last executing test programs:

686.339866ms ago: executing program 2 (id=2137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24a241, 0x0) (async)
unshare(0x20040600)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
writev(r0, 0x0, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073113400000000008510000002000000850000000500000095000000000000009500a5050000000087e6c0a1b9aec7962718d61a1ca3a8a857d3b63d10cdc84fa1aa09ccacbd3da6ec292570f6694e4e777cb9d287ca"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000680001b44a6a9d00fdffff7f00000000000000000c00020001000000150000000400040006000300"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r5, 0xfffffffc)
socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x22020600)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6(0xa, 0x3, 0x7)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)

622.036824ms ago: executing program 1 (id=2138):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4805}, 0x4)

618.029374ms ago: executing program 0 (id=2139):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001840)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044004)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000001740)=""/219, 0xdb}], 0x6}, 0x7}], 0x4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000030000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000009060108000000f5ffffff00050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

561.680469ms ago: executing program 2 (id=2140):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4)
getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000040))
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000400012800b00010065727370616e0000300002800500130001000000040012000500080003000000080015004f700700060011004e24000006000f"], 0x68}, 0x1, 0xd}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000f3030000000000008500000021000000b7000000000000009500000000c80f1270d3f1ee25bb54fb17000000dd738a0c7a38c1989cd13f949406682c991b086c1e4e2ee8fc93c96cf6005e99c4362a4796a539a39b2494de9f059e416992d6cfd5e2ab78b6f50332ae32d9c29db70a33c2d2e4d89b0202895c2f03c490b8c0fc6722871241"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6759}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5a06}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004)
r8 = socket$netlink(0x10, 0x3, 0x0)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
listen(r0, 0x1) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x44}}, 0x0) (async)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af297baebb0efa284da1403011a00", 0x0, 0x4, 0x81, 0x81}, 0x3c) (async)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000180)=0xadb, 0x4)

560.674459ms ago: executing program 0 (id=2141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001240)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x180, 0xa8, 0xffffffff, 0x180, 0x0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000640), {[{{@ip={@multicast2, @local, 0xff000000, 0xff, 'ip6gretap0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x44}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @port=0x4e21, @gre_key=0x9}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 'macvlan1\x00', 'veth1\x00', {0xff}, {}, 0x2, 0x0, 0x5}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@private=0xa010101, @icmp_id=0x65, @icmp_id=0x65}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x18}, 0xffffff00, 0xffffff00, 'vxcan1\x00', 'ip6gretap0\x00', {}, {0xff}, 0x89, 0x1, 0x2}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4e838eefe6ae50b7, 0x1}}, @common=@inet=@length={{0x28}, {0x80, 0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xa, [0x2c, 0xa, 0xc, 0x1, 0x26, 0x1d, 0x26, 0xe, 0x3c, 0x33, 0x20, 0x15, 0xe, 0x36, 0x9, 0x8], 0x1, 0x3, 0x1000100000000000}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 'virt_wifi0\x00', 'pim6reg0\x00', {}, {}, 0x2, 0x3, 0xa}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x4, 0x2, 0x0, 0x2, 0x4], 0x6}}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xd, @remote, @private=0xa010101, @gre_key=0x7f, @gre_key=0xfff9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f00000006c0)=@rc, 0x80, &(0x7f00000001c0)=[{&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000900)=""/124, 0x7c}], 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000ac0)=""/152, 0x98}], 0x2}, 0x8}], 0x2, 0x2, &(0x7f0000000800)={0x77359400})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="180800000030000000000000000004208510000006000000180200", @ANYRESOCT=r1, @ANYBLOB="00000000000000004e0002000020010018e8ff000000000000000000000000009500040000000000360a020000800000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffc056a12ef9665ee5c0dce5363e324c31987c5a"], 0x0, 0x10000}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000307000000ffe9ffffffff160005001a00"], 0x38}}, 0x1400c0d4)
r3 = socket(0x1e, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61129b000000000061139b0000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x23, &(0x7f0000000340), 0x8)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
read(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
recvmsg(r5, &(0x7f0000000080)={0x0, 0xffffffa8, 0x0}, 0x40002120)

558.883331ms ago: executing program 0 (id=2142):
r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r6, @ANYBLOB="3e0fe09976de849c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14)
r7 = socket(0x25, 0x5, 0x0)
recvfrom$ax25(r7, 0x0, 0x0, 0x2063, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x80, 0x26c5, 0x8, {{0x33, 0x4, 0x3, 0x38, 0xcc, 0x67, 0x0, 0xfa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0x4d, 0x0, 0x2, [0x101, 0x8a, 0x1c1, 0x8, 0xf88, 0xcb]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x3, [0x1, 0x54, 0x1, 0x1, 0x9, 0x3]}, @lsrr={0x83, 0x17, 0xef, [@multicast1, @local, @empty, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x5, [{@rand_addr=0x64010102, 0xea41}, {@rand_addr=0x64010100, 0x40}, {@private=0xa010100, 0x74}, {@multicast2, 0xfab}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x9}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x24, 0xcc, 0x1, 0x1, [{@empty, 0x790e}, {@local, 0xff}, {@multicast1, 0x1438000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0xe3, 0x22, 0x9, 0x4, @mcast1, @private1, 0x8000, 0x8, 0xa88b, 0xffffffff}}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2008014}, 0x4)
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x12, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x8000)

501.922221ms ago: executing program 1 (id=2143):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xf, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000010dc00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x0, 0x80001088, 0x73}, 0x2c)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x2, 0x5, 0x1c00000000000000, 0x9, 0x5, 0x10, 0x9}, 0x0, 0x0, 0x0, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04a24e", 0x3}], 0x1}, 0x1) (async)
sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04a24e", 0x3}], 0x1}, 0x1)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x30}], 0x1, 0x0, 0xffffffffffffff6f}, 0x2002)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0)

399.225938ms ago: executing program 2 (id=2144):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000002200)={0x7d, 0x1, 0xc, 0x3, 0x0, 0x81}) (async)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="b002000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000000000000000000000000000a000000000000000000000005000000050000000c000f0000000100000000002c001300fe8000000000000000000000000000bbac1414bb0000000000000000000000b215700af0e736a50e006123a79d903400000000000000000008000c001eca0000b60003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700300003c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8b1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200954c98ff0c647443b8d450888000014000d00ac1e00010000000000000000000000fe02e7bc7ea6e36099082e2c150000ac00070020010000000000000000000000000002640101010000000000000000000000004e2000ff00090000000000c0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000001000000000000000bf5a416000000000050000000000000007000000000000000100000000000000c300000000000000810000000000000002000000000000000100000001000000ff0100000000000000000000060000000100030300000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x8, 0x21, 0x0, @private, @broadcast, {[@generic={0x1, 0x2}, @rr={0x7, 0x3, 0x8f}]}}, @redirect={0x5, 0x2, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x0, 0x101, 0xffff, 0x65, 0x0, 0x1d, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x80000000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async, rerun: 64)
sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8090}, 0x8800) (rerun: 64)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r12=>0x0}) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) (async, rerun: 64)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="91f00000", @ANYRES16=r6, @ANYBLOB="200027bd7000fbdbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="0600ab008100000005001900010000003c00ac0080015630f2ca808099dfce4c1abc655e4ae4891eae8f07ebba4c0fc7c803251c48a38c59ed3e6c9dcf6a8f5d20afbd9043c57f1b299b929a0500e40000000000050029000a0000000a000600ffffffffffff0000"], 0x84}, 0x1, 0x0, 0x0, 0x4041015}, 0x40091) (async)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) (rerun: 64)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000300)={0x5, 0x7, 0x9cfa, 0x9, 0x9, 0x7fffffff, 0x3, 0x81}, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={[0x7fffffff]}, 0x8})

398.736718ms ago: executing program 1 (id=2145):
r0 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xc3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x638}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x88}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, &(0x7f0000000400), &(0x7f00000004c0)=""/78}, 0x20)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800850000004f0000000500860d00"/26], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0xffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000300))
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x8000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1, 0x0, 0x0, 0x24040841}, 0x0)

277.110512ms ago: executing program 2 (id=2146):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000032649a54a17a1919d37e5467836c066b02d210992b6a492a0e0d07d9536fd0c8b59ec2f001e286091352021fc08a3aeba7db6473043e79bfbd52c4faa103be4b527bd313073b8815affc0ab0"], 0x0}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)=@ethtool_flash={0x33, 0xffff, './file0\x00'}})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x701, 0x0, 0x0, {0x16}}, 0x14}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000032649a54a17a1919d37e5467836c066b02d210992b6a492a0e0d07d9536fd0c8b59ec2f001e286091352021fc08a3aeba7db6473043e79bfbd52c4faa103be4b527bd313073b8815affc0ab0"], 0x0}, 0x94) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x701, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) (async)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207, 0x11}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0) (async)

191.741704ms ago: executing program 0 (id=2147):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001840)=""/238, 0xee}], 0x2}}], 0x1, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044004)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/182, 0xb6}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000000600)=""/4112, 0x1010}, {&(0x7f0000001740)=""/219, 0xdb}], 0x6}, 0x7}], 0x4, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000030000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010800000000de000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

191.287501ms ago: executing program 1 (id=2148):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

140.61796ms ago: executing program 1 (id=2149):
r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r1 = socket(0x200000100000011, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', <r3=>r2, 0x20, 0x80, 0xc, 0x3, {{0x5a, 0x4, 0x1, 0x18, 0x168, 0x64, 0x0, 0x87, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x7, [{@private=0xa010101, 0x7}, {@empty, 0x3}]}, @cipso={0x86, 0x73, 0x3, [{0x6946f6d90be5d8c5, 0xc, "cc63a47771788994c159"}, {0x1, 0xf, "573cda80b4530609265d43475d"}, {0x7, 0xb, "d9c9d892412f1d0d31"}, {0x1, 0x9, "93e2456b15dfc1"}, {0x7, 0xffffffffffffff3f, "3ef3b0"}, {0x0, 0x4, "d2a4"}, {0x1, 0xb, "c88ac20ed3948272e3"}, {0x5, 0xc, "7ed8dbf310badc24082a"}, {0x7, 0xd, "f5bf8b04503de345d96721"}, {0x5, 0x11, "7217bff96ac525a1a8b5289b512c6a"}]}, @lsrr={0x83, 0x17, 0xaa, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @local]}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@loopback, 0x10000}, {@private=0xa010100, 0x6}]}, @cipso={0x86, 0x73, 0x0, [{0x1, 0x5, "cd9966"}, {0x6, 0xd, "09578d2f836cec6eb90c3b"}, {0x6, 0x11, "5e453af085098c78240bbf3f704e58"}, {0x1, 0x5, "95d3de"}, {0x4, 0x12, "30d79be1ad91127c18105ba55eef58d3"}, {0x7, 0x6, "01b815eb"}, {0x5, 0xb, "101b8758ed526e01fb"}, {0x2, 0x5, "b80050"}, {0x9, 0xc, "99f0a6eabac318f8120d"}, {0x7, 0x11, "16fc3276a5eee0dac22f1563efe907"}]}, @timestamp={0x44, 0xc, 0x8b, 0x0, 0x5, [0x7, 0x6]}, @rr={0x7, 0xb, 0xf9, [@local, @multicast2]}, @generic={0x83, 0xe, "60b3214f98bc0c43f8623c65"}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff2267, 0x100, 0x9, 0x300, 0xe, 0x5, r3})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0)

139.798857ms ago: executing program 0 (id=2150):
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}}, 0x0)

129.529252ms ago: executing program 2 (id=2151):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, 0x34, 0x1, 0x70bd2d, 0x25dfdbfe, {0x8}, [@generic="ebb09278463d3312768a445197fd4140e6d85d2b130a529e791134f400b9b7783f42d10c2354bf2f4b4bf62ff8e030b53e5cf1e6f16ebca28fd48681979be7929f9f5d54665cc92811a2dd46a552a38ef577ee516623de72aa259751a6e2abf80fb95e067f7bd36e42c431c7159df95d5cc428add709079ac2f219332b3044098968d30c3f43b02139555ffd13da436384586d4d78f62a3cbac6ba91d7190d184f0968322ab9f607", @nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48}, 0x4000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1e4, r2, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "862101a9d758cb671e0a3bf8bf"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d9f2c87f29d28520a61c2914ad"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e6413217ebfd"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x10, 0xa, "a3729665d0a0c847a0e8c038"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x24459faa1ca1519c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "866fbeb1e6c59fb98a9bd459d5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "38d7c273bf"}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "686b9b00a2d09f6bf309"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "ed595d262327b0c0936c8422"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "057bc610ae31e4a3423318095a"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, 'n4c'}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x9, 0x4, "22efb82e51"}, @NL80211_KEY_SEQ={0x13, 0x4, "c2834122daceb3ddbcca8d8b8d6295"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7d847867ba"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6f2fa7acea"}]]}, 0x1e4}}, 0x4) (async)
shutdown(0xffffffffffffffff, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x6c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x11) (async)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_proto_private(r4, 0x89e5, &(0x7f00000006c0)="64f43e8f39818b809cdcb72dad4454ad57665d4001d5e24ebe07d5e843b7930aea8df0a4a053c830944140c187345b4d56de734e5a2963f72f7eda4cb0bc423e27ee072116f43cd8ff9ee47a5646a4512a839f5e7fb0a5d9c018e52000c83a34d00c4edfe629c0120fce2a3ec01343572f66a3759af6c297c18a3a31ded41e6c6f4352c7f95109c954") (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r1) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x90, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0xf3e2b097f5beb1c3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
r8 = gettid()
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000009c0)=r8) (async)
listen(r5, 0xffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r2, 0x2, 0x70bd2c, 0x4, {{}, {@void, @val={0xc, 0x99, {0x2, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x40) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000b40)={'batadv_slave_1\x00', <r10=>0x0}) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=r1, 0x26, 0x0, 0x9, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], <r11=>0x0}, 0x40) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0xe7, <r12=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000cc0)={@ifindex=r10, r0, 0x2e, 0x2078, 0x0, @void, @void, @value=r12, @void, r11}, 0x20)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000d40)={'veth0_virt_wifi\x00'})
connect$bt_rfcomm(r0, &(0x7f0000000d80)={0x1f, @any, 0x80}, 0xa)
getsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) (async)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000001f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000e80)=@getsadinfo={0x10bc, 0x23, 0x4, 0x70bd25, 0x25dfdbfe, 0x0, [@algo_aead={0x54, 0x12, {{'gcm(aes)\x00'}, 0x40, 0x100, "54be3da23d3664b7"}}, @proto={0x5, 0x19, 0x32}, @algo_auth_trunc={0x104c, 0x14, {{'sha224-asm\x00'}, 0x8000, 0xc0, "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"}}]}, 0x10bc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x880)

898.541µs ago: executing program 0 (id=2152):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d344600000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x4d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0xfffffffffffffef1, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}], 0x4000000000001b7, 0x120, 0x0)

319.063µs ago: executing program 2 (id=2153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054)

0s ago: executing program 1 (id=2154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000100)=0x9, 0x4)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r3}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ishtp_dump\x00', r3, 0x0, 0x122e}, 0x18) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x4, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}]}]}}]}, 0x44}}, 0x40040)

kernel console output (not intermixed with test programs):

eout
[  121.179012][ T9330] netlink: 'syz.1.886': attribute type 3 has an invalid length.
[  121.311247][ T9337] netlink: 'syz.1.888': attribute type 1 has an invalid length.
[  121.343253][ T9337] 8021q: adding VLAN 0 to HW filter on device bond16
[  121.361254][ T9335] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  121.738105][ T9352] netlink: 'syz.2.891': attribute type 4 has an invalid length.
[  121.748364][ T9352] netlink: 'syz.2.891': attribute type 4 has an invalid length.
[  121.815609][ T9354] syzkaller0: entered promiscuous mode
[  121.817487][ T9354] syzkaller0: entered allmulticast mode
[  122.957982][   T54] Bluetooth: hci0: command tx timeout
[  123.487089][ T5837] erspan0: left allmulticast mode
[  123.489585][ T5837] erspan0: left promiscuous mode
[  123.493368][ T5837] bridge0: port 2(erspan0) entered disabled state
[  123.527743][ T5837] team0: left allmulticast mode
[  123.529691][ T5837] team_slave_0: left allmulticast mode
[  123.549552][ T5837] team_slave_1: left allmulticast mode
[  123.551815][ T5837] team0: left promiscuous mode
[  123.569126][ T5837] team_slave_0: left promiscuous mode
[  123.584236][ T5837] team_slave_1: left promiscuous mode
[  123.586997][ T5837] bridge0: port 3(team0) entered disabled state
[  123.604501][ T5837] bridge_slave_0: left allmulticast mode
[  123.606856][ T5837] bridge_slave_0: left promiscuous mode
[  123.609429][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.618832][ T5837] veth3: left allmulticast mode
[  123.627282][ T5837] bridge2: port 1(veth3) entered disabled state
[  124.030391][ T5837] bond2 (unregistering): (slave geneve2): Releasing active interface
[  124.117078][ T5837] team0: Port device bridge1 removed
[  124.505781][ T5837] bond1 (unregistering): Released all slaves
[  124.601443][ T5837] bond2 (unregistering): Released all slaves
[  124.602390][ T9388] __nla_validate_parse: 12 callbacks suppressed
[  124.602405][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  124.676981][ T5837] bond3 (unregistering): Released all slaves
[  124.683920][ T5837] bond4 (unregistering): Released all slaves
[  124.753612][ T5837] bond5 (unregistering): Released all slaves
[  124.771463][ T9387] netlink: 830 bytes leftover after parsing attributes in process `syz.0.899'.
[  124.856626][ T5837] : left promiscuous mode
[  124.964023][ T9402] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  124.971782][ T9400] netlink: 'syz.1.903': attribute type 9 has an invalid length.
[  124.976260][ T9400] netlink: 'syz.1.903': attribute type 6 has an invalid length.
[  124.981118][ T5837] tipc: Left network mode
[  125.034562][ T5203] Bluetooth: hci0: command tx timeout
[  125.163343][ T9404] IPv6: sit1: Disabled Multicast RS
[  125.176127][ T9414] netlink: 'syz.2.906': attribute type 21 has an invalid length.
[  125.178838][ T9414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.906'.
[  125.413004][ T5837] hsr_slave_0: left promiscuous mode
[  125.415378][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.418102][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.430431][ T5837] veth1_macvtap: left promiscuous mode
[  125.435415][ T5837] veth0_macvtap: left promiscuous mode
[  125.516363][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'.
[  125.522689][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.910'.
[  125.674316][ T5837] team0 (unregistering): Port device team_slave_1 removed
[  125.704522][ T5837] team0 (unregistering): Port device team_slave_0 removed
[  126.069211][ T9436] syzkaller0: entered promiscuous mode
[  126.082660][ T9436] syzkaller0: entered allmulticast mode
[  126.210366][ T9442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.915'.
[  126.269101][ T9445] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  127.578310][ T9445] vlan0: entered promiscuous mode
[  127.587598][ T9445] batadv0: entered promiscuous mode
[  127.808499][ T5837] IPVS: stop unused estimator thread 0...
[  127.816008][ T9451] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  127.822651][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  127.829145][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'.
[  127.833304][ T9462] netlink: 'syz.1.920': attribute type 4 has an invalid length.
[  127.945273][ T9467] bridge1: entered allmulticast mode
[  128.037680][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.925'.
[  128.127149][ T9482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  128.137088][ T9482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  128.155873][ T9484] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  128.158548][ T9484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'.
[  128.485486][ T9497] netlink: 'syz.0.934': attribute type 5 has an invalid length.
[  128.489579][ T9497] netlink: 'syz.0.934': attribute type 50 has an invalid length.
[  128.783232][ T9504] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20001
[  128.922498][ T9518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.925285][ T9516] syzkaller0: entered promiscuous mode
[  128.927213][ T9516] syzkaller0: entered allmulticast mode
[  128.959285][ T9518] tipc: Resetting bearer <eth:syzkaller0>
[  128.984961][ T9518] tipc: Disabling bearer <eth:syzkaller0>
[  129.072151][ T9527] veth0_to_bond: entered allmulticast mode
[  129.140234][ T9532] sctp: [Deprecated]: syz.2.945 (pid 9532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.140234][ T9532] Use struct sctp_sack_info instead
[  129.532065][ T9549] IPVS: Scheduler module ip_vs_sip not found
[  129.569386][ T9549] IPVS: Scheduler module ip_vs_sip not found
[  130.935530][ T9567] net_ratelimit: 24 callbacks suppressed
[  130.935546][ T9567] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[  131.120981][ T9575] __nla_validate_parse: 8 callbacks suppressed
[  131.120992][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.956'.
[  131.161949][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.957'.
[  131.170966][ T9589] netlink: 88 bytes leftover after parsing attributes in process `syz.0.959'.
[  131.250878][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'.
[  131.482333][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'.
[  131.489633][ T9607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'.
[  131.580797][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'.
[  131.597564][ T9614] bridge_slave_0: left allmulticast mode
[  131.600222][ T9614] bridge_slave_0: left promiscuous mode
[  131.603125][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.611101][ T9614] bridge_slave_1: left allmulticast mode
[  131.613711][ T9614] bridge_slave_1: left promiscuous mode
[  131.618265][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.628308][ T9614] bond0: (slave bond_slave_0): Releasing backup interface
[  131.637709][ T9614] bond0: (slave bond_slave_1): Releasing backup interface
[  131.659892][ T9614] team0: Port device team_slave_0 removed
[  131.673325][ T9614] team0: Port device team_slave_1 removed
[  131.681308][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.685773][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.702454][ T9611] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.707705][ T9612] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.732896][ T9615] team0: Mode changed to "broadcast"
[  131.803725][ T9622] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[  131.827905][ T9622] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.899049][ T9632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.969'.
[  131.905377][ T9632] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  131.960407][ T9636] netlink: 9 bytes leftover after parsing attributes in process `syz.1.972'.
[  131.965489][ T9636] gretap0: entered promiscuous mode
[  131.970932][ T9636] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001
[  132.066448][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'.
[  132.171726][ T9647] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  132.238086][ T9649] netlink: 'syz.2.976': attribute type 2 has an invalid length.
[  132.522952][ T9657] lo speed is unknown, defaulting to 1000
[  132.525876][ T9657] lo speed is unknown, defaulting to 1000
[  132.529303][ T9657] lo speed is unknown, defaulting to 1000
[  132.547415][ T9657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  132.567818][ T9657] lo speed is unknown, defaulting to 1000
[  132.570428][ T9657] lo speed is unknown, defaulting to 1000
[  132.576149][ T9657] lo speed is unknown, defaulting to 1000
[  132.810891][ T9674] sctp: [Deprecated]: syz.0.982 (pid 9674) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.810891][ T9674] Use struct sctp_sack_info instead
[  132.879282][ T9678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.882241][ T9678] syzkaller0: entered promiscuous mode
[  132.885075][ T9678] syzkaller0: entered allmulticast mode
[  132.900982][ T9677] tipc: Resetting bearer <eth:syzkaller0>
[  132.916945][ T9677] tipc: Disabling bearer <eth:syzkaller0>
[  133.015500][ T9686] bond13: (slave vcan0): The slave device specified does not support setting the MAC address
[  133.020771][ T9686] bond13: (slave vcan0): Error -95 calling set_mac_address
[  133.088512][ T9689] netlink: 'syz.1.985': attribute type 16 has an invalid length.
[  133.097397][ T9689] netlink: 'syz.1.985': attribute type 17 has an invalid length.
[  133.124919][ T9691] openvswitch: netlink: Key type 141 is out of range max 32
[  133.140411][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.147791][ T9689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.788361][ T9737] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[  133.790894][ T9737] netlink: 'syz.1.999': attribute type 1 has an invalid length.
[  133.825061][ T9741] netlink: 'syz.1.1000': attribute type 9 has an invalid length.
[  133.872209][ T9739] netlink: 'syz.0.998': attribute type 10 has an invalid length.
[  133.879891][ T9739] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  134.324771][ T9766] netlink: 'syz.0.1004': attribute type 11 has an invalid length.
[  134.331443][ T9767] netlink: 'syz.0.1004': attribute type 11 has an invalid length.
[  134.638777][ T9780] netlink: 'syz.2.1009': attribute type 12 has an invalid length.
[  134.936328][ T9797] 8021q: adding VLAN 0 to HW filter on device bond14
[  135.029172][ T9806] lo speed is unknown, defaulting to 1000
[  135.036256][ T9806] lo speed is unknown, defaulting to 1000
[  135.065766][ T9810] netlink: 'syz.1.1012': attribute type 1 has an invalid length.
[  135.723047][ T9872] 8021q: adding VLAN 0 to HW filter on device bond15
[  135.833019][ T9884] ipt_ECN: cannot use operation on non-tcp rule
[  136.140528][ T9900] __nla_validate_parse: 41 callbacks suppressed
[  136.140541][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'.
[  136.151691][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'.
[  136.348616][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  136.356167][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  136.503269][ T9918] pim6reg1: entered promiscuous mode
[  136.505640][ T9918] pim6reg1: entered allmulticast mode
[  136.656635][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1040'.
[  136.666003][ T9923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'.
[  136.675055][ T9922] lo speed is unknown, defaulting to 1000
[  136.677868][ T9922] lo speed is unknown, defaulting to 1000
[  136.866737][ T9941] validate_nla: 4 callbacks suppressed
[  136.866750][ T9941] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  136.948784][ T9941] 8021q: adding VLAN 0 to HW filter on device bond17
[  136.978189][ T9950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1046'.
[  136.982114][ T9950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.985435][ T9950] IPv6: NLM_F_CREATE should be set when creating new route
[  137.000432][ T9946] bond17: (slave veth7): Enslaving as an active interface with a down link
[  137.012123][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'.
[  137.019172][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1044'.
[  137.031079][ T9941] 8021q: adding VLAN 0 to HW filter on device batadv3
[  137.034312][ T9941] bond17: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  137.062852][ T9950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  137.126816][ T9948] lo speed is unknown, defaulting to 1000
[  137.131116][ T9948] lo speed is unknown, defaulting to 1000
[  137.179554][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'.
[  137.379028][ T9963] lo speed is unknown, defaulting to 1000
[  137.383273][ T9963] lo speed is unknown, defaulting to 1000
[  138.001413][ T9973] netlink: 'syz.0.1051': attribute type 1 has an invalid length.
[  138.054496][ T9975] netlink: 'syz.0.1051': attribute type 1 has an invalid length.
[  138.098621][ T9979] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  138.101221][ T9979] netlink: 'syz.0.1052': attribute type 4 has an invalid length.
[  138.113116][ T9981] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  138.120994][ T9981] netlink: 'syz.0.1052': attribute type 4 has an invalid length.
[  138.139686][ T9981] bond0: entered promiscuous mode
[  138.153203][ T9981] bond0: left promiscuous mode
[  138.175976][ T9979] bond0: entered promiscuous mode
[  138.179125][ T9979] bond0: left promiscuous mode
[  138.402705][T10004] sctp: [Deprecated]: syz.2.1058 (pid 10004) Use of int in max_burst socket option.
[  138.402705][T10004] Use struct sctp_assoc_value instead
[  138.522701][T10015] lo speed is unknown, defaulting to 1000
[  138.531808][T10015] lo speed is unknown, defaulting to 1000
[  138.578406][T10025] batadv3: entered allmulticast mode
[  139.055587][T10046] netlink: 'syz.2.1070': attribute type 10 has an invalid length.
[  139.207814][T10053] IPv6: sit2: Disabled Multicast RS
[  139.210906][T10053] sit2: entered allmulticast mode
[  139.342707][T10062] wg1: entered promiscuous mode
[  139.353016][T10062] wg1: entered allmulticast mode
[  139.492676][T10073] netlink: 'syz.2.1082': attribute type 1 has an invalid length.
[  139.520309][T10074] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  139.524078][T10074] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  139.527357][T10074] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  139.530586][T10074] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  139.539025][T10074] bond3: (slave geneve2): making interface the new active one
[  139.542148][T10074] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  139.545920][T10080] netlink: 'syz.0.1083': attribute type 4 has an invalid length.
[  139.555358][T10073] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.781110][T10112] x_tables: duplicate underflow at hook 4
[  140.507508][T10184] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  140.512371][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.515843][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.589469][T10190] vlan0: entered promiscuous mode
[  140.591291][T10190] vlan0: entered allmulticast mode
[  140.593018][T10190] hsr_slave_1: entered allmulticast mode
[  140.790591][T10209] xt_hashlimit: size too large, truncated to 1048576
[  140.821437][T10212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  141.895694][T10223] validate_nla: 3 callbacks suppressed
[  141.895705][T10223] netlink: 'syz.0.1110': attribute type 10 has an invalid length.
[  141.961285][T10228] __nla_validate_parse: 23 callbacks suppressed
[  141.961297][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'.
[  141.984024][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'.
[  142.111367][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'.
[  142.186768][T10249] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1118'.
[  142.235537][T10254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'.
[  142.246880][T10254] netlink: 'syz.2.1120': attribute type 12 has an invalid length.
[  142.260144][T10257] netlink: 'syz.0.1119': attribute type 6 has an invalid length.
[  142.263555][T10257] netlink: 'syz.0.1119': attribute type 7 has an invalid length.
[  142.267265][T10257] netlink: 'syz.0.1119': attribute type 8 has an invalid length.
[  142.278154][T10251] C: entered allmulticast mode
[  142.280218][T10251] tunl0: entered allmulticast mode
[  142.282538][T10251] gre0: entered allmulticast mode
[  142.285030][T10251] gretap0: entered allmulticast mode
[  142.287392][T10251] erspan0: entered allmulticast mode
[  142.289891][T10251] ip_vti0: entered allmulticast mode
[  142.292348][T10251] ip6_vti0: entered allmulticast mode
[  142.298627][T10251] sit0: entered allmulticast mode
[  142.300901][T10251] ip6tnl0: entered allmulticast mode
[  142.303196][T10251] ip6gre0: entered allmulticast mode
[  142.305996][T10251] ip6gretap0: entered allmulticast mode
[  142.308410][T10251] nlmon0: entered allmulticast mode
[  142.310584][T10251] caif0: entered allmulticast mode
[  142.312786][T10251] batadv0: entered allmulticast mode
[  142.316987][T10251] veth0: entered allmulticast mode
[  142.318789][T10251] veth1: entered allmulticast mode
[  142.320639][T10251] wg0: entered allmulticast mode
[  142.322655][T10251] wg1: entered allmulticast mode
[  142.325091][T10251] : entered allmulticast mode
[  142.327206][T10251] bridge_slave_0: entered allmulticast mode
[  142.329708][T10251] veth1_to_bridge: entered allmulticast mode
[  142.332824][T10251] bridge_slave_1: entered allmulticast mode
[  142.338862][T10251] veth0_to_bond: entered allmulticast mode
[  142.341720][T10251] @: entered allmulticast mode
[  142.345174][T10251] veth1_to_bond: entered allmulticast mode
[  142.348389][T10251] bond_slave_1: entered allmulticast mode
[  142.351435][T10251] veth0_to_team: entered allmulticast mode
[  142.356097][T10251] team_slave_0: entered allmulticast mode
[  142.359657][T10251] veth1_to_team: entered allmulticast mode
[  142.362386][T10251] team_slave_1: entered allmulticast mode
[  142.365194][T10251] veth0_to_batadv: entered allmulticast mode
[  142.367536][T10251] batadv_slave_0: entered allmulticast mode
[  142.370063][T10251] xfrm0: entered allmulticast mode
[  142.372455][T10251] veth0_to_hsr: entered allmulticast mode
[  142.378290][T10251] hsr_slave_0: entered allmulticast mode
[  142.380928][T10251] veth1_to_hsr: entered allmulticast mode
[  142.384340][T10251] hsr0: entered allmulticast mode
[  142.386813][T10251] veth1_virt_wifi: entered allmulticast mode
[  142.389651][T10251] veth0_virt_wifi: entered allmulticast mode
[  142.392338][T10251] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  142.396318][T10251] geneve0: entered allmulticast mode
[  142.398913][T10251] geneve1: entered allmulticast mode
[  142.401793][T10251] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  142.405520][T10251] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  142.408669][T10251] macvlan2: entered allmulticast mode
[  142.411052][T10251] macvlan3: entered allmulticast mode
[  142.413540][T10251] vxlan0: entered allmulticast mode
[  142.416044][T10251] bond1: entered allmulticast mode
[  142.418118][T10251] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  142.420827][T10251] ip6gre1: entered allmulticast mode
[  142.423031][T10251] gretap1: entered allmulticast mode
[  142.425246][T10251] ip6gre2: entered allmulticast mode
[  142.427089][T10251] syztnl1: entered allmulticast mode
[  142.429065][T10251] bond2: entered allmulticast mode
[  142.431307][T10251] gretap2: entered allmulticast mode
[  142.433918][T10251] geneve2: entered allmulticast mode
[  142.436536][T10251] bond3: entered allmulticast mode
[  142.438718][T10251] veth1_to_bond.1: entered allmulticast mode
[  142.441041][T10251] macsec0: entered allmulticast mode
[  142.443453][T10251] bond4: entered allmulticast mode
[  142.445765][T10251] vxlan1: entered allmulticast mode
[  142.448240][T10251] vlan2: entered allmulticast mode
[  142.450807][T10251] bond0: entered allmulticast mode
[  142.453219][T10251] vti0: entered allmulticast mode
[  142.455462][T10251] ip6erspan0: entered allmulticast mode
[  142.457412][T10251] ipvlan2: entered allmulticast mode
[  142.459204][T10251] ipvlan3: entered allmulticast mode
[  142.461003][T10251] netdevsim netdevsim0 eth0: entered allmulticast mode
[  142.463743][T10251] netdevsim netdevsim0 eth1: entered allmulticast mode
[  142.466366][T10251] netdevsim netdevsim0 eth2: entered allmulticast mode
[  142.469044][T10251] netdevsim netdevsim0 eth3: entered allmulticast mode
[  142.471597][T10251] syztnl2: entered allmulticast mode
[  142.473642][T10251] ip6gre3: entered allmulticast mode
[  142.475764][T10251] vlan3: entered allmulticast mode
[  142.477528][T10251] bridge1: entered allmulticast mode
[  142.479282][T10251] bond5: entered allmulticast mode
[  142.481222][T10251] geneve3: entered allmulticast mode
[  142.483616][T10251] bond6: entered allmulticast mode
[  142.486272][T10251] bond7: entered allmulticast mode
[  142.488939][T10251] erspan1: entered allmulticast mode
[  142.491534][T10251] mac80211_hwsim hwsim21 wlan3: entered allmulticast mode
[  142.495044][T10251] erspan0.4094: entered allmulticast mode
[  142.497669][T10251] macvlan0: entered allmulticast mode
[  142.500261][T10251] bond8: entered allmulticast mode
[  142.502877][T10251] ip6gretap1: entered allmulticast mode
[  142.505736][T10251] bridge2: entered allmulticast mode
[  142.508235][T10251] vlan4: entered allmulticast mode
[  142.510578][T10251] ip6gretap2: entered allmulticast mode
[  142.513039][T10251] bridge3: entered allmulticast mode
[  142.515583][T10251] bond9: entered allmulticast mode
[  142.517919][T10251] veth2: entered allmulticast mode
[  142.520571][T10251] veth3: entered allmulticast mode
[  142.523144][T10251] gre1: entered allmulticast mode
[  142.525573][T10251] bridge4: entered allmulticast mode
[  142.527876][T10251] bond10: entered allmulticast mode
[  142.529817][T10251] gretap3: entered allmulticast mode
[  142.532157][T10251] macvtap0: entered allmulticast mode
[  142.534806][T10251] bond11: entered allmulticast mode
[  142.537071][T10251] veth4: entered allmulticast mode
[  142.540041][T10251] veth5: entered allmulticast mode
[  142.543261][T10251] veth6: entered allmulticast mode
[  142.546676][T10251] veth7: entered allmulticast mode
[  142.550144][T10251] bond12: entered allmulticast mode
[  142.553056][T10251] veth8: entered allmulticast mode
[  142.555837][T10251] veth9: entered allmulticast mode
[  142.558961][T10251] gre2: entered allmulticast mode
[  142.561584][T10251] macvlan1: entered allmulticast mode
[  142.563612][T10251] macvlan4: entered allmulticast mode
[  142.566874][T10251] bridge5: entered allmulticast mode
[  142.570328][T10251] sit1: entered allmulticast mode
[  142.573426][T10251] ipip0: entered allmulticast mode
[  142.576548][T10251] ip6erspan1: entered allmulticast mode
[  142.578458][T10251] bond13: entered allmulticast mode
[  142.580308][T10251] mac80211_hwsim hwsim29 wlan4: entered allmulticast mode
[  142.584228][T10251] bond14: entered allmulticast mode
[  142.587488][T10251] bond15: entered allmulticast mode
[  142.590714][T10251] vxlan2: entered allmulticast mode
[  142.593130][T10251] ip6tnl1: entered allmulticast mode
[  142.595796][T10251] bond16: entered allmulticast mode
[  142.598095][T10251] veth10: entered allmulticast mode
[  142.600471][T10251] veth11: entered allmulticast mode
[  142.603114][T10251] mac80211_hwsim hwsim31 wlan5: entered allmulticast mode
[  142.607101][T10251] vlan0: left promiscuous mode
[  142.641013][T10262] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1122'.
[  142.671404][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  142.675689][T10267] netlink: 'syz.2.1123': attribute type 9 has an invalid length.
[  142.682620][T10267] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[  142.686398][T10267] macvlan2: entered allmulticast mode
[  142.688212][T10267] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  142.718590][T10269] netlink: 'syz.0.1124': attribute type 3 has an invalid length.
[  142.730023][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1124'.
[  142.739247][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'.
[  142.742295][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'.
[  142.850462][T10280] mac80211_hwsim hwsim4 ": renamed from wlan0
[  142.892765][T10287] bridge0: port 1(syz_tun) entered blocking state
[  142.895809][T10286] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  142.898787][T10287] bridge0: port 1(syz_tun) entered disabled state
[  142.901044][T10287] syz_tun: entered allmulticast mode
[  142.909463][T10287] syz_tun: entered promiscuous mode
[  142.912713][T10287] bridge0: port 1(syz_tun) entered blocking state
[  142.915621][T10287] bridge0: port 1(syz_tun) entered forwarding state
[  142.966459][T10293] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.999201][T10295] bond0: entered promiscuous mode
[  143.010012][T10295] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  143.015069][T10295] bond0: left promiscuous mode
[  143.157209][T10309] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  143.209476][T10309] bond4: (slave gretap1): making interface the new active one
[  143.213133][T10309] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  143.231853][T10309] vlan3: entered allmulticast mode
[  143.234313][T10309] bond4: entered allmulticast mode
[  143.236259][T10309] gretap1: entered allmulticast mode
[  143.239266][T10309] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  143.259698][T10318] xt_hashlimit: size too large, truncated to 1048576
[  143.275898][T10316] Unsupported ieee802154 address type: 0
[  143.457939][T10332] netlink: 'syz.2.1145': attribute type 83 has an invalid length.
[  143.480279][ T7880] lo speed is unknown, defaulting to 1000
[  143.482186][ T7880] syz2: Port: 1 Link DOWN
[  143.488274][ T7880] lo speed is unknown, defaulting to 1000
[  143.491194][ T7880] syz2: Port: 1 Link ACTIVE
[  143.582677][T10339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  143.657088][T10348] lo speed is unknown, defaulting to 1000
[  143.660898][T10348] lo speed is unknown, defaulting to 1000
[  143.779277][T10350] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001
[  143.792262][T10359] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  143.796551][T10359] batman_adv: batadv0: Adding interface: virt_wifi0
[  143.799145][T10359] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1596.
[  143.805922][T10359] batman_adv: batadv0: Interface activated: virt_wifi0
[  143.854581][T10364] lo speed is unknown, defaulting to 1000
[  143.857296][T10364] lo speed is unknown, defaulting to 1000
[  144.160091][T10387] lo speed is unknown, defaulting to 1000
[  144.189012][T10387] lo speed is unknown, defaulting to 1000
[  144.463299][T10406] lo speed is unknown, defaulting to 1000
[  144.486313][T10406] lo speed is unknown, defaulting to 1000
[  144.486500][T10408] lo speed is unknown, defaulting to 1000
[  144.558900][T10408] lo speed is unknown, defaulting to 1000
[  144.952389][T10433] vlan0: entered promiscuous mode
[  144.998255][T10436] lo speed is unknown, defaulting to 1000
[  145.001201][T10436] lo speed is unknown, defaulting to 1000
[  145.155274][T10447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  145.240026][T10453] Bluetooth: MGMT ver 1.23
[  145.519061][T10461] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  145.522360][T10461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.540170][T10461] macsec2: entered promiscuous mode
[  145.542683][T10461] macsec2: entered allmulticast mode
[  145.813135][T10471] lo speed is unknown, defaulting to 1000
[  145.817069][T10471] lo speed is unknown, defaulting to 1000
[  146.503168][T10519] lo speed is unknown, defaulting to 1000
[  146.507055][T10519] lo speed is unknown, defaulting to 1000
[  146.703723][T10524] macsec1: entered promiscuous mode
[  146.708639][T10524] erspan0: entered promiscuous mode
[  146.710953][T10524] macsec1: entered allmulticast mode
[  146.763722][T10537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.977725][T10549] C: left allmulticast mode
[  146.983052][T10549] tunl0: left allmulticast mode
[  146.987551][T10549] gre0: left allmulticast mode
[  146.992112][T10549] gretap0: left allmulticast mode
[  147.000662][T10548] tipc: Can't bind to reserved service type 1
[  147.003412][T10549] ip_vti0: left allmulticast mode
[  147.009323][T10549] ip6_vti0: left allmulticast mode
[  147.012596][T10549] sit0: left allmulticast mode
[  147.018775][T10549] ip6tnl0: left allmulticast mode
[  147.021834][T10549] ip6gre0: left allmulticast mode
[  147.025415][T10549] ip6gretap0: left allmulticast mode
[  147.028727][T10549] nlmon0: left allmulticast mode
[  147.032132][T10549] caif0: left allmulticast mode
[  147.036765][T10549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.045866][T10554] validate_nla: 42 callbacks suppressed
[  147.045881][T10554] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  147.046972][T10551] __nla_validate_parse: 19 callbacks suppressed
[  147.046986][T10551] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1198'.
[  147.071865][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'.
[  147.084195][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'.
[  147.101623][T10557] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1200'.
[  147.237771][T10573] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  147.282597][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'.
[  147.442717][T10588] netlink: 'syz.1.1210': attribute type 1 has an invalid length.
[  147.467339][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'.
[  147.474114][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'.
[  147.551879][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1212'.
[  147.753497][T10612] netlink: 'syz.2.1215': attribute type 10 has an invalid length.
[  147.758318][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1212'.
[  147.766213][T10612] batman_adv: batadv0: Adding interface: team0
[  147.768518][T10612] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.776726][T10612] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  147.916245][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1218'.
[  148.171323][T10634] hsr_slave_0: left promiscuous mode
[  148.174293][T10634] hsr_slave_1: left promiscuous mode
[  148.236006][T10635] lo speed is unknown, defaulting to 1000
[  148.239491][T10635] lo speed is unknown, defaulting to 1000
[  148.699829][T10650] geneve1: mtu less than device minimum
[  148.817751][T10652] netlink: 'syz.1.1228': attribute type 11 has an invalid length.
[  149.237800][   T24] IPVS: starting estimator thread 0...
[  149.240236][T10676] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  149.250380][T10676] vlan3: entered promiscuous mode
[  149.252155][T10676] bridge0: entered promiscuous mode
[  149.256328][T10676] vlan3: entered allmulticast mode
[  149.258835][T10676] bridge0: entered allmulticast mode
[  149.345293][T10677] IPVS: using max 80 ests per chain, 192000 per kthread
[  150.330122][T10709] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  150.340770][   T24] lo speed is unknown, defaulting to 1000
[  150.343282][   T24] syz2: Port: 1 Link DOWN
[  150.913265][T10741] x9: renamed from bridge_slave_0
[  150.986953][T10747] syzkaller1: entered promiscuous mode
[  150.988976][T10747] syzkaller1: entered allmulticast mode
[  151.016229][T10749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.042135][T10749] tipc: Resetting bearer <eth:syzkaller0>
[  151.048320][T10748] tipc: Disabling bearer <eth:syzkaller0>
[  151.245854][T10766] netlink: 'syz.0.1257': attribute type 4 has an invalid length.
[  151.833434][T10803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.844006][T10803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  151.880594][T10809] netlink: 'syz.2.1270': attribute type 12 has an invalid length.
[  151.925012][T10803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.928647][T10803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  151.939174][T10811] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  151.950595][T10809] 8021q: adding VLAN 0 to HW filter on device batadv2
[  151.975911][T10809] team0: Port device batadv2 added
[  152.057341][T10803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.061755][T10803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  152.113171][T10803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.118683][T10803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  152.138340][T10815] __nla_validate_parse: 27 callbacks suppressed
[  152.138352][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1273'.
[  152.198936][T10803] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  152.202824][T10803] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  152.231578][T10803] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  152.235670][T10803] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  152.268573][T10803] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  152.271555][T10803] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  152.293240][T10803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  152.303899][T10803] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  152.487463][T10837] netlink: 'syz.1.1279': attribute type 3 has an invalid length.
[  152.622992][T10844] netlink: 'syz.1.1281': attribute type 1 has an invalid length.
[  152.636047][T10844] netlink: 'syz.1.1281': attribute type 10 has an invalid length.
[  152.639124][T10844] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1281'.
[  152.664940][T10844] lo: entered allmulticast mode
[  152.673010][T10844] tunl0: entered allmulticast mode
[  152.680708][T10844] gre0: entered allmulticast mode
[  152.701429][T10844] gretap0: left promiscuous mode
[  152.703195][T10844] gretap0: entered allmulticast mode
[  152.716718][T10844] erspan0: entered allmulticast mode
[  152.721106][T10844] ip_vti0: entered allmulticast mode
[  152.730575][T10844] ip6_vti0: entered allmulticast mode
[  152.740667][T10844] sit0: entered allmulticast mode
[  152.757743][T10844] ip6tnl0: entered allmulticast mode
[  152.760999][T10844] ip6gre0: entered allmulticast mode
[  152.770786][T10844] ip6gretap0: entered allmulticast mode
[  152.780821][T10844] bond0: entered allmulticast mode
[  152.785108][T10844] nlmon0: entered allmulticast mode
[  152.787435][T10844] caif0: entered allmulticast mode
[  152.789671][T10844] batadv0: entered allmulticast mode
[  152.796218][T10844] veth0: entered allmulticast mode
[  152.798519][T10844] veth1: entered allmulticast mode
[  152.800595][T10844] wg0: entered allmulticast mode
[  152.802640][T10844] wg1: entered allmulticast mode
[  152.805343][T10844] wg2: entered allmulticast mode
[  152.807553][T10844] veth0_to_bridge: entered allmulticast mode
[  152.810559][T10844] bond_slave_0: entered allmulticast mode
[  152.813081][T10844] veth1_to_bond: entered allmulticast mode
[  152.816091][T10844] bond_slave_1: entered allmulticast mode
[  152.818652][T10844] veth0_to_team: entered allmulticast mode
[  152.821213][T10844] team_slave_0: entered allmulticast mode
[  152.824790][T10844] veth1_to_team: entered allmulticast mode
[  152.831405][T10844] team_slave_1: entered allmulticast mode
[  152.836329][T10844] veth0_to_batadv: entered allmulticast mode
[  152.839104][T10844] batadv_slave_0: entered allmulticast mode
[  152.848641][T10844] veth1_to_batadv: entered allmulticast mode
[  152.851486][T10844] : entered allmulticast mode
[  152.855158][T10844] xfrm0: entered allmulticast mode
[  152.857619][T10844] veth0_to_hsr: entered allmulticast mode
[  152.860488][T10844] hsr_slave_0: entered allmulticast mode
[  152.863088][T10844] veth1_to_hsr: entered allmulticast mode
[  152.865897][T10844] hsr_slave_1: entered allmulticast mode
[  152.868498][T10844] hsr0: entered allmulticast mode
[  152.870814][T10844] veth1_virt_wifi: entered allmulticast mode
[  152.873043][T10844] veth0_virt_wifi: entered allmulticast mode
[  152.876009][T10844] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  152.879149][T10844] veth1_vlan: entered allmulticast mode
[  152.881541][T10844] veth0_vlan: entered allmulticast mode
[  152.884861][T10844] vlan0: entered allmulticast mode
[  152.887217][T10844] vlan1: entered allmulticast mode
[  152.889123][T10844] macvlan1: entered allmulticast mode
[  152.890935][T10844] ipvlan0: entered allmulticast mode
[  152.892727][T10844] ipvlan1: entered allmulticast mode
[  152.895223][T10844] geneve0: entered allmulticast mode
[  152.897747][T10844] geneve1: entered allmulticast mode
[  152.902098][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'.
[  152.907970][T10844] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  152.914415][T10844] ip6gre1: entered allmulticast mode
[  152.916705][T10844] hsr1: entered allmulticast mode
[  152.918850][T10844] batadv1: entered allmulticast mode
[  152.921143][T10844] geneve2: entered allmulticast mode
[  152.923459][T10844] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode
[  152.926720][T10844] mac80211_hwsim hwsim9 wlan3: entered allmulticast mode
[  152.929645][T10844] : entered allmulticast mode
[  152.931678][T10844] vxlan0: entered allmulticast mode
[  152.934182][T10844] bridge1: entered allmulticast mode
[  152.936510][T10844] bond1: entered allmulticast mode
[  152.938706][T10844] veth2: entered allmulticast mode
[  152.940911][T10844] veth3: entered allmulticast mode
[  152.943103][T10844] bond2: entered allmulticast mode
[  152.946165][T10844] ipvlan2: entered allmulticast mode
[  152.948184][T10844] gretap1: entered allmulticast mode
[  152.949973][T10844] bond3: entered allmulticast mode
[  152.952050][T10844] bond4: entered allmulticast mode
[  152.954732][T10844] ipvlan3: entered allmulticast mode
[  152.957252][T10844] bond5: entered allmulticast mode
[  152.959816][T10844] sit1: entered allmulticast mode
[  152.962248][T10844] bond6: entered allmulticast mode
[  152.964927][T10844] vxlan1: entered allmulticast mode
[  152.967405][T10844] batadv2: entered allmulticast mode
[  152.969926][T10844] bond7: entered allmulticast mode
[  152.972472][T10844] gtp0: entered allmulticast mode
[  152.975513][T10844] macvlan2: entered allmulticast mode
[  152.978054][T10844] macvlan3: entered allmulticast mode
[  152.980579][T10844] macvlan4: entered allmulticast mode
[  152.983099][T10844] macvlan5: entered allmulticast mode
[  152.985880][T10844] bond8: entered allmulticast mode
[  152.988193][T10844] bridge2: entered allmulticast mode
[  152.990753][T10844] syztnl0: entered allmulticast mode
[  152.993226][T10844] macvlan6: entered allmulticast mode
[  152.996857][T10844] macvlan7: entered allmulticast mode
[  152.999407][T10844] bond9: left promiscuous mode
[  153.001580][T10844] vcan1: left promiscuous mode
[  153.004106][T10844] bond9: entered allmulticast mode
[  153.006438][T10844] vcan1: entered allmulticast mode
[  153.008922][T10844] bond10: entered allmulticast mode
[  153.011272][T10844] gretap2: entered allmulticast mode
[  153.014977][T10844] netdevsim netdevsim1 eth0: entered allmulticast mode
[  153.018262][T10844] netdevsim netdevsim1 eth1: entered allmulticast mode
[  153.021456][T10844] netdevsim netdevsim1 eth2: entered allmulticast mode
[  153.024836][T10844] netdevsim netdevsim1 eth3: entered allmulticast mode
[  153.027970][T10844] bond11: entered allmulticast mode
[  153.030434][T10844] gretap3: entered allmulticast mode
[  153.032923][T10844] macsec2: left promiscuous mode
[  153.037599][T10844] veth4: entered allmulticast mode
[  153.040159][T10844] veth5: entered allmulticast mode
[  153.042820][T10844] gretap4: entered allmulticast mode
[  153.045509][T10844] gretap5: entered allmulticast mode
[  153.048087][T10844] bridge0: entered allmulticast mode
[  153.050697][T10844] syztnl2: entered allmulticast mode
[  153.053205][T10844] wireguard0: entered allmulticast mode
[  153.056061][T10844] sit2: left promiscuous mode
[  153.058395][T10844] sit2: entered allmulticast mode
[  153.060866][T10844] vxlan2: entered allmulticast mode
[  153.063570][T10844] bond12: left promiscuous mode
[  153.066047][T10844] bond12: entered allmulticast mode
[  153.068593][T10844] ipip0: entered allmulticast mode
[  153.071306][T10844] ip6gre2: left promiscuous mode
[  153.074347][T10844] ip6gre2: entered allmulticast mode
[  153.076953][T10844] gretap6: left promiscuous mode
[  153.078988][T10844] gretap6: entered allmulticast mode
[  153.081436][T10844] ip6gre3: entered allmulticast mode
[  153.084089][T10844] bond13: entered allmulticast mode
[  153.086416][T10844] sit3: entered allmulticast mode
[  153.088707][T10844] bridge3: entered allmulticast mode
[  153.091041][T10844] bond14: entered allmulticast mode
[  153.093327][T10844] bridge4: left promiscuous mode
[  153.096004][T10844] ipvlan4: left promiscuous mode
[  153.098394][T10844] ipvlan4: entered allmulticast mode
[  153.100987][T10844] bridge5: entered allmulticast mode
[  153.103509][T10844] bond15: left promiscuous mode
[  153.108157][T10844] ipvlan5: entered allmulticast mode
[  153.110639][T10844] bridge6: entered allmulticast mode
[  153.113087][T10844] vti0: entered allmulticast mode
[  153.116473][T10844] ip6tnl1: entered allmulticast mode
[  153.119034][T10844] erspan1: entered allmulticast mode
[  153.121873][T10844] bond16: entered allmulticast mode
[  153.126184][T10844] macvtap0: entered allmulticast mode
[  153.128570][T10844] macvlan8: entered allmulticast mode
[  153.130911][T10844] syztnl1: entered allmulticast mode
[  153.134185][T10844] bond17: entered allmulticast mode
[  153.138306][T10844] veth6: entered allmulticast mode
[  153.140985][T10844] veth7: entered allmulticast mode
[  153.145106][T10844] vti60: entered allmulticast mode
[  153.147621][T10844] bond18: entered allmulticast mode
[  153.150029][T10844] vxlan3: entered allmulticast mode
[  153.152306][T10844] bond19: entered allmulticast mode
[  153.156044][T10844] bridge7: entered allmulticast mode
[  153.158541][    T9] lo speed is unknown, defaulting to 1000
[  153.161119][    T9] syz1: Port: 1 Link DOWN
[  153.341870][T10860] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1284'.
[  153.497744][T10865] C: renamed from lo
[  153.501460][T10865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.672486][T10868] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  154.101023][T10870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1287'.
[  154.139963][T10876] netlink: 'syz.1.1289': attribute type 5 has an invalid length.
[  154.157634][T10879] netlink: 'syz.0.1290': attribute type 83 has an invalid length.
[  154.214438][T10876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1289'.
[  154.217874][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'.
[  154.222264][T10879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1290'.
[  154.260244][T10885] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.269706][T10889] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  154.398777][T10896] tipc: Started in network mode
[  154.401093][T10896] tipc: Node identity ee0fbe243f0a, cluster identity 4711
[  154.407110][T10896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.414983][T10896] syzkaller0: entered promiscuous mode
[  154.418460][T10897] xt_hashlimit: size too large, truncated to 1048576
[  154.421769][T10896] syzkaller0: entered allmulticast mode
[  154.487620][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'.
[  154.504730][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'.
[  155.525111][ T2277] tipc: Node number set to 3506814500
[  155.898167][T10975] x_tables: duplicate underflow at hook 2
[  156.027333][T10983] lo speed is unknown, defaulting to 1000
[  156.030109][T10983] C speed is unknown, defaulting to 1000
[  156.217343][T10996] netlink: 'syz.2.1317': attribute type 1 has an invalid length.
[  156.244545][T10999] netlink: 'syz.0.1316': attribute type 1 has an invalid length.
[  156.281753][T10999] vlan1: entered promiscuous mode
[  156.304064][T10999] bond0: entered promiscuous mode
[  156.305951][T10999] vlan1: entered allmulticast mode
[  156.682078][T11033] netlink: 'syz.2.1325': attribute type 1 has an invalid length.
[  156.819233][T11037] lo speed is unknown, defaulting to 1000
[  156.822212][T11037] C speed is unknown, defaulting to 1000
[  157.066356][T11051] sctp: [Deprecated]: syz.2.1327 (pid 11051) Use of int in max_burst socket option.
[  157.066356][T11051] Use struct sctp_assoc_value instead
[  157.229608][T11064] __nla_validate_parse: 4 callbacks suppressed
[  157.229623][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1330'.
[  157.324838][T11076] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1332'.
[  157.593052][T11095] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  157.759264][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  157.873036][T11127] sctp: [Deprecated]: syz.0.1347 (pid 11127) Use of int in maxseg socket option.
[  157.873036][T11127] Use struct sctp_assoc_value instead
[  157.930597][T11131] gretap4: entered promiscuous mode
[  158.009252][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.012737][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.021309][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.025448][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.029317][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.033443][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.038115][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1348'.
[  158.132462][T11146] netlink: 'syz.1.1353': attribute type 1 has an invalid length.
[  158.173511][T11146] 8021q: adding VLAN 0 to HW filter on device bond20
[  158.392446][T11168] vlan0: entered promiscuous mode
[  158.484650][T11174] netlink: 'syz.2.1360': attribute type 1 has an invalid length.
[  158.487943][T11174] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  158.903405][T11199] netlink: 'syz.0.1368': attribute type 39 has an invalid length.
[  158.978687][T11203] netlink: 'syz.0.1369': attribute type 11 has an invalid length.
[  158.983350][T11203] netlink: 'syz.0.1369': attribute type 5 has an invalid length.
[  159.519687][T11215] syz_tun: left allmulticast mode
[  159.522169][T11215] syz_tun: left promiscuous mode
[  159.529770][T11215] bridge0: port 1(syz_tun) entered disabled state
[  159.538401][T11215] batman_adv: batadv0: Removing interface: team0
[  159.555895][T11215] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  159.590225][T11217] netlink: 'syz.2.1374': attribute type 10 has an invalid length.
[  159.593690][T11217] batman_adv: batadv0: Adding interface: team0
[  159.598176][T11217] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.606902][T11217] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  159.611685][T11217] netlink: 'syz.2.1374': attribute type 10 has an invalid length.
[  159.619329][T11217] team0: entered promiscuous mode
[  159.621436][T11217] batadv2: entered promiscuous mode
[  159.624488][T11217] 8021q: adding VLAN 0 to HW filter on device team0
[  159.627364][T11217] batman_adv: batadv0: Interface activated: team0
[  159.629820][T11217] batman_adv: batadv0: Interface deactivated: team0
[  159.632182][T11217] batman_adv: batadv0: Removing interface: team0
[  159.638987][T11217] bridge0: port 1(team0) entered blocking state
[  159.641488][T11217] bridge0: port 1(team0) entered disabled state
[  159.644071][T11217] team0: entered allmulticast mode
[  159.645898][T11217] batadv2: entered allmulticast mode
[  159.651006][T11217] bridge0: port 1(team0) entered blocking state
[  159.653587][T11217] bridge0: port 1(team0) entered forwarding state
[  159.750290][T11221] IPv6: sit1: Disabled Multicast RS
[  159.928386][T11229] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  159.931361][T11229] batman_adv: batadv0: Removing interface: virt_wifi0
[  159.939502][T11229] batman_adv: batadv0: Removing interface: ip6gretap1
[  159.947588][T11229] ip6gretap3: left promiscuous mode
[  159.949969][T11229] bridge4: port 1(ip6gretap3) entered disabled state
[  159.964815][T11229] bond10: (slave gretap3): Releasing active interface
[  159.970582][T11229] bond11: (slave veth5): Releasing active interface
[  159.973481][T11229] bond11: (slave veth5): the permanent HWaddr of slave - 4a:cf:6c:b7:b7:d9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  159.993167][T11229] bond11: (slave veth7): Releasing active interface
[  160.158045][ T5687] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  160.162304][ T5687] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  160.250147][T11254] netlink: 'syz.0.1387': attribute type 4 has an invalid length.
[  160.338350][T11261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.353592][T11261] syzkaller0: entered promiscuous mode
[  160.357532][T11261] syzkaller0: entered allmulticast mode
[  160.375227][T11261] tipc: Resetting bearer <eth:syzkaller0>
[  160.378940][T11260] tipc: Resetting bearer <eth:syzkaller0>
[  160.389053][T11260] tipc: Disabling bearer <eth:syzkaller0>
[  160.511655][T11269] veth0_to_team: left allmulticast mode
[  160.515795][T11269] netlink: 'syz.1.1390': attribute type 16 has an invalid length.
[  160.522045][T11269] netlink: 'syz.1.1390': attribute type 17 has an invalid length.
[  160.559224][T11269] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.565227][T11269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.573299][ T7881] lo speed is unknown, defaulting to 1000
[  160.575824][ T7881] syz1: Port: 1 Link ACTIVE
[  160.672891][T11276] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  161.289210][T11299] lo speed is unknown, defaulting to 1000
[  161.299306][T11299] C speed is unknown, defaulting to 1000
[  162.245466][T11331] __nla_validate_parse: 99 callbacks suppressed
[  162.245485][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'.
[  162.352787][T11333] xt_hashlimit: invalid rate
[  162.474415][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1413'.
[  162.500204][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1414'.
[  162.512130][T11350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'.
[  162.529821][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'.
[  162.533502][T11352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1415'.
[  162.545313][T11352] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  162.548783][T11352] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  162.558107][T11352] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  162.563023][T11352] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  162.569004][T11352] geneve4: entered promiscuous mode
[  162.570725][T11352] geneve4: entered allmulticast mode
[  162.584668][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'.
[  162.710465][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  162.713537][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  162.729408][T11364] x_tables: duplicate underflow at hook 1
[  162.784968][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1417'.
[  163.099236][T11384] bond8: (slave bridge2): Releasing active interface
[  163.103056][T11384] bond9: (slave vcan1): Releasing backup interface
[  163.127922][T11384] bond10: (slave gretap2): Releasing active interface
[  163.133650][T11384] bond11: (slave gretap3): Releasing active interface
[  163.139634][T11384] bond17: (slave veth7): Releasing active interface
[  163.818131][T11422] lo speed is unknown, defaulting to 1000
[  163.823609][T11422] C speed is unknown, defaulting to 1000
[  164.000804][T11444] block nbd0: Unsupported socket: shutdown callout must be supported.
[  164.134585][T11445] team0: left allmulticast mode
[  164.136484][T11445] batadv2: left allmulticast mode
[  164.138326][T11445] bridge0: port 1(team0) entered disabled state
[  165.269734][T11499] lo speed is unknown, defaulting to 1000
[  165.273384][T11499] C speed is unknown, defaulting to 1000
[  166.030403][T11511] xt_ecn: cannot match TCP bits for non-tcp packets
[  166.893377][T11546] vlan0: entered promiscuous mode
[  166.901566][T11546] vlan0: left allmulticast mode
[  167.092619][T11565] lo speed is unknown, defaulting to 1000
[  167.446739][T11575] __nla_validate_parse: 16 callbacks suppressed
[  167.446760][T11575] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1464'.
[  167.880525][T11601] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.884280][T11601] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.925543][T11606] validate_nla: 5 callbacks suppressed
[  167.925558][T11606] netlink: 'syz.1.1471': attribute type 11 has an invalid length.
[  167.930532][T11606] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1471'.
[  167.950408][T11601] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.953591][T11601] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.967871][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'.
[  167.983472][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'.
[  167.991351][T11610] netlink: 'syz.0.1472': attribute type 15 has an invalid length.
[  167.995457][T11610] netlink: 'syz.0.1472': attribute type 18 has an invalid length.
[  168.000425][T11601] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  168.003736][T11601] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  168.062997][T11601] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  168.078941][T11601] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  168.118129][T11625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.131182][T11620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.136940][T11620] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1473'.
[  168.141993][T11620] 0: renamed from hsr0
[  168.149277][T11620] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.153395][T11620] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.167540][T11620] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  168.178864][T11627] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  168.182773][T11627] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  168.191926][T11627] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  168.195419][T11627] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  168.228750][T11601] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  168.232202][T11601] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  168.244313][T11601] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  168.247715][T11601] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  168.262866][T11601] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  168.266641][T11601] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  168.286291][T11601] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  168.289718][T11601] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  168.412731][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'.
[  168.415453][T11644] netlink: 'syz.1.1481': attribute type 1 has an invalid length.
[  168.420231][T11644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'.
[  168.547649][T11643] lo speed is unknown, defaulting to 1000
[  168.742771][T11674] netlink: 'syz.2.1488': attribute type 16 has an invalid length.
[  168.749290][T11676] tc_dump_action: action bad kind
[  168.752086][T11674] netlink: 'syz.2.1488': attribute type 17 has an invalid length.
[  168.861115][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'.
[  169.007741][T11674] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  169.010588][T11674] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  169.014339][T11674] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  169.017098][T11674] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  169.034170][ T5203] Bluetooth: hci0: command 0x0405 tx timeout
[  169.050188][T11674] tipc: Resetting bearer <eth:syzkaller0>
[  169.060743][T11674] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.065888][T11674] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.068738][T11674] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.071390][T11674] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.076605][T11674] mac80211_hwsim hwsim26 wlan0: left allmulticast mode
[  169.383179][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1493'.
[  169.389076][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'.
[  169.417109][T11694] netlink: 'syz.1.1494': attribute type 21 has an invalid length.
[  169.521044][T11706] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  169.563562][T11710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.573520][T11710] syzkaller0: entered promiscuous mode
[  169.576966][T11710] syzkaller0: entered allmulticast mode
[  169.583765][T11712] syzkaller0: entered promiscuous mode
[  169.586445][T11712] syzkaller0: entered allmulticast mode
[  169.627154][T11710] tipc: Resetting bearer <eth:syzkaller0>
[  169.630906][T11709] tipc: Resetting bearer <eth:syzkaller0>
[  169.650212][T11709] tipc: Disabling bearer <eth:syzkaller0>
[  169.967349][T11730] netlink: 'syz.1.1506': attribute type 10 has an invalid length.
[  169.973374][T11730] batadv0: left allmulticast mode
[  169.980076][T11730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.990259][T11730] batadv0: entered promiscuous mode
[  169.992057][T11730] batadv0: entered allmulticast mode
[  170.151406][T11738] netlink: 'syz.2.1508': attribute type 9 has an invalid length.
[  170.301570][T11747] vlan0: entered allmulticast mode
[  170.305856][T11747] batadv0: entered allmulticast mode
[  170.608831][T11755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.611909][T11755] IPv6: NLM_F_CREATE should be set when creating new route
[  170.730903][T11761] bond17: entered promiscuous mode
[  170.733547][T11761] 8021q: adding VLAN 0 to HW filter on device bond17
[  170.840925][T11771] netlink: 'syz.0.1518': attribute type 12 has an invalid length.
[  172.320677][T11827] 8021q: adding VLAN 0 to HW filter on device bond18
[  172.330520][T11827] 8021q: adding VLAN 0 to HW filter on device batadv1
[  172.334554][T11827] bond18: (slave batadv1): Enslaving as an active interface with an up link
[  172.383630][T11834] 8021q: adding VLAN 0 to HW filter on device bond19
[  172.510267][T11839] bridge0: entered promiscuous mode
[  172.591240][T11848] __nla_validate_parse: 11 callbacks suppressed
[  172.591258][T11848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1536'.
[  172.599683][T11848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1536'.
[  172.656049][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'.
[  172.728569][T11856] netlink: 5356 bytes leftover after parsing attributes in process `syz.0.1537'.
[  172.829052][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1541'.
[  172.858366][T11862] lo speed is unknown, defaulting to 1000
[  172.928263][T11868] pim6reg: entered allmulticast mode
[  173.130319][T11879] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  173.220508][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'.
[  173.408958][T11898] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  173.670302][T11916] lo speed is unknown, defaulting to 1000
[  173.767191][T11925] veth15: entered promiscuous mode
[  174.021194][T11945] syzkaller1: entered promiscuous mode
[  174.023110][T11945] syzkaller1: entered allmulticast mode
[  174.201812][T11947] lo speed is unknown, defaulting to 1000
[  174.204286][T11950] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1560'.
[  174.209187][T11950] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1560'.
[  174.388185][T11957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.401278][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.404704][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.407816][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.410965][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.417560][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.421043][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.424224][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.462361][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.466443][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.470267][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.478699][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.482531][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.488776][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.492606][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.504830][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.508992][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.512945][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.524390][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.528395][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.532961][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.549516][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.572351][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.579920][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.588974][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.592848][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.604464][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.614785][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.618859][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.626532][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.632271][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.646309][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.650527][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.657462][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.661433][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.678660][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.684293][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'.
[  174.685110][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.693504][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1565'.
[  174.699248][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.702898][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.717582][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.721435][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.732852][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.741507][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.748950][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.757635][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.809842][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.813652][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.855798][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.892098][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.901606][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.926675][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.934616][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.939631][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.953639][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.960409][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.974864][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.995741][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.003245][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.047757][T11977] veth17: entered promiscuous mode
[  175.057688][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.061994][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.082551][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.088590][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.092630][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.096676][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.101631][T11957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.114626][T11956] tipc: Disabling bearer <eth:syzkaller0>
[  175.124052][T11984] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  175.184599][T11986] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  175.240610][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.249821][   T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.254939][T11993] IPVS: Error connecting to the multicast addr
[  175.264424][T11993] validate_nla: 5 callbacks suppressed
[  175.264441][T11993] netlink: 'syz.2.1576': attribute type 1 has an invalid length.
[  175.264721][   T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.307227][T11993] vlan0: entered allmulticast mode
[  175.309602][T11993] bond6: entered allmulticast mode
[  175.461784][T12003] netlink: 'syz.2.1578': attribute type 1 has an invalid length.
[  175.489387][T12003] 8021q: adding VLAN 0 to HW filter on device bond7
[  175.586509][T12006] lo speed is unknown, defaulting to 1000
[  175.643236][T12018] openvswitch: netlink: IP tunnel dst address not specified
[  175.767074][ T7881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  175.994145][ T7881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  176.564126][T12071] netlink: 'syz.0.1585': attribute type 9 has an invalid length.
[  176.631150][T12076] ip6tnl0: entered allmulticast mode
[  176.710757][T12085] netlink: 'syz.2.1589': attribute type 1 has an invalid length.
[  176.750579][T12085] 8021q: adding VLAN 0 to HW filter on device bond9
[  176.758245][T12085] bond8: (slave bond9): making interface the new active one
[  176.762198][T12085] bond8: (slave bond9): Enslaving as an active interface with an up link
[  176.783232][T12085] bond8: (slave gretap2): Enslaving as a backup interface with an up link
[  176.831589][T12091] netlink: 'syz.0.1591': attribute type 1 has an invalid length.
[  176.837491][T12091] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  176.969678][T12108] netlink: 'syz.0.1596': attribute type 23 has an invalid length.
[  177.158192][T12122] netlink: 'syz.1.1600': attribute type 10 has an invalid length.
[  177.330455][T12132] netlink: 'syz.0.1603': attribute type 1 has an invalid length.
[  177.386113][T12132] 8021q: adding VLAN 0 to HW filter on device bond20
[  177.623412][T12158] __nla_validate_parse: 9 callbacks suppressed
[  177.623429][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  177.636188][T12158] vlan0: entered allmulticast mode
[  177.638389][T12158] bridge_slave_0: entered allmulticast mode
[  177.715809][T12163] can: request_module (can-proto-0) failed.
[  177.718559][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'.
[  177.723573][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  177.848710][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'.
[  177.863281][T12175] 8021q: adding VLAN 0 to HW filter on device bond10
[  178.157550][T10637] syzkaller0: tun_net_xmit 76
[  178.165245][T10637] syzkaller0: tun_net_xmit 48
[  178.170606][T12192] syzkaller0: create flow: hash 2920893686 index 1
[  178.188116][T11679] syzkaller0: tun_net_xmit 76
[  178.264118][T12190] syzkaller0: delete flow: hash 2920893686 index 1
[  178.329509][T12198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1618'.
[  178.401907][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'.
[  179.044166][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  179.923987][T12181] Set syz1 is full, maxelem 65536 reached
[  180.956522][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.007440][T12208] infiniband syz!: set down
[  181.010109][T12208] infiniband syz!: added team_slave_0
[  181.012872][T12208] syz!: rxe_create_cq: returned err = -12
[  181.015178][T12208] infiniband syz!: Couldn't create ib_mad CQ
[  181.017384][T12208] infiniband syz!: Couldn't open port 1
[  181.048232][T12208] RDS/IB: syz!: added
[  181.050105][T12208] smc: adding ib device syz! with port count 1
[  181.056173][T12208] smc:    ib device syz! port 1 has pnetid 
[  181.113546][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1623'.
[  181.129234][T12221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1623'.
[  181.307839][T11679] lo speed is unknown, defaulting to 1000
[  181.310152][T11679] syz1: Port: 1 Link DOWN
[  181.918846][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'.
[  181.971776][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'.
[  182.094119][T12268] netlink: 'syz.2.1635': attribute type 4 has an invalid length.
[  182.332434][T12280] netlink: 'syz.2.1638': attribute type 1 has an invalid length.
[  182.358153][T12280] 8021q: adding VLAN 0 to HW filter on device bond12
[  182.750231][T12321] netlink: 'syz.2.1649': attribute type 10 has an invalid length.
[  182.790063][T12324] batadv_slave_0: left allmulticast mode
[  183.002316][T12336] __nla_validate_parse: 4 callbacks suppressed
[  183.002331][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1654'.
[  183.237085][T12343] netlink: 'syz.1.1657': attribute type 4 has an invalid length.
[  183.272307][T12347] netlink: 'syz.1.1658': attribute type 1 has an invalid length.
[  183.329928][T12347] bond22: (slave veth11): Enslaving as an active interface with a down link
[  183.347323][T12350] bond22: (slave veth13): Enslaving as an active interface with a down link
[  183.360513][T12347] bond22: (slave veth15): Enslaving as an active interface with a down link
[  183.402583][T12350] bond22: (slave veth17): Enslaving as an active interface with a down link
[  183.749464][T12381] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1666'.
[  183.753261][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  183.762344][T12383] netlink: 'syz.1.1666': attribute type 9 has an invalid length.
[  183.775863][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'.
[  183.877193][T12395] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  183.893434][T12395] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1670'.
[  183.896000][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'.
[  183.907662][T12392] gtp1: entered promiscuous mode
[  183.954744][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'.
[  183.964835][T12400] 8021q: adding VLAN 0 to HW filter on device bond21
[  184.164302][T12417] syzkaller1: entered promiscuous mode
[  184.166084][T12417] syzkaller1: entered allmulticast mode
[  184.227096][T12424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1679'.
[  184.272659][T12426] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1678'.
[  184.276247][T12426] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1678'.
[  184.489659][T12433] delete_channel: no stack
[  184.556049][T12451] Cannot find del_set index 286 as target
[  184.591588][T12454] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  184.616427][T12454] veth19: entered promiscuous mode
[  184.637053][T12456] pim6reg1: entered promiscuous mode
[  184.639433][T12456] pim6reg1: entered allmulticast mode
[  184.884719][T12470] netlink: 'syz.1.1689': attribute type 9 has an invalid length.
[  184.888189][T12470] netlink: 'syz.1.1689': attribute type 6 has an invalid length.
[  184.905329][T12464] bond22 (unregistering): Released all slaves
[  185.685056][T12503] vlan0: entered promiscuous mode
[  185.686872][T12503] bridge_slave_0: entered promiscuous mode
[  185.689358][T12503] vlan0: left allmulticast mode
[  185.691103][T12503] bridge_slave_0: left allmulticast mode
[  185.706276][T12503] team0: Port device vlan0 added
[  186.553996][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  186.822186][T12569] IPv6: NLM_F_REPLACE set, but no existing node found!
[  188.698759][T12624] __nla_validate_parse: 15 callbacks suppressed
[  188.698772][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1734'.
[  188.855857][T12633] validate_nla: 1 callbacks suppressed
[  188.855893][T12633] netlink: 'syz.2.1737': attribute type 1 has an invalid length.
[  188.862917][T12633] netlink: 'syz.2.1737': attribute type 2 has an invalid length.
[  188.876742][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.879689][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.891412][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.898563][T12636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.917601][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.920823][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1738'.
[  188.962433][T12636] netlink: 'syz.1.1738': attribute type 83 has an invalid length.
[  188.974736][T12644] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  189.092710][T12636] xt_hashlimit: size too large, truncated to 1048576
[  189.169989][T12658] netlink: 'syz.2.1741': attribute type 12 has an invalid length.
[  189.173239][T12658] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1741'.
[  189.363928][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.366748][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.046520][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'.
[  190.150140][T12672] lo speed is unknown, defaulting to 1000
[  190.559244][T12680] batadv_slave_0: entered promiscuous mode
[  190.605625][T12682] Set syz1 is full, maxelem 65536 reached
[  191.042886][T12708] bond3: (slave geneve2): Releasing active interface
[  191.048658][T12708] bond4: (slave gretap1): Releasing active interface
[  191.051780][T12708] gretap1: left allmulticast mode
[  191.056597][T12708] batadv2: left promiscuous mode
[  191.062306][T12708] team0: Port device batadv2 removed
[  191.067283][T12708] bond8: (slave bond9): Releasing backup interface
[  191.070273][T12708] bond8: (slave bond9): the permanent HWaddr of slave - 96:10:d1:40:e3:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  191.084319][T12708] bond8: (slave gretap2): making interface the new active one
[  191.093720][T12708] bond8: (slave gretap2): Releasing backup interface
[  191.094445][ T7881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  191.123512][T12708] team0: Port device vlan0 removed
[  191.247094][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'.
[  191.691503][T12731] bond22: (slave veth11): Releasing active interface
[  191.694359][ T7881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  191.700278][T12731] bond22: (slave veth11): the permanent HWaddr of slave - b6:97:56:03:41:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  191.711591][T12731] bond22: (slave veth13): Releasing active interface
[  191.719989][T12731] bond22: (slave veth15): Releasing active interface
[  191.725590][T12731] bond22: (slave veth17): Releasing active interface
[  193.198850][T12756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  193.237999][T12758] lo speed is unknown, defaulting to 1000
[  193.274036][T12760] lo speed is unknown, defaulting to 1000
[  193.642769][T12792] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  193.837518][T12797] netlink: 'syz.1.1775': attribute type 16 has an invalid length.
[  193.840959][T12797] netlink: 'syz.1.1775': attribute type 17 has an invalid length.
[  193.889606][T12798] __nla_validate_parse: 12 callbacks suppressed
[  193.889618][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'.
[  193.905203][T12797] IPv6: NLM_F_REPLACE set, but no existing node found!
[  194.107958][T12800] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.120746][T12800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1776'.
[  194.451725][T12808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  194.617920][T12810] bond0: Device is already in use.
[  194.786643][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'.
[  195.023073][T12828] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  195.029708][T12828] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  195.039973][T12830] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64)
[  195.486648][T12859] netlink: 'syz.2.1792': attribute type 1 has an invalid length.
[  195.552373][T12851] netlink: 136784 bytes leftover after parsing attributes in process `syz.1.1791'.
[  195.577112][T12851] netlink: zone id is out of range
[  195.579102][T12851] netlink: zone id is out of range
[  195.580811][T12851] netlink: zone id is out of range
[  195.582994][T12851] netlink: zone id is out of range
[  195.586422][T12851] netlink: zone id is out of range
[  195.590493][T12851] netlink: zone id is out of range
[  195.592518][T12851] netlink: zone id is out of range
[  195.595554][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.598109][T12851] netlink: zone id is out of range
[  195.601520][T12851] netlink: zone id is out of range
[  195.604466][T12851] netlink: zone id is out of range
[  195.605823][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.610104][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.615545][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.619371][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.619426][T12851] netlink: 'syz.1.1791': attribute type 10 has an invalid length.
[  195.623288][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'.
[  195.630870][T12851] geneve0: left allmulticast mode
[  195.709484][T12873] bond0: invalid ARP target 0.0.0.0 specified for addition
[  195.712660][T12873] bond0: option arp_ip_target: invalid value (0)
[  195.737300][T12873] lo speed is unknown, defaulting to 1000
[  195.748347][T12883] netlink: 'syz.1.1798': attribute type 10 has an invalid length.
[  195.861483][T12889] netlink: 'syz.1.1800': attribute type 10 has an invalid length.
[  196.057559][T12902] netlink: 'syz.2.1804': attribute type 5 has an invalid length.
[  196.084306][T12902] ip6erspan1: entered allmulticast mode
[  196.188166][T12914] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  196.336188][T12921] netlink: 'syz.2.1808': attribute type 1 has an invalid length.
[  196.357031][T12927] netlink: 'syz.1.1809': attribute type 7 has an invalid length.
[  196.366593][T12922] bond13: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  196.880998][T12973] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  196.928542][T12973] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  196.973583][T12973] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  197.020626][T12973] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  197.109246][T12973] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  197.134477][T12973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  197.145590][T12973] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  197.162162][T12973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  197.278401][T13000] vxcan1: entered allmulticast mode
[  197.365425][T13006] netlink: 'syz.0.1827': attribute type 10 has an invalid length.
[  197.422235][T13006] netlink: 'syz.0.1827': attribute type 10 has an invalid length.
[  198.515778][T13040] netlink: 'syz.1.1835': attribute type 13 has an invalid length.
[  198.519614][T13040] lo: left allmulticast mode
[  198.541097][T13040] tunl0: left allmulticast mode
[  198.545520][T13040] gre0: left allmulticast mode
[  198.552074][T13040] gretap0: left allmulticast mode
[  198.580234][T13040] ip_vti0: left allmulticast mode
[  198.582479][T13040] ip6_vti0: left allmulticast mode
[  198.586543][T13040] sit0: left allmulticast mode
[  198.593353][T13040] ip6tnl0: left allmulticast mode
[  198.599712][T13040] ip6gre0: left allmulticast mode
[  198.602376][T13040] ip6gretap0: left allmulticast mode
[  198.612491][T13040] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.615883][T13040] nlmon0: left allmulticast mode
[  198.618908][T13040] caif0: left allmulticast mode
[  198.623297][ T7881] lo speed is unknown, defaulting to 1000
[  198.629712][ T7881] syz1: Port: 1 Link ACTIVE
[  198.659275][T13039] lo speed is unknown, defaulting to 1000
[  198.802263][T13050] bond14 (unregistering): Released all slaves
[  198.897598][T13056] __nla_validate_parse: 19 callbacks suppressed
[  198.897617][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'.
[  199.227291][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'.
[  199.286005][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'.
[  199.532712][T13076] 8021q: adding VLAN 0 to HW filter on device batadv3
[  199.540713][T13076] batadv3: entered promiscuous mode
[  199.544093][T13076] team0: Failed to send port change of device batadv3 via netlink (err -105)
[  199.548175][T13076] team0: Failed to send options change via netlink (err -105)
[  199.551677][T13076] team0: Port device batadv3 added
[  199.596400][T13082] xt_CT: No such helper "snmp"
[  199.625411][T13082] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000
[  199.842469][T13096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'.
[  199.869659][T13096] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1852'.
[  199.992757][T13100] lo speed is unknown, defaulting to 1000
[  200.232156][T13110] lo speed is unknown, defaulting to 1000
[  200.483029][T13113] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.520870][T13113] team0: left promiscuous mode
[  200.528612][T13113] batadv3: left promiscuous mode
[  200.534840][T13113] 8021q: adding VLAN 0 to HW filter on device team0
[  200.645848][T13128] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1859'.
[  200.691831][T13128] 0: renamed from hsr0
[  200.710553][T13128] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  200.715308][T13128] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.721118][T13128] net_ratelimit: 4058 callbacks suppressed
[  200.721136][T13128] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  200.806485][T13136] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  200.809031][T13136] CPU: 0 UID: 0 PID: 13136 Comm: syz.0.1861 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  200.809044][T13136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.809049][T13136] Call Trace:
[  200.809054][T13136]  <TASK>
[  200.809059][T13136]  dump_stack_lvl+0x189/0x250
[  200.809077][T13136]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.809089][T13136]  ? __pfx__printk+0x10/0x10
[  200.809099][T13136]  ? kernfs_path_from_node+0x2c/0x260
[  200.809111][T13136]  ? kernfs_path_from_node+0x2c/0x260
[  200.809119][T13136]  ? kernfs_path_from_node+0x2c/0x260
[  200.809128][T13136]  ? kernfs_path_from_node+0x22c/0x260
[  200.809136][T13136]  ? kernfs_path_from_node+0x2c/0x260
[  200.809146][T13136]  sysfs_warn_dup+0x8e/0xa0
[  200.809156][T13136]  sysfs_do_create_link_sd+0xc0/0x110
[  200.809166][T13136]  device_add_class_symlinks+0x1cf/0x240
[  200.809176][T13136]  device_add+0x475/0xb50
[  200.809186][T13136]  wiphy_register+0x199a/0x26b0
[  200.809203][T13136]  ? __pfx_wiphy_register+0x10/0x10
[  200.809214][T13136]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  200.809227][T13136]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  200.809240][T13136]  ieee80211_register_hw+0x33e1/0x4120
[  200.809257][T13136]  ? ieee80211_register_hw+0x13f1/0x4120
[  200.809271][T13136]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  200.809283][T13136]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.809299][T13136]  ? __hrtimer_setup+0x187/0x210
[  200.809310][T13136]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  200.809320][T13136]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  200.809344][T13136]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  200.809354][T13136]  ? trace_kmalloc+0x1f/0xd0
[  200.809360][T13136]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  200.809368][T13136]  ? kstrndup+0xbf/0x160
[  200.809381][T13136]  hwsim_new_radio_nl+0xea4/0x1b10
[  200.809389][T13136]  ? __pfx___nla_validate_parse+0x10/0x10
[  200.809407][T13136]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  200.809420][T13136]  ? __nla_parse+0x40/0x60
[  200.809432][T13136]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  200.809452][T13136]  genl_family_rcv_msg_doit+0x215/0x300
[  200.809472][T13136]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  200.809498][T13136]  ? bpf_lsm_capable+0x9/0x20
[  200.809508][T13136]  ? security_capable+0x7e/0x2e0
[  200.809525][T13136]  genl_rcv_msg+0x60e/0x790
[  200.809545][T13136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  200.809562][T13136]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  200.809598][T13136]  netlink_rcv_skb+0x208/0x470
[  200.809613][T13136]  ? __pfx_genl_rcv_msg+0x10/0x10
[  200.809633][T13136]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  200.809660][T13136]  ? down_read+0x1ad/0x2e0
[  200.809675][T13136]  genl_rcv+0x28/0x40
[  200.809692][T13136]  netlink_unicast+0x75b/0x8d0
[  200.809738][T13136]  netlink_sendmsg+0x805/0xb30
[  200.809762][T13136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.809782][T13136]  ? aa_sock_msg_perm+0x94/0x160
[  200.809800][T13136]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.809816][T13136]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.809831][T13136]  __sock_sendmsg+0x21c/0x270
[  200.809853][T13136]  ____sys_sendmsg+0x505/0x830
[  200.809872][T13136]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.809893][T13136]  ? import_iovec+0x74/0xa0
[  200.809907][T13136]  ___sys_sendmsg+0x21f/0x2a0
[  200.809922][T13136]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.809961][T13136]  ? __fget_files+0x2a/0x420
[  200.809974][T13136]  ? __fget_files+0x3a0/0x420
[  200.809995][T13136]  __x64_sys_sendmsg+0x19b/0x260
[  200.810012][T13136]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.810035][T13136]  ? rcu_is_watching+0x15/0xb0
[  200.810054][T13136]  ? do_syscall_64+0xbe/0x3b0
[  200.810063][T13136]  do_syscall_64+0xfa/0x3b0
[  200.810069][T13136]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.810079][T13136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.810086][T13136]  ? exc_page_fault+0x9f/0xf0
[  200.810097][T13136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.810104][T13136] RIP: 0033:0x7fe55bf8e929
[  200.810114][T13136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.810121][T13136] RSP: 002b:00007fe55cd84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.810130][T13136] RAX: ffffffffffffffda RBX: 00007fe55c1b6080 RCX: 00007fe55bf8e929
[  200.810135][T13136] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  200.810140][T13136] RBP: 00007fe55c010b39 R08: 0000000000000000 R09: 0000000000000000
[  200.810145][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.810149][T13136] R13: 0000000000000000 R14: 00007fe55c1b6080 R15: 00007ffd8dd92468
[  200.810163][T13136]  </TASK>
[  201.275163][T13144] lo speed is unknown, defaulting to 1000
[  201.499807][T13147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'.
[  201.516039][T13161] SET target dimension over the limit!
[  201.625165][T13166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.698810][T13175] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1872'.
[  201.812441][T13180] validate_nla: 6 callbacks suppressed
[  201.812513][T13180] netlink: 'syz.1.1874': attribute type 21 has an invalid length.
[  201.818544][T13180] netlink: 'syz.1.1874': attribute type 22 has an invalid length.
[  201.822244][T13180] netlink: 'syz.1.1874': attribute type 23 has an invalid length.
[  201.825771][T13180] netlink: 'syz.1.1874': attribute type 25 has an invalid length.
[  201.828802][T13180] netlink: 'syz.1.1874': attribute type 26 has an invalid length.
[  201.831732][T13180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'.
[  201.837187][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'.
[  201.923928][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  202.331601][T13211] netlink: 'syz.0.1881': attribute type 23 has an invalid length.
[  202.852656][T13237] netlink: zone id is out of range
[  202.859797][T13237] netlink: zone id is out of range
[  202.862874][T13237] netlink: get zone limit has 8 unknown bytes
[  203.029404][T13248] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  203.299137][T13271] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  203.314302][T13271] 8021q: adding VLAN 0 to HW filter on device bond14
[  203.540715][T13284] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  203.641867][T13298] netlink: 'syz.0.1902': attribute type 10 has an invalid length.
[  203.708229][T13303] siw: device registration error -23
[  203.717451][T13293] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  203.721630][T13293] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  203.734721][T13301] delete_channel: no stack
[  203.947828][T13321] __nla_validate_parse: 15 callbacks suppressed
[  203.947844][T13321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'.
[  203.976925][T13321] lo speed is unknown, defaulting to 1000
[  204.980494][T13332] lo speed is unknown, defaulting to 1000
[  205.146107][T13336] lo speed is unknown, defaulting to 1000
[  205.260604][T13337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1913'.
[  205.292536][T13337] SET target dimension over the limit!
[  205.320481][T13343] netlink: 'syz.0.1915': attribute type 1 has an invalid length.
[  205.359751][T13343] bond22: entered promiscuous mode
[  205.366159][T13343] 8021q: adding VLAN 0 to HW filter on device bond22
[  205.420474][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[  205.424267][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[  205.428054][T13348] netlink: 'syz.0.1917': attribute type 4 has an invalid length.
[  205.430718][T13348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1917'.
[  205.468424][T13348] : renamed from bridge8 (while UP)
[  205.862416][T13377] bond23: entered promiscuous mode
[  205.869367][T13377] 8021q: adding VLAN 0 to HW filter on device bond23
[  205.913976][T13377] 8021q: adding VLAN 0 to HW filter on device bond23
[  205.916475][T13377] bond23: (slave vcan0): The slave device specified does not support setting the MAC address
[  205.927787][T13377] bond23: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  205.937217][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'.
[  205.946622][T13377] bond23: (slave vcan0): making interface the new active one
[  205.964877][T13377] vcan0: entered promiscuous mode
[  205.969370][T13377] bond23: (slave vcan0): Enslaving as an active interface with an up link
[  206.091965][T13394] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1926'.
[  206.108729][T13394] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.114424][T13394] team0: Port device bond0 added
[  206.165055][T13403] : entered promiscuous mode
[  206.231066][T13411] xt_hashlimit: size too large, truncated to 1048576
[  206.244396][T13411] warn_alloc: 1 callbacks suppressed
[  206.244413][T13411] syz.2.1931: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  206.253150][T13411] CPU: 1 UID: 0 PID: 13411 Comm: syz.2.1931 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  206.253169][T13411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.253176][T13411] Call Trace:
[  206.253184][T13411]  <TASK>
[  206.253191][T13411]  dump_stack_lvl+0x189/0x250
[  206.253215][T13411]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.253232][T13411]  ? __pfx__printk+0x10/0x10
[  206.253241][T13411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.253254][T13411]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.253267][T13411]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  206.253281][T13411]  warn_alloc+0x214/0x310
[  206.253300][T13411]  ? __pfx_warn_alloc+0x10/0x10
[  206.253318][T13411]  ? __get_vm_area_node+0x28f/0x300
[  206.253328][T13411]  ? htable_create+0xfc/0x7a0
[  206.253344][T13411]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  206.253377][T13411]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  206.253393][T13411]  ? rcu_is_watching+0x15/0xb0
[  206.253411][T13411]  ? htable_create+0xfc/0x7a0
[  206.253425][T13411]  ? htable_create+0xfc/0x7a0
[  206.253437][T13411]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  206.253447][T13411]  ? htable_create+0xfc/0x7a0
[  206.253457][T13411]  ? hashlimit_pernet+0x23/0x240
[  206.253476][T13411]  htable_create+0xfc/0x7a0
[  206.253496][T13411]  hashlimit_mt_check_common+0x719/0xa10
[  206.253517][T13411]  hashlimit_mt_check_v1+0x221/0x360
[  206.253533][T13411]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  206.253547][T13411]  ? xt_find_match+0x1f7/0x250
[  206.253566][T13411]  xt_check_match+0x3d1/0xab0
[  206.253586][T13411]  ? __pfx___mutex_lock+0x10/0x10
[  206.253605][T13411]  ? __pfx_xt_check_match+0x10/0x10
[  206.253621][T13411]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  206.253658][T13411]  ? xt_find_match+0x1f7/0x250
[  206.253679][T13411]  translate_table+0x1553/0x2040
[  206.253709][T13411]  ? __pfx_translate_table+0x10/0x10
[  206.253721][T13411]  ? __might_fault+0xb0/0x130
[  206.253744][T13411]  ? _copy_from_user+0x94/0xb0
[  206.253758][T13411]  do_ip6t_set_ctl+0x970/0xce0
[  206.253797][T13411]  ? rcu_is_watching+0x15/0xb0
[  206.253813][T13411]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  206.253842][T13411]  ? __pfx___mutex_lock+0x10/0x10
[  206.253854][T13411]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  206.253875][T13411]  ? __pfx_futex_wait+0x10/0x10
[  206.253895][T13411]  nf_setsockopt+0x26f/0x290
[  206.253913][T13411]  rawv6_setsockopt+0x23b/0x5b0
[  206.253928][T13411]  ? __lock_acquire+0xab9/0xd20
[  206.253944][T13411]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  206.253960][T13411]  ? aa_sock_opt_perm+0x74/0x110
[  206.253974][T13411]  ? sock_common_setsockopt+0x36/0xc0
[  206.253984][T13411]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  206.253999][T13411]  do_sock_setsockopt+0x25a/0x3e0
[  206.254013][T13411]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  206.254030][T13411]  ? __fget_files+0x2a/0x420
[  206.254048][T13411]  __x64_sys_setsockopt+0x18b/0x220
[  206.254066][T13411]  do_syscall_64+0xfa/0x3b0
[  206.254075][T13411]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.254086][T13411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.254098][T13411]  ? exc_page_fault+0x9f/0xf0
[  206.254115][T13411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.254126][T13411] RIP: 0033:0x7f2faf18e929
[  206.254138][T13411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.254148][T13411] RSP: 002b:00007f2fb0046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  206.254160][T13411] RAX: ffffffffffffffda RBX: 00007f2faf3b5fa0 RCX: 00007f2faf18e929
[  206.254167][T13411] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000049
[  206.254171][T13411] RBP: 00007f2faf210b39 R08: 00000000000004c0 R09: 0000000000000000
[  206.254178][T13411] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  206.254185][T13411] R13: 0000000000000000 R14: 00007f2faf3b5fa0 R15: 00007fffd6cbb238
[  206.254204][T13411]  </TASK>
[  206.413967][T13411] Mem-Info:
[  206.415073][T13411] active_anon:12698 inactive_anon:0 isolated_anon:0
[  206.415073][T13411]  active_file:1120 inactive_file:38268 isolated_file:0
[  206.415073][T13411]  unevictable:1768 dirty:50 writeback:0
[  206.415073][T13411]  slab_reclaimable:10236 slab_unreclaimable:97755
[  206.415073][T13411]  mapped:19314 shmem:2575 pagetables:883
[  206.415073][T13411]  sec_pagetables:0 bounce:0
[  206.415073][T13411]  kernel_misc_reclaimable:0
[  206.415073][T13411]  free:248363 free_pcp:17431 free_cma:0
[  206.434342][T13411] Node 0 active_anon:33584kB inactive_anon:0kB active_file:2896kB inactive_file:144948kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40228kB dirty:140kB writeback:0kB shmem:5364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7260kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  206.449972][T13411] Node 1 active_anon:17208kB inactive_anon:0kB active_file:1584kB inactive_file:8124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37028kB dirty:60kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6864kB pagetables:1428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  206.461339][T13411] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  206.474486][T13411] lowmem_reserve[]: 0 815 815 815 815
[  206.476317][T13411] Node 0 DMA32 free:210948kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33584kB inactive_anon:0kB active_file:2896kB inactive_file:144948kB unevictable:3536kB writepending:140kB present:1556484kB managed:834736kB mlocked:0kB bounce:0kB free_pcp:34548kB local_pcp:18900kB free_cma:0kB
[  206.492590][T13410] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1930'.
[  206.604051][T13411] lowmem_reserve[]: 0 0 0 0 0
[  206.606161][T13411] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  206.654301][T13411] lowmem_reserve[]: 0 0 854 854 854
[  206.674396][T13411] Node 1 Normal free:308528kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17072kB inactive_anon:0kB active_file:1584kB inactive_file:8124kB unevictable:3536kB writepending:60kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38220kB local_pcp:20680kB free_cma:0kB
[  206.723907][T13411] lowmem_reserve[]: 0 0 0 0 0
[  206.729098][T13411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  206.769917][T13411] Node 0 DMA32: 368*4kB (UME) 168*8kB (ME) 52*16kB (UME) 225*32kB (UME) 71*64kB (UME) 28*128kB (UM) 21*256kB (UM) 17*512kB (UME) 3*1024kB (UM) 7*2048kB (UME) 40*4096kB (M) = 214304kB
[  206.804091][T13411] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  206.843864][T13411] Node 1 Normal: 490*4kB (UME) 906*8kB (UME) 360*16kB (UME) 571*32kB (UME) 212*64kB (UME) 162*128kB (UME) 67*256kB (UME) 21*512kB (UM) 4*1024kB (UM) 5*2048kB (UME) 49*4096kB (M) = 310488kB
[  206.867888][T13411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.870984][T13411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  206.887067][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1934'.
[  206.890107][T13411] 41982 total pagecache pages
[  206.891698][T13411] 0 pages in swap cache
[  206.893060][T13411] Free swap  = 124996kB
[  206.904045][T13411] Total swap = 124996kB
[  206.905491][T13411] 786301 pages RAM
[  206.906729][T13411] 0 pages HighMem/MovableOnly
[  206.908298][T13411] 240369 pages reserved
[  206.909700][T13411] 0 pages cma reserved
[  207.088723][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  207.146028][T13446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  207.148524][T13446] IPv6: NLM_F_CREATE should be set when creating new route
[  207.192817][T13438] validate_nla: 3 callbacks suppressed
[  207.192829][T13438] netlink: 'syz.1.1936': attribute type 1 has an invalid length.
[  207.234000][T13438] bond25: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  207.262149][T13459] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.372248][T13468] netlink: 'syz.2.1945': attribute type 1 has an invalid length.
[  208.054309][T13505] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  208.057467][T13505] CPU: 0 UID: 0 PID: 13505 Comm: syz.1.1952 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  208.057485][T13505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.057493][T13505] Call Trace:
[  208.057500][T13505]  <TASK>
[  208.057507][T13505]  dump_stack_lvl+0x189/0x250
[  208.057533][T13505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.057550][T13505]  ? __pfx__printk+0x10/0x10
[  208.057564][T13505]  ? kernfs_path_from_node+0x2c/0x260
[  208.057577][T13505]  ? kernfs_path_from_node+0x2c/0x260
[  208.057589][T13505]  ? kernfs_path_from_node+0x2c/0x260
[  208.057602][T13505]  ? kernfs_path_from_node+0x22c/0x260
[  208.057643][T13505]  ? kernfs_path_from_node+0x2c/0x260
[  208.057659][T13505]  sysfs_warn_dup+0x8e/0xa0
[  208.057672][T13505]  sysfs_do_create_link_sd+0xc0/0x110
[  208.057687][T13505]  device_add_class_symlinks+0x1cf/0x240
[  208.057704][T13505]  device_add+0x475/0xb50
[  208.057715][T13505]  wiphy_register+0x199a/0x26b0
[  208.057737][T13505]  ? __pfx_wiphy_register+0x10/0x10
[  208.057749][T13505]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  208.057767][T13505]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  208.057784][T13505]  ieee80211_register_hw+0x33e1/0x4120
[  208.057812][T13505]  ? ieee80211_register_hw+0x13f1/0x4120
[  208.057837][T13505]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  208.057855][T13505]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.057876][T13505]  ? __hrtimer_setup+0x187/0x210
[  208.057893][T13505]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  208.057909][T13505]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  208.057949][T13505]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  208.057966][T13505]  ? trace_kmalloc+0x1f/0xd0
[  208.057975][T13505]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  208.057987][T13505]  ? kstrndup+0xbf/0x160
[  208.058007][T13505]  hwsim_new_radio_nl+0xea4/0x1b10
[  208.058021][T13505]  ? __pfx___nla_validate_parse+0x10/0x10
[  208.058049][T13505]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.058069][T13505]  ? __nla_parse+0x40/0x60
[  208.058088][T13505]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  208.058111][T13505]  genl_family_rcv_msg_doit+0x215/0x300
[  208.058132][T13505]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  208.058158][T13505]  ? bpf_lsm_capable+0x9/0x20
[  208.058167][T13505]  ? security_capable+0x7e/0x2e0
[  208.058188][T13505]  genl_rcv_msg+0x60e/0x790
[  208.058209][T13505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.058224][T13505]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  208.058245][T13505]  netlink_rcv_skb+0x208/0x470
[  208.058259][T13505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  208.058276][T13505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.058301][T13505]  ? down_read+0x1ad/0x2e0
[  208.058315][T13505]  genl_rcv+0x28/0x40
[  208.058350][T13505]  netlink_unicast+0x75b/0x8d0
[  208.058370][T13505]  netlink_sendmsg+0x805/0xb30
[  208.058390][T13505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.058407][T13505]  ? aa_sock_msg_perm+0x94/0x160
[  208.058423][T13505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.058438][T13505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.058471][T13505]  __sock_sendmsg+0x21c/0x270
[  208.058489][T13505]  ____sys_sendmsg+0x505/0x830
[  208.058509][T13505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.058530][T13505]  ? import_iovec+0x74/0xa0
[  208.058544][T13505]  ___sys_sendmsg+0x21f/0x2a0
[  208.058560][T13505]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.058600][T13505]  ? __fget_files+0x2a/0x420
[  208.058636][T13505]  ? __fget_files+0x3a0/0x420
[  208.058659][T13505]  __x64_sys_sendmsg+0x19b/0x260
[  208.058675][T13505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.058697][T13505]  ? rcu_is_watching+0x15/0xb0
[  208.058719][T13505]  ? do_syscall_64+0xbe/0x3b0
[  208.058732][T13505]  do_syscall_64+0xfa/0x3b0
[  208.058743][T13505]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.058758][T13505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.058770][T13505]  ? exc_page_fault+0x9f/0xf0
[  208.058788][T13505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.058798][T13505] RIP: 0033:0x7ff5f458e929
[  208.058811][T13505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.058827][T13505] RSP: 002b:00007ff5f5482038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.058842][T13505] RAX: ffffffffffffffda RBX: 00007ff5f47b5fa0 RCX: 00007ff5f458e929
[  208.058851][T13505] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  208.058858][T13505] RBP: 00007ff5f4610b39 R08: 0000000000000000 R09: 0000000000000000
[  208.058866][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.058872][T13505] R13: 0000000000000000 R14: 00007ff5f47b5fa0 R15: 00007ffdf9cf9a98
[  208.058891][T13505]  </TASK>
[  209.011274][T13546] erspan0: Device is already in use.
[  209.418141][T13568] netlink: 'syz.1.1967': attribute type 1 has an invalid length.
[  209.436525][T13568] 8021q: adding VLAN 0 to HW filter on device bond26
[  209.619439][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.623265][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.626762][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.629681][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.632502][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.639205][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.642161][T13578] netlink: 'syz.1.1970': attribute type 29 has an invalid length.
[  209.682715][T13580] lo speed is unknown, defaulting to 1000
[  209.725159][T13583] __nla_validate_parse: 9 callbacks suppressed
[  209.725172][T13583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'.
[  209.736173][T13583] batman_adv: batadv0: Adding interface: virt_wifi0
[  209.738939][T13583] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  209.746366][T13583] batman_adv: batadv0: Interface activated: virt_wifi0
[  209.995458][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'.
[  209.999569][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'.
[  210.052074][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1973'.
[  210.254808][T13609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1977'.
[  210.634911][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'.
[  210.642571][T13627] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 50908 - 0
[  210.649397][T13627] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 50908 - 0
[  210.652825][T13627] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 50908 - 0
[  210.660432][T13627] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 50908 - 0
[  210.669290][T13627] geneve3: entered promiscuous mode
[  210.671678][T13627] geneve3: entered allmulticast mode
[  210.944655][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'.
[  210.954757][T13644] siw: device registration error -23
[  211.005224][T13649] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[  211.356456][ T2277] page_pool_release_retry() stalled pool shutdown: id 35, 1 inflight 60 sec
[  211.531027][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1994'.
[  212.295715][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'.
[  212.299755][T13701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'.
[  212.359045][T13713] validate_nla: 54 callbacks suppressed
[  212.359062][T13713] netlink: 'syz.1.1999': attribute type 21 has an invalid length.
[  212.490875][T13717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.495337][T13717] tipc: Resetting bearer <eth:syzkaller0>
[  212.505454][T13723] netlink: 'syz.1.2002': attribute type 1 has an invalid length.
[  212.521958][T13716] tipc: Disabling bearer <eth:syzkaller0>
[  212.541192][T13725] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  212.553514][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.558374][T13719] bond27: (slave bridge12): making interface the new active one
[  212.561945][T13719] bond27: (slave bridge12): Enslaving as an active interface with an up link
[  212.687837][T13735] netlink: 'syz.0.2005': attribute type 1 has an invalid length.
[  212.752948][T13719] bond0 (unregistering): left promiscuous mode
[  212.768058][T13719] bond0 (unregistering): Released all slaves
[  212.931124][T13751] lo speed is unknown, defaulting to 1000
[  212.962800][T13753] pim6reg: entered allmulticast mode
[  213.318725][ T7882] lo speed is unknown, defaulting to 1000
[  213.333189][ T7882] syz1: Port: 1 Link DOWN
[  213.552911][T13778] lo speed is unknown, defaulting to 1000
[  213.572101][T13783] netlink: 'syz.1.2016': attribute type 4 has an invalid length.
[  213.798507][   T33] audit: type=1107 audit(1751937203.544:3): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  214.432495][T13818] Bluetooth: MGMT ver 1.23
[  214.684897][T13826] lo speed is unknown, defaulting to 1000
[  214.889884][   T26] wlan0: Trigger new scan to find an IBSS to join
[  214.982487][T13836] __nla_validate_parse: 15 callbacks suppressed
[  214.982504][T13836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2030'.
[  215.143351][T13838] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  215.150804][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'.
[  215.231139][T13842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.248461][T13842] tipc: Resetting bearer <eth:syzkaller0>
[  215.264898][T13842] tipc: Disabling bearer <eth:syzkaller0>
[  215.371775][T13851] vlan6: entered allmulticast mode
[  215.470987][T13857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.483686][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  215.487295][T13857] syzkaller0: entered promiscuous mode
[  215.489051][T13857] syzkaller0: entered allmulticast mode
[  215.515946][T13857] tipc: Resetting bearer <eth:syzkaller0>
[  215.526878][T13856] tipc: Resetting bearer <eth:syzkaller0>
[  215.550186][T13856] tipc: Disabling bearer <eth:syzkaller0>
[  215.637160][T13864] 8021q: adding VLAN 0 to HW filter on device bond24
[  216.020333][T13890] lo speed is unknown, defaulting to 1000
[  216.109782][T13891] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.160093][T13891] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.210556][T13891] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.268788][T13896] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  216.283197][T13891] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.502271][T13891] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  216.505912][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2048'.
[  216.541710][T13891] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  216.596844][T13891] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  216.619219][T13891] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  216.871998][T13941] x_tables: duplicate underflow at hook 4
[  216.961725][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'.
[  216.987484][T13956] netlink: 'syz.1.2060': attribute type 1 has an invalid length.
[  217.009061][T13956] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.166695][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2063'.
[  217.293569][T13974] netlink: 'syz.0.2065': attribute type 1 has an invalid length.
[  217.360257][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2065'.
[  217.444746][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'.
[  217.478307][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'.
[  217.483033][T13979] siw: device registration error -23
[  217.607326][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'.
[  217.667881][T13996] lo speed is unknown, defaulting to 1000
[  217.710296][T13998] 8021q: adding VLAN 0 to HW filter on device bond15
[  217.738292][T13998] bond15: (slave batadv5): Opening slave failed
[  217.834192][   T36] wlan0: Trigger new scan to find an IBSS to join
[  218.613710][T14038] lo speed is unknown, defaulting to 1000
[  218.657424][T14042] netlink: 'syz.2.2083': attribute type 1 has an invalid length.
[  218.701231][T14042] 8021q: adding VLAN 0 to HW filter on device bond16
[  218.731959][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.756036][T14042] ipvlan1: entered allmulticast mode
[  218.758572][T14042] bond16: entered allmulticast mode
[  218.862869][T14045] netlink: 'syz.2.2084': attribute type 10 has an invalid length.
[  218.875507][T14045] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  219.110695][T14057] syzkaller0: entered promiscuous mode
[  219.113028][T14057] syzkaller0: entered allmulticast mode
[  219.281918][T14073] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  221.084049][T14073] tipc: Resetting bearer <eth:syzkaller0>
[  221.086390][T14073] tipc: Resetting bearer <eth:syzkaller0>
[  221.163116][T14087] dvmrp8: entered allmulticast mode
[  221.169334][T14084] dvmrp8: left allmulticast mode
[  221.177832][T14090] netlink: 'syz.0.2094': attribute type 1 has an invalid length.
[  221.222328][T14090] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  221.238290][T14090] __nla_validate_parse: 6 callbacks suppressed
[  221.238302][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'.
[  221.244238][T14090] 8021q: adding VLAN 0 to HW filter on device bond25
[  221.346938][T14097] syzkaller1: entered promiscuous mode
[  221.348824][T14097] syzkaller1: entered allmulticast mode
[  221.382672][T14098] xt_CT: No such helper "syz0"
[  221.387560][T14098] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  221.392821][T14098] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  221.399392][T14098] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  221.402159][T14098] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  221.408787][T14098] geneve1: entered promiscuous mode
[  221.475339][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2099'.
[  221.479662][T14113] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  221.534385][T14113] 8021q: adding VLAN 0 to HW filter on device bond28
[  221.552074][T14113] veth19: entered promiscuous mode
[  221.559915][T14113] bond28: (slave veth19): Enslaving as a backup interface with a down link
[  221.569690][T14113] bond25: (slave ip6gretap1): Releasing backup interface
[  221.578731][T14113] bond27: (slave bridge12): Releasing active interface
[  221.588727][T14113] bond28: (slave veth19): Releasing backup interface
[  221.728174][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2104'.
[  221.769826][T14133] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2103'.
[  223.147050][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'.
[  223.177222][T14145] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2109'.
[  223.361359][T14164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2114'.
[  223.397584][T14168] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2115'.
[  223.400844][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2115'.
[  223.432865][T14170] Cannot find del_set index 2 as target
[  223.514877][ T5203] Bluetooth: hci2: link tx timeout
[  223.518306][ T5203] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  223.521847][ T5203] Bluetooth: hci2: link tx timeout
[  223.523529][ T5203] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  223.712104][T14181] netlink: 'syz.0.2119': attribute type 11 has an invalid length.
[  223.715939][T14181] netlink: 'syz.0.2119': attribute type 11 has an invalid length.
[  223.718576][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2119'.
[  224.419917][T14198] openvswitch: netlink: Flow key attr not present in new flow.
[  224.561788][T14207] vxcan0: entered promiscuous mode
[  224.661133][T14212] netlink: 'syz.2.2130': attribute type 1 has an invalid length.
[  224.687763][T14212] bond17 (unregistering): Released all slaves
[  224.817303][T14225] netlink: 'syz.2.2134': attribute type 13 has an invalid length.
[  224.834733][T14225] netlink: 'syz.2.2134': attribute type 11 has an invalid length.
[  224.971228][T14243] IPv6: NLM_F_REPLACE set, but no existing node found!
[  225.038964][T14247] batadv_slave_0: entered allmulticast mode
[  225.044545][T14247] netlink: 'syz.2.2140': attribute type 6 has an invalid length.
[  225.081787][T14257] netlink: 'syz.1.2143': attribute type 13 has an invalid length.
[  225.096839][T14258] netlink: 'syz.1.2143': attribute type 13 has an invalid length.
[  225.200893][T14252] bridge9: entered promiscuous mode
[  225.203267][T14252] bridge9: entered allmulticast mode
[  225.594297][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  225.611789][ T5203] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  225.616718][ T5203] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  225.620850][ T5203] CPU: 1 UID: 0 PID: 5203 Comm: kworker/u11:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  225.626483][ T5203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.630820][ T5203] Workqueue: hci2 hci_cmd_sync_work
[  225.633034][ T5203] RIP: 0010:klist_remove+0x14a/0x340
[  225.635299][ T5203] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 d9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a d9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  225.643351][ T5203] RSP: 0018:ffffc90007ca76e0 EFLAGS: 00010202
[  225.646037][ T5203] RAX: 000000000000000b RBX: ffff888108c15640 RCX: 0000000000000000
[  225.649475][ T5203] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  225.652572][ T5203] RBP: ffffc90007ca77c8 R08: ffffffff8f879643 R09: 1ffffffff1f0f2c8
[  225.655915][ T5203] R10: dffffc0000000000 R11: fffffbfff1f0f2c9 R12: 0000000000000000
[  225.659254][ T5203] R13: 1ffff110215e620c R14: ffff88810af31060 R15: dffffc0000000000
[  225.662157][ T5203] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  225.665567][ T5203] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.667973][ T5203] CR2: 00007f805a986440 CR3: 000000003ab66000 CR4: 00000000000006f0
[  225.670868][ T5203] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  225.673920][ T5203] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  225.677124][ T5203] Call Trace:
[  225.678459][ T5203]  <TASK>
[  225.679580][ T5203]  ? __pfx_klist_remove+0x10/0x10
[  225.681337][ T5203]  ? __pfx_kobject_move+0x10/0x10
[  225.683087][ T5203]  ? get_device_parent+0x366/0x3a0
[  225.685099][ T5203]  device_move+0x193/0x700
[  225.686668][ T5203]  hci_conn_del_sysfs+0xb8/0x170
[  225.688321][ T5203]  hci_conn_del+0x8ff/0xcb0
[  225.689811][ T5203]  ? hci_abort_conn_sync+0x1f7/0xdf0
[  225.691551][ T5203]  hci_abort_conn_sync+0x5d1/0xdf0
[  225.693262][ T5203]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  225.695240][ T5203]  ? hci_conn_valid+0x21/0x230
[  225.696792][ T5203]  ? hci_conn_valid+0x21/0x230
[  225.698318][ T5203]  ? hci_conn_valid+0x21/0x230
[  225.699898][ T5203]  ? hci_conn_valid+0x211/0x230
[  225.701581][ T5203]  ? __pfx_abort_conn_sync+0x10/0x10
[  225.703670][ T5203]  hci_cmd_sync_work+0x213/0x3a0
[  225.705529][ T5203]  ? process_scheduled_works+0x9ef/0x17b0
[  225.707803][ T5203]  process_scheduled_works+0xae1/0x17b0
[  225.710071][ T5203]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.712697][ T5203]  worker_thread+0x8a0/0xda0
[  225.714667][ T5203]  kthread+0x711/0x8a0
[  225.716404][ T5203]  ? __pfx_worker_thread+0x10/0x10
[  225.718247][ T5203]  ? __pfx_kthread+0x10/0x10
[  225.719879][ T5203]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.721670][ T5203]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.723641][ T5203]  ? __pfx_kthread+0x10/0x10
[  225.725413][ T5203]  ret_from_fork+0x3fc/0x770
[  225.726965][ T5203]  ? __pfx_ret_from_fork+0x10/0x10
[  225.728702][ T5203]  ? __switch_to_asm+0x39/0x70
[  225.730304][ T5203]  ? __switch_to_asm+0x33/0x70
[  225.731983][ T5203]  ? __pfx_kthread+0x10/0x10
[  225.733607][ T5203]  ret_from_fork_asm+0x1a/0x30
[  225.735260][ T5203]  </TASK>
[  225.736300][ T5203] Modules linked in:
[  225.738488][ T5203] ---[ end trace 0000000000000000 ]---
[  225.740777][ T5203] RIP: 0010:klist_remove+0x14a/0x340
[  225.744190][ T5203] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 d9 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a d9 c6 f6 49 8b 44 24 58 48 89 44 24 08
[  225.751254][ T5203] RSP: 0018:ffffc90007ca76e0 EFLAGS: 00010202
[  225.753450][ T5203] RAX: 000000000000000b RBX: ffff888108c15640 RCX: 0000000000000000
[  225.756674][ T5203] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  225.759480][ T5203] RBP: ffffc90007ca77c8 R08: ffffffff8f879643 R09: 1ffffffff1f0f2c8
[  225.762454][ T5203] R10: dffffc0000000000 R11: fffffbfff1f0f2c9 R12: 0000000000000000
[  225.765274][ T5203] R13: 1ffff110215e620c R14: ffff88810af31060 R15: dffffc0000000000
[  225.768918][ T5203] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  225.772965][ T5203] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.776020][ T5203] CR2: 000056448d827000 CR3: 0000000122f6e000 CR4: 00000000000006f0
[  225.779336][ T5203] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  225.782085][ T5203] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  225.786002][ T5203] Kernel panic - not syncing: Fatal exception
[  225.788912][ T5203] Kernel Offset: disabled
[  225.790471][ T5203] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:13:35  Registers:
info registers vcpu 0

CPU#0
RAX=a11bdbaaf041da00 RBX=ffffffff81974d58 RCX=a11bdbaaf041da00 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2cf651e440 CR3=0000000027392000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007ff5f4611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007ca6e70
R8 =ffff888108978237 R9 =1ffff1102112f046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48c8 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f805a986440 CR3=000000003ab66000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2faf211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
