last executing test programs:

37.370543652s ago: executing program 2 (id=1088):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16000000}, 0x50)

37.369951466s ago: executing program 2 (id=1089):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

37.309922107s ago: executing program 2 (id=1090):
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
socket(0x21, 0x3, 0xa)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)="0f00d400010006", 0x7) (async)
r2 = socket$inet6(0xa, 0x80000, 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in6={0xa, 0x4e20, 0x1, @loopback, 0xffffffff}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x80000005}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0xf}], 0x80) (async)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000000)=0x480, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24040800) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300109933d2e43de63d563a10270c917fbf04d0dc369600c87a8bbd1334c3651d56873b301ca719b2f154eb082c5cf79c90cd3ff038451c6c8fd6adf119f9ab88db2b71d35c894d26c7cd19", @ANYRES32=r8, @ANYBLOB="080026006c0900000400b8000800b70099000000"], 0x30}}, 0x0) (async)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000000000002004e21ac14143200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e21ac14142e00000000000000000000000000000000000000fc9590816f3bf00400"/272], 0x110) (async)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r4], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c924ce358536b07ac1bd876d4d0d20", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006272696467650000180002800a0014000180c200000000000500070002000000"], 0x48}}, 0x0)

37.250796093s ago: executing program 2 (id=1091):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400000060000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)

37.250156156s ago: executing program 2 (id=1093):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800ffe01800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

37.090654035s ago: executing program 2 (id=1095):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0xfff0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

37.044409471s ago: executing program 32 (id=1095):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0xfff0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

5.320024848s ago: executing program 3 (id=1741):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5d7d7f44b5cb870f, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x48010)
unshare(0x6a040000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000001840)="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", 0xa3a}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0)
recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x5}, 0x6}], 0x1, 0x28144, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000005c0)=0xfffff412, 0x4)
r8 = socket(0x8, 0x3, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf250400000008000300070000000800030004000000080002000100005a0008000400000000000800040002000000080003000300000008000300010000000800020008000000b9856a2da5adf5f670c946c4f7145a2e4d2a37823a7bfb0783"], 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40)
bind$isdn_base(r8, &(0x7f0000000180)={0x22, 0x9, 0xa0, 0x2, 0x6f}, 0x6)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r8)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4e}, 0x1, 0x0, 0x0, 0x4004004}, 0x4)

5.13939946s ago: executing program 3 (id=1746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400ffffffef0007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)

5.138032223s ago: executing program 3 (id=1748):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x54, 0x0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x54}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
r5 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0xfffffffd, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x11, 0x0, 0x4, {0x9000000, 0x0, 0x0, 0x0, 0x3, 0x2}}}}]}, 0x78}}, 0x0)

5.05526464s ago: executing program 3 (id=1749):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @typed={0xc, 0x20, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x3, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={<r7=>0x0, 0x3}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={r7, 0x800, 0x10}, 0xc) (async)
r8 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r8, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) (async)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$rxrpc(r9, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24)
listen(r9, 0x0) (async)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce)

4.937712148s ago: executing program 0 (id=1752):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000900}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)

4.877814475s ago: executing program 0 (id=1753):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x4, [{0x0, 0x1}]}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f00000000c0)={'netdevsim0\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x26, 0x5, 0x6, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000280)='wlan0\x00', 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x40002}, [@printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x44, 0x2, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private0}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x2a6da29f03e74a82)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)

4.569924321s ago: executing program 0 (id=1755):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) (async, rerun: 64)
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x14, r7, 0x1, 0x400000}, 0x14}}, 0x0) (async)
getpeername$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1000, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, r4}, 0x6e6bb2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, @in=@remote, @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x0, 0x2, 0x2}]}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e20, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}]}, 0xbc}}, 0x0)

4.54096969s ago: executing program 0 (id=1758):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010040000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

4.470311631s ago: executing program 0 (id=1759):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x104, 0x15, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_USERDATA={0x94, 0x8, "d018236453c3095d44a4e4bfc5042b61356b8a3460adc84b94232f0dbf405bfdbb86af1a704ceb660e60f8030123c08223aab3ea23946f80acf3d2e463ae0a37ffbfe7e4d69b5b080e81cfd689f291290cd29a2c43d915c1fc6619474c91f4da843c47189bec831e5e2ee6a6f17a53387b22073f40f7b917524c748832b6b85c9665203dd8ab6a09391695330a1177c0"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x20044000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x80000000}, {0xd, 0x4}]}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0)
socket$kcm(0x10, 0x2, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x80000001}]}, 0x3c}}, 0x0)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000)
unshare(0x20000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0)

4.137902133s ago: executing program 3 (id=1760):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x900, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)

4.06918198s ago: executing program 3 (id=1762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400fffffff00007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)

3.978162156s ago: executing program 33 (id=1762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d101400fffffff00007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)

3.189641489s ago: executing program 1 (id=1765):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x2000000, 0x0, 0x0, 0x0, 0x4}}, 0xb8}}, 0x4040000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x800, 0x10000004, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x10, 0xffffffffffffffff}, 0x7}}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

3.189436634s ago: executing program 1 (id=1766):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x81000000, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

3.188671781s ago: executing program 1 (id=1767):
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0xc, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x80}, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0xfc, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x7ff, 0x4, 0x2, 0x4, 0x3ff, 0x5}}, {0xe, 0x2, [0xfffa, 0x2, 0x314, 0x8685, 0xc8d]}}, {{0x1c, 0x1, {0xfb, 0xc, 0x100, 0x8, 0x0, 0x9, 0x41fe, 0x3}}, {0xa, 0x2, [0x1ff, 0x3, 0x6]}}, {{0x1c, 0x1, {0x53, 0x9, 0x6, 0x101, 0x0, 0x9559, 0x6, 0x4}}, {0xc, 0x2, [0x4, 0x10, 0x66e7, 0x7]}}, {{0x1c, 0x1, {0x7, 0x2, 0x4, 0x98d8, 0x0, 0x2, 0xd, 0x5}}, {0xe, 0x2, [0x3, 0x2, 0xc629, 0x9, 0x0]}}, {{0x1c, 0x1, {0x7, 0x8, 0x4, 0x0, 0x2, 0x6, 0xce, 0x6}}, {0x10, 0x2, [0x1, 0x1000, 0x9, 0x2, 0x7, 0x6]}}]}]}, 0xfc}}, 0x4000080)
bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd701004f7ffff040000000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040), 0x6) (async)
bind$bt_hci(r11, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r11, 0x400448e6, &(0x7f0000000080)="fc") (async)
ioctl$sock_bt_hci(r11, 0x400448e6, &(0x7f0000000080)="fc")
r12 = socket(0x2c, 0x4, 0x1)
r13 = getuid()
sendmsg$nl_generic(r12, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000427bd7000fddbdf250500000008007100", @ANYRES32=r13, @ANYBLOB="c8287818c38dae024ef87e991356e84542b9ac8d262164fd0ecc017fc70ff18e0f8616d5da053a64533c626ad587d15a38032b555d0d7bbd433fd01d119b52fa93c120646b1c1db276e907aa094ef972ac0ccbab7667e0b5d212c0ef22a5e8b7182580f14de1f6ace63ddb0d5eac09c27818957bec45dd14d1bdd8d37338e9080cfd3d27f7e01c7ed8492fbf0ada52b5ef8fb6d5633adc6676e0b7498bbe204f6ba19c275ffe3e5c24fd49ef48e427bcbfee3b61e562721db892469d092ac5a0b70ebd628edd6608ec1c76265c3e4df9b8b46014ed089d1be88dc6a77d30040db3e6da220d39452b0928e0606ad382b5"], 0x1c}}, 0x8001)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newsa={0x2e8, 0x18, 0x713, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xffffffff00000001, 0x0, 0x5, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x10}, [@algo_aead={0x1f8, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd60, 0x60, "b104f8869ca61b65e81e174d95791e9a3a1d863cef0ea9797bac18f811919d667daeb814b915c2126d33744fb69cbc3404b01c810472257c738474148a14eddac5409d7b8a8cfaaa4d3f824ae6fa831318c67dcbb2565590ca3e4412013616227d3196afa5e74420b45c23ef9c558522ee1eb2af7571b92ff3d43069b71b7d44d44cd6d7be33e67a3258e1528a1058d158ef4f510bc742030a2049fe350e5cd9b9414a166d3929056d7ddda64d877135656aa7e9f9bf670cc25a2528d2cc446c940df9b977b73643e04586bc9e0f70ad3e17e160009edd61faa6d7c49c60ecef44720151a94d5291e44cfad931f4bbba5be679424f7ab6a1d7836698bcb1d3b38d00f2ee5d2cb19340becf7555f826bead3b0db9470fde105e61874de1efe6e475e304921837c2ac158dfe68c0ea423ccb09a81ec329256f636477d1fda5c9825076f4956dead568010d1a06b761164b41a9f0d57c11a1fbcf83a1b02f7d55681c389eb7e90e841e8d9c8ee9973bbe80a6d098d05057953bf97da6ebffa0dee60d144f8d39c7eb652f04f912c9245cbef04ffe5dd0f3e72f4cf12b52236a7750fc4e9a5c7f97b6304040bd5d"}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newsa={0x2e8, 0x18, 0x713, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x80, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0xfffffffffffffffc, 0x8, 0xffffffff00000001, 0x0, 0x5, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x10}, [@algo_aead={0x1f8, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd60, 0x60, "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"}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x880}, 0x2000)

3.090328243s ago: executing program 1 (id=1768):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000001900}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)

3.08973187s ago: executing program 1 (id=1769):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='snd_soc_dapm_connected\x00', r1}, 0x18)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x2}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
connect$packet(r7, &(0x7f00000003c0)={0x11, 0xf7, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14)
recvmmsg(r7, 0x0, 0x0, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x3, 0x6b}, @timestamp={0x44, 0x4, 0x8e, 0x0, 0x2}, @rr={0x7, 0x7, 0x78, [@local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)

2.989603121s ago: executing program 0 (id=1770):
write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4100, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.814743766s ago: executing program 34 (id=1770):
write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4100, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.020187981s ago: executing program 4 (id=1774):
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0xffffffffffffffff)
socket(0x2, 0x80805, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6af0}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

920.141528ms ago: executing program 4 (id=1775):
socket(0x23, 0x80000, 0x1) (async)
r0 = socket(0x23, 0x80000, 0x1)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x8054)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xfffffc02}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xfffffc02}, 0x1c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, {0xe}, [@typed={0x4, 0x71}, @generic="67087f2c031bff5ebfd7216b45169e21b5d44767f8b25ad822384f9d7ee453cc01337c3d6efae9c9bac95de165f8952d0149bff628c82913e3163980809125772d47f3a915c705f785320cfcc412f83b91d29e49c7bf83f522fdbaf8780e6ed73358fd071ff1e02faea82bf0b57df7eb59a079c5644c4004833f9aa274267327b0ce0a5dad11f7d2a3b788220552b8e7f91ec445cc3979f987041f5504adc6a663307686b01b665dc6a552669e3bdc81fd5169aca054c1972a3afb2d05888c22a8317bac2939b45b0e470d33d8e8197f94b5ff47fe1fd16553c862f32c4823770365f3900bfb6102f83ccb10", @nested={0x8a, 0xaa, 0x0, 0x1, [@generic="d16df245f0389cbef91cf4f2a146b2cb2d539a20a5148a1b7a8708768fc5335b360e0e21486caef0fa43fdab7fde8d10a0a157e53a7713f2000d1964a7e61e49101dd493fe8d625958c7edba6aa1e6e931e5a59d21273db398073b8324d69c667d5b0a5a0478db10020a2146a7e4bee8d6952b93a11914edb9023f90ba12", @nested={0x4, 0xf}, @nested={0x4, 0x9b}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20044000}, 0x4044)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$inet(r0, &(0x7f0000000440), &(0x7f0000000480)=0x10) (async)
getsockname$inet(r0, &(0x7f0000000440), &(0x7f0000000480)=0x10)
getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00000004c0)=""/88, &(0x7f0000000540)=0x58)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x8)
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000580)=0x6, 0x4)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r6, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40004)
writev(r5, &(0x7f0000000940)=[{&(0x7f0000000700)="2cf90b335890859bc077e357d513b6545dfd8735963631d2d33c440d8e4532c40a568283967487e8a020f9262db0576a03d4a08007f737731310e76e1a4769f7703a7983cd08beec0b19549dc8c239f6022d4c582b17e05a0bf0693a08ada9b449062cd4af69de17ea1a05dbf0c43f3ed8b0e242aa4b5242239ea8659b1793648c30fe42007f40c69663f0ba67734d2e8069a71d", 0x94}, {&(0x7f00000007c0)="36e01047827af4636e5fad47ff6f6d5ec50d3319ed642de43ff473fd0fe975d55f2dc3e9a111e4a411afd5c950d73f4600dbdceb18014e2d46bcdbbd65b3350e632e0748bc474071681e52a81910cb3c4e61a430af66350b42c0ecaded75ffbbb3dd04c030b6a6ebe9af2bdb331aef2e159081d734710bf6a831e920f9b12afd78e0b0af8015cf2fab46ff443901c389cbf27950cf2808cc3b3b9a1cb6dfcc82960ae98da81627f4551583b32e90a7988f594e88fb601b55825b182097ccdd2592800aa7b7f7218927b06cce32415dfc86f82c17a7eda0b4e4376dddc93a2d", 0xdf}, {&(0x7f00000008c0)="ee93e1ebf3cf61857f94a12a80e17dd6c5b7bc535419d3f447433da20b256185062a6934674cb251c5b0a7c4a01e3e7aa3eaad388528a2963cd87fd18b9366d3ad920b8d5a3ed59f40fa4ca733206499bb2ba8376e50e22fc227a064ac202cf9aaeabdec6a6a4aadd51e12aa46a1f93789d1", 0x72}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x6, &(0x7f0000000a00)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x4}], &(0x7f0000000a40)='syzkaller\x00', 0xffffffff, 0x9f, &(0x7f0000000a80)=""/159, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[r0], &(0x7f0000000bc0)=[{0x4, 0x3, 0x5, 0xb}, {0x3, 0x2, 0xf, 0xa}, {0x5, 0x4, 0x8, 0x5}, {0x2, 0x2, 0x1, 0x5}, {0x2, 0x5, 0x6, 0x9}, {0x2, 0x2, 0x10, 0xf}, {0x4, 0x3, 0x6}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f00000009c0)='xprtrdma_frwr_sgerr\x00', r7, 0x0, 0xef}, 0x18) (async)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f00000009c0)='xprtrdma_frwr_sgerr\x00', r7, 0x0, 0xef}, 0x18)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000d40)=@req3={0xffffffff, 0xff800, 0x3, 0x2, 0x7, 0x9, 0x8e}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000dc0))
ioctl$sock_netdev_private(r5, 0x89f6, &(0x7f0000000ec0)="22929b14b5950fbbafcf5f39bb2af356468bcb930ec571e0868c4ab5ad98156c14b973769f2d1e971a23ad2679774c08bbfd741bda9fc724566ba7") (async)
ioctl$sock_netdev_private(r5, 0x89f6, &(0x7f0000000ec0)="22929b14b5950fbbafcf5f39bb2af356468bcb930ec571e0868c4ab5ad98156c14b973769f2d1e971a23ad2679774c08bbfd741bda9fc724566ba7")
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
bind$inet6(r0, &(0x7f0000001000)={0xa, 0x4e21, 0x2, @loopback, 0x7}, 0x1c)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000010c0)={'tunl0\x00', &(0x7f0000001080)={'tunl0\x00', <r10=>0x0, 0x7800, 0x8, 0x5, 0x9, {{0x7, 0x4, 0x2, 0xa, 0x1c, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @broadcast, {[@rr={0x7, 0x7, 0xf6, [@private=0xa010102]}]}}}}})
sendmsg$nl_route_sched_retired(r4, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)=@newqdisc={0xb4, 0x24, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc}, {0x2, 0x9}, {0xa}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4c}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4f}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001280)=<r11=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x144, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8800}, 0x40080)

828.394735ms ago: executing program 4 (id=1776):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x80002})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x54, 0x0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x54}}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
r5 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0xfffffffd, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x11, 0x0, 0x4, {0x81000000, 0x0, 0x0, 0x0, 0x3, 0x2}}}}]}, 0x78}}, 0x0)

750.013786ms ago: executing program 4 (id=1777):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
unshare(0x6a060000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000040)) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdffffff0a0000000200000000000022008c8103e8129c9e99a3c868974392e176000000000000010500000020000000006100302e61615f61006100"], 0x0, 0x4c}, 0x28)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x14, r8, 0x200, 0x402, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4000044)
sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r10], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

749.822887ms ago: executing program 4 (id=1778):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in6=@local, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3c}}, 0xf0}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x188}, 0x0)

649.49205ms ago: executing program 4 (id=1779):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='snd_soc_dapm_connected\x00', r2}, 0x18)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x2}, {0x6}]}, 0x10)
sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r8, 0x0, 0x0, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x44}, {[@lsrr={0x83, 0x3, 0x6b}, @timestamp={0x44, 0x4, 0x8e, 0x0, 0x2}, @rr={0x7, 0x3, 0x78}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x3, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f00000d8000/0x2000)=nil, 0x2000, 0x3, 0x1110, r3, 0x3000)
r9 = socket$inet6(0xa, 0x80000, 0xffff9a3f)
getsockopt$inet6_mreq(r9, 0x29, 0x7, 0x0, &(0x7f0000000100))
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYBLOB="b0769cbf34a7250c63ae94b1daf8b8aa3392f97552c86e253319b5f1af5d1a36e5fb90d007c7c707e1a80ff0c49a5b20e54a3dda26d7fd7f8e3656017cba6d7cde32186130f8df17fc9f1bd96f48ff3b4bb5b4420fc86bd164bd5f445f78476155e8941561a683a82b50b01b1c20b929ae4f44dd439a2097ecfa97cef35ca64aa8149e6d45e9a69d61ddded3a6e8171ac4e3043d57759f83b26022f7a502da605b50146ef41b9002215e7bdc44f7590ab8e60e3720aa7471c758b86bb71a2a54b8748f5d56c299d490d3a9b2daed45b8936263e9a627c865d81c85af6b017a91b4eb43c5"], &(0x7f0000000100)=0x28)

0s ago: executing program 1 (id=1780):
write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3f00, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31232' (ED25519) to the list of known hosts.
syzkaller login: [   40.694387][ T5763] cgroup: Unknown subsys name 'net'
[   40.827791][ T5763] cgroup: Unknown subsys name 'cpuset'
[   40.831645][ T5763] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.072170][ T5763] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.299071][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.305255][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.307979][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.315692][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.318445][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.347370][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.350294][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.352944][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.356684][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.372046][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.375187][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.398437][ T5209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.405661][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.408721][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.411889][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.484914][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   45.588502][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.591170][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.593885][ T5817] bridge_slave_0: entered allmulticast mode
[   45.597009][ T5817] bridge_slave_0: entered promiscuous mode
[   45.600816][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.603209][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.605862][ T5817] bridge_slave_1: entered allmulticast mode
[   45.608564][ T5817] bridge_slave_1: entered promiscuous mode
[   45.631165][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.639842][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.690344][ T5817] team0: Port device team_slave_0 added
[   45.726777][ T5817] team0: Port device team_slave_1 added
[   45.745695][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.747922][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.756171][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.762554][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.765077][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.773289][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.777495][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   45.786032][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   45.854185][ T5817] hsr_slave_0: entered promiscuous mode
[   45.856531][ T5817] hsr_slave_1: entered promiscuous mode
[   45.895086][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.897487][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.899779][ T5824] bridge_slave_0: entered allmulticast mode
[   45.902553][ T5824] bridge_slave_0: entered promiscuous mode
[   45.923629][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.926465][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.928768][ T5824] bridge_slave_1: entered allmulticast mode
[   45.931432][ T5824] bridge_slave_1: entered promiscuous mode
[   45.948709][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.951145][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.953452][ T5822] bridge_slave_0: entered allmulticast mode
[   45.956425][ T5822] bridge_slave_0: entered promiscuous mode
[   45.972903][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.975404][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.977785][ T5822] bridge_slave_1: entered allmulticast mode
[   45.980498][ T5822] bridge_slave_1: entered promiscuous mode
[   45.998671][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.017720][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.022175][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.029308][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.067345][ T5824] team0: Port device team_slave_0 added
[   46.080592][ T5824] team0: Port device team_slave_1 added
[   46.083455][ T5822] team0: Port device team_slave_0 added
[   46.086959][ T5822] team0: Port device team_slave_1 added
[   46.116119][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.119491][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.128038][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.139698][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.141982][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.151509][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.167350][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.169603][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.178077][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.194257][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.196748][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.204839][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.218947][ T5822] hsr_slave_0: entered promiscuous mode
[   46.221252][ T5822] hsr_slave_1: entered promiscuous mode
[   46.223730][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   46.225932][ T5822] Cannot create hsr debugfs directory
[   46.256604][ T5824] hsr_slave_0: entered promiscuous mode
[   46.258956][ T5824] hsr_slave_1: entered promiscuous mode
[   46.261097][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   46.262949][ T5824] Cannot create hsr debugfs directory
[   46.273890][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.299666][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.317713][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.329391][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.405970][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.408347][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.411053][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.413399][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.451001][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.459220][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.463970][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.468880][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.490963][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.494486][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.535349][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.540857][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.550797][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.560404][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.569059][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.596037][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   46.611004][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.613373][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.622771][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.630734][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.633126][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.662299][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   46.670497][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.672892][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.682650][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.689450][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.691842][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.717559][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.736940][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   46.751713][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.754076][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.773584][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.776045][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.863908][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.889734][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.919863][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.923952][ T5817] veth0_vlan: entered promiscuous mode
[   46.932568][ T5822] veth0_vlan: entered promiscuous mode
[   46.939084][ T5817] veth1_vlan: entered promiscuous mode
[   46.944232][ T5822] veth1_vlan: entered promiscuous mode
[   46.973912][ T5817] veth0_macvtap: entered promiscuous mode
[   46.984464][ T5822] veth0_macvtap: entered promiscuous mode
[   46.989787][ T5824] veth0_vlan: entered promiscuous mode
[   46.992442][ T5817] veth1_macvtap: entered promiscuous mode
[   46.997365][ T5822] veth1_macvtap: entered promiscuous mode
[   47.006723][ T5824] veth1_vlan: entered promiscuous mode
[   47.014549][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.020897][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.030519][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.033987][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.046328][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.050383][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.060316][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.070604][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.073523][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.086616][ T5824] veth0_macvtap: entered promiscuous mode
[   47.093687][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.099026][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.107125][ T5824] veth1_macvtap: entered promiscuous mode
[   47.115496][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.136915][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.152226][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.159506][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.165023][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.167633][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.179399][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.182223][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.186773][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.189344][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.191746][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.233067][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.238043][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.239719][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.243110][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.271880][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.274403][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.292134][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.313018][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.316759][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.364628][ T5885] netlink: zone id is out of range
[   47.366281][ T5826] Bluetooth: hci0: command tx timeout
[   47.368899][ T5885] netlink: zone id is out of range
[   47.393675][ T5885] netlink: zone id is out of range
[   47.400608][ T5885] netlink: zone id is out of range
[   47.402338][ T5885] netlink: zone id is out of range
[   47.404048][ T5885] netlink: zone id is out of range
[   47.407710][ T5885] netlink: zone id is out of range
[   47.409670][ T5885] netlink: zone id is out of range
[   47.411705][ T5885] netlink: zone id is out of range
[   47.413511][ T5885] netlink: zone id is out of range
[   47.420103][ T5893] netlink: 15652 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.436487][ T5826] Bluetooth: hci2: command tx timeout
[   47.438635][   T54] Bluetooth: hci1: command tx timeout
[   47.482681][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.485936][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.488788][ T5895] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.491929][ T5887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.503622][ T5895] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   47.508435][ T5895] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.550575][ T5901] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.557382][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'.
[   47.803705][ T5910] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.11'.
[   47.839385][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   47.842342][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   47.850887][ T5916] netlink: 'syz.1.13': attribute type 4 has an invalid length.
[   47.923973][ T5924] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   47.932013][ T5924] vlan2: entered allmulticast mode
[   47.933737][ T5924] veth1: entered allmulticast mode
[   48.147082][ T5943] netlink: 'syz.2.24': attribute type 4 has an invalid length.
[   48.479161][ T5973] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   48.708216][ T5986] delete_channel: no stack
[   48.749487][ T5995] Zero length message leads to an empty skb
[   48.756921][ T5997] netlink: 'syz.1.42': attribute type 10 has an invalid length.
[   48.768037][ T5997] team0: Cannot enslave team device to itself
[   48.771441][ T5997] netlink: 'syz.1.42': attribute type 13 has an invalid length.
[   48.823288][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.826310][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.876476][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.882320][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.006234][ T5999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.013218][ T5862] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.019730][ T5862] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.022742][ T5862] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.159732][ T6018] netlink: 'syz.2.46': attribute type 13 has an invalid length.
[   49.245521][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.248212][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.326946][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.332759][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.438138][ T5826] Bluetooth: hci0: command tx timeout
[   49.450311][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.453383][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.469302][ T6023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.478728][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.526193][ T5826] Bluetooth: hci2: command tx timeout
[   49.526227][   T54] Bluetooth: hci1: command tx timeout
[   49.783629][ T6057] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   49.801369][ T6057] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.809267][ T6057] vlan2: entered allmulticast mode
[   49.813207][ T6057] bond1: (slave vlan2): making interface the new active one
[   49.816999][ T6057] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   50.045332][ T6078] syz.0.66 uses old SIOCAX25GETINFO
[   50.111269][ T6087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.264310][ T6087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.313870][ T6087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.366847][ T6087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.427253][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.434640][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.442883][ T5837] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.450616][ T5837] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.543046][ T6096] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   51.515218][   T54] Bluetooth: hci0: command tx timeout
[   51.530011][ T6126] syz.1.84 uses obsolete (PF_INET,SOCK_PACKET)
[   51.566613][ T6131] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.595414][   T54] Bluetooth: hci2: command tx timeout
[   51.605101][   T54] Bluetooth: hci1: command tx timeout
[   51.617654][ T6131] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.668298][ T6131] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.718612][ T6131] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.955452][ T6142] __nla_validate_parse: 35 callbacks suppressed
[   52.955467][ T6142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.89'.
[   53.245180][ T6145] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   53.252281][ T6145] vlan2: entered allmulticast mode
[   53.254131][ T6145] veth1: entered allmulticast mode
[   53.299204][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.90'.
[   53.595314][   T54] Bluetooth: hci0: command tx timeout
[   53.675215][   T54] Bluetooth: hci1: command tx timeout
[   53.675491][ T5826] Bluetooth: hci2: command tx timeout
[   54.329020][ T6167] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   54.331601][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   54.388969][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.395422][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.398474][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.404610][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.447067][ T6177] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   54.530638][ T6185] netlink: 'syz.1.106': attribute type 13 has an invalid length.
[   54.559740][ T6185] syzkaller0: tun_chr_ioctl cmd 1074812118
[   54.570357][ T6179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.103'.
[   54.608838][ T6190] netlink: 176 bytes leftover after parsing attributes in process `syz.0.108'.
[   54.627640][ T6190] netlink: 277 bytes leftover after parsing attributes in process `syz.0.108'.
[   54.913294][ T6274] net_ratelimit: 199 callbacks suppressed
[   54.913304][ T6274] Set syz0 is full, maxelem 0 reached
[   54.949196][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'.
[   55.229594][ T6294] netlink: 'syz.1.118': attribute type 13 has an invalid length.
[   55.708096][ T6301] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.120'.
[   55.739388][ T6306] netlink: 'syz.1.123': attribute type 11 has an invalid length.
[   55.740138][ T6307] netlink: 11996 bytes leftover after parsing attributes in process `syz.2.122'.
[   55.748640][ T6308] netlink: 'syz.1.123': attribute type 11 has an invalid length.
[   55.789322][ T6316] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   55.812046][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.824475][ T6316] vlan2: entered allmulticast mode
[   55.827057][ T6316] bond1: (slave vlan2): Opening slave failed
[   55.868336][ T6316] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'.
[   56.190135][ T6349] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   56.231020][ T6351] bridge1: port 1(veth3) entered blocking state
[   56.233227][ T6351] bridge1: port 1(veth3) entered disabled state
[   56.237095][ T6351] veth3: entered allmulticast mode
[   56.240479][ T6351] veth3: entered promiscuous mode
[   56.251403][ T6352] bridge1: port 2(veth5) entered blocking state
[   56.253545][ T6352] bridge1: port 2(veth5) entered disabled state
[   56.256089][ T6352] veth5: entered allmulticast mode
[   56.258573][ T6352] veth5: entered promiscuous mode
[   56.266885][ T6351] vlan2: entered allmulticast mode
[   56.268858][ T6351] bridge1: port 3(vlan2) entered blocking state
[   56.271131][ T6351] bridge1: port 3(vlan2) entered disabled state
[   56.274161][ T6351] vlan2: entered promiscuous mode
[   56.276280][ T6351] veth1: entered promiscuous mode
[   56.879530][ T6361] netlink: 'syz.0.141': attribute type 2 has an invalid length.
[   56.899141][ T6364] netlink: 'syz.0.141': attribute type 2 has an invalid length.
[   57.288046][ T6392] netlink: 'syz.0.148': attribute type 13 has an invalid length.
[   57.340641][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.343316][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.430282][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.439493][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.541051][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.545951][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.549716][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.552452][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.073298][ T6410] __nla_validate_parse: 10 callbacks suppressed
[   58.073310][ T6410] netlink: 15652 bytes leftover after parsing attributes in process `syz.0.156'.
[   58.112117][ T6409] netlink: 344 bytes leftover after parsing attributes in process `syz.2.155'.
[   58.259350][ T6419] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.158'.
[   58.287955][ T6425] validate_nla: 1 callbacks suppressed
[   58.287966][ T6425] netlink: 'syz.0.160': attribute type 1 has an invalid length.
[   58.312782][ T6425] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.319198][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'.
[   58.324156][ T6425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.160'.
[   58.477514][ T6446] tipc: Started in network mode
[   58.479685][ T6446] tipc: Node identity 4e011d950f1e, cluster identity 4711
[   58.482420][ T6446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.516143][ T6446] syzkaller0: entered promiscuous mode
[   58.518110][ T6446] syzkaller0: entered allmulticast mode
[   58.520369][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   58.525921][ T6446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'.
[   58.531409][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   59.111255][ T6445] tipc: Disabling bearer <eth:syzkaller0>
[   59.242287][ T6450] netlink: 'syz.0.169': attribute type 9 has an invalid length.
[   59.245990][ T6455] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   59.248700][ T6450] netlink: 'syz.0.169': attribute type 7 has an invalid length.
[   59.251210][ T6450] netlink: 'syz.0.169': attribute type 8 has an invalid length.
[   59.256614][ T6456] netlink: 'syz.0.169': attribute type 9 has an invalid length.
[   59.259122][ T6456] netlink: 'syz.0.169': attribute type 7 has an invalid length.
[   59.261604][ T6456] netlink: 'syz.0.169': attribute type 8 has an invalid length.
[   59.536485][ T6480] netlink: 176 bytes leftover after parsing attributes in process `syz.2.176'.
[   59.540543][ T6480] netlink: 277 bytes leftover after parsing attributes in process `syz.2.176'.
[   59.885870][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'.
[   59.902493][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.906538][ T6496] team0: Port device bond2 added
[   60.020239][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[   60.276768][ T6506] netlink: zone id is out of range
[   60.280474][ T6506] netlink: zone id is out of range
[   60.297986][ T6506] netlink: zone id is out of range
[   60.299797][ T6506] netlink: zone id is out of range
[   60.301548][ T6506] netlink: zone id is out of range
[   60.303273][ T6506] netlink: zone id is out of range
[   60.305855][ T6506] netlink: zone id is out of range
[   60.307794][ T6506] netlink: zone id is out of range
[   60.309687][ T6506] netlink: zone id is out of range
[   60.311921][ T6506] netlink: zone id is out of range
[   60.321883][ T6506] : entered promiscuous mode
[   61.017691][ T6530] netlink: 'syz.2.194': attribute type 1 has an invalid length.
[   61.033097][ T6530] 8021q: adding VLAN 0 to HW filter on device bond3
[   61.044828][ T6530] vlan3: entered allmulticast mode
[   61.050873][ T6530] bond3: (slave vlan3): Opening slave failed
[   61.069852][ T6535] netlink: 'syz.0.196': attribute type 13 has an invalid length.
[   61.393252][ T6560] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.472852][ T6576] warning: `syz.2.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.003542][ T6605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.050504][ T6605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.054314][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.057879][ T6605] bond0 (unregistering): Released all slaves
[   62.312537][ T6610] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   62.356922][ T6610] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   62.363026][ T6610] 8021q: adding VLAN 0 to HW filter on device bond3
[   62.406602][ T6610] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   62.410131][ T6610] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[   62.414317][ T6610] bond3 (unregistering): Released all slaves
[   62.680499][ T6610] syz.0.221 (6610) used greatest stack depth: 20088 bytes left
[   62.851837][ T6624] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   62.856300][ T6624] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   63.027534][ T6632] 8021q: adding VLAN 0 to HW filter on device bond4
[   63.050533][ T6632] vlan3: entered allmulticast mode
[   63.052909][ T6632] bond4: (slave vlan3): Opening slave failed
[   63.090963][ T6634] __nla_validate_parse: 49 callbacks suppressed
[   63.090972][ T6634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.228'.
[   63.593913][ T6644] validate_nla: 3 callbacks suppressed
[   63.593923][ T6644] netlink: 'syz.1.232': attribute type 13 has an invalid length.
[   63.643892][ T6652] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.647629][ T6652] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   63.670241][ T6652] bond3 (unregistering): Released all slaves
[   63.829300][ T6661] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   63.965063][ T6669] netlink: 14 bytes leftover after parsing attributes in process `syz.1.241'.
[   64.034306][ T6680] netlink: 176 bytes leftover after parsing attributes in process `syz.2.244'.
[   64.039175][ T6680] netlink: 277 bytes leftover after parsing attributes in process `syz.2.244'.
[   64.069851][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'.
[   64.297972][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   64.689725][ T6701] netlink: 68 bytes leftover after parsing attributes in process `syz.0.253'.
[   64.694038][ T6701] Bluetooth: MGMT ver 1.23
[   64.924739][ T6707] netlink: 'syz.2.255': attribute type 2 has an invalid length.
[   64.927501][ T6707] netlink: 119 bytes leftover after parsing attributes in process `syz.2.255'.
[   64.952156][ T6709] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.256'.
[   64.979420][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'.
[   64.988779][ T6711] netlink: 'syz.2.257': attribute type 3 has an invalid length.
[   64.991424][ T6711] netlink: 'syz.2.257': attribute type 3 has an invalid length.
[   65.078484][ T6718] netlink: 'syz.2.260': attribute type 1 has an invalid length.
[   65.093110][ T6718] 8021q: adding VLAN 0 to HW filter on device bond5
[   65.100177][ T6718] vlan3: entered allmulticast mode
[   65.102747][ T6718] bond5: (slave vlan3): Opening slave failed
[   65.221819][ T6729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.227339][ T6729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.230815][ T6729] bond0 (unregistering): Released all slaves
[   65.769525][ T6744] netlink: 'syz.2.269': attribute type 4 has an invalid length.
[   65.793611][ T6747] netlink: 'syz.2.270': attribute type 13 has an invalid length.
[   65.888139][ T5882] IPVS: starting estimator thread 0...
[   65.943734][ T6751] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20002
[   65.969101][ T6756] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   65.985896][ T6749] IPVS: using max 79 ests per chain, 189600 per kthread
[   66.107707][ T5837] IPVS: stop unused estimator thread 0...
[   66.940495][ T6804] netlink: 'syz.0.291': attribute type 8 has an invalid length.
[   66.956701][ T6804] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.960058][ T6804] bond0: (slave bond3): Enslaving as an active interface with an up link
[   66.985263][ T6807] netlink: 'syz.0.292': attribute type 1 has an invalid length.
[   67.000315][ T6807] 8021q: adding VLAN 0 to HW filter on device bond4
[   67.030644][ T5882] IPVS: starting estimator thread 0...
[   67.125260][ T6811] IPVS: using max 79 ests per chain, 189600 per kthread
[   67.434243][ T6833] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.487684][ T6881] bond0 (unregistering): Released all slaves
[   68.561598][ T6887] __nla_validate_parse: 13 callbacks suppressed
[   68.561608][ T6887] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.320'.
[   68.587117][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'.
[   68.875471][ T6892] syzkaller1: entered promiscuous mode
[   68.877241][ T6892] syzkaller1: entered allmulticast mode
[   69.439105][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   69.461955][ T6897] validate_nla: 2 callbacks suppressed
[   69.461964][ T6897] netlink: 'syz.0.324': attribute type 1 has an invalid length.
[   69.477962][ T6897] 8021q: adding VLAN 0 to HW filter on device bond5
[   69.487405][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'.
[   69.524091][ T6902] netlink: 15148 bytes leftover after parsing attributes in process `syz.0.326'.
[   69.622419][ T6918] netlink: 165 bytes leftover after parsing attributes in process `syz.0.333'.
[   69.653724][ T6921] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   69.752793][ T6932] netlink: 3 bytes leftover after parsing attributes in process `syz.0.339'.
[   69.756788][ T6934] netlink: 176 bytes leftover after parsing attributes in process `syz.1.340'.
[   69.761222][ T6934] netlink: 277 bytes leftover after parsing attributes in process `syz.1.340'.
[   69.807182][ T6942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.343'.
[   69.855454][ T6942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.859159][ T6942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.862861][ T6942] bond0 (unregistering): (slave bond3): Releasing backup interface
[   69.866179][ T6942] bond0 (unregistering): Released all slaves
[   69.896241][ T6945] netlink: 'syz.1.344': attribute type 13 has an invalid length.
[   70.124307][ T6947] lo speed is unknown, defaulting to 1000
[   70.128377][ T6947] lo speed is unknown, defaulting to 1000
[   70.130925][ T6947] lo speed is unknown, defaulting to 1000
[   70.211233][ T6947] infiniband syz0: set down
[   70.213401][ T5882] lo speed is unknown, defaulting to 1000
[   70.215666][ T6947] infiniband syz0: added lo
[   70.234109][ T6947] RDS/IB: syz0: added
[   70.236582][ T6947] smc: adding ib device syz0 with port count 1
[   70.238667][ T6947] smc:    ib device syz0 port 1 has pnetid 
[   70.241156][ T5882] lo speed is unknown, defaulting to 1000
[   70.244134][ T6947] lo speed is unknown, defaulting to 1000
[   70.330752][ T6947] lo speed is unknown, defaulting to 1000
[   70.415937][ T6947] lo speed is unknown, defaulting to 1000
[   70.808201][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.810492][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.323024][ T6979] netlink: 'syz.0.356': attribute type 1 has an invalid length.
[   71.336608][ T6979] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.381887][ T6982] lo speed is unknown, defaulting to 1000
[   71.663772][ T7015] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   71.737612][ T7025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.743142][ T7025] syzkaller0: entered promiscuous mode
[   71.747241][ T7025] syzkaller0: entered allmulticast mode
[   71.774606][ T7025] tipc: Resetting bearer <eth:syzkaller0>
[   71.878415][ T7022] tipc: Resetting bearer <eth:syzkaller0>
[   71.885179][ T7022] tipc: Disabling bearer <eth:syzkaller0>
[   72.115514][ T7065] netlink: 'syz.2.376': attribute type 13 has an invalid length.
[   72.406843][ T7071] lo speed is unknown, defaulting to 1000
[   72.824716][ T7086] net_ratelimit: 96 callbacks suppressed
[   72.824725][ T7086] netlink: zone id is out of range
[   72.829892][ T7086] netlink: zone id is out of range
[   72.841152][ T7086] netlink: zone id is out of range
[   72.842820][ T7086] netlink: zone id is out of range
[   72.844533][ T7086] netlink: zone id is out of range
[   72.846685][ T7086] netlink: zone id is out of range
[   72.848317][ T7086] netlink: zone id is out of range
[   72.850020][ T7086] netlink: zone id is out of range
[   72.851798][ T7086] netlink: zone id is out of range
[   72.853664][ T7086] netlink: zone id is out of range
[   72.976936][ T7093] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   72.993296][ T7093] smc: adding net device bond0 with user defined pnetid SYZ2
[   72.998316][ T7093] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.005653][ T7093] vlan2: entered allmulticast mode
[   73.007443][ T7093] veth1: entered allmulticast mode
[   73.009743][ T7093] bond0: (slave vlan2): Opening slave failed
[   73.751283][ T7140] lo speed is unknown, defaulting to 1000
[   73.953125][ T7143] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   74.195333][ T7155] __nla_validate_parse: 11 callbacks suppressed
[   74.195344][ T7155] netlink: 176 bytes leftover after parsing attributes in process `syz.0.404'.
[   74.200944][ T7155] netlink: 277 bytes leftover after parsing attributes in process `syz.0.404'.
[   74.281795][ T7164] netlink: 'syz.1.408': attribute type 13 has an invalid length.
[   74.350369][ T7166] netlink: 14 bytes leftover after parsing attributes in process `syz.2.409'.
[   74.440634][ T7173] : entered promiscuous mode
[   74.672945][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'.
[   74.684888][ T7185] netlink: 92 bytes leftover after parsing attributes in process `syz.1.417'.
[   74.743283][ T7187] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.418'.
[   74.796721][ T7195] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[   74.810854][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.818274][ T7195] vlan4: entered allmulticast mode
[   74.820531][ T7195] bond0: (slave vlan4): Opening slave failed
[   74.868853][ T7197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.420'.
[   75.578003][ T7223] IPv6: sit1: Disabled Multicast RS
[   75.581064][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'.
[   75.603876][ T7228] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   75.623587][ T7230] netlink: 72 bytes leftover after parsing attributes in process `syz.0.433'.
[   75.888615][ T7240] netlink: 176 bytes leftover after parsing attributes in process `syz.2.436'.
[   75.913216][ T7242] netlink: 'syz.2.437': attribute type 29 has an invalid length.
[   76.127135][ T7269] netlink: 'syz.2.446': attribute type 13 has an invalid length.
[   76.568699][ T7287] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[   76.586647][ T7287] 8021q: adding VLAN 0 to HW filter on device bond6
[   76.853988][ T7336] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   77.072354][ T7363] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[   77.146923][ T7363] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.796057][ T7391] netlink: 'syz.2.478': attribute type 13 has an invalid length.
[   78.094013][ T7405] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   78.145533][ T7409] lo speed is unknown, defaulting to 1000
[   78.271712][  T972] IPVS: starting estimator thread 0...
[   78.328633][ T7415] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[   78.353895][ T7415] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.355099][ T7413] IPVS: using max 79 ests per chain, 189600 per kthread
[   78.361681][ T7415] vlan2: entered allmulticast mode
[   78.363992][ T7415] bond2: (slave vlan2): Opening slave failed
[   78.521792][ T7425] netlink: 'syz.1.487': attribute type 1 has an invalid length.
[   78.573845][ T7425] bond3 (unregistering): Released all slaves
[   78.623042][   T12] IPVS: stop unused estimator thread 0...
[   78.822504][ T7443] lo speed is unknown, defaulting to 1000
[   78.926267][ T7450] netlink: 'syz.2.494': attribute type 10 has an invalid length.
[   79.072098][ T7462] 8021q: adding VLAN 0 to HW filter on device team0
[   79.083275][ T7462] net_ratelimit: 94 callbacks suppressed
[   79.083280][ T7462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.091798][ T7466] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   79.124226][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.646328][ T7442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.809208][ T7501] lo speed is unknown, defaulting to 1000
[   80.086226][ T7512] __nla_validate_parse: 16 callbacks suppressed
[   80.086237][ T7512] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.511'.
[   80.141782][ T7518] validate_nla: 3 callbacks suppressed
[   80.141792][ T7518] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[   80.150990][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.183113][ T7518] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.219546][ T7518] vlan2: entered allmulticast mode
[   80.222217][ T7518] bond3: (slave vlan2): Opening slave failed
[   80.254123][ T7530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.513'.
[   80.283991][ T7532] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   80.373432][ T7539] bridge_slave_0: left allmulticast mode
[   80.375982][ T7539] bridge_slave_0: left promiscuous mode
[   80.378014][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.403341][ T7539] bridge_slave_1: left allmulticast mode
[   80.406362][ T7539] bridge_slave_1: left promiscuous mode
[   80.408465][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.419355][ T7539] team0: Port device team_slave_0 removed
[   80.422847][ T7543] netlink: 68 bytes leftover after parsing attributes in process `syz.1.517'.
[   80.430168][ T7539] team0: Port device team_slave_1 removed
[   80.434157][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.443372][ T7539] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.464746][ T7539] bond1: (slave vlan2): Releasing active interface
[   80.498617][ T7546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.724140][ T7569] netlink: 'syz.1.520': attribute type 13 has an invalid length.
[   80.977897][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'.
[   81.038862][    T9] cfg80211: failed to load regulatory.db
[   81.119239][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'.
[   81.405930][ T2285] tipc: Node number set to 1092558229
[   81.452971][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'.
[   81.456842][ T7650] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   81.462847][ T7647] vlan3: entered promiscuous mode
[   81.464477][ T7647] veth0: entered promiscuous mode
[   81.476307][ T7652] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.479003][ T7652] IPv6: NLM_F_CREATE should be set when creating new route
[   81.495169][ T7650] 8021q: adding VLAN 0 to HW filter on device bond7
[   81.516902][ T7650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.530'.
[   81.623960][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[   81.627081][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[   81.631141][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'.
[   81.646425][ T7674] bond8: entered promiscuous mode
[   81.648191][ T7674] 8021q: adding VLAN 0 to HW filter on device bond8
[   81.698544][ T7674] bond8 (unregistering): Released all slaves
[   81.717706][ T7671] lo speed is unknown, defaulting to 1000
[   81.767804][ T7679] netlink: 'syz.0.539': attribute type 13 has an invalid length.
[   82.404924][ T7697] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[   82.428468][ T7697] 8021q: adding VLAN 0 to HW filter on device bond6
[   82.449292][ T7697] vlan4: entered allmulticast mode
[   82.454380][ T7697] bond6: (slave vlan4): Opening slave failed
[   82.617116][ T7714] syzkaller0: entered promiscuous mode
[   82.618941][ T7714] syzkaller0: entered allmulticast mode
[   83.386633][ T7730] bond0 (unregistering): Released all slaves
[   83.414928][ T7738] lo speed is unknown, defaulting to 1000
[   83.510932][ T7747] netlink: 'syz.1.561': attribute type 9 has an invalid length.
[   83.513388][ T7747] netlink: 'syz.1.561': attribute type 7 has an invalid length.
[   83.525188][ T7747] netlink: 'syz.1.561': attribute type 8 has an invalid length.
[   83.552912][ T7742] lo speed is unknown, defaulting to 1000
[   83.580704][ T7730] netlink: 'syz.2.558': attribute type 13 has an invalid length.
[   83.627847][ T7730] 8021q: adding VLAN 0 to HW filter on device team0
[   83.633724][ T7730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.649218][ T7745] lo speed is unknown, defaulting to 1000
[   83.841278][ T7755] lo speed is unknown, defaulting to 1000
[   84.040230][ T7768] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   84.098031][ T7768] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   84.283257][ T7783] lo speed is unknown, defaulting to 1000
[   84.828913][ T7810] netlink: 'syz.0.582': attribute type 1 has an invalid length.
[   84.843893][ T7810] 8021q: adding VLAN 0 to HW filter on device bond8
[   85.086910][ T7834] lo speed is unknown, defaulting to 1000
[   85.099778][ T7838] __nla_validate_parse: 8 callbacks suppressed
[   85.099788][ T7838] netlink: 268 bytes leftover after parsing attributes in process `syz.2.593'.
[   85.104791][ T7838] unsupported nla_type 65024
[   85.370863][ T7860] netlink: 15652 bytes leftover after parsing attributes in process `syz.1.602'.
[   85.393967][ T7862] syzkaller1: entered promiscuous mode
[   85.397089][ T7862] syzkaller1: entered allmulticast mode
[   85.401599][ T7862] validate_nla: 3 callbacks suppressed
[   85.401608][ T7862] netlink: 'syz.1.603': attribute type 1 has an invalid length.
[   85.407524][ T7862] netlink: 228 bytes leftover after parsing attributes in process `syz.1.603'.
[   85.412557][ T7863] netlink: 'syz.1.603': attribute type 1 has an invalid length.
[   85.416799][ T7863] netlink: 228 bytes leftover after parsing attributes in process `syz.1.603'.
[   85.508006][ T7867] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[   85.521450][ T7867] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.529543][ T7867] vlan3: entered allmulticast mode
[   85.531958][ T7867] bond4: (slave vlan3): Opening slave failed
[   85.578963][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.604'.
[   85.666863][ T7874] netlink: 176 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.768926][ T7877] smc: removing net device bond0 with user defined pnetid SYZ2
[   85.771835][ T7877] bond0 (unregistering): Released all slaves
[   85.793268][ T7880] netlink: 48 bytes leftover after parsing attributes in process `syz.0.609'.
[   85.845411][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   85.863920][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   85.866944][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   85.909125][ T7889] lo speed is unknown, defaulting to 1000
[   86.061235][ T7894] netlink: 'syz.1.612': attribute type 4 has an invalid length.
[   86.099723][ T7896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.332782][ T7912] netlink: zone id is out of range
[   86.341347][ T7912] netlink: zone id is out of range
[   86.354441][ T7912] netlink: zone id is out of range
[   86.358446][ T7912] netlink: zone id is out of range
[   86.360192][ T7912] netlink: zone id is out of range
[   86.361925][ T7912] netlink: zone id is out of range
[   86.363946][ T7912] netlink: zone id is out of range
[   86.367227][ T7912] netlink: zone id is out of range
[   86.369166][ T7912] netlink: zone id is out of range
[   86.371163][ T7919] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[   86.398731][ T7919] smc: adding net device bond0 with user defined pnetid SYZ2
[   86.403284][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.412575][ T7919] vlan3: entered allmulticast mode
[   86.415426][ T7919] bond0: (slave vlan3): Opening slave failed
[   86.592523][ T7935] unsupported nlmsg_type 40
[   87.213861][ T7939] netlink: 'syz.1.630': attribute type 13 has an invalid length.
[   87.682675][ T7971] netlink: 'syz.1.636': attribute type 1 has an invalid length.
[   87.695594][ T7971] 8021q: adding VLAN 0 to HW filter on device bond5
[   87.703088][ T7971] vlan3: entered allmulticast mode
[   87.705500][ T7971] bond5: (slave vlan3): Opening slave failed
[   88.808748][ T8007] pim6reg1: entered promiscuous mode
[   88.810488][ T8007] pim6reg1: entered allmulticast mode
[   88.834291][ T8009] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[   88.849485][ T8009] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.857442][ T8009] vlan3: entered allmulticast mode
[   88.859914][ T8009] bond6: (slave vlan3): Opening slave failed
[   88.936553][ T8013] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.939371][ T8013] team0: Port device bond7 added
[   89.043316][ T8027] netlink: 'syz.1.652': attribute type 1 has an invalid length.
[   89.132494][ T8036] ieee802154 phy0 wpan0: encryption failed: -22
[   89.871327][ T8073] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   89.899859][ T8075] netlink: 'syz.0.668': attribute type 8 has an invalid length.
[   90.617800][ T8086] netlink: 'syz.1.671': attribute type 1 has an invalid length.
[   90.634229][ T8086] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   90.643004][ T8086] 8021q: adding VLAN 0 to HW filter on device bond7
[   90.691472][ T8086] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   90.694722][ T8086] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface
[   90.699215][ T8086] bond7 (unregistering): Released all slaves
[   90.844321][ T8093] __nla_validate_parse: 14 callbacks suppressed
[   90.844332][ T8093] netlink: 176 bytes leftover after parsing attributes in process `syz.2.673'.
[   90.892316][ T8095] lo speed is unknown, defaulting to 1000
[   90.973098][ T8105] netlink: 16248 bytes leftover after parsing attributes in process `syz.0.677'.
[   90.998151][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'.
[   91.111326][ T8113] netlink: 80 bytes leftover after parsing attributes in process `syz.0.680'.
[   91.150518][ T8115] netlink: 'syz.0.681': attribute type 1 has an invalid length.
[   91.163653][ T8115] 8021q: adding VLAN 0 to HW filter on device bond9
[   91.171275][ T8115] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'.
[   91.196656][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'.
[   91.310092][ T8127] netlink: 15652 bytes leftover after parsing attributes in process `syz.0.685'.
[   91.336081][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'.
[   92.067224][ T8156] netlink: 176 bytes leftover after parsing attributes in process `syz.1.693'.
[   92.097326][ T8158] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[   92.103512][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'.
[   92.156050][ T8162] pim6reg1: entered promiscuous mode
[   92.157994][ T8162] pim6reg1: entered allmulticast mode
[   92.286989][ T8164] 8021q: adding VLAN 0 to HW filter on device bond7
[   92.290175][ T8164] team0: Port device bond7 added
[   92.374450][ T8175] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   92.378343][ T8175] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   92.536364][ T8193] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   92.564520][ T8197] net_ratelimit: 96 callbacks suppressed
[   92.564530][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.585512][ T8201] netlink: 'syz.1.710': attribute type 8 has an invalid length.
[   92.829762][ T8229] vlan0: entered promiscuous mode
[   92.913664][ T8239] x_tables: ip_tables: udp match: only valid for protocol 17
[   93.114344][ T8252] lo speed is unknown, defaulting to 1000
[   93.430036][ T8279] netlink: zone id is out of range
[   93.432197][ T8279] netlink: zone id is out of range
[   93.434007][ T8279] netlink: zone id is out of range
[   93.438837][ T8279] netlink: zone id is out of range
[   93.442181][ T8279] netlink: zone id is out of range
[   93.444712][ T8279] netlink: zone id is out of range
[   93.448373][ T8279] netlink: zone id is out of range
[   93.450255][ T8279] netlink: zone id is out of range
[   93.451196][ T8288] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[   93.452052][ T8279] netlink: zone id is out of range
[   93.468534][ T8288] 8021q: adding VLAN 0 to HW filter on device bond8
[   93.479705][ T8288] vlan4: entered allmulticast mode
[   93.482412][ T8288] bond8: (slave vlan4): Opening slave failed
[   93.814874][ T8340] 8021q: adding VLAN 0 to HW filter on device bond9
[   93.819609][ T8340] bond0: (slave bond9): Enslaving as an active interface with an up link
[   94.115114][ T8394] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[   94.126745][ T8394] 8021q: adding VLAN 0 to HW filter on device bond8
[   94.134474][ T8394] vlan3: entered allmulticast mode
[   94.150531][ T8394] bond8: (slave vlan3): Opening slave failed
[   94.444027][ T8428] tipc: Started in network mode
[   94.447696][ T8428] tipc: Node identity d2047be78931, cluster identity 4711
[   94.450108][ T8428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.452695][ T8428] syzkaller0: entered promiscuous mode
[   94.454458][ T8428] syzkaller0: entered allmulticast mode
[   94.469095][ T8427] tipc: Resetting bearer <eth:syzkaller0>
[   94.479289][ T8427] tipc: Disabling bearer <eth:syzkaller0>
[   94.629286][ T8444] lo speed is unknown, defaulting to 1000
[   94.673464][ T8446] netlink: 'syz.1.782': attribute type 9 has an invalid length.
[   94.676353][ T8446] netlink: 'syz.1.782': attribute type 7 has an invalid length.
[   94.678978][ T8446] netlink: 'syz.1.782': attribute type 8 has an invalid length.
[   95.104181][ T8455] netlink: 'syz.2.785': attribute type 1 has an invalid length.
[   95.120904][ T8455] 8021q: adding VLAN 0 to HW filter on device bond10
[   95.129606][ T8455] vlan4: entered allmulticast mode
[   95.131970][ T8455] bond10: (slave vlan4): Opening slave failed
[   95.291137][ T8466] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   95.536422][ T8492] netlink: 'syz.2.799': attribute type 29 has an invalid length.
[   95.761293][ T8523] validate_nla: 1 callbacks suppressed
[   95.761304][ T8523] netlink: 'syz.1.811': attribute type 1 has an invalid length.
[   95.876880][ T8538] netlink: 'syz.1.817': attribute type 13 has an invalid length.
[   96.154306][ T8540] lo speed is unknown, defaulting to 1000
[   96.478819][ T8552] __nla_validate_parse: 28 callbacks suppressed
[   96.478831][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'.
[   96.496700][ T8554] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[   96.511072][ T8554] 8021q: adding VLAN 0 to HW filter on device bond9
[   96.519881][ T8554] vlan3: entered allmulticast mode
[   96.522165][ T8554] bond9: (slave vlan3): Opening slave failed
[   96.570676][ T8557] netlink: 36 bytes leftover after parsing attributes in process `syz.1.823'.
[   96.638454][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'.
[   96.776919][ T8580] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.831'.
[   96.782208][ T8576] smc: removing net device bond0 with user defined pnetid SYZ2
[   96.791550][ T8576] bond0 (unregistering): Released all slaves
[   96.878991][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'.
[   96.901542][ T8594] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[   96.903984][ T8594] netlink: 224 bytes leftover after parsing attributes in process `syz.2.836'.
[   96.994276][ T8603] netlink: 'syz.1.840': attribute type 1 has an invalid length.
[   97.009585][ T8603] smc: adding net device bond0 with user defined pnetid SYZ2
[   97.016664][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.030526][ T8603] vlan3: entered allmulticast mode
[   97.032955][ T8603] bond0: (slave vlan3): Opening slave failed
[   97.079539][ T8606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.840'.
[   97.238395][ T8616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.843'.
[   97.328715][ T8630] lo speed is unknown, defaulting to 1000
[   97.472367][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.853'.
[   97.554196][ T8650] lo speed is unknown, defaulting to 1000
[   97.628543][ T8663] netlink: 'syz.1.856': attribute type 1 has an invalid length.
[   97.642308][ T8663] 8021q: adding VLAN 0 to HW filter on device bond10
[   97.651496][ T8663] vlan3: entered allmulticast mode
[   97.653813][ T8663] bond10: (slave vlan3): Opening slave failed
[   97.700499][ T8663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.856'.
[   97.730090][ T8667] net_ratelimit: 121 callbacks suppressed
[   97.730099][ T8667] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   97.816786][ T8673] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   98.168917][ T8695] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   98.267223][ T8706] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[   98.280898][ T8706] 8021q: adding VLAN 0 to HW filter on device bond10
[   98.798213][ T8726] netlink: 'syz.2.880': attribute type 13 has an invalid length.
[   98.921113][ T8737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.924283][ T8737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.001949][ T8745] lo speed is unknown, defaulting to 1000
[   99.340026][ T8760] netlink: 'syz.0.890': attribute type 1 has an invalid length.
[   99.375058][ T8760] 8021q: adding VLAN 0 to HW filter on device bond11
[   99.407664][ T8763] netlink: 'syz.1.892': attribute type 5 has an invalid length.
[   99.658071][ T8784] lo speed is unknown, defaulting to 1000
[   99.850370][ T8784] IPVS: set_ctl: invalid protocol: 0 0.0.4.0:20000
[   99.852375][ T8801] macsec1: entered promiscuous mode
[   99.854239][ T8801] macvlan1: entered promiscuous mode
[   99.856367][ T8801] macsec1: entered allmulticast mode
[   99.858119][ T8801] macvlan1: entered allmulticast mode
[   99.863371][ T8801] macvlan1: left allmulticast mode
[   99.866578][ T8801] macvlan1: left promiscuous mode
[   99.881186][  T972] IPVS: starting estimator thread 0...
[   99.965828][ T8804] IPVS: using max 79 ests per chain, 189600 per kthread
[  100.065972][ T8827] bond12: entered promiscuous mode
[  100.068035][ T8827] 8021q: adding VLAN 0 to HW filter on device bond12
[  100.091418][ T5826] Bluetooth: hci2: link tx timeout
[  100.093322][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.101539][   T54] Bluetooth: hci2: link tx timeout
[  100.103513][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.118012][   T54] Bluetooth: hci2: link tx timeout
[  100.119814][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.230737][   T12] IPVS: stop unused estimator thread 0...
[  100.607224][ T8859] lo speed is unknown, defaulting to 1000
[  100.894346][ T8879] lo speed is unknown, defaulting to 1000
[  101.060840][ T8887] validate_nla: 3 callbacks suppressed
[  101.060852][ T8887] netlink: 'syz.2.935': attribute type 1 has an invalid length.
[  101.083794][ T8887] 8021q: adding VLAN 0 to HW filter on device bond11
[  101.112098][ T8887] vlan4: entered allmulticast mode
[  101.114312][ T8887] bond11: (slave vlan4): Opening slave failed
[  101.181938][ T8896] syzkaller1: entered promiscuous mode
[  101.183767][ T8896] syzkaller1: entered allmulticast mode
[  101.343317][ T8908] sctp: [Deprecated]: syz.2.943 (pid 8908) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.343317][ T8908] Use struct sctp_sack_info instead
[  101.398543][ T8918] lo speed is unknown, defaulting to 1000
[  101.509784][ T8929] __nla_validate_parse: 24 callbacks suppressed
[  101.509795][ T8929] netlink: 96 bytes leftover after parsing attributes in process `syz.2.950'.
[  101.676519][ T8944] netlink: 108 bytes leftover after parsing attributes in process `syz.1.958'.
[  101.690078][ T8946] netlink: 176 bytes leftover after parsing attributes in process `syz.2.957'.
[  101.701762][ T8948] netlink: 'syz.1.959': attribute type 13 has an invalid length.
[  101.769420][ T8953] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  101.865437][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'.
[  101.890720][ T8959] lo speed is unknown, defaulting to 1000
[  101.982938][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.968'.
[  102.057274][ T8974] lo speed is unknown, defaulting to 1000
[  102.064356][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.964'.
[  102.133158][ T5861] IPVS: starting estimator thread 0...
[  102.155987][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  102.236052][ T8977] IPVS: using max 79 ests per chain, 189600 per kthread
[  102.266194][ T8986] netlink: 15652 bytes leftover after parsing attributes in process `syz.0.974'.
[  102.290291][ T8984] lo speed is unknown, defaulting to 1000
[  102.405481][ T8991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.976'.
[  102.425738][ T8997] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  102.487967][ T8999] netlink: 'syz.1.978': attribute type 1 has an invalid length.
[  102.510753][ T8999] 8021q: adding VLAN 0 to HW filter on device bond11
[  102.542690][ T8999] vlan4: entered allmulticast mode
[  102.546186][ T8999] bond11: (slave vlan4): Opening slave failed
[  102.553425][ T9004] netlink: 'syz.0.979': attribute type 9 has an invalid length.
[  102.557751][ T9004] netlink: 'syz.0.979': attribute type 7 has an invalid length.
[  102.557850][ T9001] lo speed is unknown, defaulting to 1000
[  102.560346][ T9004] netlink: 'syz.0.979': attribute type 8 has an invalid length.
[  102.587553][ T9005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.978'.
[  102.719440][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  102.747590][ T9010] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709551613)
[  102.751231][ T9010] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  102.869221][ T9016] lo speed is unknown, defaulting to 1000
[  102.993027][ T9020] lo speed is unknown, defaulting to 1000
[  103.067530][ T9035] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  103.164780][ T9043] veth0_to_bond: entered allmulticast mode
[  103.277860][ T9054] netlink: 'syz.1.994': attribute type 1 has an invalid length.
[  103.418972][ T9060] netlink: 'syz.1.996': attribute type 1 has an invalid length.
[  103.437517][ T9058] bond12 (unregistering): Released all slaves
[  103.836638][ T9075] syzkaller0: entered promiscuous mode
[  103.838562][ T9075] syzkaller0: entered allmulticast mode
[  104.269853][ T9086] netlink: 'syz.1.1005': attribute type 1 has an invalid length.
[  104.632371][ T9086] 8021q: adding VLAN 0 to HW filter on device bond12
[  104.638923][ T9087] vlan4: entered allmulticast mode
[  104.641377][ T9087] bond12: (slave vlan4): Opening slave failed
[  104.809763][ T9112] netlink: 'syz.2.1015': attribute type 13 has an invalid length.
[  105.055662][ T9141] sctp: [Deprecated]: syz.1.1024 (pid 9141) Use of int in maxseg socket option.
[  105.055662][ T9141] Use struct sctp_assoc_value instead
[  105.181628][ T9149] 8021q: adding VLAN 0 to HW filter on device bond12
[  105.193616][ T9149] vlan4: entered allmulticast mode
[  105.196264][ T9149] bond12: (slave vlan4): Opening slave failed
[  105.354407][ T9176] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0
[  105.424520][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.428930][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.432093][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.434823][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.469106][ T9191] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  105.718097][ T9201] lo speed is unknown, defaulting to 1000
[  106.373177][ T9238] validate_nla: 1 callbacks suppressed
[  106.373190][ T9238] netlink: 'syz.1.1057': attribute type 13 has an invalid length.
[  106.481446][ T9247] delete_channel: no stack
[  106.487421][ T9247] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.490658][ T9247] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.821267][ T9256] netlink: 'syz.1.1064': attribute type 1 has an invalid length.
[  106.838826][ T9256] 8021q: adding VLAN 0 to HW filter on device bond13
[  106.849691][ T9256] vlan4: entered allmulticast mode
[  106.853550][ T9256] bond13: (slave vlan4): Opening slave failed
[  106.898511][ T9258] __nla_validate_parse: 20 callbacks suppressed
[  106.898522][ T9258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'.
[  106.929153][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'.
[  107.034284][ T9274] IPVS: stopping backup sync thread 9176 ...
[  107.197496][ T9281] netlink: 'syz.1.1075': attribute type 13 has an invalid length.
[  107.332751][ T9283] netlink: 'syz.2.1076': attribute type 10 has an invalid length.
[  107.362302][ T9285] netlink: 15652 bytes leftover after parsing attributes in process `syz.2.1077'.
[  107.920975][ T9321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1083'.
[  107.940786][ T9329] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1085'.
[  107.944706][ T9332] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1085'.
[  108.071110][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1090'.
[  108.099354][ T9349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'.
[  108.109345][ T9347] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1092'.
[  108.112450][ T9348] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1092'.
[  108.454097][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.460751][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.463994][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.470947][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.474149][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.496914][ T9363] lo speed is unknown, defaulting to 1000
[  108.700038][ T9363] chnl_net:caif_netlink_parms(): no params data found
[  108.748710][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.751267][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.753723][ T9363] bridge_slave_0: entered allmulticast mode
[  108.757798][ T9363] bridge_slave_0: entered promiscuous mode
[  108.763355][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.766397][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.768964][ T9363] bridge_slave_1: entered allmulticast mode
[  108.771797][ T9363] bridge_slave_1: entered promiscuous mode
[  108.833689][ T9363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.846612][ T9363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.856760][ T9393] netlink: 'syz.0.1107': attribute type 13 has an invalid length.
[  108.889862][ T9363] team0: Port device team_slave_0 added
[  108.898134][ T9398] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  108.898265][ T9397] IPVS: stopping backup sync thread 9398 ...
[  108.902077][ T9363] team0: Port device team_slave_1 added
[  108.920663][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.922953][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.932258][ T9363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.942480][ T9363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.944935][ T9363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.953590][ T9363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.995443][ T9363] hsr_slave_0: entered promiscuous mode
[  108.998057][ T9363] hsr_slave_1: entered promiscuous mode
[  109.000382][ T9363] debugfs: 'hsr0' already exists in 'hsr'
[  109.002383][ T9363] Cannot create hsr debugfs directory
[  109.120434][ T9363] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.123970][ T9401] netlink: 'syz.0.1111': attribute type 1 has an invalid length.
[  109.126337][ T9363] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.142536][ T9401] 8021q: adding VLAN 0 to HW filter on device bond13
[  109.146501][ T9363] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.150988][ T9363] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  109.209735][ T9363] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.236930][ T9363] 8021q: adding VLAN 0 to HW filter on device team0
[  109.248055][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.250413][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.257660][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.260055][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.438265][ T9363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.461955][ T9363] veth0_vlan: entered promiscuous mode
[  109.466852][ T9363] veth1_vlan: entered promiscuous mode
[  109.483765][ T9363] veth0_macvtap: entered promiscuous mode
[  109.488933][ T9363] veth1_macvtap: entered promiscuous mode
[  109.498423][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.504922][ T9363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.511716][ T6005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.514862][ T6005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.520866][ T6005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.523665][ T6005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.561710][ T6239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.567404][ T6239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.579559][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.582572][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.618107][ T9449] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  109.621245][ T9449] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  109.681450][ T9453] lo speed is unknown, defaulting to 1000
[  109.823831][ T9453] Bluetooth: MGMT ver 1.23
[  110.085826][ T9478] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  110.099541][ T9472] syzkaller0: entered allmulticast mode
[  110.122910][ T9472] syzkaller0 (unregistering): left allmulticast mode
[  110.203524][ T9482] lo speed is unknown, defaulting to 1000
[  110.446300][ T9495] vlan4: entered promiscuous mode
[  110.449461][ T9495] vlan4: entered allmulticast mode
[  110.451353][ T9495] hsr_slave_1: entered allmulticast mode
[  110.541708][ T9509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.555690][ T5826] Bluetooth: hci1: command tx timeout
[  110.558539][ T9515] netlink: 'syz.1.1140': attribute type 13 has an invalid length.
[  111.571792][ T9536] netlink: zone id is out of range
[  111.574210][ T9536] netlink: zone id is out of range
[  111.577093][ T9536] netlink: zone id is out of range
[  111.578784][ T9536] netlink: zone id is out of range
[  111.580497][ T9536] netlink: zone id is out of range
[  111.582190][ T9536] netlink: zone id is out of range
[  111.583931][ T9536] netlink: zone id is out of range
[  111.587327][ T9536] netlink: zone id is out of range
[  111.589026][ T9536] netlink: zone id is out of range
[  111.686809][ T9550] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  111.701331][ T9550] 8021q: adding VLAN 0 to HW filter on device bond14
[  111.713338][ T9550] vlan4: entered allmulticast mode
[  111.717440][ T9550] bond14: (slave vlan4): Opening slave failed
[  111.855277][ T9556] nbd0: detected capacity change from 0 to 127
[  111.867515][   T56] block nbd0: Receive control failed (result -104)
[  111.914125][ T9572] __nla_validate_parse: 28 callbacks suppressed
[  111.914144][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1161'.
[  112.143633][ T9598] netlink: 15652 bytes leftover after parsing attributes in process `syz.1.1167'.
[  112.147302][ T9599] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1168'.
[  112.194042][ T9611] netlink: 'syz.1.1169': attribute type 13 has an invalid length.
[  112.446963][ T9626] netlink: 'syz.3.1172': attribute type 8 has an invalid length.
[  112.477476][ T9626] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.485119][ T9626] bond0: (slave bond1): Enslaving as an active interface with an up link
[  112.518358][ T9634] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[  112.543148][ T9634] 8021q: adding VLAN 0 to HW filter on device bond14
[  112.557193][ T9634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1173'.
[  112.637798][ T5826] Bluetooth: hci1: command tx timeout
[  112.680639][ T9650] lo speed is unknown, defaulting to 1000
[  112.728581][ T9652] netlink: 'syz.3.1180': attribute type 1 has an invalid length.
[  112.732400][ T9652] netlink: 'syz.3.1180': attribute type 2 has an invalid length.
[  112.896459][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1182'.
[  113.092399][ T9666] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1185'.
[  113.150030][ T9668] lo speed is unknown, defaulting to 1000
[  113.491147][ T9695] netlink: 'syz.1.1194': attribute type 13 has an invalid length.
[  113.742478][ T9709] lo speed is unknown, defaulting to 1000
[  113.772915][ T9716] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1199'.
[  113.817009][ T9720] netlink: 'syz.0.1201': attribute type 32 has an invalid length.
[  114.010074][ T9739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1206'.
[  114.014121][ T9739] netlink: 'syz.0.1206': attribute type 10 has an invalid length.
[  114.094055][ T9745] lo speed is unknown, defaulting to 1000
[  114.241565][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'.
[  114.244587][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1215'.
[  114.601365][ T9785] lo speed is unknown, defaulting to 1000
[  114.718827][ T5826] Bluetooth: hci1: command tx timeout
[  115.035240][ T9827] lo speed is unknown, defaulting to 1000
[  115.198572][ T9824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.380927][ T9853] syzkaller1: entered promiscuous mode
[  115.382887][ T9853] syzkaller1: entered allmulticast mode
[  115.575614][ T9871] netlink: 'syz.3.1236': attribute type 1 has an invalid length.
[  115.591514][ T9871] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.601321][ T9871] vlan3: entered allmulticast mode
[  115.603050][ T9871] veth1: entered allmulticast mode
[  115.607841][ T9871] bond2: (slave vlan3): making interface the new active one
[  115.611000][ T9871] bond2: (slave vlan3): Enslaving as an active interface with an up link
[  115.687852][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.690417][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.744691][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.756482][ T9876] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.859874][ T9884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.874804][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.878035][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.900123][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.964458][ T9897] bond0 (unregistering): Released all slaves
[  116.110185][ T9911] lo speed is unknown, defaulting to 1000
[  116.230544][ T9916] lo speed is unknown, defaulting to 1000
[  116.330578][ T9922] lo speed is unknown, defaulting to 1000
[  116.448018][ T9929] lo speed is unknown, defaulting to 1000
[  116.795233][ T5826] Bluetooth: hci1: command tx timeout
[  116.987539][ T9940] syzkaller1: entered promiscuous mode
[  116.989021][ T9943] __nla_validate_parse: 7 callbacks suppressed
[  116.989031][ T9943] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1255'.
[  116.989338][ T9940] syzkaller1: entered allmulticast mode
[  117.558998][ T9975] netlink: 15652 bytes leftover after parsing attributes in process `syz.1.1264'.
[  117.647926][ T9983] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1268'.
[  117.682967][ T9985] validate_nla: 1 callbacks suppressed
[  117.682978][ T9985] netlink: 'syz.3.1269': attribute type 1 has an invalid length.
[  117.708164][ T9985] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.718489][ T9985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1269'.
[  117.746845][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1270'.
[  117.969838][T10007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1276'.
[  117.992462][T10009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1277'.
[  118.084492][T10026] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1282'.
[  118.130077][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1283'.
[  118.130348][T10032] netlink: 'syz.0.1284': attribute type 1 has an invalid length.
[  118.147420][T10032] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.159546][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1284'.
[  118.505712][T10060] netlink: 'syz.1.1294': attribute type 6 has an invalid length.
[  118.552000][T10060] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.561471][T10060] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  118.564028][T10060] net_ratelimit: 112 callbacks suppressed
[  118.564036][T10060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.662449][T10074] lo speed is unknown, defaulting to 1000
[  119.051002][T10085] netlink: 'syz.1.1301': attribute type 1 has an invalid length.
[  119.065983][T10085] 8021q: adding VLAN 0 to HW filter on device bond15
[  119.073775][T10085] vlan4: entered allmulticast mode
[  119.077121][T10085] bond15: (slave vlan4): Opening slave failed
[  119.387992][T10132] netlink: 'syz.1.1318': attribute type 1 has an invalid length.
[  119.411521][T10132] 8021q: adding VLAN 0 to HW filter on device bond16
[  119.427519][T10132] vlan4: entered allmulticast mode
[  119.430736][T10132] bond16: (slave vlan4): Opening slave failed
[  119.548905][T10142] lo speed is unknown, defaulting to 1000
[  119.562036][T10149] netlink: 'syz.0.1324': attribute type 39 has an invalid length.
[  119.709303][T10156] lo speed is unknown, defaulting to 1000
[  120.339046][T10180] netlink: 'syz.1.1331': attribute type 1 has an invalid length.
[  120.650431][T10212] netlink: 'syz.1.1342': attribute type 13 has an invalid length.
[  121.107128][T10234] netlink: 'syz.1.1350': attribute type 1 has an invalid length.
[  121.135143][T10234] 8021q: adding VLAN 0 to HW filter on device bond17
[  121.142572][T10234] vlan4: entered allmulticast mode
[  121.147702][T10234] bond17: (slave vlan4): Opening slave failed
[  121.160786][T10239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.163344][T10239] syzkaller0: entered promiscuous mode
[  121.165329][T10239] syzkaller0: entered allmulticast mode
[  121.178099][T10239] tipc: Resetting bearer <eth:syzkaller0>
[  121.182196][T10238] tipc: Resetting bearer <eth:syzkaller0>
[  121.189985][T10238] tipc: Disabling bearer <eth:syzkaller0>
[  121.358579][T10253] lo speed is unknown, defaulting to 1000
[  122.207614][T10312] netlink: 'syz.3.1371': attribute type 13 has an invalid length.
[  122.518042][T10314] __nla_validate_parse: 16 callbacks suppressed
[  122.518053][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'.
[  122.553462][T10314] 8021q: adding VLAN 0 to HW filter on device bond15
[  122.558354][T10314] bond0: (slave bond15): Enslaving as an active interface with a down link
[  122.597370][T10318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1373'.
[  122.644384][T10322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'.
[  122.746964][T10328] lo speed is unknown, defaulting to 1000
[  122.884522][T10333] netlink: 'syz.1.1379': attribute type 1 has an invalid length.
[  122.928909][T10333] 8021q: adding VLAN 0 to HW filter on device bond18
[  122.949289][T10333] vlan4: entered allmulticast mode
[  122.951895][T10333] bond18: (slave vlan4): Opening slave failed
[  122.992626][T10341] netlink: 15652 bytes leftover after parsing attributes in process `syz.0.1381'.
[  123.016284][T10333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1379'.
[  123.068026][T10344] lo speed is unknown, defaulting to 1000
[  123.099251][T10348] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1384'.
[  123.103162][T10348] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1384'.
[  123.240078][T10364] netlink: 'syz.1.1390': attribute type 16 has an invalid length.
[  123.242699][T10364] netlink: 'syz.1.1390': attribute type 17 has an invalid length.
[  123.268937][T10364] 8021q: adding VLAN 0 to HW filter on device team0
[  123.277268][T10364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.282934][ T5861] lo speed is unknown, defaulting to 1000
[  123.288209][ T5861] syz0: Port: 1 Link ACTIVE
[  123.290156][ T5861] lo speed is unknown, defaulting to 1000
[  123.457951][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'.
[  123.479917][T10383] netlink: 15652 bytes leftover after parsing attributes in process `syz.1.1395'.
[  123.557596][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1397'.
[  123.602201][T10389] 8021q: adding VLAN 0 to HW filter on device bond19
[  123.606491][T10389] bond0: (slave bond19): Enslaving as an active interface with a down link
[  123.651961][T10393] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  123.654910][T10393] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  124.022176][T10428] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  124.353626][T10440] trusted_key: syz.1.1412 sent an empty control message without MSG_MORE.
[  124.622729][T10510] netlink: 'syz.1.1434': attribute type 13 has an invalid length.
[  124.677459][T10511] vlan0: entered promiscuous mode
[  124.679177][ T5861] lo speed is unknown, defaulting to 1000
[  124.681030][ T5861] syz0: Port: 1 Link DOWN
[  124.683261][ T5861] lo speed is unknown, defaulting to 1000
[  125.648639][T10574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.652473][T10574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.658076][T10574] bond0 (unregistering): (slave bond1): Releasing backup interface
[  125.661173][T10574] bond0 (unregistering): Released all slaves
[  125.750359][T10590] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (15)
[  125.796754][T10595] lo speed is unknown, defaulting to 1000
[  125.973636][T10602] lo speed is unknown, defaulting to 1000
[  126.235765][T10630] netlink: 'syz.0.1461': attribute type 1 has an invalid length.
[  126.314733][T10630] 8021q: adding VLAN 0 to HW filter on device bond16
[  126.389679][T10630] bond16 (unregistering): Released all slaves
[  126.565525][T10654] lo speed is unknown, defaulting to 1000
[  126.591279][T10643] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.594294][T10644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.601921][ T5882] IPVS: starting estimator thread 0...
[  126.664702][T10661] netlink: 'syz.1.1470': attribute type 13 has an invalid length.
[  126.695349][T10659] IPVS: using max 78 ests per chain, 187200 per kthread
[  127.359517][T10719] syzkaller1: entered promiscuous mode
[  127.361998][T10719] syzkaller1: entered allmulticast mode
[  127.474090][T10723] netlink: 'syz.0.1493': attribute type 32 has an invalid length.
[  127.609652][T10735] netlink: 'syz.0.1495': attribute type 3 has an invalid length.
[  127.700260][T10743] lo speed is unknown, defaulting to 1000
[  127.852363][T10751] netlink: 'syz.0.1498': attribute type 13 has an invalid length.
[  127.913195][T10753] __nla_validate_parse: 23 callbacks suppressed
[  127.913208][T10753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1499'.
[  128.021035][T10762] netlink: 'syz.3.1501': attribute type 8 has an invalid length.
[  128.023678][T10761] netlink: 'syz.3.1501': attribute type 8 has an invalid length.
[  128.683656][T10769] netlink: 'syz.0.1503': attribute type 10 has an invalid length.
[  128.689033][T10769] team0: Port device dummy0 added
[  128.722070][T10769] netlink: 'syz.0.1503': attribute type 10 has an invalid length.
[  128.725470][T10769] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  128.733467][T10769] team0: Failed to send options change via netlink (err -105)
[  128.736554][T10769] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  128.739890][T10769] team0: Port device dummy0 removed
[  128.744803][T10769] syz.0.1503 (10769) used greatest stack depth: 19768 bytes left
[  128.801492][T10781] lo speed is unknown, defaulting to 1000
[  128.847606][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'.
[  128.970282][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'.
[  129.047424][T10812] netlink: 'syz.3.1517': attribute type 1 has an invalid length.
[  129.170525][T10821] lo speed is unknown, defaulting to 1000
[  129.174409][T10825] netlink: 'syz.1.1520': attribute type 13 has an invalid length.
[  129.224128][T10822] netlink: 'syz.3.1519': attribute type 9 has an invalid length.
[  129.239854][T10822] netlink: 'syz.3.1519': attribute type 7 has an invalid length.
[  129.242842][T10822] netlink: 'syz.3.1519': attribute type 8 has an invalid length.
[  129.247505][T10830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'.
[  129.251615][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'.
[  129.310635][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1521'.
[  129.534373][T10842] lo speed is unknown, defaulting to 1000
[  129.570689][T10849] netlink: 'syz.0.1525': attribute type 9 has an invalid length.
[  129.593133][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1528'.
[  129.688128][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'.
[  129.693331][T10860] IPv6: sit1: Disabled Multicast RS
[  129.697575][T10860] sit1: entered allmulticast mode
[  129.704177][T10860] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1531'.
[  129.854600][T10871] sctp: [Deprecated]: syz.0.1533 (pid 10871) Use of int in max_burst socket option deprecated.
[  129.854600][T10871] Use struct sctp_assoc_value instead
[  129.917475][T10880] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1539'.
[  130.093370][T10895] tun0: tun_chr_ioctl cmd 35111
[  130.694794][T10925] lo speed is unknown, defaulting to 1000
[  131.703205][T10968] lo speed is unknown, defaulting to 1000
[  131.958519][T10992] bond20: entered promiscuous mode
[  131.960486][T10992] 8021q: adding VLAN 0 to HW filter on device bond20
[  132.030336][T10992] bond20 (unregistering): Released all slaves
[  132.071199][T10989] lo speed is unknown, defaulting to 1000
[  132.237503][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.293480][T11037] lo speed is unknown, defaulting to 1000
[  133.808936][T11066] __nla_validate_parse: 10 callbacks suppressed
[  133.808947][T11066] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1605'.
[  133.839281][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'.
[  134.242006][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'.
[  134.440040][T11112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1613'.
[  134.443437][T11112] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1613'.
[  134.452649][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'.
[  134.469972][T11114] lo speed is unknown, defaulting to 1000
[  134.487480][T11116] validate_nla: 7 callbacks suppressed
[  134.487489][T11116] netlink: 'syz.3.1616': attribute type 13 has an invalid length.
[  134.897509][T11140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'.
[  135.023901][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'.
[  135.083044][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'.
[  135.139365][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'.
[  135.142523][T11167] netlink: 'syz.1.1637': attribute type 2 has an invalid length.
[  135.187335][T11171] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20001
[  135.283979][T11180] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  135.309014][T11180] lo speed is unknown, defaulting to 1000
[  135.796730][T11225] netlink: 'syz.3.1660': attribute type 13 has an invalid length.
[  135.822336][T11228] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  136.233862][T11255] lo speed is unknown, defaulting to 1000
[  136.344336][T11263] smc: removing net device bond0 with user defined pnetid SYZ2
[  136.348979][T11263] bond0 (unregistering): (slave bond19): Releasing active interface
[  136.352100][T11263] bond0 (unregistering): Released all slaves
[  136.747873][T11286] lo speed is unknown, defaulting to 1000
[  137.023630][T11313] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  137.464436][T11336] netlink: 'syz.1.1696': attribute type 13 has an invalid length.
[  137.762269][T11342] rdma_op ffff88812d3579f0 conn xmit_rdma 0000000000000000
[  137.778619][T11342] lo speed is unknown, defaulting to 1000
[  138.122326][T11369] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.156506][ T5826] Bluetooth: hci1: command tx timeout
[  138.221162][T11379] netlink: 'syz.3.1712': attribute type 13 has an invalid length.
[  138.344049][T11395] lo speed is unknown, defaulting to 1000
[  138.612316][T11412] netlink: 'syz.3.1721': attribute type 1 has an invalid length.
[  138.714734][T11420] lo speed is unknown, defaulting to 1000
[  138.809826][T11431] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  138.869692][T11433] lo speed is unknown, defaulting to 1000
[  138.889625][T11435] __nla_validate_parse: 17 callbacks suppressed
[  138.889654][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'.
[  139.363591][T11453] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  139.366900][T11453] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1733'.
[  139.372770][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  139.592401][T11455] netlink: 'syz.1.1734': attribute type 13 has an invalid length.
[  140.053034][T11472] lo speed is unknown, defaulting to 1000
[  140.160269][T11480] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  140.209138][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1745'.
[  140.212965][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'.
[  140.219789][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1746'.
[  140.260825][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1747'.
[  140.266075][T11491] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  140.268851][T11492] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  140.399905][T11503] bond0: (slave bond15): Releasing active interface
[  140.413201][T11503] team0: Mode changed to "activebackup"
[  140.860441][T11523] lo speed is unknown, defaulting to 1000
[  141.204826][T11532] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  141.278333][T11534] syzkaller0: entered promiscuous mode
[  141.280290][T11534] syzkaller0: entered allmulticast mode
[  141.510555][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  141.514059][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  141.517023][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.520007][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.522887][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.542084][T11536] lo speed is unknown, defaulting to 1000
[  141.707043][T11536] chnl_net:caif_netlink_parms(): no params data found
[  141.758495][T11536] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.761022][T11536] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.763401][T11536] bridge_slave_0: entered allmulticast mode
[  141.766225][T11536] bridge_slave_0: entered promiscuous mode
[  141.769503][T11536] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.771924][T11536] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.774237][T11536] bridge_slave_1: entered allmulticast mode
[  141.777433][T11536] bridge_slave_1: entered promiscuous mode
[  141.794928][T11536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.799683][T11536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.817340][T11536] team0: Port device team_slave_0 added
[  141.820536][T11536] team0: Port device team_slave_1 added
[  141.837178][T11536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.839477][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.848251][T11536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.854518][T11536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.858505][T11536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.869477][T11536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.906022][T11536] hsr_slave_0: entered promiscuous mode
[  141.909277][T11536] hsr_slave_1: entered promiscuous mode
[  141.912557][T11536] debugfs: 'hsr0' already exists in 'hsr'
[  141.915442][T11536] Cannot create hsr debugfs directory
[  142.024518][T11536] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  142.029184][T11536] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.033157][T11536] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.038122][T11536] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  142.055091][T11536] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.057522][T11536] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.060578][T11536] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.062935][T11536] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.093705][T11536] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.112517][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.117643][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.128735][T11536] 8021q: adding VLAN 0 to HW filter on device team0
[  142.140420][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.142841][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.146917][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.149275][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.208636][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'.
[  142.219228][T11559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1767'.
[  142.224272][T11559] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1767'.
[  142.253611][T11536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.388316][T11536] veth0_vlan: entered promiscuous mode
[  142.396049][T11536] veth1_vlan: entered promiscuous mode
[  142.419224][T11536] veth0_macvtap: entered promiscuous mode
[  142.423425][T11536] veth1_macvtap: entered promiscuous mode
[  142.432467][T11536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.447519][T11536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.499580][   T98] block nbd0: Possible stuck request ffff8880211a0000: control (read@0,1024B). Runtime 30 seconds
[  142.503214][   T98] block nbd0: Possible stuck request ffff8880211a0200: control (read@1024,1024B). Runtime 30 seconds
[  142.509137][   T98] block nbd0: Possible stuck request ffff8880211a0400: control (read@2048,1024B). Runtime 30 seconds
[  142.512700][   T98] block nbd0: Possible stuck request ffff8880211a0600: control (read@3072,1024B). Runtime 30 seconds
[  142.518102][ T6005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.537521][ T6005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.546135][ T6005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.549614][T11578] lo speed is unknown, defaulting to 1000
[  142.549625][ T6005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.624539][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.627724][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.712185][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.718993][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.847871][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.850996][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.855807][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.858797][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.863524][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.218326][ T5862] bond1 (unregistering): Released all slaves
[  143.270395][ T5862] bond2 (unregistering): Released all slaves
[  143.325872][ T5862] bond3 (unregistering): Released all slaves
[  143.377034][ T5862] bond4 (unregistering): Released all slaves
[  143.428399][ T5862] bond5 (unregistering): Released all slaves
[  143.479971][ T5862] bond6 (unregistering): Released all slaves
[  143.531231][ T5862] bond7 (unregistering): Released all slaves
[  143.582074][ T5862] bond8 (unregistering): Released all slaves
[  143.596417][   T54] Bluetooth: hci1: command tx timeout
[  143.636690][ T5862] bond9 (unregistering): Released all slaves
[  143.687948][ T5862] bond10 (unregistering): Released all slaves
[  143.738918][ T5862] bond11 (unregistering): Released all slaves
[  143.790359][ T5862] bond12 (unregistering): Released all slaves
[  143.841508][ T5862] bond13 (unregistering): Released all slaves
[  143.893536][ T5862] bond14 (unregistering): Released all slaves
[  143.946826][ T5862] bond0 (unregistering): Released all slaves
[  144.000915][ T5862] bond15 (unregistering): Released all slaves
[  144.049261][T11583] lo speed is unknown, defaulting to 1000
[  144.105697][ T5862] : left promiscuous mode
[  144.207442][ T5862] tipc: Disabling bearer <eth:ipvlan1>
[  144.236162][ T5862] tipc: Left network mode
[  144.644169][T11623] __nla_validate_parse: 1 callbacks suppressed
[  144.644180][T11623] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1778'.
[  144.654448][T11623] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1778'.
[  144.658731][ T5862] hsr_slave_0: left promiscuous mode
[  144.955216][   T54] Bluetooth: hci2: command tx timeout
[  145.146706][T11628] lo speed is unknown, defaulting to 1000
[  145.151283][T11583] chnl_net:caif_netlink_parms(): no params data found
[  145.339646][T11583] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.342242][T11583] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.344687][T11583] bridge_slave_0: entered allmulticast mode
[  145.347906][T11583] bridge_slave_0: entered promiscuous mode
[  145.351201][T11583] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.353802][T11583] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.357931][T11583] bridge_slave_1: entered allmulticast mode
[  145.361305][T11583] bridge_slave_1: entered promiscuous mode
[  145.380428][T11641] netlink: 'syz.1.1780': attribute type 13 has an invalid length.
[  145.388703][ T5862] ------------[ cut here ]------------
[  145.390538][ T5862] WARNING: CPU: 0 PID: 5862 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  145.393781][ T5862] Modules linked in:
[  145.395527][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  145.400193][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.403510][ T5862] Workqueue: netns cleanup_net
[  145.405298][ T5862] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  145.407271][ T5862] Code: 98 b1 e8 f7 4b 83 3c 2c 00 75 19 e8 9c 8e 85 f7 49 81 fd f8 07 00 00 74 1d e8 8e 8e 85 f7 49 83 c5 08 eb c9 e8 83 8e 85 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  145.413657][ T5862] RSP: 0018:ffffc90003a3f8b0 EFLAGS: 00010293
[  145.415695][ T5862] RAX: ffffffff8a3a222d RBX: ffff8881112dc000 RCX: ffff88801cec1cc0
[  145.418339][ T5862] RDX: 0000000000000000 RSI: ffffffff8d979100 RDI: ffff8881112dc000
[  145.420973][ T5862] RBP: ffffc90003a3f9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  145.423760][ T5862] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffff8881112dc000
[  145.426571][ T5862] R13: 0000000000000000 R14: ffff8881118c0000 R15: dffffc0000000000
[  145.429174][ T5862] FS:  0000000000000000(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  145.432128][ T5862] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.434576][ T5862] CR2: 0000001b2f91eff8 CR3: 00000001192e4000 CR4: 00000000000006f0
[  145.437589][ T5862] Call Trace:
[  145.438731][ T5862]  <TASK>
[  145.439745][ T5862]  ops_undo_list+0x49a/0x990
[  145.441351][ T5862]  ? __pfx_ops_undo_list+0x10/0x10
[  145.443156][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[  145.444867][ T5862]  cleanup_net+0x4c5/0x800
[  145.446635][ T5862]  ? __pfx_cleanup_net+0x10/0x10
[  145.448290][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.450054][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  145.452039][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  145.453925][ T5862]  process_scheduled_works+0xae1/0x17b0
[  145.455908][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.457914][ T5862]  worker_thread+0x8a0/0xda0
[  145.459440][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.461524][ T5862]  ? __kthread_parkme+0x7b/0x200
[  145.463258][ T5862]  kthread+0x711/0x8a0
[  145.464640][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  145.466513][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.468090][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.469856][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.471587][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.473225][ T5862]  ret_from_fork+0x3fc/0x770
[  145.474785][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  145.476592][ T5862]  ? __switch_to_asm+0x39/0x70
[  145.478166][ T5862]  ? __switch_to_asm+0x33/0x70
[  145.479762][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.481290][ T5862]  ret_from_fork_asm+0x1a/0x30
[  145.482935][ T5862]  </TASK>
[  145.483970][ T5862] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  145.486474][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  145.490428][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.494090][ T5862] Workqueue: netns cleanup_net
[  145.495683][ T5862] Call Trace:
[  145.496793][ T5862]  <TASK>
[  145.497785][ T5862]  dump_stack_lvl+0x99/0x250
[  145.499316][ T5862]  ? __asan_memcpy+0x40/0x70
[  145.500862][ T5862]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.502617][ T5862]  ? __pfx__printk+0x10/0x10
[  145.504145][ T5862]  panic+0x2db/0x790
[  145.505423][ T5862]  ? __pfx_panic+0x10/0x10
[  145.506912][ T5862]  ? ret_from_fork_asm+0x1a/0x30
[  145.508567][ T5862]  __warn+0x31b/0x4b0
[  145.509881][ T5862]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.511660][ T5862]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.513787][ T5862]  report_bug+0x2be/0x4f0
[  145.515219][ T5862]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.516985][ T5862]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  145.518746][ T5862]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  145.520490][ T5862]  handle_bug+0x84/0x160
[  145.522066][ T5862]  exc_invalid_op+0x1a/0x50
[  145.523638][ T5862]  asm_exc_invalid_op+0x1a/0x20
[  145.525234][ T5862] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  145.527190][ T5862] Code: 98 b1 e8 f7 4b 83 3c 2c 00 75 19 e8 9c 8e 85 f7 49 81 fd f8 07 00 00 74 1d e8 8e 8e 85 f7 49 83 c5 08 eb c9 e8 83 8e 85 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  145.533755][ T5862] RSP: 0018:ffffc90003a3f8b0 EFLAGS: 00010293
[  145.535750][ T5862] RAX: ffffffff8a3a222d RBX: ffff8881112dc000 RCX: ffff88801cec1cc0
[  145.538332][ T5862] RDX: 0000000000000000 RSI: ffffffff8d979100 RDI: ffff8881112dc000
[  145.540983][ T5862] RBP: ffffc90003a3f9b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  145.543595][ T5862] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffff8881112dc000
[  145.546171][ T5862] R13: 0000000000000000 R14: ffff8881118c0000 R15: dffffc0000000000
[  145.548761][ T5862]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  145.550535][ T5862]  ops_undo_list+0x49a/0x990
[  145.552143][ T5862]  ? __pfx_ops_undo_list+0x10/0x10
[  145.554143][ T5862]  ? do_raw_spin_unlock+0x4d/0x240
[  145.555831][ T5862]  cleanup_net+0x4c5/0x800
[  145.557314][ T5862]  ? __pfx_cleanup_net+0x10/0x10
[  145.558960][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.560682][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  145.562589][ T5862]  ? process_scheduled_works+0x9ef/0x17b0
[  145.564593][ T5862]  process_scheduled_works+0xae1/0x17b0
[  145.566409][ T5862]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.568333][ T5862]  worker_thread+0x8a0/0xda0
[  145.569863][ T5862]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.571933][ T5862]  ? __kthread_parkme+0x7b/0x200
[  145.573893][ T5862]  kthread+0x711/0x8a0
[  145.575219][ T5862]  ? __pfx_worker_thread+0x10/0x10
[  145.576903][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.578426][ T5862]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.580146][ T5862]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.581881][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.583525][ T5862]  ret_from_fork+0x3fc/0x770
[  145.585022][ T5862]  ? __pfx_ret_from_fork+0x10/0x10
[  145.586713][ T5862]  ? __switch_to_asm+0x39/0x70
[  145.588233][ T5862]  ? __switch_to_asm+0x33/0x70
[  145.589807][ T5862]  ? __pfx_kthread+0x10/0x10
[  145.591346][ T5862]  ret_from_fork_asm+0x1a/0x30
[  145.593395][ T5862]  </TASK>
[  145.595065][ T5862] Kernel Offset: disabled
[  145.596510][ T5862] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:27:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a3f050
R8 =ffff8881075a8237 R9 =1ffff11020eb5046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958e9 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f91eff8 CR3=00000001192e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=839f75573d04e3c4 1a17e8a6d3dedd61
XMM02=02901bf46e14505b 60da02a5f72260b2 XMM03=7174aa20370ee6b8 0a59f744dc7b5e21
XMM04=d499c2565d8f74b8 542a1ab76bb858c7 XMM05=c543ebb4917a016b af851cd865c827a6
XMM06=e9636293b845edda b2a9d390d499c256 XMM07=5d8f74b8542a1ab7 6bb858c77174aa20
XMM08=370ee6b80a59f744 dc7b5e2102901bf4 XMM09=0000000000000000 00007fea02012f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888108939cc0 RBX=0000000000000000 RCX=be50a3b5127ed900 RDX=0000000000000000
RSI=ffffffff8172cd22 RDI=1ffffffff1c2789c RBP=ffffffff8172cd05 RSP=ffffc900045ee9f0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900045eebb8 R11=ffffffff81ac3450
R12=0000000000000002 R13=ffffffff8e13c4e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d70a9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fea02d536c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f09ee6e56c0 CR3=000000010f544000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=6c696166203a7325 002f74656e2f7373 XMM03=0000000000000000 0000000000007373
XMM04=64656c696166203a 7325002f74656e2f XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
