last executing test programs:

1.119945182s ago: executing program 1 (id=808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f00000001c0)=0x85, 0x1)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={<r7=>0x0}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x58, 0x400}, 0x800)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r7, r8, 0x0, 0x4, &(0x7f00000006c0)='^\xfc\x1a\xfd'}, 0x30)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0xfc00)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
readv(r6, &(0x7f0000000480)=[{0x0}, {}, {0x0}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/59, 0x3b}], 0x6)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x9, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0xa, 0x8001, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)

739.695732ms ago: executing program 2 (id=814):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9473b6ee", @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="c0abafb63e9f57ea8f1514eeaf4daa130914ace4ef10c83211cb03ffe15164f17b1a3f60aad35fe1c9be9398ff3be539fbd56f72fe6f57d99dcc76768dbaaecb7b2dd278ed032bb15e103ddc5083cd7de9fd732a0d0cceea3f066a07d16f0850f0"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$PTP_EXTTS_REQUEST(r14, 0x40103d02, &(0x7f0000000080)={0x9, 0x5})
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket(0x10, 0x803, 0x0)
bind$netlink(r16, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r16, &(0x7f0000000600)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r17, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r18 = socket$nl_route(0x10, 0x3, 0x0)
r19 = socket(0x1, 0x803, 0x0)
getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r20}]}, 0x44}}, 0x0)

658.351748ms ago: executing program 2 (id=815):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002c40), r1)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf25030000000c000300ff07000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x48894)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000500)={'veth0_to_team\x00', @random="1e61455f390c"})
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0x10, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2df1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd07}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4044841)

587.531931ms ago: executing program 2 (id=818):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@getqdisc={0x30, 0x26, 0x325, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5bebdeeedc07ee35, 0xa}, {0xb, 0xfff1}, {0x10, 0x4}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x28000}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendfile(r4, r3, 0x0, 0x970b)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt(r5, 0x3, 0x6, &(0x7f0000000300)="2bb3daaaf89f45c29739afdd406982ead80e9055bbcf988251d2f61e9cf24911f502d7c9ddecef28503c5425b3fbd38ce840fd3d808eb387d9e8ee67e912adfcd22f000fa034d9f41e615c5b0ad1aa860fd29d145da47b88b5f51c80dcab4535f75b8da46ff71fa1666cdf", 0x6b)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'pimreg0\x00', <r8=>0x0})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)
bind(r6, &(0x7f0000000500)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x91}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x16, &(0x7f0000000280)=""/22, 0x0, 0x1, '\x00', r8, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x10, 0x90b}, 0x10, 0x0, r9, 0x1, &(0x7f0000000480)=[r10], &(0x7f00000004c0)=[{0x1, 0x2, 0xb, 0x2}], 0x10, 0x5}, 0x94)
r11 = socket$kcm(0x10, 0x3, 0x10)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000040)={'\x00', {0x2, 0x0, @multicast2}})
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)

520.059621ms ago: executing program 0 (id=820):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x1000})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(0x4)

518.605386ms ago: executing program 2 (id=821):
unshare(0x800)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3288}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40810) (async)
unshare(0x40010400) (async)
unshare(0x400) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
poll(&(0x7f0000000180)=[{r0, 0x400}, {r0, 0x84}, {r0, 0x2000}, {r1, 0xc0}, {r0, 0x4000}, {r0, 0x282}, {r0, 0x2000}], 0x7, 0x6) (async)
unshare(0x2000100)
unshare(0x10000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', <r5=>0x0, 0x1, 0x40, 0x0, 0xa1, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x2b, 0x0, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x1f, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x0, [{@multicast1, 0xe}, {@multicast2, 0x6e}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x80000001}]}]}}}}}) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0}) (async, rerun: 64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', <r8=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xe0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000800)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x60e82, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201) (async)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000740)=0x3ff, 0x4) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000014}, 0x10) (async, rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000008c0)=0x1, 0x4) (async, rerun: 64)
unshare(0x10040800) (async, rerun: 64)
unshare(0x40000000) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x2, 0x8, 0xffff1b46, 0x1, 0xffffffffffffffff, 0x1131f4e6, '\x00', r3, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x1}, 0x50)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0]}}, &(0x7f0000000b80)=""/237, 0x29, 0xed, 0x1, 0x7, 0x10000}, 0x28) (async, rerun: 64)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x12, 0x4, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xf, 0x4, 0xa, 0x50, 0xffffffffffffffff}]}, &(0x7f0000000d80)='GPL\x00', 0x401, 0x59, &(0x7f0000000dc0)=""/89, 0x41100, 0xc, '\x00', r7, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x10, 0x3, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x9, 0x2, 0xf, 0x9}, {0x3, 0x5, 0xa, 0x6}], 0x10, 0xbe}, 0x94) (async, rerun: 64)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0xd5, 0x0, 0x1, 0x80000001, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async, rerun: 64)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x10, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xda2}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x40, 0xeb, &(0x7f0000000a40)=""/235, 0x41000, 0x41, '\x00', r8, @fallback=0x31, r11, 0x8, &(0x7f0000000cc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x8, 0x7ff, 0xffffffff}, 0x10, 0xffffffffffffffff, r12, 0x6, &(0x7f0000001400)=[r13, 0xffffffffffffffff, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001440)=[{0x2, 0x2, 0xd, 0xc}, {0x3, 0x1, 0xd, 0x4}, {0x3, 0x1, 0xe, 0xb}, {0x3, 0x5, 0x0, 0x8}, {0x2, 0x1, 0xb, 0x3}, {0x0, 0x5, 0x3, 0x3}], 0x10, 0x8}, 0x94)

517.190501ms ago: executing program 0 (id=822):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r1 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="d72af430d32804d00c193527227afd4ae83dfa60e97e9c8bf2b0677c0e37371b46c8de68db7992afac997d9bc07e8b6e66642126ae3c4ce07404d5d0f95cca7f060dd0c6c7a2beef94ab4e35134a62423498f489178e918471905699093e7cb6f08a7726ace7ba923a4bb79476893b64372a132d7c2921c0d23bf94f1471"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000023c0)=r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000040000000000000000000600010017000000"], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000025c0)=ANY=[@ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r6, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f0000002800)=""/4112, 0x1010}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000002740)=""/177, 0xb1}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x20, &(0x7f0000002380)={0x77359400})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r8, &(0x7f0000000080), 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000070605000000000000000200736f7a3050220000080006400000000442211e4f5a2c16a6e02cc3538d2e1423181bbb1d10378514b1a6e6962edd93073cf020411d10ba004c288d8e"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r4, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newtfilter={0x1ac8, 0x2c, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xffe0, 0x10}, {0x10, 0xc}, {0x52caadb263d3f0cc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x1a54, 0x2, [@TCA_BASIC_ACT={0x1ac, 0x3, [@m_mpls={0xd4, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3369f}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0xffff524b, 0x3, 0x5, 0xeb82}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xadc3a}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4305}]}, {0x6c, 0x6, "bac02aba010f60b30e0c91e9d6d1821a73c38d3307afec3f8dfe0ef167830679d222c4791ec2dbe67e30ba5c1d5bb0bb459f22a8e9fe9ae0eef59f04cfe1d0bef0ddc0ab9ac290f7c06c4116785e760e587660f57447d20e5ebf22f404bad5be96852c6f4237741c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0xd4, 0x1b, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x1, 0x8, 0x0, 0x9}, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}, {0x49, 0x6, "9ea2998497c3e60b09806f3b6cc3bbefac0701cb22a3e5939ba042cfa686c57082144cdae28d24c0cc6c69a3134db6f52e7496671be35f37cb8edd29f5231422cc44c7c599"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x130, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x1ff}, {0x3, 0x3, 0x1, "7629e8"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x6}, {0x6, 0x7ff, 0x0, 0xa1c4b9576a84594b, 0x5, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x4}, {0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x9}, {0x6d9, 0x8, 0x0, 0x2, 0x7, 0x3}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x6}, "87f55b04e60b681708210999990748a56b3d9edba7e34447d4753d9f07dbfba0830a650df7fc638cc44d9eb4e5091d9ec6a83876c9e9046b1a26658d3f680c971331bfc2ea2b9efe0916734714e540e3bfa9d87f2d8d46a5bc16d3b6b388a66bf75b997972325aa488740bfad9fa224b06938d41b1cb221ef8b72d685c6b78ddc9cf93b21f27a3fb149f07265ba6d2e04dc6c162c53e40a106"}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}, @TCA_BASIC_ACT={0x1c8, 0x3, [@m_vlan={0xa4, 0x2, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xa, 0x8c, 0x3, 0x4, 0x100}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xac6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1cc}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9fd}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x0, 0xfffffffffffffff1, 0x10001, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x5, 0x6, 'g'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x120, 0xc, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0xffffffffffffffff, 0xe, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x109}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x817}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcec}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff54b6, 0xff, 0x5, 0x0, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x8, 0x3, 0x8}, 0x1}}]}, {0x78, 0x6, "675e27835c6ddf494781efc28cf61321e69583560615a4c9a005843ba0059af42487376bc70b0f8e00c6a2b3b8da976a26bf5f41fbde3af8c7e5ab9eda8164b58767050b9020562354f13dbbd9252302615d897ac4e2c533b91f340fa1f9dbbbbf9d8c164a084df0e6c8fa1780fa240c42a737df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_ACT={0x15a4, 0x3, [@m_sample={0x80, 0x13, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x181b}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff001}]}, {0x44, 0x6, "e3a68563c78e29fe343986e60697d37ba6480d488003eb3210f193c51d9965a309cb806f44c76db9ca1006450576f23d4d19f6291aec9960416249663a2b63fd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x164, 0x1, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'vxcan1\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'batadv0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xf7b, 0x1, 0x8, 0x6, 0xed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x7, 0x1, 0x5, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '^!-[}\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}]}, {0xd3, 0x6, "27cdca9a26f05d21f0ce612d7fa14888153adc5c3da52c4b84d798563834aa1d3cc7a394e0676a823a5e08bd4b9f69d1b455bdb28aced087804fffe29eddf09c08b7b263b840384dd5ef1456cdc0dc514b18c87636a38c19ea97e6bcd8416281743c8f287d89af7b6bd50bac0e700c9fe8217b2e6d5b5aecc001aabfcabe1cb160161bbdef7fbcb2f6d436509ebe5ca95b593793163b27612ec488a0f12eb1107a8a52fd9a6de25d0a2edcad54ea10453ec5556307674f2122c00b9b7e2063e2923bfda4aed96421cfcd35308e3cba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x138, 0x15, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc67}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x200, 0x6, 0x0, 0xfe000000}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0xa, 0x20000000, 0xfb, 0xb5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb09}]}, {0xb3, 0x6, "afa42da194e0d3c7997e3a710629fae11907f000705078136e9cf4a78add189f20a54ce14c2ea7333b7ade3e47a8399577eb5edcd02cc4455940ab6eac34085924ce8bacc85990659e94f668f59f33b529c88c95f8be38350040d106972d550cf9a4ce5e1bc6d58cb7ba54b650d0f4eb3fc9af64c75aa0cd32df96dc131aa5f845c1cc6a8e48b96ad09919be57e00272cee5b088926d1f6d61c8c24f7721caad3728c21d12c77794fa47baebb8b03e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x128, 0x16, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf1, 0x6, "7cc5208967d02246871e4b452aeb438b101db3f36ead4fcbec8f916dd89257c3cbe6bf623a72fd281530d3a9375c2b0d0fe1ad45d248284d46408c6a3b5cd0f9d5f6e1165748d9fa36c68df013bc40c0bce5c9bdf4750e573c01cff268b0b70d945583889129e699895b3b256853121a56b64f7219474948ef936e869eff2eb0f2868c9f10e0f6bf498b5e2da8e806c7ca5b47e9d93692c1d2887d7b86caa62252e0fb5c4c291c8cb009c5064eb97ca0ea1c00167dbe14aa613a549eef057cfe13a3eadeedddc5b66e924eac077b271102c2799da756d1ea6ccea27cd64cd008faaed56afb06a3ebbbd3e1b875"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xb8, 0x12, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x6d, 0x6, "ed46ab23185303402c153f2cf7f6a0c35c3c02200c0c524a1fad25b84489818f96d01b730fa23d273fe0ec8ec2df5ac7480f440527b533bec76c50f5ba5fd95a3c1437d0576219b89ac003010b7a46890bc892a731ecf12c24667dc6d90be730af0060d23348b606be"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x54, 0x15, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x12000, 0x20000000, 0x6, 0x4}, @rand_addr=0x64010102, @multicast2, 0xff000000, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x1050, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xa8e0, 0x2, 0xf, 0xe}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x1a, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x80}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5d2}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x9}}]}}]}, 0x1ac8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

437.407914ms ago: executing program 2 (id=823):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0) (async)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) (async, rerun: 64)
r2 = socket(0x28, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x9, 0x0, 0x7ff, 0x8, 0xc0000002, 0x402, 0x0, 0x1, 0x4, 0x80000003, 0x4006, 0x2080, 0x7, 0xd, 0x800002, 0x80002005, 0x2, 0xdac9, 0xfffffff9, 0xffffe67d}}) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8947, &(0x7f0000000580)={'bond0\x00', 0xfffd}) (async, rerun: 32)
ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async, rerun: 32)
ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async, rerun: 64)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r5], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190020000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000000000000000000000000000090000000000000000000000000000000000000000000000030000000000bdca8439ffffffffffff000000000000000000000000000000000000000000000000ffffffffffffff0700"/103], 0xb8}, 0x1, 0x0, 0x0, 0x4004}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000680)=""/4096, 0x3}) (async)
syz_emit_ethernet(0x80, &(0x7f0000000000)=ANY=[], 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000080819dcac40af194c69aec1a161800010002000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='f2fs_sync_fs\x00'}, 0x18) (rerun: 64)

436.855804ms ago: executing program 2 (id=824):
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000500)="0b031200e0ff64000200635400f6a13bb100", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @null}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffa}, 0x94)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4040010) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4040010)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000007f8141fac02cdd00000000000000000000003c22358a98b4f74300013b65004095bca37db4783d5d381e00c6ed3f1c42181a77e260b4ce5dd76be49c8f462eb969c320b9276b83a8b6d9aa6c53fbc41469fcc0ef98e8505503d30d3be1d947f9"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
socket$alg(0x26, 0x5, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$unix(r8, &(0x7f000000e000)=[{{0x0, 0x0, &(0x7f000000d400)=[{&(0x7f000000d080)="eaba3e5f9c19b49d25d8ec768f0a06bcd9291c2d7aeb39f8db27c9a7f2d4b7b61c8821399d9913a441c8233fca7886eaad96", 0x32}, {&(0x7f000000d100)="f9e5778253cc3fbe6184aaf51726d4ccdf0e3844874dcc9c33c34fead6ff1dfcd5b9122710188c0274a3073f4f0284ce06569ed1c47f2427870173e21318675df806379658debdc302ec76835e20517ab1cc56299142f1aeff2c6af65a7b559109b275a2892ce8b27d82efeb59cf60655db42bad5934b4794ec6395763802ee9d0f71c662d27f912ba2988d772f9e4a405969cdc119b8340c7", 0x99}, {&(0x7f000000d1c0)="989cf6f681284ccb2787f9c14894c81e2a1e9a63eb2530cd2c17f68c1e73a8dd85e6f2fc66cd2eb3189de352d9592b12d2faad4a10b4a4a22e4955c91b0b2554dceb78e0fefbdd7ae130e7", 0x4b}, {&(0x7f000000d240)="ff93941bfac5998a84b767d07aad33f0d5d1d7d3086fb4ddb3818f177aba1dda515b8ff35a55a117f4e44e3602bd08f0ae1c4cb6192dd5cd9bb4aeb4f484a4d8d7c5a9d971f2b95cdca5f4a54bba07f8a12b", 0x52}, {&(0x7f000000d2c0)="15e485d542", 0x5}, {&(0x7f000000d3c0)="c34f64e90c5ef31171a283", 0xb}], 0x6, 0x0, 0x0, 0x20000805}}], 0x1, 0x0) (async)
sendmmsg$unix(r8, &(0x7f000000e000)=[{{0x0, 0x0, &(0x7f000000d400)=[{&(0x7f000000d080)="eaba3e5f9c19b49d25d8ec768f0a06bcd9291c2d7aeb39f8db27c9a7f2d4b7b61c8821399d9913a441c8233fca7886eaad96", 0x32}, {&(0x7f000000d100)="f9e5778253cc3fbe6184aaf51726d4ccdf0e3844874dcc9c33c34fead6ff1dfcd5b9122710188c0274a3073f4f0284ce06569ed1c47f2427870173e21318675df806379658debdc302ec76835e20517ab1cc56299142f1aeff2c6af65a7b559109b275a2892ce8b27d82efeb59cf60655db42bad5934b4794ec6395763802ee9d0f71c662d27f912ba2988d772f9e4a405969cdc119b8340c7", 0x99}, {&(0x7f000000d1c0)="989cf6f681284ccb2787f9c14894c81e2a1e9a63eb2530cd2c17f68c1e73a8dd85e6f2fc66cd2eb3189de352d9592b12d2faad4a10b4a4a22e4955c91b0b2554dceb78e0fefbdd7ae130e7", 0x4b}, {&(0x7f000000d240)="ff93941bfac5998a84b767d07aad33f0d5d1d7d3086fb4ddb3818f177aba1dda515b8ff35a55a117f4e44e3602bd08f0ae1c4cb6192dd5cd9bb4aeb4f484a4d8d7c5a9d971f2b95cdca5f4a54bba07f8a12b", 0x52}, {&(0x7f000000d2c0)="15e485d542", 0x5}, {&(0x7f000000d3c0)="c34f64e90c5ef31171a283", 0xb}], 0x6, 0x0, 0x0, 0x20000805}}], 0x1, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)

435.794379ms ago: executing program 0 (id=825):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getpeername(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf}, 0x10, 0x0, r1}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000001200030000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYBLOB="0800008500000000000000f900800e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r6, 0x607d8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x2, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={<r8=>0x0, 0x6}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={r8, 0xffffffff}, &(0x7f0000000480)=0x8)
socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000ab40b5487144287fd2fd74f200"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r10}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000bd630140000000000095003bed0000006d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r11)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r12], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)

349.942581ms ago: executing program 0 (id=826):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22381, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'veth1\x00', 0x8000})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a000004f4ff000073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a310000000024050380100000800c00018006000104d10300000c000080080003400000000204000080140000001100010000000000000000000100000a4f6b93c6a3d1076d0262254a3d24"], 0xb4}}, 0x40)
close(r3)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000ff0f00000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000020000000000000ffffffffffffffff00000800"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000000e00000020000000000200000000000000000000000000000000002000000000000000000000000000a00200000100000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000089d400000000020000000000000000000000000000000000000000000000000000000000000000000000000000ecff000000000000000000feffffffffffff"], 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000009000000000000003047000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700002000"/112], 0xb8}}, 0x10)
syz_emit_ethernet(0xfc0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r9=>0x0})
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r9, 0x1, 0x6, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
socket$packet(0x11, 0x2, 0x300)
socket$can_raw(0x1d, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r11, &(0x7f0000000680)={&(0x7f0000000380)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="4a26b0906d61fee4144d063ea7217cc0338a4fe27d2f5600f17130932e932fb7497115ab5a8ddccb00f7", 0x2a}, {&(0x7f0000000440)="0f8a920b3f95e8cd9c0af3c0a615cf5722ba0fa4fe54ea864f7e7e370aa940b8d911b5a9d516be690ffa6f79f7e0ecf66cc8bfd5acc49c8426c5edae27db5468a7e4ecf909e0b1b55c99eb415cc5d26a249cf4d67be9e2e1b79a010ed74b2cc030cd6367e7dfc4ff33bb6b21282e39854e2081bdcf59f7ff4e0c56df0feb08ba1ed5a4d29ee0ba609e9382010f5e06e60e2963439d46ce604d5f42c4343bf12047fdef9e699e41eaf68e8247057174c052", 0xb1}, {&(0x7f0000000500)="7be6c999e55a6b347e334f94e34140f44941ae78f02712b6010ce0b4", 0x1c}], 0x3, &(0x7f0000000580)="8982d7299e7b0c4b48e4b505c98a2464ba5b4f78fe2a69079c699bc2d8bc7dca6bd551e162bf1ba7dc784b554cadc9c11dbc9fb0e442fd44bbdb46e6480fd6fe00998925c399ba92f116538cdd3dbc2f60b98923ad873f4f283dc3e95d3817af34d3c974b30603e050ff3597e8e16930ee1f136c4ba6c3817eba703a4784c4a3fd97296ed52ac3e03e54c13a1daa8d30f5e4111d3e432c71872421d4de10f58d4a4cfd673250274efda6466f9f28a001936afa6baeeb8d0d176ae4cbb9c3f80398127172dd", 0xc5, 0x4000008}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804)

348.882458ms ago: executing program 0 (id=827):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a0000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xe4131}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000127bd6fe9fbdbf12501005d142ef88e89a7c3b1d70000080006000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x20040001) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x1f}, 0x20) (async, rerun: 32)
setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0) (rerun: 32)
bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000100)) (async)
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300))
r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={<r6=>0x0, 0x5}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={<r7=>r6, 0x1}, &(0x7f0000000040)=0x16) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0}) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "24120bb92a60010d", "9e8ee7dc25c6519ae8ee828f7113300200b17b55080000000000000000fe00", "dc5db43f", "80031f0000000200"}, 0x38)
getsockopt$inet6_int(r10, 0x29, 0x4e, 0x0, &(0x7f0000000040))
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'nr0\x00', <r13=>0x0}) (async, rerun: 64)
r14 = socket(0x10, 0x80002, 0x0) (rerun: 64)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRES32=r13, @ANYRESDEC=r7], 0x44}}, 0x4000)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES8=r9, @ANYRES32=r9, @ANYBLOB="a77735c98014000004"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

290.282273ms ago: executing program 0 (id=828):
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000480)={0x1f, @any, 0x1}, 0xa)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000740)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x2, 0xd, 0x4c9, 0xa, 0x7fffffff, 0x1ff, 0x6, 0x47, 0xffffffffffffff64, 0x7, 0x0, 0xfd, 0x4, 0x6, 0x9]}, &(0x7f0000000840)=0x100)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r3, 0x2, 0x3, [0x7, 0xf, 0x9]}, &(0x7f0000000240)=0xe)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000001c0)={0x6e, 0x5, 0xb, 0xb, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0)

219.960171ms ago: executing program 1 (id=829):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="a7870000000004007bd02059"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x100}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

219.559906ms ago: executing program 1 (id=830):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x336)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r2)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="819b08000000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
close(r0)

88.395555ms ago: executing program 1 (id=831):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x90b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10820, 0x400}}, 0x20}}, 0x4084)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ad8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
r6 = socket(0x8000000010, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r6, &(0x7f00000002c0)="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", 0xfc)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r9, &(0x7f0000000040)='\f\x00', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000068000100ffffffffffdbdf250a0000000000000004000b00040006"], 0x20}}, 0x0)
ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r11, 0x0, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

86.286953ms ago: executing program 1 (id=832):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x64}, 0x90)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
unshare(0x7c000200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10)
sendmmsg$inet6(r5, 0x0, 0x0, 0x10)
socket$isdn(0x22, 0x3, 0x24)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r8, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="59886b93b959d8a2151597ce1b5c0ecae6d093256cd22989946f2e5cb6670adecad34a109bc805cfcad678b645986fbe193744d64d3820961c280303e25a2a614aabe26ab17fff437b31c4bdaa02d6a7e1a6032650051c19c9e8ebd31ca4c3ecdd54136bf81b803067a5b16ab5bf6fdf46cafd1e8ebbf4d64de762f9aba613f5afeaff7c016bf7d5012e0ab63772315a95b0bbc4dd03afd76b603f586f395d87ad872bcd6024ab246597094ce6611caa0e88b0f58aa364beb9fe97e3da37bce7129e1ae2d54b4d58a1d502b595fccc3a141418", @ANYRES16=r0, @ANYRESDEC=r4, @ANYBLOB], 0x30}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x50)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 1 (id=833):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x5, 0x1, 0x8, 0x9, 0x6, 0x50, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a00170000000004003700090003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2181' (ED25519) to the list of known hosts.
syzkaller login: [   40.976161][ T5828] cgroup: Unknown subsys name 'net'
[   41.096666][ T5828] cgroup: Unknown subsys name 'cpuset'
[   41.100703][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.645315][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.600158][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.603196][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.606677][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.609640][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.612175][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.615181][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.618470][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.621167][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.635749][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.638663][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.647874][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.651157][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.654463][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.663994][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.667179][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.766224][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   45.811655][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   45.841657][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.844480][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.846933][ T5840] bridge_slave_0: entered allmulticast mode
[   45.849285][ T5840] bridge_slave_0: entered promiscuous mode
[   45.853675][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.856987][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.859906][ T5840] bridge_slave_1: entered allmulticast mode
[   45.862942][ T5840] bridge_slave_1: entered promiscuous mode
[   45.882506][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.886134][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   45.891145][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.915346][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.917859][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.920434][ T5844] bridge_slave_0: entered allmulticast mode
[   45.923018][ T5844] bridge_slave_0: entered promiscuous mode
[   45.933506][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.936618][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.939052][ T5844] bridge_slave_1: entered allmulticast mode
[   45.941570][ T5844] bridge_slave_1: entered promiscuous mode
[   45.948189][ T5840] team0: Port device team_slave_0 added
[   45.959607][ T5840] team0: Port device team_slave_1 added
[   45.968921][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.990221][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.998203][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.000731][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.010374][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.014966][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.017163][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.019775][ T5849] bridge_slave_0: entered allmulticast mode
[   46.022360][ T5849] bridge_slave_0: entered promiscuous mode
[   46.025359][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.027749][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.030110][ T5849] bridge_slave_1: entered allmulticast mode
[   46.032418][ T5849] bridge_slave_1: entered promiscuous mode
[   46.039085][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.041568][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.049880][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.057207][ T5844] team0: Port device team_slave_0 added
[   46.065512][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.069171][ T5844] team0: Port device team_slave_1 added
[   46.072442][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.092818][ T5840] hsr_slave_0: entered promiscuous mode
[   46.095305][ T5840] hsr_slave_1: entered promiscuous mode
[   46.109447][ T5849] team0: Port device team_slave_0 added
[   46.112116][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.115584][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.125800][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.130854][ T5849] team0: Port device team_slave_1 added
[   46.142392][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.145386][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.155433][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.178226][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.180617][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.189456][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.202015][ T5844] hsr_slave_0: entered promiscuous mode
[   46.204455][ T5844] hsr_slave_1: entered promiscuous mode
[   46.206730][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   46.208934][ T5844] Cannot create hsr debugfs directory
[   46.211367][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.214047][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.224849][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.272515][ T5849] hsr_slave_0: entered promiscuous mode
[   46.275197][ T5849] hsr_slave_1: entered promiscuous mode
[   46.277419][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   46.279411][ T5849] Cannot create hsr debugfs directory
[   46.363329][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.371961][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.375649][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.383081][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.405943][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.409296][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.416571][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.419119][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.421482][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.423702][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.427462][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.431466][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.448254][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.453116][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.456909][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.462509][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.473562][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.476100][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.478701][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.481184][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.491368][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.493836][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.496678][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.498970][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.520138][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.532713][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.536167][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.539458][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.542107][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.545546][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.548178][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.556924][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.559737][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   46.569918][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   46.573831][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.576174][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.584641][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.595825][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.598312][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.601194][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.603708][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.612345][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.614827][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.622204][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   46.630359][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.632953][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.645723][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.648005][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.659734][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.663948][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.747282][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.757233][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.779647][ T5840] veth0_vlan: entered promiscuous mode
[   46.791832][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.798947][ T5840] veth1_vlan: entered promiscuous mode
[   46.804668][ T5849] veth0_vlan: entered promiscuous mode
[   46.815517][ T5849] veth1_vlan: entered promiscuous mode
[   46.828047][ T5840] veth0_macvtap: entered promiscuous mode
[   46.833896][ T5840] veth1_macvtap: entered promiscuous mode
[   46.848996][ T5844] veth0_vlan: entered promiscuous mode
[   46.854039][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.862842][ T5844] veth1_vlan: entered promiscuous mode
[   46.871305][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.877008][ T5849] veth0_macvtap: entered promiscuous mode
[   46.883815][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.889855][ T5849] veth1_macvtap: entered promiscuous mode
[   46.892683][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.901505][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.905159][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.913479][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.926302][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.931409][ T5844] veth0_macvtap: entered promiscuous mode
[   46.940664][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.948644][ T5844] veth1_macvtap: entered promiscuous mode
[   46.951629][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.959011][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.966975][ T4857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.971427][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.977491][ T4857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.993369][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.006620][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.010268][ T4857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.013399][ T4857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.016883][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.023275][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.028105][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.036823][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.045359][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.049449][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.052319][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.057284][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.079772][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.089731][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.097401][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.117021][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.120415][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.131161][ T5911] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   47.137635][ T5910] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   47.138135][ T5915] pim6reg1: entered promiscuous mode
[   47.142521][ T5915] pim6reg1: entered allmulticast mode
[   47.176558][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.183505][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.188577][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.192116][ T5920] gre0: entered allmulticast mode
[   47.237549][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.292637][ T5932] netlink: 'syz.0.7': attribute type 10 has an invalid length.
[   47.310157][ T5938] netlink: 'syz.1.9': attribute type 9 has an invalid length.
[   47.318490][ T5934] netlink: 'syz.0.7': attribute type 10 has an invalid length.
[   47.371588][ T5932] team0: Port device dummy0 added
[   47.378077][ T5934] team0: Port device dummy0 removed
[   47.381878][ T5934] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   47.431400][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'.
[   47.441917][ T5950] netlink: 'syz.0.11': attribute type 32 has an invalid length.
[   47.448374][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   47.456683][ T5950] (unnamed net_device) (uninitialized): option coupled_control: invalid value (100)
[   47.473256][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'.
[   47.489919][ T5952] syzkaller1: entered promiscuous mode
[   47.491898][ T5952] syzkaller1: entered allmulticast mode
[   47.500618][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   47.616299][ T5960] Bluetooth: MGMT ver 1.23
[   47.647688][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'.
[   47.655868][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16'.
[   47.675017][ T5843] Bluetooth: hci2: command tx timeout
[   47.675178][ T5846] Bluetooth: hci1: command tx timeout
[   47.677437][ T5235] Bluetooth: hci0: command tx timeout
[   47.849125][ T5969] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[   47.852705][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18'.
[   47.856308][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.858812][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.332729][ T5971] tipc: Started in network mode
[   48.335452][ T5971] tipc: Node identity a28c5e161d04, cluster identity 4711
[   48.339377][ T5971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.342391][ T5971] syzkaller0: entered promiscuous mode
[   48.345180][ T5971] syzkaller0: entered allmulticast mode
[   48.348602][ T5971] netlink: 27 bytes leftover after parsing attributes in process `syz.1.19'.
[   48.356732][ T5971] tipc: Resetting bearer <eth:syzkaller0>
[   48.360022][ T5970] tipc: Resetting bearer <eth:syzkaller0>
[   48.363201][ T5970] tipc: Disabling bearer <eth:syzkaller0>
[   49.121847][ T5974] tipc: Can't bind to reserved service type 0
[   49.126000][ T5974] netlink: 'syz.2.20': attribute type 12 has an invalid length.
[   49.507531][ T5993] netlink: 'syz.2.25': attribute type 1 has an invalid length.
[   49.638304][ T5998] netlink: 'syz.2.26': attribute type 7 has an invalid length.
[   49.640789][ T5998] netlink: 'syz.2.26': attribute type 8 has an invalid length.
[   49.669596][ T6003] Zero length message leads to an empty skb
[   49.728472][ T6005] pim6reg1: entered promiscuous mode
[   49.730648][ T6005] pim6reg1: entered allmulticast mode
[   49.754789][ T5843] Bluetooth: hci0: command tx timeout
[   49.755566][ T5846] Bluetooth: hci2: command tx timeout
[   49.757276][ T5235] Bluetooth: hci1: command tx timeout
[   50.353805][ T6018] ieee802154 phy0 wpan0: encryption failed: -22
[   50.655929][ T6027] team0: Port device team_slave_0 removed
[   50.713824][ T6033] team_slave_0: entered promiscuous mode
[   50.715963][ T6033] team_slave_1: entered promiscuous mode
[   50.719547][ T6033] team0: Device macsec1 is already an upper device of the team interface
[   50.722989][ T6033] team_slave_0: left promiscuous mode
[   50.725000][ T6033] team_slave_1: left promiscuous mode
[   50.966715][ T6053] team0: Port device geneve0 added
[   51.056339][ T6064] pim6reg99999999: entered allmulticast mode
[   51.131018][ T6068] tipc: Started in network mode
[   51.132906][ T6068] tipc: Node identity 8a0a370185d8, cluster identity 4711
[   51.136234][ T6068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.140522][ T6068] syzkaller0: entered promiscuous mode
[   51.142483][ T6068] syzkaller0: entered allmulticast mode
[   51.152013][ T6068] tipc: Resetting bearer <eth:syzkaller0>
[   51.834458][ T5235] Bluetooth: hci1: command tx timeout
[   51.834610][ T5846] Bluetooth: hci2: command tx timeout
[   51.836596][ T5843] Bluetooth: hci0: command tx timeout
[   51.908269][ T6066] tipc: Resetting bearer <eth:syzkaller0>
[   51.911038][ T6066] tipc: Disabling bearer <eth:syzkaller0>
[   52.097493][ T6096] _Z`Ԁ@S: entered promiscuous mode
[   52.168230][ T6115] bridge_slave_0: left allmulticast mode
[   52.170210][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.173592][ T6115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   52.199858][ T6118] tipc: Started in network mode
[   52.201505][ T6118] tipc: Node identity f6a4414dd0da, cluster identity 4711
[   52.203875][ T6118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.228154][ T6122] validate_nla: 6 callbacks suppressed
[   52.228165][ T6122] netlink: 'syz.2.64': attribute type 3 has an invalid length.
[   52.236433][ T6122] syz_tun: entered allmulticast mode
[   52.259987][ T6126] __nla_validate_parse: 17 callbacks suppressed
[   52.260007][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'.
[   52.269353][ T6117] tipc: Disabling bearer <eth:syzkaller0>
[   52.291881][ T6129] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   52.296237][ T6129] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   52.335847][ T6131] bond2: entered promiscuous mode
[   52.337728][ T6131] bond2: entered allmulticast mode
[   52.340184][ T6131] 8021q: adding VLAN 0 to HW filter on device bond2
[   52.343208][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.64'.
[   52.358631][ T6136] bond3: entered promiscuous mode
[   52.360251][ T6136] bond3: entered allmulticast mode
[   52.362571][ T6136] 8021q: adding VLAN 0 to HW filter on device bond3
[   52.387576][ T6140] netlink: 224 bytes leftover after parsing attributes in process `syz.1.68'.
[   52.440004][ T6140] warning: `syz.1.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.444624][ T6140] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   52.512696][ T6144] team0: Device gtp0 is of different type
[   52.705206][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.708656][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.777818][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.787254][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.873742][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.879272][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.882995][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.891597][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.997829][ T6152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   53.027041][ T6152] netlink: 'syz.1.72': attribute type 4 has an invalid length.
[   53.030373][ T6152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.72'.
[   53.042459][ T6152] : renamed from bond0
[   53.057660][ T6121] syz_tun: left allmulticast mode
[   53.119915][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'.
[   53.124143][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'.
[   53.133601][ T6160] syzkaller1: entered promiscuous mode
[   53.139741][ T6160] syzkaller1: entered allmulticast mode
[   53.171707][ T6163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.222417][ T6163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.228898][ T6165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.232216][ T6165] syzkaller0: entered promiscuous mode
[   53.235827][ T6165] syzkaller0: entered allmulticast mode
[   53.255856][ T6166] tipc: Resetting bearer <eth:syzkaller0>
[   53.260676][ T6166] tipc: Disabling bearer <eth:syzkaller0>
[   53.303431][ T6163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.397316][ T6163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.401201][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[   53.527943][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.539303][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.560358][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.572911][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.608402][ T6186] netlink: 'syz.0.79': attribute type 6 has an invalid length.
[   53.914520][ T5846] Bluetooth: hci1: command tx timeout
[   53.914604][ T5235] Bluetooth: hci0: command tx timeout
[   53.916811][ T5846] Bluetooth: hci2: command tx timeout
[   53.980411][ T6209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.81'.
[   54.038390][ T6221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.047899][ T6221] tipc: Disabling bearer <eth:syzkaller0>
[   54.079529][ T6226] netlink: 84 bytes leftover after parsing attributes in process `syz.0.84'.
[   54.118377][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   54.202214][ T6252] netlink: 'syz.2.90': attribute type 4 has an invalid length.
[   54.367514][ T6262] bridge2: port 1(veth3) entered blocking state
[   54.369931][ T6262] bridge2: port 1(veth3) entered disabled state
[   54.372097][ T6262] veth3: entered allmulticast mode
[   54.376245][ T6262] veth3: entered promiscuous mode
[   54.381502][ T6262] bridge2: port 2(veth0_to_bond) entered blocking state
[   54.389776][ T6262] bridge2: port 2(veth0_to_bond) entered disabled state
[   54.392279][ T6262] veth0_to_bond: entered allmulticast mode
[   54.395745][ T6262] veth0_to_bond: entered promiscuous mode
[   54.402399][ T6264] 8021q: adding VLAN 0 to HW filter on device bond3
[   54.501170][ T6282] openvswitch: netlink: Multiple metadata blocks provided
[   54.509989][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.513144][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.516515][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.519211][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.546311][ T6283] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   54.569955][ T6285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.572353][ T6285] syzkaller0: entered promiscuous mode
[   54.574123][ T6285] syzkaller0: entered allmulticast mode
[   54.578692][ T6285] tipc: Resetting bearer <eth:syzkaller0>
[   54.581374][ T6285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   54.586260][ T6284] tipc: Resetting bearer <eth:syzkaller0>
[   54.588716][ T6284] tipc: Disabling bearer <eth:syzkaller0>
[   54.759419][ T6305] bridge0: port 3(batadv1) entered blocking state
[   54.761737][ T6305] bridge0: port 3(batadv1) entered disabled state
[   54.767354][ T6305] batadv1: entered allmulticast mode
[   54.770150][ T6305] batadv1: entered promiscuous mode
[   54.808282][ T6308] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   54.810723][ T6308] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[   54.814094][ T6308] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   54.818143][ T6308] netlink: 'syz.1.106': attribute type 2 has an invalid length.
[   54.895781][ T6319] hsr_slave_0: left promiscuous mode
[   54.898067][ T6319] hsr_slave_1: left promiscuous mode
[   54.987400][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.993182][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.997216][ T6329] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[   55.004542][ T6329] bond0: (slave vcan0): Error -95 calling set_mac_address
[   55.012284][ T6332] bond0: (slave dummy0): Releasing backup interface
[   55.017522][ T6332] bridge_slave_1: left allmulticast mode
[   55.019582][ T6332] bridge_slave_1: left promiscuous mode
[   55.021385][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.025010][ T6332] veth0_to_bond: left allmulticast mode
[   55.026833][ T6332] veth0_to_bond: left promiscuous mode
[   55.028702][ T6332] bridge2: port 2(veth0_to_bond) entered disabled state
[   55.032084][ T6332] bond0: (slave bond_slave_0): Releasing backup interface
[   55.036406][ T6332] bond0: (slave bond_slave_1): Releasing backup interface
[   55.041488][ T6332] team0: Port device team_slave_1 removed
[   55.050154][ T6332] veth3: left allmulticast mode
[   55.051724][ T6332] veth3: left promiscuous mode
[   55.053336][ T6332] bridge2: port 1(veth3) entered disabled state
[   55.060401][ T6333] gretap1: entered promiscuous mode
[   55.063061][ T6333] bond0: (slave gretap1): making interface the new active one
[   55.065917][ T6333] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   55.073166][ T6329] macvlan2: entered promiscuous mode
[   55.075653][ T6329] macvlan2: entered allmulticast mode
[   55.078260][ T6329] bond0: entered promiscuous mode
[   55.080893][ T6329] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   55.085804][ T6329] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   55.090889][ T6329] bond0: left promiscuous mode
[   55.180136][ T6341] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   55.187151][ T6341] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   55.190593][ T6341] bond1 (unregistering): Released all slaves
[   55.250517][ T6352] batadv_slave_1: entered promiscuous mode
[   55.253077][ T6352] batadv_slave_1: left promiscuous mode
[   55.264834][ T5853] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   55.268554][ T5853] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   55.305586][ T6354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.315674][ T6358] 8021q: adding VLAN 0 to HW filter on device bond4
[   55.323295][ T6358] vlan1: entered promiscuous mode
[   55.325256][ T6358] bond4: entered promiscuous mode
[   55.326910][ T6358] vlan1: entered allmulticast mode
[   55.328623][ T6358] bond4: entered allmulticast mode
[   55.333918][ T6358] bond4: (slave gretap2): making interface the new active one
[   55.336849][ T6358] gretap2: entered promiscuous mode
[   55.338936][ T6358] gretap2: entered allmulticast mode
[   55.341153][ T6358] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   55.357977][ T6354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.410344][ T6354] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.481198][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.484587][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.530997][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.537703][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.602144][ T6354] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.611091][ T5874] syz0: Port: 1 Link DOWN
[   55.613177][ T6384] hsr_slave_0: left promiscuous mode
[   55.620080][ T6384] hsr_slave_1: left promiscuous mode
[   55.628666][ T5853] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.632391][ T5853] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.637246][ T5853] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.640676][ T5853] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.671165][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.682966][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.703562][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.716042][ T5873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.812981][ T6393] pim6reg1: entered promiscuous mode
[   55.818342][ T6393] pim6reg1: entered allmulticast mode
[   55.862719][ T6397] openvswitch: netlink: Flow actions attr not present in new flow.
[   55.932906][ T6405] 8021q: VLANs not supported on caif0
[   55.951562][ T6407] NCSI netlink: No device for ifindex 0
[   55.968912][ T6407] 8021q: adding VLAN 0 to HW filter on device bond5
[   55.973738][ T6407] bond0: (slave bond5): Enslaving as an active interface with a down link
[   56.013824][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.268663][ T6446] veth1_macvtap: left promiscuous mode
[   56.270987][ T6446] macsec0: entered promiscuous mode
[   56.273201][ T6446] macsec0: entered allmulticast mode
[   56.281200][ T6446] veth1_macvtap: entered promiscuous mode
[   56.283116][ T6446] veth1_macvtap: entered allmulticast mode
[   56.289268][ T6446] macsec0: left promiscuous mode
[   56.293739][ T6446] macsec0: left allmulticast mode
[   56.304344][ T6446] veth1_macvtap: left allmulticast mode
[   56.502574][ T6462] nbd: illegal input index 65508
[   56.572679][ T5850] hid-generic 0005:16C0:05DF.0001: unknown main item tag 0x0
[   56.576861][ T6471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   56.583136][ T5850] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   56.591330][ T6471] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   56.615237][ T6474] 8021q: adding VLAN 0 to HW filter on device bond6
[   56.667557][ T6485] macvtap1: entered promiscuous mode
[   56.669850][ T6485] dummy0: entered promiscuous mode
[   56.672093][ T6485] macvtap1: entered allmulticast mode
[   56.675238][ T6485] dummy0: entered allmulticast mode
[   56.743293][ T6487] vti0: entered promiscuous mode
[   56.745483][ T6487] vti0: entered allmulticast mode
[   56.763483][ T6489] bridge_slave_0: left allmulticast mode
[   56.766307][ T6489] bridge_slave_0: left promiscuous mode
[   56.768218][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.771599][ T6489] bridge_slave_1: left allmulticast mode
[   56.773935][ T6489] bridge_slave_1: left promiscuous mode
[   56.776366][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.779713][ T6489] : (slave bond_slave_0): Releasing backup interface
[   56.783285][ T6489] : (slave bond_slave_1): Releasing backup interface
[   56.787586][ T6489] team0: Port device team_slave_0 removed
[   56.790302][ T6489] team0: Port device team_slave_1 removed
[   56.792730][ T6489] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.796203][ T6489] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.799508][ T6489] batadv1: left allmulticast mode
[   56.801492][ T6489] batadv1: left promiscuous mode
[   56.803647][ T6489] bridge0: port 3(batadv1) entered disabled state
[   56.807348][ T6489] bond0: (slave gretap1): Releasing active interface
[   56.810921][ T6489] bond4: (slave gretap2): Releasing active interface
[   56.813109][ T6489] gretap2: left promiscuous mode
[   56.814925][ T6489] gretap2: left allmulticast mode
[   56.818330][ T6489] bond0: (slave bond5): Releasing active interface
[   57.102230][   T10] cfg80211: failed to load regulatory.db
[   57.176008][ T6516] gre0: left allmulticast mode
[   57.209845][ T6516] 8021q: adding VLAN 0 to HW filter on device 
[   57.212714][ T6516] 8021q: adding VLAN 0 to HW filter on device team0
[   57.218004][ T6516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.269172][ T6525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.273400][   T10] IPVS: starting estimator thread 0...
[   57.276598][ T6525] tipc: Failed to remove unknown binding: 66,1,1/0:1230247336/1230247338
[   57.294395][ T6525] tipc: Failed to remove unknown binding: 66,1,1/0:1230247336/1230247338
[   57.297619][ T6525] tipc: Failed to remove unknown binding: 66,1,1/0:1230247336/1230247338
[   57.301956][ T6525] __nla_validate_parse: 36 callbacks suppressed
[   57.301963][ T6525] netlink: 788 bytes leftover after parsing attributes in process `syz.1.163'.
[   57.333092][ T6532] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   57.336510][ T6532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.165'.
[   57.347882][ T6533] validate_nla: 14 callbacks suppressed
[   57.347903][ T6533] netlink: 'syz.1.165': attribute type 10 has an invalid length.
[   57.356338][ T6533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.165'.
[   57.364343][ T6530] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.367656][ T6530] bond0: (slave bond1): Enslaving as an active interface with an up link
[   57.372776][ T6533] bridge0: port 1(dummy0) entered blocking state
[   57.376022][ T6533] bridge0: port 1(dummy0) entered disabled state
[   57.379549][ T6533] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   57.391501][ T6526] IPVS: using max 137 ests per chain, 328800 per kthread
[   57.433860][ T6539] netlink: 308 bytes leftover after parsing attributes in process `syz.1.167'.
[   57.437240][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'.
[   57.440222][ T6539] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   57.518545][ T6546] syzkaller0: entered promiscuous mode
[   57.520931][ T6546] syzkaller0: entered allmulticast mode
[   57.826215][ T6548] netlink: 'syz.1.170': attribute type 1 has an invalid length.
[   57.838043][ T6548] 8021q: adding VLAN 0 to HW filter on device bond8
[   57.848904][ T6548] bond8: (slave ip6erspan0): making interface the new active one
[   57.852995][ T6548] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link
[   58.031226][ T6557] tap0: tun_chr_ioctl cmd 1074025680
[   58.102965][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[   58.490702][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'.
[   58.499115][ T6564] pim6reg: entered allmulticast mode
[   58.502023][ T6564] pim6reg: left allmulticast mode
[   58.616259][ T5873] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.619948][ T5873] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.625440][ T5873] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.633354][ T5873] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.434407][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   59.603470][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.606610][ T6582] IPv6: NLM_F_CREATE should be set when creating new route
[   59.609675][ T6582] IPv6: NLM_F_CREATE should be set when creating new route
[   59.612992][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.985167][ T6596] pimreg: entered allmulticast mode
[   60.017833][ T6598] 8021q: adding VLAN 0 to HW filter on device bond9
[   60.021144][ T6598] bridge0: port 1(bond9) entered blocking state
[   60.023889][ T6598] bridge0: port 1(bond9) entered disabled state
[   60.026850][ T6598] bond9: entered allmulticast mode
[   60.030139][ T6598] bond9: entered promiscuous mode
[   60.054873][ T6602] netlink: 830 bytes leftover after parsing attributes in process `syz.1.187'.
[   60.125599][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'.
[   60.189020][ T6616] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[   60.193587][ T6616] 8021q: adding VLAN 0 to HW filter on device team0
[   60.197892][ T6616] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.202229][ T6616] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[   60.207333][ T6616] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   60.211980][ T6616] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   60.217306][ T6616] netlink: 'syz.2.191': attribute type 1 has an invalid length.
[   60.252287][ T6618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.259633][ T6618] syzkaller0: entered promiscuous mode
[   60.262001][ T6618] syzkaller0: entered allmulticast mode
[   60.270623][ T6618] tipc: Resetting bearer <eth:syzkaller0>
[   60.274217][ T6617] tipc: Resetting bearer <eth:syzkaller0>
[   60.278205][ T6617] tipc: Disabling bearer <eth:syzkaller0>
[   60.283179][ T6620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.286860][ T6620] syzkaller0: entered promiscuous mode
[   60.288842][ T6620] syzkaller0: entered allmulticast mode
[   60.293264][ T6620] netlink: 340 bytes leftover after parsing attributes in process `syz.1.193'.
[   60.342916][ T6619] tipc: Resetting bearer <eth:syzkaller0>
[   60.350453][ T6619] tipc: Disabling bearer <eth:syzkaller0>
[   60.492578][ T6637] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   60.505181][ T6637] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.526030][ T6640] netlink: 'syz.2.198': attribute type 15 has an invalid length.
[   60.607132][ T6648] netlink: 'syz.1.195': attribute type 16 has an invalid length.
[   60.609755][ T6648] netlink: 'syz.1.195': attribute type 17 has an invalid length.
[   60.618883][ T6648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.709709][ T6646] geneve0: entered promiscuous mode
[   60.773155][ T6663] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   60.776853][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.816425][ T6667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.819585][ T6666] syzkaller0: entered promiscuous mode
[   60.822006][ T6666] syzkaller0: entered allmulticast mode
[   60.827990][ T6665] tipc: Resetting bearer <eth:syzkaller0>
[   60.832898][ T6665] tipc: Disabling bearer <eth:syzkaller0>
[   60.906424][ T6674] 8021q: adding VLAN 0 to HW filter on device bond4
[   60.910266][ T6674] bond3: (slave bond4): making interface the new active one
[   60.913942][ T6674] bond3: (slave bond4): Enslaving as an active interface with an up link
[   60.919830][ T6678] Bluetooth: MGMT ver 1.23
[   60.964070][ T6685] k*]: entered promiscuous mode
[   60.978923][ T6684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.984188][ T6685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.041951][ T6686] Illegal XDP return value 16128 on prog  (id 66) dev syz_tun, expect packet loss!
[   61.095022][ T6700] syzkaller0: entered promiscuous mode
[   61.096866][ T6700] syzkaller0: entered allmulticast mode
[   61.126822][ T6704] netlink: set zone limit has 4 unknown bytes
[   61.181246][ T6709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.184460][ T6709] IPv6: NLM_F_CREATE should be set when creating new route
[   61.187461][ T6709] IPv6: NLM_F_CREATE should be set when creating new route
[   61.191236][ T6709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   61.361252][ T6724] macvlan1: entered promiscuous mode
[   61.365049][ T6724] ipvlan0: entered promiscuous mode
[   61.368904][ T6724] ipvlan0: left promiscuous mode
[   61.374599][ T6724] macvlan1: left promiscuous mode
[   61.495607][ T6745] 8021q: adding VLAN 0 to HW filter on device bond5
[   61.513291][ T6745] bond5: (slave veth5): Enslaving as an active interface with a down link
[   61.524471][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[   61.530165][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.532481][ T6745] bond5: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   61.592790][ T6752] netlink: 'syz.2.228': attribute type 11 has an invalid length.
[   61.720343][ T6773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.722973][ T6773] syzkaller0: entered promiscuous mode
[   61.726005][ T6773] syzkaller0: entered allmulticast mode
[   61.747683][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[   61.753306][ T6776] pim6reg: entered allmulticast mode
[   61.758558][ T6772] tipc: Resetting bearer <eth:syzkaller0>
[   61.771672][ T6772] tipc: Disabling bearer <eth:syzkaller0>
[   61.779703][ T6776] pim6reg: left allmulticast mode
[   61.838192][ T6786] team0: Refused to change device type
[   61.986051][ T6805] veth6: entered allmulticast mode
[   62.166711][ T6824] bond0: entered promiscuous mode
[   62.172634][ T6824] bond0: left promiscuous mode
[   63.186820][ T6845] 8021q: adding VLAN 0 to HW filter on device bond6
[   63.244828][ T6845] bond0: (slave bond6): Enslaving as an active interface with an up link
[   63.275054][ T6853] __nla_validate_parse: 49 callbacks suppressed
[   63.275066][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   63.310822][ T6853] ip6gre2: entered promiscuous mode
[   63.373063][ T6859] veth0: entered promiscuous mode
[   63.378664][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   63.471367][ T6861] validate_nla: 49 callbacks suppressed
[   63.471384][ T6861] netlink: 'syz.0.253': attribute type 83 has an invalid length.
[   63.482004][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.487307][ T6861] bond0: (slave rose0): Enslaving as an active interface with an up link
[   63.498067][ T6861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   63.502222][ T6861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   63.883297][ T6888] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   63.949737][ T6891] ieee802154 phy0 wpan0: encryption failed: -22
[   63.980541][ T6895] netlink: 'syz.1.258': attribute type 1 has an invalid length.
[   63.992552][ T6895] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[   63.997868][ T6895] bond1: (slave vcan0): Error -95 calling set_mac_address
[   64.003242][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'.
[   64.013217][ T6897] sit3: entered promiscuous mode
[   64.047908][ T6901] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[   64.052485][ T6901] bond1: (slave vcan0): Error -95 calling set_mac_address
[   64.118546][ T6904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.260'.
[   64.124677][ T6904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.129251][ T6904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.135304][ T6904] bond0 (unregistering): (slave team0): Releasing backup interface
[   64.140272][ T6904] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[   64.143948][ T6904] bond0 (unregistering): Released all slaves
[   64.148754][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'.
[   64.238558][ T6919] netlink: 'syz.1.263': attribute type 2 has an invalid length.
[   64.258838][ T6924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.266120][ T6922] syzkaller0: entered promiscuous mode
[   64.268367][ T6922] syzkaller0: entered allmulticast mode
[   64.270359][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   64.279673][ T6922] tipc: Resetting bearer <eth:syzkaller0>
[   64.282868][ T6922] tipc: Disabling bearer <eth:syzkaller0>
[   64.341258][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'.
[   64.517342][ T6945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.271'.
[   64.677131][ T6965] ksmbd: Unknown IPC event: 3, ignore.
[   64.729044][ T6971] netlink: 14 bytes leftover after parsing attributes in process `syz.1.277'.
[   64.732772][ T6971] hsr_slave_0: left promiscuous mode
[   64.736044][ T6971] hsr_slave_1: left promiscuous mode
[   64.780242][ T6973] netlink: 'syz.1.278': attribute type 3 has an invalid length.
[   64.877735][ T6975] raw_sendmsg: syz.1.279 forgot to set AF_INET. Fix it!
[   64.903786][ T6979] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'.
[   64.993236][ T6992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.000001][ T6993] syzkaller0: entered promiscuous mode
[   65.002519][ T6993] syzkaller0: entered allmulticast mode
[   65.030425][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   65.036568][ T6993] tipc: Disabling bearer <eth:syzkaller0>
[   65.296831][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.300322][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.303523][ T7017] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   65.311018][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.320540][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.327690][ T7017] bond8: (slave ip6erspan0): Releasing active interface
[   65.332451][ T7017] bond9: left allmulticast mode
[   65.336477][ T7017] bond9: left promiscuous mode
[   65.338140][ T7017] bridge0: port 1(bond9) entered disabled state
[   65.349700][ T7017] netlink: 'syz.1.291': attribute type 10 has an invalid length.
[   65.356359][ T7017] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   65.361418][ T7017] 8021q: adding VLAN 0 to HW filter on device 
[   65.364686][ T7017] net_ratelimit: 1 callbacks suppressed
[   65.364697][ T7017] wlan1: mtu less than device minimum
[   65.369208][ T7017] : (slave wlan1): Error -22 calling dev_set_mtu
[   65.378265][ T7017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   65.382127][ T7017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   65.514165][ T7034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.529580][ T7034] syzkaller0: entered promiscuous mode
[   65.531457][ T7034] syzkaller0: entered allmulticast mode
[   65.540795][ T7034] tipc: Resetting bearer <eth:syzkaller0>
[   65.544878][ T7033] tipc: Resetting bearer <eth:syzkaller0>
[   65.551434][ T7033] tipc: Disabling bearer <eth:syzkaller0>
[   65.797781][ T7048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.800383][ T7049] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   65.812542][ T7048] syzkaller0: entered promiscuous mode
[   65.814467][ T7048] syzkaller0: entered allmulticast mode
[   65.819741][ T7047] tipc: Resetting bearer <eth:syzkaller0>
[   65.842544][ T7047] tipc: Disabling bearer <eth:syzkaller0>
[   66.006681][ T7059] netlink: 'syz.0.301': attribute type 10 has an invalid length.
[   66.012582][ T7059] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   66.088129][ T7065] bridge0: Device is already in use.
[   66.137111][ T7067] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   66.143510][ T7067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.261251][ T7077] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   66.269295][ T7077] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   66.285775][ T7079] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   66.290413][ T7079] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   66.557165][ T7119] pimreg3: entered allmulticast mode
[   66.650468][ T7127] syzkaller1: entered promiscuous mode
[   66.652299][ T7127] syzkaller1: entered allmulticast mode
[   66.776353][ T7129] netlink: 'syz.2.320': attribute type 4 has an invalid length.
[   66.791346][ T5853] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.795470][ T5853] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.801256][ T5853] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.808249][ T5853] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   66.817361][ T7134] netlink: 'syz.0.321': attribute type 8 has an invalid length.
[   66.822835][ T7134] bond0: entered promiscuous mode
[   66.826263][ T7134] bond1: entered promiscuous mode
[   66.828635][ T7134] bond6: entered promiscuous mode
[   66.830860][ T7134] bridge0: entered promiscuous mode
[   66.833651][ T7134] bond0: left promiscuous mode
[   66.836071][ T7134] bond1: left promiscuous mode
[   66.838286][ T7134] bond6: left promiscuous mode
[   66.840454][ T7134] bridge0: left promiscuous mode
[   66.847783][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.851945][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.101334][ T7164] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   67.107366][ T7164] bond2: (slave wireguard0): Error -95 calling set_mac_address
[   67.335692][ T7187] bridge_slave_0: left allmulticast mode
[   67.337668][ T7187] bridge_slave_0: left promiscuous mode
[   67.339684][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.342656][ T7187] bridge_slave_1: left allmulticast mode
[   67.345066][ T7187] bridge_slave_1: left promiscuous mode
[   67.346859][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.350203][ T7187] team0: Port device team_slave_0 removed
[   67.352740][ T7187] team0: Port device team_slave_1 removed
[   67.355137][ T7187] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.358828][ T7187] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.362172][ T7187] team0: Port device geneve0 removed
[   67.366523][ T7187] rdma_op ffff8881246709f0 conn xmit_rdma 0000000000000000
[   67.370553][ T7187] netlink: 'syz.2.334': attribute type 10 has an invalid length.
[   67.529913][ T7204] 8021q: adding VLAN 0 to HW filter on device team0
[   67.533855][ T7204] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.558440][ T7206] openvswitch: netlink: IP tunnel TTL not specified.
[   67.755472][ T7228] macsec1: entered promiscuous mode
[   67.758034][ T7228] bond0: entered promiscuous mode
[   67.761194][ T7228] bond0: left promiscuous mode
[   68.226047][ T7266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.229936][ T7266] syzkaller0: entered promiscuous mode
[   68.233754][ T7266] syzkaller0: entered allmulticast mode
[   68.240493][ T7266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   68.247272][ T7266] tipc: Resetting bearer <eth:syzkaller0>
[   68.250727][ T7265] tipc: Resetting bearer <eth:syzkaller0>
[   68.253754][ T7265] tipc: Disabling bearer <eth:syzkaller0>
[   68.422334][ T7274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.442664][ T7276] tipc: Disabling bearer <eth:syzkaller0>
[   68.707137][ T7283] __nla_validate_parse: 31 callbacks suppressed
[   68.707147][ T7283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'.
[   68.707443][ T7284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.358'.
[   68.735828][ T7279] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.745021][ T7279] syzkaller0: entered promiscuous mode
[   68.746829][ T7279] syzkaller0: entered allmulticast mode
[   68.778161][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[   68.784160][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'.
[   68.790763][ T7278] tipc: Resetting bearer <eth:syzkaller0>
[   68.795001][ T7278] tipc: Disabling bearer <eth:syzkaller0>
[   68.862848][ T7294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.878837][ T7294] tipc: Disabling bearer <eth:syzkaller0>
[   68.924004][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[   68.933645][ T5294] udevd[5294]: worker [6097] terminated by signal 33 (Unknown signal 33)
[   68.966651][ T7314] validate_nla: 3 callbacks suppressed
[   68.966664][ T7314] netlink: 'syz.1.365': attribute type 2 has an invalid length.
[   68.974200][ T7314] : entered promiscuous mode
[   69.022383][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   69.025928][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[   69.051820][ T7324] macvtap1: entered allmulticast mode
[   69.053597][ T7324] veth0_macvtap: entered allmulticast mode
[   69.171782][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'.
[   69.186913][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'.
[   69.221305][ T7349] netlink: 'syz.1.374': attribute type 6 has an invalid length.
[   69.301905][ T7351] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.326587][ T7356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.376'.
[   69.342143][ T7356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.347914][ T7355] tipc: Disabling bearer <eth:syzkaller0>
[   69.504639][ T7365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.507508][ T7366] syzkaller0: entered promiscuous mode
[   69.509806][ T7366] syzkaller0: entered allmulticast mode
[   69.519564][ T7366] tipc: Resetting bearer <eth:syzkaller0>
[   69.534754][ T7366] tipc: Resetting bearer <eth:syzkaller0>
[   69.538964][ T7366] tipc: Disabling bearer <eth:syzkaller0>
[   69.658069][ T7371] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[   69.675166][ T7371] gretap3: entered allmulticast mode
[   69.679224][ T7371] bond12: (slave gretap3): making interface the new active one
[   69.682775][ T7371] bond12: (slave gretap3): Enslaving as an active interface with an up link
[   69.988830][ T7391] sctp: [Deprecated]: syz.2.385 (pid 7391) Use of int in max_burst socket option deprecated.
[   69.988830][ T7391] Use struct sctp_assoc_value instead
[   69.998511][ T7391] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   70.054337][ T7395] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.096037][ T7395] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.106924][ T7396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.109984][ T7396] IPv6: NLM_F_CREATE should be set when creating new route
[   70.146838][ T7395] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.186189][ T7395] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.232757][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.238410][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.243245][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.248471][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.979791][ T7409] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   71.115752][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.457930][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.461634][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.503245][ T7419] bridge0: port 1(erspan0) entered blocking state
[   71.505599][ T7419] bridge0: port 1(erspan0) entered disabled state
[   71.507832][ T7419] erspan0: entered allmulticast mode
[   71.510187][ T7419] erspan0: entered promiscuous mode
[   71.512240][ T7419] bridge0: port 1(erspan0) entered blocking state
[   71.514616][ T7419] bridge0: port 1(erspan0) entered listening state
[   71.568762][ T7428] erspan0: left allmulticast mode
[   71.570856][ T7428] erspan0: left promiscuous mode
[   71.572985][ T7428] bridge0: port 1(erspan0) entered disabled state
[   71.642060][ T7431] netlink: 'syz.1.396': attribute type 1 has an invalid length.
[   71.672201][ T7441] syz_tun: entered allmulticast mode
[   71.680133][ T7441] dvmrp1: entered allmulticast mode
[   71.682202][ T7440] syz_tun: left allmulticast mode
[   71.765746][ T7457] trusted_key: syz.2.401 sent an empty control message without MSG_MORE.
[   71.769776][ T7457] netlink: 'syz.2.401': attribute type 13 has an invalid length.
[   71.772420][ T7457] netlink: 'syz.2.401': attribute type 17 has an invalid length.
[   71.822953][ T7457] 8021q: adding VLAN 0 to HW filter on device team0
[   71.829250][ T7457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.949447][ T7468] veth9: entered promiscuous mode
[   72.130719][ T7480] tipc: Cannot configure node identity twice
[   72.137302][ T7480] bridge0: port 1(batadv0) entered blocking state
[   72.140237][ T7480] bridge0: port 1(batadv0) entered disabled state
[   72.143136][ T7480] batadv0: entered allmulticast mode
[   72.146288][ T7480] batadv0: entered promiscuous mode
[   72.197830][ T7484] netlink: 'syz.1.411': attribute type 10 has an invalid length.
[   72.201717][ T7484] bridge0: port 2(dummy0) entered blocking state
[   72.205154][ T7484] bridge0: port 2(dummy0) entered disabled state
[   72.209038][ T7484] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   72.246894][ T7486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.250057][ T7486] syzkaller0: entered promiscuous mode
[   72.252408][ T7486] syzkaller0: entered allmulticast mode
[   72.257597][ T7486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   72.265439][ T7486] tipc: Resetting bearer <eth:syzkaller0>
[   72.268545][ T7485] tipc: Resetting bearer <eth:syzkaller0>
[   72.272628][ T7485] tipc: Disabling bearer <eth:syzkaller0>
[   72.362501][ T7490] veth1_to_bond: entered allmulticast mode
[   72.365618][ T7490] bond_slave_1: entered promiscuous mode
[   72.372969][ T7489] bond_slave_1: left promiscuous mode
[   72.375224][ T7489] veth1_to_bond: left allmulticast mode
[   72.410060][ T7503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.417358][ T7503] netlink: 'syz.2.417': attribute type 1 has an invalid length.
[   72.421087][ T7505] vlan4: entered promiscuous mode
[   72.423308][ T7505] bridge0: entered promiscuous mode
[   72.507507][ T7511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.510165][ T7511] syzkaller0: entered promiscuous mode
[   72.512158][ T7511] syzkaller0: entered allmulticast mode
[   72.517108][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[   72.523214][ T7510] tipc: Disabling bearer <eth:syzkaller0>
[   72.644949][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   72.648334][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   72.684959][   T10] IPVS: starting estimator thread 0...
[   72.727968][ T7536] sctp: [Deprecated]: syz.2.428 (pid 7536) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.727968][ T7536] Use struct sctp_sack_info instead
[   72.774929][ T7530] IPVS: using max 137 ests per chain, 328800 per kthread
[   72.848755][ T7554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.851515][ T7554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.951841][ T7559] netlink: 'syz.2.436': attribute type 2 has an invalid length.
[   72.988898][ T7562] bond14: (slave geneve2): making interface the new active one
[   72.992074][ T7562] bond14: (slave geneve2): Enslaving as an active interface with an up link
[   72.997875][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   73.000807][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   73.003788][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   73.007925][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   73.041407][ T7573] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   73.197446][ T7596] 8021q: adding VLAN 0 to HW filter on device bond16
[   73.207946][ T7596] bond15: (slave bond16): Enslaving as an active interface with an up link
[   73.217731][ T7596] 8021q: adding VLAN 0 to HW filter on device bond15
[   73.240920][ T7600] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   73.243893][ T7600] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   73.280473][ T7600] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   73.283423][ T7600] macsec1: entered promiscuous mode
[   73.285823][ T7600] macsec1: entered allmulticast mode
[   73.288002][ T7600] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   73.293380][ T7600] macsec2: entered promiscuous mode
[   73.296057][ T7600] macsec2: entered allmulticast mode
[   73.346014][ T7605] 8021q: adding VLAN 0 to HW filter on device bond17
[   73.614352][ T7628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.618047][ T7628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   73.656823][ T7628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.661152][ T7628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   73.758191][ T7628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.762767][ T7628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   73.817732][ T7628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.822172][ T7628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   73.873130][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.876837][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   73.883585][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.887650][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   73.898728][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.901438][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   73.904195][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.907149][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   73.929343][ T7631] __nla_validate_parse: 66 callbacks suppressed
[   73.929352][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[   73.939436][ T5882] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.939474][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'.
[   73.942215][ T5882] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.948709][ T5882] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.953003][ T5882] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.975992][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[   73.982339][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'.
[   74.007339][ T7636] C: renamed from team_slave_0
[   74.009763][ T7636] validate_nla: 7 callbacks suppressed
[   74.009770][ T7636] netlink: 'syz.2.458': attribute type 4 has an invalid length.
[   74.014125][ T7636] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   74.032268][ T7638] netlink: 'syz.1.459': attribute type 21 has an invalid length.
[   74.122583][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'.
[   74.161020][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'.
[   74.164028][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'.
[   74.198941][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'.
[   74.201954][ T7654] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'.
[   74.257910][ T7659] netlink: 200 bytes leftover after parsing attributes in process `syz.1.466'.
[   74.299224][ T7659] team0: Mode changed to "loadbalance"
[   74.301376][ T7660] team0: Unable to change to the same mode the team is in
[   74.415268][ T7671] netlink: 'syz.2.469': attribute type 1 has an invalid length.
[   74.429296][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.438093][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.441063][ T7671] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[   74.446890][ T7671] bond0: (slave vcan1): Error -95 calling set_mac_address
[   74.487390][ T7678] gretap1: entered promiscuous mode
[   74.490722][ T7678] bond0: (slave gretap1): making interface the new active one
[   74.493316][ T7678] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   74.503884][ T7677] bond12: (slave gretap3): Releasing active interface
[   74.510623][ T7677] batadv0: left allmulticast mode
[   74.512794][ T7677] batadv0: left promiscuous mode
[   74.516594][ T7677] bridge0: port 1(batadv0) entered disabled state
[   74.522552][ T7677] bond14: (slave geneve2): Releasing active interface
[   74.529935][ T7677] bond15: (slave bond16): Releasing backup interface
[   74.543455][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   74.560793][ T7671] syzkaller1: entered promiscuous mode
[   74.563034][ T7671] syzkaller1: entered allmulticast mode
[   74.568713][ T7671] macvlan0: entered promiscuous mode
[   74.570791][ T7671] macvlan0: entered allmulticast mode
[   74.573429][ T7671] bond0: entered promiscuous mode
[   74.575704][ T7671] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   74.579703][ T7671] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   74.585497][ T7671] bond0: left promiscuous mode
[   74.592731][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   74.598209][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   74.601035][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   74.607911][ T7680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.610807][ T7680] syzkaller0: entered promiscuous mode
[   74.612695][ T7680] syzkaller0: entered allmulticast mode
[   74.619055][ T7680] tipc: Resetting bearer <eth:syzkaller0>
[   74.621585][ T7679] tipc: Resetting bearer <eth:syzkaller0>
[   74.625457][ T7679] tipc: Disabling bearer <eth:syzkaller0>
[   74.752765][ T7683] syzkaller0: entered promiscuous mode
[   74.754897][ T7683] syzkaller0: entered allmulticast mode
[   74.758036][ T7683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.762195][ T7682] tipc: Resetting bearer <eth:syzkaller0>
[   74.767427][ T7682] tipc: Disabling bearer <eth:syzkaller0>
[   74.885048][ T7686] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.888111][ T7686] bond0: (slave bond3): Enslaving as an active interface with a down link
[   74.992515][ T7690] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[   75.051107][ T7686] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   75.199523][ T7699] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[   75.215599][ T7699] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[   75.220041][ T7699] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   75.226368][ T7699] bond9: (slave vcan1): making interface the new active one
[   75.229660][ T7699] bond9: (slave vcan1): Enslaving as an active interface with an up link
[   75.236956][ T7699] 8021q: adding VLAN 0 to HW filter on device bond9
[   75.263360][ T7702] netlink: 'syz.0.477': attribute type 21 has an invalid length.
[   75.594769][   T27] wlan1: Trigger new scan to find an IBSS to join
[   76.151839][ T7729] bridge4: port 1(veth1) entered blocking state
[   76.154429][ T7729] bridge4: port 1(veth1) entered disabled state
[   76.156769][ T7729] veth1: entered allmulticast mode
[   76.158884][ T7729] veth1: entered promiscuous mode
[   76.162874][ T7729] bridge4: port 2(veth0_to_bond) entered blocking state
[   76.165759][ T7729] bridge4: port 2(veth0_to_bond) entered disabled state
[   76.168501][ T7729] veth0_to_bond: entered allmulticast mode
[   76.171336][ T7729] veth0_to_bond: entered promiscuous mode
[   76.180255][ T7729] netlink: 'syz.0.485': attribute type 8 has an invalid length.
[   76.187634][ T7729] vlan0: entered allmulticast mode
[   76.189995][ T7729] bridge4: port 3(vlan0) entered blocking state
[   76.192517][ T7729] bridge4: port 3(vlan0) entered disabled state
[   76.196088][ T7729] vlan0: entered promiscuous mode
[   76.222053][ T7731] netlink: 'syz.0.486': attribute type 7 has an invalid length.
[   76.243968][ T7731] 8021q: adding VLAN 0 to HW filter on device bond10
[   76.248095][ T7731] bridge5: port 1(bond10) entered blocking state
[   76.250935][ T7731] bridge5: port 1(bond10) entered disabled state
[   76.253778][ T7731] bond10: entered allmulticast mode
[   76.260188][ T7731] bridge5: port 1(bond10) entered blocking state
[   76.262972][ T7731] bridge5: port 1(bond10) entered forwarding state
[   76.267239][ T3656] bridge5: port 1(bond10) entered disabled state
[   76.465422][ T7744] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   76.796056][ T7775] dummy0: left allmulticast mode
[   76.842955][ T7775] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   76.858270][ T7777] geneve3: entered promiscuous mode
[   76.860543][ T7777] geneve3: entered allmulticast mode
[   76.863646][ T5853] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.868210][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   76.871628][ T5853] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.874969][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   76.878451][ T5853] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.885116][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   76.888319][ T5853] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   76.891721][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   76.913261][ T7783] netlink: 'syz.2.500': attribute type 1 has an invalid length.
[   76.923097][ T7783] 8021q: adding VLAN 0 to HW filter on device bond4
[   76.937095][ T7780] pim6reg1: entered promiscuous mode
[   76.939370][ T7780] pim6reg1: entered allmulticast mode
[   77.010728][ T7790] bond0: (slave gretap1): Releasing active interface
[   77.015123][ T7790] bond0: (slave bond3): Releasing active interface
[   77.212482][ T7824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.256902][ T7823] tipc: Disabling bearer <eth:syzkaller0>
[   77.323940][ T7830] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   77.378091][ T7834] syzkaller1: entered promiscuous mode
[   77.380226][ T7834] syzkaller1: entered allmulticast mode
[   77.657944][ T7846] netlink: 'syz.2.520': attribute type 10 has an invalid length.
[   78.031777][ T7853] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.038035][ T7853] syzkaller0: entered promiscuous mode
[   78.040397][ T7853] syzkaller0: entered allmulticast mode
[   78.047477][ T7853] tipc: Resetting bearer <eth:syzkaller0>
[   78.050773][ T7852] tipc: Resetting bearer <eth:syzkaller0>
[   78.054905][ T7852] tipc: Disabling bearer <eth:syzkaller0>
[   78.297202][ T7865] pim6reg1: entered promiscuous mode
[   78.299577][ T7865] pim6reg1: entered allmulticast mode
[   78.474296][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   78.474832][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.776483][ T7914] batadv_slave_0: entered promiscuous mode
[   78.891436][ T7930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.894090][ T7930] syzkaller0: entered promiscuous mode
[   78.897322][ T7930] syzkaller0: entered allmulticast mode
[   78.903503][ T7930] tipc: Resetting bearer <eth:syzkaller0>
[   78.962594][ T7942] sctp: [Deprecated]: syz.1.543 (pid 7942) Use of int in maxseg socket option.
[   78.962594][ T7942] Use struct sctp_assoc_value instead
[   78.976078][ T7944] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.998112][ T7948] gretap0: refused to change device tx_queue_len
[   79.000933][ T7948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   79.040817][ T7954] team0: Mode changed to "broadcast"
[   79.043845][ T7954] vlan0: entered promiscuous mode
[   79.053415][ T7944] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.058145][ T7954] tipc: Enabled bearer <eth:team0>, priority 0
[   79.076598][ T7959] __nla_validate_parse: 29 callbacks suppressed
[   79.076610][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[   79.111822][ T7944] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.168406][ T7944] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.236741][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.244467][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.252022][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.259517][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.447475][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'.
[   79.451528][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'.
[   79.839892][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'.
[   79.847643][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'.
[   79.904466][ T6006] tipc: Node number set to 645808461
[   79.940876][ T8048] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.054448][ T6006] tipc: Node number set to 3213385238
[   80.062527][ T8062] validate_nla: 7 callbacks suppressed
[   80.062542][ T8062] netlink: 'syz.2.563': attribute type 10 has an invalid length.
[   80.079527][ T8062] team0: Port device dummy0 added
[   80.087218][ T8065] netlink: 'syz.0.564': attribute type 21 has an invalid length.
[   80.087611][ T8062] netlink: 'syz.2.563': attribute type 10 has an invalid length.
[   80.109823][ T8062] team0: Port device dummy0 removed
[   80.124820][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'.
[   80.178879][ T8072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.565'.
[   80.183480][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'.
[   80.221055][ T8001] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   80.246505][ T8077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.248904][ T8076] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   80.252272][ T8077] syzkaller0: entered promiscuous mode
[   80.254170][ T8077] syzkaller0: entered allmulticast mode
[   80.259069][ T8076] openvswitch: netlink: IP tunnel dst address not specified
[   80.259072][ T8077] openvswitch: netlink: IP tunnel dst address not specified
[   80.332741][ T8075] tipc: Resetting bearer <eth:syzkaller0>
[   80.342996][ T8075] tipc: Disabling bearer <eth:syzkaller0>
[   80.474901][ T8090] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   80.959537][ T8104] netlink: 'syz.2.570': attribute type 4 has an invalid length.
[   80.965619][ T8105] netlink: 'syz.2.570': attribute type 4 has an invalid length.
[   81.020130][ T8108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.023371][ T8108] syzkaller0: entered promiscuous mode
[   81.026970][ T8108] syzkaller0: entered allmulticast mode
[   81.033511][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[   81.046537][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[   81.050764][ T8108] tipc: Disabling bearer <eth:syzkaller0>
[   81.148040][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'.
[   81.171387][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'.
[   81.176834][ T8126] sctp: [Deprecated]: syz.2.575 (pid 8126) Use of int in max_burst socket option deprecated.
[   81.176834][ T8126] Use struct sctp_assoc_value instead
[   81.225370][ T8130] openvswitch: netlink: Flow key attr not present in new flow.
[   81.273874][ T8139] IPv6: sit5: Disabled Multicast RS
[   81.594433][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout
[   83.048414][ T8176] dvmrp1: entered allmulticast mode
[   83.357024][ T8194] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   83.379943][ T8194] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.408724][ T8200] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   83.447871][ T8200] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   83.473390][ T8207] netlink: 'syz.0.598': attribute type 32 has an invalid length.
[   83.477000][ T8207] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   83.481585][ T8207] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[   83.491930][ T8200] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   83.517218][ T8213] batman_adv: batadv0: Adding interface: dummy0
[   83.519521][ T8213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.529360][ T8213] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   83.536036][ T8213] openvswitch: netlink: Flow key attr not present in new flow.
[   83.548175][ T8200] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   83.636636][ T7681] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   83.644025][ T7681] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   83.672727][ T8228] veth0_macvtap: left allmulticast mode
[   83.688018][ T7681] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.691476][ T7681] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.697702][ T8228] geneve2: entered promiscuous mode
[   83.699777][ T8228] geneve2: entered allmulticast mode
[   83.706077][ T7681] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.712126][ T7681] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   83.720305][ T7681] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   83.725787][ T7681] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   83.735526][ T8230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.738286][ T7681] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   83.741793][ T7681] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   83.746069][ T8230] syzkaller0: entered promiscuous mode
[   83.748308][ T8230] syzkaller0: entered allmulticast mode
[   83.751105][ T7681] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   83.755949][ T7681] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   83.763738][ T8230] tipc: Resetting bearer <eth:syzkaller0>
[   83.780819][ T8229] tipc: Resetting bearer <eth:syzkaller0>
[   83.785503][ T8229] tipc: Disabling bearer <eth:syzkaller0>
[   83.964855][ T8242] bridge7: entered promiscuous mode
[   83.966759][ T8242] bridge7: entered allmulticast mode
[   83.990972][ T8245] netlink: 'syz.0.608': attribute type 2 has an invalid length.
[   84.093296][ T8256] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[   84.098331][ T8256] __nla_validate_parse: 18 callbacks suppressed
[   84.098343][ T8256] netlink: 136 bytes leftover after parsing attributes in process `syz.0.610'.
[   84.108781][ T8256] netlink: 'syz.0.610': attribute type 2 has an invalid length.
[   84.112000][ T8256] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[   84.143943][ T8260] team0: Failed to send options change via netlink (err -105)
[   84.147723][ T8260] team0: Port device dummy0 added
[   84.219507][ T8264] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.223837][ T8264] syzkaller0: MTU too low for tipc bearer
[   84.226033][ T8264] tipc: Disabling bearer <eth:syzkaller0>
[   84.228523][ T8264] netlink: 9 bytes leftover after parsing attributes in process `syz.0.613'.
[   84.333553][ T8276] bond0: (slave bridge0): Releasing backup interface
[   84.338373][ T8276] bond0: (slave team0): Releasing backup interface
[   84.343187][ T8276] team0: Port device dummy0 removed
[   84.346424][ T8276] veth0_to_bond: left allmulticast mode
[   84.348386][ T8276] veth0_to_bond: left promiscuous mode
[   84.350682][ T8276] bridge4: port 2(veth0_to_bond) entered disabled state
[   84.359785][ T8276] bond0: (slave bond1): Releasing backup interface
[   84.362024][ T8276] bond0: (slave bond1): the permanent HWaddr of slave - 02:55:35:fa:0b:b2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   84.368957][ T8276] bond3: (slave bond4): Releasing backup interface
[   84.372712][ T8276] bond5: (slave veth5): Releasing active interface
[   84.376149][ T8276] bond0: (slave bond6): Releasing backup interface
[   84.379826][ T8276] bond9: (slave vcan1): Releasing backup interface
[   84.383736][ T8276] bridge4: port 1(veth1) entered disabled state
[   84.388949][ T8276] vlan0: left promiscuous mode
[   84.390949][ T8276] veth1: left promiscuous mode
[   84.393106][ T8276] bridge4: port 3(vlan0) entered disabled state
[   84.398143][ T8276] bond10: left allmulticast mode
[   84.399937][ T8276] bridge5: port 1(bond10) entered disabled state
[   84.425866][ T8280] 8021q: VLANs not supported on wg0
[   84.428279][ T8281] 8021q: VLANs not supported on wg0
[   84.445920][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'.
[   84.449018][ T8284] netlink: 64 bytes leftover after parsing attributes in process `syz.0.617'.
[   84.451919][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'.
[   84.503450][ T8289] dvmrp8: entered allmulticast mode
[   84.506204][ T8289] dvmrp8: left allmulticast mode
[   84.511041][ T8288] syzkaller0: MTU too low for tipc bearer
[   84.513078][ T8288] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.639910][ T8303] sctp: [Deprecated]: syz.2.622 (pid 8303) Use of int in max_burst socket option deprecated.
[   84.639910][ T8303] Use struct sctp_assoc_value instead
[   84.675350][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.623'.
[   84.693958][ T8305] ip6gre2: left promiscuous mode
[   84.700918][ T8305] sit3: left promiscuous mode
[   84.703071][ T8305] macvtap1: left allmulticast mode
[   84.705859][ T8305] gretap1: left promiscuous mode
[   84.709571][ T8305] geneve2: left promiscuous mode
[   84.714029][ T8305] geneve2: left allmulticast mode
[   84.718223][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[   84.721709][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[   84.725179][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[   84.729136][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[   84.753752][ T8309] pim6reg1: entered promiscuous mode
[   84.755984][ T8309] pim6reg1: entered allmulticast mode
[   84.762815][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'.
[   84.767952][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'.
[   84.782551][ T8312] 8021q: adding VLAN 0 to HW filter on device bond11
[   85.111134][ T8358] validate_nla: 3 callbacks suppressed
[   85.111144][ T8358] netlink: 'syz.1.631': attribute type 1 has an invalid length.
[   85.116568][ T8358] netlink: 228 bytes leftover after parsing attributes in process `syz.1.631'.
[   85.149459][ T8360] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.168966][ T8360] tipc: Disabling bearer <eth:syzkaller0>
[   85.283620][ T8373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.287051][ T8373] syzkaller0: entered promiscuous mode
[   85.289139][ T8373] syzkaller0: entered allmulticast mode
[   85.293515][ T8373] syzkaller0: mtu less than device minimum
[   85.297094][ T8372] tipc: Resetting bearer <eth:syzkaller0>
[   85.301768][ T8372] tipc: Disabling bearer <eth:syzkaller0>
[   85.446228][ T8387] netlink: 68 bytes leftover after parsing attributes in process `syz.1.638'.
[   85.463748][ T8389] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[   85.476503][ T8389] 8021q: adding VLAN 0 to HW filter on device bond7
[   85.510218][ T8392] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[   85.513611][ T8393] netlink: 'syz.2.641': attribute type 1 has an invalid length.
[   85.529662][ T8392] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[   85.533928][ T8392] bond8: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   85.540400][ T8392] bond8: (slave vcan1): making interface the new active one
[   85.543934][ T8392] bond8: (slave vcan1): Enslaving as an active interface with an up link
[   85.553192][ T8392] bond8: (slave vcan2): The slave device specified does not support setting the MAC address
[   85.559514][ T8392] bond8: (slave vcan2): Enslaving as a backup interface with an up link
[   85.565449][ T8393] bond8: (slave vcan3): The slave device specified does not support setting the MAC address
[   85.571455][ T8393] bond8: (slave vcan3): Enslaving as a backup interface with an up link
[   85.603685][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.732743][ T8405] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[   85.742617][ T8405] bond9: entered promiscuous mode
[   85.744753][ T8405] 8021q: adding VLAN 0 to HW filter on device bond9
[   85.752142][ T8405] batadv1: entered promiscuous mode
[   85.755682][ T8405] batadv1: entered allmulticast mode
[   85.759121][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv1
[   85.763220][ T8405] bond9: (slave batadv1): making interface the new active one
[   85.767663][ T8405] bond9: (slave batadv1): Enslaving as an active interface with an up link
[   85.860213][ T8411] sctp: [Deprecated]: syz.2.645 (pid 8411) Use of int in max_burst socket option deprecated.
[   85.860213][ T8411] Use struct sctp_assoc_value instead
[   85.895983][ T8415] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.896012][ T8416] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.902316][ T8416] netlink: 'syz.2.646': attribute type 2 has an invalid length.
[   85.905880][ T8415] netlink: 'syz.2.646': attribute type 2 has an invalid length.
[   85.974820][ T8420] netlink: 'syz.2.647': attribute type 1 has an invalid length.
[   86.099802][ T8431] vlan0: entered allmulticast mode
[   86.101863][ T8431] bridge0: entered allmulticast mode
[   86.104165][ T8431] bridge5: port 1(vlan0) entered blocking state
[   86.106786][ T8431] bridge5: port 1(vlan0) entered disabled state
[   86.109507][ T8431] vlan0: entered promiscuous mode
[   86.111444][ T8431] bridge0: entered promiscuous mode
[   86.117068][ T8431] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   86.331116][ T8443] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   86.339249][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   86.342657][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   86.349788][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   86.353251][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   86.392489][ T8467] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[   86.408047][ T8467] 8021q: adding VLAN 0 to HW filter on device bond12
[   86.426610][ T8467] bond12: (slave veth9): Enslaving as an active interface with a down link
[   86.437620][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.441192][ T8467] bond12: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   86.507102][ T8478] netlink: 'syz.1.662': attribute type 3 has an invalid length.
[   86.512587][ T8478] syz_tun: entered allmulticast mode
[   86.519564][ T8478] dvmrp1: left allmulticast mode
[   86.521178][ T8478] pimreg: left allmulticast mode
[   86.555581][ T8481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.569719][ T8478] siw: device registration error -23
[   86.582528][ T8478] 8021q: adding VLAN 0 to HW filter on device 
[   86.587271][ T8478] 8021q: adding VLAN 0 to HW filter on device team0
[   86.591140][ T8478] tipc: Resetting bearer <eth:team0>
[   86.593478][ T8478] tipc: Resetting bearer <eth:team0>
[   86.598568][ T8478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.625752][ T8477] syz_tun: left allmulticast mode
[   86.634053][ T8483] bridge0: entered allmulticast mode
[   86.643257][ T8483] bridge0 (unregistering): left allmulticast mode
[   86.691527][ T8485] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[   86.695342][ T8485] gretap5: entered promiscuous mode
[   86.697343][ T8485] gretap5: entered allmulticast mode
[   86.760021][ T8491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.765337][ T8491] syzkaller0: entered promiscuous mode
[   86.767718][ T8491] syzkaller0: entered allmulticast mode
[   86.770680][ T8493] syzkaller0: left promiscuous mode
[   86.772668][ T8493] syzkaller0: left allmulticast mode
[   86.777624][ T8493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   86.781379][ T8490] tipc: Resetting bearer <eth:syzkaller0>
[   86.786177][ T8490] tipc: Disabling bearer <eth:syzkaller0>
[   86.887145][ T8506] tls_set_device_offload: netdev not found
[   86.949987][ T8521] tipc: Resetting bearer <eth:team0>
[   86.957739][ T8521] tipc: Resetting bearer <eth:team0>
[   86.960274][ T8521] 8021q: adding VLAN 0 to HW filter on device team0
[   86.964734][ T8521] tipc: Resetting bearer <eth:team0>
[   86.969789][ T8521] tipc: Resetting bearer <eth:team0>
[   86.995713][ T8525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.091951][ T8535] pim6reg1: entered promiscuous mode
[   87.096683][ T8535] pim6reg1: entered allmulticast mode
[   87.221469][ T8544] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   87.229064][ T8543] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   87.253411][ T8550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.260274][ T8550] syzkaller0: entered promiscuous mode
[   87.262728][ T8550] syzkaller0: entered allmulticast mode
[   87.267393][ T8550] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.272478][ T8550] tipc: Resetting bearer <eth:syzkaller0>
[   87.277694][ T8549] tipc: Resetting bearer <eth:syzkaller0>
[   87.282390][ T8549] tipc: Disabling bearer <eth:syzkaller0>
[   87.338714][ T8561] 8021q: adding VLAN 0 to HW filter on device bond20
[   87.412788][ T8576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.416035][ T8576] IPv6: NLM_F_CREATE should be set when creating new route
[   87.419076][ T8576] IPv6: NLM_F_CREATE should be set when creating new route
[   87.422665][ T8576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.509309][ T8575] vlan0 (unregistering): left promiscuous mode
[   87.511984][ T8575] bridge0 (unregistering): left promiscuous mode
[   87.515976][ T8575] bridge5: port 1(vlan0) entered disabled state
[   87.627550][ T8584] syzkaller1: entered promiscuous mode
[   87.629454][ T8584] syzkaller1: entered allmulticast mode
[   87.722025][ T8591] ip6tnl2: entered promiscuous mode
[   87.723891][ T8591] ip6tnl2: entered allmulticast mode
[   87.742179][ T8586] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   87.749843][ T8586] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.753620][ T8586] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.970041][ T8611] batman_adv: batadv0: Removing interface: dummy0
[   87.973391][ T8611] bond8: (slave vcan1): Releasing backup interface
[   87.975726][ T8611] bond8: (slave vcan2): making interface the new active one
[   87.979545][ T8611] bond8: (slave vcan2): Releasing backup interface
[   87.981653][ T8611] bond8: (slave vcan3): making interface the new active one
[   87.985542][ T8611] bond8: (slave vcan3): Releasing backup interface
[   87.988842][ T8611] bond9: (slave batadv1): Releasing active interface
[   88.110306][ T8622] pim6reg1: entered promiscuous mode
[   88.112212][ T8622] pim6reg1: entered allmulticast mode
[   88.289564][ T8632] 8021q: adding VLAN 0 to HW filter on device bond21
[   88.596736][ T8648] syzkaller0: entered promiscuous mode
[   88.598970][ T8648] syzkaller0: entered allmulticast mode
[   88.785660][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.790955][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.800091][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.803025][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.874918][ T8681] pim6reg: entered allmulticast mode
[   88.879086][ T8681] pim6reg: left allmulticast mode
[   88.936521][ T8687] veth10: entered allmulticast mode
[   88.958192][ T8688] 8021q: adding VLAN 0 to HW filter on device team0
[   88.961710][ T8688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.027256][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.031017][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.050357][ T8694] team0: Port device dummy0 added
[   89.059895][ T8694] team0: Port device dummy0 removed
[   89.063078][ T8694] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.198345][ T8696] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[   89.203176][ T8696] bond1: (slave vcan0): Error -95 calling set_mac_address
[   89.264902][ T8696] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.341151][ T8707] __nla_validate_parse: 116 callbacks suppressed
[   89.341163][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'.
[   89.350490][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'.
[   89.353504][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'.
[   89.360057][ T8707] ip6tnl3: entered promiscuous mode
[   89.361936][ T8707] ip6tnl3: entered allmulticast mode
[   89.922716][ T8715] bond13: entered promiscuous mode
[   89.926303][ T8715] 8021q: adding VLAN 0 to HW filter on device bond13
[   90.255600][ T8736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   90.366435][ T8738] validate_nla: 13 callbacks suppressed
[   90.366446][ T8738] netlink: 'syz.2.736': attribute type 10 has an invalid length.
[   90.404027][ T8747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.738'.
[   90.415020][ T8747] netlink: 'syz.2.738': attribute type 1 has an invalid length.
[   90.427567][ T8747] 8021q: adding VLAN 0 to HW filter on device bond11
[   90.480594][ T8753] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[   90.496487][ T8753] 8021q: adding VLAN 0 to HW filter on device bond12
[   90.505701][ T8753] bond12: (slave geneve3): making interface the new active one
[   90.509507][ T8753] bond12: (slave geneve3): Enslaving as an active interface with an up link
[   90.516991][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.519873][ T8753] syz.2.740 (8753) used greatest stack depth: 18216 bytes left
[   90.526824][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.529576][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[   90.534922][ T8748] netlink: 'syz.0.735': attribute type 13 has an invalid length.
[   90.535884][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.537696][ T8748] netlink: 'syz.0.735': attribute type 17 has an invalid length.
[   90.544726][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.566419][ T8748] 8021q: adding VLAN 0 to HW filter on device team0
[   90.575697][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.660262][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'.
[   90.666004][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   90.670473][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   90.676440][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   90.679349][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   90.751232][ T8768] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[   90.765699][ T8768] 8021q: adding VLAN 0 to HW filter on device bond13
[   90.822437][ T8775] netlink: 'syz.2.744': attribute type 9 has an invalid length.
[   90.826570][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[   90.852166][ T8777] !: renamed from dummy0 (while UP)
[   90.998807][ T8794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.001846][ T8794] syzkaller0: entered promiscuous mode
[   91.003825][ T8794] syzkaller0: entered allmulticast mode
[   91.095002][ T8793] tipc: Resetting bearer <eth:syzkaller0>
[   91.098464][ T8793] tipc: Disabling bearer <eth:syzkaller0>
[   91.180576][ T8801] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[   91.226802][ T8806] batadv_slave_1: entered promiscuous mode
[   91.243383][ T8813] netlink: 14 bytes leftover after parsing attributes in process `syz.1.756'.
[   91.254012][ T8813]  (unregistering): Released all slaves
[   91.313559][ T8815] bridge0: entered promiscuous mode
[   91.315555][ T8815] bridge0: entered allmulticast mode
[   91.375966][ T8832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   91.379911][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'.
[   91.387868][ T8832] netlink: 'syz.2.762': attribute type 4 has an invalid length.
[   91.390744][ T8832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.762'.
[   91.458176][ T8841] pim6reg: entered allmulticast mode
[   91.465993][ T8840] pim6reg: left allmulticast mode
[   91.473804][ T8843] netlink: 'syz.1.766': attribute type 32 has an invalid length.
[   91.478127][ T8843] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   91.813568][ T8865] bond0: (slave dummy0): Releasing backup interface
[   91.859541][ T8865] bond12: (slave veth9): Releasing active interface
[   92.307743][ T8877] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   92.342007][ T8879] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   92.348327][ T8879] bond9: (slave macvlan0): making interface the new active one
[   92.351379][ T8879] bond9: (slave macvlan0): Enslaving as an active interface with an up link
[   92.472692][ T8881] bond14: (slave geneve5): making interface the new active one
[   92.476473][ T8881] bond14: (slave geneve5): Enslaving as an active interface with an up link
[   92.485643][ T8881] 8021q: adding VLAN 0 to HW filter on device bond14
[   92.500860][ T8896] syz_tun: entered allmulticast mode
[   92.586119][ T8908] 8021q: adding VLAN 0 to HW filter on device bond14
[   92.603539][ T8911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.606713][ T8911] syzkaller0: entered promiscuous mode
[   92.608834][ T8911] syzkaller0: entered allmulticast mode
[   92.612663][ T8906] tipc: Resetting bearer <eth:syzkaller0>
[   92.617630][ T8906] tipc: Disabling bearer <eth:syzkaller0>
[   92.730416][ T8929] bridge0: port 1(veth0_to_team) entered blocking state
[   92.733465][ T8929] bridge0: port 1(veth0_to_team) entered disabled state
[   92.736424][ T8929] veth0_to_team: entered allmulticast mode
[   92.740023][ T8929] veth0_to_team: entered promiscuous mode
[   92.743324][ T8929] veth0_to_team: left allmulticast mode
[   92.746126][ T8929] veth0_to_team: left promiscuous mode
[   92.749317][ T8929] bridge0: port 1(veth0_to_team) entered disabled state
[   92.758792][ T8920] macsec1: entered promiscuous mode
[   92.764152][ T8929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   92.766726][ T8929] IPv6: NLM_F_CREATE should be set when creating new route
[   92.847482][ T5853] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.852334][ T5853] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.855976][ T5853] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.859156][ T5853] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.927507][ T8951] syzkaller1: entered allmulticast mode
[   93.129112][ T8963] openvswitch: netlink: Key 25 has unexpected len 2 expected 16
[   93.134739][ T8963] veth0_to_bond: entered allmulticast mode
[   93.629999][ T8981] 8021q: adding VLAN 0 to HW filter on device bond23
[   93.645340][ T8981] veth9: entered promiscuous mode
[   93.649590][ T8981] bond23: (slave veth9): Enslaving as an active interface with a down link
[   93.721776][ T8994] syz.1.802 (8994) used obsolete PPPIOCDETACH ioctl
[   93.848385][ T9010] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.860376][ T9012] pimreg: entered allmulticast mode
[   93.893337][ T9014] bridge0: failed insert local address into bridge forwarding table
[   93.947176][ T9016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.952048][ T9010] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.958803][ T9016] syzkaller0: entered promiscuous mode
[   93.961170][ T9016] syzkaller0: entered allmulticast mode
[   94.047584][ T9010] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.100872][ T9010] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.154862][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.166014][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.178289][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.186697][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.315172][ T9043] 8021q: adding VLAN 0 to HW filter on device bond16
[   94.323462][ T9043] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   94.327748][ T9043] bond16: (slave macvlan0): Enslaving as an active interface with an up link
[   94.359864][ T9046] nbd: couldn't find a device at index 0
[   94.363259][ T9046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.367252][ T9046] syzkaller0: entered promiscuous mode
[   94.370427][ T9046] syzkaller0: entered allmulticast mode
[   94.377840][ T9046] tipc: Resetting bearer <eth:syzkaller0>
[   94.381139][ T9045] tipc: Resetting bearer <eth:syzkaller0>
[   94.387302][ T9045] tipc: Disabling bearer <eth:syzkaller0>
[   94.412404][ T9050] __nla_validate_parse: 22 callbacks suppressed
[   94.412419][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'.
[   94.424804][ T9050] 8021q: adding VLAN 0 to HW filter on device bond15
[   94.441935][ T9050] netlink: 88 bytes leftover after parsing attributes in process `syz.0.817'.
[   94.592095][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.822'.
[   94.613765][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'.
[   94.619999][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'.
[   94.624077][   T34] audit: type=1800 audit(1756708601.736:2): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.825" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1247 res=0 errno=0
[   94.660327][ T9085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'.
[   94.663716][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.826'.
[   94.669034][ T9085] syzkaller0: left promiscuous mode
[   94.670961][ T9085] syzkaller0: left allmulticast mode
[   94.728099][ T9015] tipc: Resetting bearer <eth:syzkaller0>
[   94.738037][ T9015] tipc: Disabling bearer <eth:syzkaller0>
[   94.806253][ T9099] pim6reg1: entered promiscuous mode
[   94.808086][ T9099] pim6reg1: entered allmulticast mode
[   95.008308][ T9108] netlink: 9 bytes leftover after parsing attributes in process `syz.1.833'.
[   95.129024][ T9112] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[   95.153996][ T9116] ==================================================================
[   95.160660][ T9116] BUG: KASAN: slab-use-after-free in napi_gro_frags+0x6e/0x1030
[   95.163851][ T9116] Read of size 8 at addr ffff8881065eda58 by task syz.1.835/9116
[   95.167917][ T9116] 
[   95.168946][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) 
[   95.168962][ T9116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.168970][ T9116] Call Trace:
[   95.168977][ T9116]  <TASK>
[   95.168983][ T9116]  dump_stack_lvl+0x189/0x250
[   95.169002][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169016][ T9116]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.169028][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169039][ T9116]  ? lock_release+0x4b/0x3e0
[   95.169058][ T9116]  ? __virt_addr_valid+0x1c8/0x5c0
[   95.169076][ T9116]  ? __virt_addr_valid+0x4a5/0x5c0
[   95.169091][ T9116]  print_report+0xca/0x240
[   95.169104][ T9116]  ? napi_gro_frags+0x6e/0x1030
[   95.169121][ T9116]  kasan_report+0x118/0x150
[   95.169140][ T9116]  ? napi_gro_frags+0x6e/0x1030
[   95.169160][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.169172][ T9116]  napi_gro_frags+0x6e/0x1030
[   95.169190][ T9116]  ? __pfx_napi_schedule_prep+0x10/0x10
[   95.169209][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.169222][ T9116]  tun_get_user+0x28cb/0x3e20
[   95.169235][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169247][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.169259][ T9116]  ? aa_file_perm+0x44d/0x1550
[   95.169273][ T9116]  ? __pfx_tun_get_user+0x10/0x10
[   95.169284][ T9116]  ? __futex_wait+0x34f/0x3e0
[   95.169304][ T9116]  ? __pfx___futex_wait+0x10/0x10
[   95.169320][ T9116]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.169338][ T9116]  ? ref_tracker_alloc+0x318/0x460
[   95.169355][ T9116]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   95.169371][ T9116]  ? lock_release+0x4b/0x3e0
[   95.169387][ T9116]  ? tun_get+0x1c/0x2f0
[   95.169397][ T9116]  ? tun_get+0x1c/0x2f0
[   95.169408][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169418][ T9116]  ? tun_get+0x1c/0x2f0
[   95.169428][ T9116]  ? lock_release+0x4b/0x3e0
[   95.169443][ T9116]  ? common_file_perm+0x1b5/0x230
[   95.169454][ T9116]  ? tun_get+0x1c/0x2f0
[   95.169466][ T9116]  tun_chr_write_iter+0x113/0x200
[   95.169478][ T9116]  vfs_write+0x5c9/0xb30
[   95.169495][ T9116]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   95.169507][ T9116]  ? __pfx_vfs_write+0x10/0x10
[   95.169524][ T9116]  ? __fget_files+0x2a/0x420
[   95.169538][ T9116]  ksys_write+0x145/0x250
[   95.169554][ T9116]  ? __pfx_ksys_write+0x10/0x10
[   95.169567][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169579][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.169591][ T9116]  do_syscall_64+0xfa/0x3b0
[   95.169634][ T9116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.169646][ T9116]  ? exc_page_fault+0x9f/0xf0
[   95.169663][ T9116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.169676][ T9116] RIP: 0033:0x7fd20418ebe9
[   95.169688][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.169700][ T9116] RSP: 002b:00007fd204f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.169715][ T9116] RAX: ffffffffffffffda RBX: 00007fd2043c5fa0 RCX: 00007fd20418ebe9
[   95.169724][ T9116] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000006
[   95.169733][ T9116] RBP: 00007fd204211e19 R08: 0000000000000000 R09: 0000000000000000
[   95.169741][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.169748][ T9116] R13: 00007fd2043c6038 R14: 00007fd2043c5fa0 R15: 00007ffea8dc2ee8
[   95.169764][ T9116]  </TASK>
[   95.169768][ T9116] 
[   95.303258][ T9116] Allocated by task 9116:
[   95.305039][ T9116]  kasan_save_track+0x3e/0x80
[   95.307028][ T9116]  __kasan_mempool_unpoison_object+0xa0/0x170
[   95.309457][ T9116]  napi_skb_cache_get+0x37b/0x6d0
[   95.311554][ T9116]  __alloc_skb+0x11e/0x2d0
[   95.313392][ T9116]  napi_alloc_skb+0x84/0x7d0
[   95.315384][ T9116]  napi_get_frags+0x69/0x140
[   95.317301][ T9116]  tun_get_user+0x77c/0x3e20
[   95.319208][ T9116]  tun_chr_write_iter+0x113/0x200
[   95.321263][ T9116]  vfs_write+0x5c9/0xb30
[   95.322985][ T9116]  ksys_write+0x145/0x250
[   95.324803][ T9116]  do_syscall_64+0xfa/0x3b0
[   95.326661][ T9116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.329059][ T9116] 
[   95.330073][ T9116] Freed by task 9116:
[   95.331769][ T9116]  kasan_save_track+0x3e/0x80
[   95.333670][ T9116]  kasan_save_free_info+0x46/0x50
[   95.335732][ T9116]  __kasan_slab_free+0x5b/0x80
[   95.337706][ T9116]  kmem_cache_free+0x18f/0x400
[   95.339624][ T9116]  skb_pp_cow_data+0xdd8/0x13e0
[   95.341622][ T9116]  do_xdp_generic+0x699/0x11a0
[   95.343521][ T9116]  tun_get_user+0x2523/0x3e20
[   95.345507][ T9116]  tun_chr_write_iter+0x113/0x200
[   95.347677][ T9116]  vfs_write+0x5c9/0xb30
[   95.349399][ T9116]  ksys_write+0x145/0x250
[   95.351181][ T9116]  do_syscall_64+0xfa/0x3b0
[   95.353110][ T9116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.355518][ T9116] 
[   95.356553][ T9116] The buggy address belongs to the object at ffff8881065ed980
[   95.356553][ T9116]  which belongs to the cache skbuff_head_cache of size 240
[   95.362570][ T9116] The buggy address is located 216 bytes inside of
[   95.362570][ T9116]  freed 240-byte region [ffff8881065ed980, ffff8881065eda70)
[   95.368120][ T9116] 
[   95.369136][ T9116] The buggy address belongs to the physical page:
[   95.371745][ T9116] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1065ec
[   95.375329][ T9116] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   95.378832][ T9116] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   95.382258][ T9116] page_type: f5(slab)
[   95.384005][ T9116] raw: 057ff00000000040 ffff88801cecfa00 ffffea00044acb00 dead000000000003
[   95.387360][ T9116] raw: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000
[   95.390881][ T9116] head: 057ff00000000040 ffff88801cecfa00 ffffea00044acb00 dead000000000003
[   95.394504][ T9116] head: 0000000000000000 0000000000150015 00000000f5000000 0000000000000000
[   95.398142][ T9116] head: 057ff00000000001 ffffea0004197b01 00000000ffffffff 00000000ffffffff
[   95.401621][ T9116] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   95.405059][ T9116] page dumped because: kasan: bad access detected
[   95.407654][ T9116] page_owner tracks the page as allocated
[   95.409903][ T9116] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8817, tgid 8816 (syz.2.758), ts 91269911664, free_ts 90502434697
[   95.418362][ T9116]  post_alloc_hook+0x240/0x2a0
[   95.420378][ T9116]  get_page_from_freelist+0x21e4/0x22c0
[   95.422650][ T9116]  __alloc_frozen_pages_noprof+0x181/0x370
[   95.424990][ T9116]  alloc_pages_mpol+0x232/0x4a0
[   95.426961][ T9116]  allocate_slab+0x8a/0x370
[   95.428835][ T9116]  ___slab_alloc+0xbeb/0x1410
[   95.430772][ T9116]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[   95.433250][ T9116]  __alloc_skb+0x112/0x2d0
[   95.435097][ T9116]  alloc_uevent_skb+0x7d/0x230
[   95.437105][ T9116]  kobject_uevent_net_broadcast+0x184/0x560
[   95.439487][ T9116]  kobject_uevent_env+0x55b/0x8c0
[   95.441549][ T9116]  netdev_queue_update_kobjects+0x346/0x6c0
[   95.444047][ T9116]  netdev_register_kobject+0x258/0x310
[   95.446263][ T9116]  register_netdevice+0x126c/0x1ae0
[   95.448502][ T9116]  cfg80211_register_netdevice+0x150/0x2f0
[   95.450971][ T9116]  ieee80211_if_add+0xe60/0x1390
[   95.453117][ T9116] page last free pid 8756 tgid 8756 stack trace:
[   95.455775][ T9116]  __free_frozen_pages+0xbc4/0xd30
[   95.457942][ T9116]  __slab_free+0x303/0x3c0
[   95.459892][ T9116]  qlist_free_all+0x97/0x140
[   95.461842][ T9116]  kasan_quarantine_reduce+0x148/0x160
[   95.464174][ T9116]  __kasan_slab_alloc+0x22/0x80
[   95.466167][ T9116]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   95.468478][ T9116]  getname_flags+0xb8/0x540
[   95.470454][ T9116]  vfs_fstatat+0x43/0x170
[   95.472297][ T9116]  __x64_sys_newfstatat+0x116/0x190
[   95.474556][ T9116]  do_syscall_64+0xfa/0x3b0
[   95.476417][ T9116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.478812][ T9116] 
[   95.479883][ T9116] Memory state around the buggy address:
[   95.482208][ T9116]  ffff8881065ed900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.485419][ T9116]  ffff8881065ed980: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.488619][ T9116] >ffff8881065eda00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[   95.491866][ T9116]                                                     ^
[   95.494632][ T9116]  ffff8881065eda80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.497966][ T9116]  ffff8881065edb00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.501261][ T9116] ==================================================================
[   95.504973][ T9116] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   95.508057][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT(full) 
[   95.511807][ T9116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.515862][ T9116] Call Trace:
[   95.517267][ T9116]  <TASK>
[   95.518575][ T9116]  dump_stack_lvl+0x99/0x250
[   95.520502][ T9116]  ? __asan_memcpy+0x40/0x70
[   95.522412][ T9116]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.524543][ T9116]  ? __pfx__printk+0x10/0x10
[   95.526476][ T9116]  vpanic+0x281/0x750
[   95.528227][ T9116]  ? __pfx_vpanic+0x10/0x10
[   95.530157][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.532211][ T9116]  panic+0xb9/0xc0
[   95.533835][ T9116]  ? __pfx_panic+0x10/0x10
[   95.535751][ T9116]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   95.538256][ T9116]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.540816][ T9116]  ? napi_gro_frags+0x6e/0x1030
[   95.542899][ T9116]  check_panic_on_warn+0x89/0xb0
[   95.545006][ T9116]  ? napi_gro_frags+0x6e/0x1030
[   95.547094][ T9116]  end_report+0x78/0x160
[   95.548958][ T9116]  kasan_report+0x129/0x150
[   95.550978][ T9116]  ? napi_gro_frags+0x6e/0x1030
[   95.553072][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.555144][ T9116]  napi_gro_frags+0x6e/0x1030
[   95.557122][ T9116]  ? __pfx_napi_schedule_prep+0x10/0x10
[   95.559362][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.561428][ T9116]  tun_get_user+0x28cb/0x3e20
[   95.563452][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.565481][ T9116]  ? tun_get_user+0x266c/0x3e20
[   95.567545][ T9116]  ? aa_file_perm+0x44d/0x1550
[   95.569559][ T9116]  ? __pfx_tun_get_user+0x10/0x10
[   95.571963][ T9116]  ? __futex_wait+0x34f/0x3e0
[   95.574003][ T9116]  ? __pfx___futex_wait+0x10/0x10
[   95.576117][ T9116]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.578520][ T9116]  ? ref_tracker_alloc+0x318/0x460
[   95.580724][ T9116]  ? __pfx_ref_tracker_alloc+0x10/0x10
[   95.583052][ T9116]  ? lock_release+0x4b/0x3e0
[   95.585058][ T9116]  ? tun_get+0x1c/0x2f0
[   95.586876][ T9116]  ? tun_get+0x1c/0x2f0
[   95.588578][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.590679][ T9116]  ? tun_get+0x1c/0x2f0
[   95.592474][ T9116]  ? lock_release+0x4b/0x3e0
[   95.594466][ T9116]  ? common_file_perm+0x1b5/0x230
[   95.596545][ T9116]  ? tun_get+0x1c/0x2f0
[   95.598330][ T9116]  tun_chr_write_iter+0x113/0x200
[   95.600418][ T9116]  vfs_write+0x5c9/0xb30
[   95.602168][ T9116]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   95.604434][ T9116]  ? __pfx_vfs_write+0x10/0x10
[   95.606427][ T9116]  ? __fget_files+0x2a/0x420
[   95.608384][ T9116]  ksys_write+0x145/0x250
[   95.610195][ T9116]  ? __pfx_ksys_write+0x10/0x10
[   95.612184][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.614240][ T9116]  ? rcu_is_watching+0x15/0xb0
[   95.616254][ T9116]  do_syscall_64+0xfa/0x3b0
[   95.618150][ T9116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.620659][ T9116]  ? exc_page_fault+0x9f/0xf0
[   95.622636][ T9116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.625080][ T9116] RIP: 0033:0x7fd20418ebe9
[   95.626918][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.634975][ T9116] RSP: 002b:00007fd204f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   95.638636][ T9116] RAX: ffffffffffffffda RBX: 00007fd2043c5fa0 RCX: 00007fd20418ebe9
[   95.641991][ T9116] RDX: 000000000000004b RSI: 0000200000000340 RDI: 0000000000000006
[   95.645224][ T9116] RBP: 00007fd204211e19 R08: 0000000000000000 R09: 0000000000000000
[   95.648624][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.651940][ T9116] R13: 00007fd2043c6038 R14: 00007fd2043c5fa0 R15: 00007ffea8dc2ee8
[   95.655211][ T9116]  </TASK>
[   95.657257][ T9116] Kernel Offset: disabled
[   95.659068][ T9116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:36:42  Registers:
info registers vcpu 0

CPU#0
RAX=7d1195d040568b00 RBX=ffffffff819683b8 RCX=7d1195d040568b00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d1dd7 CR3=0000000110b1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=00007fd204397498 00007fd204397470 XMM03=00007fd2043974a8 00007fd2043974a0
XMM04=00007fd204efd100 00007fd204397460 XMM05=00007fd204397478 00007fd2043974c0
XMM06=00007fd2043974b8 00007fd2043974b0 XMM07=00007fd2043974a8 00007fd2043974a0
XMM08=0000000000000000 00007fd204212ee7 XMM09=0000000000000000 00007fd204212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000153f RDI=0000000000001540 RBP=00000000000003f8 RSP=ffffc90002cdf190
R8 =ffff88801fc90237 R9 =1ffff11003f92046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb906 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd204f776c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd204f76fc8 CR3=0000000110b1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd204397498 00007fd204397470 XMM03=00007fd2043974a8 00007fd2043974a0
XMM04=00007fd204efd100 00007fd204397460 XMM05=00007fd204397478 00007fd2043974c0
XMM06=00007fd2043974b8 00007fd2043974b0 XMM07=00007fd2043974a8 00007fd2043974a0
XMM08=0000000000000000 00007fd204212ee7 XMM09=0000000000000000 00007fd204212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
