1.2380': attribute type 2 has an invalid length.
[  214.142679][T13743] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  214.347942][T13758] netlink: 'syz.0.2391': attribute type 1 has an invalid length.
[  214.363232][T12067] wlan1: Creating new IBSS network, BSSID b6:63:fe:59:c8:5b
[  214.537710][T13773] netlink: 'syz.0.2397': attribute type 1 has an invalid length.
[  214.581201][T13773] 8021q: adding VLAN 0 to HW filter on device bond24
[  214.600854][T13773] veth21: entered promiscuous mode
[  214.607924][T13773] bond24: (slave veth21): Enslaving as a backup interface with a down link
[  214.630489][T13773] bond24: (slave veth21): Releasing backup interface
[  214.680238][T13781] netlink: 'syz.0.2401': attribute type 2 has an invalid length.
[  214.970167][T13816] : entered promiscuous mode
[  214.989499][T13822] netlink: 'syz.2.2412': attribute type 29 has an invalid length.
[  215.005985][T13822] netlink: 'syz.2.2412': attribute type 29 has an invalid length.
[  215.389577][T13850] x_tables: duplicate underflow at hook 3
[  215.604423][T13864] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  215.762031][T13878] vxcan3: entered allmulticast mode
[  215.770853][T13876] vxcan5: entered allmulticast mode
[  216.019631][T13882] lo speed is unknown, defaulting to 1000
[  216.142439][T13882] __nla_validate_parse: 16 callbacks suppressed
[  216.142452][T13882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2437'.
[  216.188691][T13909] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  216.201133][T13909] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20001
[  216.419305][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'.
[  216.422607][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'.
[  216.466482][T13933] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2454'.
[  216.549829][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'.
[  216.555304][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2455'.
[  216.563661][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'.
[  216.571308][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2455'.
[  216.576838][T13936] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2455'.
[  216.606862][T13938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.652199][T13942] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2457'.
[  216.751735][T13916] lo speed is unknown, defaulting to 1000
[  216.990022][T13969] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  217.033380][T13971] : renamed from pim6reg1
[  217.141765][T13960] lo speed is unknown, defaulting to 1000
[  217.256355][T13978] 8021q: adding VLAN 0 to HW filter on device bond59
[  217.262187][T13981] gretap1: entered promiscuous mode
[  217.266149][T13981] bond59: (slave gretap1): making interface the new active one
[  217.274161][T13981] bond59: (slave gretap1): Enslaving as an active interface with an up link
[  217.303199][T13978] bond59: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  217.437579][T13978] IPVS: Error connecting to the multicast addr
[  218.017364][T14032] 8021q: adding VLAN 0 to HW filter on device bond25
[  218.051196][T14033] bond25: (slave veth23): Enslaving as an active interface with a down link
[  218.073686][T14032] bond25: (slave veth25): Enslaving as an active interface with a down link
[  218.084571][T14033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.087495][T14033] bond25: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  218.222607][T14047] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  218.909064][   T24] page_pool_release_retry() stalled pool shutdown: id 22, 1 inflight 60 sec
[  219.190775][T14104] syzkaller1: entered promiscuous mode
[  219.204707][T14104] syzkaller1: entered allmulticast mode
[  219.655249][T14139] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20003
[  219.660842][T14142] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  219.813077][T14161] validate_nla: 4 callbacks suppressed
[  219.813094][T14161] netlink: 'syz.0.2527': attribute type 1 has an invalid length.
[  220.922607][T14214] xt_hashlimit: size too large, truncated to 1048576
[  220.965029][T14202] lo speed is unknown, defaulting to 1000
[  221.153659][T14229] __nla_validate_parse: 185 callbacks suppressed
[  221.153677][T14229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2549'.
[  221.332467][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'.
[  221.469583][T14246] ip6gre1: entered allmulticast mode
[  221.586969][T14261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2554'.
[  221.620547][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'.
[  221.690007][T14278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2562'.
[  221.736938][T14282] netlink: 'syz.0.2564': attribute type 21 has an invalid length.
[  221.744611][T14282] IPv6: NLM_F_CREATE should be specified when creating new route
[  221.747874][T14282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.751179][T14282] IPv6: NLM_F_CREATE should be set when creating new route
[  221.754110][T14282] IPv6: NLM_F_CREATE should be set when creating new route
[  221.756956][T14282] IPv6: NLM_F_CREATE should be set when creating new route
[  221.764821][T14287] netlink: 'syz.1.2565': attribute type 6 has an invalid length.
[  221.830560][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'.
[  221.969372][T14305] x_tables: ip_tables: ah match: only valid for protocol 51
[  222.052959][T14311] netlink: 'syz.0.2571': attribute type 29 has an invalid length.
[  222.057050][T14311] netlink: 'syz.0.2571': attribute type 29 has an invalid length.
[  222.063766][T14311] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2571'.
[  222.089926][   T12] erspan0: left promiscuous mode
[  222.165140][T14320] bridge5: entered promiscuous mode
[  222.167497][T14320] bridge5: entered allmulticast mode
[  222.254376][T14326] bridge6: entered allmulticast mode
[  222.965672][T14374] netlink: 'syz.2.2588': attribute type 2 has an invalid length.
[  222.976775][T14374] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  222.981361][T14374] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2588'.
[  222.984473][T14374] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  222.986845][T14374] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  222.990559][T14374] openvswitch: netlink: IP tunnel dst address not specified
[  222.993958][T14374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2588'.
[  223.096254][T14388] netlink: 'syz.2.2591': attribute type 1 has an invalid length.
[  223.153663][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'.
[  223.361035][T14422] openvswitch: netlink: Flow key attr not present in new flow.
[  223.611736][T14441] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  224.193708][T14473] xt_TCPMSS: Only works on TCP SYN packets
[  225.155643][T14558] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  225.171459][T14564] netlink: 'syz.0.2642': attribute type 29 has an invalid length.
[  225.178810][T14564] netlink: 'syz.0.2642': attribute type 29 has an invalid length.
[  225.896677][T14630] netlink: 'syz.2.2657': attribute type 1 has an invalid length.
[  225.905016][T14630] netlink: 'syz.2.2657': attribute type 2 has an invalid length.
[  225.907357][T14630] netlink: 'syz.2.2657': attribute type 1 has an invalid length.
[  225.918407][T14630] netlink: 'syz.2.2657': attribute type 1 has an invalid length.
[  225.922816][T14630] netlink: 'syz.2.2657': attribute type 1 has an invalid length.
[  225.978003][T14641] pimreg: entered allmulticast mode
[  226.157648][T14658] netlink: 'syz.1.2666': attribute type 29 has an invalid length.
[  226.175844][T14658] netlink: 'syz.1.2666': attribute type 29 has an invalid length.
[  226.180199][T14658] __nla_validate_parse: 13 callbacks suppressed
[  226.180209][T14658] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2666'.
[  226.335323][T14642] lo speed is unknown, defaulting to 1000
[  226.344726][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'.
[  226.372115][T14665] macvtap1: entered promiscuous mode
[  226.374279][T14665] veth1: entered promiscuous mode
[  226.376578][T14665] macvtap1: entered allmulticast mode
[  226.378931][T14665] veth1: entered allmulticast mode
[  226.393145][T14665] veth1: left allmulticast mode
[  226.395139][T14665] veth1: left promiscuous mode
[  226.475597][T11986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.480609][T11986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.993585][T14671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2670'.
[  227.151872][T14679] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2673'.
[  227.232952][T14691] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  227.256352][T14688] 8021q: adding VLAN 0 to HW filter on device bond33
[  227.523733][T14723] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2686'.
[  227.562815][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2685'.
[  227.722911][T14740] atomic_op ffff888133fbb998 conn xmit_atomic 0000000000000000
[  227.798213][T14747] bond61: (slave bridge9): making interface the new active one
[  227.802824][T14747] bond61: (slave bridge9): Enslaving as an active interface with an up link
[  227.813286][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'.
[  227.959643][T14760] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2697'.
[  228.010557][T14765] syzkaller1: entered promiscuous mode
[  228.012700][T14765] syzkaller1: entered allmulticast mode
[  228.155418][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2701'.
[  228.173551][T14775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'.
[  228.312080][T14786] macsec0: entered allmulticast mode
[  228.314517][T14786] veth1_macvtap: entered allmulticast mode
[  228.316634][T14786] macsec0: left allmulticast mode
[  228.318866][T14786] veth1_macvtap: left allmulticast mode
[  230.172807][T14882] batadv_slave_1: entered promiscuous mode
[  230.194597][T14881] batadv_slave_1: left promiscuous mode
[  230.207649][T14888] pim6reg1: entered promiscuous mode
[  230.219220][T14888] pim6reg1: entered allmulticast mode
[  230.529188][T14923] bond0: option lp_interval: invalid value (18446744073709551604)
[  230.531563][T14923] bond0: option lp_interval: allowed values 1 - 2147483647
[  230.753573][   T33] audit: type=1804 audit(1751552079.086:8): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2753" name="/newroot/936/cgroup.controllers" dev="tmpfs" ino=4814 res=1 errno=0
[  230.772640][   T33] audit: type=1800 audit(1751552079.086:9): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2753" name="cgroup.controllers" dev="tmpfs" ino=4814 res=0 errno=0
[  230.986636][T14964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.993996][T14964] validate_nla: 10 callbacks suppressed
[  230.994012][T14964] netlink: 'syz.0.2760': attribute type 10 has an invalid length.
[  231.001537][T14964] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  231.006951][T14964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  231.012177][T14964] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  231.775345][T14975] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  232.085102][T14989] netlink: 'syz.1.2772': attribute type 21 has an invalid length.
[  232.091132][T14989] __nla_validate_parse: 23 callbacks suppressed
[  232.091148][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2772'.
[  232.254108][T15008] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2778'.
[  232.356436][T15017] netlink: 'syz.2.2780': attribute type 1 has an invalid length.
[  232.625301][T15009] lo speed is unknown, defaulting to 1000
[  232.921438][T15021] lo speed is unknown, defaulting to 1000
[  233.477932][T15067] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2790'.
[  234.202475][T15063] netlink: 'syz.0.2790': attribute type 29 has an invalid length.
[  234.410043][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'.
[  234.510876][T15083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2795'.
[  234.603884][T15093] netlink: 'syz.2.2798': attribute type 1 has an invalid length.
[  234.869675][T15115] netlink: 'syz.1.2804': attribute type 4 has an invalid length.
[  235.063188][T15139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2811'.
[  235.069743][T15139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2811'.
[  235.100523][T15138] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2810'.
[  235.107920][T15128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2807'.
[  235.142384][T15144] netlink: 'syz.1.2812': attribute type 4 has an invalid length.
[  235.151484][T15144] netlink: 'syz.1.2812': attribute type 4 has an invalid length.
[  235.164175][T15146] netlink: 'syz.0.2810': attribute type 2 has an invalid length.
[  235.179310][T15146] k*]: entered promiscuous mode
[  235.895274][T15167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.985143][T15172] ipt_REJECT: TCP_RESET invalid for non-tcp
[  236.034404][T15174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2823'.
[  236.153258][T15177] netlink: 'syz.0.2824': attribute type 29 has an invalid length.
[  236.157149][T15177] netlink: 'syz.0.2824': attribute type 29 has an invalid length.
[  237.121395][T15189] netlink: 'syz.0.2828': attribute type 1 has an invalid length.
[  237.205443][T15200] netlink: 'syz.1.2831': attribute type 2 has an invalid length.
[  237.208160][T15200] __nla_validate_parse: 1 callbacks suppressed
[  237.208167][T15200] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2831'.
[  237.324142][T15214] netlink: 'syz.2.2834': attribute type 29 has an invalid length.
[  237.337726][T15214] netlink: 'syz.2.2834': attribute type 29 has an invalid length.
[  237.342421][T15214] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2834'.
[  237.356744][T15209] dvmrp1: entered allmulticast mode
[  237.437005][T15199] lo speed is unknown, defaulting to 1000
[  237.456942][T15219] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  237.581857][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2830'.
[  237.703409][T15231] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2840'.
[  237.711865][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'.
[  238.192588][T15253] netlink: 'syz.1.2844': attribute type 29 has an invalid length.
[  238.197695][T15253] netlink: 'syz.1.2844': attribute type 29 has an invalid length.
[  238.205528][T15253] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2844'.
[  238.324890][   T54] Bluetooth: hci2: link tx timeout
[  238.326994][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  238.464225][T15261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'.
[  238.514048][T15266] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2849'.
[  238.652710][T15274] syzkaller0: entered promiscuous mode
[  238.655095][T15274] syzkaller0: entered allmulticast mode
[  240.251643][T15296] bond25: (slave veth23): Releasing active interface
[  240.254185][T15296] bond25: (slave veth23): the permanent HWaddr of slave - ea:bf:c1:86:67:ba - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  240.284555][T15296] bond25: (slave veth25): Releasing active interface
[  240.299751][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2858'.
[  240.362114][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  240.434383][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'.
[  240.491734][T15302] lo speed is unknown, defaulting to 1000
[  240.777415][T15319] lo: left promiscuous mode
[  240.777613][T15317] netlink: 'syz.1.2864': attribute type 11 has an invalid length.
[  240.782955][T15319] lo: left allmulticast mode
[  240.785143][T15319] tunl0: left promiscuous mode
[  240.787105][T15319] tunl0: left allmulticast mode
[  240.798957][T15319] gre0: left promiscuous mode
[  240.800934][T15319] gre0: left allmulticast mode
[  240.810630][T15319] 0XD: left allmulticast mode
[  240.815312][T15319] erspan0: left promiscuous mode
[  240.817581][T15319] ip_vti0: left promiscuous mode
[  240.820781][T15319] ip_vti0: left allmulticast mode
[  240.822805][T15319] ip6_vti0: left promiscuous mode
[  240.824847][T15319] ip6_vti0: left allmulticast mode
[  240.826985][T15319] sit0: left promiscuous mode
[  240.829939][T15319] sit0: left allmulticast mode
[  240.832821][T15319] ip6tnl0: left promiscuous mode
[  240.835167][T15319] ip6tnl0: left allmulticast mode
[  240.837707][T15319] ip6gre0: left promiscuous mode
[  240.842534][T15319] ip6gre0: left allmulticast mode
[  240.844959][T15319] ip6gretap0: left allmulticast mode
[  240.847860][T15319] bridge0: left promiscuous mode
[  240.850461][T15319] bridge0: left allmulticast mode
[  240.852809][T15319] bond0: left promiscuous mode
[  240.854875][T15319] bond0: left allmulticast mode
[  240.857082][T15319] dummy0: left allmulticast mode
[  240.861139][T15319] nlmon0: left promiscuous mode
[  240.863162][T15319] nlmon0: left allmulticast mode
[  240.865312][T15319] caif0: left promiscuous mode
[  240.867346][T15319] caif0: left allmulticast mode
[  240.880591][T15319] vlan0: left promiscuous mode
[  240.885453][T15319] bridge1: left promiscuous mode
[  240.888142][T15319] geneve2: left promiscuous mode
[  240.891147][T15319] geneve2: left allmulticast mode
[  240.893922][T15319] veth3: left promiscuous mode
[  240.896325][T15319] veth5: left promiscuous mode
[  240.900907][T15319] veth7: left promiscuous mode
[  240.903288][T15319] veth9: left promiscuous mode
[  240.905904][T15319] veth11: left promiscuous mode
[  240.915218][T15319] veth15: left promiscuous mode
[  240.917743][T15319] ip6erspan0: left promiscuous mode
[  240.927957][T15319] veth17: left promiscuous mode
[  240.941245][T15319] bond14: left promiscuous mode
[  240.943326][T15319] bond14: left allmulticast mode
[  240.954101][T15319] ipvlan2: left promiscuous mode
[  240.969460][T15319] bridge5: left promiscuous mode
[  240.971134][T15319] bridge5: left allmulticast mode
[  240.973553][T15319] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  240.975870][T15319] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  240.978592][T15319] macsec1: left promiscuous mode
[  240.980326][T15319] macsec1: left allmulticast mode
[  240.985763][T15319] veth21: left promiscuous mode
[  240.992813][T15319] bridge6: left allmulticast mode
[  241.143887][T15326] delete_channel: no stack
[  242.030960][T15372] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.232327][T15380] tipc: Cannot configure node identity twice
[  242.271654][T15380] __nla_validate_parse: 5 callbacks suppressed
[  242.271672][T15380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2885'.
[  242.382158][T15386] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2887'.
[  242.390937][T15387] netlink: 'syz.0.2888': attribute type 32 has an invalid length.
[  242.394012][T15387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2888'.
[  242.413448][T15390] netlink: 'syz.2.2887': attribute type 39 has an invalid length.
[  242.494867][T15393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'.
[  242.632358][T15403] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2890'.
[  242.704028][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'.
[  243.051826][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2900'.
[  243.185776][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'.
[  243.241569][T15451] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2905'.
[  243.244589][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'.
[  243.442272][T15463] netlink: 'syz.0.2910': attribute type 1 has an invalid length.
[  243.816443][T15474] netlink: 'syz.0.2913': attribute type 33 has an invalid length.
[  243.821002][T15474] netlink: 'syz.0.2913': attribute type 10 has an invalid length.
[  244.036066][T15487] sctp: [Deprecated]: syz.0.2917 (pid 15487) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.036066][T15487] Use struct sctp_sack_info instead
[  244.143611][T15495] openvswitch: netlink: IP tunnel TTL not specified.
[  244.577941][T15530] netlink: 'syz.2.2935': attribute type 1 has an invalid length.
[  244.605038][T15530] 8021q: adding VLAN 0 to HW filter on device bond34
[  244.667071][T15530] bond34: (slave gretap4): making interface the new active one
[  244.678752][T15530] bond34: (slave gretap4): Enslaving as an active interface with an up link
[  244.685621][T15530] syz.2.2935 (15530) used greatest stack depth: 19944 bytes left
[  245.000625][T15572] bridge0: port 1(erspan0) entered blocking state
[  245.006188][T15572] bridge0: port 1(erspan0) entered disabled state
[  245.011863][T15572] erspan0: entered allmulticast mode
[  245.016149][T15572] erspan0: entered promiscuous mode
[  245.037947][T15572] batadv_slave_0: entered promiscuous mode
[  245.043385][T15572] erspan0: left allmulticast mode
[  245.045627][T15572] erspan0: left promiscuous mode
[  245.051291][T15572] bridge0: port 1(erspan0) entered disabled state
[  245.734097][   T33] audit: type=1800 audit(1751552094.056:10): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2956" name="cgroup.controllers" dev="tmpfs" ino=5036 res=0 errno=0
[  245.824629][T15571] batadv_slave_0: left promiscuous mode
[  245.957976][T15608] netlink: del zone limit has 4 unknown bytes
[  245.972481][T15610] netlink: 'syz.2.2962': attribute type 21 has an invalid length.
[  246.297642][T15632] netlink: 'syz.2.2964': attribute type 21 has an invalid length.
[  246.303090][T12064] smc: removing ib device syz0
[  246.375273][T15632] netlink: 'syz.2.2964': attribute type 1 has an invalid length.
[  246.683379][T15649] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004
[  247.536464][T15683] __nla_validate_parse: 25 callbacks suppressed
[  247.536481][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'.
[  247.542121][T15683] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  247.542764][T15686] C!: renamed from lo
[  247.544606][T15683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.560996][T15686] A link change request failed with some changes committed already. Interface C! may have been left with an inconsistent configuration, please check.
[  247.570463][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'.
[  247.581686][T15683] atomic_op ffff888033c6d998 conn xmit_atomic 0000000000000000
[  247.638405][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'.
[  247.827923][T15705] netlink: 'syz.1.2990': attribute type 1 has an invalid length.
[  247.834696][T15705] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2990'.
[  248.056519][T15723] netlink: 'syz.2.2995': attribute type 29 has an invalid length.
[  248.064097][T15723] netlink: 'syz.2.2995': attribute type 29 has an invalid length.
[  248.067073][T15723] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2995'.
[  248.120393][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'.
[  248.124552][T15728] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  248.333332][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'.
[  248.610829][T15750] netlink: 'syz.0.3003': attribute type 29 has an invalid length.
[  248.614813][T15750] netlink: 'syz.0.3003': attribute type 29 has an invalid length.
[  248.620372][T15750] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3003'.
[  249.216098][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3014'.
[  249.227298][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3014'.
[  249.422759][T15815] netlink: 'syz.0.3018': attribute type 1 has an invalid length.
[  249.626770][T15828] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  249.847256][T15846] netlink: 'syz.0.3027': attribute type 1 has an invalid length.
[  250.010213][T15857] erspan0: left allmulticast mode
[  250.014187][T15857] macsec3: left allmulticast mode
[  250.016964][T15857] ip6erspan1: left allmulticast mode
[  250.020122][T15857] veth35: left promiscuous mode
[  250.024180][T15857] gretap1: left promiscuous mode
[  250.026962][T15857] ip6gre1: left allmulticast mode
[  250.034391][T15857] macvtap1: left promiscuous mode
[  250.036115][T15857] macvtap1: left allmulticast mode
[  250.183474][T15869] netlink: 'syz.2.3035': attribute type 1 has an invalid length.
[  250.610907][T15900] netlink: 'syz.2.3041': attribute type 12 has an invalid length.
[  250.676713][T15910] netlink: 'syz.2.3044': attribute type 1 has an invalid length.
[  250.901970][T15928] sctp: [Deprecated]: syz.1.3050 (pid 15928) Use of int in max_burst socket option.
[  250.901970][T15928] Use struct sctp_assoc_value instead
[  251.106846][T15943] C! speed is unknown, defaulting to 1000
[  251.891820][T15988] IPv6: Can't replace route, no match found
[  251.983970][T15996] wg1: entered promiscuous mode
[  251.985897][T15996] wg1: entered allmulticast mode
[  251.992637][T15998] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  252.555270][T16018] veth27: entered promiscuous mode
[  252.561244][T16018] bond30: (slave veth27): Enslaving as a backup interface with a down link
[  252.717747][T16036] __nla_validate_parse: 4 callbacks suppressed
[  252.717765][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3083'.
[  252.912107][T16038] validate_nla: 8 callbacks suppressed
[  252.912129][T16038] netlink: 'syz.0.3084': attribute type 16 has an invalid length.
[  252.923141][T16038] netlink: 'syz.0.3084': attribute type 17 has an invalid length.
[  252.930663][T16047] netlink: 'syz.1.3087': attribute type 29 has an invalid length.
[  252.944750][T16047] netlink: 'syz.1.3087': attribute type 29 has an invalid length.
[  252.948854][T16047] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3087'.
[  253.032227][T16049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3088'.
[  253.139743][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'.
[  253.150983][T16061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.187120][T16063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3092'.
[  253.262553][T16067] netlink: 'syz.0.3095': attribute type 29 has an invalid length.
[  253.266428][T16067] netlink: 'syz.0.3095': attribute type 29 has an invalid length.
[  253.270658][T16067] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3095'.
[  253.287223][T16069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.290083][T16069] IPv6: NLM_F_CREATE should be set when creating new route
[  253.292918][T16069] IPv6: NLM_F_CREATE should be set when creating new route
[  253.301739][T16069] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3096'.
[  253.308714][T16069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3096'.
[  253.315815][T16069] dvmrp1: left allmulticast mode
[  253.336898][T16071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3097'.
[  253.345597][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'.
[  253.355615][T16071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.370898][T16072] lo speed is unknown, defaulting to 1000
[  253.377393][T16072] lo speed is unknown, defaulting to 1000
[  253.383222][T16072] lo speed is unknown, defaulting to 1000
[  253.487990][T16069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.574608][ T5872] lo speed is unknown, defaulting to 1000
[  253.577330][T16072] infiniband syz0: set active
[  253.580266][T16072] infiniband syz0: added lo
[  253.605679][T16072] RDS/IB: syz0: added
[  253.608602][T16072] smc: adding ib device syz0 with port count 1
[  253.610590][T16072] smc:    ib device syz0 port 1 has pnetid 
[  253.613563][ T5872] lo speed is unknown, defaulting to 1000
[  253.617494][T16072] lo speed is unknown, defaulting to 1000
[  253.764663][T16072] lo speed is unknown, defaulting to 1000
[  253.987768][T16072] lo speed is unknown, defaulting to 1000
[  254.336195][T16112] pim6reg: entered allmulticast mode
[  254.351117][T16110] pim6reg: left allmulticast mode
[  254.581637][T16127] x_tables: duplicate underflow at hook 1
[  255.032740][T16171] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  255.076953][T16178] netlink: 'syz.1.3134': attribute type 178 has an invalid length.
[  255.137670][T16181] C! speed is unknown, defaulting to 1000
[  255.142909][T16181] lo speed is unknown, defaulting to 1000
[  255.469031][ T5810] Bluetooth: hci2: command 0x0405 tx timeout
[  256.184940][T16266] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  256.187451][T16266] netlink: 'syz.1.3165': attribute type 2 has an invalid length.
[  256.220641][T16268] netlink: 'syz.2.3166': attribute type 29 has an invalid length.
[  256.290371][T16275] Bluetooth: MGMT ver 1.23
[  256.349991][T16280] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  256.822549][T16326] C! speed is unknown, defaulting to 1000
[  256.826154][T16326] lo speed is unknown, defaulting to 1000
[  256.878220][T16329] C! speed is unknown, defaulting to 1000
[  257.210952][T16329] lo speed is unknown, defaulting to 1000
[  257.301980][   T56] block nbd0: Receive control failed (result -32)
[  257.453206][T16326] xt_CT: No such helper "snmp"
[  258.316974][T16372] Cannot find set identified by id 2 to match
[  258.757322][T16394] __nla_validate_parse: 24 callbacks suppressed
[  258.757335][T16394] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3209'.
[  258.842075][T16398] validate_nla: 9 callbacks suppressed
[  258.842095][T16398] netlink: 'syz.2.3211': attribute type 7 has an invalid length.
[  258.970282][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  259.020298][T16404] netlink: 'syz.0.3214': attribute type 29 has an invalid length.
[  259.026726][T16404] netlink: 'syz.0.3214': attribute type 29 has an invalid length.
[  259.031914][T16404] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3214'.
[  259.104428][T16409] netlink: 'syz.0.3216': attribute type 10 has an invalid length.
[  259.151479][T16414] netlink: 'syz.2.3218': attribute type 1 has an invalid length.
[  259.198585][T16414] veth41: entered promiscuous mode
[  259.204749][T16414] bond38: (slave veth41): Enslaving as a backup interface with a down link
[  259.251970][T16417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'.
[  259.316827][T16423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3222'.
[  259.330396][T16424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'.
[  259.478220][T16436] syzkaller1: entered promiscuous mode
[  259.480555][T16436] syzkaller1: entered allmulticast mode
[  259.872803][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3235'.
[  259.964914][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3237'.
[  260.022884][T16471] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  260.032127][T16471] netlink: 'syz.0.3237': attribute type 4 has an invalid length.
[  260.173227][T16481] netlink: 'syz.0.3240': attribute type 1 has an invalid length.
[  260.184334][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3240'.
[  260.257909][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'.
[  260.405159][T16492] Unsupported ieee802154 address type: 0
[  260.596485][T16506] netlink: 'syz.2.3249': attribute type 1 has an invalid length.
[  261.095808][T16536] netlink: 'syz.2.3256': attribute type 29 has an invalid length.
[  261.182357][T16541] netlink: 'syz.1.3259': attribute type 1 has an invalid length.
[  261.681197][T16580] 8021q: adding VLAN 0 to HW filter on device bond63
[  261.696495][T16580] bond63: (slave ip6gretap3): making interface the new active one
[  261.709198][T16580] bond63: (slave ip6gretap3): Enslaving as an active interface with an up link
[  261.896933][T16602] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  262.045148][T16608] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  262.225248][T16619] veth43: entered promiscuous mode
[  262.229600][T16619] bond39: (slave veth43): Enslaving as a backup interface with a down link
[  263.094278][ T5872] lo speed is unknown, defaulting to 1000
[  263.096635][ T5872] syz0: Port: 1 Link DOWN
[  263.104838][ T5872] lo speed is unknown, defaulting to 1000
[  263.124497][T16653] IPv6: NLM_F_REPLACE set, but no existing node found!
[  263.629693][ T5810] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  263.785738][T16707] __nla_validate_parse: 22 callbacks suppressed
[  263.785757][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'.
[  263.921859][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'.
[  263.970758][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3309'.
[  264.033743][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3309'.
[  264.038892][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3309'.
[  264.602799][T16737] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  264.802152][T16765] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  264.994019][T16773] xt_l2tp: unknown flags: 10
[  265.228730][T16780] validate_nla: 9 callbacks suppressed
[  265.228751][T16780] netlink: 'syz.1.3323': attribute type 1 has an invalid length.
[  265.270680][T16780] veth37: entered promiscuous mode
[  265.287515][T16780] bond64: (slave veth37): Enslaving as a backup interface with a down link
[  265.696762][T16800] netlink: 'syz.0.3331': attribute type 1 has an invalid length.
[  265.786824][T16800] veth29: entered promiscuous mode
[  265.794760][T16800] bond31: (slave veth29): Enslaving as a backup interface with a down link
[  265.933490][T16815] nbd: must specify a device to reconfigure
[  265.938962][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'.
[  265.987538][T16823] netlink: 'syz.2.3337': attribute type 29 has an invalid length.
[  266.000855][T16823] netlink: 'syz.2.3337': attribute type 29 has an invalid length.
[  266.007867][T16823] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3337'.
[  266.089986][T16829] netlink: 'syz.1.3340': attribute type 1 has an invalid length.
[  266.155532][T16829] veth39: entered promiscuous mode
[  266.162122][T16829] bond65: (slave veth39): Enslaving as a backup interface with a down link
[  266.201411][T16827] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3339'.
[  266.243402][T16839] xt_hashlimit: size too large, truncated to 1048576
[  266.314947][T16845] sctp: [Deprecated]: syz.1.3342 (pid 16845) Use of int in maxseg socket option.
[  266.314947][T16845] Use struct sctp_assoc_value instead
[  266.556993][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'.
[  266.572787][T16856] nbd: socks must be embedded in a SOCK_ITEM attr
[  266.823387][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3354'.
[  267.012273][T16894] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  267.221324][T16906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  267.964397][T16938] netlink: 'syz.0.3375': attribute type 4 has an invalid length.
[  268.148568][T16953] netlink: 'syz.2.3378': attribute type 1 has an invalid length.
[  268.347487][T16967] IPVS: Scheduler module ip_vs_sip not found
[  268.401230][T16977] xt_hashlimit: invalid interval
[  268.417550][T16977] pim6reg1: entered promiscuous mode
[  268.421602][T16977] pim6reg1: entered allmulticast mode
[  268.430863][T16977] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  268.433912][T16977] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  268.545151][T16983] syzkaller1: entered promiscuous mode
[  268.547341][T16983] syzkaller1: entered allmulticast mode
[  268.784699][T17007] xt_TPROXY: Can be used only with -p tcp or -p udp
[  268.833611][T17001] __nla_validate_parse: 16 callbacks suppressed
[  268.833633][T17001] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3395'.
[  268.915535][T17020] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3397'.
[  268.965854][T17024] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3402'.
[  269.077518][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'.
[  269.136932][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'.
[  269.450007][T17055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.463243][T17056] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.833100][T17099] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3427'.
[  269.845834][T17099] netlink: 'syz.1.3427': attribute type 7 has an invalid length.
[  269.880454][T17104] trusted_key: syz.0.3426 sent an empty control message without MSG_MORE.
[  269.891357][T17101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3428'.
[  269.966597][T17109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3429'.
[  270.246493][T17142] netlink: 'syz.0.3439': attribute type 1 has an invalid length.
[  270.331338][T17142] veth31: entered promiscuous mode
[  270.342857][T17142] bond32: (slave veth31): Enslaving as a backup interface with a down link
[  270.389899][T17161] bond30: (slave gretap3): Releasing active interface
[  270.402172][T17161] bond34: (slave gretap4): Releasing active interface
[  270.405333][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  270.410410][T17164] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3447'.
[  270.416566][T17161] bond38: (slave veth41): Releasing backup interface
[  270.426301][T17161] bond39: (slave veth43): Releasing backup interface
[  270.457463][T17160] C! speed is unknown, defaulting to 1000
[  270.463133][T17160] lo speed is unknown, defaulting to 1000
[  270.564968][T17166] C! speed is unknown, defaulting to 1000
[  270.684334][T17166] lo speed is unknown, defaulting to 1000
[  270.723456][T17183] bond33: entered promiscuous mode
[  270.726356][T17183] 8021q: adding VLAN 0 to HW filter on device bond33
[  270.780211][T17182] 
[  270.781253][T17182] ======================================================
[  270.783890][T17182] WARNING: possible circular locking dependency detected
[  270.786521][T17182] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  270.790097][T17182] ------------------------------------------------------
[  270.793166][T17182] syz.2.3451/17182 is trying to acquire lock:
[  270.795538][T17182] ffff888105b22170 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x12a/0x720
[  270.798976][T17182] 
[  270.798976][T17182] but task is already holding lock:
[  270.801425][T17182] ffffffff8f668a38 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  270.804309][T17182] 
[  270.804309][T17182] which lock already depends on the new lock.
[  270.804309][T17182] 
[  270.807444][T17182] 
[  270.807444][T17182] the existing dependency chain (in reverse order) is:
[  270.810176][T17182] 
[  270.810176][T17182] -> #2 (nr_node_list_lock){+...}-{3:3}:
[  270.812555][T17182]        lock_acquire+0x120/0x360
[  270.814061][T17182]        _raw_spin_lock_bh+0x36/0x50
[  270.815702][T17182]        nr_rt_device_down+0xa9/0x720
[  270.817345][T17182]        nr_device_event+0x137/0x150
[  270.818999][T17182]        notifier_call_chain+0x1b6/0x3e0
[  270.820767][T17182]        dev_close_many+0x29c/0x410
[  270.822370][T17182]        netif_close+0x158/0x210
[  270.823922][T17182]        dev_close+0x10a/0x220
[  270.825400][T17182]        bpq_device_event+0x2f4/0x600
[  270.827212][T17182]        notifier_call_chain+0x1b6/0x3e0
[  270.829100][T17182]        __dev_notify_flags+0x18d/0x2e0
[  270.830805][T17182]        netif_change_flags+0xe8/0x1a0
[  270.832472][T17182]        dev_change_flags+0x130/0x260
[  270.834101][T17182]        dev_ioctl+0x7b4/0x1150
[  270.835583][T17182]        sock_do_ioctl+0x22c/0x300
[  270.837147][T17182]        sock_ioctl+0x576/0x790
[  270.838638][T17182]        __se_sys_ioctl+0xfc/0x170
[  270.840187][T17182]        do_syscall_64+0xfa/0x3b0
[  270.841749][T17182]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.843702][T17182] 
[  270.843702][T17182] -> #1 (nr_neigh_list_lock){+...}-{3:3}:
[  270.846085][T17182]        lock_acquire+0x120/0x360
[  270.847606][T17182]        _raw_spin_lock_bh+0x36/0x50
[  270.849236][T17182]        nr_remove_neigh+0x25/0xe0
[  270.850793][T17182]        nr_add_node+0x1d9f/0x2570
[  270.852373][T17182]        nr_rt_ioctl+0xc12/0xd50
[  270.853907][T17182]        sock_do_ioctl+0xdc/0x300
[  270.855439][T17182]        sock_ioctl+0x576/0x790
[  270.856916][T17182]        __se_sys_ioctl+0xfc/0x170
[  270.858736][T17182]        do_syscall_64+0xfa/0x3b0
[  270.860302][T17182]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.862389][T17182] 
[  270.862389][T17182] -> #0 (&nr_node->node_lock){+...}-{3:3}:
[  270.865288][T17182]        validate_chain+0xb9b/0x2140
[  270.867338][T17182]        __lock_acquire+0xab9/0xd20
[  270.869309][T17182]        lock_acquire+0x120/0x360
[  270.871241][T17182]        _raw_spin_lock_bh+0x36/0x50
[  270.872887][T17182]        nr_rt_device_down+0x12a/0x720
[  270.874552][T17182]        nr_device_event+0x137/0x150
[  270.876367][T17182]        notifier_call_chain+0x1b6/0x3e0
[  270.878429][T17182]        dev_close_many+0x29c/0x410
[  270.880048][T17182]        netif_close+0x158/0x210
[  270.881558][T17182]        dev_close+0x10a/0x220
[  270.883037][T17182]        bpq_device_event+0x2f4/0x600
[  270.884724][T17182]        notifier_call_chain+0x1b6/0x3e0
[  270.886426][T17182]        __dev_notify_flags+0x18d/0x2e0
[  270.888211][T17182]        netif_change_flags+0xe8/0x1a0
[  270.889887][T17182]        dev_change_flags+0x130/0x260
[  270.891525][T17182]        dev_ioctl+0x7b4/0x1150
[  270.893044][T17182]        sock_do_ioctl+0x22c/0x300
[  270.894664][T17182]        sock_ioctl+0x576/0x790
[  270.896359][T17182]        __se_sys_ioctl+0xfc/0x170
[  270.897954][T17182]        do_syscall_64+0xfa/0x3b0
[  270.899498][T17182]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.901453][T17182] 
[  270.901453][T17182] other info that might help us debug this:
[  270.901453][T17182] 
[  270.904485][T17182] Chain exists of:
[  270.904485][T17182]   &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock
[  270.904485][T17182] 
[  270.908767][T17182]  Possible unsafe locking scenario:
[  270.908767][T17182] 
[  270.911029][T17182]        CPU0                    CPU1
[  270.912674][T17182]        ----                    ----
[  270.914317][T17182]   lock(nr_node_list_lock);
[  270.915751][T17182]                                lock(nr_neigh_list_lock);
[  270.917958][T17182]                                lock(nr_node_list_lock);
[  270.920192][T17182]   lock(&nr_node->node_lock);
[  270.921670][T17182] 
[  270.921670][T17182]  *** DEADLOCK ***
[  270.921670][T17182] 
[  270.924099][T17182] 3 locks held by syz.2.3451/17182:
[  270.925683][T17182]  #0: ffffffff8f50ffc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  270.928370][T17182]  #1: ffffffff8f6689d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  270.931402][T17182]  #2: ffffffff8f668a38 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  270.934402][T17182] 
[  270.934402][T17182] stack backtrace:
[  270.936221][T17182] CPU: 1 UID: 0 PID: 17182 Comm: syz.2.3451 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  270.936233][T17182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.936241][T17182] Call Trace:
[  270.936249][T17182]  <TASK>
[  270.936255][T17182]  dump_stack_lvl+0x189/0x250
[  270.936273][T17182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.936285][T17182]  ? __pfx__printk+0x10/0x10
[  270.936297][T17182]  ? print_lock_name+0xde/0x100
[  270.936306][T17182]  print_circular_bug+0x2ee/0x310
[  270.936316][T17182]  check_noncircular+0x134/0x160
[  270.936325][T17182]  validate_chain+0xb9b/0x2140
[  270.936337][T17182]  __lock_acquire+0xab9/0xd20
[  270.936349][T17182]  ? nr_rt_device_down+0x12a/0x720
[  270.936361][T17182]  lock_acquire+0x120/0x360
[  270.936370][T17182]  ? nr_rt_device_down+0x12a/0x720
[  270.936386][T17182]  ? nr_rt_device_down+0x12a/0x720
[  270.936397][T17182]  _raw_spin_lock_bh+0x36/0x50
[  270.936408][T17182]  ? nr_rt_device_down+0x12a/0x720
[  270.936420][T17182]  nr_rt_device_down+0x12a/0x720
[  270.936433][T17182]  nr_device_event+0x137/0x150
[  270.936444][T17182]  notifier_call_chain+0x1b6/0x3e0
[  270.936457][T17182]  dev_close_many+0x29c/0x410
[  270.936467][T17182]  ? __pfx_dev_close_many+0x10/0x10
[  270.936474][T17182]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  270.936485][T17182]  ? bond_netdev_event+0x227/0xe80
[  270.936496][T17182]  netif_close+0x158/0x210
[  270.936504][T17182]  ? __pfx_netif_close+0x10/0x10
[  270.936511][T17182]  ? tun_device_event+0x77/0x1020
[  270.936527][T17182]  dev_close+0x10a/0x220
[  270.936538][T17182]  bpq_device_event+0x2f4/0x600
[  270.936549][T17182]  notifier_call_chain+0x1b6/0x3e0
[  270.936562][T17182]  __dev_notify_flags+0x18d/0x2e0
[  270.936572][T17182]  ? __pfx___dev_notify_flags+0x10/0x10
[  270.936580][T17182]  ? __dev_change_flags+0x4cc/0x6d0
[  270.936589][T17182]  ? __pfx___dev_change_flags+0x10/0x10
[  270.936598][T17182]  ? dev_ioctl+0x7a4/0x1150
[  270.936628][T17182]  ? full_name_hash+0x92/0xe0
[  270.936642][T17182]  netif_change_flags+0xe8/0x1a0
[  270.936652][T17182]  dev_change_flags+0x130/0x260
[  270.936662][T17182]  dev_ioctl+0x7b4/0x1150
[  270.936671][T17182]  sock_do_ioctl+0x22c/0x300
[  270.936685][T17182]  ? __pfx_sock_do_ioctl+0x10/0x10
[  270.936695][T17182]  ? __lock_acquire+0xab9/0xd20
[  270.936715][T17182]  sock_ioctl+0x576/0x790
[  270.936727][T17182]  ? __pfx_sock_ioctl+0x10/0x10
[  270.936738][T17182]  ? __fget_files+0x2a/0x420
[  270.936747][T17182]  ? __fget_files+0x3a0/0x420
[  270.936755][T17182]  ? __fget_files+0x2a/0x420
[  270.936764][T17182]  ? bpf_lsm_file_ioctl+0x9/0x20
[  270.936777][T17182]  ? __pfx_sock_ioctl+0x10/0x10
[  270.936787][T17182]  __se_sys_ioctl+0xfc/0x170
[  270.936799][T17182]  do_syscall_64+0xfa/0x3b0
[  270.936807][T17182]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.936817][T17182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.936825][T17182]  ? exc_page_fault+0x9f/0xf0
[  270.936836][T17182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.936844][T17182] RIP: 0033:0x7fe2f458e929
[  270.936856][T17182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.936863][T17182] RSP: 002b:00007fe2f53d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  270.936873][T17182] RAX: ffffffffffffffda RBX: 00007fe2f47b5fa0 RCX: 00007fe2f458e929
[  270.936880][T17182] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 000000000000000d
[  270.936885][T17182] RBP: 00007fe2f4610b39 R08: 0000000000000000 R09: 0000000000000000
[  270.936891][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.936896][T17182] R13: 0000000000000000 R14: 00007fe2f47b5fa0 R15: 00007ffcd13d75e8
[  270.936906][T17182]  </TASK>
[  271.060770][T17183] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)

VM DIAGNOSIS:
14:15:19  Registers:
info registers vcpu 0

CPU#0
RAX=00007fd2219e0aa0 RBX=ffffffffffffff80 RCX=00007fd22190937f RDX=0000000000000000
RSI=000056176bbb0150 RDI=00007fd2219e0aa0 RBP=0000000000000002 RSP=00007ffec05e6538
R8 =0000000000000000 R9 =0000000000000002 R10=0000000000000812 R11=0000000000000206
R12=000056176bbb0150 R13=000056176bbab130 R14=000056176bbab270 R15=000000000000002e
RIP=00007fd2218b60b4 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd2217b1380 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd221a63690 CR3=00000000331eb000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffff000000000000 0000000000000000 XMM03=ffffffffffff0000 ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006a39 RDI=0000000000006a3a RBP=00000000000003f8 RSP=ffffc90008496dd0
R8 =ffff8880216d0237 R9 =1ffff110042da046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48d0 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe2f53d36c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8e44da9ff8 CR3=000000010c6f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=03000c3a2e000000 002e3a0004000c80 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007fbc18b84458 00007fbc18b844a0
XMM06=00007fbc18b84498 00007fbc18b84490 XMM07=00007fbc18b84488 00007fbc18b84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbc18a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
