last executing test programs:

1.13187771s ago: executing program 1 (id=2712):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000300)=0x78, 0x4)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x30, 0x0, &(0x7f0000000040))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000007}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
r8 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r9})
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f0000000000))
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, 0x0, 0x0)
unshare(0x22020400)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r10, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090400000000fddbdf250a0000000000f9240000049c03071e0001000000080017004e234e236c7421a965dc0e558f6d7c8371d432241ed2927f681ea5c14b3603016db3423688484e340d0cd7e8295fef9e016c158d36284cf21c12f77a9d151ad2390913c0c0d84df8cf74e33a7f1612023b8768bda48abebd1bb83084ce74d39f3007c4e200005538142cf3d3ddb47d9a82b3bb753d6a9a4c04cf43a63c555b6f7641fadcbb62c08278902322cc1c8baa1daef79578709657ae26b67205a75c2149be4901a2ed3a493f80230a39000000000000"], 0x2c}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08f12cbd7000ffdbdf2541000000070000000800a000000005001801170000120800270002000000050019010b000800000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40001)

1.128883856s ago: executing program 1 (id=2713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x8030400)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
close(0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000000000e0001006e657464657673696d0000000f0002006e657464657677696d30000008000b00af575741"], 0x64}}, 0x20008000)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x38, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)

691.144866ms ago: executing program 2 (id=2716):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
recvmmsg(r1, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/55, 0x37}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000002900)=""/4103, 0x1007}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f00000005c0)=""/138, 0x8a}], 0x5}, 0x80000002}], 0x4, 0x6000, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) (async)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)

631.152838ms ago: executing program 2 (id=2717):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {0x0, 0x400, 0x2be, 0x80000000000000}, 0x5}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) (async)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {0x0, 0x400, 0x2be, 0x80000000000000}, 0x5}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) (async)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) (async)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d61637365630000180002800c0004000300000100c2800008000500ffffffff08000500", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

521.291029ms ago: executing program 2 (id=2718):
syz_emit_ethernet(0x71, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x3b, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36ee"}}}}}}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0)
r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080))
recvmmsg$unix(r6, &(0x7f0000004080)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/62, 0x3e}], 0x4, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/51, 0x33}, {&(0x7f0000000640)=""/181, 0xb5}], 0x2, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)}, {&(0x7f0000000780)=""/128, 0x80}, {&(0x7f0000001940)=""/229, 0xe5}], 0x4, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/238, 0xee}, {&(0x7f0000002d00)=""/70, 0x46}, {&(0x7f0000002d80)=""/4096, 0x1000}], 0x4, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000003e80)=""/2, 0x2}, {&(0x7f0000003ec0)=""/172, 0xac}, {&(0x7f0000003f80)=""/27, 0x1b}], 0x3, &(0x7f0000004000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x6, 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10)

520.346937ms ago: executing program 2 (id=2719):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x5, 0x8, 0x21011, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000000000000000000008500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@typedef={0x4, 0x0, 0x0, 0x8, 0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x2e, 0x30, 0x5f, 0x61]}}, &(0x7f0000000180)=""/139, 0x37, 0x8b, 0x1, 0x6fe57cbe}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r9, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

365.62751ms ago: executing program 0 (id=2721):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@local, @remote, 0x0, 0x2, [@multicast2, @broadcast]}, 0x18)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206030000000000000000000000000705000100070000000900020073"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000900), 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)

248.856818ms ago: executing program 0 (id=2722):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000200)={'wlan0\x00'}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) (async)
close(r3) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a7aadf991fd2e9ba10000c0a9000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8) (async)
unshare(0x4000400)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async)
r9 = socket$unix(0x1, 0x5, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r0, 0x1)

242.778824ms ago: executing program 0 (id=2723):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x22, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff00000003070102000000000000003002fc46060900010073797a31000000000c98a281b6c7b06754000009"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)

185.819526ms ago: executing program 1 (id=2724):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000700d3d45b05000000000000850000003b007596406cffffa3045dae"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
r7 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8})
ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000))
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, 0x0, 0x0)
unshare(0x22020400)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090400000000fddbdf250a0000000000f9240000049c03071e0001000000080017004e234e236c7421a965dc0e558f6d7c8371d432241ed2927f681ea5c14b3603016db3423688484e340d0cd7e8295fef9e016c158d36284cf21c12f77a9d151ad2390913c0c0d84df8cf74e33a7f1612023b8768bda48abebd1bb83084ce74d39f3007c4e200005538142cf3d3ddb47d9a82b3bb753d6a9a4c04cf43a63c555b6f7641fadcbb62c08278902322cc1c8baa1daef79578709657ae26b67205a75c2149be4901a2ed3a493f80230a39000000000000"], 0x2c}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08f12cbd7000ffdbdf2541000000070000000800a000000005001801170000120800270002000000050019010b000800000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40001)

183.740583ms ago: executing program 2 (id=2725):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x5, 0x1e, 0x4cd, 0x80000000, 0x53]}, &(0x7f0000000000)=0x54)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x101, 0x80000001}, {0x10, 0x1, 0x1}, {0x10, 0x10e, 0x7fff}], 0x30}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="54f5ddea2b", 0x5}], 0x1}}], 0x2, 0x4000)

120.718036ms ago: executing program 0 (id=2726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000009356f70f00000a0000000000000000000000140005"], 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="01", 0x1}], 0x2}, 0xb00)
setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0xff, 0x4)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
sendmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x101, 0x80000001}, {0x10, 0x1, 0x1}, {0x10, 0x10e, 0x7fff}], 0x30}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)="54f5ddea2b", 0x5}], 0x1}}], 0x2, 0x4000)

118.074965ms ago: executing program 1 (id=2727):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0xc0010)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)

116.808764ms ago: executing program 2 (id=2728):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair(0x3, 0x3, 0x1, &(0x7f0000000000))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x6}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000002d00010026bdc089fa87ec9de09a674c4f37316d7000fcdbdf25040000000c911e6a030f75a77497d1001a020000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000007}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
r8 = socket(0xa, 0x3, 0x87)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c40)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x27, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5b6, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7fffffff}, @generic={0x4, 0x0, 0x8, 0x400, 0xd}, @generic={0x5, 0x1, 0x1, 0x7, 0xff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x1, 0x2, 0x4, 0xb, 0x8, 0x10, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x2, 0x2, 0x7, 0x20d7e65f}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r9, 0xffffffffffffffff], &(0x7f0000001a80)=[{0x0, 0x5, 0x1, 0x2}, {0x2, 0x3, 0xd, 0xb}], 0x10, 0x16}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', <r10=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r10})
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, 0x0, 0x0)
unshare(0x22020400)

115.322088ms ago: executing program 0 (id=2729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0xffffffffffffff75, 0x38, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x0, 0x10d, 0x0, 0x0, @str='IPVS\x00'}, @nested={0x0, 0x81, 0x0, 0x1, [@generic="7eb04741fd18c4d734539a1fc6a37c4f383e2ab4515abef4e8a99573a64f559bb09b6e0298e990fffa6a074e78334ecfd2b5468c75a6b7844d7b5e5d5a20361ea694cf6072aaad64348e0a0f2344b7ea9202079753c27236c01ca3e55fc9d571b00d30a214be8846e57c4ae4a7e5b4d0ae4d8056464a8486f2a60803f259f1b80e0f4b4b3a5dcde39d547ea13394c9befe7aa2778b", @generic="a6b77a58a4e31ec5bef02b09a0", @generic="9c6fdde2a5f8a32237ee9db5a30557ff90ccc1979e6b68b044fbeb77fe4f069c7c2c4321ab7d1d587d767c5838b53cd43d8a5a87ed57debeae7acc1a", @nested={0x0, 0x73, 0x0, 0x1, [@generic="0477f97f8eea4de3b9d710ae0b65ff6984a0d0f17f98d87eae2bfdc349b85c86a2a5a4e4822a80d0199d24fe63dee7e08a6d7dfe935dfb60f3852585370e8fb3784278d7f138c9796ee265a776a59458af45ce82220a99763f1a91272ae730176b938bbebe5203dcc36b1fbc9c6d17a275ca2b58cb63e88fb5098e179a82462ef769d45a7f86c161099de3954c9bbc3adfc04447c1bd7a0bfffb6e5fbe4207f1e0c5c92e77f59920173e2dffd3c4eb03915a3e9babd80379a2de1d2fd49a6249b13c5fa56b833c5897a272a005f1bd94a436fb99d2eb6339f588b04c3e", @nested={0x0, 0x24}, @generic="297098fe1ea2ba88f16db77a051a9cf4c893d10a96879bebefc05a5a51d3f7b4cc386545605e3c3cc736a892a11ad32d6b2ef9b9738f4f59db0a0777a0f25646df7bc2", @nested={0x0, 0xd8}, @generic="4af143fedcb35faab5a0718b08c4d0484ce82564f0c0c248f9f0b1d9398448065a302c8a89cd33d57a6cc7c0d2b42ede35c066e15fac91a38296875676e331c239eba655cd2a1b8617c04b912428afdd6c3633e29cfa02bdeb7e802b69581517e31c6e71806b36eafe450af6695c568e96dce99cc1413773dbdc", @generic="266271b6bd57ed0a29ae010de2981f1d873ee705454a6f7a54501e2eb268b8a37b4a5755d6a00b15fb7c46", @nested={0x0, 0xfc}, @generic="c7e188104edfdef7835f830ce86e12a1962e8307ff146ff45dbe7f138d52c1369f2786662c5dca383479f058ee6f53e315024194c6c6745439b93f951c72f4a5eb8d9f5f788734bbc29ed46338f83984313e2e0bc19d5b1eb848ea59089fbecbf64ca6116db63de1ddb9e54321c629dbea3f503346d36bb04933546c599ab02a5abfb26d53eb76ebcf77789691460986049013ce0366a0f49be195a120cb30c24a29afe312203f164aaee7ecfce9ac2414d1f4f5b5f8ef0ece008cbd77741db64eed58f598bc4911fb838176c7f4542f4cfff6c6", @nested={0x0, 0x62}, @typed={0x0, 0x150, 0x0, 0x0, @u32=0xff}]}]}, @generic="871097f311107fcb59423d039863dc06b058394c44e82e789df5597daa6ff61d25823248f8eb006de031d95b0a79b64e128d931975d704fe9545920aa384f46caad47fe216831489deafd42df800bcfd0485f87e38a5", @nested={0x0, 0x12d, 0x0, 0x1, [@typed={0x0, 0x71, 0x0, 0x0, @ipv6=@remote}, @nested={0x0, 0x1a, 0x0, 0x1, [@typed={0x0, 0xf0, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x0, 0x44, 0x0, 0x0, @fd=r1}, @typed={0x0, 0x103, 0x0, 0x0, @u32=0x5}, @nested={0x0, 0x118}]}, @nested={0x0, 0x1a, 0x0, 0x1, [@generic="c0d7ff333e7b184ebeeff6e60e4d5fd0ee8f24cff9d1b759e1b823ab588edfa662c99c2298de37d8570ddc44b4e13e55b000238dae67d0c2fcc9c6c57b437f9c30bf585aa4ba6376692ce51084127245", @generic="68db13f0217f236a963350804cc9f780dacd39157c11443517b4c3be7445d1782faa6d10f8f2a80678dde004c3bfc91f7a1af427188baf6e91d327bd184059cbacc40f307f97418e31659e0facebdfd23e94d5bed94c434b120b94a3c3f5b95407e98f7bc42c5367284a41cdd44e78a007f8c50954c37afd6dc7accc85fa72b89f8812ea516cb1085016ac413caa8b7a849ff5bac71a9d8c97276d02263454c9422d384df91194a8a7642bd7279e6c1e0ca0d72801ab63f1ac1dcd1ec2817aeec68a10e8382d79bab446ece104c02d41541eed4a897a29ba2e1960dbffe52aea35336f398da1b1b21b5867cf1aa01989b412", @nested={0x0, 0x25}, @generic="d8bde45fd188b88b30013c2940b124633e3ca7bc3cc282496b3d2fa6033fdf3571e3f895013c8470955c4890c4018524f5dc3b32b4bbcb88d20a0e8805210ad62d5feca6f5b9743349d256eaf6878a81f52e48b3b52e88e22f1b04276bc2b43a3241e80be674087f33c5d3aa18d9c87c693502d4fdc3dd9bc1103aac6a20141bf7c568a3f5aff1ff7e6fc66a2dfe89843adccb0035b79d665fbde92ccbdadf7c1145e1ed3061cd35b8d780c379d15c909280bdffc4f77eb4cbd635d5f0ea224132a485b37c71073e5677f999b570c8344e215bf4e28968aae368a629d15629e757"]}, @nested={0x0, 0x26}]}, @nested={0x0, 0x9d, 0x0, 0x1, [@generic="e19e6b211be890f7615b70367134655cf10ba24fc86fc6d990d12bb865811d35f69688755f6edbd84ae49270a0627713a8bc50a2de803952d3b2f991e78e", @typed={0x0, 0x89, 0x0, 0x0, @fd=r3}]}, @generic="cc7bd3144276c42f9a0122a267af8e768c5467cd27b88c5969f83301bc8dab5d12760428a935984650dcfa1f719444197c067dcf62e15abcec4dd33da953b4b077016207ee3a7a40df20b63395c2d65378cda38545e1cf9ee8f4b37ce5b29e078038930cb3305c3a31da061039710b1ac2c97380159a3755ef095b6b9d9747f58bf2d4ced411add5912bc0d467af404f6bb1eaf86f5320a65879d672a7762fa6f81a36d9f143aa90e91da896761cfce4a30f919177fbc3f14422de414d5eba20ff85195f1e466bf4a34e810e7013cb91a53ab2b9871e518bdceb7aea5813130c9dc92f", @nested={0x0, 0x1e, 0x0, 0x1, [@nested={0x0, 0x67, 0x0, 0x1, [@typed={0x0, 0xb4, 0x0, 0x0, @uid=r4}, @nested={0x0, 0x1a}, @generic, @generic="a56161ce7408e6343d694e8eec0d5e2576e743fc7c0c36be2dec7d1a5086399f686fa17d56eae1bf66627bdcf02c1582e8484548317cea399dd3e9b5e15ce87d753836def0ab4f", @nested={0x0, 0x11f}]}, @typed={0x0, 0xa9, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x0, 0xd, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)

51.808011ms ago: executing program 1 (id=2730):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
sendto$x25(r1, &(0x7f00000001c0)="95faf27533d2790a394e163e88082a179efb0b0bebb12001fbd636945e827541cf499db394510fdbcb2f421a82db8e819f1abad5dccf8cd8b73ab0800c10ab6a5675e02393bdf0d25cc1bbc372fb0dbced6bc5e4c6785f01f7677d2d0550288c89c67cf557fa1d6469476e714d602388857d7d8a55c508b0c6e0caf81be1bb31077df6", 0x83, 0x80, &(0x7f0000000100), 0x12)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)

735.124µs ago: executing program 1 (id=2731):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001000000000000008000bdd8e3132c000000050a03658b000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000cd6f9bf59937469f8e25c67e411216000000000002000003140000"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000000000000000000000000000000000000000000000000000552707eb606e0793f4d18250e9f3de10dbfa7a7d53031d300595489655f360729f144ed535f9959731c530a406ecf053c8712e0d67daa22b360bcd34d0bf1a91fd9a142f063f1045e40d3353bc38177696ced37252deb1df787ea711d5f297fe4732afbf7a848a398140a28a3cf2d87692e6759ac76dc06c684e2b956efe84bdc641114c2519779cf83a1067710bfd4a7c3b0721158c75cec558"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) (async)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10) (async)
bind$vsock_stream(r2, &(0x7f0000000940), 0x10)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) (async)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
close(0x3) (async)
close(0x3)
listen(r2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

0s ago: executing program 0 (id=2732):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a40)={'wlan1\x00', &(0x7f0000000a00)=@ethtool_cmd={0x2f, 0x6, 0x4, 0x0, 0x9c, 0xa, 0x1, 0xff, 0x4, 0x8, 0x10000, 0x10, 0x6, 0x80, 0x7, 0x1, [0xcb, 0x7f]}})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket(0x2, 0x2, 0x0)
sendto$inet(r5, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x70}}, 0x20040054)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000002)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xb5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xc1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xfe}]}, 0x2c}}, 0x4004001)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
sendmsg$FOU_CMD_GET(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r10, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x4008845)

kernel console output (not intermixed with test programs):

own, defaulting to 1000
[   63.133108][ T6450] nbd: must specify an index to disconnect
[   63.279093][ T6460] tun1: tun_chr_ioctl cmd 1074025675
[   63.280892][ T6460] tun1: persist enabled
[   63.283218][ T6460] tun1: tun_chr_ioctl cmd 1074025675
[   63.285220][ T6460] tun1: persist enabled
[   63.853480][ T6503] Bluetooth: MGMT ver 1.23
[   63.865142][ T6503] sctp: [Deprecated]: syz.1.173 (pid 6503) Use of int in max_burst socket option.
[   63.865142][ T6503] Use struct sctp_assoc_value instead
[   64.420111][ T6512] netlink: 'syz.1.177': attribute type 4 has an invalid length.
[   64.474535][ T6521] sock: sock_timestamping_bind_phc: sock not bind to device
[   64.905780][ T6546] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   65.114288][ T6567] xfrm0: entered promiscuous mode
[   65.116476][ T6567] xfrm0: entered allmulticast mode
[   65.153396][ T6569] netlink: 'syz.1.195': attribute type 1 has an invalid length.
[   66.670799][ T6646] __nla_validate_parse: 16 callbacks suppressed
[   66.670821][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[   66.689904][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'.
[   66.698444][ T6646] bridge1: port 1(veth0_to_bond) entered blocking state
[   66.701109][ T6646] bridge1: port 1(veth0_to_bond) entered disabled state
[   66.704128][ T6646] veth0_to_bond: entered allmulticast mode
[   66.707045][ T6646] veth0_to_bond: entered promiscuous mode
[   66.723721][ T6646] vlan2: entered allmulticast mode
[   66.725924][ T6646] veth1: entered allmulticast mode
[   66.728143][ T6646] bridge1: port 2(vlan2) entered blocking state
[   66.730881][ T6646] bridge1: port 2(vlan2) entered disabled state
[   66.736260][ T6646] vlan2: entered promiscuous mode
[   66.738443][ T6646] veth1: entered promiscuous mode
[   67.328671][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   67.340256][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[   67.596190][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[   67.678914][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'.
[   67.695814][ T6695] tun2: tun_chr_ioctl cmd 1074025675
[   67.698931][ T6695] tun2: persist enabled
[   67.701208][ T6695] tun2: tun_chr_ioctl cmd 1074025675
[   67.705789][ T6695] tun2: persist enabled
[   67.825723][ T6724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.831539][ T6723] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.835483][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   67.839561][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'.
[   67.855974][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   67.863423][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'.
[   68.131704][ T6753] lo speed is unknown, defaulting to 1000
[   68.171310][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.501001][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.503843][ T6768] batadv_slave_1: entered promiscuous mode
[   69.532363][ T6810] tun2: tun_chr_ioctl cmd 1074025675
[   69.538285][ T6810] tun2: persist enabled
[   69.543678][ T6810] tun2: tun_chr_ioctl cmd 1074025675
[   69.549200][ T6810] tun2: persist enabled
[   69.655759][ T6816] lo speed is unknown, defaulting to 1000
[   69.842942][ T6833] netlink: 'syz.0.272': attribute type 12 has an invalid length.
[   69.848405][ T6834] ipvlan2: entered promiscuous mode
[   70.068726][ T6855] macsec1: entered promiscuous mode
[   70.070983][ T6855] macsec1: entered allmulticast mode
[   70.075442][ T6855] batadv_slave_1: entered promiscuous mode
[   70.079564][ T6853] batadv_slave_1: left promiscuous mode
[   70.116348][ T6859] bond0: Unable to set down delay as MII monitoring is disabled
[   70.170710][ T6862] lo speed is unknown, defaulting to 1000
[   70.721009][ T6880] syz.2.288 uses old SIOCAX25GETINFO
[   70.759216][ T6882] netlink: 'syz.2.289': attribute type 2 has an invalid length.
[   70.987643][ T6895] lo speed is unknown, defaulting to 1000
[   71.337814][ T6925] tun3: tun_chr_ioctl cmd 1074025675
[   71.340197][ T6925] tun3: persist enabled
[   71.342319][ T6925] tun3: tun_chr_ioctl cmd 1074025675
[   71.344682][ T6925] tun3: persist enabled
[   71.345699][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.957225][ T6937] __nla_validate_parse: 15 callbacks suppressed
[   71.957245][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'.
[   72.036812][ T6940] lo speed is unknown, defaulting to 1000
[   72.147183][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'.
[   72.299411][ T6956] lo speed is unknown, defaulting to 1000
[   72.415578][ T6973] bridge0: port 2(veth0_to_team) entered blocking state
[   72.420197][ T6973] bridge0: port 2(veth0_to_team) entered disabled state
[   72.428118][ T6973] veth0_to_team: entered allmulticast mode
[   72.431558][ T6973] veth0_to_team: entered promiscuous mode
[   72.435038][ T6973] bridge0: port 2(veth0_to_team) entered blocking state
[   72.437828][ T6973] bridge0: port 2(veth0_to_team) entered forwarding state
[   72.598553][ T6997] netlink: 'syz.2.324': attribute type 1 has an invalid length.
[   72.709889][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'.
[   72.762129][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'.
[   72.786433][ T7012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.791951][ T7012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.796400][ T7012] bond0 (unregistering): Released all slaves
[   72.893536][ T7027] tun4: tun_chr_ioctl cmd 1074025675
[   72.895330][ T7027] tun4: persist enabled
[   72.905620][ T7027] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.925391][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   73.333045][ T7052] gtp0: entered promiscuous mode
[   73.467792][ T7064] pim6reg: entered allmulticast mode
[   73.473930][ T7064] bridge2: entered promiscuous mode
[   73.476177][ T7064] bridge2: entered allmulticast mode
[   73.479882][ T7064] team0: Port device bridge2 added
[   73.488435][ T7064] netlink: 204172 bytes leftover after parsing attributes in process `syz.0.346'.
[   73.601542][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[   74.022663][ T7070] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.048809][ T7074] netlink: 384 bytes leftover after parsing attributes in process `syz.2.350'.
[   74.062378][ T7074] netlink: 'syz.2.350': attribute type 3 has an invalid length.
[   74.102681][ T7085] tun5: tun_chr_ioctl cmd 1074025673
[   74.108056][ T7083] tun5: tun_chr_ioctl cmd 1074025675
[   74.109787][ T7083] tun5: persist enabled
[   74.118902][ T7083] tun5: tun_chr_ioctl cmd 1074025675
[   74.121066][ T7083] tun5: persist enabled
[   74.221934][ T7095] tipc: Started in network mode
[   74.224719][ T7095] tipc: Node identity 46526bb8b167, cluster identity 4711
[   74.227474][ T7095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.231260][ T7096] syzkaller0: entered promiscuous mode
[   74.238698][ T7096] syzkaller0: entered allmulticast mode
[   74.258880][ T7096] tipc: Resetting bearer <eth:syzkaller0>
[   74.267415][ T7096] tipc: Disabling bearer <eth:syzkaller0>
[   74.281522][ T7100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.358174][ T7100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.399819][ T7100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.454870][ T7100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.506797][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.516716][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.534668][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.544559][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.582129][ T7113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'.
[   74.586849][ T7114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.361'.
[   74.761996][ T7131] lo speed is unknown, defaulting to 1000
[   74.972170][ T7141] netlink: 'syz.2.368': attribute type 1 has an invalid length.
[   75.119459][  T793] cfg80211: failed to load regulatory.db
[   75.335860][ T7166] tun6: tun_chr_ioctl cmd 1074025675
[   75.338143][ T7166] tun6: persist enabled
[   75.342815][ T7166] tun6: tun_chr_ioctl cmd 1074025675
[   75.345435][ T7166] tun6: persist enabled
[   75.840077][ T7193] openvswitch: netlink: Multiple metadata blocks provided
[   75.986792][ T7208] netlink: set zone limit has 4 unknown bytes
[   76.140069][ T7224] lo speed is unknown, defaulting to 1000
[   76.180990][ T7225] netlink: 'syz.2.395': attribute type 5 has an invalid length.
[   76.196128][ T5874] IPVS: starting estimator thread 0...
[   76.204780][ T7225] ieee802154 phy0 wpan0: encryption failed: -22
[   76.292647][ T7226] IPVS: using max 92 ests per chain, 220800 per kthread
[   76.427594][ T7231] _Z`Ԁ@: entered promiscuous mode
[   76.928018][ T7260] netlink: 'syz.1.405': attribute type 1 has an invalid length.
[   77.048375][ T7267] __nla_validate_parse: 13 callbacks suppressed
[   77.048395][ T7267] netlink: 428 bytes leftover after parsing attributes in process `syz.1.407'.
[   77.083282][ T7271] tun3: tun_chr_ioctl cmd 1074025675
[   77.085136][ T7271] tun3: persist enabled
[   77.086743][ T7271] tun3: tun_chr_ioctl cmd 1074025675
[   77.088637][ T7271] tun3: persist enabled
[   77.399601][ T7298] lo speed is unknown, defaulting to 1000
[   77.606190][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[   77.648202][ T7321] lo speed is unknown, defaulting to 1000
[   77.822137][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'.
[   77.955086][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'.
[   77.996556][ T7342] tipc: Started in network mode
[   77.999452][ T7342] tipc: Node identity 0a0f4b53e3bd, cluster identity 4711
[   78.005148][ T7342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.036446][ T7342] syzkaller0: entered promiscuous mode
[   78.039093][ T7342] syzkaller0: entered allmulticast mode
[   78.057036][ T7342] tipc: Resetting bearer <eth:syzkaller0>
[   78.074190][ T7341] tipc: Resetting bearer <eth:syzkaller0>
[   78.079056][ T7341] tipc: Disabling bearer <eth:syzkaller0>
[   78.468676][ T7364] lo speed is unknown, defaulting to 1000
[   78.550354][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[   78.573392][ T7372] netlink: 'syz.1.435': attribute type 83 has an invalid length.
[   78.614289][ T7377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.436'.
[   78.977053][ T7398] netlink: 'syz.2.442': attribute type 6 has an invalid length.
[   79.014059][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'.
[   79.039853][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'.
[   79.174930][ T7422] netlink: 'syz.0.447': attribute type 10 has an invalid length.
[   79.183023][ T7422] team0: Port device dummy0 added
[   79.199101][ T7422] netlink: 'syz.0.447': attribute type 10 has an invalid length.
[   79.209129][ T7422] team0: Port device dummy0 removed
[   79.223729][ T7424] syzkaller0: entered promiscuous mode
[   79.226785][ T7424] syzkaller0: entered allmulticast mode
[   79.334546][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'.
[   79.355744][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'.
[   79.529734][ T7432] lo speed is unknown, defaulting to 1000
[   79.634780][ T7440] ip6tnl2: entered promiscuous mode
[   79.689255][ T7444] tun7: tun_chr_ioctl cmd 1074025675
[   79.692265][ T7444] tun7: persist enabled
[   79.706944][ T7444] tun7: tun_chr_ioctl cmd 1074025675
[   79.709432][ T7444] tun7: persist enabled
[   79.761572][ T7446] tun8: tun_chr_ioctl cmd 1074025675
[   79.764890][ T7446] tun8: persist enabled
[   79.767293][ T7446] tun8: tun_chr_ioctl cmd 1074025675
[   79.771188][ T7446] tun8: persist enabled
[   80.015389][ T7461] lo speed is unknown, defaulting to 1000
[   80.118482][ T7476] bridge0: port 3(erspan0) entered blocking state
[   80.124022][ T7476] bridge0: port 3(erspan0) entered disabled state
[   80.127774][ T7476] erspan0: entered allmulticast mode
[   80.133467][ T7476] erspan0: entered promiscuous mode
[   80.135942][ T7476] bridge0: port 3(erspan0) entered blocking state
[   80.138282][ T7476] bridge0: port 3(erspan0) entered forwarding state
[   80.178740][ T7476] erspan0: left allmulticast mode
[   80.180959][ T7476] erspan0: left promiscuous mode
[   80.183405][ T7476] bridge0: port 3(erspan0) entered disabled state
[   80.286621][ T7508] tun2: tun_chr_ioctl cmd 1074025675
[   80.288904][ T7508] tun2: persist enabled
[   80.290697][ T7508] tun2: tun_chr_ioctl cmd 1074025675
[   80.293718][ T7508] tun2: persist enabled
[   80.357643][ T7513] tipc: Invalid UDP bearer configuration
[   80.357670][ T7513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   80.489691][ T7529] tun3: tun_chr_ioctl cmd 1074025675
[   80.491523][ T7529] tun3: persist enabled
[   80.495475][ T7529] tun3: tun_chr_ioctl cmd 1074025675
[   80.497369][ T7529] tun3: persist enabled
[   80.632585][ T7536] sctp: [Deprecated]: syz.2.486 (pid 7536) Use of int in max_burst socket option.
[   80.632585][ T7536] Use struct sctp_assoc_value instead
[   80.723382][ T7554] veth1_to_bond: entered allmulticast mode
[   80.742069][ T7554] bond0: (slave bond_slave_1): Releasing backup interface
[   80.758717][ T7554] veth1_to_bond (unregistering): left allmulticast mode
[   80.764522][ T7562] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   80.767917][ T7562] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   80.798814][ T7568] lo speed is unknown, defaulting to 1000
[   81.022034][ T7580] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.105259][ T7580] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.132150][ T7593] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[   81.161841][ T7580] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.214794][ T7580] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.220389][ T7603] tun4: tun_chr_ioctl cmd 1074025675
[   81.222522][ T7603] tun4: persist enabled
[   81.224213][ T7603] tun4: tun_chr_ioctl cmd 1074025675
[   81.225984][ T7603] tun4: persist enabled
[   81.288221][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.299121][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.303268][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.310478][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.860502][ T7607] netlink: 'syz.1.504': attribute type 4 has an invalid length.
[   81.958100][ T7622] netlink: zone id is out of range
[   81.960350][ T7622] netlink: zone id is out of range
[   81.963526][ T7622] netlink: zone id is out of range
[   81.965943][ T7622] netlink: zone id is out of range
[   81.968401][ T7622] netlink: zone id is out of range
[   81.970821][ T7622] netlink: zone id is out of range
[   81.973559][ T7622] netlink: zone id is out of range
[   81.975816][ T7622] netlink: zone id is out of range
[   81.978065][ T7622] netlink: zone id is out of range
[   81.980699][ T7622] netlink: zone id is out of range
[   82.045827][ T7626] tun9: tun_chr_ioctl cmd 1074025675
[   82.048496][ T7626] tun9: persist enabled
[   82.052844][ T7626] tun9: tun_chr_ioctl cmd 1074025675
[   82.056874][ T7626] tun9: persist enabled
[   82.077344][ T7621] __nla_validate_parse: 73 callbacks suppressed
[   82.077362][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'.
[   82.082120][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[   82.093041][ T7629] netlink: 'syz.2.511': attribute type 2 has an invalid length.
[   82.191239][ T7637] lo speed is unknown, defaulting to 1000
[   83.308752][ T7679] lo speed is unknown, defaulting to 1000
[   83.366694][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'.
[   83.367837][ T7686] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.527'.
[   83.433090][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.527'.
[   83.436812][ T7686] bridge_slave_1: left allmulticast mode
[   83.439350][ T7686] bridge_slave_1: left promiscuous mode
[   83.441675][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.447514][ T7686] bridge_slave_0: left allmulticast mode
[   83.450061][ T7686] bridge_slave_0: left promiscuous mode
[   83.454238][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.747335][ T7702] tun4: tun_chr_ioctl cmd 1074025675
[   83.752668][ T7702] tun4: persist enabled
[   83.755049][ T7702] tun4: tun_chr_ioctl cmd 1074025675
[   83.758143][ T7702] tun4: persist enabled
[   83.760621][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'.
[   83.787779][ T7705] tun4: tun_chr_ioctl cmd 1074025673
[   83.958398][ T7729] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.536'.
[   84.037589][ T7735] lo speed is unknown, defaulting to 1000
[   84.077063][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[   84.086131][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'.
[   84.096757][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[   84.376712][ T7762] netlink: 'syz.1.546': attribute type 10 has an invalid length.
[   84.621975][ T7775] netlink: 'syz.1.552': attribute type 4 has an invalid length.
[   84.824105][ T7791] lo speed is unknown, defaulting to 1000
[   85.587828][ T7825] tun5: tun_chr_ioctl cmd 1074025675
[   85.590511][ T7825] tun5: persist enabled
[   85.593950][ T7825] tun5: tun_chr_ioctl cmd 1074025675
[   85.596123][ T7825] tun5: persist enabled
[   85.900967][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.971745][ T7874] tun5: tun_chr_ioctl cmd 1074025675
[   86.977343][ T7874] tun5: persist enabled
[   86.982707][ T7874] tun5: tun_chr_ioctl cmd 1074025675
[   86.984907][ T7874] tun5: persist enabled
[   87.065360][ T7878] lo speed is unknown, defaulting to 1000
[   87.096285][ T7880] __nla_validate_parse: 20 callbacks suppressed
[   87.096305][ T7880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.110752][ T7880] netlink: 35 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.121479][ T7880] netlink: 'syz.0.586': attribute type 5 has an invalid length.
[   87.128950][ T7880] netlink: 'syz.0.586': attribute type 6 has an invalid length.
[   87.136437][ T7880] netlink: 35 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.161566][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'.
[   87.166983][ T7880] netlink: 360 bytes leftover after parsing attributes in process `syz.0.586'.
[   87.268968][ T7880] lo speed is unknown, defaulting to 1000
[   87.543747][ T7889] tun6: tun_chr_ioctl cmd 1074025675
[   87.550151][ T7889] tun6: persist enabled
[   87.556584][ T7889] tun6: tun_chr_ioctl cmd 1074025675
[   87.558877][ T7889] tun6: persist enabled
[   87.690482][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'.
[   87.747941][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'.
[   87.806905][ T7915] netlink: 'syz.1.598': attribute type 6 has an invalid length.
[   87.871920][ T7919] lo speed is unknown, defaulting to 1000
[   88.724307][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[   88.768281][ T7978] netlink: 165 bytes leftover after parsing attributes in process `syz.2.604'.
[   88.857235][ T5712] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   89.119441][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'.
[   89.774757][ T8016] lo speed is unknown, defaulting to 1000
[   89.862091][ T8031] tun7: tun_chr_ioctl cmd 1074025675
[   89.865021][ T8031] tun7: persist enabled
[   89.866943][ T8031] tun7: tun_chr_ioctl cmd 1074025675
[   89.870208][ T8031] tun7: persist enabled
[   89.874405][ T8031] netlink: 'syz.0.619': attribute type 1 has an invalid length.
[  127.422606][ T8060] tun6: tun_chr_ioctl cmd 1074025675
[  127.424330][ T8060] tun6: persist enabled
[  127.433530][ T8060] tun6: tun_chr_ioctl cmd 1074025675
[  127.435192][ T8060] tun6: persist enabled
[  127.446595][ T8061] syzkaller1: entered promiscuous mode
[  127.448443][ T8061] syzkaller1: entered allmulticast mode
[  127.453753][ T8061] __nla_validate_parse: 3 callbacks suppressed
[  127.453765][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'.
[  127.471338][ T8058] tun8: tun_chr_ioctl cmd 1074025675
[  127.476770][ T8058] tun8: persist enabled
[  127.479744][ T8058] tun8: tun_chr_ioctl cmd 1074025675
[  127.483469][ T8058] tun8: persist enabled
[  127.488600][ T8058] tun8: tun_chr_ioctl cmd 3489698878
[  127.649114][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'.
[  128.208070][ T8108] net_ratelimit: 17 callbacks suppressed
[  128.208087][ T8108] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  128.460686][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.479273][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.507603][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.514410][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.517980][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.521608][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.526101][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.529804][ T8117] netlink: 2420 bytes leftover after parsing attributes in process `syz.1.645'.
[  128.596221][ T8122] lo speed is unknown, defaulting to 1000
[  128.762217][ T8144] bond0: (slave bond_slave_1): Releasing backup interface
[  128.835952][ T8157] lo: entered allmulticast mode
[  129.051445][ T8168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.713730][ T8203] netlink: 'syz.1.668': attribute type 13 has an invalid length.
[  129.716498][ T8203] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  129.864871][ T8220] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  129.868354][ T8221] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  130.106457][ T8243] netlink: 'syz.2.681': attribute type 13 has an invalid length.
[  130.109802][ T8243] netlink: 'syz.2.681': attribute type 17 has an invalid length.
[  130.117971][ T8243] gretap0: refused to change device tx_queue_len
[  130.121032][ T8243] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  130.161035][ T8245] netlink: 'syz.2.682': attribute type 5 has an invalid length.
[  130.166530][ T8245] geneve2: entered promiscuous mode
[  130.168485][ T8245] geneve2: entered allmulticast mode
[  130.171381][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  130.175269][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  130.178878][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  130.181973][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  130.254969][ T8247] netlink: 'syz.2.682': attribute type 5 has an invalid length.
[  131.397975][ T8295] lo speed is unknown, defaulting to 1000
[  131.438595][   T10] IPVS: starting estimator thread 0...
[  131.551720][ T8298] IPVS: using max 89 ests per chain, 213600 per kthread
[  131.760050][ T8312] tun11: tun_chr_ioctl cmd 1074025675
[  131.762370][ T8312] tun11: persist enabled
[  131.774988][ T8308] tun11: tun_chr_ioctl cmd 1074025675
[  131.779884][ T8308] tun11: persist enabled
[  131.965377][ T8327] netlink: 'syz.1.706': attribute type 16 has an invalid length.
[  132.113788][ T8329] lo speed is unknown, defaulting to 1000
[  132.706029][ T8355] netlink: 'syz.2.714': attribute type 11 has an invalid length.
[  132.715840][ T8355] netlink: 'syz.2.714': attribute type 83 has an invalid length.
[  132.786172][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.869429][ T8376] __nla_validate_parse: 95 callbacks suppressed
[  132.869441][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  132.902292][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'.
[  132.927541][ T8383] netlink: 'syz.2.721': attribute type 3 has an invalid length.
[  133.136805][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  133.141602][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  133.174665][ T8414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.177471][ T8414] syzkaller0: entered promiscuous mode
[  133.179482][ T8414] syzkaller0: entered allmulticast mode
[  133.188073][ T8414] tipc: Resetting bearer <eth:syzkaller0>
[  133.193765][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  133.207522][ T8416] netlink: 'syz.1.731': attribute type 1 has an invalid length.
[  133.228450][ T8413] tipc: Resetting bearer <eth:syzkaller0>
[  133.232959][ T8413] tipc: Disabling bearer <eth:syzkaller0>
[  133.388227][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'.
[  133.530878][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[  133.644020][ T8456] tun7: tun_chr_ioctl cmd 1074025675
[  133.646573][ T8456] tun7: persist enabled
[  133.657771][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'.
[  133.657880][ T8456] tun7: tun_chr_ioctl cmd 1074025675
[  133.664632][ T8456] tun7: persist enabled
[  133.763269][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'.
[  133.823374][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  133.825529][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[  133.834567][ T8476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'.
[  134.491306][ T8550] _Z`Ԁ@: entered promiscuous mode
[  134.768134][ T8560] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  134.800246][ T8562] lo speed is unknown, defaulting to 1000
[  134.825763][ T8564] tun12: tun_chr_ioctl cmd 1074025675
[  134.827872][ T8564] tun12: persist enabled
[  134.829747][ T8564] tun12: tun_chr_ioctl cmd 1074025675
[  134.831600][ T8564] tun12: persist enabled
[  134.837944][ T8565] tun12: tun_chr_ioctl cmd 1074025675
[  134.839828][ T8565] tun12: persist enabled
[  134.960113][ T8571] tun13: tun_chr_ioctl cmd 1074025675
[  134.962205][ T8571] tun13: persist enabled
[  134.964810][ T8569] tun13: tun_chr_ioctl cmd 1074025675
[  134.967392][ T8569] tun13: persist enabled
[  135.174973][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  135.440811][ T8596] tun9: tun_chr_ioctl cmd 1074025673
[  135.443548][ T8595] tun9: tun_chr_ioctl cmd 1074025675
[  135.445543][ T8595] tun9: persist enabled
[  135.447131][ T8595] tun9: tun_chr_ioctl cmd 1074025675
[  135.449075][ T8595] tun9: persist enabled
[  135.981929][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  135.986621][ T8607] tun10: persist enabled
[  135.989264][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  135.991521][ T8607] tun10: persist enabled
[  135.995926][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  135.999403][ T8607] tun10: persist enabled
[  136.005110][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  136.007324][ T8607] tun10: persist enabled
[  136.009032][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  136.010789][ T8607] tun10: persist enabled
[  136.012239][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  136.014477][ T8607] tun10: persist enabled
[  136.015933][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  136.017775][ T8607] tun10: persist enabled
[  136.020319][ T8607] tun10: tun_chr_ioctl cmd 1074025675
[  136.022307][ T8607] tun10: persist enabled
[  136.166106][ T8631] tun11: tun_chr_ioctl cmd 1074025675
[  136.168645][ T8631] tun11: persist enabled
[  136.171309][ T8631] tun11: tun_chr_ioctl cmd 1074025675
[  136.176780][ T8631] tun11: persist enabled
[  136.286230][ T8638] tun14: tun_chr_ioctl cmd 1074025675
[  136.288461][ T8638] tun14: persist enabled
[  136.291049][ T8638] tun14: tun_chr_ioctl cmd 1074025675
[  136.294011][ T8638] tun14: persist enabled
[  136.434753][ T8658] lo speed is unknown, defaulting to 1000
[  137.504733][ T8724] tc_dump_action: action bad kind
[  137.781250][ T8747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.784824][ T8747] syzkaller0: entered promiscuous mode
[  137.787185][ T8747] syzkaller0: entered allmulticast mode
[  137.799540][ T8747] tipc: Resetting bearer <eth:syzkaller0>
[  137.808633][ T8747] tipc: Resetting bearer <eth:syzkaller0>
[  137.816498][ T8747] tipc: Disabling bearer <eth:syzkaller0>
[  137.913931][ T8763] __nla_validate_parse: 19 callbacks suppressed
[  137.913943][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'.
[  138.129852][ T8775] netlink: 56 bytes leftover after parsing attributes in process `syz.0.836'.
[  138.320155][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'.
[  138.333925][ T8786] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001
[  139.623032][ T8833] Illegal XDP return value 4294967294 on prog  (id 258) dev N/A, expect packet loss!
[  139.883987][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'.
[  139.930468][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'.
[  139.951934][ T8873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.103780][ T8882] tun12: tun_chr_ioctl cmd 1074025675
[  140.112700][ T8882] tun12: persist enabled
[  140.114804][ T8882] tun12: tun_chr_ioctl cmd 1074025675
[  140.116611][ T8882] tun12: persist enabled
[  140.276374][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  140.461640][ T8897] lo speed is unknown, defaulting to 1000
[  140.558505][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  140.562213][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  140.566878][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  140.607679][ T8904] batman_adv: batadv0: Adding interface: vxlan0
[  140.612554][ T8904] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.623762][ T8904] batman_adv: batadv0: Interface activated: vxlan0
[  140.626735][ T5875] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.630336][ T5875] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.642574][ T5875] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.650064][ T5875] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.662717][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'.
[  140.733016][ T8914] pim6reg1: entered promiscuous mode
[  140.734961][ T8914] pim6reg1: entered allmulticast mode
[  140.828748][ T8923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.832039][ T8922] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.848576][ T8922] tipc: Resetting bearer <eth:syzkaller0>
[  141.207540][ T8946] lo speed is unknown, defaulting to 1000
[  141.620539][ T8946] TC_ACT_REPEAT abuse ?
[  141.622346][ T8946] TC_ACT_REPEAT abuse ?
[  141.717731][ T8964] netlink: 'syz.1.887': attribute type 29 has an invalid length.
[  141.720971][ T8963] netlink: 'syz.1.887': attribute type 29 has an invalid length.
[  141.749364][ T8968] netlink: 'syz.1.888': attribute type 83 has an invalid length.
[  141.769974][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.774444][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.784445][ T8972] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.823057][   T10] tipc: Node number set to 4147473336
[  141.989433][ T9004] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  141.994521][ T9004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.000558][   T47] lo speed is unknown, defaulting to 1000
[  142.061258][ T9012] geneve2: entered promiscuous mode
[  142.975283][ T9076] __nla_validate_parse: 11 callbacks suppressed
[  142.975303][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'.
[  142.988196][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'.
[  143.251564][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'.
[  143.528119][ T9098] dvmrp0: entered allmulticast mode
[  143.538026][ T9098] tun8: tun_chr_ioctl cmd 1074025675
[  143.540754][ T9098] tun8: persist enabled
[  143.542546][ T9098] tun8: tun_chr_ioctl cmd 1074025675
[  143.544278][ T9098] tun8: persist enabled
[  143.558599][ T9103] TC_ACT_REPEAT abuse ?
[  143.560198][ T9103] TC_ACT_REPEAT abuse ?
[  143.561729][ T9103] TC_ACT_REPEAT abuse ?
[  143.563524][ T9103] TC_ACT_REPEAT abuse ?
[  143.565040][ T9103] TC_ACT_REPEAT abuse ?
[  143.566601][ T9103] TC_ACT_REPEAT abuse ?
[  143.640249][ T9106] 8021q: adding VLAN 0 to HW filter on device bond1
[  143.644277][ T9106] bridge0: port 3(bond1) entered blocking state
[  143.647385][ T9106] bridge0: port 3(bond1) entered disabled state
[  143.650426][ T9106] bond1: entered allmulticast mode
[  143.655408][ T9106] bond1: entered promiscuous mode
[  143.658895][ T9106] bridge0: port 3(bond1) entered blocking state
[  143.661787][ T9106] bridge0: port 3(bond1) entered forwarding state
[  143.668247][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'.
[  143.680596][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'.
[  143.778393][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  143.790368][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'.
[  143.827788][ T9114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'.
[  143.834440][ T9114] netlink: 'syz.0.925': attribute type 10 has an invalid length.
[  143.838034][ T9114] syz_tun: entered promiscuous mode
[  143.887471][   T65] bridge0: port 3(bond1) entered disabled state
[  143.985699][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'.
[  144.000038][ T9129] netlink: 256 bytes leftover after parsing attributes in process `syz.0.930'.
[  144.027181][ T9137] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  144.027437][ T9138] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  144.165159][ T9138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.246285][ T9163] lo speed is unknown, defaulting to 1000
[  144.431434][ T9177] netlink: 'syz.1.943': attribute type 1 has an invalid length.
[  144.476416][ T9177] bond1: entered promiscuous mode
[  144.478378][ T9177] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.493679][ T9188] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.495988][ T9188] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  144.499242][ T9188] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  144.506274][ T9188] bond1: (slave wireguard0): making interface the new active one
[  144.508872][ T9188] wireguard0: entered promiscuous mode
[  144.511639][ T9188] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  144.525311][ T9177] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  144.531922][ T9177] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  144.632240][ T9207] netlink: 'syz.0.950': attribute type 1 has an invalid length.
[  144.639176][ T9207] netlink: 'syz.0.950': attribute type 2 has an invalid length.
[  145.668920][ T9262] net_ratelimit: 2043 callbacks suppressed
[  145.668932][ T9262] TC_ACT_REPEAT abuse ?
[  145.803956][ T9281] netlink: 'syz.0.972': attribute type 10 has an invalid length.
[  145.859029][ T9288] IPv6: NLM_F_REPLACE set, but no existing node found!
[  146.108648][ T9327] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  146.200809][ T9342] tun13: tun_chr_ioctl cmd 1074025675
[  146.202984][ T9342] tun13: persist enabled
[  146.205743][ T9342] tun13: tun_chr_ioctl cmd 1074025675
[  146.209067][ T9342] tun13: persist enabled
[  146.223073][   T10] TC_ACT_REPEAT abuse ?
[  146.234559][ T9343] lo speed is unknown, defaulting to 1000
[  146.864830][   T64] TC_ACT_REPEAT abuse ?
[  146.868524][ T5874] TC_ACT_REPEAT abuse ?
[  146.872520][   T10] TC_ACT_REPEAT abuse ?
[  146.942728][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  146.947718][ T9366] batadv_slave_1: entered promiscuous mode
[  146.953189][ T9367] batadv_slave_1: left promiscuous mode
[  147.060381][ T9372] lo speed is unknown, defaulting to 1000
[  147.155884][ T9377] lo speed is unknown, defaulting to 1000
[  147.339128][ T9387] tc_dump_action: action bad kind
[  147.494601][ T9400] validate_nla: 1 callbacks suppressed
[  147.494633][ T9400] netlink: 'syz.2.1011': attribute type 10 has an invalid length.
[  147.503609][ T9400] 8021q: adding VLAN 0 to HW filter on device team0
[  147.509768][ T9400] bond0: (slave team0): Enslaving as an active interface with an up link
[  147.566579][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.744912][ T9423] lo speed is unknown, defaulting to 1000
[  147.799639][ T9421] netlink: 'syz.2.1018': attribute type 11 has an invalid length.
[  147.909589][ T9435] lo speed is unknown, defaulting to 1000
[  148.000996][ T9437] lo speed is unknown, defaulting to 1000
[  148.003433][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.623664][ T1092] TC_ACT_REPEAT abuse ?
[  152.627590][    T9] TC_ACT_REPEAT abuse ?
[  152.630556][   T10] TC_ACT_REPEAT abuse ?
[  162.222901][    T9] TC_ACT_REPEAT abuse ?
[  171.823693][   T10] TC_ACT_REPEAT abuse ?
[  179.477486][ T9471] netlink: 'syz.1.1028': attribute type 16 has an invalid length.
[  179.482675][ T9471] netlink: 'syz.1.1028': attribute type 17 has an invalid length.
[  179.526704][ T9471] bridge0: port 2(veth0_to_team) entered disabled state
[  179.529587][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.588923][ T9486] IPv6: NLM_F_REPLACE set, but no existing node found!
[  179.592289][ T9471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.594068][ T9486] __nla_validate_parse: 27 callbacks suppressed
[  179.594118][ T9486] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1028'.
[  179.600288][ T9471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.602696][ T9486] NCSI netlink: No device for ifindex 0
[  179.646727][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  179.654480][ T5712] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.657665][ T5712] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.663538][ T5712] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.663780][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[  179.670988][ T5712] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.811996][ T9497] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20000
[  180.580852][ T9515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.668225][ T9537] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  180.751033][ T9545] TC_ACT_REPEAT abuse ?
[  180.764315][ T9545] TC_ACT_REPEAT abuse ?
[  180.765841][ T9545] TC_ACT_REPEAT abuse ?
[  180.767268][ T9545] TC_ACT_REPEAT abuse ?
[  180.768730][ T9545] TC_ACT_REPEAT abuse ?
[  180.777506][ T9545] TC_ACT_REPEAT abuse ?
[  180.779109][ T9545] TC_ACT_REPEAT abuse ?
[  180.780609][ T9545] TC_ACT_REPEAT abuse ?
[  180.782065][ T9545] TC_ACT_REPEAT abuse ?
[  180.840972][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'.
[  180.874770][ T9561] netlink: 'syz.0.1051': attribute type 9 has an invalid length.
[  180.877803][ T9561] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1051'.
[  180.938056][ T9575] netlink: 'syz.2.1055': attribute type 10 has an invalid length.
[  180.942650][ T5234] Bluetooth: hci0: command 0x0c1a tx timeout
[  180.944447][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.950787][ T9575] bond0: (slave team0): Releasing backup interface
[  180.960194][ T9575] team0: Cannot enslave team device to itself
[  181.036585][ T9586] netlink: 'syz.0.1059': attribute type 13 has an invalid length.
[  181.040091][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[  181.046607][ T5712] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.050023][ T5712] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.051497][ T9586] netlink: 'syz.0.1059': attribute type 13 has an invalid length.
[  181.055174][ T5712] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.057535][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[  181.059956][ T5712] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.229192][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'.
[  181.879215][ T9602] ip6erspan0: entered promiscuous mode
[  181.934713][ T9616] tun14: tun_chr_ioctl cmd 1074025675
[  181.936508][ T9616] tun14: persist enabled
[  181.938470][ T9616] tun14: tun_chr_ioctl cmd 1074025675
[  181.940595][ T9616] tun14: persist enabled
[  181.981433][ T9621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.085036][ T9635] lo speed is unknown, defaulting to 1000
[  182.136044][ T9652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.138336][ T9650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.153592][ T9647] tipc: Disabling bearer <eth:syzkaller0>
[  182.176309][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'.
[  182.179410][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'.
[  182.359516][ T9678] lo speed is unknown, defaulting to 1000
[  182.469660][ T9695] netlink: 'syz.0.1089': attribute type 11 has an invalid length.
[  182.782808][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  183.102624][    T9] tipc: Node number set to 3920776019
[  183.481608][ T9744] tipc: Enabled bearer <udp:syz2>, priority 10
[  183.519278][ T9753] netlink: 'syz.2.1102': attribute type 21 has an invalid length.
[  183.661356][ T9767] tun9: tun_chr_ioctl cmd 1074025675
[  183.666828][ T9767] tun9: persist enabled
[  183.668670][ T9767] tun9: tun_chr_ioctl cmd 1074025675
[  183.670711][ T9767] tun9: persist enabled
[  183.848314][ T9774] macvtap1: entered promiscuous mode
[  183.850646][ T9774] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  183.854750][ T9774] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  183.901462][ T9773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.904144][ T9773] IPv6: NLM_F_CREATE should be set when creating new route
[  184.358864][ T9789] lo speed is unknown, defaulting to 1000
[  184.450026][ T9797] tun15: tun_chr_ioctl cmd 1074025675
[  184.451936][ T9797] tun15: persist enabled
[  184.472679][   T47] tipc: Node number set to 4148883370
[  184.660454][ T9804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  184.819949][ T9814] __nla_validate_parse: 12 callbacks suppressed
[  184.819964][ T9814] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.826654][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.829668][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.899367][ T9824] lo speed is unknown, defaulting to 1000
[  184.974833][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'.
[  184.990431][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1127'.
[  185.110242][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[  185.123668][ T9857] tun10: tun_chr_ioctl cmd 1074025675
[  185.125922][ T9857] tun10: persist enabled
[  185.127407][ T9857] tun10: tun_chr_ioctl cmd 1074025675
[  185.129190][ T9857] tun10: persist enabled
[  185.197022][ T9866] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.716207][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1139'.
[  185.748881][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'.
[  186.146435][ T9924] netlink: 'syz.2.1154': attribute type 5 has an invalid length.
[  186.153269][ T9924] netlink: 'syz.2.1154': attribute type 5 has an invalid length.
[  186.188966][ T9935] netlink: 'syz.2.1156': attribute type 4 has an invalid length.
[  186.258632][ T9938] lo speed is unknown, defaulting to 1000
[  186.302702][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'.
[  186.458702][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'.
[  186.635944][ T9954] tun11: tun_chr_ioctl cmd 1074025675
[  186.638058][ T9954] tun11: persist enabled
[  186.642356][ T9954] tun11: tun_chr_ioctl cmd 1074025675
[  186.644933][ T9954] tun11: persist enabled
[  186.759431][ T9962] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  186.774207][ T9962] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.783962][ T9962] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.786323][ T9962] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  186.790653][ T9962] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  186.834249][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.837377][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  187.059470][ T9986] lo speed is unknown, defaulting to 1000
[  187.085382][ T9988] net_ratelimit: 3065 callbacks suppressed
[  187.085394][ T9988] TC_ACT_REPEAT abuse ?
[  187.205531][ T9999] tipc: Resetting bearer <eth:syzkaller0>
[  187.220832][ T9998] tipc: Resetting bearer <eth:syzkaller0>
[  187.260781][T10003] tipc: New replicast peer: 0.0.0.0
[  187.265642][T10003] tipc: Enabled bearer <udp:syz2>, priority 10
[  187.269278][T10004] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  187.316057][T10013] netlink: 'syz.0.1180': attribute type 4 has an invalid length.
[  187.348400][T10021] tun16: tun_chr_ioctl cmd 1074025675
[  187.350258][T10021] tun16: persist enabled
[  187.352137][T10021] tun16: tun_chr_ioctl cmd 1074025675
[  187.355011][T10021] tun16: persist enabled
[  187.401798][T10033] TC_ACT_REPEAT abuse ?
[  187.406280][T10033] TC_ACT_REPEAT abuse ?
[  187.408235][T10033] TC_ACT_REPEAT abuse ?
[  187.408478][T10035] netlink: 'syz.1.1187': attribute type 11 has an invalid length.
[  187.410174][T10033] TC_ACT_REPEAT abuse ?
[  187.414647][T10033] TC_ACT_REPEAT abuse ?
[  187.416850][T10033] TC_ACT_REPEAT abuse ?
[  187.418378][T10033] TC_ACT_REPEAT abuse ?
[  187.421898][T10033] TC_ACT_REPEAT abuse ?
[  187.427598][T10033] TC_ACT_REPEAT abuse ?
[  187.845037][ T1032] tipc: Resetting bearer <eth:syzkaller0>
[  187.944039][T10097] lo speed is unknown, defaulting to 1000
[  188.040175][T10110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  188.043772][T10110] syzkaller0: entered promiscuous mode
[  188.045577][T10110] syzkaller0: entered allmulticast mode
[  188.047673][T10110] tipc: Resetting bearer <eth:syzkaller0>
[  188.169723][T10115] tipc: Resetting bearer <eth:syzkaller0>
[  188.177376][   T47] lo speed is unknown, defaulting to 1000
[  188.177506][ T5712] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.179470][   T47] syz0: Port: 1 Link DOWN
[  188.183943][ T5712] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.188063][ T5712] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.191668][ T5712] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.194810][ T5712] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.197711][ T5712] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.200778][   T47] lo speed is unknown, defaulting to 1000
[  188.200819][ T5712] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  188.207220][ T5712] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.779617][T10122] lo speed is unknown, defaulting to 1000
[  188.795165][T10127] IPVS: length: 74 != 8
[  189.580534][T10174] netlink: 'syz.0.1230': attribute type 1 has an invalid length.
[  189.596076][T10174] 8021q: adding VLAN 0 to HW filter on device bond2
[  190.191398][T10205] tun12: tun_chr_ioctl cmd 1074025675
[  190.194740][T10205] tun12: persist enabled
[  190.197038][T10205] tun12: tun_chr_ioctl cmd 1074025675
[  190.199651][T10205] tun12: persist enabled
[  190.202016][T10205] __nla_validate_parse: 17 callbacks suppressed
[  190.202027][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'.
[  190.413078][T10174] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  190.459458][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'.
[  190.463745][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1239'.
[  190.509387][T10214] lo speed is unknown, defaulting to 1000
[  190.637559][T10224] netlink: 'syz.1.1241': attribute type 1 has an invalid length.
[  190.730581][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  190.847451][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'.
[  190.961579][T10247] blkio.reset_stats is deprecated
[  191.024909][T10248] lo speed is unknown, defaulting to 1000
[  191.546471][T10253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  191.576745][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'.
[  191.651636][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1252'.
[  191.786357][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'.
[  191.796628][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'.
[  191.853556][T10263] sctp: [Deprecated]: syz.0.1255 (pid 10263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.853556][T10263] Use struct sctp_sack_info instead
[  192.237917][T10296] netlink: 'syz.2.1265': attribute type 10 has an invalid length.
[  192.241526][T10296] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.250485][T10296] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.253904][T10296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.257597][T10296] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.260728][T10296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.268985][T10296] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  192.276654][T10296] bond1: left allmulticast mode
[  192.278711][T10296] bond1: left promiscuous mode
[  192.280862][T10296] bridge0: port 3(bond1) entered disabled state
[  192.284795][T10296] bridge_slave_1: left allmulticast mode
[  192.287343][T10296] bridge_slave_1: left promiscuous mode
[  192.289989][T10296] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.295691][T10296] bridge_slave_0: left allmulticast mode
[  192.298137][T10296] bridge_slave_0: left promiscuous mode
[  192.300622][T10296] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.310109][T10296] bond0: (slave bridge0): Releasing backup interface
[  192.477624][T10312] lo speed is unknown, defaulting to 1000
[  193.168250][T10339] tipc: Resetting bearer <eth:syzkaller0>
[  193.174452][T10338] tipc: Resetting bearer <eth:syzkaller0>
[  193.274667][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  193.277874][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  193.280627][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  193.284777][T10352] tipc: Resetting bearer <eth:syzkaller0>
[  193.288315][T10351] tipc: Resetting bearer <eth:syzkaller0>
[  193.290665][T10351] tipc: Resetting bearer <eth:syzkaller0>
[  193.475378][T10376] tun13: tun_chr_ioctl cmd 1074025675
[  193.477302][T10376] tun13: persist enabled
[  193.479032][T10376] tun13: tun_chr_ioctl cmd 1074025675
[  193.480993][T10376] tun13: persist enabled
[  193.539810][T10384] tun14: tun_chr_ioctl cmd 1074025675
[  193.541611][T10384] tun14: persist enabled
[  193.545977][T10384] tun14: tun_chr_ioctl cmd 1074025675
[  193.548946][T10384] tun14: persist enabled
[  193.554229][T10384] : renamed from wg2 (while UP)
[  193.558275][T10383] delete_channel: no stack
[  193.881661][T10398] lo speed is unknown, defaulting to 1000
[  193.993494][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  194.225133][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.394792][T10418] lo speed is unknown, defaulting to 1000
[  194.401454][T10422] tipc: Resetting bearer <eth:syzkaller0>
[  194.469271][T10421] tipc: Resetting bearer <eth:syzkaller0>
[  195.013421][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  195.309450][T10478] __nla_validate_parse: 19 callbacks suppressed
[  195.309462][T10478] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1320'.
[  195.318566][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  195.322232][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'.
[  195.327488][T10478] netlink: 'syz.1.1320': attribute type 5 has an invalid length.
[  195.330228][T10478] netlink: 'syz.1.1320': attribute type 6 has an invalid length.
[  195.379055][T10483] tun17: tun_chr_ioctl cmd 1074025673
[  195.386932][T10482] tun17: tun_chr_ioctl cmd 1074025675
[  195.389313][T10482] tun17: persist enabled
[  195.391121][T10482] tun17: tun_chr_ioctl cmd 1074025675
[  195.393633][T10482] tun17: persist enabled
[  195.398484][T10483] tun17: tun_chr_ioctl cmd 1074025675
[  195.401053][T10483] tun17: persist enabled
[  195.560530][T10502] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  195.562578][T10503] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1329'.
[  195.570450][T10503] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1329'.
[  195.576261][T10503] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1329'.
[  195.599310][T10505] lo speed is unknown, defaulting to 1000
[  195.669886][T10515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1330'.
[  195.705115][T10516] lo speed is unknown, defaulting to 1000
[  195.951446][T10530] lo speed is unknown, defaulting to 1000
[  196.473982][T10534] batadv_slave_0: entered promiscuous mode
[  196.643643][T10552] syz_tun: entered allmulticast mode
[  196.723423][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1345'.
[  196.740093][T10562] lo speed is unknown, defaulting to 1000
[  196.881276][T10576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'.
[  196.888113][T10577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1348'.
[  197.000785][T10587] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  197.128521][T10608] syzkaller0: entered promiscuous mode
[  197.130353][T10608] syzkaller0: entered allmulticast mode
[  197.223572][T10593] lo speed is unknown, defaulting to 1000
[  197.367015][T10631] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  197.373299][T10631] tun15: tun_chr_ioctl cmd 1074025675
[  197.375013][T10631] tun15: persist enabled
[  197.376941][T10631] tun15: tun_chr_ioctl cmd 1074025675
[  197.378677][T10631] tun15: persist enabled
[  197.403671][T10636] net_ratelimit: 2043 callbacks suppressed
[  197.403684][T10636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.794052][T10670] dvmrp8: entered allmulticast mode
[  197.807712][T10670] lo speed is unknown, defaulting to 1000
[  197.853782][T10671] netlink: 'syz.1.1378': attribute type 23 has an invalid length.
[  197.879741][T10669] dvmrp8: left allmulticast mode
[  198.139650][T10697] tun15: tun_chr_ioctl cmd 1074025675
[  198.141599][T10697] tun15: persist enabled
[  198.146013][T10697] tun15: tun_chr_ioctl cmd 1074025675
[  198.147970][T10697] tun15: persist enabled
[  198.169748][T10699] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  198.218073][T10703] tun16: tun_chr_ioctl cmd 1074025675
[  198.219955][T10703] tun16: persist enabled
[  198.221586][T10703] tun16: tun_chr_ioctl cmd 1074025675
[  198.224529][T10703] tun16: persist enabled
[  198.289045][T10709] tun18: tun_chr_ioctl cmd 1074025675
[  198.290950][T10709] tun18: persist enabled
[  198.294713][T10709] tun18: tun_chr_ioctl cmd 1074025675
[  198.296899][T10709] tun18: persist enabled
[  198.376114][T10723] lo speed is unknown, defaulting to 1000
[  198.698604][T10746] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  198.701544][T10744] IPVS: stopping master sync thread 10746 ...
[  198.767263][T10752] team0: Device ppp0 is of different type
[  199.130262][T10762] GUP no longer grows the stack in syz.2.1403 (10762): 200000006000-20000000a000 (200000005000)
[  199.136163][T10762] CPU: 1 UID: 0 PID: 10762 Comm: syz.2.1403 Not tainted syzkaller #0 PREEMPT(full) 
[  199.136187][T10762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.136199][T10762] Call Trace:
[  199.136229][T10762]  <TASK>
[  199.136246][T10762]  dump_stack_lvl+0x189/0x250
[  199.136272][T10762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.136290][T10762]  ? __pfx__printk+0x10/0x10
[  199.136310][T10762]  ? find_vma+0xe7/0x160
[  199.136330][T10762]  ? mas_next_slot+0xc27/0xcf0
[  199.136353][T10762]  __get_user_pages+0x24d0/0x2ce0
[  199.136372][T10762]  ? __gup_longterm_locked+0xc68/0x1660
[  199.136395][T10762]  ? __gup_longterm_locked+0xc68/0x1660
[  199.136414][T10762]  __gup_longterm_locked+0xde9/0x1660
[  199.136433][T10762]  ? try_grab_folio_fast+0x1be/0x4f0
[  199.136451][T10762]  ? rcu_is_watching+0x15/0xb0
[  199.136467][T10762]  ? rcu_is_watching+0x15/0xb0
[  199.136481][T10762]  gup_fast_fallback+0x1e6a/0x2010
[  199.136537][T10762]  ? __pfx_gup_fast_fallback+0x10/0x10
[  199.136553][T10762]  ? __mutex_lock+0x335/0x1350
[  199.136577][T10762]  ? is_valid_gup_args+0x11f/0x200
[  199.136594][T10762]  ? get_user_pages_fast+0x4d/0xb0
[  199.136612][T10762]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  199.136632][T10762]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  199.136652][T10762]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.136670][T10762]  ? wait_for_space+0x24d/0x2d0
[  199.136692][T10762]  iov_iter_get_pages2+0x5e/0xa0
[  199.136740][T10762]  __se_sys_vmsplice+0x548/0x10d0
[  199.136764][T10762]  ? futex_private_hash_put+0x4b/0x280
[  199.136781][T10762]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  199.136802][T10762]  ? __pfx_futex_wake+0x10/0x10
[  199.136834][T10762]  ? do_pipe2+0xf7/0x170
[  199.136877][T10762]  ? rcu_is_watching+0x15/0xb0
[  199.136901][T10762]  ? rcu_is_watching+0x15/0xb0
[  199.136915][T10762]  do_syscall_64+0xfa/0x3b0
[  199.136938][T10762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.136953][T10762]  ? exc_page_fault+0x9f/0xf0
[  199.136972][T10762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.136986][T10762] RIP: 0033:0x7f3d6b58ebe9
[  199.137000][T10762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.137012][T10762] RSP: 002b:00007f3d6c35a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  199.137029][T10762] RAX: ffffffffffffffda RBX: 00007f3d6b7b5fa0 RCX: 00007f3d6b58ebe9
[  199.137040][T10762] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012
[  199.137050][T10762] RBP: 00007f3d6b611e19 R08: 0000000000000000 R09: 0000000000000000
[  199.137059][T10762] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  199.137068][T10762] R13: 00007f3d6b7b6038 R14: 00007f3d6b7b5fa0 R15: 00007ffc64ac64e8
[  199.137084][T10762]  </TASK>
[  199.525872][T10801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  199.528391][T10801] IPv6: NLM_F_CREATE should be set when creating new route
[  199.627717][T10811] tipc: Resetting bearer <eth:syzkaller0>
[  199.636860][T10810] tipc: Resetting bearer <eth:syzkaller0>
[  199.718719][T10820] lo speed is unknown, defaulting to 1000
[  199.761622][T10823] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.766264][T10823] tipc: Resetting bearer <eth:syzkaller0>
[  200.303912][  T245] tipc: Resetting bearer <eth:syzkaller0>
[  200.537974][T10849] __nla_validate_parse: 15 callbacks suppressed
[  200.537987][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1427'.
[  200.545448][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1427'.
[  200.568452][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1429'.
[  200.603750][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'.
[  200.616772][T10855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'.
[  200.797058][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  200.799970][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  200.803059][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  200.806742][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  200.810298][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  201.110467][T10903] openvswitch: netlink: Message has 1 unknown bytes.
[  201.113222][T10903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.275671][T10911] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  201.278572][T10911] tun17: tun_chr_ioctl cmd 1074025675
[  201.280377][T10911] tun17: persist enabled
[  201.282015][T10911] tun17: tun_chr_ioctl cmd 1074025675
[  201.284125][T10911] tun17: persist enabled
[  201.584954][T10935] netlink: 'syz.1.1452': attribute type 1 has an invalid length.
[  201.599022][T10935] 8021q: adding VLAN 0 to HW filter on device bond4
[  201.611221][T10935] lo speed is unknown, defaulting to 1000
[  201.734347][T10953] veth0_macvtap: entered allmulticast mode
[  201.741320][T10954] tun16: tun_chr_ioctl cmd 1074025675
[  201.744744][T10954] tun16: persist enabled
[  201.746672][T10954] tun16: tun_chr_ioctl cmd 1074025675
[  201.750205][T10954] tun16: persist enabled
[  201.801237][T10966] netlink: 'syz.1.1459': attribute type 30 has an invalid length.
[  201.804406][T10966] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  201.944804][T10964] ksmbd: Unknown IPC event: 14, ignore.
[  201.976184][T10985] lo speed is unknown, defaulting to 1000
[  202.129772][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.129782][T11007] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  202.129873][T11007] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  202.132132][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.145826][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.148389][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.148978][T11007] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  202.150838][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.160183][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.164109][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.166454][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.168775][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.171243][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.175176][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.177618][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.180011][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.182732][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.185065][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.187333][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.189675][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.192020][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.194699][T11008] tun17: tun_chr_ioctl cmd 1074025673
[  202.347935][T11021] syzkaller1: entered promiscuous mode
[  202.350314][T11021] syzkaller1: entered allmulticast mode
[  202.371064][T11025] tun19: tun_chr_ioctl cmd 1074025675
[  202.374331][T11025] tun19: persist enabled
[  202.376345][T11025] tun19: tun_chr_ioctl cmd 1074025675
[  202.378532][T11025] tun19: persist enabled
[  202.412065][T11025] "syz.0.1477" (11025) uses obsolete ecb(arc4) skcipher
[  202.498397][T11043] tun17: tun_chr_ioctl cmd 1074025673
[  202.500545][T11043] tun17: tun_chr_ioctl cmd 1074025673
[  202.503548][T11044] tun17: tun_chr_ioctl cmd 1074025675
[  202.505430][T11044] tun17: persist enabled
[  202.508012][T11043] tun17: tun_chr_ioctl cmd 1074025673
[  202.971167][T11080] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001
[  203.137847][T11105] tipc: Resetting bearer <eth:syzkaller0>
[  203.143273][T11104] tipc: Resetting bearer <eth:syzkaller0>
[  203.165365][T11107] tipc: Resetting bearer <eth:syzkaller0>
[  203.172094][T11106] tipc: Resetting bearer <eth:syzkaller0>
[  203.196874][T11100] lo speed is unknown, defaulting to 1000
[  203.201164][T11110] syz.0.1500: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  203.207525][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.0.1500 Not tainted syzkaller #0 PREEMPT(full) 
[  203.207539][T11110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.207545][T11110] Call Trace:
[  203.207548][T11110]  <TASK>
[  203.207552][T11110]  dump_stack_lvl+0x189/0x250
[  203.207567][T11110]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.207576][T11110]  ? __pfx__printk+0x10/0x10
[  203.207586][T11110]  ? lock_release+0x4b/0x3e0
[  203.207597][T11110]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  203.207606][T11110]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  203.207615][T11110]  warn_alloc+0x214/0x310
[  203.207627][T11110]  ? __pfx_warn_alloc+0x10/0x10
[  203.207639][T11110]  ? __get_vm_area_node+0x28f/0x300
[  203.207649][T11110]  ? hash_ipportip_create+0x358/0xfe0
[  203.207658][T11110]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  203.207668][T11110]  ? do_syscall_64+0xfa/0x3b0
[  203.207686][T11110]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  203.207697][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.207705][T11110]  ? hash_ipportip_create+0x358/0xfe0
[  203.207712][T11110]  ? hash_ipportip_create+0x358/0xfe0
[  203.207718][T11110]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  203.207730][T11110]  ? hash_ipportip_create+0x358/0xfe0
[  203.207737][T11110]  ? hash_ipportip_create+0x2fe/0xfe0
[  203.207745][T11110]  hash_ipportip_create+0x358/0xfe0
[  203.207754][T11110]  ? __nla_parse+0x40/0x60
[  203.207766][T11110]  ? __pfx_hash_ipportip_create+0x10/0x10
[  203.207773][T11110]  ip_set_create+0xa97/0x1940
[  203.207783][T11110]  ? ip_set_create+0x4a2/0x1940
[  203.207793][T11110]  ? __pfx_ip_set_create+0x10/0x10
[  203.207805][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.207812][T11110]  ? lock_release+0x4b/0x3e0
[  203.207822][T11110]  ? __nla_parse+0x40/0x60
[  203.207833][T11110]  nfnetlink_rcv_msg+0xb4d/0x1130
[  203.207844][T11110]  ? place_entity+0x4b5/0x580
[  203.207854][T11110]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  203.207866][T11110]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  203.207880][T11110]  ? _raw_spin_unlock+0x28/0x50
[  203.207893][T11110]  netlink_rcv_skb+0x208/0x470
[  203.207904][T11110]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  203.207913][T11110]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  203.207925][T11110]  ? bpf_lsm_capable+0x9/0x20
[  203.207944][T11110]  ? security_capable+0x7e/0x2e0
[  203.207955][T11110]  nfnetlink_rcv+0x26a/0x2520
[  203.207965][T11110]  ? is_bpf_text_address+0x26/0x2b0
[  203.207976][T11110]  ? kernel_text_address+0xa5/0xe0
[  203.207987][T11110]  ? __kernel_text_address+0xd/0x40
[  203.207996][T11110]  ? unwind_get_return_address+0x4d/0x90
[  203.208005][T11110]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  203.208015][T11110]  ? arch_stack_walk+0xfc/0x150
[  203.208027][T11110]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  203.208036][T11110]  ? stack_depot_save_flags+0x40/0x860
[  203.208045][T11110]  ? __pfx_stack_trace_save+0x10/0x10
[  203.208055][T11110]  ? kasan_save_track+0x4f/0x80
[  203.208064][T11110]  ? kasan_save_track+0x3e/0x80
[  203.208071][T11110]  ? __kasan_slab_alloc+0x6c/0x80
[  203.208080][T11110]  ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  203.208089][T11110]  ? kmalloc_reserve+0xbd/0x290
[  203.208101][T11110]  ? __netlink_lookup+0xbd/0x810
[  203.208107][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208115][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208121][T11110]  ? lock_release+0x4b/0x3e0
[  203.208133][T11110]  ? net_generic+0x1e/0x240
[  203.208141][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208148][T11110]  ? netlink_deliver_tap+0x2e/0x1b0
[  203.208157][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208164][T11110]  ? netlink_deliver_tap+0x2e/0x1b0
[  203.208174][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208181][T11110]  ? netlink_deliver_tap+0x2e/0x1b0
[  203.208191][T11110]  ? lock_release+0x4b/0x3e0
[  203.208200][T11110]  ? net_generic+0x1e/0x240
[  203.208208][T11110]  ? net_generic+0x1e/0x240
[  203.208217][T11110]  netlink_unicast+0x82f/0x9e0
[  203.208228][T11110]  ? __pfx_netlink_unicast+0x10/0x10
[  203.208238][T11110]  ? netlink_sendmsg+0x642/0xb30
[  203.208247][T11110]  ? skb_put+0x11b/0x210
[  203.208254][T11110]  netlink_sendmsg+0x805/0xb30
[  203.208266][T11110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.208277][T11110]  ? futex_unqueue+0x22/0x240
[  203.208285][T11110]  ? aa_sock_msg_perm+0xf1/0x1d0
[  203.208292][T11110]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  203.208300][T11110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.208327][T11110]  __sock_sendmsg+0x21c/0x270
[  203.208340][T11110]  ____sys_sendmsg+0x505/0x830
[  203.208349][T11110]  ? __pfx_____sys_sendmsg+0x10/0x10
[  203.208358][T11110]  ? import_iovec+0x74/0xa0
[  203.208367][T11110]  ___sys_sendmsg+0x21f/0x2a0
[  203.208375][T11110]  ? __pfx____sys_sendmsg+0x10/0x10
[  203.208383][T11110]  ? futex_wait+0x285/0x360
[  203.208398][T11110]  ? __fget_files+0x2a/0x420
[  203.208430][T11110]  ? __fget_files+0x3a0/0x420
[  203.208443][T11110]  __x64_sys_sendmsg+0x19b/0x260
[  203.208451][T11110]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  203.208461][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208469][T11110]  ? rcu_is_watching+0x15/0xb0
[  203.208476][T11110]  do_syscall_64+0xfa/0x3b0
[  203.208487][T11110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.208495][T11110]  ? exc_page_fault+0x9f/0xf0
[  203.208504][T11110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.208511][T11110] RIP: 0033:0x7fe83698ebe9
[  203.208520][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.208526][T11110] RSP: 002b:00007fe8377b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.208536][T11110] RAX: ffffffffffffffda RBX: 00007fe836bb5fa0 RCX: 00007fe83698ebe9
[  203.208541][T11110] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  203.208546][T11110] RBP: 00007fe836a11e19 R08: 0000000000000000 R09: 0000000000000000
[  203.208550][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.208555][T11110] R13: 00007fe836bb6038 R14: 00007fe836bb5fa0 R15: 00007ffe635c44a8
[  203.208564][T11110]  </TASK>
[  203.208652][T11110] Mem-Info:
[  203.428697][T11110] active_anon:5240 inactive_anon:0 isolated_anon:0
[  203.428697][T11110]  active_file:1257 inactive_file:38248 isolated_file:0
[  203.428697][T11110]  unevictable:1768 dirty:152 writeback:0
[  203.428697][T11110]  slab_reclaimable:10490 slab_unreclaimable:58680
[  203.428697][T11110]  mapped:18213 shmem:2468 pagetables:1013
[  203.428697][T11110]  sec_pagetables:0 bounce:0
[  203.428697][T11110]  kernel_misc_reclaimable:0
[  203.428697][T11110]  free:288940 free_pcp:20250 free_cma:0
[  203.447945][T11110] Node 0 active_anon:13960kB inactive_anon:0kB active_file:3616kB inactive_file:147652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46308kB dirty:448kB writeback:0kB shmem:4900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8116kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  203.460968][T11110] Node 1 active_anon:7136kB inactive_anon:0kB active_file:1412kB inactive_file:5340kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26544kB dirty:160kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3804kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  203.480134][T11110] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  203.481793][   T65] tipc: Resetting bearer <eth:syzkaller0>
[  203.498168][T11110] lowmem_reserve[]: 0 811 811 811 811
[  203.501722][T11110] Node 0 DMA32 free:233440kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13960kB inactive_anon:0kB active_file:3616kB inactive_file:147652kB unevictable:3536kB writepending:448kB present:1556484kB managed:830936kB mlocked:0kB bounce:0kB free_pcp:48880kB local_pcp:30244kB free_cma:0kB
[  203.516040][T11110] lowmem_reserve[]: 0 0 0 0 0
[  203.518013][T11110] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  203.531570][T11110] lowmem_reserve[]: 0 0 854 854 854
[  203.533406][T11110] Node 1 Normal free:448152kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7136kB inactive_anon:0kB active_file:1412kB inactive_file:5340kB unevictable:3536kB writepending:160kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32700kB local_pcp:16232kB free_cma:0kB
[  203.552754][T11110] lowmem_reserve[]: 0 0 0 0 0
[  203.554304][T11110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  203.562605][T11110] Node 0 DMA32: 368*4kB (ME) 448*8kB (UME) 440*16kB (UM) 164*32kB (UM) 62*64kB (UM) 53*128kB (UM) 50*256kB (UM) 40*512kB (UM) 36*1024kB (UME) 8*2048kB (UM) 29*4096kB (UM) = 233408kB
[  203.575439][T11110] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  203.581343][T11110] Node 1 Normal: 230*4kB (ME) 131*8kB (UM) 336*16kB (UME) 241*32kB (UME) 281*64kB (UME) 125*128kB (UME) 54*256kB (UME) 24*512kB (UME) 16*1024kB (UME) 12*2048kB (UME) 81*4096kB (UM) = 447888kB
[  203.594146][T11110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  203.597286][T11110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  203.600560][T11110] 41973 total pagecache pages
[  203.616282][T11110] 0 pages in swap cache
[  203.617718][T11110] Free swap  = 124996kB
[  203.619358][T11110] Total swap = 124996kB
[  203.621058][T11110] 786301 pages RAM
[  203.622975][T11110] 0 pages HighMem/MovableOnly
[  203.629182][T11110] 241335 pages reserved
[  203.632987][T11110] 0 pages cma reserved
[  203.680567][T11128] tun18: tun_chr_ioctl cmd 1074025675
[  203.683073][T11128] tun18: persist enabled
[  203.700466][T11128] tun18: tun_chr_ioctl cmd 1074025675
[  203.703185][T11128] tun18: persist enabled
[  203.923951][T11135] lo speed is unknown, defaulting to 1000
[  204.438141][T11160] tun19: tun_chr_ioctl cmd 1074025675
[  204.440390][T11160] tun19: persist enabled
[  204.444922][T11160] tun19: tun_chr_ioctl cmd 1074025675
[  204.447996][T11160] tun19: persist enabled
[  204.617910][T11183] tun20: tun_chr_ioctl cmd 1074025675
[  204.619965][T11183] tun20: persist enabled
[  204.622005][T11183] tun20: tun_chr_ioctl cmd 1074025675
[  204.624288][T11183] tun20: persist enabled
[  204.775203][T11198] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  204.784912][T11198] netlink: 'syz.0.1529': attribute type 12 has an invalid length.
[  204.995075][T11224] lo speed is unknown, defaulting to 1000
[  205.020976][T11226] syzkaller1: entered promiscuous mode
[  205.026018][T11226] syzkaller1: entered allmulticast mode
[  205.039483][T11227] ip6tnl0: entered promiscuous mode
[  205.043637][T11227] ip6tnl0: entered allmulticast mode
[  205.047991][T11227] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  205.164764][T11230] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  205.311360][T11239] openvswitch: netlink: Unknown key attributes 2
[  205.488619][T11247] batadv2: entered promiscuous mode
[  205.491128][T11247] batadv2: entered allmulticast mode
[  205.501046][T11249] veth6: entered allmulticast mode
[  205.543711][T11251] __nla_validate_parse: 35 callbacks suppressed
[  205.543741][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  205.549866][T11251] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  205.553413][T11251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.595666][T11247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1547'.
[  205.699924][T11262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'.
[  205.727098][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  205.826254][T11267] netlink: 'syz.2.1554': attribute type 1 has an invalid length.
[  205.835731][T11267] netlink: 808 bytes leftover after parsing attributes in process `syz.2.1554'.
[  205.908782][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'.
[  205.911708][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1559'.
[  205.990098][T11286] IPVS: length: 86 != 24
[  205.999998][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'.
[  206.009550][T11286] geneve3: entered promiscuous mode
[  206.151019][T11313] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1571'.
[  206.189067][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  206.219297][T11325] netlink: 'syz.1.1575': attribute type 11 has an invalid length.
[  207.336731][T11373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.436171][T11381] lo speed is unknown, defaulting to 1000
[  207.635221][T11404] lo speed is unknown, defaulting to 1000
[  207.683760][T11408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  207.802655][T11413] lo speed is unknown, defaulting to 1000
[  207.977010][T11421] netlink: 'syz.0.1603': attribute type 4 has an invalid length.
[  208.000738][T11355] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  208.969059][T11457] bond3: entered promiscuous mode
[  208.971113][T11457] bond3: entered allmulticast mode
[  208.973663][T11457] 8021q: adding VLAN 0 to HW filter on device bond3
[  209.435327][T11511] netlink: 'syz.1.1624': attribute type 2 has an invalid length.
[  209.438117][T11511] netlink: 'syz.1.1624': attribute type 1 has an invalid length.
[  210.411751][T11596] lo speed is unknown, defaulting to 1000
[  210.577417][T11616] syzkaller0: entered promiscuous mode
[  210.579215][T11616] syzkaller0: entered allmulticast mode
[  210.603260][T11617] "syz.0.1653" (11617) uses obsolete ecb(arc4) skcipher
[  210.808139][T11623] lo speed is unknown, defaulting to 1000
[  210.964434][T11629] lo speed is unknown, defaulting to 1000
[  211.039278][T11630] lo speed is unknown, defaulting to 1000
[  211.102312][T11635] syzkaller1: entered promiscuous mode
[  211.108139][T11635] syzkaller1: entered allmulticast mode
[  211.111774][T11635] __nla_validate_parse: 15 callbacks suppressed
[  211.111794][T11635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1657'.
[  211.118216][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'.
[  211.953591][T11665] lo speed is unknown, defaulting to 1000
[  212.009990][T11669] netlink: 'syz.2.1668': attribute type 10 has an invalid length.
[  212.015889][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.019198][T11669] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  212.023956][T11669] netlink: 'syz.2.1668': attribute type 10 has an invalid length.
[  212.026441][T11669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1668'.
[  212.034504][T11669] batadv0: entered promiscuous mode
[  212.036408][T11669] batadv0: entered allmulticast mode
[  212.039353][T11669] bond0: (slave batadv0): Releasing backup interface
[  212.043494][T11669] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  212.145264][T11674] lo speed is unknown, defaulting to 1000
[  212.182972][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  212.183543][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1671'.
[  212.325053][T11682] tipc: Resetting bearer <eth:syzkaller0>
[  212.330244][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1672'.
[  212.333959][T11682] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1672'.
[  212.341873][T11682] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002
[  212.343650][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'.
[  212.349492][T11681] tipc: Resetting bearer <eth:syzkaller0>
[  212.436819][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  212.477206][T11686] lo speed is unknown, defaulting to 1000
[  212.480964][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'.
[  212.581941][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'.
[  212.723713][T11733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.727222][T11733] syzkaller0: entered promiscuous mode
[  212.729540][T11733] syzkaller0: entered allmulticast mode
[  212.792976][T11743] x9: renamed from bridge_slave_0
[  212.815960][T11743] lo speed is unknown, defaulting to 1000
[  212.818135][T11736] tun21: tun_chr_ioctl cmd 1074025675
[  212.819933][T11736] tun21: persist enabled
[  212.821599][T11736] tun21: tun_chr_ioctl cmd 1074025675
[  212.827161][T11736] tun21: persist enabled
[  213.066320][T11764] tun22: tun_chr_ioctl cmd 1074025675
[  213.068197][T11764] tun22: persist enabled
[  213.070547][T11763] tun22: tun_chr_ioctl cmd 1074025675
[  213.075186][T11763] tun22: persist enabled
[  213.561465][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  213.566849][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  213.587976][T11774] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.591716][T11774] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  213.629616][T11773] lo speed is unknown, defaulting to 1000
[  214.076965][T11829] netlink: 'syz.1.1711': attribute type 1 has an invalid length.
[  214.076965][T11828] netlink: 'syz.1.1711': attribute type 1 has an invalid length.
[  214.375091][T11856] sctp: [Deprecated]: syz.2.1719 (pid 11856) Use of int in max_burst socket option deprecated.
[  214.375091][T11856] Use struct sctp_assoc_value instead
[  214.388480][T11853] lo speed is unknown, defaulting to 1000
[  214.853319][T11893] tun23: tun_chr_ioctl cmd 1074025675
[  214.855188][T11893] tun23: persist enabled
[  214.857117][T11893] tun23: tun_chr_ioctl cmd 1074025675
[  214.858955][T11893] tun23: persist enabled
[  214.864121][T11888] tun21: tun_chr_ioctl cmd 1074025675
[  214.866527][T11888] tun21: persist enabled
[  215.347962][T11917] lo speed is unknown, defaulting to 1000
[  215.461386][T11923] syzkaller1: entered promiscuous mode
[  215.463533][T11923] syzkaller1: entered allmulticast mode
[  215.981040][T11947] lo speed is unknown, defaulting to 1000
[  216.010925][T11951] 8021q: VLANs not supported on wg0
[  216.200859][T11966] lo speed is unknown, defaulting to 1000
[  216.260023][T11970] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  216.269456][T11972] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  216.271871][T11972] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  216.353573][T11982] lo speed is unknown, defaulting to 1000
[  216.384282][T11984] __nla_validate_parse: 16 callbacks suppressed
[  216.384301][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  216.400075][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1752'.
[  216.424670][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  216.467698][T11989] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  216.514978][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  216.671858][T12007] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1760'.
[  216.680905][T12003] lo speed is unknown, defaulting to 1000
[  216.748228][T12010] lo speed is unknown, defaulting to 1000
[  216.785677][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'.
[  216.836327][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1765'.
[  216.840369][T12023] tipc: Resetting bearer <eth:syzkaller0>
[  216.847930][T12023] tipc: Resetting bearer <eth:syzkaller0>
[  216.889069][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'.
[  216.900478][T12031] syzkaller1: entered promiscuous mode
[  216.903397][T12031] syzkaller1: entered allmulticast mode
[  216.906177][T12031] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  216.927696][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'.
[  216.932528][T12031] netlink: 'syz.1.1767': attribute type 58 has an invalid length.
[  216.935654][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1767'.
[  217.079073][T12046] dvmrp8: entered allmulticast mode
[  217.176224][T12051] lo speed is unknown, defaulting to 1000
[  217.664861][   T64] tipc: Resetting bearer <eth:syzkaller0>
[  217.793764][T12075] tun24: tun_chr_ioctl cmd 1074025675
[  217.795754][T12075] tun24: persist enabled
[  217.797621][T12076] tun24: tun_chr_ioctl cmd 1074025675
[  217.799515][T12076] tun24: persist enabled
[  217.839752][T12078] netlink: 'syz.0.1778': attribute type 83 has an invalid length.
[  217.866308][T12078] tipc: Resetting bearer <eth:syzkaller0>
[  217.879436][T12078] tipc: Resetting bearer <eth:syzkaller0>
[  217.889574][T12045] dvmrp8: left allmulticast mode
[  218.211193][T12115] netlink: 'syz.1.1790': attribute type 3 has an invalid length.
[  218.703283][ T1092] tipc: Resetting bearer <eth:syzkaller0>
[  219.095969][T12152] lo speed is unknown, defaulting to 1000
[  219.480816][T12182] macvtap1: entered promiscuous mode
[  219.483779][T12182] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  219.706195][T12194] netlink: 'syz.2.1817': attribute type 4 has an invalid length.
[  219.854927][T12219] bond4: entered promiscuous mode
[  219.857386][T12219] bond4: entered allmulticast mode
[  219.859216][T12219] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.868861][T12219] lo speed is unknown, defaulting to 1000
[  220.369734][T12231] netlink: 'syz.1.1823': attribute type 3 has an invalid length.
[  220.678476][T12254] openvswitch: netlink: Flow actions attr not present in new flow.
[  220.851846][T12269] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  220.876600][T12269] lo speed is unknown, defaulting to 1000
[  221.064833][T12276] dvmrp0: entered allmulticast mode
[  221.206197][T12290] netlink: 'syz.2.1844': attribute type 1 has an invalid length.
[  221.393676][T12299] __nla_validate_parse: 24 callbacks suppressed
[  221.393694][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'.
[  222.150472][T12329] netlink: 'syz.0.1852': attribute type 1 has an invalid length.
[  222.154752][T12329] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.160275][T12329] tipc: Resetting bearer <eth:syzkaller0>
[  222.175751][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.179111][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.188601][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.191735][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.207830][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.210954][T12329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[  222.220951][T12326] tipc: Resetting bearer <eth:syzkaller0>
[  222.307795][T12343] netlink: 'syz.0.1857': attribute type 3 has an invalid length.
[  222.522015][T12359] netlink: 'syz.2.1862': attribute type 5 has an invalid length.
[  222.534519][T12359] netlink: 'syz.2.1862': attribute type 21 has an invalid length.
[  222.538682][T12359] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1862'.
[  222.542813][T12359] netlink: 'syz.2.1862': attribute type 5 has an invalid length.
[  222.546172][T12359] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1862'.
[  222.771053][T12375] lo speed is unknown, defaulting to 1000
[  222.803434][  T245] tipc: Resetting bearer <eth:syzkaller0>
[  223.353152][T12442] validate_nla: 1 callbacks suppressed
[  223.353175][T12442] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  223.409310][T12450] netem: unknown loss type 12
[  223.410903][T12450] netem: change failed
[  223.453718][T12455] tun25: tun_chr_ioctl cmd 1074025675
[  223.455485][T12455] tun25: persist enabled
[  223.551211][T12472] lo speed is unknown, defaulting to 1000
[  223.583268][T12467] nbd1: detected capacity change from 0 to 127
[  223.620780][   T56] block nbd1: Receive control failed (result -32)
[  223.650776][T12477] lo speed is unknown, defaulting to 1000
[  223.726460][   T13] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[  224.163110][T12526] ieee802154 phy0 wpan0: encryption failed: -22
[  224.224418][T12541] netlink: 'syz.0.1909': attribute type 7 has an invalid length.
[  224.230480][T12541] : entered promiscuous mode
[  224.298865][T12548] lo speed is unknown, defaulting to 1000
[  225.691968][T12638] lo speed is unknown, defaulting to 1000
[  226.006300][T12659] tun26: tun_chr_ioctl cmd 1074025675
[  226.008614][T12659] tun26: persist enabled
[  226.020376][T12659] tun26: tun_chr_ioctl cmd 1074025675
[  226.023209][T12659] tun26: persist enabled
[  226.445718][T12687] __nla_validate_parse: 90 callbacks suppressed
[  226.445734][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1952'.
[  226.451038][T12687] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1952'.
[  226.720406][T12718] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  226.727198][T12718] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  226.923854][T12743] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1970'.
[  227.435215][T12751] lo speed is unknown, defaulting to 1000
[  227.630960][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'.
[  227.635643][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'.
[  227.639740][T12756] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1973'.
[  227.751259][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'.
[  227.768211][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'.
[  227.903912][T12789] netlink: 'syz.2.1985': attribute type 3 has an invalid length.
[  227.921052][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  227.932216][T12789] batman_adv: batadv0: Adding interface: ipvlan2
[  227.935183][T12789] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.944172][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  227.947979][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.952238][T12789] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  228.064059][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  228.176361][T12818] tun22: tun_chr_ioctl cmd 1074025675
[  228.179533][T12818] tun22: persist enabled
[  228.182223][T12818] tun22: tun_chr_ioctl cmd 1074025675
[  228.185551][T12818] tun22: persist enabled
[  228.346854][T12829] netlink: 'syz.1.2000': attribute type 1 has an invalid length.
[  228.365163][T12838] netlink: 'syz.2.2003': attribute type 1 has an invalid length.
[  228.378582][T12838] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.417277][T12841] lo speed is unknown, defaulting to 1000
[  228.571272][T12853] lo speed is unknown, defaulting to 1000
[  229.667284][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810f4e1c00: rx timeout, send abort
[  229.670797][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810f4e1c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  229.834401][T12880] lo speed is unknown, defaulting to 1000
[  229.866214][T12883] tipc: Resetting bearer <eth:syzkaller0>
[  229.893266][T12882] tipc: Resetting bearer <eth:syzkaller0>
[  230.055101][T12894] syzkaller1: entered promiscuous mode
[  230.057404][T12894] syzkaller1: entered allmulticast mode
[  230.112971][ T1032] tipc: Resetting bearer <eth:syzkaller0>
[  230.603279][T12904] syzkaller1: entered promiscuous mode
[  230.605057][T12904] syzkaller1: entered allmulticast mode
[  230.687391][T12907] lo speed is unknown, defaulting to 1000
[  230.958885][T12936] netlink: 'syz.2.2030': attribute type 11 has an invalid length.
[  231.151904][T12963] lo speed is unknown, defaulting to 1000
[  231.529536][T12970] infiniband syz!: set down
[  231.531535][T12970] infiniband syz!: added team_slave_0
[  231.533988][T12970] syz!: rxe_create_cq: returned err = -12
[  231.535952][T12970] infiniband syz!: Couldn't create ib_mad CQ
[  231.538033][T12970] infiniband syz!: Couldn't open port 1
[  231.548458][T12970] RDS/IB: syz!: added
[  231.550191][T12970] smc: adding ib device syz! with port count 1
[  231.552942][T12970] smc:    ib device syz! port 1 has pnetid 
[  231.818702][T12987] __nla_validate_parse: 17 callbacks suppressed
[  231.818717][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'.
[  231.846233][T12978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2043'.
[  231.953405][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'.
[  231.964756][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2051'.
[  232.000613][T13004] netlink: 'syz.1.2052': attribute type 10 has an invalid length.
[  232.073605][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'.
[  232.086274][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'.
[  232.099731][T13009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'.
[  232.106869][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'.
[  232.117103][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2056'.
[  232.120053][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2056'.
[  232.195215][T13021] tipc: Invalid UDP bearer configuration
[  232.195347][T13021] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  232.288517][T13024] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  232.742850][T13026] nbd: illegal input index 65508
[  232.814439][T13035] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  232.817220][T13035] openvswitch: netlink: Duplicate key (type 0).
[  232.823101][T13035] tun27: tun_chr_ioctl cmd 1074025675
[  232.825116][T13035] tun27: persist enabled
[  232.826755][T13035] tun27: tun_chr_ioctl cmd 1074025675
[  232.828668][T13035] tun27: persist enabled
[  233.147038][T13044] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.156344][T13044] macvlan3: entered promiscuous mode
[  233.158163][T13044] macvlan3: entered allmulticast mode
[  233.160527][T13044] bond5: entered promiscuous mode
[  233.164193][T13044] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  233.172715][T13044] bond5: left promiscuous mode
[  233.195804][T13048] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  233.200650][T13048] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  233.271992][T13056] netlink: 'syz.0.2070': attribute type 3 has an invalid length.
[  233.710103][T13095] tun28: tun_chr_ioctl cmd 1074025675
[  233.713888][T13095] tun28: persist enabled
[  233.724923][T13095] tun28: tun_chr_ioctl cmd 1074025675
[  233.729721][T13095] tun28: persist enabled
[  233.924749][T13112] tun29: tun_chr_ioctl cmd 1074025675
[  233.927067][T13112] tun29: persist enabled
[  233.940320][T13110] tun29: tun_chr_ioctl cmd 1074025675
[  233.944637][T13110] tun29: persist enabled
[  234.167983][T13130] tun23: tun_chr_ioctl cmd 1074025675
[  234.170295][T13130] tun23: persist enabled
[  234.172345][T13130] tun23: tun_chr_ioctl cmd 1074025675
[  234.175033][T13130] tun23: persist enabled
[  234.613803][T13135] netlink: 'syz.2.2093': attribute type 7 has an invalid length.
[  234.616614][T13135] netlink: 'syz.2.2093': attribute type 8 has an invalid length.
[  234.619660][T13135] netlink: 'syz.2.2093': attribute type 4 has an invalid length.
[  234.856949][T13140] tipc: Resetting bearer <eth:syzkaller0>
[  235.486849][T13148] IPVS: set_ctl: invalid protocol: 403 127.0.0.1:20002
[  235.688372][T13139] tipc: Resetting bearer <eth:syzkaller0>
[  235.690631][T13155] lo speed is unknown, defaulting to 1000
[  235.715590][T13158] tun24: tun_chr_ioctl cmd 1074025675
[  235.717455][T13158] tun24: persist enabled
[  235.719101][T13158] tun24: tun_chr_ioctl cmd 1074025675
[  235.720885][T13158] tun24: persist enabled
[  235.772358][T13160] lo speed is unknown, defaulting to 1000
[  235.913871][T13169] lo speed is unknown, defaulting to 1000
[  236.195970][T13196] bond4: (slave ip6gretap1): making interface the new active one
[  236.198999][T13196] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  236.301971][T13213] vlan2: entered promiscuous mode
[  236.306487][T13213] macvtap0: entered promiscuous mode
[  236.543818][  T999] tipc: Resetting bearer <eth:syzkaller0>
[  236.943497][T13248] lo speed is unknown, defaulting to 1000
[  237.270885][T13264] __nla_validate_parse: 26 callbacks suppressed
[  237.270905][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  237.278050][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  237.285889][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  237.330532][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2137'.
[  237.409632][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'.
[  237.444964][T13283] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2140'.
[  237.934897][T13318] tipc: Resetting bearer <eth:syzkaller0>
[  238.143903][T13325] IPVS: set_ctl: invalid protocol: 4 172.30.1.1:20000
[  238.184750][T13331] netlink: 'syz.0.2155': attribute type 1 has an invalid length.
[  238.195090][T13331] 8021q: adding VLAN 0 to HW filter on device bond6
[  238.209003][T13331] veth5: entered promiscuous mode
[  238.212233][T13331] bond6: (slave veth5): Enslaving as an active interface with an up link
[  238.234474][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'.
[  238.240523][T13334] netlink: 'syz.0.2156': attribute type 1 has an invalid length.
[  238.243566][T13334] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2156'.
[  238.248146][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2156'.
[  238.275629][T13336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2157'.
[  238.278731][T13336] netlink: 'syz.0.2157': attribute type 5 has an invalid length.
[  238.683111][T13380] lo speed is unknown, defaulting to 1000
[  240.150163][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.152830][T13452] tun25: persist enabled
[  240.154426][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.156584][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.159217][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.161743][T13452] tun25: persist enabled
[  240.164025][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.166050][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.168140][T13452] tun25: persist enabled
[  240.169888][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.172153][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.174412][T13452] tun25: persist enabled
[  240.176301][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.178513][T13452] tun25: persist enabled
[  240.180611][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.184186][T13452] tun25: persist enabled
[  240.185961][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.189176][T13452] tun25: persist enabled
[  240.190917][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.193872][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.195908][T13452] tun25: persist enabled
[  240.198023][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.200345][T13452] tun25: tun_chr_ioctl cmd 1074025675
[  240.203246][T13452] tun25: persist enabled
[  240.205191][T13451] tun25: tun_chr_ioctl cmd 1074025673
[  240.721137][T13490] lo speed is unknown, defaulting to 1000
[  240.944611][T13513] lo speed is unknown, defaulting to 1000
[  240.954418][T13511] tun30: tun_chr_ioctl cmd 1074025675
[  240.956541][T13511] tun30: persist enabled
[  240.958956][T13511] tun30: tun_chr_ioctl cmd 1074025675
[  240.961047][T13511] tun30: persist enabled
[  241.062016][T13522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.270303][T13548] vlan3: entered allmulticast mode
[  241.278838][T13548] erspan0: entered allmulticast mode
[  241.307038][T13550] tun31: tun_chr_ioctl cmd 1074025675
[  241.309114][T13550] tun31: persist enabled
[  241.427160][T13562] tun31: tun_chr_ioctl cmd 1074025675
[  241.429577][T13562] tun31: persist enabled
[  241.841322][T13602] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.846873][T13604] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  241.850730][T13604] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  241.992279][T13621] netlink: 'syz.1.2239': attribute type 1 has an invalid length.
[  242.552943][T13658] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  242.556874][T13658] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  242.931159][T13666] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.092016][T13683] __nla_validate_parse: 93 callbacks suppressed
[  243.092029][T13683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2256'.
[  243.098514][T13678] lo speed is unknown, defaulting to 1000
[  243.199000][T13689] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2257'.
[  243.202280][T13689] netlink: zone id is out of range
[  243.204559][T13689] netlink: zone id is out of range
[  243.206358][T13689] netlink: zone id is out of range
[  243.208095][T13689] netlink: zone id is out of range
[  243.209889][T13689] netlink: get zone limit has 8 unknown bytes
[  243.212383][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'.
[  243.251229][   T33] audit: type=1107 audit(1756475900.556:2): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  243.533402][T13711] tun32: tun_chr_ioctl cmd 1074025675
[  243.535203][T13711] tun32: persist enabled
[  243.537268][T13711] tun32: tun_chr_ioctl cmd 1074025675
[  243.539050][T13711] tun32: persist enabled
[  244.065908][T13725] netlink: 21360 bytes leftover after parsing attributes in process `syz.2.2267'.
[  244.149855][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'.
[  244.165888][T13728] lo speed is unknown, defaulting to 1000
[  244.468611][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2275'.
[  244.573340][T13767] tun33: tun_chr_ioctl cmd 1074025675
[  244.575380][T13767] tun33: persist enabled
[  244.577245][T13767] tun33: tun_chr_ioctl cmd 1074025675
[  244.579121][T13767] tun33: persist enabled
[  244.593353][T13773] lo speed is unknown, defaulting to 1000
[  244.616362][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'.
[  244.671049][T13784] lo speed is unknown, defaulting to 1000
[  244.793403][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'.
[  244.815134][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2286'.
[  245.173803][T13804] bond0: (slave bond_slave_0): Releasing backup interface
[  245.180759][T13804] team0: Port device team_slave_0 removed
[  245.188823][T13804] team0: Port device team_slave_1 removed
[  245.192259][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.199292][T13804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.205801][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.209116][T13804] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.223963][T13804] batman_adv: batadv0: Interface deactivated: vxlan0
[  245.227177][T13804] batman_adv: batadv0: Removing interface: vxlan0
[  245.235118][T13804] batman_adv: batadv0: Removing interface: ipvlan2
[  245.240352][T13804] bond4: (slave ip6gretap1): Releasing active interface
[  245.256653][T13807] team0: Mode changed to "broadcast"
[  245.266882][T13804] vlan0: entered promiscuous mode
[  245.274155][T13804] team0: Port device vlan0 added
[  245.279640][T13804] tipc: Enabling of bearer <et(:team0> rejected, media not registered
[  245.285009][T13804] netlink: 'syz.2.2290': attribute type 4 has an invalid length.
[  245.334976][T13811] lo speed is unknown, defaulting to 1000
[  245.337013][T13814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'.
[  245.656931][T13832] lo speed is unknown, defaulting to 1000
[  245.985680][T13848] tun26: tun_chr_ioctl cmd 1074025675
[  245.988962][T13848] tun26: persist enabled
[  245.991286][T13848] tun26: tun_chr_ioctl cmd 1074025675
[  245.994342][T13848] tun26: persist enabled
[  246.114574][T13852] netlink: 'syz.0.2305': attribute type 8 has an invalid length.
[  246.131168][T13858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.189686][T13858] netlink: 'syz.1.2308': attribute type 12 has an invalid length.
[  246.223979][T13867] tun35: tun_chr_ioctl cmd 1074025675
[  246.226001][T13867] tun35: persist enabled
[  246.227644][T13868] tun35: tun_chr_ioctl cmd 1074025675
[  246.234434][T13868] tun35: persist enabled
[  246.236604][T13867] tun35: tun_chr_ioctl cmd 1074025675
[  246.238652][T13867] tun35: persist enabled
[  246.375105][T13889] batadv0: entered promiscuous mode
[  246.380506][T13889] batadv0: entered allmulticast mode
[  246.614954][T13916] lo speed is unknown, defaulting to 1000
[  246.840769][T13933] lo speed is unknown, defaulting to 1000
[  247.136292][T13944] tun18: tun_chr_ioctl cmd 1074025675
[  247.138588][T13944] tun18: persist enabled
[  247.150279][T13944] tun18: tun_chr_ioctl cmd 1074025675
[  247.152101][T13944] tun18: persist enabled
[  247.168767][T13944] syzkaller1: entered promiscuous mode
[  247.171225][T13944] syzkaller1: entered allmulticast mode
[  247.274807][T13955] lo speed is unknown, defaulting to 1000
[  247.294669][T13963] syzkaller1: entered promiscuous mode
[  247.297087][T13963] syzkaller1: entered allmulticast mode
[  247.303617][T13963] netlink: 'syz.0.2343': attribute type 4 has an invalid length.
[  247.656767][T13998] syzkaller0: left promiscuous mode
[  247.659999][T13998] syzkaller0: left allmulticast mode
[  247.668466][T13998] tipc: Resetting bearer <eth:syzkaller0>
[  247.671638][T13998] syzkaller0: create flow: hash 875328178 index 1
[  247.679800][T13998] tipc: Resetting bearer <eth:syzkaller0>
[  247.689131][T13998] syzkaller0: delete flow: hash 875328178 index 1
[  247.692063][T13998] tipc: Resetting bearer <eth:syzkaller0>
[  247.709985][T14000] lo speed is unknown, defaulting to 1000
[  247.738431][T14004] netlink: 'syz.1.2355': attribute type 7 has an invalid length.
[  247.756051][T14004] netlink: 'syz.1.2355': attribute type 8 has an invalid length.
[  247.769647][ T1092] tipc: Resetting bearer <eth:syzkaller0>
[  248.111412][T14032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.118694][T14032] syzkaller0: entered promiscuous mode
[  248.151868][T14032] syzkaller0: entered allmulticast mode
[  248.154807][T14032] tipc: Resetting bearer <eth:syzkaller0>
[  248.206494][T14032] tipc: Resetting bearer <eth:syzkaller0>
[  248.221314][T14032] __nla_validate_parse: 16 callbacks suppressed
[  248.221379][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'.
[  248.391929][T14047] netlink: 'syz.0.2373': attribute type 83 has an invalid length.
[  248.497384][T14064] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  248.500844][T14064] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2378'.
[  248.537318][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2380'.
[  248.568267][T14077] netlink: 'syz.2.2378': attribute type 28 has an invalid length.
[  249.283981][T14105] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2388'.
[  249.309222][T14109] netlink: ct family unspecified
[  249.311004][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.341315][T14111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2390'.
[  249.378431][T14116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.384633][T14116] tipc: Resetting bearer <eth:syzkaller0>
[  249.425636][T14120] syzkaller0: entered promiscuous mode
[  249.428015][T14120] syzkaller0: entered allmulticast mode
[  249.490773][T14127] lo speed is unknown, defaulting to 1000
[  249.616353][T14142] tun19: tun_chr_ioctl cmd 1074025675
[  249.618222][T14142] tun19: persist enabled
[  249.621799][T14142] tun19: tun_chr_ioctl cmd 1074025675
[  249.627035][T14142] tun19: persist enabled
[  250.721951][T14200] tipc: Resetting bearer <eth:syzkaller0>
[  250.785004][T14200] tipc: Resetting bearer <eth:syzkaller0>
[  250.835333][ T1032] tipc: Resetting bearer <eth:syzkaller0>
[  250.926516][T14230] veth11: entered promiscuous mode
[  250.936528][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'.
[  250.962201][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'.
[  250.991124][T14236] tun27: tun_chr_ioctl cmd 1074025673
[  250.994564][T14235] tun27: tun_chr_ioctl cmd 1074025675
[  250.996371][T14235] tun27: persist enabled
[  250.998052][T14236] tun27: tun_chr_ioctl cmd 1074025675
[  251.000379][T14236] tun27: persist enabled
[  251.004437][T14236] tun27: tun_chr_ioctl cmd 1074025675
[  251.007089][T14236] tun27: persist enabled
[  251.008824][T14235] tun27: tun_chr_ioctl cmd 1074025675
[  251.010807][T14235] tun27: persist enabled
[  251.037917][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.041784][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.045518][T14238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  251.050228][T14238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  251.693306][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'.
[  251.701519][T14245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2436'.
[  251.818073][T14250] tipc: Resetting bearer <eth:syzkaller0>
[  251.828450][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  251.844390][   T40] tipc: Resetting bearer <eth:syzkaller0>
[  252.006372][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'.
[  252.141372][T14279] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003
[  252.180347][T14282] macsec1: entered promiscuous mode
[  252.369121][T14297] tun28: tun_chr_ioctl cmd 1074025675
[  252.371339][T14297] tun28: persist enabled
[  252.373738][T14297] tun28: tun_chr_ioctl cmd 1074025675
[  252.375591][T14297] tun28: persist enabled
[  252.455890][T14304] netlink: 'syz.1.2458': attribute type 2 has an invalid length.
[  252.517238][T14306] netlink: 'syz.1.2459': attribute type 2 has an invalid length.
[  252.714590][T14311] lo speed is unknown, defaulting to 1000
[  252.845834][T14321] lo speed is unknown, defaulting to 1000
[  253.351832][T14340] __nla_validate_parse: 3 callbacks suppressed
[  253.351844][T14340] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2471'.
[  253.358944][T14340] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.387725][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2472'.
[  253.873688][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'.
[  253.882127][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2475'.
[  253.936685][T14354] tun29: tun_chr_ioctl cmd 1074025675
[  253.939405][T14354] tun29: persist enabled
[  253.941885][T14354] tun29: tun_chr_ioctl cmd 1074025675
[  253.945660][T14354] tun29: persist enabled
[  253.950344][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'.
[  254.108464][T14361] openvswitch: netlink: IPv4 tun info is not correct
[  254.111075][T14362] openvswitch: netlink: IPv4 tun info is not correct
[  254.119329][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2479'.
[  254.142697][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  254.489972][T14375] IPv6: NLM_F_CREATE should be specified when creating new route
[  254.536725][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'.
[  254.675033][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2486'.
[  254.686810][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2486'.
[  254.886482][T14404] netlink: 'syz.1.2493': attribute type 7 has an invalid length.
[  254.889831][T14404] netlink: 'syz.1.2493': attribute type 8 has an invalid length.
[  254.895450][T14403] netlink: 'syz.1.2493': attribute type 7 has an invalid length.
[  254.900658][T14403] netlink: 'syz.1.2493': attribute type 8 has an invalid length.
[  254.986519][T14414] tun20: tun_chr_ioctl cmd 1074025675
[  254.988891][T14414] tun20: persist enabled
[  254.992204][T14414] tun20: tun_chr_ioctl cmd 1074025675
[  254.995654][T14414] tun20: persist enabled
[  255.043944][T14421] tun21: tun_chr_ioctl cmd 1074025675
[  255.046831][T14421] tun21: persist enabled
[  255.049488][T14421] tun21: tun_chr_ioctl cmd 1074025675
[  255.051490][T14421] tun21: persist enabled
[  255.082168][T14425] netlink: 'syz.2.2501': attribute type 1 has an invalid length.
[  255.146885][T14431] lo speed is unknown, defaulting to 1000
[  255.268131][T14444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2506'.
[  255.456797][   T33] audit: type=1800 audit(1756475912.766:3): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2511" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3971 res=0 errno=0
[  255.664757][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  256.054141][T14464] lo speed is unknown, defaulting to 1000
[  256.341931][T14478] lo speed is unknown, defaulting to 1000
[  256.868322][T14510] tun36: tun_chr_ioctl cmd 1074025675
[  256.870314][T14510] tun36: persist enabled
[  256.872318][T14510] tun36: tun_chr_ioctl cmd 1074025675
[  256.875244][T14510] tun36: persist enabled
[  257.519329][T14536] openvswitch: netlink: Tunnel attr 28 out of range max 16
[  257.549355][T14533] lo speed is unknown, defaulting to 1000
[  257.947210][T14556] netlink: 'syz.0.2542': attribute type 24 has an invalid length.
[  257.981900][T14561] netlink: 'syz.1.2544': attribute type 2 has an invalid length.
[  258.005333][T14563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  258.022853][T14561] netlink: 'syz.1.2544': attribute type 10 has an invalid length.
[  258.129646][T14585] veth0: entered promiscuous mode
[  258.133725][T14587] veth0 (unregistering): left promiscuous mode
[  258.329885][T14604] veth0_to_team: left allmulticast mode
[  258.331665][T14604] veth0_to_team: left promiscuous mode
[  258.336373][T14604] bridge0: port 2(veth0_to_team) entered disabled state
[  258.342164][T14604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  258.344899][T14604] IPv6: NLM_F_CREATE should be set when creating new route
[  258.502180][T14613] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  259.190074][T14628] __nla_validate_parse: 13 callbacks suppressed
[  259.190090][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'.
[  259.398725][T14644] lo speed is unknown, defaulting to 1000
[  259.404967][T14641] ip6gre1: entered allmulticast mode
[  259.453517][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'.
[  259.457274][T14652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'.
[  259.525408][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'.
[  259.531377][T14661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'.
[  259.531406][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'.
[  259.552868][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2577'.
[  259.586302][T14667] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2578'.
[  259.717731][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'.
[  259.802074][T14683] lo speed is unknown, defaulting to 1000
[  259.984061][T14688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2585'.
[  260.494392][T14723] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  260.546242][T14730] netlink: 'syz.1.2598': attribute type 64 has an invalid length.
[  260.609772][T14733] lo speed is unknown, defaulting to 1000
[  261.236930][T14797] debugfs: 'netdev:nicvf0' already exists in 'phy5'
[  261.275248][T14805] tun37: tun_chr_ioctl cmd 1074025675
[  261.278017][T14805] tun37: persist enabled
[  261.280074][T14803] xt_time: unknown flags 0xf4
[  261.310647][T14812] netlink: 'syz.1.2625': attribute type 11 has an invalid length.
[  261.418830][T14829] xfrm2: entered promiscuous mode
[  261.421268][T14829] xfrm2: entered allmulticast mode
[  261.521100][T14848] lo speed is unknown, defaulting to 1000
[  261.524725][T14848] lo speed is unknown, defaulting to 1000
[  261.527192][T14848] lo speed is unknown, defaulting to 1000
[  261.530918][T14848] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  261.540053][T14848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  261.549452][T14848] lo speed is unknown, defaulting to 1000
[  261.552090][T14848] lo speed is unknown, defaulting to 1000
[  261.555460][T14848] lo speed is unknown, defaulting to 1000
[  261.618763][T14860] tun38: tun_chr_ioctl cmd 1074025675
[  261.621449][T14860] tun38: persist enabled
[  261.625028][T14860] tun38: tun_chr_ioctl cmd 1074025675
[  261.628500][T14860] tun38: persist enabled
[  261.838084][T14870] ip6tnl1: entered promiscuous mode
[  261.950947][T14888] tun39: tun_chr_ioctl cmd 1074025675
[  261.954482][T14888] tun39: persist enabled
[  261.956792][T14888] tun39: tun_chr_ioctl cmd 1074025675
[  261.959153][T14888] tun39: persist enabled
[  262.021204][T14891] lo speed is unknown, defaulting to 1000
[  262.079137][T14892] lo speed is unknown, defaulting to 1000
[  262.113712][T14891] lo speed is unknown, defaulting to 1000
[  262.245054][T14892] lo speed is unknown, defaulting to 1000
[  262.314563][T14897] netlink: 'syz.0.2652': attribute type 1 has an invalid length.
[  262.321638][T14897] tipc: Resetting bearer <eth:syzkaller0>
[  262.326022][T14896] tipc: Resetting bearer <eth:syzkaller0>
[  262.554740][T14914] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20001
[  262.554744][T14912] macvlan2: entered promiscuous mode
[  262.554761][T14912] bond0: entered promiscuous mode
[  262.562263][T14912] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  262.588025][T14918] tun30: tun_chr_ioctl cmd 1074025675
[  262.590503][T14918] tun30: persist enabled
[  262.592352][T14916] tun30: tun_chr_ioctl cmd 1074025675
[  262.595312][T14916] tun30: persist enabled
[  263.109883][T14950] netlink: 'syz.1.2669': attribute type 12 has an invalid length.
[  263.263485][ T1032] tipc: Resetting bearer <eth:syzkaller0>
[  263.617945][T14966] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  264.040478][T15006] tun31: tun_chr_ioctl cmd 1074025675
[  264.043237][T15006] tun31: persist enabled
[  264.045467][T15006] tun31: tun_chr_ioctl cmd 1074025675
[  264.047951][T15006] tun31: persist enabled
[  264.278796][T15028] lo speed is unknown, defaulting to 1000
[  264.325756][T15037] __nla_validate_parse: 31 callbacks suppressed
[  264.325774][T15037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'.
[  264.340305][T15036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'.
[  264.441637][T15028] lo speed is unknown, defaulting to 1000
[  264.517966][T15055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2700'.
[  264.551563][T15063] smc: net device bond0 applied user defined pnetid SYZ2
[  264.558215][T15063] tun40: tun_chr_ioctl cmd 1074025675
[  264.559998][T15063] tun40: persist enabled
[  264.561767][T15063] tun40: tun_chr_ioctl cmd 1074025675
[  264.564241][T15063] tun40: persist enabled
[  264.690207][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2705'.
[  264.739783][T15076] syzkaller1: entered promiscuous mode
[  264.741824][T15076] syzkaller1: entered allmulticast mode
[  264.769132][T15082] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2708'.
[  264.836118][T15086] bridge0: port 1(veth0_to_team) entered blocking state
[  264.838475][T15086] bridge0: port 1(veth0_to_team) entered disabled state
[  264.841184][T15086] veth0_to_team: entered allmulticast mode
[  264.844181][T15086] veth0_to_team: entered promiscuous mode
[  264.848110][T15085] veth0_to_team: left allmulticast mode
[  264.850208][T15085] veth0_to_team: left promiscuous mode
[  264.852487][T15085] bridge0: port 1(veth0_to_team) entered disabled state
[  264.901866][T15090] pim6reg1: entered promiscuous mode
[  264.904202][T15090] pim6reg1: entered allmulticast mode
[  265.001922][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'.
[  265.015612][T15095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2712'.
[  265.158906][T15101] netlink: 'syz.1.2713': attribute type 12 has an invalid length.
[  265.569970][T15112] tun22: tun_chr_ioctl cmd 1074025675
[  265.572790][T15112] tun22: persist enabled
[  265.575256][T15112] tun22: tun_chr_ioctl cmd 1074025675
[  265.577833][T15112] tun22: persist enabled
[  265.579937][T15113] tun22: tun_chr_ioctl cmd 1074025675
[  265.582173][T15113] tun22: persist enabled
[  265.677768][T15118] netlink: 'syz.2.2719': attribute type 2 has an invalid length.
[  265.685679][T15118] : entered promiscuous mode
[  265.738275][T15118] lo speed is unknown, defaulting to 1000
[  265.857718][T15126] tipc: Resetting bearer <eth:syzkaller0>
[  265.873515][T15118] lo speed is unknown, defaulting to 1000
[  265.891425][T15125] tipc: Resetting bearer <eth:syzkaller0>
[  265.927883][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'.
[  265.947100][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2724'.
[  266.019346][T15139] lo speed is unknown, defaulting to 1000
[  266.177924][T15155] tipc: Resetting bearer <eth:syzkaller0>
[  266.228382][T15154] tipc: Resetting bearer <eth:syzkaller0>
[  266.305994][T15153] lo speed is unknown, defaulting to 1000
[  266.385014][   T40] tipc: Resetting bearer <eth:syzkaller0>
[  266.452726][ T7073] ==================================================================
[  266.455741][ T7073] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  266.458646][ T7073] Read of size 8 at addr ffff88810a1a80a0 by task khidpd_15c25886/7073
[  266.462325][ T7073] 
[  266.463765][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  266.463784][ T7073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.463791][ T7073] Call Trace:
[  266.463799][ T7073]  <TASK>
[  266.463806][ T7073]  dump_stack_lvl+0x189/0x250
[  266.463825][ T7073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.463835][ T7073]  ? lock_release+0x4b/0x3e0
[  266.463849][ T7073]  ? __virt_addr_valid+0x4a5/0x5c0
[  266.463861][ T7073]  print_report+0xca/0x240
[  266.463870][ T7073]  ? __mutex_lock+0x801/0x1350
[  266.463883][ T7073]  kasan_report+0x118/0x150
[  266.463896][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.463907][ T7073]  ? __mutex_lock+0x801/0x1350
[  266.463920][ T7073]  __mutex_lock+0x801/0x1350
[  266.463965][ T7073]  ? __mutex_lock+0x5bb/0x1350
[  266.463981][ T7073]  ? l2cap_unregister_user+0x6a/0x1b0
[  266.463998][ T7073]  ? __pfx___mutex_lock+0x10/0x10
[  266.464014][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.464033][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.464046][ T7073]  l2cap_unregister_user+0x6a/0x1b0
[  266.464056][ T7073]  hidp_session_thread+0x3c9/0x410
[  266.464069][ T7073]  ? __pfx_hidp_session_thread+0x10/0x10
[  266.464078][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.464087][ T7073]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  266.464098][ T7073]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  266.464108][ T7073]  ? __kthread_parkme+0x7b/0x200
[  266.464124][ T7073]  ? __kthread_parkme+0x1a1/0x200
[  266.464138][ T7073]  kthread+0x711/0x8a0
[  266.464154][ T7073]  ? __pfx_hidp_session_thread+0x10/0x10
[  266.464170][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.464186][ T7073]  ? rcu_is_watching+0x15/0xb0
[  266.464200][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.464214][ T7073]  ret_from_fork+0x3fc/0x770
[  266.464229][ T7073]  ? __pfx_ret_from_fork+0x10/0x10
[  266.464243][ T7073]  ? __switch_to_asm+0x39/0x70
[  266.464260][ T7073]  ? __switch_to_asm+0x33/0x70
[  266.464275][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.464289][ T7073]  ret_from_fork_asm+0x1a/0x30
[  266.464307][ T7073]  </TASK>
[  266.464313][ T7073] 
[  266.541027][ T7073] Allocated by task 5843:
[  266.542726][ T7073]  kasan_save_track+0x3e/0x80
[  266.544599][ T7073]  __kasan_kmalloc+0x93/0xb0
[  266.546319][ T7073]  __kmalloc_noprof+0x27a/0x4f0
[  266.548262][ T7073]  hci_alloc_dev_priv+0x28/0x2060
[  266.550297][ T7073]  vhci_create_device+0x120/0x6e0
[  266.552292][ T7073]  vhci_write+0x3ce/0x4a0
[  266.554000][ T7073]  vfs_write+0x5c9/0xb30
[  266.555666][ T7073]  ksys_write+0x145/0x250
[  266.557380][ T7073]  do_syscall_64+0xfa/0x3b0
[  266.559190][ T7073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.561440][ T7073] 
[  266.562365][ T7073] Freed by task 5843:
[  266.563955][ T7073]  kasan_save_track+0x3e/0x80
[  266.565880][ T7073]  kasan_save_free_info+0x46/0x50
[  266.567916][ T7073]  __kasan_slab_free+0x5b/0x80
[  266.569854][ T7073]  kfree+0x18e/0x440
[  266.571411][ T7073]  bt_host_release+0x82/0x90
[  266.573262][ T7073]  device_release+0x9c/0x1c0
[  266.575114][ T7073]  kobject_put+0x22b/0x480
[  266.576861][ T7073]  vhci_release+0x88/0xd0
[  266.578577][ T7073]  __fput+0x44c/0xa70
[  266.580237][ T7073]  task_work_run+0x1d4/0x260
[  266.582145][ T7073]  do_exit+0x6b5/0x2300
[  266.583821][ T7073]  do_group_exit+0x21c/0x2d0
[  266.585687][ T7073]  __x64_sys_exit_group+0x3f/0x40
[  266.587768][ T7073]  x64_sys_call+0x21f7/0x2200
[  266.589667][ T7073]  do_syscall_64+0xfa/0x3b0
[  266.591502][ T7073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.593818][T15153] lo speed is unknown, defaulting to 1000
[  266.593867][ T7073] 
[  266.597187][ T7073] Last potentially related work creation:
[  266.599446][ T7073]  kasan_save_stack+0x3e/0x60
[  266.601374][ T7073]  kasan_record_aux_stack+0xbd/0xd0
[  266.603440][ T7073]  insert_work+0x3d/0x330
[  266.605229][ T7073]  __queue_work+0xbaf/0xfb0
[  266.607088][ T7073]  queue_work_on+0x181/0x270
[  266.608953][ T7073]  process_scheduled_works+0xae1/0x17b0
[  266.611149][ T7073]  worker_thread+0x8a0/0xda0
[  266.612966][ T7073]  kthread+0x711/0x8a0
[  266.614608][ T7073]  ret_from_fork+0x3fc/0x770
[  266.616346][ T7073]  ret_from_fork_asm+0x1a/0x30
[  266.618265][ T7073] 
[  266.619236][ T7073] Second to last potentially related work creation:
[  266.621787][ T7073]  kasan_save_stack+0x3e/0x60
[  266.623663][ T7073]  kasan_record_aux_stack+0xbd/0xd0
[  266.625712][ T7073]  insert_work+0x3d/0x330
[  266.627434][ T7073]  __queue_work+0xcd2/0xfb0
[  266.629295][ T7073]  call_timer_fn+0x17e/0x5f0
[  266.631136][ T7073]  __run_timer_base+0x646/0x860
[  266.633078][ T7073]  run_timer_softirq+0xb7/0x180
[  266.635045][ T7073]  handle_softirqs+0x286/0x870
[  266.636970][ T7073]  __irq_exit_rcu+0xca/0x1f0
[  266.638821][ T7073]  irq_exit_rcu+0x9/0x30
[  266.640552][ T7073]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  266.642761][ T7073]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  266.645136][ T7073] 
[  266.646076][ T7073] The buggy address belongs to the object at ffff88810a1a8000
[  266.646076][ T7073]  which belongs to the cache kmalloc-8k of size 8192
[  266.651454][ T7073] The buggy address is located 160 bytes inside of
[  266.651454][ T7073]  freed 8192-byte region [ffff88810a1a8000, ffff88810a1aa000)
[  266.656862][ T7073] 
[  266.657874][ T7073] The buggy address belongs to the physical page:
[  266.660426][ T7073] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10a1a8
[  266.663935][ T7073] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  266.667252][ T7073] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  266.670351][ T7073] page_type: f5(slab)
[  266.671907][ T7073] raw: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[  266.675249][ T7073] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  266.678727][ T7073] head: 057ff00000000040 ffff88801a442280 0000000000000000 dead000000000001
[  266.682193][ T7073] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  266.685624][ T7073] head: 057ff00000000003 ffffea0004286a01 00000000ffffffff 00000000ffffffff
[  266.689051][ T7073] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  266.692374][ T7073] page dumped because: kasan: bad access detected
[  266.694825][ T7073] page_owner tracks the page as allocated
[  266.697043][ T7073] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5590, tgid 5590 (dhcpcd), ts 31360321472, free_ts 30807390632
[  266.704887][ T7073]  post_alloc_hook+0x240/0x2a0
[  266.706794][ T7073]  get_page_from_freelist+0x21e4/0x22c0
[  266.708935][ T7073]  __alloc_frozen_pages_noprof+0x181/0x370
[  266.711158][ T7073]  alloc_pages_mpol+0x232/0x4a0
[  266.713052][ T7073]  allocate_slab+0x8a/0x370
[  266.714823][ T7073]  ___slab_alloc+0xbeb/0x1410
[  266.716692][ T7073]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  266.719294][ T7073]  kmalloc_reserve+0x136/0x290
[  266.721164][ T7073]  __alloc_skb+0x142/0x2d0
[  266.722942][ T7073]  netlink_dump+0x167/0xe90
[  266.724735][ T7073]  netlink_recvmsg+0x676/0xa30
[  266.726474][ T7073]  sock_recvmsg+0x22c/0x270
[  266.728146][ T7073]  ____sys_recvmsg+0x1c9/0x460
[  266.729888][ T7073]  ___sys_recvmsg+0x1b5/0x510
[  266.731726][ T7073]  __x64_sys_recvmsg+0x198/0x260
[  266.733658][ T7073]  do_syscall_64+0xfa/0x3b0
[  266.735502][ T7073] page last free pid 5674 tgid 5674 stack trace:
[  266.738018][ T7073]  __free_frozen_pages+0xbc4/0xd30
[  266.740078][ T7073]  __put_partials+0x156/0x1a0
[  266.741974][ T7073]  put_cpu_partial+0x17c/0x250
[  266.744089][ T7073]  __slab_free+0x2d5/0x3c0
[  266.745937][ T7073]  qlist_free_all+0x97/0x140
[  266.747776][ T7073]  kasan_quarantine_reduce+0x148/0x160
[  266.749988][ T7073]  __kasan_slab_alloc+0x22/0x80
[  266.751880][ T7073]  __kmalloc_noprof+0x224/0x4f0
[  266.753852][ T7073]  tomoyo_realpath_from_path+0xe3/0x5d0
[  266.756043][ T7073]  tomoyo_path_perm+0x213/0x4b0
[  266.757819][ T7073]  security_inode_getattr+0x12f/0x330
[  266.759534][ T7073]  vfs_fstatat+0xb1/0x170
[  266.760891][ T7073]  __x64_sys_newfstatat+0x116/0x190
[  266.762635][ T7073]  do_syscall_64+0xfa/0x3b0
[  266.764448][ T7073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.766744][ T7073] 
[  266.767697][ T7073] Memory state around the buggy address:
[  266.769581][ T7073]  ffff88810a1a7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  266.772817][ T7073]  ffff88810a1a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.775878][ T7073] >ffff88810a1a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.778570][ T7073]                                ^
[  266.780305][ T7073]  ffff88810a1a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.782976][ T7073]  ffff88810a1a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  266.785529][ T7073] ==================================================================
[  266.789187][ T7073] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  266.792027][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: khidpd_15c25886 Not tainted syzkaller #0 PREEMPT(full) 
[  266.795134][ T7073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.798211][ T7073] Call Trace:
[  266.799281][ T7073]  <TASK>
[  266.800230][ T7073]  dump_stack_lvl+0x99/0x250
[  266.801598][ T7073]  ? __asan_memcpy+0x40/0x70
[  266.803102][ T7073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.804710][ T7073]  ? __pfx__printk+0x10/0x10
[  266.806176][ T7073]  vpanic+0x281/0x750
[  266.807401][ T7073]  ? __pfx_vpanic+0x10/0x10
[  266.808927][ T7073]  ? rcu_is_watching+0x15/0xb0
[  266.810718][ T7073]  panic+0xb9/0xc0
[  266.812143][ T7073]  ? __pfx_panic+0x10/0x10
[  266.813678][ T7073]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  266.815515][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.817599][ T7073]  ? __mutex_lock+0x801/0x1350
[  266.819403][ T7073]  check_panic_on_warn+0x89/0xb0
[  266.821088][ T7073]  ? __mutex_lock+0x801/0x1350
[  266.822643][ T7073]  end_report+0x78/0x160
[  266.824284][ T7073]  kasan_report+0x129/0x150
[  266.825947][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.828249][ T7073]  ? __mutex_lock+0x801/0x1350
[  266.830173][ T7073]  __mutex_lock+0x801/0x1350
[  266.831852][ T7073]  ? __mutex_lock+0x5bb/0x1350
[  266.833683][ T7073]  ? l2cap_unregister_user+0x6a/0x1b0
[  266.835811][ T7073]  ? __pfx___mutex_lock+0x10/0x10
[  266.837809][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.840180][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.842474][ T7073]  l2cap_unregister_user+0x6a/0x1b0
[  266.844440][ T7073]  hidp_session_thread+0x3c9/0x410
[  266.846400][ T7073]  ? __pfx_hidp_session_thread+0x10/0x10
[  266.848502][ T7073]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  266.850755][ T7073]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  266.853201][ T7073]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  266.855624][ T7073]  ? __kthread_parkme+0x7b/0x200
[  266.857546][ T7073]  ? __kthread_parkme+0x1a1/0x200
[  266.859526][ T7073]  kthread+0x711/0x8a0
[  266.861119][ T7073]  ? __pfx_hidp_session_thread+0x10/0x10
[  266.863301][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.865183][ T7073]  ? rcu_is_watching+0x15/0xb0
[  266.867088][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.869164][ T7073]  ret_from_fork+0x3fc/0x770
[  266.870991][ T7073]  ? __pfx_ret_from_fork+0x10/0x10
[  266.873026][ T7073]  ? __switch_to_asm+0x39/0x70
[  266.874937][ T7073]  ? __switch_to_asm+0x33/0x70
[  266.876778][ T7073]  ? __pfx_kthread+0x10/0x10
[  266.878634][ T7073]  ret_from_fork_asm+0x1a/0x30
[  266.880573][ T7073]  </TASK>
[  266.882355][ T7073] Kernel Offset: disabled
[  266.884128][ T7073] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:58:43  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822c8121 RBX=0000000000000000 RCX=ffff88802443b980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88801c4a5000 RSP=ffffc90002eeed38
R8 =ffff88801c4a4fb7 R9 =1ffff110038949f6 R10=dffffc0000000000 R11=ffffed10038949f7
R12=0000000000000000 R13=0000000000000001 R14=ffffffff822c7cda R15=0000000000000000
RIP=ffffffff81bfaf78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff73881a6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000010ee72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008c07370
R8 =ffff888107748237 R9 =1ffff11020ee9046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8d5 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561e90af4e68 CR3=00000000280c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
