last executing test programs:

1.950041939s ago: executing program 1 (id=2099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x3}, 0x2}, 0x18, &(0x7f00000001c0)={&(0x7f0000000400)="fda57409d524ba0bd7b660a5311953930fa716dee3e67e559d7eee438f8b8716dc97ae5616cc485dfb3b497161ba624b87009c38c4d7cf25f94532b3b27cd0d58d2313fdaa728f587c633e1009850eedf9bcd73e17e82e1a370c7a0e6115ac422d628cfaf6db19849aadf137f2791ab9e4004cc3a2ab1e845fca0651de93d45eafd63383129cd30de23ebf55b83e252de4b2f0d792f9ee15b3c8935ee17f673bd2386248d75eca63fed04569781611dd0fc933780fdb8f3ddb9b417b75", 0xbd}, 0x1, 0x0, 0x0, 0x8435}, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
recvmmsg(r6, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x10040, 0x0)
close(r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f1e6ffffffff0005005d0000000008000300116edeb818e1b24b98d2a183b6857069178164b2089ae22329c28e4f2d2e3b9af0c40dcfd58a4dbd9b35fd488c4b509922e343477c6184845f788c33f027e9154d6768e4e4d7cfd387114288ae6f67177a759c0d500963b81177a7a05602d9329c3b2b53def50300923d63afa16c7df035f0d78985d1d5157249190465d77d45d328cb111463fe0a0ec3637696e9", @ANYRES32=r10, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

1.148741085s ago: executing program 0 (id=2125):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4840) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0}) (async)
socket$kcm(0x1e, 0x2, 0x0) (async, rerun: 64)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
shutdown(r5, 0x1) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r11, 0xa}, 0x8)
write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) (async)
r12 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async)
write$cgroup_pressure(r12, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b703000000000000a50000000500000018010000646c6c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
close(r7) (async)
close(r12) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r13, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r4, @ANYBLOB="5c911743358da85b21255725d4b8f7827e3cd424e14628e14e5e25a46907273aa10f4446f7f265a6d92fbdd6ddf8bb325e74e57296d84138db899c25a0d62e881bdddc909c9482b9bd6d75e1909279afe73085e5e64867dcf975b9cd52ee30a9017e73fb7e7e3ce1b15da3e67965d8dec6d6b54bd7b411f8f010ebc976b313223054d1ff30f729dab5429e9f78bff162ab2fc2e6e85447b09f1255beb2403c300970572d1739001d94888871220ebdfcb135ded64440c57ad1a0f7f7a7"], 0x1c}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

1.14772153s ago: executing program 0 (id=2127):
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'hugetlb'}, {0x0, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2b, 'hugetlb'}]}, 0x2d)
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x7, 0x2)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4)
socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x932, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x31, 0x3, "acc0d7305bedb4e3c4085b2d6958c185757883c5b304d6114cac45a170bb37eb5c42eba87bcf83fe2e8e445b33"}]}, 0x48}, 0x1, 0x0, 0x0, 0x20084000}, 0x5)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000300)=0x4, 0x4)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)={[{0x2b, 'net'}]}, 0x5)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x10, 0x17, [0x5a, 0x7, 0xffff]}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4000}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}]}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040002}, 0x40000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x480001, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000700)='syz0\x00', 0x1ff)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000740)={0x7fff, 0x2, 0x7, 0x6}, 0x10)
r10 = socket$isdn_base(0x22, 0x3, 0x0)
writev(r10, &(0x7f00000008c0)=[{&(0x7f0000000780)="73c00e75a17d164cb0f02ef0999c621d00a798f477b663a3c8e243f372ba81173cca279db3afd81bbe0dd5d3be2497d43c8ff80bd850fa7b730019a8b20817353810287d1aff6bb54a6e5a05a457abe54ca9887aac596a69d7cc1ba6a8521daf0c4d0d51d591c31079269e42caf627de02c31dc9eab6e834a541ef6f9d5a0f4ee188b2db42d4c623dd423fbc246694b7665ac054838bc0bc98615bb873c81da6f8010230e6268499c612ec9c558c338547aad3cf66a6ed2bc81be4b43350f24dfb35f04900d958ac2d32758a8d371e091f38a4e472136d413de0a210b903821ed0d0118afe7ce33c0f7203fbc7cbe7fe11f556", 0xf3}, {&(0x7f0000000880)="210af16eb31751a5c49d420f1e66abb17f785c81448c85437ecbccfb72c25cc7f87a16636ae19961e7c9aa1dd1ca910265cd49", 0x33}], 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$F2FS_IOC_GARBAGE_COLLECT(r11, 0x4004f506, &(0x7f0000000940)=0x1)
sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x84, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x24000800)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r12, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x114, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x26}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x49}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xf594}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xcf}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x100}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xc}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8001}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x9f}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x2d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff73}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xfa5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x7}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x40}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1ff}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x9a}]}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x40)

1.090307129s ago: executing program 1 (id=2128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000"/16], &(0x7f0000000100)='GPL\x00'}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000"/16], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB="01000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840) (async)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRES32=r6, @ANYBLOB="01000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4c840)
socket$inet(0x2, 0x3, 0x8d)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x8, 0x0, &(0x7f0000000080))
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x2, 0xc, 0xfffe}) (async)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x2, 0xc, 0xfffe})
socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x6, 0x30, 0x300, 0x0, 0x10, 0x1, 0x0, @multicast2, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, @rand_addr, @broadcast}}}}}}, 0x0)
sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
unshare(0x20000400)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x4048004) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x4048004)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b30, 0x0)

1.085145189s ago: executing program 0 (id=2129):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000080)=0x9, 0x4) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) (async)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x2, 0xc, 0x0, 0x5e}, 0x20)
close(r4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async)
r9 = socket$kcm(0x10, 0x2, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)={'team0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x58, r13, 0x809, 0x70bd2d, 0x0, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x58}}, 0x40010) (async)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800)

1.081619987s ago: executing program 1 (id=2131):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0)
write(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f0000000b80)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x1, 0x9, 0xfc0, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast}, "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"}}}, 0xfce)
unshare(0x6a040000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffd000) (async)
r3 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) (async, rerun: 64)
connect$pppoe(r3, 0x0, 0x0) (async, rerun: 64)
r4 = socket(0x2, 0x80805, 0x0)
shutdown(r4, 0x1)
close(0x3) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000100))
socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0x0) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r6 = socket$inet(0x2, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

1.0169327s ago: executing program 0 (id=2132):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x40000120) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100001042bbd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="80fc010021000000140012800b00010067656e6576650000040002801400030067656e657665310000000000000000005a6eb7"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)

958.276154ms ago: executing program 1 (id=2135):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0xb, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4068, 0xfe4}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x81}, {&(0x7f0000001440)=""/137, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x2, 0x0, 0x300}, 0x4}], 0x400000000000202, 0x12000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

860.271749ms ago: executing program 1 (id=2136):
r0 = socket$kcm(0x29, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x8080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x24000014) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={<r5=>r1, 0x5, 0x0, 0x2})
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r5, 0x800442d4, &(0x7f0000000340)=0x4)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', <r8=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', <r9=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000011}, 0x24004800) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x108, r2, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1cd4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ed9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3fe92cbedce1f002}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9a7e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6dc0}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]]}, 0x108}, 0x1, 0x0, 0x0, 0x2000c001}, 0x2000c000)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000780)=0x10000, 0x4) (async, rerun: 32)
socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
r11 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r11, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000840)={<r12=>0x0, 0xe99}, &(0x7f0000000880)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000008c0)={r12, 0x6, 0x2, [0x7, 0x2]}, 0xc)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r7)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r13, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000a40)={'syzkaller1\x00', {0x2, 0x0, @private}})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000a80)) (async)
recvmmsg(r6, &(0x7f0000005d40)=[{{&(0x7f0000000ac0)=@ieee802154, 0x80, &(0x7f0000002f80)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c00)=""/253, 0xfd}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/126, 0x7e}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/202, 0xca}, {&(0x7f0000002f40)=""/44, 0x2c}], 0x8}, 0x4}, {{&(0x7f0000003000)=@nfc_llcp, 0x80, &(0x7f0000003080), 0x0, &(0x7f00000030c0)=""/155, 0x9b}, 0x7}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000003180)=""/71, 0x47}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/174, 0xae}, {&(0x7f00000042c0)=""/48, 0x30}, {&(0x7f0000004300)=""/1, 0x1}, {&(0x7f0000004340)=""/177, 0xb1}], 0x6}, 0x9}, {{&(0x7f0000004480)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000005800)=[{&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/35, 0x23}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/167, 0xa7}, {&(0x7f00000056c0)=""/12, 0xc}, {&(0x7f0000005700)=""/199, 0xc7}], 0x6}, 0x93}, {{&(0x7f0000005880)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005900)=""/190, 0xbe}, {&(0x7f00000059c0)=""/229, 0xe5}, {&(0x7f0000005ac0)=""/133, 0x85}, {&(0x7f0000005b80)=""/135, 0x87}], 0x4, &(0x7f0000005c80)=""/173, 0xad}, 0x4}], 0x5, 0x40000000, 0x0)
ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000005e80)=0x3)

630.438927ms ago: executing program 2 (id=2138):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

570.355101ms ago: executing program 2 (id=2139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}]}}}]}, 0x48}}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048040) (async)
r3 = accept4(r2, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x80, 0x80000)
sendto$inet(r3, &(0x7f0000000300)="1ec0d252b1ecaa4a250ce947b377f5733e5f7910d539b4e0757b35798ec5ce846166ece8f273023d80598856fed810d16227aca6724c5dce075e4657bdf8605f56c225e69639935cec0de84946871b8a002e652ef003ea49a25f161460a2537e7d3cf12e1058aae255fd4f073f2e18a5d3d4c175f77a8049d07d32b27e4aa23810f65645455c9a6727017f0ef1b561cc31caf0d02cdc65d628b1d792f6e285c8bfb3c1d5427b4f5cd19b2549299dd7fcc61e726dd0a9cd1dc1a3627c428170ed9e9a25d7623f0af9a6932c914ec57fc0678201b0ac0a62bd3a8f8a4e93da4e5aeb69d0fa29fd05b822ce4a036aeae13cc66c5ca9c9f402332f", 0xf9, 0x10, &(0x7f0000000400)={0x2, 0x4e24, @remote}, 0x10)

570.04094ms ago: executing program 2 (id=2140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) (async)
sendmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000080)="cb1ce2b443c55c09b23bdc46f3a2bbc68c00927012", 0x15}], 0x2, &(0x7f0000001300)=[{0x38, 0xff, 0xb9, "a3ae4e12ac08a876b7c353e142604a6aea69d07b1c8ce63374149d1563ccb64ae8f37f648cc8c2"}, {0x58, 0x117, 0x9, "8c917f6bf91031f6a797beff4bab9aa6f9d729f6c1649f5655b2eb3e86b6ff540353709f8be1b0e4bbdcfd893523de04787bb395fbe5c3cc38a71c63cba115139d9dd56f"}, {0x10, 0x108, 0x5}, {0x108, 0x3a, 0xfff, "3531a28cde02a4fcb8983293783edd53e57eaa553c41c21a713b49f102577e55bfd4e5fe9f28f6720531879f874fdd755ca8435c83e93e1db1b9297fd72c7166e73d8c824682e314e385d1e97c360656bda785aa76b120c8adfa4678a0a313710d78a446c3ed19eddac5c62b1e3208b9425d963941adc872fab87a9fb35e62d634750d40a871a0d25f8302d3e46cb6fee48b204f489ca0391be00d7c5f2bb46bc078b09930be54e1211d0be8f60ad54f2d1b0ad0334d4f14ccfb1c10474409cab25999fe2bbdc29f8d0e3f7605156a91a6d8acbfa5342ee97a874c86a4b20f6b59e6e79682b48af9c44856af1f1f7baa995e5b51f7ea"}, {0x50, 0x107, 0x3, "30c403fc9fa7b4e400b91e3a598530dda05dce6a2570574cabacf2ec4e88cec03b9c7c076595ebcb53be3c1fa46657565f877bbb770f19519237"}], 0x1f8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000200)="55e2743b5af967cdfd29e2cca0322f4e2d56a755eca671b66b638c955a1e6576f8dcc96880dc4bac2a2f5c3acfb2fb7cb7779dde4d9c0e7feca8e58b233dc4994876b18a94728de08f6a6389836dd65283b5", 0x52}, {&(0x7f0000001500)="b2e833d32a19c4d169c3825cd9d97c10e2767e3f65dfe7c936dc5b64ddf61b5e935cf952dc99c69cdb2ead7be2723010fea4cd560e48c7e9525bc2c0a2d90bd44b95b6b62dc9694cd3062217aa0e05a906076e7ffbb94f25ce259c327f7634ef858d0a9a44438f1fe3c5d66b95847cc59f07212229d9ed7fbbb355d4d6bdda2595681984570fd026970ce6dcf46121dac4fc39fd8f68cfead8bdf19f3f15f7bafa91d08f1ff6e43b0731f86c73251891e7906e6afa6bb4f8f358a7dffec1646928735cfd", 0xc4}, {&(0x7f0000001600)="02d1d5bc2c2ffba30e84d8052faa40df7bd9c8bbb33a9fe4dabb263dae81adb2faa397fa1bdf6e10e37f24ad063c865ae7cc80211c31b5cf3c4e9b0cb8bbdcc970c0fa59990598129d4984d2af0a306f8178ef6ef80efaa12a0b29ef1fe27851f442da231e52f7e3f52359871884e45208fa7167ee28abe52bc8794481b5711efc5f609b6a3243ac6b574d699b22e4c84dd7f4556ab34a48218a1484cdaaaf240f9d7ebfccf0d457550d907601a51a93bd3aed9509b9e59948c0bc18696633a3a0d855b28092985c6833d5df1f9ac1a076fe44cb8c11234b9c", 0xd9}, {&(0x7f0000001700)="deaf9fd328d0c0547354ca0ebc035140f0ae9ba17d9a6383f056b95927a3d8c3a1c0bb281da12e886be2fa610b1e0d73151b43215f32af751afb9a201466d183b121968f67499904582f410479c58779fbeba0521851faf682969be51ffdd0b6e585686aedb11fd503906d10c8a41b99369b887dfca00e27af405b85b90f00ef353b", 0x82}, {&(0x7f00000017c0)="e7efe74ac2777a7d76b8531f7b1d4803f0be919bbb31447f03a24630fd100890cd93badea0b33f57b8a908afe53ef58bd2b1e35068ec075e548b2193b4e6b531105a512f44305b2b980853e9ad92795aecf8e39cc20b32eab207e2539b6bb76febe768787ceaf597ed8e1227b12e1cf5fb9a16555a9d6da7feea8c0de9030d747d215b759b16cd51a4d0917e97", 0x8d}, {&(0x7f0000001880)="4d6cf2d3e989b993490eeb85343eba854271cf1875d27ff92fc4faed7bad3be4d1f7025f29bd20f6743892ca24ec69b86b198b6a7b1d74e4109fce1319f08067253b39446d26fcff0a961699f2cfdc5a4a4a666aa7af2dcdaf6b3bb0513a605e4558fed4c5f5d7393c0018a3fe748a4fd25d3b57abe46a0a92152f99761b1c6456a2a221eaa65136a4b366d5cc2d17ec9aebda7109cc15c4a3b1a982b658f7d410", 0xa1}, {&(0x7f0000001940)="936fef8ef3c561c48cafaeb6862b4be9e97b8a51e2263a2cc424682e217f535f2ae65b665487273561ff86bc3510173693a6015644391f6737ed74b1e053d591246115bd103110c798cf2a7b56970548980709c5f56885aef2b150e468d38b0ec0e3375766289e3c2dbc0f611f0c39e3a841dfc724c010919fc7fbf472d87a88fe0e1b40b5472d61201f4d1439847894f8862654cc53582c8cc56368fc37a59d8ec7bad7f6937d7eb2ec1850287aaf8d0e7be3ff504b86c434944d77becd3bbd2300d6d0a5720dfb6c7957028dcec4e1cf2601f646af1534e61fd4bdfe487736f1cbf8d0dc15c6512f068365", 0xec}, {&(0x7f0000001a40)="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", 0xfa}, {&(0x7f0000000280)="d78ab2f35366b00870aa28e042b06ea8a1379f68f85fed2badd3b7a122537990b44dfc15213abd9a7dcf0be8684b808c02f2bbb73730dd7493c130fa71d7587e", 0x40}, {&(0x7f0000001b40)="8670af79c7", 0x5}], 0xa, &(0x7f0000001c40)=[{0x1010, 0x10a, 0xfffffffe, "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"}, {0xa0, 0x29, 0x9, "999e4edba96f3d5f0c2a4fee804da4d2d1e6f2f4e5afcec3cd0375d96b120aa34535ef5b191ecb6e98a37d526e41c34a800ac4abc047a6155763e20be0390f850eb3d80fa0fce07f157bd6855b6c7dc7b8e6c3a7ac86cd2305302eaa6cb8da3e960a6731c7fb5042ca63d8ab5302824351c787e92923f059dbf51c01e5a82ae9c89eeb280d47353d39c73ae9ec37"}, {0x40, 0x118, 0x2, "90a870a18e33100ad7b91ebbf4f98443711aacc2ba93acdeae5d1866e4950cecee2c17228a0a5c7be746"}, {0x58, 0x10f, 0xfffffffb, "db3d0f372f742f5915e692584bf43620c0b8989a260b6b5749bd9be838c5ea330750f188884566bb7d337774ba1b229b67d63cbae2c390f24a7eeb1798be1e52a04912c9db2664"}], 0x1148}}], 0x2, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) (async, rerun: 64)
sendto(r1, &(0x7f0000002e40)="58f459afca29f202fa013a695ce8de3ff3ee172e159d8597befe27c19a552d3fbdaac2b2b793581d2fd25213e8f089ebaf69af4ffb81659d3bbf7f96becbf193aba1186ea8d0562a7d5216428d69944b51f596c0839cd56f0295aa39359ff3aa7029d2dce422b1bcd384af069305caaf4240f0c84272fed240cfd57f0ed970c57d70b9abb7656650c7ef70", 0x8b, 0x0, 0x0, 0x0) (rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x4080)

520.341258ms ago: executing program 2 (id=2141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x40000000, &(0x7f0000000280)="1a00000002b81700", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0x8}}}, 0x24}}, 0x20004001)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x304}, "9aec749d9f202ede", "2312b0776e6c280b1b15a245bb4fd02d70cad768e7a986697628781e1eda5b1e", "a8ed76aa", "323b4f50aba2c5a3"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000ff777f6900850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000240)={r8})

519.71336ms ago: executing program 2 (id=2142):
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_proto_private(r0, 0x8b2a, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="b47891392000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='page_pool_state_release\x00', r2}, 0x18)
socketpair(0x1f, 0x1, 0x2, &(0x7f00000001c0))
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r3, 0x24, 0x0, 0xffff, &(0x7f0000000500)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xff80, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000bfa100000000000007010000f8ffffffb702000008000000b703000000000074516397008ca4c5d7a85c0600000095009ada8fb76acb4619d9c159a6917f000000000000000000000000000000000000af9ac5963034e726e1f38f81ee097f56711141ee54987b03e6b274ec266db44477c48b0617b304033d9e872825d67c95ce73f3e4042a74b86e4aff8af2ec960f27e839c1f3b25225de352cea9a3c27a47a324e5b8f85a7743ba1992f462fb1b77915783781e064e5eb4fe903b5bdff3e9f7c985e82137211ece9"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$can_raw(0x1d, 0x3, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0)

459.396248ms ago: executing program 0 (id=2143):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)}], 0x1}}], 0x2, 0x24000045) (async)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64)
r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feff", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138a"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)={0x14c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="e1f9a74c15cdc5a98c69da50bd0122be561a280f43281e66a65d003ba1a29a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xec, 0x51, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x14, 0x4, "147a3a26423b009abbcc91ca59fae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}]}, 0x14c}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000580)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void}, 0x26)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async)
syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000500)=ANY=[], 0x28)

399.246759ms ago: executing program 0 (id=2144):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000400))
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x41}, 0xb99, 0x2, 0xff, 0x1, 0x5}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r8 = socket(0x1, 0x803, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x10)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r10, 0x8b32, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)={<r11=>0x0, 0xed}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000540)={r11, @in6={{0xa, 0x4e21, 0x3, @empty}}}, &(0x7f0000000600)=0x84)

398.037919ms ago: executing program 2 (id=2145):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x1}, {0x0, 0x2}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0134014010ff"})

0s ago: executing program 1 (id=2146):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x44, 0x30, 0xb, 0xfffffffd, 0x2, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7, 0xf5}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x10000080) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c001500", @ANYRESOCT=r1], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast})

kernel console output (not intermixed with test programs):

 an invalid length.
[   58.817930][ T6755] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.831121][ T6755] bond2: (slave bridge2): making interface the new active one
[   58.837606][ T6755] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   58.857188][ T6755] macvlan2: entered promiscuous mode
[   58.859004][ T6755] macvlan2: entered allmulticast mode
[   58.862582][ T6755] bond2: entered promiscuous mode
[   58.864559][ T6755] bridge2: entered promiscuous mode
[   58.867836][ T6755] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   58.871760][ T6755] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   58.877433][ T6755] bond2: left promiscuous mode
[   58.879035][ T6755] bridge2: left promiscuous mode
[   58.899402][ T6761] macsec1: entered promiscuous mode
[   58.928064][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'.
[   58.931040][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   59.008318][ T6771] vlan2: entered promiscuous mode
[   59.010077][ T6771] vlan2: entered allmulticast mode
[   59.011827][ T6771] hsr_slave_1: entered allmulticast mode
[   59.179997][ T6790] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   59.197880][ T6793] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   59.224167][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.307052][ T6808] syz.0.216 uses old SIOCAX25GETINFO
[   59.309669][ T6808] dummy0: entered allmulticast mode
[   59.557522][ T6841] @: renamed from bond_slave_0
[   59.603425][ T6848] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.799768][ T6866] validate_nla: 2 callbacks suppressed
[   59.799778][ T6866] netlink: 'syz.1.230': attribute type 15 has an invalid length.
[   59.808720][ T5885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.808797][ T6866] netlink: 'syz.1.230': attribute type 15 has an invalid length.
[   59.811734][ T5885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.850054][ T5885] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.852951][ T5885] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.974578][ T6879] syzkaller0: entered promiscuous mode
[   59.976443][ T6879] syzkaller0: entered allmulticast mode
[   60.845832][ T6926] netlink: 'syz.2.245': attribute type 2 has an invalid length.
[   60.904874][ T6929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.907584][ T6929] syzkaller0: entered promiscuous mode
[   60.909444][ T6929] syzkaller0: entered allmulticast mode
[   60.924984][ T6929] tipc: Resetting bearer <eth:syzkaller0>
[   60.927835][ T6928] tipc: Resetting bearer <eth:syzkaller0>
[   60.934006][ T6928] tipc: Disabling bearer <eth:syzkaller0>
[   61.019209][ T6933] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   61.022062][ T6933] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   61.190304][ T6942] macsec2: entered promiscuous mode
[   61.195670][ T6942] macsec2: entered allmulticast mode
[   61.263233][ T6944] 0: renamed from hsr0
[   61.267726][ T6944] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.271077][ T6944] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.274413][ T6944] 0: entered allmulticast mode
[   61.276137][ T6944] hsr_slave_0: entered allmulticast mode
[   61.278214][ T6944] hsr_slave_1: entered allmulticast mode
[   61.280921][ T6944] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   61.598531][ T6969] vlan3: entered promiscuous mode
[   61.600306][ T6969] bridge0: entered promiscuous mode
[   61.807848][ T6990] bridge_slave_0: left allmulticast mode
[   61.809806][ T6990] bridge_slave_0: left promiscuous mode
[   61.811768][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.837809][ T6990] bridge_slave_1: left allmulticast mode
[   61.839747][ T6990] bridge_slave_1: left promiscuous mode
[   61.845219][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.852325][ T6990] bond0: (slave 1@): Releasing backup interface
[   61.862424][ T6990] bond0: (slave bond_slave_1): Releasing backup interface
[   61.896137][ T6990] team0: Port device team_slave_0 removed
[   61.908296][ T6990] team0: Port device team_slave_1 removed
[   61.910615][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.913199][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.917470][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.923329][ T6990] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.983437][ T6990] netlink: 'syz.2.258': attribute type 10 has an invalid length.
[   61.992904][ T6990] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   62.031415][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.035429][ T6990] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.053914][ T7001] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   62.058151][ T7001] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   62.705267][ T7059] bond2: (slave bridge2): Releasing active interface
[   62.714637][ T7065] netlink: 'syz.1.270': attribute type 10 has an invalid length.
[   62.749954][ T7070] __nla_validate_parse: 18 callbacks suppressed
[   62.749965][ T7070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'.
[   62.769458][ T7059] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   62.769697][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.272'.
[   62.772653][ T7059] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   62.853813][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.275'.
[   62.885457][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'.
[   63.045950][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.282'.
[   63.116403][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'.
[   63.229534][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   63.280594][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.290'.
[   63.310362][ T7152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.313613][ T7152] syzkaller0: entered promiscuous mode
[   63.315521][ T7152] syzkaller0: entered allmulticast mode
[   63.329136][ T7152] tipc: Resetting bearer <eth:syzkaller0>
[   63.332050][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[   63.336075][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[   63.345868][ T7151] tipc: Disabling bearer <eth:syzkaller0>
[   63.452581][ T7165] vlan0: entered promiscuous mode
[   63.540793][ T7177] netlink: 666 bytes leftover after parsing attributes in process `syz.1.297'.
[   63.545614][ T7177] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   63.764900][ T7195] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[   64.163581][ T7224] syzkaller1: entered promiscuous mode
[   64.170217][ T7224] syzkaller1: entered allmulticast mode
[   64.288984][ T7231] bridge_slave_0: left allmulticast mode
[   64.290933][ T7231] bridge_slave_0: left promiscuous mode
[   64.292966][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.298294][ T7231] bridge_slave_1: left allmulticast mode
[   64.300308][ T7231] bridge_slave_1: left promiscuous mode
[   64.302338][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.307390][ T7231] team0: Port device team_slave_0 removed
[   64.310656][ T7231] team0: Port device team_slave_1 removed
[   64.312828][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.315681][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.319730][ T7231] netlink: 'syz.0.311': attribute type 10 has an invalid length.
[   64.347950][ T7231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   64.351205][ T7231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   64.833276][ T7247] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   64.853258][ T7247] bond0: (slave wlan1): Releasing backup interface
[   64.898847][ T7247] netlink: 'syz.2.314': attribute type 10 has an invalid length.
[   64.901468][ T7247] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   64.910201][ T7247] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   65.009567][ T7255] netlink: 'syz.1.315': attribute type 16 has an invalid length.
[   65.102749][ T7257] netlink: 'syz.2.316': attribute type 5 has an invalid length.
[   65.225278][ T7264] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   65.420438][ T7273] netlink: 'syz.0.321': attribute type 7 has an invalid length.
[   65.666976][ T7280] netlink: 'syz.0.323': attribute type 1 has an invalid length.
[   65.669646][ T7280] nbd: error processing sock list
[   65.672678][ T7280] block nbd0: shutting down sockets
[   65.709682][ T7285] nbd: must specify a size in bytes for the device
[   66.364288][ T7341] bridge0: port 1(erspan0) entered blocking state
[   66.370423][ T7341] bridge0: port 1(erspan0) entered disabled state
[   66.372613][ T7341] erspan0: entered allmulticast mode
[   66.375047][ T7341] erspan0: entered promiscuous mode
[   66.397672][ T7341] erspan0: left allmulticast mode
[   66.399409][ T7341] erspan0: left promiscuous mode
[   66.401141][ T7341] bridge0: port 1(erspan0) entered disabled state
[   66.444928][ T7348] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   66.722546][ T7366] openvswitch: netlink: EtherType 0 is less than min 600
[   66.725526][ T7366] IPVS: set_ctl: invalid protocol: 60 172.20.20.17:20004
[   66.725785][ T7377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.733559][ T7377] syzkaller0: entered promiscuous mode
[   66.735485][ T7377] syzkaller0: entered allmulticast mode
[   66.744633][ T7377] tipc: Resetting bearer <eth:syzkaller0>
[   66.748055][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[   66.755564][ T7376] tipc: Disabling bearer <eth:syzkaller0>
[   67.392727][ T7419] netlink: 'syz.2.356': attribute type 5 has an invalid length.
[   67.398931][ T7419] geneve2: entered promiscuous mode
[   67.400785][ T7419] geneve2: entered allmulticast mode
[   67.404243][ T5885] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   67.416907][ T5885] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   67.419735][ T5885] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   67.422622][ T5885] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   67.535968][ T7439] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   67.776415][ T7452] __nla_validate_parse: 18 callbacks suppressed
[   67.776427][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   67.781761][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   67.787021][ T7452] netlink: 92 bytes leftover after parsing attributes in process `syz.1.363'.
[   68.458577][ T7464] netlink: 248 bytes leftover after parsing attributes in process `syz.0.366'.
[   68.556224][ T7451] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   68.674138][ T7486] geneve2: entered promiscuous mode
[   68.676856][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   68.680751][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   68.684236][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   68.688529][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   69.340275][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.378'.
[   69.785240][ T5851] Bluetooth: hci0: command 0x0401 tx timeout
[   69.970408][ T7576] bond0: (slave wlan1): Releasing backup interface
[   69.973571][ T7576] bond0: Destroying bond
[   69.987894][ T7576] bond0 (unregistering): Released all slaves
[   70.094601][ T7582] ip6_vti0: entered promiscuous mode
[   70.146150][ T7581] ip6_vti0: left promiscuous mode
[   70.389109][ T7624] sctp: [Deprecated]: syz.0.395 (pid 7624) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.389109][ T7624] Use struct sctp_sack_info instead
[   70.397427][ T7623] bridge0: port 1(erspan0) entered blocking state
[   70.399529][ T7623] bridge0: port 1(erspan0) entered disabled state
[   70.401687][ T7623] erspan0: entered allmulticast mode
[   70.407003][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'.
[   70.416730][ T7623] erspan0: entered promiscuous mode
[   70.419678][ T7623] erspan0: left allmulticast mode
[   70.423302][ T7623] erspan0: left promiscuous mode
[   70.425070][ T7623] bridge0: port 1(erspan0) entered disabled state
[   70.557731][ T7620] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[   70.594528][ T7620] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   70.599422][ T7620] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   70.758504][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   70.761341][ T7645] netlink: 'syz.1.401': attribute type 5 has an invalid length.
[   70.763849][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'.
[   70.772432][ T7645] geneve3: entered promiscuous mode
[   70.774349][ T7645] geneve3: entered allmulticast mode
[   70.778591][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   70.782943][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   70.785875][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   70.793835][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   70.900240][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.903119][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.000231][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'.
[   71.365071][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[   71.479199][ T7704] netlink: 'syz.1.413': attribute type 1 has an invalid length.
[   71.520968][ T7704] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   71.651204][ T7711] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   71.815871][ T7727] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[   72.008788][ T7729] netlink: 'syz.0.421': attribute type 6 has an invalid length.
[   72.011899][ T7729] netlink: 'syz.0.421': attribute type 6 has an invalid length.
[   72.179643][ T7733] netlink: 'syz.0.422': attribute type 10 has an invalid length.
[   72.269727][ T7746] netlink: 'syz.0.425': attribute type 7 has an invalid length.
[   72.418160][ T7764] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20000
[   72.518249][ T7773] sctp: [Deprecated]: syz.2.432 (pid 7773) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.518249][ T7773] Use struct sctp_sack_info instead
[   73.434632][ T7801] bridge5: entered allmulticast mode
[   73.465396][ T7791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.484842][ T7801] sctp: [Deprecated]: syz.1.438 (pid 7801) Use of int in maxseg socket option.
[   73.484842][ T7801] Use struct sctp_assoc_value instead
[   73.558039][ T7791] syz.2.436 (7791) used greatest stack depth: 19832 bytes left
[   73.592295][ T7816] netlink: 'syz.1.443': attribute type 3 has an invalid length.
[   73.592531][ T7817] __nla_validate_parse: 9 callbacks suppressed
[   73.592540][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'.
[   73.721001][ T7841] bridge0: port 1(erspan0) entered blocking state
[   73.723923][ T7841] bridge0: port 1(erspan0) entered disabled state
[   73.726233][ T7841] erspan0: entered allmulticast mode
[   73.730307][ T7841] erspan0: entered promiscuous mode
[   73.741733][ T7841] erspan0: left allmulticast mode
[   73.743474][ T7841] erspan0: left promiscuous mode
[   73.745233][ T7841] bridge0: port 1(erspan0) entered disabled state
[   73.745556][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'.
[   73.856926][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[   74.063890][ T7866] veth5: entered promiscuous mode
[   74.078338][ T7866] bond0: (slave veth5): Enslaving as a backup interface with a down link
[   74.278360][ T7912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.464'.
[   74.278998][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'.
[   74.351047][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[   74.444628][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   74.793851][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'.
[   74.915582][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'.
[   74.944492][ T7994] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.948827][ T7994] team0: Port device bond3 added
[   74.973247][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[   75.083676][ T1279] IPVS: starting estimator thread 0...
[   75.181207][ T8008] IPVS: using max 79 ests per chain, 189600 per kthread
[   75.266390][ T8025] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   75.641739][ T8063] bond0: (slave veth5): Releasing backup interface
[   75.673630][ T8068] C: renamed from team_slave_0
[   75.677874][ T8068] validate_nla: 7 callbacks suppressed
[   75.677883][ T8068] netlink: 'syz.0.498': attribute type 3 has an invalid length.
[   75.683027][ T8068] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   75.713497][ T8063] netlink: 'syz.2.500': attribute type 10 has an invalid length.
[   75.720708][ T8063] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   75.723798][ T8063] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   75.980637][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.019397][ T8100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.554971][ T8119] bridge0: port 1(erspan0) entered blocking state
[   76.560865][ T8119] bridge0: port 1(erspan0) entered disabled state
[   76.563607][ T8119] erspan0: entered allmulticast mode
[   76.566209][ T8119] erspan0: entered promiscuous mode
[   76.569428][ T8123] bridge0: port 1(erspan0) entered blocking state
[   76.571678][ T8123] bridge0: port 1(erspan0) entered disabled state
[   76.573804][ T8123] erspan0: entered allmulticast mode
[   76.576266][ T8123] erspan0: entered promiscuous mode
[   76.578972][ T8119] erspan0: left allmulticast mode
[   76.581967][ T8119] erspan0: left promiscuous mode
[   76.588096][ T8119] bridge0: port 1(erspan0) entered disabled state
[   76.591663][ T8123] erspan0: left allmulticast mode
[   76.593375][ T8123] erspan0: left promiscuous mode
[   76.595126][ T8123] bridge0: port 1(erspan0) entered disabled state
[   76.703903][ T8136] netlink: 'syz.1.513': attribute type 13 has an invalid length.
[   76.713027][ T8136] netlink: 'syz.1.513': attribute type 17 has an invalid length.
[   76.748376][ T8136] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.754571][ T8136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.891063][ T8152] netlink: 'syz.1.518': attribute type 11 has an invalid length.
[   77.130356][ T8168] netlink: 'syz.1.522': attribute type 29 has an invalid length.
[   77.133394][ T8168] netlink: 'syz.1.522': attribute type 29 has an invalid length.
[   77.338156][ T8182] netlink: 'syz.1.525': attribute type 1 has an invalid length.
[   78.085460][ T8234] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[   78.099819][ T8234] bond1: entered promiscuous mode
[   78.101634][ T8234] bond1: entered allmulticast mode
[   78.117702][ T8234] bridge5: the hash_elasticity option has been deprecated and is always 16
[   78.280343][ T8246] netlink: 'syz.1.542': attribute type 5 has an invalid length.
[   78.289341][ T8246] vlan3: entered promiscuous mode
[   78.291124][ T8246] vlan3: entered allmulticast mode
[   78.292760][ T8246] bridge0: entered allmulticast mode
[   78.443729][ T8268] bridge0: port 1(erspan0) entered blocking state
[   78.445980][ T8268] bridge0: port 1(erspan0) entered disabled state
[   78.451532][ T8268] erspan0: entered allmulticast mode
[   78.454051][ T8268] erspan0: entered promiscuous mode
[   78.457365][ T8268] erspan0: left allmulticast mode
[   78.459078][ T8268] erspan0: left promiscuous mode
[   78.460852][ T8268] bridge0: port 1(erspan0) entered disabled state
[   78.475133][ T8268] chnl_net:caif_netlink_parms(): no params data found
[   78.584051][ T8275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.599602][ T8275] __nla_validate_parse: 20 callbacks suppressed
[   78.599612][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[   78.681495][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   78.684411][ T8287] netlink: 80 bytes leftover after parsing attributes in process `syz.2.551'.
[   78.823420][ T8315] sctp: [Deprecated]: syz.0.554 (pid 8315) Use of int in max_burst socket option.
[   78.823420][ T8315] Use struct sctp_assoc_value instead
[   78.915217][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'.
[   78.958997][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'.
[   78.984668][ T8340] syzkaller1: entered promiscuous mode
[   78.987199][ T8340] syzkaller1: entered allmulticast mode
[   79.085680][ T8350] bridge0: port 1(erspan0) entered blocking state
[   79.089766][ T8350] bridge0: port 1(erspan0) entered disabled state
[   79.092129][ T8350] erspan0: entered allmulticast mode
[   79.095432][ T8350] erspan0: entered promiscuous mode
[   79.098333][ T8350] bridge0: port 1(erspan0) entered blocking state
[   79.100553][ T8350] bridge0: port 1(erspan0) entered forwarding state
[   79.106594][ T8350] erspan0: left allmulticast mode
[   79.108389][ T8350] erspan0: left promiscuous mode
[   79.110232][ T8350] bridge0: port 1(erspan0) entered disabled state
[   79.131798][ T8352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'.
[   79.291377][ T8362] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.567'.
[   79.294851][ T8361] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.567'.
[   79.314612][ T8362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.318544][ T8362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.352573][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'.
[   79.355694][ T8361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.567'.
[   79.362542][ T8361] geneve3: entered promiscuous mode
[   79.364433][ T8361] geneve3: entered allmulticast mode
[   79.379228][ T8362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.382638][ T8362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.448157][ T8362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.451636][ T8362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.504582][ T8362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.509180][ T8362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   79.584233][ T8364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.587329][ T8364] syzkaller0: entered promiscuous mode
[   79.589333][ T8364] syzkaller0: entered allmulticast mode
[   79.600132][ T8364] tipc: Resetting bearer <eth:syzkaller0>
[   79.610958][ T5859] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   79.613829][ T5859] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   79.617888][ T8363] tipc: Resetting bearer <eth:syzkaller0>
[   79.626141][ T8363] tipc: Disabling bearer <eth:syzkaller0>
[   79.637951][ T5877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   79.641020][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   79.647661][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   79.650462][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   79.659179][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   79.661993][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   79.715218][ T8370] bridge0: port 1(erspan0) entered blocking state
[   79.720724][ T8370] bridge0: port 1(erspan0) entered disabled state
[   79.723126][ T8370] erspan0: entered allmulticast mode
[   79.725752][ T8370] erspan0: entered promiscuous mode
[   79.728859][ T8370] erspan0: left allmulticast mode
[   79.730600][ T8370] erspan0: left promiscuous mode
[   79.732422][ T8370] bridge0: port 1(erspan0) entered disabled state
[   79.886300][ T8388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.890530][ T8388] syzkaller0: entered promiscuous mode
[   79.892387][ T8388] syzkaller0: entered allmulticast mode
[   79.909271][ T8390] bridge0: port 1(erspan0) entered blocking state
[   79.911518][ T8390] bridge0: port 1(erspan0) entered disabled state
[   79.913679][ T8390] erspan0: entered allmulticast mode
[   79.916291][ T8390] erspan0: entered promiscuous mode
[   79.921457][ T8390] erspan0: left allmulticast mode
[   79.924072][ T8390] erspan0: left promiscuous mode
[   79.925938][ T8390] bridge0: port 1(erspan0) entered disabled state
[   80.019563][ T8388] tipc: Resetting bearer <eth:syzkaller0>
[   80.022915][ T8387] tipc: Resetting bearer <eth:syzkaller0>
[   80.033701][ T8387] tipc: Disabling bearer <eth:syzkaller0>
[   80.214341][ T8408] IPv6: Can't replace route, no match found
[   80.598721][ T8443] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   80.802243][ T8459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.845548][ T8462] tipc: Disabling bearer <eth:syzkaller0>
[   80.949175][ T8471] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   81.016029][ T8478] validate_nla: 5 callbacks suppressed
[   81.016040][ T8478] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[   81.114006][ T8488] vlan2: entered promiscuous mode
[   81.115902][ T8488] vlan2: entered allmulticast mode
[   81.244124][ T8492] bridge0: port 1(erspan0) entered blocking state
[   81.246442][ T8492] bridge0: port 1(erspan0) entered disabled state
[   81.249125][ T8492] erspan0: entered allmulticast mode
[   81.251747][ T8492] erspan0: entered promiscuous mode
[   81.254063][ T8493] erspan0: left allmulticast mode
[   81.255750][ T8493] erspan0: left promiscuous mode
[   81.259392][ T8493] bridge0: port 1(erspan0) entered disabled state
[   81.336378][ T8499] geneve3: entered promiscuous mode
[   81.340741][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.344306][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.351043][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.354585][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.440596][ T8509] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[   81.469113][ T8509] bond4: (slave bridge6): making interface the new active one
[   81.471905][ T8509] bond4: (slave bridge6): Enslaving as an active interface with an up link
[   81.474900][ T8512] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.485336][ T8512] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.489260][ T8512] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.520884][ T8515] bridge0: port 1(erspan0) entered blocking state
[   81.523198][ T8515] bridge0: port 1(erspan0) entered disabled state
[   81.525498][ T8515] erspan0: entered allmulticast mode
[   81.529196][ T8515] erspan0: entered promiscuous mode
[   81.531476][ T8515] bridge0: port 1(erspan0) entered blocking state
[   81.533643][ T8515] bridge0: port 1(erspan0) entered forwarding state
[   81.538611][ T8515] erspan0: left allmulticast mode
[   81.540425][ T8515] erspan0: left promiscuous mode
[   81.542200][ T8515] bridge0: port 1(erspan0) entered disabled state
[   81.757727][ T8539] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   81.760009][ T8539] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   81.776405][ T5859] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.781348][ T5859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.784474][ T5859] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   81.791060][ T5859] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.794142][ T5859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.797794][ T5859] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   81.800815][ T5859] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.804102][ T5859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.807898][ T5859] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   81.811515][ T5859] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   81.815242][ T5859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.819134][ T5859] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   82.541845][ T8547] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   82.545277][ T8547] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   82.888900][ T8564] netlink: 'syz.0.618': attribute type 13 has an invalid length.
[   82.891593][ T8564] netlink: 'syz.0.618': attribute type 17 has an invalid length.
[   82.898425][ T8564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   83.019126][ T8580] netlink: 'syz.0.622': attribute type 8 has an invalid length.
[   83.073494][ T8580] netlink: zone id is out of range
[   83.078183][ T8580] netlink: zone id is out of range
[   83.080527][ T8580] netlink: zone id is out of range
[   83.084390][ T8580] netlink: zone id is out of range
[   83.088273][ T8580] netlink: zone id is out of range
[   83.101765][ T8580] netlink: zone id is out of range
[   83.103492][ T8580] netlink: zone id is out of range
[   83.105178][ T8580] netlink: zone id is out of range
[   83.205892][ T8585] gretap0: entered promiscuous mode
[   83.209877][ T8585] 0{X: renamed from gretap0
[   83.212920][ T8585] 0{X: left promiscuous mode
[   83.214775][ T8585] 0{X: entered allmulticast mode
[   84.013160][ T8589] bridge0: port 1(erspan0) entered blocking state
[   84.015789][ T8589] bridge0: port 1(erspan0) entered disabled state
[   84.021414][ T8589] erspan0: entered allmulticast mode
[   84.024072][ T8589] erspan0: entered promiscuous mode
[   84.030296][ T8594] __nla_validate_parse: 10 callbacks suppressed
[   84.030304][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[   84.035340][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'.
[   84.288796][ T8634] bridge0: port 1(erspan0) entered blocking state
[   84.291074][ T8634] bridge0: port 1(erspan0) entered disabled state
[   84.293459][ T8634] erspan0: entered allmulticast mode
[   84.296362][ T8634] erspan0: entered promiscuous mode
[   84.303060][ T8634] bridge0: port 1(erspan0) entered blocking state
[   84.305238][ T8634] bridge0: port 1(erspan0) entered forwarding state
[   84.310285][ T8634] erspan0: left allmulticast mode
[   84.311989][ T8634] erspan0: left promiscuous mode
[   84.313698][ T8634] bridge0: port 1(erspan0) entered disabled state
[   84.326144][ T8627] erspan0: left allmulticast mode
[   84.332247][ T8627] erspan0: left promiscuous mode
[   84.334049][ T8627] bridge0: port 1(erspan0) entered disabled state
[   84.347028][ T8627] netlink: 'syz.0.633': attribute type 10 has an invalid length.
[   84.391082][ T8627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.399117][ T8627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.429837][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.636'.
[   84.496130][ T8652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.638'.
[   84.528444][ T8652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.638'.
[   84.595621][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'.
[   84.599752][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.643'.
[   84.603972][ T8672] sctp: [Deprecated]: syz.2.643 (pid 8672) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.603972][ T8672] Use struct sctp_sack_info instead
[   84.943228][ T8717] pim6reg1: entered promiscuous mode
[   84.945619][ T8717] pim6reg1: entered allmulticast mode
[   85.018722][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'.
[   85.021860][ T8727] netlink: 'syz.1.658': attribute type 5 has an invalid length.
[   85.024978][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.658'.
[   85.065733][ T8733] pim6reg1: entered allmulticast mode
[   85.112960][ T8737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.661'.
[   85.186790][ T8745] netlink: 'syz.1.664': attribute type 2 has an invalid length.
[   85.484829][ T8775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.490568][ T8775] syzkaller0: entered promiscuous mode
[   85.492330][ T8775] syzkaller0: entered allmulticast mode
[   85.510530][ T8775] tipc: Resetting bearer <eth:syzkaller0>
[   86.163779][ T8784] netlink: 'syz.2.673': attribute type 1 has an invalid length.
[   86.167000][ T8784] netlink: 'syz.2.673': attribute type 1 has an invalid length.
[   86.343180][ T8807] syzkaller0: entered promiscuous mode
[   86.345012][ T8807] syzkaller0: entered allmulticast mode
[   86.487795][ T5878] tipc: Node number set to 344551854
[   86.809818][ T8864] netlink: 'syz.1.694': attribute type 7 has an invalid length.
[   86.813055][ T8864] netlink: 'syz.1.694': attribute type 8 has an invalid length.
[   86.890476][ T8871] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.902155][ T8873] netlink: 'syz.1.697': attribute type 4 has an invalid length.
[   86.907572][ T8873] netlink: 'syz.1.697': attribute type 4 has an invalid length.
[   87.253363][ T8919] netlink: 'syz.1.710': attribute type 322 has an invalid length.
[   88.185249][ T8984] macsec2: entered allmulticast mode
[   88.187449][ T8984] syz_tun: entered allmulticast mode
[   88.190760][ T8984] syz_tun: left allmulticast mode
[   88.395841][ T9001] netlink: 'syz.1.732': attribute type 1 has an invalid length.
[   88.409136][ T9001] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.526411][ T9005] netlink: 'syz.1.732': attribute type 11 has an invalid length.
[   88.538811][ T9001] bond5: (slave veth5): Enslaving as an active interface with a down link
[   88.665749][ T9005] vlan4: entered allmulticast mode
[   88.668836][ T9005] macvtap0: entered allmulticast mode
[   88.674170][ T9005] bond5: (slave vlan4): Opening slave failed
[   88.728595][ T9000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.209246][ T9028] __nla_validate_parse: 28 callbacks suppressed
[   89.209255][ T9028] netlink: 52 bytes leftover after parsing attributes in process `syz.0.739'.
[   89.311718][ T9043] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[   89.314396][ T9043] netlink: 228 bytes leftover after parsing attributes in process `syz.1.745'.
[   89.322115][ T9043] NCSI netlink: No device for ifindex 0
[   89.353511][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.744'.
[   89.370063][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'.
[   89.401388][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'.
[   89.517450][ T9068] netlink: 'syz.0.751': attribute type 1 has an invalid length.
[   89.564978][ T9068] net_ratelimit: 100 callbacks suppressed
[   89.564987][ T9068] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   89.775233][    T9] hid-generic 0005:15C2:0003.0001: item fetching failed at offset 0/1
[   89.790464][    T9] hid-generic 0005:15C2:0003.0001: probe with driver hid-generic failed with error -22
[   90.045801][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'.
[   90.186658][ T9140] bridge0: port 1(erspan0) entered blocking state
[   90.188744][ T9140] bridge0: port 1(erspan0) entered disabled state
[   90.190890][ T9140] erspan0: entered allmulticast mode
[   90.197741][ T9140] erspan0: entered promiscuous mode
[   90.199981][ T9140] bridge0: port 1(erspan0) entered blocking state
[   90.202201][ T9140] bridge0: port 1(erspan0) entered forwarding state
[   90.206822][ T9142] erspan0: left allmulticast mode
[   90.212342][ T9142] erspan0: left promiscuous mode
[   90.214148][ T9142] bridge0: port 1(erspan0) entered disabled state
[   90.336567][ T9156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.766'.
[   90.433222][ T9156] bond0 (unregistering): Released all slaves
[   90.972337][ T9164] bond0 (unregistering): Released all slaves
[   91.120539][ T9175] syzkaller0: Caught tx_queue_len zero misconfig
[   91.177263][ T9178] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.221830][ T9185] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.230270][ T9185] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   91.234467][ T9185] bond1: (slave macvlan3): Enslaving as a backup interface with a down link
[   91.242268][ T9185] validate_nla: 1 callbacks suppressed
[   91.242275][ T9185] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[   91.421292][ T9195] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.651940][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[   91.655457][ T9217] netlink: 'syz.0.780': attribute type 20 has an invalid length.
[   91.659685][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'.
[   92.480592][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[   92.810988][ T9306] netlink: 'syz.0.797': attribute type 13 has an invalid length.
[   93.066191][ T9322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.077927][ T9322] syzkaller0: entered promiscuous mode
[   93.079689][ T9322] syzkaller0: entered allmulticast mode
[   93.098492][ T9322] tipc: Resetting bearer <eth:syzkaller0>
[   93.116036][ T9322] tipc: Disabling bearer <eth:syzkaller0>
[   93.354756][ T9359] 0{X: entered promiscuous mode
[   93.360009][ T9359] 0{X: left allmulticast mode
[   93.364940][ T9359] 1{X: renamed from 30{X
[   93.371358][ T9359] 1{X: left promiscuous mode
[   93.373459][ T9359] 1{X: entered allmulticast mode
[   93.376298][ T9359] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[   97.420513][ T9387] netlink: 'syz.1.818': attribute type 4 has an invalid length.
[   97.455544][  T973] IPVS: starting estimator thread 0...
[   97.546606][ T9394] IPVS: using max 78 ests per chain, 187200 per kthread
[   97.584309][ T9415] __nla_validate_parse: 7 callbacks suppressed
[   97.584317][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.825'.
[   97.589711][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[   97.592694][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.825'.
[   97.595785][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[   97.604550][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.825'.
[   97.610760][ T9410] tipc: Started in network mode
[   97.612436][ T9410] tipc: Node identity ca8ff5b7363, cluster identity 4711
[   97.614901][ T9410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.618356][ T9410] syzkaller0: entered promiscuous mode
[   97.620593][ T9410] syzkaller0: entered allmulticast mode
[   97.624788][ T9410] tipc: Resetting bearer <eth:syzkaller0>
[   97.628293][ T9409] tipc: Resetting bearer <eth:syzkaller0>
[   97.643748][ T9409] tipc: Disabling bearer <eth:syzkaller0>
[   97.695329][ T9428] netlink: 'syz.2.828': attribute type 10 has an invalid length.
[   97.759324][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'.
[   97.784714][ T5877] tipc: Left network mode
[   97.883584][ T9447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'.
[   97.888760][ T9447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.833'.
[   97.898488][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'.
[   97.955555][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'.
[   98.007372][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.015552][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.022987][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.026361][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.219009][ T9484] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   98.265348][ T9490] openvswitch: netlink: Flow key attr not present in new flow.
[   98.678494][ T9518] net veth1_virt_wifi : renamed from virt_wifi0
[   99.103593][ T9552] sctp: [Deprecated]: syz.2.852 (pid 9552) Use of int in max_burst socket option.
[   99.103593][ T9552] Use struct sctp_assoc_value instead
[   99.115973][ T9553] sctp: [Deprecated]: syz.2.852 (pid 9553) Use of int in max_burst socket option.
[   99.115973][ T9553] Use struct sctp_assoc_value instead
[   99.680477][ T9614] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   99.683583][ T9614] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   99.691597][ T9610] netlink: 'syz.1.866': attribute type 4 has an invalid length.
[   99.885200][ T9640] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  100.256636][ T5853] Bluetooth: hci0: command 0x0401 tx timeout
[  120.985932][ T9651] __nla_validate_parse: 8 callbacks suppressed
[  120.985946][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.873'.
[  121.133723][ T9671] netlink: 60 bytes leftover after parsing attributes in process `syz.2.879'.
[  121.137566][ T9671] netlink: 84 bytes leftover after parsing attributes in process `syz.2.879'.
[  121.157406][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'.
[  121.181537][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[  121.354302][ T9712] netlink: 'syz.0.891': attribute type 74 has an invalid length.
[  121.363374][ T9712] openvswitch: netlink: Missing key (keys=40, expected=80)
[  121.402039][ T9717] netlink: 'syz.1.893': attribute type 12 has an invalid length.
[  121.536042][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.897'.
[  121.644434][ T9745] pimreg: entered allmulticast mode
[  121.652275][ T9745] pimreg: left allmulticast mode
[  121.675716][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.900'.
[  121.716242][ T9754] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  121.998982][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.0.908'.
[  122.003888][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'.
[  122.320612][ T9824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.914'.
[  122.374798][ T9825] netlink: 'syz.1.914': attribute type 10 has an invalid length.
[  122.880917][ T9823] team0: Port device bond3 removed
[  122.888184][ T9823] bond4: (slave bridge6): Releasing active interface
[  122.895327][ T9823] bond5: (slave veth5): Releasing active interface
[  122.905172][ T9826] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.910109][ T9826] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.161098][ T9866] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[  123.164456][ T9869] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[  123.253274][ T9882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.257495][ T9882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.306926][ T9882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.310491][ T9882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.359755][ T9882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.363379][ T9882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.410381][ T9882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.413824][ T9882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.476765][ T9901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.485170][ T5885] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.488432][ T5885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.497380][ T5885] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.500307][ T5885] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.504268][ T9901] tipc: Resetting bearer <eth:syzkaller0>
[  123.519874][ T9900] tipc: Disabling bearer <eth:syzkaller0>
[  123.524048][ T5859] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.527951][ T5859] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.534301][ T5859] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.538314][ T5859] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.794819][ T9921] netlink: 'syz.1.937': attribute type 10 has an invalid length.
[  123.825615][ T9921] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.829078][ T9921] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.242006][ T9942] bridge0: port 1(erspan0) entered blocking state
[  124.244261][ T9942] bridge0: port 1(erspan0) entered disabled state
[  124.247545][ T9942] erspan0: entered allmulticast mode
[  124.251094][ T9942] erspan0: entered promiscuous mode
[  124.253371][ T9942] bridge0: port 1(erspan0) entered blocking state
[  124.255624][ T9942] bridge0: port 1(erspan0) entered forwarding state
[  124.260161][ T9942] erspan0: left allmulticast mode
[  124.262029][ T9942] erspan0: left promiscuous mode
[  124.263910][ T9942] bridge0: port 1(erspan0) entered disabled state
[  124.716348][ T9984] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  124.721290][ T9984] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  124.843718][ T9994] netlink: 'syz.1.953': attribute type 7 has an invalid length.
[  124.882337][T10000] bond1: (slave macvlan3): Releasing backup interface
[  124.908213][T10000] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  124.944932][T10000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.948526][T10000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.978350][T10008] netlink: 'syz.2.955': attribute type 10 has an invalid length.
[  125.291117][T10067] veth1_macvtap: left promiscuous mode
[  125.293029][T10067] macsec0: entered promiscuous mode
[  125.301429][T10067] veth1_macvtap: entered promiscuous mode
[  125.304177][T10067] macsec0: left promiscuous mode
[  125.311706][T10070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.314302][T10070] syzkaller0: entered promiscuous mode
[  125.316209][T10070] syzkaller0: entered allmulticast mode
[  125.398316][T10069] tipc: Resetting bearer <eth:syzkaller0>
[  125.411066][T10069] tipc: Disabling bearer <eth:syzkaller0>
[  125.488677][T10081] bridge0: port 1(erspan0) entered blocking state
[  125.491113][T10081] bridge0: port 1(erspan0) entered disabled state
[  125.493569][T10081] erspan0: entered allmulticast mode
[  125.496277][T10081] erspan0: entered promiscuous mode
[  125.500494][T10081] erspan0: left allmulticast mode
[  125.502289][T10081] erspan0: left promiscuous mode
[  125.504091][T10081] bridge0: port 1(erspan0) entered disabled state
[  125.632822][T10093] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  125.647468][T10093] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.674407][T10093] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.683816][T10093] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  125.688839][T10093] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  125.714998][T10098] tipc: Resetting bearer <eth:syzkaller0>
[  125.721786][ T5859] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.724658][ T5859] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.728161][ T5859] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.730989][ T5859] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.784201][ T5859] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.787465][ T5859] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.796744][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.799608][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.823660][T10093] bond0: (slave bridge8): Enslaving as an active interface with a down link
[  125.896876][T10106] syzkaller0: left promiscuous mode
[  125.898720][T10106] syzkaller0: left allmulticast mode
[  126.065501][T10127] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.082810][T10127] ipvlan2: entered allmulticast mode
[  126.084599][T10127] bond4: entered allmulticast mode
[  126.093667][T10127] bond4: (slave gretap0): making interface the new active one
[  126.096184][T10127] gretap0: entered allmulticast mode
[  126.098879][T10127] bond4: (slave gretap0): Enslaving as an active interface with an up link
[  126.229762][T10156] __nla_validate_parse: 4 callbacks suppressed
[  126.229771][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  126.271745][T10160] geneve0: entered allmulticast mode
[  126.303375][T10160] bond4: (slave gretap0): Releasing active interface
[  126.305739][T10160] gretap0: left allmulticast mode
[  126.314453][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.0.989'.
[  126.360370][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'.
[  126.364433][T10167] validate_nla: 2 callbacks suppressed
[  126.364441][T10167] netlink: 'syz.2.990': attribute type 13 has an invalid length.
[  126.468682][T10183] Bluetooth: MGMT ver 1.23
[  126.479588][T10186] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  126.940127][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'.
[  126.943224][T10212] tipc: Enabled bearer <eth:vlan0>, priority 18
[  127.394386][T10235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1006'.
[  127.426571][T10235] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  127.440580][T10235] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.450816][T10235] bond0: (slave gretap1): making interface the new active one
[  127.455226][T10235] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  127.536305][T10235] syz.2.1006 (10235) used greatest stack depth: 19344 bytes left
[  127.548081][T10238] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1007'.
[  127.572148][T10240] bridge0: port 1(erspan0) entered blocking state
[  127.574472][T10240] bridge0: port 1(erspan0) entered disabled state
[  127.577711][T10240] erspan0: entered allmulticast mode
[  127.580254][T10240] erspan0: entered promiscuous mode
[  127.582469][T10240] bridge0: port 1(erspan0) entered blocking state
[  127.584748][T10240] bridge0: port 1(erspan0) entered forwarding state
[  127.589682][T10240] erspan0: left allmulticast mode
[  127.591421][T10240] erspan0: left promiscuous mode
[  127.593220][T10240] bridge0: port 1(erspan0) entered disabled state
[  127.799372][T10257] veth0: entered promiscuous mode
[  127.804374][T10256] veth0: left promiscuous mode
[  128.024156][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  128.066737][ T1279] tipc: Node number set to 3374752010
[  128.145449][T10298] nbd: illegal input index -1
[  128.170447][T10307] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  128.220052][T10307] 8021q: adding VLAN 0 to HW filter on device bond7
[  128.224846][T10307] bond6: (slave bond7): making interface the new active one
[  128.228656][T10307] bond6: (slave bond7): Enslaving as an active interface with an up link
[  128.368937][T10334] netlink: 'syz.1.1030': attribute type 11 has an invalid length.
[  128.416196][T10325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.424498][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  128.435743][T10325] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.444546][T10325] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  128.508778][T10348] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1032'.
[  128.512197][T10341] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1032'.
[  128.604854][T10364] bridge0: port 1(erspan0) entered blocking state
[  128.609064][T10364] bridge0: port 1(erspan0) entered disabled state
[  128.611481][T10364] erspan0: entered allmulticast mode
[  128.618484][T10364] erspan0: entered promiscuous mode
[  128.621972][T10364] erspan0: left allmulticast mode
[  128.623790][T10364] erspan0: left promiscuous mode
[  128.625657][T10364] bridge0: port 1(erspan0) entered disabled state
[  128.690720][T10375] netlink: 'syz.2.1041': attribute type 10 has an invalid length.
[  128.992637][T10394] infiniband syz0: set down
[  128.995282][T10394] infiniband syz0: added ipvlan1
[  129.018791][T10394] RDS/IB: syz0: added
[  129.021096][T10394] smc: adding ib device syz0 with port count 1
[  129.023242][T10394] smc:    ib device syz0 port 1 has pnetid 
[  129.102527][T10398] IPVS: length: 8 != 446622349272
[  129.104282][T10399] IPVS: length: 8 != 446622349272
[  129.106328][T10398] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  129.112773][T10399] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  129.174436][T10403] netlink: 'syz.0.1048': attribute type 1 has an invalid length.
[  129.178474][T10403] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  130.254711][T10441] : entered promiscuous mode
[  130.419984][T10458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.460349][T10463] netlink: 'syz.1.1061': attribute type 9 has an invalid length.
[  130.944460][T10489] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  131.045163][T10489] bond0: (slave bridge8): Releasing active interface
[  131.051053][T10489] bond6: (slave bond7): Releasing backup interface
[  131.062648][T10490] netlink: 'syz.1.1066': attribute type 10 has an invalid length.
[  131.238066][T10515] __nla_validate_parse: 13 callbacks suppressed
[  131.238077][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'.
[  131.279041][T10515] netlink: 'syz.0.1072': attribute type 1 has an invalid length.
[  131.281784][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1072'.
[  131.284761][T10515] netlink: 'syz.0.1072': attribute type 2 has an invalid length.
[  131.296614][T10515] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1072'.
[  131.370547][T10526] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1073'.
[  131.375557][T10532] bridge0: port 1(erspan0) entered blocking state
[  131.379904][T10532] bridge0: port 1(erspan0) entered disabled state
[  131.382221][T10532] erspan0: entered allmulticast mode
[  131.384810][T10532] erspan0: entered promiscuous mode
[  131.397280][T10532] erspan0: left allmulticast mode
[  131.399417][T10532] erspan0: left promiscuous mode
[  131.401361][T10532] bridge0: port 1(erspan0) entered disabled state
[  131.424286][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'.
[  131.430775][T10537] chnl_net:caif_netlink_parms(): no params data found
[  131.679510][T10575] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  131.828359][T10597] validate_nla: 1 callbacks suppressed
[  131.828370][T10597] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  131.832781][T10597] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1089'.
[  131.931500][T10605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.934180][T10605] syzkaller0: entered promiscuous mode
[  131.936111][T10605] syzkaller0: entered allmulticast mode
[  131.941486][T10605] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  131.951698][T10604] tipc: Resetting bearer <eth:syzkaller0>
[  131.967108][T10604] tipc: Disabling bearer <eth:syzkaller0>
[  131.994619][T10607] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  132.034083][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'.
[  132.065207][T10615] veth1_to_bond: entered allmulticast mode
[  132.075384][T10614] veth1_to_bond: left allmulticast mode
[  132.113285][T10624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.114218][T10627] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  132.118718][T10625] syzkaller0: entered promiscuous mode
[  132.120545][T10625] syzkaller0: entered allmulticast mode
[  132.125021][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'.
[  132.142247][T10624] tipc: Resetting bearer <eth:syzkaller0>
[  132.147975][T10627] vti0: entered promiscuous mode
[  132.150628][T10623] tipc: Resetting bearer <eth:syzkaller0>
[  132.168643][T10623] tipc: Disabling bearer <eth:syzkaller0>
[  132.191725][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'.
[  132.215501][T10631] netlink: 'syz.0.1100': attribute type 1 has an invalid length.
[  132.219515][T10631] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1100'.
[  132.284343][T10644] bridge0: port 1(erspan0) entered blocking state
[  132.287896][T10644] bridge0: port 1(erspan0) entered disabled state
[  132.290221][T10644] erspan0: entered allmulticast mode
[  132.292811][T10644] erspan0: entered promiscuous mode
[  132.295778][T10644] erspan0: left allmulticast mode
[  132.298523][T10644] erspan0: left promiscuous mode
[  132.300370][T10644] bridge0: port 1(erspan0) entered disabled state
[  132.330002][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.517608][T10666] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.973464][T10697] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  133.230041][T10714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.623726][T10750] bridge0: port 1(erspan0) entered blocking state
[  133.625990][T10750] bridge0: port 1(erspan0) entered disabled state
[  133.628457][T10750] erspan0: entered allmulticast mode
[  133.631019][T10750] erspan0: entered promiscuous mode
[  133.633321][T10750] bridge0: port 1(erspan0) entered blocking state
[  133.635497][T10750] bridge0: port 1(erspan0) entered listening state
[  133.643625][T10750] erspan0: left allmulticast mode
[  133.645385][T10750] erspan0: left promiscuous mode
[  133.647325][T10750] bridge0: port 1(erspan0) entered disabled state
[  133.727371][T10756] netlink: 'syz.0.1127': attribute type 4 has an invalid length.
[  133.955598][T10785] wlan1: mtu less than device minimum
[  134.084191][T10800] netlink: 'syz.2.1138': attribute type 5 has an invalid length.
[  134.173930][T10811] netlink: 'syz.2.1141': attribute type 42 has an invalid length.
[  134.180092][T10811] 0: renamed from hsr0 (while UP)
[  134.192202][T10811] 0: entered allmulticast mode
[  134.193879][T10811] hsr_slave_0: entered allmulticast mode
[  134.195990][T10811] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  134.306204][T10824] netlink: 'syz.0.1144': attribute type 2 has an invalid length.
[  134.390376][T10835] netlink: 'syz.0.1148': attribute type 33 has an invalid length.
[  134.535643][T10850] netlink: 'syz.0.1152': attribute type 5 has an invalid length.
[  134.572849][T10853] 1{X: left allmulticast mode
[  134.574707][T10853] dummy0: left allmulticast mode
[  134.578529][T10853] 0: left allmulticast mode
[  134.580153][T10853] hsr_slave_0: left allmulticast mode
[  134.582125][T10853] geneve0: left allmulticast mode
[  134.584704][T10853] geneve3: left promiscuous mode
[  134.586862][T10853] tipc: Resetting bearer <eth:syzkaller0>
[  134.592839][T10853] ipvlan2: left allmulticast mode
[  134.594547][T10853] bond4: left allmulticast mode
[  134.600752][T10853] vti0: left promiscuous mode
[  134.605360][T10853] @: renamed from veth0_vlan
[  134.652924][T10862] syzkaller0: entered promiscuous mode
[  134.655085][T10862] syzkaller0: entered allmulticast mode
[  134.660286][T10861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.671634][T10861] tipc: Resetting bearer <eth:syzkaller0>
[  134.682250][T10861] tipc: Disabling bearer <eth:syzkaller0>
[  134.784369][T10872] bridge0: port 1(erspan0) entered blocking state
[  134.787434][T10872] bridge0: port 1(erspan0) entered disabled state
[  134.789640][T10872] erspan0: entered allmulticast mode
[  134.792165][T10872] erspan0: entered promiscuous mode
[  134.795154][T10872] erspan0: left allmulticast mode
[  134.797001][T10872] erspan0: left promiscuous mode
[  134.798773][T10872] bridge0: port 1(erspan0) entered disabled state
[  134.903922][T10881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.909174][T10881] syzkaller0: entered promiscuous mode
[  134.912610][T10881] syzkaller0: entered allmulticast mode
[  134.925175][T10881] tipc: Resetting bearer <eth:syzkaller0>
[  134.929434][T10880] tipc: Resetting bearer <eth:syzkaller0>
[  134.942215][T10880] tipc: Disabling bearer <eth:syzkaller0>
[  135.470461][T10920] pimreg: entered allmulticast mode
[  135.474441][T10920] pimreg: left allmulticast mode
[  135.858604][T10962] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000
[  135.890479][T10967] netlink: 'syz.0.1183': attribute type 1 has an invalid length.
[  135.959592][T10969] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.273914][T10971] __nla_validate_parse: 20 callbacks suppressed
[  136.273923][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'.
[  136.753505][T10990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1188'.
[  136.819155][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1189'.
[  136.879508][T10998] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1190'.
[  137.071996][T11009] bridge0: port 1(macsec0) entered blocking state
[  137.074332][T11009] bridge0: port 1(macsec0) entered disabled state
[  137.076955][T11009] macsec0: entered allmulticast mode
[  137.079625][T11009] macsec0: entered promiscuous mode
[  137.234296][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  138.028471][T11040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.031185][T11040] syzkaller0: entered promiscuous mode
[  138.033119][T11040] syzkaller0: entered allmulticast mode
[  138.059774][T11039] tipc: Resetting bearer <eth:syzkaller0>
[  138.068949][T11039] tipc: Disabling bearer <eth:syzkaller0>
[  138.142531][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'.
[  138.145622][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'.
[  138.211799][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1208'.
[  138.233331][T11061] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1207'.
[  138.237726][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'.
[  138.371017][T11084] netlink: 'syz.1.1214': attribute type 1 has an invalid length.
[  138.531275][T11111] netlink: 'syz.0.1221': attribute type 23 has an invalid length.
[  138.735708][T11127] syzkaller1: entered allmulticast mode
[  138.764266][T11124] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  138.876301][T11125] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  138.976060][T11154] veth11: entered promiscuous mode
[  139.612418][T11205] macsec0: left allmulticast mode
[  139.614219][T11205] macsec0: left promiscuous mode
[  139.615934][T11205] bridge0: port 1(macsec0) entered disabled state
[  139.660973][T11219] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.669962][T11219] syzkaller0: entered promiscuous mode
[  139.671993][T11219] syzkaller0: entered allmulticast mode
[  139.708049][T11226] netlink: 'syz.0.1242': attribute type 3 has an invalid length.
[  139.710749][T11226] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  139.809268][T11232] IPv6: sit1: Disabled Multicast RS
[  139.812676][T11232] sit1: entered allmulticast mode
[  139.864045][T11234] netlink: 'syz.1.1244': attribute type 10 has an invalid length.
[  139.878889][T11234] team0: Port device geneve0 added
[  140.019952][T11242] netlink: 'syz.1.1246': attribute type 3 has an invalid length.
[  140.104834][T11250] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  140.134733][T11257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.137388][T11257] syzkaller0: entered promiscuous mode
[  140.139263][T11257] syzkaller0: entered allmulticast mode
[  140.161596][T11257] tipc: Resetting bearer <eth:syzkaller0>
[  140.169693][T11257] tipc: Disabling bearer <eth:syzkaller0>
[  140.173673][T11263] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  140.221611][T11268] syzkaller1: entered promiscuous mode
[  140.223401][T11268] syzkaller1: entered allmulticast mode
[  140.230175][T11272] pim6reg: entered allmulticast mode
[  140.232184][T11272] pim6reg: left allmulticast mode
[  140.384613][T11288] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[  140.398485][T11288] bond9: entered promiscuous mode
[  140.400828][T11288] bond9: entered allmulticast mode
[  140.411973][T11288] bridge13: the hash_elasticity option has been deprecated and is always 16
[  140.418472][T11288] bond9: (slave bridge13): making interface the new active one
[  140.421012][T11288] bridge13: entered promiscuous mode
[  140.422832][T11288] bridge13: entered allmulticast mode
[  140.428891][T11288] bond9: (slave bridge13): Enslaving as an active interface with an up link
[  140.429584][T11293] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.601327][T11309] gretap1: entered promiscuous mode
[  141.342374][T11327] __nla_validate_parse: 25 callbacks suppressed
[  141.342385][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'.
[  141.347697][T11327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.377909][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  141.381027][T11329] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  141.383565][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.621464][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'.
[  141.677694][T11361] netlink: 'syz.2.1274': attribute type 10 has an invalid length.
[  141.736443][T11367] netlink: 'syz.2.1274': attribute type 10 has an invalid length.
[  141.739737][T11367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1274'.
[  141.743219][T11367] batadv0: entered promiscuous mode
[  141.745340][T11367] batadv0: entered allmulticast mode
[  141.748562][T11367] bridge0: port 1(batadv0) entered blocking state
[  141.751332][T11367] bridge0: port 1(batadv0) entered disabled state
[  141.826733][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  141.830015][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  142.091339][T11377] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1277'.
[  142.515253][T11419] syzkaller1: entered promiscuous mode
[  142.518372][T11419] syzkaller1: entered allmulticast mode
[  142.529341][T11424] netlink: 720 bytes leftover after parsing attributes in process `syz.1.1287'.
[  142.532394][T11424] openvswitch: netlink: Flow key attr not present in new flow.
[  142.584435][T11431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.595734][T11431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.628964][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'.
[  142.682645][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'.
[  142.742129][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1292'.
[  142.745983][T11450] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1292'.
[  143.020312][T11496] blkio.reset_stats is deprecated
[  143.038802][T11494] bridge14: port 1(veth9) entered blocking state
[  143.042180][T11494] bridge14: port 1(veth9) entered disabled state
[  143.044460][T11494] veth9: entered allmulticast mode
[  143.049524][T11494] veth9: entered promiscuous mode
[  143.059120][T11494] bridge14: port 2(veth0_to_bond) entered blocking state
[  143.065012][T11494] bridge14: port 2(veth0_to_bond) entered disabled state
[  143.072240][T11494] veth0_to_bond: entered allmulticast mode
[  143.080527][T11494] veth0_to_bond: entered promiscuous mode
[  143.177828][T11514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.183799][T11516] syzkaller0: entered promiscuous mode
[  143.185808][T11516] syzkaller0: entered allmulticast mode
[  143.193825][T11514] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  143.216037][T11516] tipc: Resetting bearer <eth:syzkaller0>
[  143.219268][T11511] tipc: Resetting bearer <eth:syzkaller0>
[  143.239974][T11511] tipc: Disabling bearer <eth:syzkaller0>
[  143.421523][T11544] bridge0: port 2(erspan0) entered blocking state
[  143.423789][T11544] bridge0: port 2(erspan0) entered disabled state
[  143.429471][T11544] erspan0: entered allmulticast mode
[  143.432043][T11544] erspan0: entered promiscuous mode
[  143.443080][T11544] erspan0: left allmulticast mode
[  143.444928][T11544] erspan0: left promiscuous mode
[  143.450622][T11544] bridge0: port 2(erspan0) entered disabled state
[  143.500313][T11559] validate_nla: 4 callbacks suppressed
[  143.500322][T11559] netlink: 'syz.0.1315': attribute type 58 has an invalid length.
[  143.577754][T11570] netlink: 'syz.0.1319': attribute type 29 has an invalid length.
[  143.596733][T11570] can: request_module (can-proto-0) failed.
[  143.672336][T11580] IPVS: ip_vs_edit_dest(): server weight less than zero
[  143.809721][T11600] netlink: 'syz.0.1327': attribute type 2 has an invalid length.
[  143.815802][T11600] : entered promiscuous mode
[  143.909309][T11607] netlink: 'syz.2.1329': attribute type 4 has an invalid length.
[  144.375479][T11647] ip6gre2: entered allmulticast mode
[  144.483851][T11661] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  144.564007][T11674] sctp: [Deprecated]: syz.1.1345 (pid 11674) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.564007][T11674] Use struct sctp_sack_info instead
[  144.664306][T11694] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  144.688440][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  144.738520][T11709] Driver unsupported XDP return value 0 on prog  (id 668) dev N/A, expect packet loss!
[  144.747339][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  144.796950][T11706] bridge0: port 1(batadv0) entered disabled state
[  144.814224][T11706] bond0: (slave gretap1): Releasing active interface
[  144.844162][T11706] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.606186][T11741] veth0_to_bond: left allmulticast mode
[  145.609181][T11741] veth0_to_bond: left promiscuous mode
[  145.611265][T11741] bridge14: port 2(veth0_to_bond) entered disabled state
[  145.620882][T11741] team0: Port device geneve0 removed
[  145.624457][T11741] bond9: (slave bridge13): Releasing active interface
[  145.627836][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.630956][T11741] bridge13: left promiscuous mode
[  145.633229][T11741] bridge13: left allmulticast mode
[  145.637351][T11741] veth9: left allmulticast mode
[  145.639894][T11741] veth9: left promiscuous mode
[  145.642037][T11741] bridge14: port 1(veth9) entered disabled state
[  145.649274][T11743] vlan3: entered allmulticast mode
[  145.651401][T11743] team0: entered allmulticast mode
[  145.657681][T11741] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  145.663796][T11741] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.667945][T11741] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.405788][T11792] __nla_validate_parse: 24 callbacks suppressed
[  146.405797][T11792] netlink: 87 bytes leftover after parsing attributes in process `syz.2.1372'.
[  146.492601][T11808] netlink: 'syz.2.1374': attribute type 4 has an invalid length.
[  146.505767][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1376'.
[  146.506784][T11811] syzkaller0: left promiscuous mode
[  146.515958][T11811] macsec2: entered promiscuous mode
[  146.521012][T11811] ip6gretap0: entered promiscuous mode
[  146.522940][T11811] macsec2: entered allmulticast mode
[  146.524810][T11811] ip6gretap0: entered allmulticast mode
[  146.564357][T11817] bridge0: port 1(erspan0) entered blocking state
[  146.567259][T11817] bridge0: port 1(erspan0) entered disabled state
[  146.573227][T11817] erspan0: entered allmulticast mode
[  146.575720][T11817] erspan0: entered promiscuous mode
[  146.581943][T11817] erspan0: left allmulticast mode
[  146.583668][T11817] erspan0: left promiscuous mode
[  146.585440][T11817] bridge0: port 1(erspan0) entered disabled state
[  146.647095][ T1279] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  146.669158][T11824] smc: net device bond0 applied user defined pnetid SYZ2
[  146.676958][T11826] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1381'.
[  146.745005][T11835] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  146.749388][T11835] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  146.772057][T11839] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1384'.
[  146.780709][T11839] netlink: 'syz.2.1384': attribute type 21 has an invalid length.
[  146.783413][T11839] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1384'.
[  146.786771][T11839] netlink: 'syz.2.1384': attribute type 4 has an invalid length.
[  146.789510][T11839] netlink: 'syz.2.1384': attribute type 5 has an invalid length.
[  146.792146][T11839] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1384'.
[  146.803138][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'.
[  146.822036][T11839] bond0: (slave rose0): Enslaving as an active interface with an up link
[  146.828907][T11841] syzkaller0: Caught tx_queue_len zero misconfig
[  146.834039][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'.
[  146.837649][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'.
[  147.037958][T11862] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  147.428069][T11881] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1396'.
[  147.434844][T11881] bridge0: port 1(ipvlan2) entered blocking state
[  147.437352][T11881] bridge0: port 1(ipvlan2) entered disabled state
[  147.439735][T11881] ipvlan2: entered allmulticast mode
[  147.442562][T11881] ipvlan2: left allmulticast mode
[  147.607298][T11901] netlink: 'syz.1.1402': attribute type 5 has an invalid length.
[  148.013003][T11917] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  148.018969][T11917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.104586][T11928] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.421780][T11979] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  148.475855][T11984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.635129][T12011] netlink: 'syz.2.1434': attribute type 5 has an invalid length.
[  149.936153][T12075] delete_channel: no stack
[  149.971202][T12082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.973932][T12082] syzkaller0: entered promiscuous mode
[  149.976110][T12082] syzkaller0: entered allmulticast mode
[  149.991987][T12082] tipc: Resetting bearer <eth:syzkaller0>
[  149.994951][T12081] tipc: Resetting bearer <eth:syzkaller0>
[  150.003887][T12081] tipc: Disabling bearer <eth:syzkaller0>
[  150.595825][T12158] netlink: 'syz.0.1469': attribute type 13 has an invalid length.
[  150.601895][T12158] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  151.024390][T12200] pimreg: left allmulticast mode
[  151.100976][T12206] bridge0: port 1(erspan0) entered blocking state
[  151.104047][T12206] bridge0: port 1(erspan0) entered disabled state
[  151.107345][T12206] erspan0: entered allmulticast mode
[  151.109827][T12206] erspan0: entered promiscuous mode
[  151.112031][T12206] bridge0: port 1(erspan0) entered blocking state
[  151.114184][T12206] bridge0: port 1(erspan0) entered listening state
[  151.146962][T12211] sctp: [Deprecated]: syz.1.1481 (pid 12211) Use of int in max_burst socket option.
[  151.146962][T12211] Use struct sctp_assoc_value instead
[  151.337692][T12220] 8021q: adding VLAN 0 to HW filter on device team0
[  151.349822][T12220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.394766][T12235] netlink: 'syz.0.1487': attribute type 2 has an invalid length.
[  151.781210][T12261] __nla_validate_parse: 21 callbacks suppressed
[  151.781220][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'.
[  152.018644][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'.
[  152.809572][T12295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1501'.
[  152.812647][T12295] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1501'.
[  152.815691][T12295] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1501'.
[  152.895031][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  152.907404][T12305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'.
[  152.918668][T12309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  152.998047][T12313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  153.012731][T12319] ip6gre1: entered promiscuous mode
[  153.994730][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1516'.
[  154.009964][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'.
[  154.012959][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'.
[  154.020978][T12407] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  154.062324][ T1279] IPVS: starting estimator thread 0...
[  154.113903][T12426] nbd: must specify an index to disconnect
[  154.146663][T12417] IPVS: using max 78 ests per chain, 187200 per kthread
[  154.204111][T12443] netlink: 'syz.1.1524': attribute type 13 has an invalid length.
[  154.216609][T12443] netlink: 'syz.1.1524': attribute type 17 has an invalid length.
[  154.232376][T12443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.247063][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.266815][T12450] bridge10: entered allmulticast mode
[  154.269556][T12443] netlink: 'syz.1.1524': attribute type 10 has an invalid length.
[  154.282264][T12443] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.285407][T12443] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.509620][T12475] Bluetooth: MGMT ver 1.23
[  154.517815][T12475] netlink: 'syz.0.1533': attribute type 10 has an invalid length.
[  154.670082][T12486] bridge0: port 1(erspan0) entered blocking state
[  154.672472][T12486] bridge0: port 1(erspan0) entered disabled state
[  154.674758][T12486] erspan0: entered allmulticast mode
[  154.678991][T12486] erspan0: entered promiscuous mode
[  154.681890][T12486] erspan0: left allmulticast mode
[  154.683553][T12486] erspan0: left promiscuous mode
[  154.685397][T12486] bridge0: port 1(erspan0) entered disabled state
[  154.737933][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.766341][T12498] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  154.833794][T12502] netlink: 'syz.0.1537': attribute type 5 has an invalid length.
[  154.920683][T12504] IPv6: sit2: Disabled Multicast RS
[  154.966991][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.969406][T12515] tipc: Can't bind to reserved service type 0
[  154.970017][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.162181][T12542] netlink: 'syz.1.1544': attribute type 11 has an invalid length.
[  155.487232][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.681902][T12613] ip6gre1: entered promiscuous mode
[  155.959468][T12650] netlink: 'syz.0.1558': attribute type 10 has an invalid length.
[  155.963989][T12650] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.976804][T12650] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.222952][T12670] netlink: 'syz.1.1562': attribute type 1 has an invalid length.
[  156.304296][T12670] syzkaller1: entered allmulticast mode
[  156.308163][T12670] syzkaller1: left allmulticast mode
[  156.603055][T12708] netlink: 'syz.1.1572': attribute type 5 has an invalid length.
[  156.669770][T12712] netlink: 'syz.1.1574': attribute type 1 has an invalid length.
[  156.672468][T12712] NCSI netlink: No device for ifindex 246
[  156.675184][T12712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.678927][T12712] syzkaller0: entered promiscuous mode
[  156.681225][T12712] syzkaller0: entered allmulticast mode
[  156.691096][T12712] tipc: Resetting bearer <eth:syzkaller0>
[  156.694487][T12711] tipc: Resetting bearer <eth:syzkaller0>
[  156.701991][T12711] tipc: Disabling bearer <eth:syzkaller0>
[  157.047830][T12742] __nla_validate_parse: 19 callbacks suppressed
[  157.047843][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'.
[  157.231003][T12751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1584'.
[  157.493766][T12758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  157.498971][T12758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  157.526226][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'.
[  157.600883][T12792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  157.695613][T12801] erspan0: left allmulticast mode
[  157.698927][T12801] erspan0: left promiscuous mode
[  157.701218][T12801] bridge0: port 1(erspan0) entered disabled state
[  158.201770][T12817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1597'.
[  158.344369][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  158.707503][T12832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'.
[  158.736215][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'.
[  158.739608][T12840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1602'.
[  158.806694][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  159.253962][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'.
[  159.255936][T12877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1611'.
[  159.334053][T12888] validate_nla: 4 callbacks suppressed
[  159.334062][T12888] netlink: 'syz.2.1615': attribute type 13 has an invalid length.
[  159.348780][T12888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'.
[  159.899148][T12947] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  160.040127][T12952] bridge0: port 1(erspan0) entered blocking state
[  160.042474][T12952] bridge0: port 1(erspan0) entered disabled state
[  160.044819][T12952] erspan0: entered allmulticast mode
[  160.050728][T12952] erspan0: entered promiscuous mode
[  160.055600][T12952] erspan0: left allmulticast mode
[  160.057457][T12952] erspan0: left promiscuous mode
[  160.059198][T12952] bridge0: port 1(erspan0) entered disabled state
[  160.397304][T12984] netlink: 'syz.2.1634': attribute type 2 has an invalid length.
[  160.638078][T13000] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  161.045906][T13062] trusted_key: syz.1.1653 sent an empty control message without MSG_MORE.
[  161.522819][T13091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  161.531197][T13093] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  161.561345][T13093] bond7: entered promiscuous mode
[  161.563842][T13093] 8021q: adding VLAN 0 to HW filter on device bond7
[  161.582246][T13093] 8021q: adding VLAN 0 to HW filter on device bond7
[  161.584969][T13093] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  161.589123][T13093] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  161.594254][T13093] bond7: (slave wireguard1): making interface the new active one
[  161.597736][T13093] wireguard1: entered promiscuous mode
[  161.600751][T13093] bond7: (slave wireguard1): Enslaving as an active interface with an up link
[  161.768747][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[  162.039720][T13135] veth1_macvtap: left promiscuous mode
[  162.041594][T13135] macsec0: entered promiscuous mode
[  162.046453][T13135] veth1_macvtap: entered promiscuous mode
[  162.051259][T13135] macsec0: left promiscuous mode
[  162.075250][T13143] bridge0: port 1(erspan0) entered blocking state
[  162.078681][T13143] bridge0: port 1(erspan0) entered disabled state
[  162.081205][T13143] erspan0: entered allmulticast mode
[  162.083935][T13143] erspan0: entered promiscuous mode
[  162.261399][T13162] erspan0: left allmulticast mode
[  162.263203][T13162] erspan0: left promiscuous mode
[  162.265161][T13162] bridge0: port 1(erspan0) entered disabled state
[  162.305622][T13162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.407923][T13166] __nla_validate_parse: 42 callbacks suppressed
[  162.407934][T13166] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1680'.
[  162.497313][T13171] netlink: 'syz.1.1681': attribute type 1 has an invalid length.
[  162.514473][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'.
[  162.750834][T13181] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  162.751395][T13181] netlink: 'syz.2.1685': attribute type 1 has an invalid length.
[  162.756986][T13181] netlink: 'syz.2.1685': attribute type 2 has an invalid length.
[  162.759853][T13181] netlink: 'syz.2.1685': attribute type 1 has an invalid length.
[  162.762508][T13181] netlink: 'syz.2.1685': attribute type 2 has an invalid length.
[  162.790211][T13187] batadv0: left promiscuous mode
[  162.799954][T13187] geneve2: left promiscuous mode
[  162.802237][T13187] veth5: left promiscuous mode
[  162.804637][T13187] bond1: left promiscuous mode
[  162.806430][T13187] geneve3: left promiscuous mode
[  162.813770][T13187] ip6gre1: left promiscuous mode
[  162.816943][T13187] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  162.862852][T13194] netlink: 'syz.2.1688': attribute type 1 has an invalid length.
[  162.878107][T13194] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.886254][T13194] ipvlan0: entered allmulticast mode
[  162.888568][T13194] bond4: entered allmulticast mode
[  162.906001][T13194] bond4: (slave gretap2): making interface the new active one
[  162.909768][T13194] gretap2: entered allmulticast mode
[  162.913526][T13194] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  162.926819][T13198] netlink: 'syz.0.1689': attribute type 2 has an invalid length.
[  162.933098][T13194] syz.2.1688 (13194) used greatest stack depth: 18992 bytes left
[  162.954343][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1690'.
[  163.068306][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'.
[  163.081256][T13219] team1: entered promiscuous mode
[  163.083061][T13219] team1: entered allmulticast mode
[  163.301842][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  163.328021][T13234] tipc: Disabling bearer <eth:macvtap0>
[  163.428748][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.435301][T13239] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.439938][T13239] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.447524][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  163.516754][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  163.846900][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[  164.025247][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'.
[  164.028516][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1702'.
[  164.028574][T13246] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1702'.
[  164.105239][T13259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  164.215996][T13276] pimreg3: entered allmulticast mode
[  164.241973][T13278] siw: device registration error -23
[  164.258152][T13278] wg1: entered promiscuous mode
[  164.260037][T13278] wg1: entered allmulticast mode
[  164.270679][T13280] bridge0: port 1(erspan0) entered blocking state
[  164.272864][T13280] bridge0: port 1(erspan0) entered disabled state
[  164.275075][T13280] erspan0: entered allmulticast mode
[  164.285876][T13280] erspan0: entered promiscuous mode
[  164.289025][T13282] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  164.297524][T13280] erspan0: left allmulticast mode
[  164.299308][T13280] erspan0: left promiscuous mode
[  164.303447][T13280] bridge0: port 1(erspan0) entered disabled state
[  164.362255][T13282] veth11: entered promiscuous mode
[  164.410840][T13293] macsec1: left promiscuous mode
[  164.412995][T13293] geneve2: left promiscuous mode
[  164.414743][T13293] geneve3: left promiscuous mode
[  164.418151][T13293] vlan3: left promiscuous mode
[  164.420785][T13293] bond9: left promiscuous mode
[  164.423324][T13293] ip6gre1: left promiscuous mode
[  164.437671][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  164.447771][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'.
[  164.451198][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[  164.624928][T13319] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  164.636696][T13319] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  164.640958][T13319] syzkaller0: entered promiscuous mode
[  164.821162][ T5853] Bluetooth: hci2: link tx timeout
[  164.823523][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.852355][T13352] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  165.042285][T13367] batadv0: left allmulticast mode
[  165.055884][T13377] validate_nla: 2 callbacks suppressed
[  165.055894][T13377] netlink: 'syz.0.1734': attribute type 4 has an invalid length.
[  165.068869][T13367] wg1: left promiscuous mode
[  165.070426][T13367] wg1: left allmulticast mode
[  165.109060][T13379] netlink: 'syz.0.1734': attribute type 4 has an invalid length.
[  165.114986][T13367] 0: left allmulticast mode
[  165.117535][T13367] hsr_slave_0: left allmulticast mode
[  165.152271][T13367] geneve2: left allmulticast mode
[  165.162395][T13367] bond1: left allmulticast mode
[  165.165250][T13367] geneve3: left allmulticast mode
[  165.194610][T13367] bridge10: left allmulticast mode
[  165.220267][T13367] ipvlan0: left allmulticast mode
[  165.222681][T13367] bond4: left allmulticast mode
[  165.224377][T13367] gretap2: left allmulticast mode
[  165.227807][T13367] team1: left promiscuous mode
[  165.229403][T13367] team1: left allmulticast mode
[  165.270248][ T5885] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  165.272926][ T5885] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  165.276098][ T5885] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  165.280647][ T5885] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  165.286612][ T5885] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  165.299322][ T5885] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  165.302180][ T5885] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  165.304835][ T5885] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  165.366735][ T5878] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.373969][T13389] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  165.377740][T13389] tipc: Resetting bearer <eth:syzkaller0>
[  165.379975][T13389] syzkaller0: left promiscuous mode
[  165.381851][T13389] syzkaller0: left allmulticast mode
[  165.384892][T13389] sit1: left allmulticast mode
[  165.387629][T13389] gretap1: left promiscuous mode
[  165.389849][T13389] ip6gre2: left allmulticast mode
[  165.392867][T13389] vlan3: left allmulticast mode
[  165.394654][T13389] team0: left allmulticast mode
[  165.399309][T13389] ip6gretap0: left allmulticast mode
[  165.401241][T13389] macsec2: left promiscuous mode
[  165.403010][T13389] macsec2: left allmulticast mode
[  165.413772][T13389] bond7: left promiscuous mode
[  165.415451][T13389] wireguard1: left promiscuous mode
[  165.599538][T13401] _Z`Ԁ@: entered promiscuous mode
[  165.827093][T13425] vlan0: entered promiscuous mode
[  165.828817][T13425] bond0: entered promiscuous mode
[  165.830505][T13425] vlan0: entered allmulticast mode
[  165.832144][T13425] bond0: entered allmulticast mode
[  165.869564][T13428] netlink: 'syz.0.1746': attribute type 1 has an invalid length.
[  165.891561][T13428] 8021q: adding VLAN 0 to HW filter on device bond8
[  165.905991][T13428] bond8: (slave gretap2): making interface the new active one
[  165.911135][T13428] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  165.994402][T13450] netlink: 'syz.0.1751': attribute type 1 has an invalid length.
[  166.083843][T13462] netlink: 'syz.1.1754': attribute type 5 has an invalid length.
[  166.087101][T13439] netlink: 'syz.2.1749': attribute type 10 has an invalid length.
[  166.442566][T13514] netpci0: tun_chr_ioctl cmd 1074025681
[  166.579486][T13532] netlink: 'syz.1.1771': attribute type 21 has an invalid length.
[  166.886700][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  166.896876][ T5853] Bluetooth: hci2: command 0x0419 tx timeout
[  167.548448][T13587] syzkaller1: entered promiscuous mode
[  167.552641][T13587] syzkaller1: entered allmulticast mode
[  167.611380][T13593] __nla_validate_parse: 15 callbacks suppressed
[  167.611392][T13593] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1780'.
[  167.616376][T13593] block nbd0: not configured, cannot reconfigure
[  167.626411][T13594] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  167.629676][T13594] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  168.128862][T13600] 8021q: adding VLAN 0 to HW filter on device bond3
[  168.136418][T13600] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  168.140093][T13600] bond3: (slave macvlan0): Enslaving as a backup interface with a down link
[  168.189975][T13602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1783'.
[  168.443725][T13644] syzkaller0: entered promiscuous mode
[  168.445571][T13644] syzkaller0: entered allmulticast mode
[  168.454107][T13644] lo: entered promiscuous mode
[  168.455869][T13644] tunl0: entered promiscuous mode
[  168.460419][T13644] gre0: entered promiscuous mode
[  168.462178][T13644] gretap0: entered promiscuous mode
[  168.464070][T13644] erspan0: entered promiscuous mode
[  168.465924][T13644] ip_vti0: entered promiscuous mode
[  168.468103][T13644] ip6_vti0: entered promiscuous mode
[  168.470008][T13644] sit0: entered promiscuous mode
[  168.471908][T13644] ip6tnl0: entered promiscuous mode
[  168.480118][T13644] ip6gre0: entered promiscuous mode
[  168.481921][T13644] ip6gretap0: entered promiscuous mode
[  168.483754][T13644] team0: entered promiscuous mode
[  168.485553][T13644] !: entered promiscuous mode
[  168.487653][T13644] nlmon0: entered promiscuous mode
[  168.489508][T13644] caif0: entered promiscuous mode
[  168.491294][T13644] batadv0: entered promiscuous mode
[  168.495887][T13644] vxcan0: entered promiscuous mode
[  168.501486][T13644] vxcan1: entered promiscuous mode
[  168.503352][T13644] veth0: entered promiscuous mode
[  168.505151][T13644] veth1: entered promiscuous mode
[  168.507163][T13644] wg0: entered promiscuous mode
[  168.512219][T13644] wg1: entered promiscuous mode
[  168.513924][T13644] wg2: entered promiscuous mode
[  168.515638][T13644] veth0_to_bridge: entered promiscuous mode
[  168.517828][T13644] bridge_slave_0: entered promiscuous mode
[  168.519870][T13644] veth1_to_bridge: entered promiscuous mode
[  168.521907][T13644] bridge_slave_1: entered promiscuous mode
[  168.523937][T13644] veth0_to_bond: entered promiscuous mode
[  168.525912][T13644] @: entered promiscuous mode
[  168.528193][T13644] veth1_to_bond: entered promiscuous mode
[  168.530081][T13644] bond_slave_1: entered promiscuous mode
[  168.532024][T13644] veth0_to_team: entered promiscuous mode
[  168.533898][T13644] team_slave_0: entered promiscuous mode
[  168.535743][T13644] veth1_to_team: entered promiscuous mode
[  168.538581][T13644] team_slave_1: entered promiscuous mode
[  168.540938][T13644] veth1_to_batadv: entered promiscuous mode
[  168.543027][T13644] batadv_slave_1: entered promiscuous mode
[  168.544945][T13644] xfrm0: entered promiscuous mode
[  168.546909][T13644] veth0_to_hsr: entered promiscuous mode
[  168.548878][T13644] 0: entered promiscuous mode
[  168.550510][T13644] veth1_virt_wifi: entered promiscuous mode
[  168.552494][T13644] veth0_virt_wifi: entered promiscuous mode
[  168.554540][T13644] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  168.557172][T13644] macvtap0: entered promiscuous mode
[  168.558940][T13644] macsec0: entered promiscuous mode
[  168.560688][T13644] geneve0: entered promiscuous mode
[  168.562416][T13644] geneve1: entered promiscuous mode
[  168.564132][T13644] veth2: entered promiscuous mode
[  168.566245][T13644] veth3: entered promiscuous mode
[  168.568203][T13644] ipip0: entered promiscuous mode
[  168.569898][T13644] bridge1: entered promiscuous mode
[  168.571619][T13644] vti0: entered promiscuous mode
[  168.573253][T13644] geneve2: entered promiscuous mode
[  168.574971][T13644] vcan1: entered promiscuous mode
[  168.576815][T13644] bridge2: entered promiscuous mode
[  168.578553][T13644] bridge3: entered promiscuous mode
[  168.580266][T13644] veth4: entered promiscuous mode
[  168.581935][T13644] veth5: entered promiscuous mode
[  168.583627][T13644] ipip1: entered promiscuous mode
[  168.585324][T13644] bridge4: entered promiscuous mode
[  168.591107][T13644] gre1: entered promiscuous mode
[  168.592777][T13644] bond_slave_0: entered promiscuous mode
[  168.594655][T13644] ip6erspan0: entered promiscuous mode
[  168.596460][T13644] bond1: entered promiscuous mode
[  168.598225][T13644] bridge5: entered promiscuous mode
[  168.599965][T13644] bridge6: entered promiscuous mode
[  168.601682][T13644] geneve3: entered promiscuous mode
[  168.603627][T13644] netdevsim netdevsim2 eth0: entered promiscuous mode
[  168.605895][T13644] netdevsim netdevsim2 eth1: entered promiscuous mode
[  168.608440][T13644] netdevsim netdevsim2 eth2: entered promiscuous mode
[  168.610696][T13644] netdevsim netdevsim2 eth3: entered promiscuous mode
[  168.612929][T13644] geneve4: entered promiscuous mode
[  168.614659][T13644] sit1: entered promiscuous mode
[  168.616339][T13644] team_slave_0.0: entered promiscuous mode
[  168.618504][T13644] bridge7: entered promiscuous mode
[  168.620274][T13644] gretap1: entered promiscuous mode
[  168.622029][T13644] bond2: entered promiscuous mode
[  168.623679][T13644] ip6tnl1: entered promiscuous mode
[  168.625415][T13644] veth6: entered promiscuous mode
[  168.627204][T13644] veth7: entered promiscuous mode
[  168.628903][T13644] veth8: entered promiscuous mode
[  168.630571][T13644] veth9: entered promiscuous mode
[  168.632295][T13644] ip6gretap1: entered promiscuous mode
[  168.634115][T13644] bridge8: entered promiscuous mode
[  168.635839][T13644] ip6tnl2: entered promiscuous mode
[  168.638656][T13644] bond3: entered promiscuous mode
[  168.640280][T13644] macvlan0: entered promiscuous mode
[  168.644183][T13644] sit2: entered promiscuous mode
[  168.645853][T13644] ip6gretap2: entered promiscuous mode
[  168.647798][T13644] sit3: entered promiscuous mode
[  168.649465][T13644] bridge9: entered promiscuous mode
[  168.651294][T13644] bridge10: entered promiscuous mode
[  168.653115][T13644] ip6gre1: entered promiscuous mode
[  168.654862][T13644] erspan1: entered promiscuous mode
[  168.656717][T13644] bridge0: entered promiscuous mode
[  168.658537][T13644] dvmrp0: entered promiscuous mode
[  168.660281][T13644] bridge11: entered promiscuous mode
[  168.662229][T13644] veth10: entered promiscuous mode
[  168.663961][T13644] veth11: entered promiscuous mode
[  168.665702][T13644] bond4: entered promiscuous mode
[  168.667402][T13644] gretap2: entered promiscuous mode
[  168.669189][T13644] ipvlan0: entered promiscuous mode
[  168.670995][T13644] team1: entered promiscuous mode
[  168.672676][T13644] sit4: entered promiscuous mode
[  168.674345][T13644] pimreg3: entered promiscuous mode
[  168.676462][T13644] vlan0: left allmulticast mode
[  168.678122][T13644] bond0: left allmulticast mode
[  168.679764][T13644] ip6gre2: entered promiscuous mode
[  168.681545][T13644] bridge12: entered promiscuous mode
[  168.686191][T13644] syzkaller0: left allmulticast mode
[  168.700579][T13652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.721908][T13653] syzkaller0: entered promiscuous mode
[  168.723676][T13653] syzkaller0: entered allmulticast mode
[  168.748799][T13649] tipc: Resetting bearer <eth:syzkaller0>
[  168.751617][T13648] tipc: Resetting bearer <eth:syzkaller0>
[  168.763036][T13648] tipc: Disabling bearer <eth:syzkaller0>
[  168.779530][T13659] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  168.781827][T13659] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  168.935768][T13677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1795'.
[  168.948925][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'.
[  168.989291][T13682] vlan5: entered promiscuous mode
[  168.991049][T13682] bond0: entered promiscuous mode
[  168.992876][T13682] vlan5: entered allmulticast mode
[  168.994568][T13682] bond0: entered allmulticast mode
[  169.174708][T13693] netlink: 'syz.2.1799': attribute type 11 has an invalid length.
[  169.177568][T13693] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1799'.
[  169.265937][T13706] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  169.290451][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'.
[  169.303033][T13706] 8021q: adding VLAN 0 to HW filter on device bond5
[  169.312648][T13718] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  169.315900][T13706] IPVS: stopping backup sync thread 13718 ...
[  169.413665][T13726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'.
[  169.418478][T13726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1804'.
[  169.618872][T13754] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.638365][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'.
[  169.643102][T13758] netlink: 'syz.0.1813': attribute type 6 has an invalid length.
[  169.879175][T13791] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  169.911677][T13778] Unsupported ieee802154 address type: 0
[  169.985498][T13802] ip6gretap0: entered promiscuous mode
[  170.076184][T13811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.246569][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  170.900285][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'.
[  170.903708][T13840] netlink: 'syz.0.1829': attribute type 4 has an invalid length.
[  171.002578][T13846] ip6tnl3: entered promiscuous mode
[  171.004383][T13846] ip6tnl3: entered allmulticast mode
[  171.244008][T13863] pim6reg1: entered promiscuous mode
[  171.245709][T13863] pim6reg1: entered allmulticast mode
[  171.290593][T13865] syzkaller0: entered promiscuous mode
[  171.292441][T13865] syzkaller0: entered allmulticast mode
[  172.243603][T13886] sctp: [Deprecated]: syz.2.1842 (pid 13886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.243603][T13886] Use struct sctp_sack_info instead
[  172.302740][T13897] netlink: 'syz.2.1845': attribute type 1 has an invalid length.
[  172.330668][T13897] bond6: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  172.335766][T13906] delete_channel: no stack
[  172.338418][T13897] bond6 (unregistering): (slave ip6gretap3): Releasing backup interface
[  172.343276][T13897] bond6 (unregistering): Released all slaves
[  172.439516][T13904] delete_channel: no stack
[  172.566612][T13941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  172.577024][T13941] veth0: entered promiscuous mode
[  172.578694][T13941] veth0: entered allmulticast mode
[  172.656349][T13962] syzkaller0: Caught tx_queue_len zero misconfig
[  172.774976][T13980] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  172.931452][T13986] __nla_validate_parse: 2 callbacks suppressed
[  172.931462][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'.
[  172.938393][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1868'.
[  173.000679][T14017] netlink: 'syz.0.1871': attribute type 1 has an invalid length.
[  173.003164][T14017] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1871'.
[  173.015139][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1871'.
[  173.029566][T14018] pim6reg1: entered allmulticast mode
[  173.543196][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'.
[  173.594265][T14069] netlink: 'syz.2.1882': attribute type 1 has an invalid length.
[  173.606817][T14069] bond6: entered promiscuous mode
[  173.608885][T14069] 8021q: adding VLAN 0 to HW filter on device bond6
[  173.668459][ T5878] hid-generic 0005:15C2:0003.0002: item fetching failed at offset 0/1
[  173.671294][ T5878] hid-generic 0005:15C2:0003.0002: probe with driver hid-generic failed with error -22
[  173.686168][T14070] 8021q: adding VLAN 0 to HW filter on device bond6
[  173.688845][T14070] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  173.693612][T14070] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  173.701702][T14070] bond6: (slave wireguard0): making interface the new active one
[  173.704347][T14070] wireguard0: entered promiscuous mode
[  173.707597][T14070] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  173.792537][T14083] lo speed is unknown, defaulting to 1000
[  173.794492][T14083] lo speed is unknown, defaulting to 1000
[  173.798479][T14083] lo speed is unknown, defaulting to 1000
[  173.805185][T14083] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  173.818092][T14083] lo speed is unknown, defaulting to 1000
[  173.820791][T14083] lo speed is unknown, defaulting to 1000
[  173.827485][T14083] lo speed is unknown, defaulting to 1000
[  173.949215][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  174.127772][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  174.210133][T14110] rdma_op ffff8880296609f0 conn xmit_rdma 0000000000000000
[  174.727961][T14164] bridge0: port 1(erspan0) entered blocking state
[  174.730632][T14164] bridge0: port 1(erspan0) entered disabled state
[  174.733436][T14164] erspan0: entered allmulticast mode
[  174.761402][T14164] erspan0: left allmulticast mode
[  174.763282][T14164] bridge0: port 1(erspan0) entered disabled state
[  174.852735][T14176] openvswitch: netlink: Key type 80 is out of range max 32
[  174.883457][T14159] lo speed is unknown, defaulting to 1000
[  175.042856][T14196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.045553][T14197] syzkaller0: entered promiscuous mode
[  175.049442][T14197] syzkaller0: entered allmulticast mode
[  175.076070][T14196] tipc: Resetting bearer <eth:syzkaller0>
[  175.125615][T14196] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1908'.
[  175.131493][T14194] tipc: Resetting bearer <eth:syzkaller0>
[  175.140719][T14194] tipc: Disabling bearer <eth:syzkaller0>
[  175.261171][T14218] bond7: (slave wireguard1): Releasing backup interface
[  175.266060][T14218] bond8: (slave gretap2): Releasing active interface
[  175.275686][T14212] netlink: 'syz.0.1913': attribute type 10 has an invalid length.
[  175.342659][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1913'.
[  175.347915][T14218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.351807][T14218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.522857][T14246] netlink: 'syz.1.1918': attribute type 15 has an invalid length.
[  175.632682][T14248] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  175.638005][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.764910][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'.
[  175.768238][T14262] netlink: 'syz.1.1922': attribute type 5 has an invalid length.
[  176.058082][T14271] bridge16: entered promiscuous mode
[  176.322172][T14291] netlink: 'syz.0.1932': attribute type 1 has an invalid length.
[  176.327009][ T5853] Bluetooth: hci2: command 0x0419 tx timeout
[  176.487118][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.495913][T14306] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  176.809907][T14342] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  176.812687][T14342] macsec1: left allmulticast mode
[  176.814465][T14342] vlan2: left allmulticast mode
[  176.816074][T14342] veth1: left allmulticast mode
[  176.822564][T14342] geneve3: left allmulticast mode
[  176.824337][T14342] bridge5: left allmulticast mode
[  176.826171][T14342] vlan3: left allmulticast mode
[  176.828548][T14342] bridge0: left allmulticast mode
[  176.839010][T14342] mac80211_hwsim hwsim12 wlan1: left allmulticast mode
[  176.846462][T14342] bond9: left allmulticast mode
[  176.861561][T14342] vlan5: left promiscuous mode
[  176.863827][T14342] bond0: left promiscuous mode
[  176.865488][T14342] vlan5: left allmulticast mode
[  176.867430][T14342] bond0: left allmulticast mode
[  176.873640][T14342] bridge16: left promiscuous mode
[  176.883912][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.888917][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.891769][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.894934][T14345] sch_fq: defrate 0 ignored.
[  176.897977][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  176.933768][T14353] netlink: 'syz.1.1949': attribute type 1 has an invalid length.
[  176.952266][T14351] bond12: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  176.965468][T14351] 8021q: adding VLAN 0 to HW filter on device bond12
[  176.968856][   T12] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  177.078293][ T5877] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  177.149804][T14357] lo speed is unknown, defaulting to 1000
[  177.701990][T14431] netlink: 'syz.1.1966': attribute type 11 has an invalid length.
[  177.978538][T14466] tun0: tun_chr_ioctl cmd 1074025681
[  177.990723][T14468] netlink: 'syz.1.1976': attribute type 21 has an invalid length.
[  177.994163][T14468] __nla_validate_parse: 16 callbacks suppressed
[  177.994175][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1976'.
[  178.066352][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'.
[  178.098179][T14480] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1980'.
[  178.130194][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1979'.
[  178.163740][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'.
[  178.333770][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'.
[  178.340335][T14501] team0: Device ipvlan2 is already an upper device of the team interface
[  178.576769][ T5853] Bluetooth: hci0: command tx timeout
[  178.840716][T14516] syzkaller0: entered promiscuous mode
[  178.842637][T14516] syzkaller0: entered allmulticast mode
[  179.760411][T14523] netlink: 'syz.2.1987': attribute type 10 has an invalid length.
[  179.785733][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'.
[  179.789458][T14525] netlink: 'syz.2.1988': attribute type 5 has an invalid length.
[  179.791992][T14525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'.
[  179.916266][T14533] bond4: (slave gretap2): Releasing active interface
[  179.921047][T14533] bond3: (slave macvlan0): Releasing backup interface
[  179.927622][T14533] bond6: (slave wireguard0): Releasing backup interface
[  179.930033][T14543] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1994'.
[  179.930126][T14533] wireguard0: left promiscuous mode
[  179.967607][T14533] netlink: 'syz.2.1992': attribute type 10 has an invalid length.
[  179.998559][T14533] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.001800][T14533] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.134321][T14556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  180.401258][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'.
[  180.941252][T14609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.945565][T14609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.900713][T14706] netlink: 'syz.1.2019': attribute type 12 has an invalid length.
[  181.934447][T14706] netlink: 'syz.1.2019': attribute type 13 has an invalid length.
[  181.955555][T14711] netlink: 'syz.0.2021': attribute type 16 has an invalid length.
[  181.958251][T14711] netlink: 'syz.0.2021': attribute type 17 has an invalid length.
[  181.972718][T14711] ip6gretap0: left promiscuous mode
[  181.975719][T14711] 8021q: adding VLAN 0 to HW filter on device team0
[  181.982702][T14711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.989681][  T973] lo speed is unknown, defaulting to 1000
[  181.991614][  T973] syz2: Port: 1 Link ACTIVE
[  182.040388][T14720] macsec0: entered promiscuous mode
[  182.043969][T14720] netlink: 'syz.0.2023': attribute type 15 has an invalid length.
[  182.108943][T14723] macsec0: left promiscuous mode
[  182.147498][T14722] lo speed is unknown, defaulting to 1000
[  182.417762][T14729] netlink: 'syz.0.2025': attribute type 7 has an invalid length.
[  182.421269][T14728] netlink: 'syz.0.2025': attribute type 7 has an invalid length.
[  182.652641][T14744] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.695755][T14748] bridge0: failed insert local address into bridge forwarding table
[  183.943350][T14806] lo speed is unknown, defaulting to 1000
[  184.051365][T14813] syzkaller1: entered promiscuous mode
[  184.053360][T14813] syzkaller1: entered allmulticast mode
[  184.109598][T14813] __nla_validate_parse: 11 callbacks suppressed
[  184.109607][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  184.114619][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'.
[  184.250653][T14821] syzkaller0: entered promiscuous mode
[  184.252497][T14821] syzkaller0: entered allmulticast mode
[  184.261961][T14827] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[  185.210496][T14844] can: request_module (can-proto-5) failed.
[  185.212873][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'.
[  185.358514][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'.
[  185.366149][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'.
[  185.370246][ T5859] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.372978][T14881] bridge0: port 1(erspan0) entered blocking state
[  185.375026][T14881] bridge0: port 1(erspan0) entered disabled state
[  185.380417][T14881] erspan0: entered allmulticast mode
[  185.382776][T14881] erspan0: entered promiscuous mode
[  185.384900][T14881] bridge0: port 1(erspan0) entered blocking state
[  185.387126][T14881] bridge0: port 1(erspan0) entered forwarding state
[  185.401920][ T5859] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.404536][ T5859] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.410312][ T5859] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.413115][T14881] erspan0: left allmulticast mode
[  185.414754][T14881] erspan0: left promiscuous mode
[  185.416398][T14881] bridge0: port 1(erspan0) entered disabled state
[  185.474762][T14899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2067'.
[  185.525405][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2068'.
[  186.302413][T14923] pim6reg: entered allmulticast mode
[  186.304863][T14923] pim6reg: left allmulticast mode
[  186.349920][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2072'.
[  186.352953][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2072'.
[  186.641077][T14971] team0: Refused to change device type
[  186.685858][T14974] netlink: 'syz.1.2084': attribute type 1 has an invalid length.
[  186.831944][T14993] pim6reg1: entered promiscuous mode
[  186.833921][T14993] pim6reg1: entered allmulticast mode
[  187.042860][T14999] lo speed is unknown, defaulting to 1000
[  187.292812][T15011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2095'.
[  187.432519][T15018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.463063][T15020] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  187.472262][T15020] bond12: (slave ip6gretap4): Removing an active aggregator
[  187.476146][T15020] bond12: (slave ip6gretap4): Releasing backup interface
[  187.488922][T15020] netlink: 'syz.1.2099': attribute type 10 has an invalid length.
[  187.496050][T15020] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.500163][T15020] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.585295][T15026] netlink: 'syz.0.2102': attribute type 2 has an invalid length.
[  187.793867][T15044] pim6reg1: entered allmulticast mode
[  187.839427][T15047] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  187.878364][T15052] syzkaller0: entered promiscuous mode
[  187.880399][T15052] syzkaller0: entered allmulticast mode
[  188.092902][T15087] netlink: 'syz.0.2119': attribute type 4 has an invalid length.
[  188.097341][ T2297] lo speed is unknown, defaulting to 1000
[  188.100217][ T2297] syz2: Port: 1 Link DOWN
[  188.230854][T15102] netlink: 'syz.2.2124': attribute type 4 has an invalid length.
[  188.361694][T15119] netlink: 'syz.0.2129': attribute type 10 has an invalid length.
[  188.369536][T15120] netlink: 'syz.0.2129': attribute type 10 has an invalid length.
[  188.593971][T15130] lo speed is unknown, defaulting to 1000
[  188.614068][T15158] netlink: 'syz.2.2137': attribute type 1 has an invalid length.
[  188.630855][T15158] bond7: entered promiscuous mode
[  188.632762][T15158] 8021q: adding VLAN 0 to HW filter on device bond7
[  188.673882][T15158] 8021q: adding VLAN 0 to HW filter on device bond7
[  188.676305][T15158] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  188.680320][T15158] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  188.685297][T15158] bond7: (slave wireguard1): making interface the new active one
[  188.688538][T15158] wireguard1: entered promiscuous mode
[  188.690989][T15158] bond7: (slave wireguard1): Enslaving as an active interface with an up link
[  188.703773][T15158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.707288][T15158] IPv6: NLM_F_CREATE should be set when creating new route
[  188.709666][T15158] IPv6: NLM_F_CREATE should be set when creating new route
[  188.719351][T15158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.735968][T15158] bond7: (slave wireguard2): The slave device specified does not support setting the MAC address
[  188.748587][T15158] bond7: (slave wireguard2): Enslaving as a backup interface with an up link
[  188.909911][T15175] netlink: 'syz.2.2141': attribute type 5 has an invalid length.
[  189.019124][T15185] netlink: 'syz.0.2144': attribute type 1 has an invalid length.
[  189.034506][T15185] 8021q: adding VLAN 0 to HW filter on device bond9
[  189.045362][T15185] 8021q: adding VLAN 0 to HW filter on device bond9
[  189.048706][T15185] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  189.053920][T15185] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  189.096414][T15190] veth9: entered promiscuous mode
[  189.102480][T15190] bond9: (slave veth9): Enslaving as an active interface with a down link
[  189.106920][T15190] erspan0: entered allmulticast mode
[  189.112887][T15190] bond9: (slave erspan0): making interface the new active one
[  189.116010][T15190] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  189.412322][T15194] __nla_validate_parse: 9 callbacks suppressed
[  189.412365][T15194] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2146'.
[  189.434842][T15194] openvswitch: netlink: IPv4 tunnel dst address is zero
[  189.518194][    C1] ==================================================================
[  189.520946][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  189.523655][    C1] Write of size 8 at addr ffff8881085b1230 by task swapper/1/0
[  189.526822][    C1] 
[  189.527661][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  189.527671][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.527676][    C1] Call Trace:
[  189.527679][    C1]  <IRQ>
[  189.527682][    C1]  dump_stack_lvl+0x189/0x250
[  189.527694][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  189.527703][    C1]  ? rcu_is_watching+0x15/0xb0
[  189.527710][    C1]  ? __kasan_check_byte+0x12/0x40
[  189.527720][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.527727][    C1]  ? rcu_is_watching+0x15/0xb0
[  189.527733][    C1]  ? lock_release+0x4b/0x3e0
[  189.527744][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  189.527751][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  189.527759][    C1]  print_report+0xca/0x240
[  189.527766][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  189.527774][    C1]  kasan_report+0x118/0x150
[  189.527784][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  189.527793][    C1]  __xfrm_state_delete+0x696/0xca0
[  189.527802][    C1]  xfrm_timer_handler+0x18f/0xa00
[  189.527812][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.527819][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  189.527828][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.527836][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.527843][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.527850][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.527858][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.527865][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  189.527875][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  189.527881][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  189.527890][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  189.527897][    C1]  handle_softirqs+0x286/0x870
[  189.527904][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  189.527910][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  189.527917][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  189.527926][    C1]  __irq_exit_rcu+0xca/0x1f0
[  189.527932][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  189.527939][    C1]  irq_exit_rcu+0x9/0x30
[  189.527945][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  189.527952][    C1]  </IRQ>
[  189.527955][    C1]  <TASK>
[  189.527958][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  189.527966][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  189.527974][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 97 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  189.527980][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  189.527987][    C1] RAX: 86c989f643c14800 RBX: ffffffff81968308 RCX: 86c989f643c14800
[  189.527992][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b4408 RDI: ffffffff8be32600
[  189.527997][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  189.528001][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa34230
[  189.528006][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020005000
[  189.528011][    C1]  ? do_idle+0x1e8/0x510
[  189.528019][    C1]  default_idle+0x13/0x20
[  189.528027][    C1]  default_idle_call+0x74/0xb0
[  189.528035][    C1]  do_idle+0x1e8/0x510
[  189.528041][    C1]  ? __pfx_do_idle+0x10/0x10
[  189.528050][    C1]  cpu_startup_entry+0x44/0x60
[  189.528056][    C1]  start_secondary+0x101/0x110
[  189.528065][    C1]  common_startup_64+0x13e/0x147
[  189.528077][    C1]  </TASK>
[  189.528079][    C1] 
[  189.637428][    C1] Allocated by task 12917:
[  189.638911][    C1]  kasan_save_track+0x3e/0x80
[  189.640433][    C1]  __kasan_slab_alloc+0x6c/0x80
[  189.642035][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  189.643865][    C1]  xfrm_state_alloc+0x24/0x2f0
[  189.645491][    C1]  __find_acq_core+0x8a7/0x1c00
[  189.647117][    C1]  xfrm_find_acq+0x78/0xa0
[  189.648642][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  189.650341][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.652004][    C1]  netlink_rcv_skb+0x208/0x470
[  189.653628][    C1]  xfrm_netlink_rcv+0x79/0x90
[  189.655215][    C1]  netlink_unicast+0x82f/0x9e0
[  189.656811][    C1]  netlink_sendmsg+0x805/0xb30
[  189.658525][    C1]  __sock_sendmsg+0x21c/0x270
[  189.660141][    C1]  ____sys_sendmsg+0x505/0x830
[  189.661737][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  189.663321][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  189.664999][    C1]  do_syscall_64+0xfa/0x3b0
[  189.666524][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.668489][    C1] 
[  189.669318][    C1] Freed by task 1279:
[  189.670633][    C1]  kasan_save_track+0x3e/0x80
[  189.672214][    C1]  kasan_save_free_info+0x46/0x50
[  189.673883][    C1]  __kasan_slab_free+0x5b/0x80
[  189.675485][    C1]  kmem_cache_free+0x18f/0x400
[  189.677025][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  189.678626][    C1]  process_scheduled_works+0xae1/0x17b0
[  189.680395][    C1]  worker_thread+0x8a0/0xda0
[  189.681897][    C1]  kthread+0x711/0x8a0
[  189.683240][    C1]  ret_from_fork+0x3fc/0x770
[  189.684761][    C1]  ret_from_fork_asm+0x1a/0x30
[  189.686359][    C1] 
[  189.687137][    C1] The buggy address belongs to the object at ffff8881085b1200
[  189.687137][    C1]  which belongs to the cache xfrm_state of size 928
[  189.691501][    C1] The buggy address is located 48 bytes inside of
[  189.691501][    C1]  freed 928-byte region [ffff8881085b1200, ffff8881085b15a0)
[  189.695786][    C1] 
[  189.696581][    C1] The buggy address belongs to the physical page:
[  189.698665][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881085b0d80 pfn:0x1085b0
[  189.701935][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  189.704619][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  189.707026][    C1] page_type: f5(slab)
[  189.708336][    C1] raw: 057ff00000000040 ffff888104e7b640 dead000000000122 0000000000000000
[  189.711057][    C1] raw: ffff8881085b0d80 00000000800e000a 00000000f5000000 0000000000000000
[  189.713778][    C1] head: 057ff00000000040 ffff888104e7b640 dead000000000122 0000000000000000
[  189.716580][    C1] head: ffff8881085b0d80 00000000800e000a 00000000f5000000 0000000000000000
[  189.719404][    C1] head: 057ff00000000002 ffffea0004216c01 00000000ffffffff 00000000ffffffff
[  189.722142][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  189.724928][    C1] page dumped because: kasan: bad access detected
[  189.727002][    C1] page_owner tracks the page as allocated
[  189.728819][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6220, tgid 6219 (syz.2.82), ts 52689897922, free_ts 52562925287
[  189.734649][    C1]  post_alloc_hook+0x240/0x2a0
[  189.736197][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  189.738006][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  189.739922][    C1]  alloc_pages_mpol+0x232/0x4a0
[  189.741483][    C1]  allocate_slab+0x8a/0x370
[  189.742949][    C1]  ___slab_alloc+0xbeb/0x1410
[  189.744479][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  189.746238][    C1]  xfrm_state_alloc+0x24/0x2f0
[  189.747778][    C1]  __find_acq_core+0x8a7/0x1c00
[  189.749356][    C1]  xfrm_find_acq+0x78/0xa0
[  189.750798][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  189.752417][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.754039][    C1]  netlink_rcv_skb+0x208/0x470
[  189.755627][    C1]  xfrm_netlink_rcv+0x79/0x90
[  189.757211][    C1]  netlink_unicast+0x82f/0x9e0
[  189.758798][    C1]  netlink_sendmsg+0x805/0xb30
[  189.760410][    C1] page last free pid 6212 tgid 6211 stack trace:
[  189.762511][    C1]  __free_frozen_pages+0xbc4/0xd30
[  189.764247][    C1]  stack_depot_save_flags+0x436/0x860
[  189.766031][    C1]  kasan_save_track+0x4f/0x80
[  189.767620][    C1]  __kasan_kmalloc+0x93/0xb0
[  189.769171][    C1]  __kvmalloc_node_noprof+0x30d/0x5f0
[  189.770883][    C1]  nf_tables_commit+0xaa9/0x8700
[  189.772477][    C1]  nfnetlink_rcv+0x1a4e/0x2520
[  189.773996][    C1]  netlink_unicast+0x82f/0x9e0
[  189.775580][    C1]  netlink_sendmsg+0x805/0xb30
[  189.777119][    C1]  __sock_sendmsg+0x21c/0x270
[  189.778661][    C1]  ____sys_sendmsg+0x505/0x830
[  189.780338][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  189.781881][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  189.783506][    C1]  do_syscall_64+0xfa/0x3b0
[  189.784994][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.786925][    C1] 
[  189.787692][    C1] Memory state around the buggy address:
[  189.789455][    C1]  ffff8881085b1100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  189.791982][    C1]  ffff8881085b1180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  189.794538][    C1] >ffff8881085b1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.797072][    C1]                                      ^
[  189.798836][    C1]  ffff8881085b1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.801426][    C1]  ffff8881085b1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.803979][    C1] ==================================================================
[  189.806871][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.809248][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  189.812961][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.816170][    C1] Call Trace:
[  189.817268][    C1]  <IRQ>
[  189.818238][    C1]  dump_stack_lvl+0x99/0x250
[  189.819750][    C1]  ? __asan_memcpy+0x40/0x70
[  189.821267][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.822956][    C1]  ? __pfx__printk+0x10/0x10
[  189.824471][    C1]  vpanic+0x281/0x750
[  189.825803][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  189.827536][    C1]  ? __pfx_vpanic+0x10/0x10
[  189.829069][    C1]  ? asm_common_interrupt+0x26/0x40
[  189.830743][    C1]  panic+0xb9/0xc0
[  189.832012][    C1]  ? __pfx_panic+0x10/0x10
[  189.833493][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  189.835407][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.837447][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  189.839199][    C1]  check_panic_on_warn+0x89/0xb0
[  189.840819][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  189.842541][    C1]  end_report+0x78/0x160
[  189.843949][    C1]  kasan_report+0x129/0x150
[  189.845439][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  189.847100][    C1]  __xfrm_state_delete+0x696/0xca0
[  189.848790][    C1]  xfrm_timer_handler+0x18f/0xa00
[  189.850432][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.852210][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  189.854114][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.855789][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.857689][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.859743][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.861531][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  189.863340][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  189.865059][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  189.866889][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  189.868782][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  189.870442][    C1]  handle_softirqs+0x286/0x870
[  189.872033][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  189.873628][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  189.875363][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  189.877061][    C1]  __irq_exit_rcu+0xca/0x1f0
[  189.878570][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  189.880242][    C1]  irq_exit_rcu+0x9/0x30
[  189.881631][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  189.883441][    C1]  </IRQ>
[  189.884420][    C1]  <TASK>
[  189.885413][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  189.887406][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  189.889299][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 97 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  189.895609][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  189.897595][    C1] RAX: 86c989f643c14800 RBX: ffffffff81968308 RCX: 86c989f643c14800
[  189.900232][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b4408 RDI: ffffffff8be32600
[  189.902765][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  189.905358][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa34230
[  189.907892][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020005000
[  189.910466][    C1]  ? do_idle+0x1e8/0x510
[  189.911885][    C1]  default_idle+0x13/0x20
[  189.913343][    C1]  default_idle_call+0x74/0xb0
[  189.915063][    C1]  do_idle+0x1e8/0x510
[  189.916462][    C1]  ? __pfx_do_idle+0x10/0x10
[  189.917984][    C1]  cpu_startup_entry+0x44/0x60
[  189.919548][    C1]  start_secondary+0x101/0x110
[  189.921099][    C1]  common_startup_64+0x13e/0x147
[  189.922764][    C1]  </TASK>
[  189.924459][    C1] Kernel Offset: disabled
[  189.925931][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:56:25  Registers:
info registers vcpu 0

CPU#0
RAX=4ce0b8a8cce16500 RBX=ffffffff81968308 RCX=4ce0b8a8cce16500 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca51137fc8 CR3=00000000334b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2768387498 00007f2768387470 XMM03=00007f27683874a8 00007f27683874a0
XMM04=00007f2768eed100 00007f2768387460 XMM05=00007f2768387478 00007f27683874c0
XMM06=00007f27683874b8 00007f27683874b0 XMM07=00007f27683874a8 00007f27683874a0
XMM08=0000000000000000 00007f2768212ee7 XMM09=0000000000000000 00007f2768212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=000000000000000a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888108c40237 R9 =1ffff11021188046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1914 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca51116fc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=00007fca50587498 00007fca50587470 XMM03=00007fca505874a8 00007fca505874a0
XMM04=00007fca510ed100 00007fca50587460 XMM05=00007fca50587478 00007fca505874c0
XMM06=00007fca505874b8 00007fca505874b0 XMM07=00007fca505874a8 00007fca505874a0
XMM08=0000000000000000 00007fca50412ee7 XMM09=0000000000000000 00007fca50412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
