last executing test programs:

2.851731473s ago: executing program 2 (id=923):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f, @void, @value=0xfffe}, 0x94)

2.844026528s ago: executing program 2 (id=924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030429bd70000200000000000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000280012a008000111677265001c00028006000e000300000008000400050000000600030081000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}, {0x0}], 0x2}, 0x30120)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0xc940}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x102, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000400)=0x134, 0x4)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket(0x28, 0x5, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000080))
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0xf3, r9, 0x48000}, 0xc)

1.85212813s ago: executing program 2 (id=935):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000800}, 0x4000)
r2 = socket(0x6, 0x800, 0xe)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xf2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x11)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 32)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) (async)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r6)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40040) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4004000) (async)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4044005) (async)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, r8, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async)
socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64)
recvmsg$kcm(r2, &(0x7f0000001b40)={&(0x7f0000000980)=@un=@abs, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/98, 0x62}], 0x2, &(0x7f0000001ac0)=""/111, 0x6f}, 0x100) (async, rerun: 64)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0xb85445d17ba0c1f}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x4c, 0x0, 0x800, 0xfffffff3, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "715c923f54dc785a24e04b725642259c4e0e4f154df21529dcc7244f93588646"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001f40)={'syztnl0\x00', &(0x7f0000001e80)={'gre0\x00', <r10=>0x0, 0x7, 0x700, 0x5, 0x8, {{0x1c, 0x4, 0x3, 0x7, 0x70, 0x68, 0x0, 0xe0, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, {[@cipso={0x86, 0x5a, 0x3, [{0x5, 0x4, 'aj'}, {0x2, 0x3, "e7"}, {0x6, 0xa, "ec73c63f8ad364ef"}, {0x1, 0xc, "166bfff9184081b89108"}, {0x6, 0x6, "a6cfe1e4"}, {0x1, 0x4, "f3cc"}, {0x7, 0x7, "f98ee20746"}, {0x5, 0xd, "f969bf20c19e1dbbf52e3b"}, {0x1, 0xd, "60338fc53d593b92f37a57"}, {0x7, 0xc, "73bdba5dfe672765e74a"}]}]}}}}}) (async, rerun: 64)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002000)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x40, '\x00', 0x0, r4, 0x1, 0x4, 0x1}, 0x50) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x26, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0xb, 0x1, 0x4, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x64}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001e00)='GPL\x00', 0x7, 0x3b, &(0x7f0000001e40)=""/59, 0x4dcbed10bb26f88, 0x11, '\x00', r10, 0x25, r4, 0x8, &(0x7f0000001f80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x4, 0x2, 0x40, 0x312883ca}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002080)=[r5, r11], &(0x7f00000020c0)=[{0x0, 0x3, 0x5, 0xc}], 0x10, 0x1}, 0x94)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f00000021c0)={0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 'ovf\x00', 0x2, 0x4, 0x40}, 0x2c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002200)) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000002240), r2) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002500)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)={&(0x7f00000022c0)={0x1d4, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async, rerun: 32)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

1.672459957s ago: executing program 2 (id=936):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
close(0x4)
r5 = socket$netlink(0x10, 0x3, 0x7)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x1}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=ANY=[@ANYBLOB="0000408fb523bc7d73d6626341789fa47f03a62dee2d469436e8a624492fbfb604ca1ad8f735d12d4883ca41324c506c74996ccfc7034b5f2408b20418c66fa7cf94c32c2dcd0ab134e2f305f9b3c905a63b9f4eebd6fa6786f69c1f3257371d260a686f8fd0b20868da41bf3525cbdd921d30a8b717cf6dcb2f05a35acbacc3d631cc9ed3aa2e5adaf57997f93f906a52bdf5a169d750424586db3ee8b9944137", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x141, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
recvmmsg(r13, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1041}, {&(0x7f0000001200)=""/114, 0x72}], 0x2, 0x0, 0x300}, 0x562a}], 0x3ffffffffffff27, 0x0, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="030028bd700000dcdf250700000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000560000001400040073797a6b616c6c657230000000000000080005000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008194}, 0x8840)

1.152278672s ago: executing program 0 (id=939):
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000800)="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", 0x144) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000080)={'dummy0\x00', @ifru_settings={0x6, 0x8, @fr=&(0x7f0000000000)={0x5, 0x3, 0xd09c, 0x0, 0x1, 0x1, 0x4}}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="4200000004000000240012800b00010065727370616e00001400028006000300010000000500160001000000"], 0x44}}, 0x0) (async, rerun: 64)
r2 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x60600) (async)
r3 = socket$kcm(0x2d, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
r5 = socket(0x10, 0x803, 0x6) (async, rerun: 32)
r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40810)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a93000000000000009078"], 0x0) (async)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6}, 0x10) (async, rerun: 32)
sendto$packet(r2, &(0x7f0000000000)="ea92d2c62f06af98e71261176511dcf7709bbb3a5a39d941a80a2a591af8233a90d53fd2179462db29467833ae0bb191be3e67ba1efa029d159e67a72536154d1efd482ead06ba4e3e881e43bd1274f831a670d6870d37034a097fcc2a7f20a8c1a9a1addcc623d86dfd4fee46a72afde3b0e0e2d635102c91ad6ef04735eee5f19ccda69bd54cd108bf7a020dc87f02c4851cd2ee6308ff97882e82d192be7d21c3ef9f553c33247f9e204eb66812fc4644346154476744", 0xb8, 0x20008080, &(0x7f00000001c0)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5)
getsockname$packet(r5, 0x0, &(0x7f00000000c0))
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r11 = socket(0x6, 0x2, 0xffffffff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@delchain={0x478, 0x65, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x5, 0xfff2}, {0x1, 0x1a}, {0xe, 0xfff6}}, [@filter_kind_options=@f_flow={{0x9}, {0x438, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xfffffffb}, @TCA_FLOW_POLICE={0x41c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc87a, 0x2, 0x8, 0xfff, 0x0, 0xffffffff, 0x5, 0x4, 0x200, 0xa, 0x5e, 0x1ff, 0x6, 0x974, 0x1, 0x9, 0x0, 0x6, 0x207, 0x5, 0x0, 0x101, 0x6, 0xffffffff, 0x2, 0x7, 0x2, 0x8, 0x7, 0x2, 0x2, 0x3, 0x6, 0x7, 0xb54a, 0x2, 0x6, 0x0, 0x40, 0x1, 0x2, 0xd1ce, 0xc47, 0x1, 0x6, 0x4c7, 0x5, 0x80, 0x1009ce, 0x7, 0x10, 0x3, 0x4, 0x3, 0x5, 0x6, 0x80, 0x0, 0x9d6a, 0x20000000, 0x3ff, 0x1, 0x0, 0x5, 0x9, 0x1, 0x200, 0xfffff579, 0x40, 0x10000, 0x492, 0xfedd, 0x5, 0x2, 0x6, 0xfffffe00, 0x800000, 0x7, 0x0, 0x0, 0x9, 0xebf, 0xc837, 0xb85d, 0x9, 0x9, 0x5, 0x800, 0x1, 0x8, 0xeadc, 0x9, 0x3ff, 0xffffff81, 0x4, 0x4, 0x5, 0x8004, 0x10001, 0x9, 0x0, 0x5, 0x6, 0xb49, 0x42f, 0x8239, 0xb, 0x4, 0xdcd, 0x3ff, 0x2, 0x5, 0x628f34c, 0x8, 0x5, 0x9, 0x6b7c404d, 0x5, 0x100, 0xf, 0xad27, 0x0, 0x3, 0x5, 0x3, 0x3, 0xfffffffd, 0x2, 0x2de, 0x0, 0x7, 0x45a, 0x0, 0xaab, 0x2, 0x1, 0x400000, 0x7, 0x6, 0x2, 0xe3e, 0x8, 0x4, 0xb, 0x7f, 0x530, 0x9, 0x7, 0x1ff, 0x2, 0x2a, 0x0, 0x7, 0x5, 0x7, 0x5, 0x7, 0x2, 0x400, 0x2, 0x8, 0x2, 0x9a8, 0x8000, 0xca, 0x10000, 0x2, 0xffff, 0x1, 0x8000, 0x9a, 0x7, 0x6, 0x2, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x14095e68, 0x80000001, 0x8001, 0xfffeffff, 0x3, 0x2, 0x7d35, 0x1, 0x6, 0x9, 0x3b44, 0x6, 0x4, 0x1, 0x9, 0x6, 0x8, 0x7, 0x80000001, 0x400, 0x200, 0x8, 0x2, 0x9, 0x8, 0xd, 0x101, 0x2, 0x2, 0x81, 0x7f, 0x65, 0x1931, 0x1, 0x200, 0x9, 0x2e, 0x6, 0x6, 0xb0, 0x8, 0x1, 0x9, 0x80, 0x5, 0xe, 0x6915a6ee, 0xffff, 0x6c755193, 0x5, 0x1, 0x7, 0x7, 0x9, 0x83, 0x6, 0x0, 0x4, 0x4, 0x200, 0x8, 0x6, 0x4, 0x2, 0x9, 0x4, 0x5, 0x3, 0x4, 0x40000008, 0x0, 0x4, 0xcb62, 0x0, 0x2, 0x2f0, 0xab47]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x1ff}]}, 0x478}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000)

1.092407141s ago: executing program 0 (id=941):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe80000000000000000000fde10000aaff020000000000000000000000000001042022eb"], 0xfdef)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

1.085378699s ago: executing program 1 (id=942):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fc0f0000c1f2f1010000000c000200e1000000000000000c0005000a010000000000000c00050028010000000000000c00020000000100000000003bfcf368925e0ef2f74f4424f69f39dd681f440d86dd8c5eb0328ad144019f7208beed9aa30a0bcc2b3489"], 0x44}}, 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000480)=ANY=[], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07000000005f1e9ba53e8c93a9b1bb063855c600003b0000050000001800a31f7342dc01801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYRES8=r4], 0x28}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000104050000000304000000000000e3436f6c9ca517f08a9806e78be5dc1d9896458ce682b7bc4c08d1a9fd25d64012f36660739bd7e3075628824abb9314ff96d93db8b1d256231b2f1cd01f746386a6ecdcf060c62de3e033f041797c293d7304d94574defda547cc2c181c9b444bbdf73bd7dd84655b4f6d6be122cbd5cda9be5d36a5c070193617f74e892f2e6c35d338599a2fd5eb856859a083395fce08c699c00893a15f65b2f9758f77b857", @ANYRES32=0x0, @ANYBLOB="03050000200000001b00220036cebae810a60a9ff3918b2762a6d072ff90645afa05e500"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
close(0x3)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r10, @ANYBLOB="000226bd7000fbdbdf2509000000000001007063690000000200303030303a30303a31302e30000000002bff0300010000000800090042000000080001007063690011000200303030533a30303a31302e3000000000080003000200000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x40)

950.596555ms ago: executing program 0 (id=943):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000200)=0x3, 0x4)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff3a}, 0x52)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000029000000390000000000010800005ec0"], 0x18}}], 0x2, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000100)='\x00', 0x1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x40d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x99ffef750d96a51f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
socket(0x10, 0x803, 0x0)

742.922376ms ago: executing program 1 (id=944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x847)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008fc4c0000000c0a010100000000000000000a0000060900020073797a310000000009000100737900800c00018006000100d10300000c00008008000340000000022c0000000e0a01020000000000797a31000000000900020073797a3100000000dc0000001100010000000000000000000100000a00"/208], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2764c, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xe, 0x9}}]}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)

735.389243ms ago: executing program 0 (id=945):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r2, @ANYBLOB="05002f"], 0x2c}}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
close(0x3)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0xa11, 0x1000, 0xc200, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r7=>0x0})
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r7, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14)
unshare(0x40000)
socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r9, @ANYRES32=r7, @ANYBLOB="158804000301040024000e0000100000000000bf662824a73eec7d7f4e644c05000000000000000002000000000000000f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040080)

724.992862ms ago: executing program 2 (id=946):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f, @void, @value=0x1010000}, 0x94)

642.099419ms ago: executing program 1 (id=947):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r3, @ANYRESOCT=r2], 0x28}}, 0x8000) (async)
write(r0, 0x0, 0x0) (async)
unshare(0x400)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100140003800c000180050002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x0) (async)
bind$802154_raw(r5, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x58, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x44, 0x1, [@m_bpf={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6}, 0x28) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

592.846448ms ago: executing program 2 (id=948):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@empty, 0x1, 0x0, 0x1, 0x2, 0xc, 0xfff9}, &(0x7f0000000180)=0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1}}}, 0x24}}, 0x4000010)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={<r3=>0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, r6, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000006c0)={r3, 0x353}, &(0x7f0000000700)=0xc)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x0, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}})
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x10000, 0x4)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x4}, 0x10)
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002d77239c6aaaa88a800008100000086dd600000000020000120010000000000000000000000000000fe8000000000000000000000000000002f03000000000000071000000000020000d60400000000000000000100010100"], 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000ffff2abd7000fbdbdf2500000008b4dcdc4bb2b27059f3f2bbb734f22eb6dabb3b3f8961584f8029b78c6e3fb5ba92b8729a511b4e77d459953fbf75d8a24d5c687b223635e0fbc2141dcfa414b86276f3e015ceaaae10e176e42cc2327ecdad91ec414eb06a814e7143360863bf7e4e955c244bb8f5b40a5d9f3169f0f9", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000380012800b000100697036746e6c00002800028008001400ffffffff14000200fc00000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)

592.520583ms ago: executing program 1 (id=949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0xa1ffffff, 0x3}, {0x14, 0x19, {0x5, 0x1000, 0x0, 0x7000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x44040)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x9}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0x6}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/225, 0x47, 0xe1, 0x0, 0x7, 0x10000, @value=r3}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b4000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffd0a, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa07c53e4c92d84f3394d5ead33881c01ec616a7a5d6f7ef1c656", 0x96}], 0x15}, 0x20048020)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

488.658502ms ago: executing program 0 (id=950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdc2, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x4d, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea766ac3456d"}}}}, 0x73)
pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

486.938246ms ago: executing program 1 (id=951):
r0 = socket(0x40000000015, 0x5, 0x0)
epoll_create(0x8)
bind$inet(r0, 0x0, 0x0)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
pipe(0x0)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000d80)="f2435f0100088000008508004dae", 0xe, 0x45, &(0x7f0000000100)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20240028}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x18be000, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x20000080)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r11, &(0x7f0000002080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600400005000500000000"], 0x2c}}, 0x24000806)

59.891227ms ago: executing program 1 (id=952):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
close(r0)
socket(0x1e, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000000801010000000000ffff00030000020900010073797a31000000000600024088090000146f86eb1558e59064e4ccad66e37f8de6531d00048006000740000000060800e323276b141325afdbe7837556a0034306f5ea5be22d48dfe21d54f7f68eafc32bb2f69d69b336cd0195951f45ef9f81f9bb01068a753b75e109dc5676f67fdf"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = getpid()
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r8, 0x1, 0x0, 0xffffffff, {{}, {}, {0x14, 0x19, {0x3, 0x9, 0x1, 0x6}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48844}, 0x40010)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00'})
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x0)

0s ago: executing program 0 (id=953):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}, {0x85, 0x0, 0x0, 0x18}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
r4 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000)
setsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="666965720000000019b38e89000000000000000000000000000000000000040004"], &(0x7f0000000180)=0x2c)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000000c0))
close(0x4)

kernel console output (not intermixed with test programs):

expected cc 0x0c38 length: 249 > 2
[   65.036235][ T4999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.039505][ T4999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.042393][ T4999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.045738][ T4999] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.048167][ T4999] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.704543][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.707230][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.709604][ T5610] bridge_slave_0: entered allmulticast mode
[   65.713421][ T5610] bridge_slave_0: entered promiscuous mode
[   65.751634][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.754268][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.756557][ T5610] bridge_slave_1: entered allmulticast mode
[   65.759951][ T5610] bridge_slave_1: entered promiscuous mode
[   65.815222][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.820014][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.886418][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.889368][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.892199][ T5614] bridge_slave_0: entered allmulticast mode
[   65.896785][ T5614] bridge_slave_0: entered promiscuous mode
[   65.902033][ T5610] team0: Port device team_slave_0 added
[   65.914468][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.916803][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.918956][ T5614] bridge_slave_1: entered allmulticast mode
[   65.921579][ T5614] bridge_slave_1: entered promiscuous mode
[   65.925417][ T5610] team0: Port device team_slave_1 added
[   65.947669][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.950051][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.952307][ T5618] bridge_slave_0: entered allmulticast mode
[   65.955551][ T5618] bridge_slave_0: entered promiscuous mode
[   65.975122][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.977365][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.985694][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.990061][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.992812][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.997579][ T5618] bridge_slave_1: entered allmulticast mode
[   66.000625][ T5618] bridge_slave_1: entered promiscuous mode
[   66.013596][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.017752][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.020618][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.028781][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.046430][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.067930][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.072595][ T5614] team0: Port device team_slave_0 added
[   66.075805][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.088471][ T5614] team0: Port device team_slave_1 added
[   66.137530][ T5618] team0: Port device team_slave_0 added
[   66.147224][ T5610] hsr_slave_0: entered promiscuous mode
[   66.150352][ T5610] hsr_slave_1: entered promiscuous mode
[   66.166142][ T5618] team0: Port device team_slave_1 added
[   66.169359][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.171615][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.179902][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.184742][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.186991][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.195790][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.262720][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.265149][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.272514][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.278142][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.280311][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.287954][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.323314][ T5614] hsr_slave_0: entered promiscuous mode
[   66.325750][ T5614] hsr_slave_1: entered promiscuous mode
[   66.328306][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   66.330091][ T5614] Cannot create hsr debugfs directory
[   66.373542][ T5618] hsr_slave_0: entered promiscuous mode
[   66.376581][ T5618] hsr_slave_1: entered promiscuous mode
[   66.378792][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   66.380728][ T5618] Cannot create hsr debugfs directory
[   66.608153][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.616916][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.620968][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.627636][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.638354][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.642711][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.646861][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.650885][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.692305][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.698253][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.706863][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.712081][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.715518][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.722442][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.726696][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.733203][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.800017][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.805566][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   66.809055][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.814688][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   66.818738][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.827291][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   66.831445][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.838192][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   66.962833][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.988386][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.012803][ T5610] 8021q: adding VLAN 0 to HW filter on device team0
[   67.028761][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.035295][   T54] Bluetooth: hci1: command tx timeout
[   67.037911][ T4999] Bluetooth: hci0: command tx timeout
[   67.039141][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.043015][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.052126][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   67.063311][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.066078][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.086836][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.089520][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.103536][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   67.112530][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.115264][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.124730][ T4999] Bluetooth: hci2: command tx timeout
[   67.145204][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.147978][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.163411][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.165784][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.538197][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.560347][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.619194][ T5610] veth0_vlan: entered promiscuous mode
[   67.653332][ T5614] veth0_vlan: entered promiscuous mode
[   67.664765][ T5610] veth1_vlan: entered promiscuous mode
[   67.680424][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.692672][ T5614] veth1_vlan: entered promiscuous mode
[   67.727800][ T5610] veth0_macvtap: entered promiscuous mode
[   67.737169][ T5610] veth1_macvtap: entered promiscuous mode
[   67.774876][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.781069][ T5614] veth0_macvtap: entered promiscuous mode
[   67.788113][ T5618] veth0_vlan: entered promiscuous mode
[   67.797691][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.802346][ T5614] veth1_macvtap: entered promiscuous mode
[   67.815641][ T5618] veth1_vlan: entered promiscuous mode
[   67.830422][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.836643][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.846598][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.850546][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.857002][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.863628][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.899010][ T5666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.918173][ T5666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.923168][ T5666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.941754][ T5666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.031839][ T5618] veth0_macvtap: entered promiscuous mode
[   68.062789][ T5618] veth1_macvtap: entered promiscuous mode
[   68.084422][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.113436][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.142624][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.148383][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.192766][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.199818][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.204636][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.207062][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.207614][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.216663][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.226946][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.251074][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.262706][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.284496][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.390531][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.408526][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.416377][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.462616][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.465786][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.642238][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   68.683883][ T5732] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   68.929397][ T5728] Zero length message leads to an empty skb
[   69.026510][ T5750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'.
[   69.076593][ T5752] netlink: 'syz.0.8': attribute type 2 has an invalid length.
[   69.082739][ T5752] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   69.125959][ T4999] Bluetooth: hci0: command tx timeout
[   69.128572][   T54] Bluetooth: hci1: command tx timeout
[   69.179365][ T5760] can: request_module (can-proto-0) failed.
[   69.204082][ T4999] Bluetooth: hci2: command tx timeout
[   69.275136][ T5768] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   69.282118][ T5768] bond1 (unregistering): Released all slaves
[   69.594124][ T5771] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13'.
[   69.611054][ T5777] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   69.819249][ T5788] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[   69.825294][ T5788] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   69.932820][ T5794] batadv1: entered promiscuous mode
[   69.935353][ T5794] batadv1: entered allmulticast mode
[   70.020785][ T5801] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   70.203769][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.213673][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.271702][ T5809] bridge1: entered promiscuous mode
[   70.273328][ T5809] bridge1: entered allmulticast mode
[   70.278314][ T5809] team0: Port device bridge1 added
[   70.307192][ T5819] netlink: 'syz.0.27': attribute type 10 has an invalid length.
[   70.353613][ T5819] team0 (unregistering): Port device team_slave_0 removed
[   70.371608][ T5819] team0 (unregistering): Port device team_slave_1 removed
[   70.418116][ T5815] bridge2: entered promiscuous mode
[   70.426709][ T5815] bridge2: entered allmulticast mode
[   70.451860][ T5815] team0: Port device bridge2 added
[   70.476840][ T5831] bridge0: port 3(team0) entered blocking state
[   70.482466][ T5831] bridge0: port 3(team0) entered disabled state
[   70.486364][ T5831] team0: entered allmulticast mode
[   70.488020][ T5831] team_slave_0: entered allmulticast mode
[   70.490955][ T5831] team_slave_1: entered allmulticast mode
[   70.512328][ T5831] team0: entered promiscuous mode
[   70.516731][ T5831] team_slave_0: entered promiscuous mode
[   70.519718][ T5831] team_slave_1: entered promiscuous mode
[   70.522661][ T5831] bridge0: port 3(team0) entered blocking state
[   70.526138][ T5831] bridge0: port 3(team0) entered forwarding state
[   70.588990][ T5843] netlink: 5 bytes leftover after parsing attributes in process `syz.0.30'.
[   70.598779][ T5843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   70.625851][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'.
[   70.637044][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'.
[   70.807740][ T5859] lo: entered allmulticast mode
[   70.879798][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   71.053111][ T5874] netlink: 44 bytes leftover after parsing attributes in process `syz.0.40'.
[   71.066624][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.069824][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.101139][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'.
[   71.146365][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.155572][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.194799][   T54] Bluetooth: hci1: command tx timeout
[   71.196725][ T4999] Bluetooth: hci0: command tx timeout
[   71.258071][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.260943][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.266542][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.270543][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.273985][ T4999] Bluetooth: hci2: command tx timeout
[   71.559444][ T5899] netlink: 'syz.1.47': attribute type 1 has an invalid length.
[   71.707934][ T5894] netlink: 80 bytes leftover after parsing attributes in process `syz.2.46'.
[   72.013376][ T5927] syzkaller0: entered promiscuous mode
[   72.015577][ T5927] syzkaller0: entered allmulticast mode
[   72.021190][ T5922] geneve0: entered allmulticast mode
[   72.149738][ T5934] bond1: option arp_interval: invalid value (18446744073709551615)
[   72.152187][ T5934] bond1: option arp_interval: allowed values 0 - 2147483647
[   72.161033][ T5934] bond1 (unregistering): Released all slaves
[   72.177478][ T5937] netlink: 'syz.1.57': attribute type 9 has an invalid length.
[   72.291622][ T5939] bond1: (slave bond_slave_1): Device is not our slave
[   72.294365][ T5939] bond1: option active_slave: invalid value (bond_slave_1)
[   72.298574][ T5939] bond1 (unregistering): Released all slaves
[   72.649280][ T5962] x_tables: unsorted underflow at hook 3
[   72.651669][ T5962] netlink: 'syz.1.64': attribute type 1 has an invalid length.
[   72.676773][ T5962] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.273988][ T4999] Bluetooth: hci0: command tx timeout
[   73.276250][   T54] Bluetooth: hci1: command tx timeout
[   73.363879][ T4999] Bluetooth: hci2: command tx timeout
[   73.564405][ T5980] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   73.572516][ T5980] bond2: (slave lo): Enslaving as an active interface with an up link
[   73.576397][ T5980] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   73.620155][ T5983] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   73.642142][ T5983] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.651724][ T5983] vlan2: entered allmulticast mode
[   73.653281][ T5983] bond3: entered allmulticast mode
[   73.665056][ T5983] bond3: (slave geneve2): making interface the new active one
[   73.667488][ T5983] geneve2: entered allmulticast mode
[   73.670826][ T5983] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   73.686146][ T5983] syz.1.68 (5983) used greatest stack depth: 19424 bytes left
[   73.816071][ T5990] __nla_validate_parse: 3 callbacks suppressed
[   73.816084][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'.
[   75.520031][ T5957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.526361][ T5994] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   75.532564][ T5994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'.
[   75.667361][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'.
[   75.672564][ T6000] openvswitch: netlink: Message has 2 unknown bytes.
[   75.685605][ T5998] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   75.688548][ T5999] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   75.732729][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.73'.
[   75.741649][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   75.746484][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   75.757119][ T6009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.797639][ T6012] netlink: 'syz.2.75': attribute type 44 has an invalid length.
[   75.803580][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'.
[   75.895759][ T6022] netlink: 181256 bytes leftover after parsing attributes in process `syz.1.77'.
[   75.910679][ T6022] : renamed from dummy0 (while UP)
[   75.977768][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'.
[   75.981383][ T6030] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   75.984368][ T6030] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.80'.
[   76.031203][ T6031] macvlan2: entered allmulticast mode
[   76.033633][ T6031] veth1_vlan: entered allmulticast mode
[   76.113369][ T6038] bond1: entered allmulticast mode
[   76.146380][ T6038] veth5: entered allmulticast mode
[   76.153233][ T6038] bond1: (slave veth5): Enslaving as an active interface with an up link
[   76.157030][ T6045] tipc: Invalid UDP bearer configuration
[   76.157055][ T6045] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   76.184553][ T6038] bond1 (unregistering): (slave veth5): Releasing backup interface
[   76.193083][ T6038] bond1 (unregistering): Released all slaves
[   76.198099][ T6047] netlink: 'syz.1.85': attribute type 13 has an invalid length.
[   76.201107][ T6047] netlink: 'syz.1.85': attribute type 17 has an invalid length.
[   76.337557][ T6047] geneve0: left allmulticast mode
[   76.416032][ T6047] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.424632][ T6047] vlan2: left allmulticast mode
[   76.426693][ T6047] bond3: left allmulticast mode
[   76.428678][ T6047] geneve2: left allmulticast mode
[   76.435042][ T6047] macvlan2: left allmulticast mode
[   76.437163][ T6047] veth1_vlan: left allmulticast mode
[   76.502705][ T6054] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   76.507388][ T6054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.525241][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   76.601185][ T6062] sctp: [Deprecated]: syz.0.89 (pid 6062) Use of int in maxseg socket option.
[   76.601185][ T6062] Use struct sctp_assoc_value instead
[   76.728703][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   76.733237][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   76.808474][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.823356][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.843142][ T6070] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   77.125362][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.130602][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.139796][ T6065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   77.143595][ T6065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   77.162596][ T6065] veth1_vlan: left promiscuous mode
[   77.166906][ T6065] veth0_vlan: left promiscuous mode
[   77.169247][ T6065] veth0_vlan: entered promiscuous mode
[   77.175038][ T6065] veth1_vlan: entered promiscuous mode
[   77.181461][ T6065] veth1_macvtap: left promiscuous mode
[   77.214313][ T6065] veth0_macvtap: left promiscuous mode
[   77.217751][ T6065] veth0_macvtap: entered promiscuous mode
[   77.226119][ T6065] veth1_macvtap: entered promiscuous mode
[   77.235328][ T6065] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   77.259492][ T6065] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.274179][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.291553][ T6065] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.312302][ T6065] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.442165][ T5666] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.447241][ T6068] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.459144][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.461553][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.465375][ T5674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.470672][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.473158][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.571006][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.626541][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.638581][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.642249][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.706520][ T5674] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.806027][ T6084] netlink: 'syz.2.93': attribute type 10 has an invalid length.
[   77.817553][ T6084] bridge0: port 3(team0) entered disabled state
[   77.830063][ T6084] team0 (unregistering): left allmulticast mode
[   77.836759][ T6084] team_slave_0: left allmulticast mode
[   77.839084][ T6084] team_slave_1: left allmulticast mode
[   77.841492][ T6084] team0 (unregistering): left promiscuous mode
[   77.844299][ T6084] team_slave_0: left promiscuous mode
[   77.846682][ T6084] team_slave_1: left promiscuous mode
[   77.849303][ T6084] bridge0: port 3(team0) entered disabled state
[   77.897261][ T6084] team0 (unregistering): Port device team_slave_0 removed
[   77.906676][ T6084] team0 (unregistering): Port device team_slave_1 removed
[   77.933382][ T6084] team0 (unregistering): Port device bridge1 removed
[   77.957766][ T6084] team0 (unregistering): Port device bridge2 removed
[   78.199178][ T6094] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   78.215972][ T6093] bond1: entered allmulticast mode
[   78.402148][ T6105] pimreg: entered allmulticast mode
[   78.475923][ T6107] bond2: entered promiscuous mode
[   78.477964][ T6107] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.494977][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   78.499143][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   78.513925][ T6107] bond2: (slave bridge4): making interface the new active one
[   78.516894][ T6107] bridge4: entered promiscuous mode
[   78.522110][ T6107] bridge4: left promiscuous mode
[   78.531636][ T6051] Set syz1 is full, maxelem 65536 reached
[   78.544255][  T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   78.613040][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.615502][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.662885][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.671174][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.783097][ T6117] tap0: tun_chr_ioctl cmd 1074025692
[   78.786360][ T5666] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.793127][ T5666] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.837178][ T5666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.845746][ T5666] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.969853][ T6131] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[   78.975825][ T6131] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   79.145903][ T6145] __nla_validate_parse: 4 callbacks suppressed
[   79.145921][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'.
[   79.152843][ T6145] unsupported nla_type 216
[   79.201330][ T6149] bond4: entered promiscuous mode
[   79.203259][ T6149] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.221204][ T6149] bond4: (slave bridge1): making interface the new active one
[   79.226744][ T6149] bridge1: entered promiscuous mode
[   79.231491][ T6149] bridge1: left promiscuous mode
[   79.278491][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   79.428789][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'.
[   79.455739][ T6164] bond0: entered promiscuous mode
[   79.457518][ T6164] bond_slave_0: entered promiscuous mode
[   79.459791][ T6164] bond_slave_1: entered promiscuous mode
[   79.464922][ T6164] batadv0: entered promiscuous mode
[   79.468449][ T6164] 8021q: adding VLAN 0 to HW filter on device hsr1
[   79.472299][ T6164] bond0: left promiscuous mode
[   79.473953][ T6164] bond_slave_0: left promiscuous mode
[   79.475878][ T6164] bond_slave_1: left promiscuous mode
[   79.478209][ T6164] batadv0: left promiscuous mode
[   79.598358][ T6176] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   79.618218][ T6176] syzkaller0: entered promiscuous mode
[   79.621830][ T6176] syzkaller0: entered allmulticast mode
[   79.661514][ T6182] netlink: 76 bytes leftover after parsing attributes in process `syz.2.116'.
[   79.705195][ T6187] IPv6: NLM_F_CREATE should be specified when creating new route
[   79.708600][ T6187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.712138][ T6187] IPv6: NLM_F_CREATE should be set when creating new route
[   79.714778][ T6187] IPv6: NLM_F_CREATE should be set when creating new route
[   79.716950][ T6187] IPv6: NLM_F_CREATE should be set when creating new route
[   79.940685][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   79.947635][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   80.190831][ T6214] pimreg: entered allmulticast mode
[   80.198567][ T6212] pimreg: left allmulticast mode
[   80.220705][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   80.257424][   T56] block nbd0: Receive control failed (result -32)
[   80.362538][ T6232] bond6: entered allmulticast mode
[   80.389563][ T6232] veth3: entered allmulticast mode
[   80.392944][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'.
[   80.396438][ T6232] bond6: (slave veth3): Enslaving as an active interface with an up link
[   80.409660][ T6232] bond6 (unregistering): (slave veth3): Releasing backup interface
[   80.423923][ T6232] bond6 (unregistering): Released all slaves
[   80.452196][ T6235] vlan3: entered allmulticast mode
[   80.456713][ T6235] veth0_to_team: entered allmulticast mode
[   80.504653][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'.
[   80.507502][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'.
[   80.524990][ T6242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.532018][ T6242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.538332][ T6242] bond0 (unregistering): Released all slaves
[   80.559837][ T6244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   80.578147][ T6244] validate_nla: 3 callbacks suppressed
[   80.578158][ T6244] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[   80.628310][ T6251] netlink: 'syz.1.132': attribute type 30 has an invalid length.
[   80.645031][ T6251] netlink: 'syz.1.132': attribute type 30 has an invalid length.
[   80.645202][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.651048][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.659683][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.663132][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.722767][ T6254] veth1_macvtap: left promiscuous mode
[   80.727496][ T6254] macsec0: entered promiscuous mode
[   80.768317][ T6254] veth1_macvtap: entered promiscuous mode
[   80.773163][ T6254] macsec0: left promiscuous mode
[   80.780441][ T6254] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   80.808146][ T6254] pimreg: entered allmulticast mode
[   80.815367][ T6254] pimreg: left allmulticast mode
[   80.847182][ T6257] bond4: entered allmulticast mode
[   80.862341][ T6257] veth5: entered allmulticast mode
[   80.868726][ T6257] bond4: (slave veth5): Enslaving as an active interface with an up link
[   80.876160][ T6257] bond4 (unregistering): (slave veth5): Releasing backup interface
[   80.879763][ T6257] bond4 (unregistering): Released all slaves
[   80.983677][ T6263] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   80.989733][ T6263] tipc: Started in network mode
[   80.991851][ T6263] tipc: Node identity 72cd58a89856, cluster identity 4711
[   80.995458][ T6263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.033115][ T6264] syzkaller0: entered promiscuous mode
[   81.037146][ T6264] syzkaller0: entered allmulticast mode
[   81.041650][ T6264] tipc: Resetting bearer <eth:syzkaller0>
[   81.073157][ T6263] tipc: Resetting bearer <eth:syzkaller0>
[   82.203219][ T6263] tipc: Disabling bearer <eth:syzkaller0>
[   82.230665][ T5674] tipc: Node number set to 3936049320
[   82.448015][ T6296] xt_policy: too many policy elements
[   82.453869][ T6296] netlink: 'syz.0.144': attribute type 13 has an invalid length.
[   82.457112][ T6296] netlink: 'syz.0.144': attribute type 17 has an invalid length.
[   82.517692][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.563659][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.569000][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.578749][ T6296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   82.593958][ T6296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.615027][ T6296] veth1_vlan: left promiscuous mode
[   82.621017][ T6296] veth0_vlan: left promiscuous mode
[   82.634528][ T6296] veth0_vlan: entered promiscuous mode
[   82.640299][ T6296] veth1_vlan: entered promiscuous mode
[   82.646934][ T6296] veth1_macvtap: left promiscuous mode
[   82.650454][ T6296] veth0_macvtap: left promiscuous mode
[   82.653200][ T6296] veth0_macvtap: entered promiscuous mode
[   82.669897][ T6296] veth1_macvtap: entered promiscuous mode
[   82.676555][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.684570][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.692899][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.704348][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.715571][ T6296] veth5: left allmulticast mode
[   82.722801][ T6296] vlan3: left allmulticast mode
[   82.724808][ T6296] veth0_to_team: left allmulticast mode
[   82.728195][ T6296] veth0_to_team: entered promiscuous mode
[   82.745565][ T6298] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   82.757544][ T6298] bond6 (unregistering): Released all slaves
[   82.782297][ T6307] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   82.782903][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.787893][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.798602][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.800783][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.835073][ T5666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.844364][ T6303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.883201][ T6307] bond0: entered promiscuous mode
[   82.886076][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.896523][ T5666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.907024][ T6303] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   82.912146][ T6307] bond0: (slave bridge2): making interface the new active one
[   82.915353][ T6307] bridge2: entered promiscuous mode
[   82.918337][ T6307] bond0: (slave bridge2): Enslaving as an active interface with an up link
[   82.921187][ T5666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.927129][ T5666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.107185][ T6326] syzkaller0: entered promiscuous mode
[   83.109125][ T6326] syzkaller0: entered allmulticast mode
[   83.115251][ T6326] netlink: 'syz.0.150': attribute type 1 has an invalid length.
[   83.175979][ T6330] bridge_slave_1: left allmulticast mode
[   83.178119][ T6330] bridge_slave_1: left promiscuous mode
[   83.180586][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.187010][ T6330] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   83.257303][ T5645] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   83.261322][ T6332] tipc: Started in network mode
[   83.263425][ T6332] tipc: Node identity 7e7a8fbd5425, cluster identity 4711
[   83.266737][ T6332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.269356][ T6333] syzkaller0: entered promiscuous mode
[   83.271592][ T6333] syzkaller0: entered allmulticast mode
[   83.307231][ T6333] tipc: Resetting bearer <eth:syzkaller0>
[   83.338855][ T6337] netlink: 'syz.1.153': attribute type 21 has an invalid length.
[   83.341847][ T6333] tipc: Disabling bearer <eth:syzkaller0>
[   83.580889][ T6348] syzkaller0: entered promiscuous mode
[   83.582976][ T6348] syzkaller0: entered allmulticast mode
[   84.781299][ T6356] __nla_validate_parse: 14 callbacks suppressed
[   84.781318][ T6356] netlink: 104 bytes leftover after parsing attributes in process `syz.2.159'.
[   84.821852][ T6358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.837239][ T6358] syzkaller0: entered promiscuous mode
[   84.843961][ T6358] syzkaller0: entered allmulticast mode
[   84.864859][ T6358] tipc: Resetting bearer <eth:syzkaller0>
[   84.882486][ T6357] tipc: Resetting bearer <eth:syzkaller0>
[   84.894966][ T6357] tipc: Disabling bearer <eth:syzkaller0>
[   84.918540][ T6362] syzkaller1: entered promiscuous mode
[   84.921378][ T6362] syzkaller1: entered allmulticast mode
[   84.936702][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'.
[   84.979453][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   85.031433][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   85.085694][ T6376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.093439][ T6376] d: renamed from syzkaller0
[   85.104952][ T6376] tipc: Disabling bearer <eth:syzkaller0>
[   85.159488][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.212150][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.224353][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.312570][ T6376] bridge1: left promiscuous mode
[   85.314488][ T6376] bridge1: left allmulticast mode
[   85.316537][ T6376] bridge2: left promiscuous mode
[   85.318526][ T6376] bridge2: left allmulticast mode
[   85.322329][ T6376] bond1: left allmulticast mode
[   85.324953][ T6376] bond2: left promiscuous mode
[   85.349437][ T6376] veth5: left allmulticast mode
[   85.359854][ T5645] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.363697][ T5645] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.387865][ T5645] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.391441][ T5645] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.539664][ T6388] syzkaller0: entered promiscuous mode
[   85.541840][ T6388] syzkaller0: entered allmulticast mode
[   85.609383][ T6392] bond1: entered promiscuous mode
[   85.611850][ T6392] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.642734][ T6392] bond1: (slave bridge3): making interface the new active one
[   85.645671][ T6392] bridge3: entered promiscuous mode
[   85.650299][ T6392] bridge3: left promiscuous mode
[   85.728086][ T6397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.730773][ T6397] syzkaller0: entered promiscuous mode
[   85.732960][ T6397] syzkaller0: entered allmulticast mode
[   85.738362][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[   85.741118][ T6396] tipc: Resetting bearer <eth:syzkaller0>
[   85.755008][ T6396] tipc: Disabling bearer <eth:syzkaller0>
[   85.839174][ T6402] sctp: [Deprecated]: syz.1.177 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.839174][ T6402] Use struct sctp_sack_info instead
[   85.851852][ T6402] sctp: [Deprecated]: syz.1.177 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.851852][ T6402] Use struct sctp_sack_info instead
[   85.877466][ T6402] validate_nla: 4 callbacks suppressed
[   85.877490][ T6402] netlink: 'syz.1.177': attribute type 10 has an invalid length.
[   85.893059][ T6402] team0 (unregistering): Port device team_slave_0 removed
[   85.907873][ T6402] team0 (unregistering): Port device team_slave_1 removed
[   86.711291][ T6408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   86.766972][ T6423] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[   86.790813][ T6423] bond5: entered promiscuous mode
[   86.793083][ T6423] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.824678][ T6423] bond5: (slave bridge5): making interface the new active one
[   86.827703][ T6423] bridge5: entered promiscuous mode
[   86.832009][ T6423] bridge5: left promiscuous mode
[   86.954070][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   86.961574][   T10] cfg80211: failed to load regulatory.db
[   86.995111][ T6430] netlink: 'syz.0.184': attribute type 1 has an invalid length.
[   87.035920][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   87.040647][ T6430] bond2: entered promiscuous mode
[   87.046390][ T6430] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.092074][ T6430] bond2: (slave bridge3): making interface the new active one
[   87.096161][ T6430] bridge3: entered promiscuous mode
[   87.121724][ T6430] bridge3: left promiscuous mode
[   87.296832][ T6454] netlink: 'syz.1.190': attribute type 1 has an invalid length.
[   87.341441][ T6454] 8021q: adding VLAN 0 to HW filter on device bond6
[   87.382330][ T6454] bond6: (slave gretap1): making interface the new active one
[   87.396684][ T6454] bond6: (slave gretap1): Enslaving as an active interface with an up link
[   87.614458][ T6476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'.
[   87.701788][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   87.708637][ T6479] bond7: entered allmulticast mode
[   87.734997][ T6479] veth5: entered allmulticast mode
[   87.739936][ T6479] bond7: (slave veth5): Enslaving as an active interface with an up link
[   87.751719][ T6479] bond7 (unregistering): (slave veth5): Releasing backup interface
[   87.758767][ T6479] bond7 (unregistering): Released all slaves
[   87.779840][ T6482] syzkaller0: entered promiscuous mode
[   87.783995][ T6482] syzkaller0: entered allmulticast mode
[   87.942497][ T6487] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   87.952183][ T6487] bond6 (unregistering): Released all slaves
[   87.985232][ T6499] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[   87.992379][ T6499] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   87.995193][ T6499] netlink: 88 bytes leftover after parsing attributes in process `syz.1.201'.
[   87.998009][ T6499] netlink: 642 bytes leftover after parsing attributes in process `syz.1.201'.
[   88.001186][ T6499] netlink: 1 bytes leftover after parsing attributes in process `syz.1.201'.
[   88.010603][ T6499] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   88.034090][ T6499] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.079580][ T6502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.202'.
[   88.125854][ T6507] bond8 (unregistering): Released all slaves
[   88.140346][ T6510] tunl0: entered promiscuous mode
[   88.149187][ T6510] netlink: 'syz.0.205': attribute type 4 has an invalid length.
[   88.276824][ T6519] tunl0: left promiscuous mode
[   88.296787][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.299478][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.385890][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.390218][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.439566][ T6519] bond0: left promiscuous mode
[   88.441237][ T6519] bridge2: left promiscuous mode
[   88.448030][ T6519] bond1: left promiscuous mode
[   88.451379][ T6519] bond2: left promiscuous mode
[   88.466706][ T5645] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.476361][ T5645] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.492507][ T5645] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.527090][ T6525] syzkaller0: entered promiscuous mode
[   88.528832][ T6525] syzkaller0: entered allmulticast mode
[   88.531318][ T5645] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.553831][ T6525] netlink: 'syz.2.211': attribute type 16 has an invalid length.
[   88.558491][ T6525] netlink: 'syz.2.211': attribute type 3 has an invalid length.
[   89.667445][ T6542] : renamed from wg2
[   89.708285][ T6547] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   89.723417][ T6547] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.777686][ T6547] veth9: entered promiscuous mode
[   89.786670][ T6547] bond3: (slave veth9): Enslaving as an active interface with an up link
[   89.808871][ T6551] __nla_validate_parse: 4 callbacks suppressed
[   89.808887][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'.
[   90.006833][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'.
[   90.267274][ T6570] syzkaller0: entered promiscuous mode
[   90.270122][ T6570] syzkaller0: entered allmulticast mode
[   90.347392][ T6586] openvswitch: netlink: IP tunnel dst address not specified
[   90.946219][ T6599] netlink: 52 bytes leftover after parsing attributes in process `syz.2.229'.
[   90.950557][ T6599] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   90.954406][ T6599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.989927][ T6603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.231'.
[   91.152238][ T6605] netlink: 'syz.0.231': attribute type 11 has an invalid length.
[   91.152587][ T6611] netlink: 'syz.2.232': attribute type 2 has an invalid length.
[   91.158893][ T6611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.232'.
[   91.159651][ T6605] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.231'.
[   91.190415][ T6615] netlink: 128 bytes leftover after parsing attributes in process `syz.1.233'.
[   91.300168][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[   91.314104][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'.
[   91.322681][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'.
[   91.429505][ T6636] syzkaller1: entered promiscuous mode
[   91.431169][ T6636] syzkaller1: entered allmulticast mode
[   91.486410][ T6645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.504020][ T6642] tipc: Disabling bearer <eth:syzkaller0>
[   91.564519][ T6648] IPv6: sit2: Disabled Multicast RS
[   91.697418][ T5719] IPVS: starting estimator thread 0...
[   91.804844][ T6657] IPVS: using max 45 ests per chain, 108000 per kthread
[   92.200244][ T6681] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   92.203101][ T6681] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.344545][ T6688] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   92.369652][ T6688] bond8: entered promiscuous mode
[   92.371454][ T6688] 8021q: adding VLAN 0 to HW filter on device bond8
[   92.394543][ T6688] bond8: (slave bridge2): making interface the new active one
[   92.396957][ T6688] bridge2: entered promiscuous mode
[   92.399885][ T6688] bridge2: left promiscuous mode
[   92.755782][ T6716] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.862116][ T6724] veth10: entered allmulticast mode
[   93.296526][ T6754] netlink: 'syz.2.275': attribute type 30 has an invalid length.
[   93.305209][ T6754] bond0: option arp_missed_max: invalid value (0)
[   93.308667][ T6754] bond0: option arp_missed_max: allowed values 1 - 255
[   93.358696][ T6754] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   93.362641][ T6754] bond7 (unregistering): Released all slaves
[   93.375740][ T6758] netlink: 'syz.1.277': attribute type 12 has an invalid length.
[   93.723423][ T6788] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[   93.741923][ T6788] ip6gretap2: entered promiscuous mode
[   96.834872][ T6793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.839946][ T6827] netlink: 'syz.1.294': attribute type 11 has an invalid length.
[   96.935907][ T6833] __nla_validate_parse: 10 callbacks suppressed
[   96.935919][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'.
[   96.995201][ T6834] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   97.011078][ T6834] 8021q: adding VLAN 0 to HW filter on device bond4
[   97.018136][ T6834] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   97.021776][ T6834] veth9: left promiscuous mode
[   97.026639][ T6834] ip6gretap2: left promiscuous mode
[   97.130881][ T6846] netlink: 204 bytes leftover after parsing attributes in process `syz.0.299'.
[   97.134845][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'.
[   97.139524][ T6846] tc_dump_action: action bad kind
[   97.229737][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'.
[   97.247183][ T6846] hsr_slave_0: left promiscuous mode
[   97.256147][ T6846] hsr_slave_1: left promiscuous mode
[   97.508939][ T6874] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   97.509609][ T6872] netlink: 256 bytes leftover after parsing attributes in process `syz.0.305'.
[   97.511612][ T6874] bond5: left promiscuous mode
[   97.524097][ T6872] netlink: 72 bytes leftover after parsing attributes in process `syz.0.305'.
[   97.538868][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[   97.542068][ T6874] netlink: 'syz.2.307': attribute type 5 has an invalid length.
[   97.545134][ T6874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'.
[   97.552704][ T6874] geneve2: entered promiscuous mode
[   97.555104][ T6874] geneve2: entered allmulticast mode
[   97.558893][ T5645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   97.562497][ T5645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   97.576850][ T5645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   97.579405][ T5645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   97.592954][ T6879] netlink: 'syz.0.309': attribute type 13 has an invalid length.
[   97.597028][ T6879] netlink: 'syz.0.309': attribute type 17 has an invalid length.
[   97.659687][ T6879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.721508][ T6879] veth0_to_team: left promiscuous mode
[   97.737243][ T6879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.756810][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'.
[   97.838937][ T6879] veth1_vlan: left promiscuous mode
[   97.846313][ T6879] veth0_vlan: left promiscuous mode
[   97.854490][ T6879] veth0_vlan: entered promiscuous mode
[   97.866074][ T6879] veth1_vlan: entered promiscuous mode
[   97.871355][ T6879] veth1_macvtap: left promiscuous mode
[   97.875296][ T6879] veth0_macvtap: left promiscuous mode
[   97.878067][ T6879] veth0_macvtap: entered promiscuous mode
[   97.887846][ T6879] veth1_macvtap: entered promiscuous mode
[   97.896235][ T6879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.902379][ T6879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.909586][ T6879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.915887][ T6879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.935337][ T6879] veth0_to_team: entered promiscuous mode
[   97.938385][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.942944][ T6879] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.946223][ T6879] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.949981][ T6879] 8021q: adding VLAN 0 to HW filter on device bond3
[   97.959084][ T6879] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[   97.971341][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.974182][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.978847][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.981126][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.005851][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.011395][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.014411][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.017082][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.021166][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.024323][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.027155][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.030119][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.146689][ T6899] xt_addrtype: ipv6 does not support BROADCAST matching
[   98.149372][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   98.195290][   T33] audit: type=1804 audit(1778558620.068:2): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.314" name="/newroot/96/cgroup.controllers" dev="tmpfs" ino=502 res=1 errno=0
[   98.202844][   T33] audit: type=1800 audit(1778558620.068:3): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="cgroup.controllers" dev="tmpfs" ino=502 res=0 errno=0
[   98.222600][ T6902] bond7: option arp_all_targets: invalid value (129)
[   98.226940][ T6902] bond7 (unregistering): Released all slaves
[   98.712958][ T6915] netlink: 'syz.1.318': attribute type 22 has an invalid length.
[   98.777757][ T6915] netlink: 'syz.1.318': attribute type 22 has an invalid length.
[   98.874875][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   98.960281][ T6920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.966421][ T6920] syzkaller0: entered promiscuous mode
[   98.969099][ T6920] syzkaller0: entered allmulticast mode
[   99.000274][ T6920] tipc: Resetting bearer <eth:syzkaller0>
[   99.003265][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[   99.030057][ T6919] tipc: Disabling bearer <eth:syzkaller0>
[   99.065778][ T6924] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   99.160026][ T6935] bond2: (slave lo): Releasing backup interface
[   99.166865][ T6935] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[   99.181244][ T6935] bridge_slave_0: left allmulticast mode
[   99.183929][ T6935] bridge_slave_0: left promiscuous mode
[   99.194363][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.208480][ T6935] bridge_slave_1: left allmulticast mode
[   99.211015][ T6935] bridge_slave_1: left promiscuous mode
[   99.217016][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.229147][ T6935] bond0: (slave bond_slave_0): Releasing backup interface
[   99.243054][ T6935] bond0: (slave bond_slave_1): Releasing backup interface
[   99.256658][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.259991][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.265975][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.270372][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.280077][ T6935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.300108][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.304769][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.345515][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.352497][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.360803][ T6945] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   99.368901][   T87] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.371498][   T87] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.400000][ T6948] netlink: 'syz.1.327': attribute type 10 has an invalid length.
[   99.411087][ T6948] netlink: 'syz.1.327': attribute type 10 has an invalid length.
[   99.418654][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   99.422327][ T6948] bond0: (slave ): Enslaving as an active interface with an up link
[   99.544160][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   99.805069][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   99.809799][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[   99.995862][ T6977] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[  100.057794][ T6979] bond9: entered promiscuous mode
[  100.063353][ T6979] 8021q: adding VLAN 0 to HW filter on device bond9
[  100.292559][ T7000] : renamed from virt_wifi0
[  100.876542][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  100.880425][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  100.899070][ T7036] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.994598][ T7039] bond7: entered allmulticast mode
[  101.146221][ T7055] veth0: entered promiscuous mode
[  101.173888][ T7055] bond0: entered promiscuous mode
[  101.175723][ T7055] bridge2: entered promiscuous mode
[  101.276264][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.306910][ T7057] veth1_vlan: left promiscuous mode
[  101.311157][ T7057] veth0_vlan: left promiscuous mode
[  101.314718][ T7057] veth0_vlan: entered promiscuous mode
[  101.325021][ T7057] veth1_vlan: entered promiscuous mode
[  101.334108][ T7057] veth1_macvtap: left promiscuous mode
[  101.337993][ T7057] veth0_macvtap: left promiscuous mode
[  101.341719][ T7057] veth0_macvtap: entered promiscuous mode
[  101.356783][ T7057] veth1_macvtap: entered promiscuous mode
[  101.366117][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  101.375209][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.384102][ T7057] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.411885][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.416014][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.421200][ T7057] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.431711][ T7057] 8021q: adding VLAN 0 to HW filter on device bond4
[  101.441466][ T7057] 8021q: adding VLAN 0 to HW filter on device bond6
[  101.479177][ T7058] bond0: (slave bond_slave_1): Releasing backup interface
[  101.485035][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  101.487552][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  101.506864][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  101.509971][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  101.588918][ T7049] bond0: left promiscuous mode
[  101.590843][ T7049] bridge2: left promiscuous mode
[  101.603678][ T7049] veth0: left promiscuous mode
[  101.660385][ T7067] team0: entered promiscuous mode
[  101.662796][ T7067] team0: entered allmulticast mode
[  101.665933][ T7067] 8021q: adding VLAN 0 to HW filter on device team0
[  101.673489][ T7067] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  101.691124][ T7067] team1: entered promiscuous mode
[  101.695209][ T7067] team1: entered allmulticast mode
[  101.697216][ T7067] 8021q: adding VLAN 0 to HW filter on device team1
[  101.818454][ T7075] syzkaller0: entered promiscuous mode
[  101.820144][ T7075] syzkaller0: entered allmulticast mode
[  101.823548][ T7075] x_tables: duplicate underflow at hook 1
[  101.828464][ T7075] bond0: Error: Cannot enslave bond to itself.
[  101.980927][ T7088] __nla_validate_parse: 22 callbacks suppressed
[  101.980946][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[  102.004887][ T7088] netem: incorrect ge model size
[  102.015741][ T7088] netem: change failed
[  102.020960][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[  102.095501][ T7099] validate_nla: 9 callbacks suppressed
[  102.095521][ T7099] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[  102.110512][ T7102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.365'.
[  102.116610][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.120337][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.127351][ T7102] netlink: 76 bytes leftover after parsing attributes in process `syz.0.365'.
[  102.132948][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.135865][ T7102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.139373][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.141958][ T7102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.146317][ T7102] netlink: 52 bytes leftover after parsing attributes in process `syz.0.365'.
[  102.150253][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.152900][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.191530][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'.
[  102.198529][ T7109] xt_TCPMSS: Only works on TCP SYN packets
[  102.233651][ T7116] netlink: 17 bytes leftover after parsing attributes in process `syz.0.368'.
[  102.239921][ T7117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  102.240175][ T7115] d: renamed from syzkaller0
[  102.243813][ T7117] IPv6: NLM_F_CREATE should be set when creating new route
[  102.246457][ T7117] IPv6: NLM_F_CREATE should be set when creating new route
[  102.299463][ T7120] xt_cluster: node mask cannot exceed total number of nodes
[  102.307363][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.369'.
[  102.312956][ T7120] netlink: 'syz.0.369': attribute type 10 has an invalid length.
[  102.335947][ T7120] netlink: 'syz.0.369': attribute type 10 has an invalid length.
[  102.450625][ T7127] bond0: entered promiscuous mode
[  102.452690][ T7127] bridge2: entered promiscuous mode
[  102.460547][ T7127] batadv0: entered promiscuous mode
[  102.464905][ T7127] batadv0: left promiscuous mode
[  102.471735][ T7127] bond0: left promiscuous mode
[  102.473664][ T7127] bridge2: left promiscuous mode
[  102.542632][ T7137] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[  102.555929][ T7138] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[  102.608172][ T7138] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  102.612688][ T7138] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  102.628248][ T7142] netlink: 3 bytes leftover after parsing attributes in process `syz.1.374'.
[  102.650979][ T7137] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  102.654706][ T7137] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  102.674239][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'.
[  102.691825][ T7142] netlink: 'syz.1.374': attribute type 9 has an invalid length.
[  102.696165][ T7142] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[  102.722428][ T7142] 8021q: adding VLAN 0 to HW filter on device bond10
[  102.730784][ T7142] vlan4: entered allmulticast mode
[  102.732701][ T7142] bond10: entered allmulticast mode
[  102.803994][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  102.822547][ T7149] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[  102.827616][ T7154] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[  102.850320][ T7149] 8021q: adding VLAN 0 to HW filter on device bond9
[  102.854087][ T7154] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  102.855514][ T7152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.874915][ T7149] vlan2: entered allmulticast mode
[  102.878103][ T7149] bond9: entered allmulticast mode
[  102.896408][ T7149] bond9: (slave geneve3): making interface the new active one
[  102.898773][ T7149] geneve3: entered allmulticast mode
[  102.902154][ T7149] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  102.917495][ T7152] syzkaller0: entered promiscuous mode
[  102.924240][ T7152] syzkaller0: entered allmulticast mode
[  102.939576][ T7152] tipc: Resetting bearer <eth:syzkaller0>
[  102.950564][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[  102.981055][ T7151] tipc: Disabling bearer <eth:syzkaller0>
[  103.209291][ T7174] net_ratelimit: 6 callbacks suppressed
[  103.209326][ T7174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.286882][ T7182] batadv_slave_1: entered allmulticast mode
[  103.291467][ T7182] ip6gre0: entered allmulticast mode
[  103.704126][ T7224] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[  104.096493][ T7244] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[  104.137178][ T7244] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.344262][ T7256] ip6gre1: entered promiscuous mode
[  104.347504][ T7256] ip6gre1: entered allmulticast mode
[  104.446312][ T7259] 8021q: adding VLAN 0 to HW filter on device bond7
[  104.462846][ T7256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.468121][ T7263] bond7: (slave ip6gretap0): making interface the new active one
[  104.472461][ T7263] bond7: (slave ip6gretap0): Enslaving as an active interface with an up link
[  104.483658][ T7256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.658029][ T7271] ip6gretap3: entered allmulticast mode
[  104.891859][ T7285] batadv2: entered promiscuous mode
[  105.662689][ T7326] bond0: (slave ipvlan0): Device is not bonding slave
[  105.665844][ T7326] bond0: option active_slave: invalid value (ipvlan0)
[  105.768923][ T7339] syzkaller0: entered promiscuous mode
[  105.770641][ T7339] syzkaller0: entered allmulticast mode
[  106.353261][ T7365] xt_addrtype: ipv6 does not support BROADCAST matching
[  106.404810][ T7368] xt_hashlimit: size too large, truncated to 1048576
[  106.554362][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.733235][ T7384] 8021q: adding VLAN 0 to HW filter on device bond10
[  106.748783][ T7389] bond0: entered promiscuous mode
[  106.750409][ T7389] : entered promiscuous mode
[  106.752216][ T7389] bond0: entered allmulticast mode
[  106.753931][ T7389] : entered allmulticast mode
[  106.822843][ T7393] bridge_slave_0: left allmulticast mode
[  106.825326][ T7393] bridge_slave_0: left promiscuous mode
[  106.827621][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.837441][ T7393] bond0: (slave bond_slave_0): Releasing backup interface
[  106.843336][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.847663][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.850993][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.853548][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.859683][ T7393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.894796][ T7395] bond11: Removing last ns target with arp_interval on
[  106.897701][ T7392] lo: Caught tx_queue_len zero misconfig
[  107.031706][ T7398] bridge4: entered promiscuous mode
[  107.045705][ T7398] bridge4: entered allmulticast mode
[  107.108601][ T7410] __nla_validate_parse: 25 callbacks suppressed
[  107.108614][ T7410] netlink: 64 bytes leftover after parsing attributes in process `syz.2.439'.
[  107.136742][ T7406] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.141704][ T7406] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  107.149812][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'.
[  107.157210][ T7410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  107.225375][ T7406] Bluetooth: MGMT ver 1.23
[  107.226920][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  107.232636][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.0.440'.
[  107.318940][ T7425] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  107.331194][ T7425] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  107.945573][ T7436] syzkaller0: entered promiscuous mode
[  107.947912][ T7436] syzkaller0: entered allmulticast mode
[  107.956863][ T7436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.976057][ T7435] tipc: Resetting bearer <eth:syzkaller0>
[  108.005056][ T7435] tipc: Disabling bearer <eth:syzkaller0>
[  108.116238][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  108.120654][ T7438] : renamed from bond0 (while UP)
[  108.151077][ T7440] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.241872][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'.
[  108.380249][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[  108.391994][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  108.396118][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.449'.
[  108.708585][ T7447] vlan5: entered promiscuous mode
[  108.714282][ T7447] bridge0: entered promiscuous mode
[  108.755380][ T7460] bond9: option lacp_active: invalid value (8)
[  108.758286][ T7460] bond9 (unregistering): Released all slaves
[  108.773327][ T5645] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.777610][ T5645] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.783375][ T5645] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.787770][ T5645] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.792321][ T5645] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.795768][ T5645] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.801116][ T5645] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  108.810356][ T5645] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.833642][ T7474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.451'.
[  108.919574][ T7479] validate_nla: 11 callbacks suppressed
[  108.919586][ T7479] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[  108.977419][ T7479] vti0: entered promiscuous mode
[  109.082880][ T7490] erspan0: entered promiscuous mode
[  109.283228][ T7466] hsr0: entered promiscuous mode
[  110.054026][ T7520] 8021q: adding VLAN 0 to HW filter on device bond11
[  110.060622][ T7520] netlink: 'syz.2.461': attribute type 8 has an invalid length.
[  110.071943][ T7520] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  110.076803][ T5721] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0
[  110.080206][ T5721] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0
[  110.092325][ T7520] bond11 (unregistering): (slave geneve4): Releasing backup interface
[  110.099585][ T7520] bond11 (unregistering): Released all slaves
[  110.111933][ T5721] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0
[  110.115178][ T5721] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0
[  110.275245][ T7525] ipip1: entered promiscuous mode
[  110.288443][ T7525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip1
[  110.292782][ T7525] gretap1: entered promiscuous mode
[  110.294881][ T7525] gretap1: entered allmulticast mode
[  110.316804][ T7527] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  110.507520][ T7556] batadv4: entered promiscuous mode
[  110.511918][ T7556] batadv4: entered allmulticast mode
[  110.634477][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  110.785758][ T7577] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  110.825821][ T7577] 8021q: adding VLAN 0 to HW filter on device bond9
[  110.846103][ T7577] bond9: (slave geneve2): making interface the new active one
[  110.851333][ T7577] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  110.876314][ T7577] wg1: Caught tx_queue_len zero misconfig
[  110.882062][ T7581] trusted_key: syz.2.476 sent an empty control message without MSG_MORE.
[  111.011236][ T7562] infiniband syz0: set down
[  111.015788][ T7562] infiniband syz0: added ipvlan1
[  111.055261][ T7562] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  111.065791][ T7562] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  111.073654][ T7562] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  111.115074][ T7562] RDS/IB: syz0: added
[  111.124526][ T7562] smc: adding ib device syz0 with port count 1
[  111.127082][ T7562] smc:    ib device syz0 port 1 has no pnetid
[  111.591120][ T7620] netlink: 'syz.2.484': attribute type 12 has an invalid length.
[  111.835892][ T7630] block nbd0: NBD_DISCONNECT
[  111.839665][ T7630] block nbd0: Send disconnect failed -32
[  111.843523][ T7630] block nbd0: shutting down sockets
[  112.049014][ T7648] bond13: entered allmulticast mode
[  112.066335][ T7648] veth9: entered allmulticast mode
[  112.071025][ T7648] bond13: (slave veth9): Enslaving as an active interface with an up link
[  112.085999][ T7648] bond13 (unregistering): (slave veth9): Releasing backup interface
[  112.091735][ T7648] bond13 (unregistering): Released all slaves
[  112.249012][ T7654] __nla_validate_parse: 15 callbacks suppressed
[  112.249024][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.493'.
[  112.334914][ T7656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.340722][ T7656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.392918][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'.
[  112.469904][ T7656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.497721][ T7656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.560408][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'.
[  112.601450][ T7672] veth0_vlan: entered allmulticast mode
[  112.622868][ T7656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.626678][ T7656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.657368][ T7674] netlink: 'syz.0.500': attribute type 1 has an invalid length.
[  112.688011][ T7674] 8021q: adding VLAN 0 to HW filter on device bond10
[  112.703828][ T7656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  112.707884][ T7656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  112.736578][ T7677] bond10: (slave geneve3): making interface the new active one
[  112.741415][ T7677] bond10: (slave geneve3): Enslaving as an active interface with an up link
[  112.817345][ T5666] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.817648][ T7680] netlink: 280 bytes leftover after parsing attributes in process `syz.0.501'.
[  112.820986][ T5666] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  112.843443][ T5666] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.846640][ T5666] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  112.859477][ T5645] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.862459][ T5645] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  112.890800][ T5645] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.894475][ T5645] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  113.029089][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[  113.054852][ T7691] bond11: option broadcast_neighbor: invalid value (30)
[  113.059157][ T7691] bond11 (unregistering): Released all slaves
[  113.598357][ T7738] netlink: 212 bytes leftover after parsing attributes in process `syz.1.512'.
[  113.628723][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'.
[  113.636952][ T7728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.639629][ T7727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.644915][ T7728] syzkaller0: entered promiscuous mode
[  113.646835][ T7728] syzkaller0: entered allmulticast mode
[  113.667848][ T7728] tipc: Resetting bearer <eth:syzkaller0>
[  113.673935][ T7722] tipc: Resetting bearer <eth:syzkaller0>
[  113.686262][ T7722] tipc: Disabling bearer <eth:syzkaller0>
[  113.778763][ T7748] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[  113.821330][ T7751] bond13: (slave bridge3): making interface the new active one
[  113.824830][ T7751] bond13: (slave bridge3): Enslaving as an active interface with an up link
[  113.840107][ T7752] bond13: (slave bridge4): Enslaving as an active interface with a down link
[  113.855489][ T7751] bond13: (slave gretap3): Enslaving as an active interface with an up link
[  113.864127][ T7751] macvlan3: entered promiscuous mode
[  113.866179][ T7751] macvlan3: entered allmulticast mode
[  113.868478][ T7751] bond13: entered promiscuous mode
[  113.870251][ T7751] bridge3: entered promiscuous mode
[  113.873322][ T7751] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  113.877822][ T7751] bond13: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  113.884353][ T7751] bond13: left promiscuous mode
[  113.886298][ T7751] bridge3: left promiscuous mode
[  113.986861][ T7756] : (slave ): Releasing backup interface
[  113.991346][ T7756] : left promiscuous mode
[  113.993276][ T7756] : left allmulticast mode
[  113.995688][ T7756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  114.051606][ T7758] syzkaller1: entered promiscuous mode
[  114.053958][ T7758] syzkaller1: entered allmulticast mode
[  114.070678][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'.
[  117.286901][ T7766] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  117.364019][ T7773] netlink: 'syz.1.521': attribute type 1 has an invalid length.
[  117.393635][ T7773] bond14: entered promiscuous mode
[  117.399522][ T7773] 8021q: adding VLAN 0 to HW filter on device bond14
[  117.412939][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.521'.
[  117.439290][ T7777] syzkaller1: entered promiscuous mode
[  117.444359][ T7777] syzkaller1: entered allmulticast mode
[  117.625411][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[  117.665862][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.669164][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[  117.678728][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.689212][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.705949][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.837789][ T7811] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[  117.855723][ T7811] bond15: entered promiscuous mode
[  117.858069][ T7811] 8021q: adding VLAN 0 to HW filter on device bond15
[  117.868545][ T7811] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  117.872373][ T7811] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  117.875799][ T7811] bond15: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  117.926752][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'.
[  118.022021][ T7819] syzkaller0: entered promiscuous mode
[  118.025312][ T7819] syzkaller0: entered allmulticast mode
[  118.054805][ T7826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.532'.
[  118.077741][ T7826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.532'.
[  118.239568][ T7835] netlink: 'syz.2.533': attribute type 8 has an invalid length.
[  118.248437][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[  118.268863][ T7835] veth1_to_team: entered promiscuous mode
[  118.272146][ T7835] gretap0: entered promiscuous mode
[  118.275860][ T7835] veth1_to_team: left promiscuous mode
[  118.278350][ T7835] gretap0: left promiscuous mode
[  118.482130][ T7847] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[  118.625735][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'.
[  118.736336][ T7865] bond11: entered allmulticast mode
[  118.739591][ T7865] 8021q: adding VLAN 0 to HW filter on device bond11
[  118.742258][ T7868] ipt_REJECT: ECHOREPLY no longer supported.
[  118.754557][ T7868] ipvlan2: entered promiscuous mode
[  119.079778][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'.
[  119.104725][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'.
[  119.231116][ T7898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.463345][ T7913] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  119.487687][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.499252][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.506505][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.514124][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.520668][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.532587][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.543145][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.548022][ T7937] netlink: 'syz.0.551': attribute type 1 has an invalid length.
[  119.561068][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.598979][ T7937] 8021q: adding VLAN 0 to HW filter on device bond12
[  119.604391][ T7937] bond11: (slave bond12): making interface the new active one
[  119.609556][ T7937] bond11: (slave bond12): Enslaving as an active interface with an up link
[  119.797744][ T7959] netlink: 'syz.1.556': attribute type 58 has an invalid length.
[  119.896074][ T7965] 0{X: renamed from gretap0
[  119.912464][ T7965] 0{X: entered allmulticast mode
[  119.930367][ T7965] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  120.012688][ T7972] tipc: Started in network mode
[  120.016907][ T7972] tipc: Node identity 425f9c53fb9c, cluster identity 4711
[  120.021297][ T7972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.036203][ T7972] tipc: Resetting bearer <eth:syzkaller0>
[  120.078312][ T7971] tipc: Disabling bearer <eth:syzkaller0>
[  120.206552][ T7991] batadv0: entered promiscuous mode
[  120.208920][ T7991] batadv0: left promiscuous mode
[  120.317348][ T7996] hmac(sha224: entered promiscuous mode
[  120.447705][ T8014] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  120.450255][ T8014] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  121.008945][ T8037] syzkaller0: entered promiscuous mode
[  121.011177][ T8037] syzkaller0: entered allmulticast mode
[  121.302397][ T8043] netlink: 'syz.2.576': attribute type 4 has an invalid length.
[  121.345190][ T8045] IPv6: Can't replace route, no match found
[  121.360075][ T8045] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  121.369898][ T8045] bond12 (unregistering): Released all slaves
[  122.526549][ T8063] __nla_validate_parse: 249 callbacks suppressed
[  122.526565][ T8063] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.581'.
[  122.543341][ T8061] bond16: (slave bond_slave_1): Device is not bonding slave
[  122.548102][ T8061] bond16: option active_slave: invalid value (bond_slave_1)
[  122.552860][ T8061] bond16 (unregistering): Released all slaves
[  122.619173][ T8066] xt_l2tp: missing protocol rule (udp|l2tpip)
[  122.635729][ T8066] netlink: 'syz.0.582': attribute type 1 has an invalid length.
[  122.638269][ T8066] netlink: 56 bytes leftover after parsing attributes in process `syz.0.582'.
[  122.719370][ T8068] netlink: 'syz.1.583': attribute type 13 has an invalid length.
[  122.721933][ T8068] netlink: 'syz.1.583': attribute type 17 has an invalid length.
[  122.777973][ T8068] : left promiscuous mode
[  122.779361][ T8068] : left allmulticast mode
[  122.781105][ T8068] 8021q: adding VLAN 0 to HW filter on device 
[  122.805860][ T8071] netlink: 108 bytes leftover after parsing attributes in process `syz.0.584'.
[  122.826823][ T8068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.830611][ T8068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.839097][ T8068] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  123.143537][ T8081] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  123.152603][ T8081] bond13: (slave lo): Enslaving as an active interface with an up link
[  123.156050][ T8081] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  123.196637][ T8084] bond0: (slave wlan0): Opening slave failed
[  123.220562][ T8086] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  123.244248][ T8088] hmac(sha224: entered promiscuous mode
[  123.288508][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  123.297033][ T8093] macvlan2: entered allmulticast mode
[  123.298965][ T8093] veth1_vlan: entered allmulticast mode
[  123.343110][ T8095] netlink: 'syz.0.591': attribute type 1 has an invalid length.
[  123.370906][ T8095] 8021q: adding VLAN 0 to HW filter on device bond14
[  123.379749][ T8095] bond14: (slave bridge0): Enslaving as a backup interface with a down link
[  123.716151][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[  123.770367][ T8135] netlink: 76 bytes leftover after parsing attributes in process `syz.2.601'.
[  123.836203][ T8138] bond16: entered allmulticast mode
[  123.838183][ T8141] netlink: 'syz.0.603': attribute type 1 has an invalid length.
[  123.848610][ T8141] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  123.897125][ T8138] veth11: entered allmulticast mode
[  123.913072][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.604'.
[  123.922022][ T8138] bond16: (slave veth11): Enslaving as an active interface with an up link
[  124.036348][ T8157] netlink: 277 bytes leftover after parsing attributes in process `syz.1.606'.
[  124.063061][ T8162] bond15: option ad_select: invalid value (34)
[  124.068136][ T8162] bond15 (unregistering): Released all slaves
[  124.087941][ T8171] netlink: 52 bytes leftover after parsing attributes in process `syz.2.607'.
[  124.155488][ T8174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.164674][ T8172] tipc: Disabling bearer <eth:syzkaller0>
[  124.250453][ T8182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.264386][ T8182] syzkaller0: entered promiscuous mode
[  124.268538][ T8182] syzkaller0: entered allmulticast mode
[  124.288876][ T8182] tipc: Resetting bearer <eth:syzkaller0>
[  124.294538][ T8186] netlink: 'syz.2.613': attribute type 1 has an invalid length.
[  124.297423][ T8186] netlink: 'syz.2.613': attribute type 2 has an invalid length.
[  124.357262][ T8181] tipc: Resetting bearer <eth:syzkaller0>
[  124.372754][ T8181] tipc: Disabling bearer <eth:syzkaller0>
[  124.626413][ T8204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.617'.
[  125.006764][ T8223] bond7: (slave ip6gretap0): Releasing active interface
[  125.095230][ T8226] bond17: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  125.100037][ T8226] bond17 (unregistering): Released all slaves
[  125.242753][ T8234] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  125.286082][ T8234] netlink: 'syz.1.626': attribute type 1 has an invalid length.
[  125.514823][ T8253] sit0: entered promiscuous mode
[  125.518188][ T8253] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[  125.593880][ T8256] syzkaller0: entered promiscuous mode
[  125.597045][ T8256] syzkaller0: entered allmulticast mode
[  125.968720][ T8280] batadv0: entered promiscuous mode
[  125.974251][ T8280] batadv0: entered allmulticast mode
[  126.261329][ T8295] openvswitch: netlink: IP tunnel dst address not specified
[  126.533260][ T8310] netlink: 'syz.1.649': attribute type 21 has an invalid length.
[  126.690713][ T8307] ipvlan2: entered promiscuous mode
[  126.761089][ T8313] bond12: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  127.251423][ T8336] 8021q: adding VLAN 0 to HW filter on device bond17
[  127.291497][ T8336] 8021q: adding VLAN 0 to HW filter on device bond18
[  127.298016][ T8336] bond17: (slave bond18): Enslaving as an active interface with an up link
[  127.315107][ T8336] bond17 (unregistering): (slave bond18): Releasing backup interface
[  127.320127][ T8336] bond17 (unregistering): Released all slaves
[  127.350302][ T8340] : renamed from veth0_to_bond
[  127.383693][ T8340] gretap0: entered allmulticast mode
[  127.547974][ T8350] bond15: entered promiscuous mode
[  127.549635][ T8350] bond15: entered allmulticast mode
[  127.551598][ T8350] 8021q: adding VLAN 0 to HW filter on device bond15
[  127.819216][ T8370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.823685][ T8370] syzkaller0: entered promiscuous mode
[  127.826898][ T8370] syzkaller0: entered allmulticast mode
[  128.056632][ T8377] ipvlan2: entered promiscuous mode
[  128.063024][ T8370] tipc: Resetting bearer <eth:syzkaller0>
[  128.087398][ T8370] tipc: Disabling bearer <eth:syzkaller0>
[  128.131520][ T8388] __nla_validate_parse: 17 callbacks suppressed
[  128.131533][ T8388] netlink: 76 bytes leftover after parsing attributes in process `syz.0.671'.
[  128.409887][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'.
[  128.413127][ T8404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'.
[  128.416527][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.676'.
[  128.779954][ T8415] bond17: entered promiscuous mode
[  128.781951][ T8415] bond17: entered allmulticast mode
[  128.787365][ T8415] 8021q: adding VLAN 0 to HW filter on device bond17
[  128.902083][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  128.906534][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'.
[  128.946857][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  128.963996][ T8431] IPv6: sit2: Disabled Multicast RS
[  129.039777][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'.
[  129.045189][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.685'.
[  129.111080][ T8446] IPv6: NLM_F_CREATE should be specified when creating new route
[  129.116702][ T8446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  129.117037][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'.
[  129.118886][ T8446] IPv6: NLM_F_CREATE should be set when creating new route
[  129.118929][ T8446] IPv6: NLM_F_CREATE should be set when creating new route
[  129.126519][ T8446] IPv6: NLM_F_CREATE should be set when creating new route
[  129.134924][ T8446] validate_nla: 4 callbacks suppressed
[  129.134933][ T8446] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  129.145596][ T8446] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  129.278521][ T8453] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  129.281318][ T8453] netlink: 'syz.1.691': attribute type 1 has an invalid length.
[  129.397745][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.401924][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.406263][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.408781][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.657699][ T8474] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  129.717721][ T8475] Driver unsupported XDP return value 0 on prog  (id 165) dev N/A, expect packet loss!
[  129.794135][ T8476] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  129.912089][ T8476] 8021q: adding VLAN 0 to HW filter on device bond19
[  130.507654][ T8488] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  130.511019][ T8487] netlink: 'syz.0.699': attribute type 1 has an invalid length.
[  130.592391][ T8496] netlink: 'syz.0.701': attribute type 1 has an invalid length.
[  130.595856][ T8492] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  130.616257][ T8492] bond20: entered promiscuous mode
[  130.618095][ T8492] 8021q: adding VLAN 0 to HW filter on device bond20
[  130.695282][ T8495] A link change request failed with some changes committed already. Interface bond8 may have been left with an inconsistent configuration, please check.
[  130.738138][ T8498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  130.772046][ T8492] bond20: (slave bridge7): making interface the new active one
[  130.775336][ T8492] bridge7: entered promiscuous mode
[  130.778404][ T8492] bond20: (slave bridge7): Enslaving as an active interface with an up link
[  130.907302][ T8515] sctp: [Deprecated]: syz.1.705 (pid 8515) Use of int in maxseg socket option.
[  130.907302][ T8515] Use struct sctp_assoc_value instead
[  130.952162][ T8518] netlink: 'syz.0.707': attribute type 1 has an invalid length.
[  131.035146][ T8530] sctp: [Deprecated]: syz.0.710 (pid 8530) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.035146][ T8530] Use struct sctp_sack_info instead
[  131.126427][ T8536] sctp: [Deprecated]: syz.1.712 (pid 8536) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.126427][ T8536] Use struct sctp_sack_info instead
[  131.197774][ T8536] 8021q: adding VLAN 0 to HW filter on device bond21
[  131.222134][ T8536] bond21: (slave gretap4): making interface the new active one
[  131.225774][ T8536] bond21: (slave gretap4): Enslaving as an active interface with an up link
[  132.009344][ T8591] 8021q: adding VLAN 0 to HW filter on device bond22
[  132.012772][ T8589] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  132.027938][ T8591] vlan6: entered allmulticast mode
[  132.030059][ T8591] bond22: entered allmulticast mode
[  132.760024][ T8635] 8021q: adding VLAN 0 to HW filter on device bond13
[  132.803914][ T8640] Bluetooth: MGMT ver 1.23
[  133.209526][ T8654] __nla_validate_parse: 38 callbacks suppressed
[  133.209541][ T8654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.746'.
[  133.233156][ T8656] syzkaller0: entered promiscuous mode
[  133.236236][ T8656] syzkaller0: entered allmulticast mode
[  133.324408][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[  133.488098][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  133.541652][ T8670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.583637][ T8672] syzkaller0: entered promiscuous mode
[  133.586041][ T8672] syzkaller0: entered allmulticast mode
[  133.735321][ T8677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.754'.
[  133.782176][ T8681] netlink: 52 bytes leftover after parsing attributes in process `syz.0.756'.
[  133.786647][ T8681] netlink: 76 bytes leftover after parsing attributes in process `syz.0.756'.
[  133.790420][ T8681] netlink: 52 bytes leftover after parsing attributes in process `syz.0.756'.
[  133.829698][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'.
[  133.833094][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'.
[  133.836113][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'.
[  134.077173][ T8689] veth12: entered allmulticast mode
[  134.096126][ T8691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.468988][ T8698] hmac(sha2: entered promiscuous mode
[  134.491022][ T8698] bond17: option arp_all_targets: invalid value (129)
[  134.497389][ T8698] bond17 (unregistering): Released all slaves
[  134.578136][ T8701] openvswitch: netlink: Flow key attr not present in new flow.
[  134.595057][ T8703] geneve4: entered promiscuous mode
[  134.596770][ T8703] geneve4: entered allmulticast mode
[  134.599572][ T5721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  134.607746][ T5721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  134.615534][ T5721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  134.622238][ T5721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  134.653134][ T8707] validate_nla: 9 callbacks suppressed
[  134.653144][ T8707] netlink: 'syz.1.765': attribute type 30 has an invalid length.
[  134.874086][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  134.877103][ T4999] Bluetooth: hci2: command 0x0405 tx timeout
[  134.903144][ T8733] netlink: 'syz.1.771': attribute type 1 has an invalid length.
[  134.913875][ T8733] netlink: 'syz.1.771': attribute type 2 has an invalid length.
[  135.176202][ T8747] netlink: 'syz.1.776': attribute type 12 has an invalid length.
[  135.188872][ T5645] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.191837][ T8747] netlink: 'syz.1.776': attribute type 12 has an invalid length.
[  135.194809][ T5645] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.200172][ T5645] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.206544][ T5645] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.403066][ T8756] bond24: entered promiscuous mode
[  135.408136][ T8756] 8021q: adding VLAN 0 to HW filter on device bond24
[  135.436402][ T8756] vlan7: entered allmulticast mode
[  135.438302][ T8756] bond24: entered allmulticast mode
[  135.602277][ T8776] bridge0: port 3(erspan0) entered blocking state
[  135.612011][ T8776] bridge0: port 3(erspan0) entered disabled state
[  135.616849][ T8776] erspan0: entered allmulticast mode
[  135.621624][ T8776] erspan0: entered promiscuous mode
[  135.744855][ T8785] netlink: 'syz.2.788': attribute type 10 has an invalid length.
[  135.913176][ T8802] netlink: 'syz.1.793': attribute type 11 has an invalid length.
[  136.240605][ T8822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.264513][ T8822] tipc: Disabling bearer <eth:syzkaller0>
[  136.566782][ T8827] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  136.599012][ T8827] bond14: (slave geneve5): making interface the new active one
[  136.602170][ T8827] bond14: (slave geneve5): Enslaving as an active interface with an up link
[  136.605704][ T5721] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  136.612306][ T8827] 8021q: adding VLAN 0 to HW filter on device bond14
[  136.616272][ T5721] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  136.621267][ T5721] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  136.627975][ T5721] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  136.964566][ T8836] netlink: 'syz.2.800': attribute type 1 has an invalid length.
[  136.985658][ T8836] 8021q: adding VLAN 0 to HW filter on device bond15
[  137.017116][ T8841] Bluetooth: MGMT ver 1.23
[  137.018917][ T8836] bond15: (slave gretap1): making interface the new active one
[  137.026965][ T8836] bond15: (slave gretap1): Enslaving as an active interface with an up link
[  137.073190][ T8836] bond15 (unregistering): (slave gretap1): Releasing active interface
[  137.082337][ T8836] bond15 (unregistering): Released all slaves
[  137.308445][   T33] audit: type=1800 audit(1778558659.178:4): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.802" name="memory.events" dev="tmpfs" ino=1513 res=0 errno=0
[  137.372842][ T8868] pim6reg: entered allmulticast mode
[  137.389656][ T8868] pim6reg: left allmulticast mode
[  137.425026][ T8872] syz_tun: entered allmulticast mode
[  137.427118][ T8872] netlink: 'syz.1.809': attribute type 27 has an invalid length.
[  137.433202][ T8872] dvmrp8: entered allmulticast mode
[  137.441628][ T8868] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[  137.453913][ T8872] syz_tun: left allmulticast mode
[  137.545249][ T8879] bridge0: port 3(erspan0) entered blocking state
[  137.547290][ T8879] bridge0: port 3(erspan0) entered forwarding state
[  137.553195][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.581960][ T8879] veth0_to_team: left promiscuous mode
[  137.604686][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.625275][ T8879] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  137.641347][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.643512][ T6271] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.651014][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.653196][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.669061][ T8884] bridge0: port 1(erspan0) entered blocking state
[  137.671182][ T8884] bridge0: port 1(erspan0) entered disabled state
[  137.673137][ T8884] erspan0: entered allmulticast mode
[  137.679808][ T8884] erspan0: entered promiscuous mode
[  137.687889][ T8883] erspan0: left allmulticast mode
[  137.690386][ T8883] erspan0: left promiscuous mode
[  137.695136][ T8883] bridge0: port 1(erspan0) entered disabled state
[  137.800445][ T8892] syzkaller0: entered promiscuous mode
[  137.802164][ T8892] syzkaller0: entered allmulticast mode
[  137.813519][ T8892] openvswitch: netlink: EtherType 50a is less than min 600
[  137.966647][ T8894] syzkaller1: entered promiscuous mode
[  137.968419][ T8894] syzkaller1: entered allmulticast mode
[  137.987280][ T8894] 8021q: adding VLAN 0 to HW filter on device bond25
[  138.112978][ T8900] vlan0: entered promiscuous mode
[  138.158383][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  138.289204][ T8909] __nla_validate_parse: 30 callbacks suppressed
[  138.289215][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'.
[  138.294527][ T8909] netlink: 52 bytes leftover after parsing attributes in process `syz.2.822'.
[  138.300095][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.406577][ T8913] veth0: entered promiscuous mode
[  138.429092][ T8913] bond0: entered promiscuous mode
[  138.605062][ T8910] bond0: left promiscuous mode
[  138.648356][ T8910] veth0: left promiscuous mode
[  138.721676][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  138.729102][ T8918] xfrm1: entered promiscuous mode
[  138.730830][ T8918] xfrm1: entered allmulticast mode
[  138.733031][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  138.815126][ T8920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.826'.
[  138.818178][ T8921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.826'.
[  138.857143][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  138.972245][ T8927] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  138.978970][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.828'.
[  138.984962][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'.
[  139.087593][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'.
[  139.227267][ T8934] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  139.256004][ T8945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  139.270129][ T8948] veth1_macvtap: left promiscuous mode
[  139.273482][ T8948] macsec0: entered promiscuous mode
[  139.285840][ T8948] veth1_macvtap: entered promiscuous mode
[  139.287873][ T8948] macsec0: left promiscuous mode
[  139.692945][ T8968] bond15: entered promiscuous mode
[  139.701281][ T8968] 8021q: adding VLAN 0 to HW filter on device bond15
[  139.916272][ T8983] geneve5: entered promiscuous mode
[  139.966281][ T5645] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 45686 - 0
[  139.969266][ T5645] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 45686 - 0
[  139.999722][ T5645] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 45686 - 0
[  140.006148][ T5645] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 45686 - 0
[  140.133292][ T8988] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  140.311136][ T8995] bond16: option arp_interval: invalid value (18446744073709551615)
[  140.326305][ T8995] bond16: option arp_interval: allowed values 0 - 2147483647
[  140.347935][ T8995] bond16 (unregistering): Released all slaves
[  140.476308][ T9004] validate_nla: 8 callbacks suppressed
[  140.476345][ T9004] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[  140.503356][ T9004] netlink: 'syz.2.853': attribute type 2 has an invalid length.
[  140.506059][ T9004] netlink: 'syz.2.853': attribute type 1 has an invalid length.
[  140.644625][ T9011] netlink: 'syz.1.855': attribute type 1 has an invalid length.
[  140.684400][ T9011] 8021q: adding VLAN 0 to HW filter on device bond26
[  140.718296][ T9011] veth13: entered promiscuous mode
[  140.726890][ T9011] bond26: (slave veth13): Enslaving as an active interface with an up link
[  140.986796][ T9030] netlink: 'syz.1.858': attribute type 4 has an invalid length.
[  141.003601][ T9030] netlink: 'syz.1.858': attribute type 4 has an invalid length.
[  141.067591][ T9036] syzkaller0: entered promiscuous mode
[  141.069767][ T9036] syzkaller0: entered allmulticast mode
[  141.087477][ T9036] tc action pedit offset 64 out of bounds
[  141.090872][ T9036] tc action pedit offset 64 out of bounds
[  141.092953][ T9036] tc action pedit offset 64 out of bounds
[  141.095132][ T9036] tc action pedit offset 64 out of bounds
[  141.097259][ T9036] tc action pedit offset 64 out of bounds
[  141.099378][ T9036] tc action pedit offset 64 out of bounds
[  141.101511][ T9036] tc action pedit offset 64 out of bounds
[  141.103566][ T9036] tc action pedit offset 64 out of bounds
[  141.105377][ T9036] tc action pedit offset 64 out of bounds
[  141.107139][ T9036] tc action pedit offset 64 out of bounds
[  141.109177][ T9036] 0: reclassify loop, rule prio 0, protocol 800
[  141.115613][ T9040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.383341][ T9067] bond13: (slave lo): Releasing backup interface
[  141.389435][ T9067] bond13: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  141.402243][ T9067] erspan0: left allmulticast mode
[  141.406058][ T9067] erspan0: left promiscuous mode
[  141.410895][ T9067] bridge0: port 3(erspan0) entered disabled state
[  141.419277][ T9067] bond14: (slave bridge0): Releasing backup interface
[  141.422805][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.425237][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.437068][ T9067] bridge_slave_0: left allmulticast mode
[  141.438803][ T9067] bridge_slave_0: left promiscuous mode
[  141.446419][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.452848][ T9067] bridge_slave_1: left allmulticast mode
[  141.454796][ T9067] bridge_slave_1: left promiscuous mode
[  141.457094][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.468115][ T9067] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.470847][ T9067] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.476361][ T9067] bond0: (slave bridge2): Releasing backup interface
[  141.479977][ T9067] bond3: (slave veth9): Releasing backup interface
[  141.483552][ T9067] bond9: (slave geneve2): Releasing active interface
[  141.489037][ T9067] bond10: (slave geneve3): Releasing active interface
[  141.492614][ T9067] bond11: (slave bond12): Releasing backup interface
[  141.628800][ T9087] bond0 (unregistering): Released all slaves
[  141.636901][ T9090] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[  141.650510][ T9090] 8021q: adding VLAN 0 to HW filter on device bond17
[  141.676520][ T9090] bond17: (slave veth15): Enslaving as an active interface with a down link
[  141.701736][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv8
[  141.704215][ T9090] bond17: (slave batadv8): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  141.724774][ T9084] netlink: 'syz.1.871': attribute type 21 has an invalid length.
[  141.728974][ T9084] netlink: 'syz.1.871': attribute type 4 has an invalid length.
[  141.783679][ T9098] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  141.795113][ T9097] vlan8: entered promiscuous mode
[  141.797183][ T9097] : entered promiscuous mode
[  141.802399][ T9097] vlan8: entered allmulticast mode
[  141.805014][ T9097] : entered allmulticast mode
[  141.875858][ T9098] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.927973][ T9107] bond0: (slave ip6gretap2): making interface the new active one
[  141.934805][ T9107] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link
[  142.068514][ T9118] syzkaller0: entered promiscuous mode
[  142.071020][ T9118] syzkaller0: entered allmulticast mode
[  142.350314][ T9125] veth1_vlan: left allmulticast mode
[  142.373215][ T9133] hmac(sha2: entered promiscuous mode
[  142.386536][ T9135] 0{X: left allmulticast mode
[  142.390534][ T9135] sit0: left promiscuous mode
[  142.393337][ T9135] ip6gre0: left allmulticast mode
[  142.422507][ T9135] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  142.430945][ T5645] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.439883][ T5645] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.443130][ T5645] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  142.448229][ T5645] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  142.451480][ T5645] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.454742][ T5645] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.457239][ T5645] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  142.459638][ T5645] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  142.491798][ T5645] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.498574][ T5645] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.504525][ T5645] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  142.507759][ T5645] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  142.511074][ T5645] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.514864][ T5645] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.518111][ T5645] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  142.518550][   T54] Bluetooth: hci2: link tx timeout
[  142.521354][ T5645] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  142.527656][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.535533][ T4999] Bluetooth: hci2: link tx timeout
[  142.537915][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.540900][ T4999] Bluetooth: hci2: link tx timeout
[  142.542902][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.548418][ T4999] Bluetooth: hci2: link tx timeout
[  142.554955][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.558566][ T4999] Bluetooth: hci2: link tx timeout
[  142.560692][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.563974][ T4999] Bluetooth: hci2: link tx timeout
[  142.565978][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.569230][ T4999] Bluetooth: hci2: link tx timeout
[  142.571305][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.574915][ T4999] Bluetooth: hci2: link tx timeout
[  142.576863][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.579580][ T4999] Bluetooth: hci2: link tx timeout
[  142.581464][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.584983][ T4999] Bluetooth: hci2: link tx timeout
[  142.587104][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.590105][ T4999] Bluetooth: hci2: link tx timeout
[  142.592316][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.595079][ T4999] Bluetooth: hci2: link tx timeout
[  142.596807][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.599695][ T4999] Bluetooth: hci2: link tx timeout
[  142.601541][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.618800][ T4999] Bluetooth: hci2: link tx timeout
[  142.620998][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.624428][ T4999] Bluetooth: hci2: link tx timeout
[  142.626689][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.629580][ T4999] Bluetooth: hci2: link tx timeout
[  142.631496][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.637217][ T4999] Bluetooth: hci2: link tx timeout
[  142.638859][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.641177][ T4999] Bluetooth: hci2: link tx timeout
[  142.642716][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.645199][ T4999] Bluetooth: hci2: link tx timeout
[  142.646875][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.649592][ T4999] Bluetooth: hci2: link tx timeout
[  142.651251][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.654338][ T4999] Bluetooth: hci2: link tx timeout
[  142.656390][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.659253][ T4999] Bluetooth: hci2: link tx timeout
[  142.661232][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.664243][ T4999] Bluetooth: hci2: link tx timeout
[  142.666181][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.669061][ T4999] Bluetooth: hci2: link tx timeout
[  142.671018][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.674025][ T4999] Bluetooth: hci2: link tx timeout
[  142.676020][ T4999] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  142.910806][ T9150] bond16: (slave bridge7): Enslaving as a backup interface with an up link
[  142.929435][ T9150] bond16: (slave bridge8): Enslaving as a backup interface with a down link
[  143.082209][ T9157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.088402][ T9157] syzkaller0: entered promiscuous mode
[  143.091953][ T9157] syzkaller0: entered allmulticast mode
[  143.113691][ T9157] tipc: Resetting bearer <eth:syzkaller0>
[  143.125692][ T9156] tipc: Resetting bearer <eth:syzkaller0>
[  143.145538][ T9156] tipc: Disabling bearer <eth:syzkaller0>
[  143.168034][ T9162] macsec0: entered allmulticast mode
[  143.298128][ T9167] pim6reg1: entered promiscuous mode
[  143.300638][ T9167] pim6reg1: entered allmulticast mode
[  143.540430][ T9180] 8021q: adding VLAN 0 to HW filter on device 
[  143.575332][ T9180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.578515][ T9180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.584417][ T9180] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  143.589695][ T5721] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.592157][ T5721] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.612707][ T9182] veth1_macvtap: entered allmulticast mode
[  143.614884][ T9182] macsec0: left allmulticast mode
[  143.616467][ T9182] veth1_macvtap: left allmulticast mode
[  143.622984][ T5721] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.627513][ T5721] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.273092][ T9188] xt_hashlimit: size too large, truncated to 1048576
[  144.481789][ T9208] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.554380][ T4999] Bluetooth: hci2: command 0x0405 tx timeout
[  144.571636][ T9221] ip6gretap0: entered promiscuous mode
[  144.596677][ T9217] syzkaller0: entered promiscuous mode
[  144.598439][ T9217] syzkaller0: entered allmulticast mode
[  144.604725][ T9217] veth0_macvtap: entered allmulticast mode
[  144.638514][ T9224] __nla_validate_parse: 55 callbacks suppressed
[  144.638526][ T9224] netlink: 80 bytes leftover after parsing attributes in process `syz.0.907'.
[  144.735188][ T9227] 8021q: adding VLAN 0 to HW filter on device bond18
[  144.755847][ T9227] veth17: entered allmulticast mode
[  144.757060][ T9231] netlink: 52 bytes leftover after parsing attributes in process `syz.1.909'.
[  144.761804][ T9227] bond18: (slave veth17): Enslaving as an active interface with a down link
[  144.802505][ T9234] netlink: 52 bytes leftover after parsing attributes in process `syz.2.910'.
[  144.804774][ T9231] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  144.808514][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  144.819072][ T9227] bond18 (unregistering): (slave veth17): Releasing active interface
[  144.825576][ T9227] bond18 (unregistering): Released all slaves
[  144.970983][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'.
[  145.337926][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.919'.
[  145.397798][ T9267] vxcan2: entered promiscuous mode
[  145.491883][ T9255] bond27: (slave bridge11): making interface the new active one
[  145.499691][ T9255] bond27: (slave bridge11): Enslaving as an active interface with an up link
[  145.517524][ T9255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.917'.
[  145.524839][ T9255] bond27: entered promiscuous mode
[  145.529156][ T9255] bridge11: entered promiscuous mode
[  145.531805][ T9255] bond27: entered allmulticast mode
[  145.534909][ T9255] bridge11: entered allmulticast mode
[  145.538119][ T9255] 8021q: adding VLAN 0 to HW filter on device bond27
[  145.576460][ T9276] validate_nla: 15 callbacks suppressed
[  145.576474][ T9276] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  145.606341][ T9276] 8021q: adding VLAN 0 to HW filter on device bond18
[  145.629301][ T9276] netlink: 'syz.2.922': attribute type 16 has an invalid length.
[  145.632465][ T9276] netlink: 'syz.2.922': attribute type 17 has an invalid length.
[  145.645577][ T9276] erspan0: left promiscuous mode
[  145.669284][ T9276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.717734][ T9276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.720830][ T9276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.724728][ T9276] hsr0: left promiscuous mode
[  145.728024][ T9276] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  145.857732][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'.
[  146.081314][ T9284] bond19: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  146.098796][ T9284] bond19 (unregistering): Released all slaves
[  146.251621][ T9288] bond19: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  146.257883][ T9288] bond19: entered promiscuous mode
[  146.262015][ T9288] 8021q: adding VLAN 0 to HW filter on device bond19
[  146.413443][ T9297] ipvlan0: entered promiscuous mode
[  146.626487][ T9312] syzkaller0: entered promiscuous mode
[  146.628412][ T9312] syzkaller0: entered allmulticast mode
[  146.635995][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  146.672730][ T9312] bond20 (unregistering): Released all slaves
[  146.784347][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'.
[  146.839403][ T9318] bond29: option primary_reselect: invalid value (133)
[  146.842672][ T9318] bond29 (unregistering): Released all slaves
[  147.188375][ T9329] netem: change failed
[  147.272200][ T9337] syz_tun: entered promiscuous mode
[  147.276107][ T9337] macvtap1: entered promiscuous mode
[  147.281102][ T9337] syz_tun: left promiscuous mode
[  147.728984][ T9357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'.
[  147.863008][ T9360] bond20: entered promiscuous mode
[  147.871862][ T9360] 8021q: adding VLAN 0 to HW filter on device bond20
[  147.954018][ T9364] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  147.957347][ T9364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  148.170551][ T9376] bond19 (unregistering): Released all slaves
[  148.224730][ T9381] vlan0: entered promiscuous mode
[  148.238880][ T9381] bridge0: entered promiscuous mode
[  148.363101][ T9394] netlink: 'syz.0.950': attribute type 11 has an invalid length.
[  148.559036][ T9388] syzkaller1: entered promiscuous mode
[  148.560705][ T9388] syzkaller1: entered allmulticast mode
[  148.643543][  T483] smc: removing ib device syz0
[  148.814471][ T7450] ==================================================================
[  148.817040][ T7450] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  148.819601][ T7450] Read of size 8 at addr ffff8881114b62f0 by task kworker/0:8/7450
[  148.823122][ T7450] 
[  148.824357][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) 
[  148.824369][ T7450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.824377][ T7450] Workqueue: events smc_ib_port_event_work
[  148.824395][ T7450] Call Trace:
[  148.824400][ T7450]  <TASK>
[  148.824405][ T7450]  dump_stack_lvl+0xe8/0x150
[  148.824418][ T7450]  print_address_description+0x55/0x1e0
[  148.824427][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  148.824441][ T7450]  print_report+0x58/0x70
[  148.824448][ T7450]  kasan_report+0x117/0x150
[  148.824463][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  148.824476][ T7450]  __ethtool_get_link_ksettings+0x5e/0x170
[  148.824489][ T7450]  ib_get_eth_speed+0x180/0x7f0
[  148.824501][ T7450]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  148.824512][ T7450]  ? do_raw_spin_unlock+0x4d/0x210
[  148.824526][ T7450]  rxe_query_port+0x93/0x3d0
[  148.824538][ T7450]  ib_query_port+0x170/0x830
[  148.824551][ T7450]  smc_ib_port_event_work+0x15a/0x940
[  148.824563][ T7450]  ? process_scheduled_works+0xa70/0x1860
[  148.824572][ T7450]  ? process_scheduled_works+0xa70/0x1860
[  148.824579][ T7450]  process_scheduled_works+0xb5d/0x1860
[  148.824593][ T7450]  ? __pfx_process_scheduled_works+0x10/0x10
[  148.824602][ T7450]  ? assign_work+0x3d5/0x5e0
[  148.824610][ T7450]  worker_thread+0xa53/0xfc0
[  148.824623][ T7450]  kthread+0x388/0x470
[  148.824634][ T7450]  ? __pfx_worker_thread+0x10/0x10
[  148.824641][ T7450]  ? __pfx_kthread+0x10/0x10
[  148.824650][ T7450]  ret_from_fork+0x514/0xb70
[  148.824687][ T7450]  ? __pfx_ret_from_fork+0x10/0x10
[  148.824694][ T7450]  ? __switch_to+0xc79/0x1410
[  148.824707][ T7450]  ? __pfx_kthread+0x10/0x10
[  148.824716][ T7450]  ret_from_fork_asm+0x1a/0x30
[  148.824729][ T7450]  </TASK>
[  148.824732][ T7450] 
[  148.882739][ T7450] Allocated by task 5618:
[  148.884263][ T7450]  kasan_save_track+0x3e/0x80
[  148.885811][ T7450]  __kasan_kmalloc+0x93/0xb0
[  148.887161][ T7450]  __kvmalloc_node_noprof+0x528/0x8a0
[  148.888738][ T7450]  alloc_netdev_mqs+0xa8/0x1210
[  148.890152][ T7450]  rtnl_create_link+0x31f/0xd70
[  148.891583][ T7450]  rtnl_newlink_create+0x277/0xb70
[  148.893083][ T7450]  rtnl_newlink+0x166a/0x1bb0
[  148.894475][ T7450]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  148.895967][ T7450]  netlink_rcv_skb+0x232/0x4b0
[  148.897513][ T7450]  netlink_unicast+0x75c/0x8e0
[  148.899234][ T7450]  netlink_sendmsg+0x813/0xb40
[  148.901010][ T7450]  __sys_sendto+0x672/0x710
[  148.902525][ T7450]  __x64_sys_sendto+0xde/0x100
[  148.904150][ T7450]  do_syscall_64+0x15f/0xf80
[  148.905749][ T7450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.907446][ T7450] 
[  148.908325][ T7450] Freed by task 9400:
[  148.909834][ T7450]  kasan_save_track+0x3e/0x80
[  148.911633][ T7450]  kasan_save_free_info+0x46/0x50
[  148.913607][ T7450]  __kasan_slab_free+0x5c/0x80
[  148.915377][ T7450]  kfree+0x1c5/0x640
[  148.916867][ T7450]  device_release+0xc4/0x1f0
[  148.918600][ T7450]  kobject_put+0x228/0x560
[  148.920127][ T7450]  netdev_run_todo+0xc75/0xde0
[  148.921590][ T7450]  rtnl_dellink+0x6a7/0x820
[  148.922988][ T7450]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  148.924605][ T7450]  netlink_rcv_skb+0x232/0x4b0
[  148.926336][ T7450]  netlink_unicast+0x75c/0x8e0
[  148.927846][ T7450]  netlink_sendmsg+0x813/0xb40
[  148.929206][ T7450]  ____sys_sendmsg+0x972/0x9f0
[  148.930745][ T7450]  ___sys_sendmsg+0x2a5/0x360
[  148.932534][ T7450]  __x64_sys_sendmsg+0x1bd/0x2a0
[  148.934398][ T7450]  do_syscall_64+0x15f/0xf80
[  148.936181][ T7450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.938291][ T7450] 
[  148.939066][ T7450] The buggy address belongs to the object at ffff8881114b6000
[  148.939066][ T7450]  which belongs to the cache kmalloc-cg-4k of size 4096
[  148.943339][ T7450] The buggy address is located 752 bytes inside of
[  148.943339][ T7450]  freed 4096-byte region [ffff8881114b6000, ffff8881114b7000)
[  148.947589][ T7450] 
[  148.948343][ T7450] The buggy address belongs to the physical page:
[  148.950291][ T7450] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1114b0
[  148.952947][ T7450] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  148.955616][ T7450] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  148.958057][ T7450] page_type: f5(slab)
[  148.959371][ T7450] raw: 017ff00000000040 ffff88810005d500 dead000000000122 0000000000000000
[  148.961879][ T7450] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  148.964417][ T7450] head: 017ff00000000040 ffff88810005d500 dead000000000122 0000000000000000
[  148.967075][ T7450] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[  148.969806][ T7450] head: 017ff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  148.972326][ T7450] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  148.974867][ T7450] page dumped because: kasan: bad access detected
[  148.976743][ T7450] page_owner tracks the page as allocated
[  148.978387][ T7450] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (syz-executor), ts 66448522284, free_ts 66396814770
[  148.985901][ T7450]  post_alloc_hook+0x231/0x280
[  148.987408][ T7450]  get_page_from_freelist+0x24ba/0x2540
[  148.989295][ T7450]  __alloc_frozen_pages_noprof+0x18d/0x380
[  148.991049][ T7450]  allocate_slab+0x77/0x660
[  148.992416][ T7450]  refill_objects+0x339/0x3d0
[  148.994008][ T7450]  __pcs_replace_empty_main+0x321/0x720
[  148.996010][ T7450]  __kvmalloc_node_noprof+0x657/0x8a0
[  148.997771][ T7450]  alloc_netdev_mqs+0xa8/0x1210
[  148.999551][ T7450]  rtnl_create_link+0x31f/0xd70
[  149.001420][ T7450]  rtnl_newlink_create+0x277/0xb70
[  149.003298][ T7450]  rtnl_newlink+0x166a/0x1bb0
[  149.004926][ T7450]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  149.006467][ T7450]  netlink_rcv_skb+0x232/0x4b0
[  149.007954][ T7450]  netlink_unicast+0x75c/0x8e0
[  149.009372][ T7450]  netlink_sendmsg+0x813/0xb40
[  149.010797][ T7450]  __sys_sendto+0x672/0x710
[  149.012316][ T7450] page last free pid 5610 tgid 5610 stack trace:
[  149.014399][ T7450]  __free_frozen_pages+0xbc7/0xd30
[  149.016343][ T7450]  __folio_put+0x4a2/0x580
[  149.018067][ T7450]  skb_release_data+0x544/0xa60
[  149.019842][ T7450]  napi_consume_skb+0x1e7/0x2a0
[  149.021455][ T7450]  skb_defer_free_flush+0x191/0x260
[  149.023417][ T7450]  net_rx_action+0x455/0xf70
[  149.025133][ T7450]  handle_softirqs+0x22a/0x840
[  149.026997][ T7450]  __irq_exit_rcu+0xca/0x220
[  149.028759][ T7450]  irq_exit_rcu+0x9/0x30
[  149.030357][ T7450]  common_interrupt+0xbb/0xe0
[  149.032103][ T7450]  asm_common_interrupt+0x26/0x40
[  149.033999][ T7450] 
[  149.034917][ T7450] Memory state around the buggy address:
[  149.036999][ T7450]  ffff8881114b6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.040004][ T7450]  ffff8881114b6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.043007][ T7450] >ffff8881114b6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.045988][ T7450]                                                              ^
[  149.048863][ T7450]  ffff8881114b6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.051856][ T7450]  ffff8881114b6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  149.054887][ T7450] ==================================================================
[  149.145383][ T7450] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  149.148172][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) 
[  149.151658][ T7450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  149.155417][ T7450] Workqueue: events smc_ib_port_event_work
[  149.157564][ T7450] Call Trace:
[  149.158869][ T7450]  <TASK>
[  149.159997][ T7450]  vpanic+0x56c/0xa60
[  149.161483][ T7450]  ? __pfx_vpanic+0x10/0x10
[  149.163187][ T7450]  ? __pfx___schedule+0x10/0x10
[  149.164924][ T7450]  panic+0xc5/0xd0
[  149.166142][ T7450]  ? __pfx_panic+0x10/0x10
[  149.167850][ T7450]  ? preempt_schedule_common+0x82/0xd0
[  149.169893][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  149.172154][ T7450]  check_panic_on_warn+0x89/0xb0
[  149.174059][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  149.176325][ T7450]  end_report+0x73/0x170
[  149.177996][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  149.180317][ T7450]  kasan_report+0x128/0x150
[  149.182014][ T7450]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  149.184249][ T7450]  __ethtool_get_link_ksettings+0x5e/0x170
[  149.186550][ T7450]  ib_get_eth_speed+0x180/0x7f0
[  149.188375][ T7450]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  149.190400][ T7450]  ? do_raw_spin_unlock+0x4d/0x210
[  149.192351][ T7450]  rxe_query_port+0x93/0x3d0
[  149.194095][ T7450]  ib_query_port+0x170/0x830
[  149.195868][ T7450]  smc_ib_port_event_work+0x15a/0x940
[  149.197903][ T7450]  ? process_scheduled_works+0xa70/0x1860
[  149.200060][ T7450]  ? process_scheduled_works+0xa70/0x1860
[  149.202376][ T7450]  process_scheduled_works+0xb5d/0x1860
[  149.204480][ T7450]  ? __pfx_process_scheduled_works+0x10/0x10
[  149.206730][ T7450]  ? assign_work+0x3d5/0x5e0
[  149.208486][ T7450]  worker_thread+0xa53/0xfc0
[  149.210267][ T7450]  kthread+0x388/0x470
[  149.211835][ T7450]  ? __pfx_worker_thread+0x10/0x10
[  149.213780][ T7450]  ? __pfx_kthread+0x10/0x10
[  149.215541][ T7450]  ret_from_fork+0x514/0xb70
[  149.217284][ T7450]  ? __pfx_ret_from_fork+0x10/0x10
[  149.219253][ T7450]  ? __switch_to+0xc79/0x1410
[  149.220993][ T7450]  ? __pfx_kthread+0x10/0x10
[  149.222730][ T7450]  ret_from_fork_asm+0x1a/0x30
[  149.224502][ T7450]  </TASK>
[  149.226348][ T7450] Kernel Offset: disabled
[  149.227965][ T7450] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:04:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004eaf1f0
R8 =ffff88816a878237 R9 =1ffff1102d50f046 R10=dffffc0000000000 R11=ffffffff8544c610
R12=dffffc0000000000 R13=ffffffff9a4899ed R14=ffffffff9a7a2880 R15=0000000000000000
RIP=ffffffff8544c68c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818dc8d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f920cb28028 CR3=00000001205ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff90d3ba01 RCX=ffff88816e6ebb00 RDX=ffffc90003b5f901
RSI=dffffc0000000000 RDI=ffffc90003b5f910 RBP=dffffc0000000000 RSP=ffffc90003b5f830
R8 =ffffc90003b5fb80 R9 =0000000000000000 R10=ffffc90003b5f958 R11=fffff5200076bf2d
R12=ffffc90003b5fb90 R13=ffffc90003b58000 R14=ffffc90003b5f908 R15=ffffffff8176f256
RIP=ffffffff8ba8babc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ce1a500 ffffffff 00c00000
GS =0000 ffff8882a928d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c248d3c CR3=00000001bc48e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
