last executing test programs:

2m21.963881774s ago: executing program 0 (id=4057):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_int(0xffffffffffffffff, 0x11, 0x11, 0x0, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0xfffffffb, 0x4)
socket$netlink(0x10, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000240))
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
connect$inet6(r7, &(0x7f0000000440)={0xa, 0x4e23, 0x401, @remote, 0xc}, 0x1c)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r7)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000580)={{}, 0x0, 0x4, @unused=[0x9, 0x2, 0x10004], @devid})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x128}, 0x4048000) (async)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x128}, 0x4048000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0xfffffffffffffeee) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000100000000000000000000020000000087000000180100002020702500000000002020207b1af8ff00001000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000b0ef41405968d7b09c5015bc2ad4e00f4ce54f140e2a2056dfa05baa02d9c08e087bd2100622661c79d45629260657f62453faac840af82829c46b415ab2f357a25a43c219900e3baa15538bd4d3"], &(0x7f0000000000)='syzkaller\x00'}, 0xfffffffffffffeee)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x12, 0x0, 0x0, &(0x7f00000004c0), 0x31}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c00000471507000e9dbdf25ff24000900060000000000000007000000000000001423a426f7bb42320424000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)

2m21.781578753s ago: executing program 0 (id=4065):
socket(0x1d, 0x2, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000598ba5c200bd7a24ea29c10b86a9a8df4a00000000000000000000000018910000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000007d01ff02000810000000000000000000000112"], 0xfdef)

2m21.512966843s ago: executing program 0 (id=4070):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000240000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

2m21.430807711s ago: executing program 0 (id=4071):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000010c0))
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r1, 0x1, 0x819e12cd7645f510, &(0x7f00000000c0)=0xff, 0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
epoll_create1(0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0xc, 0x0, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x50}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

2m20.542629125s ago: executing program 0 (id=4078):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRESHEX=r1, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000040)={0x7, 'pimreg1\x00', {0x6}, 0x53})

2m20.48235396s ago: executing program 0 (id=4080):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0xfffffffc, 0x0, {0xa}, [@typed={0xc, 0x5e, 0x0, 0x0, @u64=0x15a2}, @typed={0x8, 0xf8, 0x0, 0x0, @str='}{+\x00'}]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x20, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_emit_ethernet(0x58a, &(0x7f0000000400)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "8128ae", 0x554, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@routing={0x3c, 0x0, 0x0, 0x3}, @hopopts={0x67, 0x16, '\x00', [@generic={0x4, 0xb3, "a3064c7f2d0645d43c1cd85c20ab731f2160497d5c073c157d4c7b4458f0ed128d5b9cc8990cf874c9f5a3ef588fae1a0e0dade1e71df51c613b7636f623d818008e3fa93bde89ca3c33a7349db72bb8acea2ded071e6d25318239f151052ff4fdd9b37bef1ca2f6439f3f64ea824294cdbd05e9fceb59d992af6dd1b58852c5b80bb2ee25ae07482a8aca3a336aaa936982cf95ec5bda72677f22a53d6fd9a8d4b25405e9da0e35bb50d1f8a90c5843b47fa6"}]}, @srh={0x3b, 0x10, 0x4, 0x8, 0x7, 0x0, 0x3, [@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @srh={0x84, 0x8, 0x4, 0x4, 0x0, 0x14, 0x7, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}]}], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x2, 0x6, "7bb5e2", 0x7, 0x67, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@srh={0x3a, 0xa, 0x4, 0x5, 0x7, 0x48, 0x2, [@mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1c}, @local]}, @routing={0x6, 0x4, 0x1, 0xff, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @dstopts={0x0, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf, 0x4, [0x4, 0x1, 0x6, 0xc357, 0xffffffffadbf1b7c]}}, @enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x0, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfc, 0x7f, [0xc8, 0x7fff, 0x8, 0x0, 0x4, 0x40, 0xe]}}, @enc_lim={0x4, 0x1, 0xa}]}, @dstopts={0x2c, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x5840, [0x4, 0x3, 0xd, 0x2, 0x84]}}, @generic={0x8, 0xae, "71d622d1d211ec82a969d4ca2fa50f9dbe81356b6262b91221f40030b2697e00949594278df77943e2f20d59528e0b2344143b4b6283ed6d212c65c17f777893518bb7161f61002d436e3bb0cff94ece77a9220ca0f5f3d74ced1184ac2694a8765698627402426dad9a08500bcffa85f626c6b69fc96775d85bb55a0771c34df21bb596f426c6fd304ee41a2fda30de407e624ae728badbbf3c81a818f23d7e6adf5f6c2697240df0632c9e0ee2"}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x3c, 0xb, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x3, 0x6fa, [0x1, 0xe, 0x46214ed0, 0xfffffffffffffff8, 0x81, 0x1, 0x6, 0x7]}}, @pad1, @pad1, @generic={0x5, 0x4, "ce4c45f4"}, @enc_lim={0x4, 0x1, 0x4}]}, @routing={0x2f, 0xe, 0x1, 0x7, 0x0, [@local, @mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @private0, @loopback]}], "71064fcf84955537ced53a6b5aee568d6e506a2096c306113486a41e12827b292b4b7652be17e0afd9a1ff939e81a91a32c08223eafec9238be609c4e69d5e7ea559755168bd01049a70d439"}}}}}}}, &(0x7f0000000200)={0x1, 0x2, [0x5b3, 0xe4, 0xe48, 0xaa2]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)=r7}, 0x64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f00000004c0), &(0x7f0000000500)=r6, 0x12}, 0x20)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r11=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r11, 0x11, 0x6}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x5}, {0xfffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048052)

1m35.121722737s ago: executing program 32 (id=4080):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, 0x12, 0xa01, 0xfffffffc, 0x0, {0xa}, [@typed={0xc, 0x5e, 0x0, 0x0, @u64=0x15a2}, @typed={0x8, 0xf8, 0x0, 0x0, @str='}{+\x00'}]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x20, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_emit_ethernet(0x58a, &(0x7f0000000400)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "8128ae", 0x554, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@routing={0x3c, 0x0, 0x0, 0x3}, @hopopts={0x67, 0x16, '\x00', [@generic={0x4, 0xb3, "a3064c7f2d0645d43c1cd85c20ab731f2160497d5c073c157d4c7b4458f0ed128d5b9cc8990cf874c9f5a3ef588fae1a0e0dade1e71df51c613b7636f623d818008e3fa93bde89ca3c33a7349db72bb8acea2ded071e6d25318239f151052ff4fdd9b37bef1ca2f6439f3f64ea824294cdbd05e9fceb59d992af6dd1b58852c5b80bb2ee25ae07482a8aca3a336aaa936982cf95ec5bda72677f22a53d6fd9a8d4b25405e9da0e35bb50d1f8a90c5843b47fa6"}]}, @srh={0x3b, 0x10, 0x4, 0x8, 0x7, 0x0, 0x3, [@ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @srh={0x84, 0x8, 0x4, 0x4, 0x0, 0x14, 0x7, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}]}], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x2, 0x6, "7bb5e2", 0x7, 0x67, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@srh={0x3a, 0xa, 0x4, 0x5, 0x7, 0x48, 0x2, [@mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1c}, @local]}, @routing={0x6, 0x4, 0x1, 0xff, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @dstopts={0x0, 0xb, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf, 0x4, [0x4, 0x1, 0x6, 0xc357, 0xffffffffadbf1b7c]}}, @enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x0, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfc, 0x7f, [0xc8, 0x7fff, 0x8, 0x0, 0x4, 0x40, 0xe]}}, @enc_lim={0x4, 0x1, 0xa}]}, @dstopts={0x2c, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x800}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x5840, [0x4, 0x3, 0xd, 0x2, 0x84]}}, @generic={0x8, 0xae, "71d622d1d211ec82a969d4ca2fa50f9dbe81356b6262b91221f40030b2697e00949594278df77943e2f20d59528e0b2344143b4b6283ed6d212c65c17f777893518bb7161f61002d436e3bb0cff94ece77a9220ca0f5f3d74ced1184ac2694a8765698627402426dad9a08500bcffa85f626c6b69fc96775d85bb55a0771c34df21bb596f426c6fd304ee41a2fda30de407e624ae728badbbf3c81a818f23d7e6adf5f6c2697240df0632c9e0ee2"}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x3c, 0xb, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x3, 0x6fa, [0x1, 0xe, 0x46214ed0, 0xfffffffffffffff8, 0x81, 0x1, 0x6, 0x7]}}, @pad1, @pad1, @generic={0x5, 0x4, "ce4c45f4"}, @enc_lim={0x4, 0x1, 0x4}]}, @routing={0x2f, 0xe, 0x1, 0x7, 0x0, [@local, @mcast2, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @private0, @loopback]}], "71064fcf84955537ced53a6b5aee568d6e506a2096c306113486a41e12827b292b4b7652be17e0afd9a1ff939e81a91a32c08223eafec9238be609c4e69d5e7ea559755168bd01049a70d439"}}}}}}}, &(0x7f0000000200)={0x1, 0x2, [0x5b3, 0xe4, 0xe48, 0xaa2]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)=r7}, 0x64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f00000004c0), &(0x7f0000000500)=r6, 0x12}, 0x20)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r11=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r11, 0x11, 0x6}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x5}, {0xfffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048052)

16.407008728s ago: executing program 2 (id=5598):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20044045}, 0x810)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x2000040)
sendmsg$kcm(r2, 0x0, 0x4000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044001200090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

16.35082085s ago: executing program 2 (id=5600):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000950000de92914865b6c4d7a5782bd464bdc094fd290800c3ed5555b9f9dc6e3e13"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r3, 0x2, 0x2}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x4, r0}, 0x10)

16.287482806s ago: executing program 2 (id=5601):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'})
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00H\x00'/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000950000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000950000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket(0x28, 0x5, 0x0)
getsockopt(r4, 0x28, 0x8, 0x0, &(0x7f0000000040))
sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000a0a03000000000000000000010000060900020073790c9600000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24002840)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=r2, @ANYBLOB="97c37f5a57476d8a341ffee95193071ef12e59795bd21a4b2667612efb7ed1bcf9adecdfe99f1bb5b7c82f752d8af562a3ae843fa880444d261db291fcbb746b8a32c9a79255fb5fdac6dac8861d9c8dadfd488ae07a91bacf943eecf4b12a56d97559fedd328ef70a5c03f7e2befe5e3adae7e5fdf4c60cfdcf043de4f39d3739179c0a99894c237b363d62d5c05f6ddcae20abba6aced8c317b1930b147ba61cc4b0b2da0a7b43e2a95db2383a173842954f01", @ANYRESOCT=r2], 0x84}}, 0x20008040) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=r2, @ANYBLOB="97c37f5a57476d8a341ffee95193071ef12e59795bd21a4b2667612efb7ed1bcf9adecdfe99f1bb5b7c82f752d8af562a3ae843fa880444d261db291fcbb746b8a32c9a79255fb5fdac6dac8861d9c8dadfd488ae07a91bacf943eecf4b12a56d97559fedd328ef70a5c03f7e2befe5e3adae7e5fdf4c60cfdcf043de4f39d3739179c0a99894c237b363d62d5c05f6ddcae20abba6aced8c317b1930b147ba61cc4b0b2da0a7b43e2a95db2383a173842954f01", @ANYRESOCT=r2], 0x84}}, 0x20008040)

16.286982246s ago: executing program 2 (id=5602):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x2400000000000000, 0x80}, 0x20000000)

12.135187143s ago: executing program 2 (id=5602):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x2400000000000000, 0x80}, 0x20000000)

4.707643318s ago: executing program 2 (id=5602):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x2400000000000000, 0x80}, 0x20000000)

3.999649053s ago: executing program 3 (id=5727):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x4, 0x0, 0x0, @broadcast}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x9, 0x3100}, [@RTA_MULTIPATH={0xc, 0x9, {0x7, 0x3, 0x5}}, @RTA_NH_ID={0x8, 0x1e, 0x8}]}, 0x30}}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000002c0)="88", 0x1, 0x31, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0xf809, 0x7800, 0x400, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0xd, 0x29, 0x0, @remote, @rand_addr=0x64010101}}}})
recvfrom$inet(r0, &(0x7f0000000200)=""/185, 0xb9, 0x40000002, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0)

3.090305153s ago: executing program 3 (id=5736):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x101, 0x3, 0x8}, &(0x7f0000000480)=0x10)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r10 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000400)=r9, 0x4)
sendmsg$nl_generic(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r8, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9f96, 0x1e}}}}, [@NL80211_ATTR_CSA_IES={0x4c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x5, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x9, 0x200, 0x3, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x8, 0x7fff, 0x9]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@mesh_chsw={0x76, 0x6, {0x9, 0xe7, 0x1, 0x3ff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0xb5}}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xc8d6, 0x0]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ce}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa6}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880)
shutdown(r1, 0x2)

2.988043137s ago: executing program 3 (id=5737):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @private=0xa010101}], 0x68)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r9, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x8001, 0x97c, 0x1, 0x6}, 0x8)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)
r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r11, 0x0, 0x1)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x200, 0x0, 0x25dfdc01, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.380227321s ago: executing program 1 (id=5740):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async)
setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f00000000c0)=0xffff12b8, 0x4) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400070010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x8004)

2.373744489s ago: executing program 1 (id=5741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000022000ff", @ANYRES32=r3, @ANYBLOB="4800021ca1000082ae2339a00800bc81d300aa"], 0x20}}, 0x0)
bind$rose(r1, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x9)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'U'}]}}}}}}}}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bind$alg(r9, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x3}}}, 0x24}}, 0x0)

1.730102184s ago: executing program 1 (id=5742):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
openat$cgroup_ro(r0, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff})
getsockopt$llc_int(r2, 0x10c, 0x2, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@none})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000100)={r8})
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.595482499s ago: executing program 3 (id=5743):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x6, 0x7f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)

265.517956ms ago: executing program 1 (id=5744):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000c200000240012800b0001006272696448aee3bb1400028008fa0000190000000800020005000000"], 0x44}}, 0x0)

162.60142ms ago: executing program 3 (id=5745):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
syz_emit_ethernet(0x4d, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x17, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x4, 0x0, 'Q'}]}}}}}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'wg0\x00', @broadcast})

162.049856ms ago: executing program 1 (id=5746):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x80, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "18ba22d59d8f8b7156f546282c38c9c2"}]}]}, @IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x81}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000200000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

684.673µs ago: executing program 3 (id=5747):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x20044045}, 0x810)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xf}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x2000040)
sendmsg$kcm(r2, 0x0, 0x4000000)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010420000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

0s ago: executing program 1 (id=5748):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="ec", 0x1}], 0x1, 0x14)
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000001c0)={0x4})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x15)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r5)
sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x1c, r6, 0x926fdb2c68a18847, 0x70bd29, 0x2, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r7, 0x2f, 0x18, 0x4}, 0x20)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1d6)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x4000804)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)

kernel console output (not intermixed with test programs):

[  223.947859][T14733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3014'.
[  224.090877][T14741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3018'.
[  224.095829][T14737] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  224.236561][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'.
[  224.246718][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'.
[  224.506147][T14776] netlink: 'syz.0.3033': attribute type 4 has an invalid length.
[  224.922967][T14814] nlmon0: Master is either lo or non-ether device
[  224.926952][T14817] Cannot find set identified by id 2 to match
[  224.994690][T14825] netlink: 'syz.2.3054': attribute type 29 has an invalid length.
[  225.066248][T14834] netlink: 'syz.1.3058': attribute type 1 has an invalid length.
[  225.221623][T14848] nlmon0: Master is either lo or non-ether device
[  225.520686][T14881] nlmon0: Master is either lo or non-ether device
[  225.784381][T14912] nlmon0: Master is either lo or non-ether device
[  225.806583][T14914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.893534][T14921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.913290][T14921] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  225.925159][T14930] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  225.949815][T14930] veth13: entered promiscuous mode
[  226.005096][T14935] bond10: (slave vcan1): Releasing backup interface
[  226.007970][T14935] vcan1: left promiscuous mode
[  226.021735][T14935] bond11: (slave bridge6): Releasing active interface
[  226.099634][T14942] netlink: 'syz.1.3099': attribute type 83 has an invalid length.
[  226.289707][T14966] netlink: 'syz.2.3106': attribute type 1 has an invalid length.
[  226.312918][T14966] veth17: entered promiscuous mode
[  226.326160][T14966] bond0: (slave veth17): Enslaving as an active interface with an up link
[  226.357074][T14966] gretap2: left allmulticast mode
[  226.358670][T14966] gretap2: left promiscuous mode
[  226.368419][T14966] bridge8: port 1(gretap2) entered disabled state
[  226.383079][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  226.392156][T14966] bond0: (slave veth17): Releasing backup interface
[  226.469577][T14975] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  226.586071][T14982] wg1 speed is unknown, defaulting to 1000
[  226.602398][T14982] lo speed is unknown, defaulting to 1000
[  226.640137][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  226.651332][T14991] netlink: 'syz.1.3117': attribute type 1 has an invalid length.
[  226.658456][T14991] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.684829][T14991] veth25: entered promiscuous mode
[  226.690583][T14991] veth25: entered allmulticast mode
[  226.693654][T14991] bond0: (slave veth25): Enslaving as an active interface with a down link
[  226.707017][T14991] bond0: (slave veth25): Releasing backup interface
[  226.711695][T14991] veth25: left allmulticast mode
[  226.929126][T14988] wg1 speed is unknown, defaulting to 1000
[  226.932735][T14988] lo speed is unknown, defaulting to 1000
[  227.196532][T15013] veth13: entered promiscuous mode
[  227.210924][T15012] nlmon0: Master is either lo or non-ether device
[  227.548828][T15041] veth27: entered promiscuous mode
[  227.882256][T15064] veth27: entered promiscuous mode
[  227.994533][T15072] netlink: 'syz.0.3147': attribute type 1 has an invalid length.
[  227.997953][T15071] nlmon0: Master is either lo or non-ether device
[  228.035218][T15072] bond13: (slave bridge0): making interface the new active one
[  228.038784][T15072] bond13: (slave bridge0): Enslaving as an active interface with an up link
[  228.324320][T15102] __nla_validate_parse: 59 callbacks suppressed
[  228.324335][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'.
[  228.438332][T15114] nlmon0: Master is either lo or non-ether device
[  228.634757][T15131] netlink: 'syz.0.3168': attribute type 2 has an invalid length.
[  228.637542][T15131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3168'.
[  228.642378][T15131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3168'.
[  228.645548][T15131] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  228.707012][T15136] netlink: 'syz.0.3171': attribute type 1 has an invalid length.
[  228.719485][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3170'.
[  228.774486][T15137] 8021q: adding VLAN 0 to HW filter on device bond13
[  228.784941][T15143] macvlan0: entered promiscuous mode
[  228.787131][T15143] macvlan0: entered allmulticast mode
[  228.792932][T15143] bond13: entered promiscuous mode
[  228.797576][T15143] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  228.816014][T15143] bond13: left promiscuous mode
[  228.860584][T15136] 8021q: adding VLAN 0 to HW filter on device bond14
[  228.873596][T15145] bond13: (slave bridge0): Releasing active interface
[  228.881268][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'.
[  228.896392][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3174'.
[  228.932264][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'.
[  229.209215][T15180] No such timeout policy "syz0"
[  229.211284][T15180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3184'.
[  229.327872][T15193] SET target dimension over the limit!
[  229.453023][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'.
[  229.503620][T15211] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3196'.
[  229.553669][T15215] nlmon0: Master is either lo or non-ether device
[  229.734580][   T33] audit: type=1804 audit(1752283443.247:5): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3205" name="/newroot/1147/cgroup.controllers" dev="tmpfs" ino=5811 res=1 errno=0
[  229.777042][   T33] audit: type=1800 audit(1752283443.247:6): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3205" name="cgroup.controllers" dev="tmpfs" ino=5811 res=0 errno=0
[  229.795814][   T33] audit: type=1800 audit(1752283443.247:7): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3205" name="cgroup.controllers" dev="tmpfs" ino=5811 res=0 errno=0
[  229.878124][T15243] validate_nla: 1 callbacks suppressed
[  229.878140][T15243] netlink: 'syz.0.3211': attribute type 1 has an invalid length.
[  230.065314][T15264] nlmon0: Master is either lo or non-ether device
[  230.196862][T15277] netlink: 'syz.0.3223': attribute type 1 has an invalid length.
[  230.313008][T15285] veth19: entered promiscuous mode
[  230.314850][T15285] bridge11: port 1(veth19) entered blocking state
[  230.319321][T15285] bridge11: port 1(veth19) entered disabled state
[  230.323122][T15285] veth19: entered allmulticast mode
[  230.510620][T15302] netlink: 'syz.1.3232': attribute type 1 has an invalid length.
[  230.979350][T15338] bridge0: port 1(macvlan2) entered blocking state
[  230.983458][T15338] bridge0: port 1(macvlan2) entered disabled state
[  230.986209][T15338] macvlan2: entered allmulticast mode
[  230.989065][T15338] bridge0: entered allmulticast mode
[  230.994258][T15338] macvlan2: left allmulticast mode
[  230.996254][T15338] bridge0: left allmulticast mode
[  231.100853][T15340] wg1 speed is unknown, defaulting to 1000
[  231.105190][T15340] lo speed is unknown, defaulting to 1000
[  231.368633][T15360] netlink: 'syz.1.3253': attribute type 10 has an invalid length.
[  231.669204][T15373] netlink: 'syz.0.3259': attribute type 33 has an invalid length.
[  232.100539][T15404] ip6t_srh: unknown srh invflags 4000
[  232.537563][T15431] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  232.564894][T15431] veth0_vlan: left promiscuous mode
[  232.573147][T15431] veth0_vlan: entered promiscuous mode
[  232.583185][T15431] team0: Device veth0_vlan failed to register rx_handler
[  232.632933][T15433] sctp: [Deprecated]: syz.0.3280 (pid 15433) Use of int in max_burst socket option deprecated.
[  232.632933][T15433] Use struct sctp_assoc_value instead
[  232.890878][T15446] netlink: 'syz.2.3285': attribute type 11 has an invalid length.
[  233.033452][T15454] netlink: 'syz.2.3289': attribute type 1 has an invalid length.
[  233.079773][T15454] 8021q: adding VLAN 0 to HW filter on device bond12
[  233.101707][T15454] veth21: entered promiscuous mode
[  233.107125][T15454] bond12: (slave veth21): Enslaving as a backup interface with a down link
[  233.129399][T15454] veth19: left allmulticast mode
[  233.132201][T15454] bridge11: port 1(veth19) entered disabled state
[  233.157496][T15454] bond12: (slave veth21): Releasing backup interface
[  233.160865][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  233.280198][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  233.297958][T15466] wg1 speed is unknown, defaulting to 1000
[  233.305848][T15466] lo speed is unknown, defaulting to 1000
[  233.566376][T15484] netlink: 'syz.2.3298': attribute type 1 has an invalid length.
[  233.604611][T15484] 8021q: adding VLAN 0 to HW filter on device bond13
[  233.627320][T15484] veth23: entered promiscuous mode
[  233.634751][T15484] bond13: (slave veth23): Enslaving as a backup interface with a down link
[  233.693425][T15484] bond13: (slave veth23): Releasing backup interface
[  233.702828][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  233.824128][T15489] __nla_validate_parse: 34 callbacks suppressed
[  233.824145][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3290'.
[  233.964883][T15496] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3302'.
[  234.059584][T15505] netlink: 'syz.2.3305': attribute type 1 has an invalid length.
[  234.165077][T15505] 8021q: adding VLAN 0 to HW filter on device bond14
[  234.196014][T15511] veth25: entered promiscuous mode
[  234.208414][T15511] bond14: (slave veth25): Enslaving as a backup interface with a down link
[  234.218888][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'.
[  234.233019][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'.
[  234.251646][T15505] bond14: (slave veth25): Releasing backup interface
[  234.270739][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  234.443744][T15524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3313'.
[  234.456361][T15527] netlink: 'syz.2.3313': attribute type 6 has an invalid length.
[  234.470167][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  234.721503][T15544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3321'.
[  234.741063][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'.
[  234.745593][T15544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3321'.
[  234.750485][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'.
[  234.754060][T15544] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3321'.
[  235.058636][T15562] validate_nla: 2 callbacks suppressed
[  235.058650][T15562] netlink: 'syz.2.3330': attribute type 12 has an invalid length.
[  235.308691][T15584] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.314265][T15584] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.317133][T15584] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.320027][T15584] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.358446][T15588] netlink: 'syz.0.3342': attribute type 9 has an invalid length.
[  235.737763][T15628] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  235.907792][T15644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.153644][T15667] sctp: [Deprecated]: syz.1.3372 (pid 15667) Use of int in max_burst socket option.
[  236.153644][T15667] Use struct sctp_assoc_value instead
[  236.493882][T15705] nlmon0: Master is either lo or non-ether device
[  236.757921][T15733] nlmon0: Master is either lo or non-ether device
[  236.826913][T15745] netlink: 'syz.2.3400': attribute type 13 has an invalid length.
[  236.971155][T15764] wg1 speed is unknown, defaulting to 1000
[  236.973745][T15764] lo speed is unknown, defaulting to 1000
[  237.061779][T15775] xt_TPROXY: Can be used only with -p tcp or -p udp
[  237.441342][T15808] nbd: illegal input index 65508
[  237.736975][T15839] netlink: 'syz.1.3436': attribute type 9 has an invalid length.
[  238.943601][T15888] __nla_validate_parse: 70 callbacks suppressed
[  238.943619][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'.
[  238.970461][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3454'.
[  239.002131][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'.
[  239.052102][T15896] unknown channel width for channel at 909000KHz?
[  239.179580][T15906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3459'.
[  239.280992][T15910] netlink: 'syz.0.3460': attribute type 4 has an invalid length.
[  239.284252][T15913] netlink: 'syz.0.3460': attribute type 7 has an invalid length.
[  239.436998][T15917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.509670][T15917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.604308][T15917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.676457][T15917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.777918][T15917] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.794197][T15917] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.812107][T15917] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.830473][T15917] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.000537][T15925] netlink: 'syz.1.3464': attribute type 1 has an invalid length.
[  240.007758][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3466'.
[  240.046609][T15925] 8021q: adding VLAN 0 to HW filter on device bond14
[  240.074861][T15925] veth29: entered promiscuous mode
[  240.085390][T15925] bond14: (slave veth29): Enslaving as a backup interface with a down link
[  240.097371][T15925] bond14: (slave veth29): Releasing backup interface
[  240.153083][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3468'.
[  240.909773][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'.
[  240.985037][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3473'.
[  241.050949][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'.
[  241.067943][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'.
[  241.354945][T15973] sch_fq: defrate 0 ignored.
[  242.081982][T16037] unsupported nla_type 58650
[  242.364704][T16050] bond15: entered promiscuous mode
[  242.366750][T16050] 8021q: adding VLAN 0 to HW filter on device bond15
[  242.377674][T16053] vxcan3: entered allmulticast mode
[  243.309168][T16085] netlink: 'syz.1.3513': attribute type 33 has an invalid length.
[  243.506404][T16101] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  243.626932][T16104] nlmon0: Master is either lo or non-ether device
[  243.890314][T16120] wg1 speed is unknown, defaulting to 1000
[  243.894342][T16120] lo speed is unknown, defaulting to 1000
[  243.958831][T16125] __nla_validate_parse: 21 callbacks suppressed
[  243.958847][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3529'.
[  243.975611][T16125] gtp2: entered promiscuous mode
[  244.069265][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.076403][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.079904][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.083131][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.086467][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.093336][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.100269][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.103626][T16130] netlink: 'syz.0.3531': attribute type 3 has an invalid length.
[  244.314400][T16138] netlink: 'syz.0.3533': attribute type 1 has an invalid length.
[  244.387737][T16138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3533'.
[  244.516300][T16146] openvswitch: netlink: Unknown key attributes 2
[  244.547152][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'.
[  245.016051][T16165] wg1 speed is unknown, defaulting to 1000
[  245.019754][T16165] lo speed is unknown, defaulting to 1000
[  245.104847][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3546'.
[  245.553665][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'.
[  245.777049][T16223] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  245.854956][T16229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  246.183552][T16255] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3579'.
[  246.514375][T16281] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  246.516977][T16281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3589'.
[  246.891829][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'.
[  247.026189][T16307] wg1 speed is unknown, defaulting to 1000
[  247.045027][T16307] lo speed is unknown, defaulting to 1000
[  247.131650][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3602'.
[  247.145635][T16314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3602'.
[  247.328692][T16327] openvswitch: netlink: Flow key attr not present in new flow.
[  247.455651][T16335] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  247.503147][T16337] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  248.030047][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  248.764186][T16370] nlmon0: Master is either lo or non-ether device
[  248.775447][T16372] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  248.788942][T16365] validate_nla: 5 callbacks suppressed
[  248.788957][T16365] netlink: 'syz.1.3622': attribute type 2 has an invalid length.
[  248.795266][T16365] netlink: 'syz.1.3622': attribute type 1 has an invalid length.
[  249.016615][T16384] __nla_validate_parse: 11 callbacks suppressed
[  249.016709][T16384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3629'.
[  249.025203][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'.
[  249.029311][T16384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3629'.
[  249.036011][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'.
[  249.039556][T16384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3629'.
[  249.161695][T16393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3633'.
[  249.234658][T16398] nlmon0: Master is either lo or non-ether device
[  249.276078][T16400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3636'.
[  249.367838][T16409] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3641'.
[  249.506458][T16416] nlmon0: Master is either lo or non-ether device
[  249.535576][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3644'.
[  249.585538][T16423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3645'.
[  249.657957][T16426] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  249.709348][T16430] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  249.821493][T16436] nlmon0: Master is either lo or non-ether device
[  250.125647][T16464] nlmon0: Master is either lo or non-ether device
[  250.511489][T16492] bond16: entered promiscuous mode
[  250.514790][T16492] bond16: entered allmulticast mode
[  250.516751][T16492] 8021q: adding VLAN 0 to HW filter on device bond16
[  250.565709][T16500] netlink: 'syz.0.3679': attribute type 39 has an invalid length.
[  250.666139][T16504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.669072][T16504] syzkaller0: entered promiscuous mode
[  250.671456][T16504] syzkaller0: entered allmulticast mode
[  250.691443][T16505] tipc: Resetting bearer <eth:syzkaller0>
[  250.762123][T16503] tipc: Resetting bearer <eth:syzkaller0>
[  250.794228][T16503] tipc: Disabling bearer <eth:syzkaller0>
[  251.032189][T16540] x_tables: duplicate underflow at hook 3
[  251.081569][T16532] block nbd0: server does not support multiple connections per device.
[  251.086183][T16532] block nbd0: shutting down sockets
[  251.211752][T16552] nlmon0: Master is either lo or non-ether device
[  251.282501][T16560] netlink: 'syz.1.3699': attribute type 1 has an invalid length.
[  251.297188][   T56] block nbd0: Wrong magic (0x24000000)
[  251.322803][T16560] 8021q: adding VLAN 0 to HW filter on device bond16
[  251.352642][T16560] veth31: entered promiscuous mode
[  251.358071][T16560] bond16: (slave veth31): Enslaving as a backup interface with a down link
[  251.383778][T16560] bond16: (slave veth31): Releasing backup interface
[  251.514244][T16582] netlink: 'syz.2.3704': attribute type 13 has an invalid length.
[  251.516661][T16582] netlink: 'syz.2.3704': attribute type 17 has an invalid length.
[  251.579220][T16582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.586364][ T5833] lo speed is unknown, defaulting to 1000
[  251.586586][T16587] nlmon0: Master is either lo or non-ether device
[  251.588385][ T5833] syz2: Port: 1 Link ACTIVE
[  251.616867][T16590] wg1 speed is unknown, defaulting to 1000
[  251.619568][T16590] lo speed is unknown, defaulting to 1000
[  251.670801][T16582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.729260][T16602] netlink: 'syz.1.3710': attribute type 1 has an invalid length.
[  251.738219][T16582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.772393][T16602] 8021q: adding VLAN 0 to HW filter on device bond17
[  251.797000][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.800588][T16602] veth33: entered promiscuous mode
[  251.806653][T16602] bond17: (slave veth33): Enslaving as a backup interface with a down link
[  251.824497][T16602] bond17: (slave veth33): Releasing backup interface
[  251.997832][T16616] nlmon0: Master is either lo or non-ether device
[  252.133673][T16629] netlink: 'syz.1.3720': attribute type 4 has an invalid length.
[  252.236405][T16639] nlmon0: Master is either lo or non-ether device
[  252.327411][   T33] audit: type=1107 audit(1752283465.837:8): pid=16647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='<_'
[  252.560835][T16675] netlink: 'syz.0.3734': attribute type 1 has an invalid length.
[  252.563314][T16675] netlink: 'syz.0.3734': attribute type 1 has an invalid length.
[  252.695163][T16662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.779830][T16693] tipc: Invalid UDP bearer configuration
[  252.780288][T16693] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  252.789622][T16693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.881829][T16699] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.936491][T16700] hsr0: entered promiscuous mode
[  252.939019][T16700] macvlan0: entered promiscuous mode
[  252.941533][T16700] macvlan0: entered allmulticast mode
[  252.947378][T16699] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.015427][T16699] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.075954][T16699] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.139473][T16699] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.156100][T16699] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.172103][T16699] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.184396][T16699] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.366288][T16710] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  253.369169][T16710] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  254.068119][T16765] __nla_validate_parse: 33 callbacks suppressed
[  254.068136][T16765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3764'.
[  254.085501][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3764'.
[  254.091711][T16765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3764'.
[  254.094232][T16767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3765'.
[  254.095105][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3764'.
[  254.100208][T16767] nbd: must specify at least one socket
[  254.102040][T16765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3764'.
[  254.414648][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'.
[  254.468800][T16786] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  254.584341][T16792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3773'.
[  254.587690][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'.
[  254.595591][T16792] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3773'.
[  254.906070][T16802] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  254.954998][T16804] tipc: Failed to remove unknown binding: 66,1,1/2886997034:2523733630/2523733632
[  255.238638][T16818] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  255.408480][T16830] tipc: New replicast peer: 255.255.255.255
[  255.412408][T16830] tipc: Enabled bearer <udp:syz2>, priority 6
[  255.655617][T16856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.798992][T16867] validate_nla: 4 callbacks suppressed
[  255.799008][T16867] netlink: 'syz.2.3802': attribute type 2 has an invalid length.
[  255.815513][T16867] : entered promiscuous mode
[  255.882540][T16870] wg1 speed is unknown, defaulting to 1000
[  255.886632][T16870] lo speed is unknown, defaulting to 1000
[  255.887494][T16872] ksmbd: Unknown IPC event: 3, ignore.
[  256.020218][T16880] !: renamed from dummy0 (while UP)
[  256.463050][T16920] veth0: entered promiscuous mode
[  256.708792][T16930] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  256.965171][T16948] pimreg: entered allmulticast mode
[  256.968507][T16948] pimreg: left allmulticast mode
[  257.179779][T16958] 8021q: VLANs not supported on nlmon0
[  257.232084][T16963] nlmon0: Master is either lo or non-ether device
[  257.347396][T16967] nft_compat: unsupported protocol 0
[  257.537466][T16974] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  257.670317][T16982] nlmon0: Master is either lo or non-ether device
[  257.773677][T16990] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  257.790039][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  257.934306][T17001] nlmon0: Master is either lo or non-ether device
[  258.357525][T17025] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  258.424394][T17027] syzkaller1: entered promiscuous mode
[  258.426811][T17027] syzkaller1: entered allmulticast mode
[  258.573515][T17029] nlmon0: Master is either lo or non-ether device
[  258.626608][T17033] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  258.837342][T17047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.957585][T17053] nlmon0: Master is either lo or non-ether device
[  259.053387][T17058] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  259.076516][T17060] __nla_validate_parse: 26 callbacks suppressed
[  259.076532][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'.
[  259.185863][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'.
[  259.249171][T17070] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  259.254348][T17070] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  259.447490][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'.
[  259.456671][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3866'.
[  259.547959][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'.
[  259.552624][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'.
[  259.556326][T17086] ip6gre3: entered promiscuous mode
[  259.569125][T17088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'.
[  259.683856][T17099] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3871'.
[  259.814290][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'.
[  259.831547][T17113] netlink: 'syz.0.3873': attribute type 1 has an invalid length.
[  259.851921][T17113] veth13: entered promiscuous mode
[  259.888511][T17116] erspan0: entered allmulticast mode
[  259.965572][T17122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3876'.
[  260.066855][T17128] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  260.185694][T17138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  260.614977][T17183] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  261.175526][T17190] sctp: [Deprecated]: syz.1.3902 (pid 17190) Use of int in maxseg socket option.
[  261.175526][T17190] Use struct sctp_assoc_value instead
[  261.408442][T17204] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  261.436447][T17204] netlink: 'syz.2.3908': attribute type 10 has an invalid length.
[  261.438925][T17204] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  261.442977][T17204] bond0: (slave wlan1): refused to change device type
[  261.455203][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  261.551568][T17217] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  261.594883][T17221] netlink: 'syz.0.3913': attribute type 3 has an invalid length.
[  261.829183][T17228] netlink: 'syz.2.3916': attribute type 21 has an invalid length.
[  261.840375][T17229] netlink: 'syz.2.3916': attribute type 21 has an invalid length.
[  262.312197][T17252] nlmon0: Master is either lo or non-ether device
[  262.350971][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  262.384507][T17256] wg1 speed is unknown, defaulting to 1000
[  262.388251][T17256] lo speed is unknown, defaulting to 1000
[  263.065299][T17294] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  263.347560][T17317] xt_limit: Overflow, try lower: 0/0
[  263.413202][T17324] netlink: 'syz.2.3947': attribute type 1 has an invalid length.
[  263.441266][T17324] 8021q: adding VLAN 0 to HW filter on device bond16
[  263.480657][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  263.539823][T17332] dvmrp1: entered allmulticast mode
[  264.060240][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  264.514163][T17404] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  264.654395][T17411] __nla_validate_parse: 18 callbacks suppressed
[  264.654412][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'.
[  264.663581][T17411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3975'.
[  264.663933][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3977'.
[  264.686806][T17413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3977'.
[  264.739601][T17420] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  264.759223][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3979'.
[  264.892346][   T55] Bluetooth: hci2: link tx timeout
[  264.894435][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  264.901923][ T5218] Bluetooth: hci2: link tx timeout
[  264.903945][ T5218] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  265.057375][T17443] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  265.146168][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3992'.
[  265.256308][T17457] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3996'.
[  265.273110][T17457] netlink: 'syz.1.3996': attribute type 1 has an invalid length.
[  265.287375][T17460] netlink: 'syz.2.3998': attribute type 21 has an invalid length.
[  265.295072][T17460] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3998'.
[  265.298908][T17460] netlink: 'syz.2.3998': attribute type 5 has an invalid length.
[  265.303428][T17460] netlink: 'syz.2.3998': attribute type 6 has an invalid length.
[  265.306517][T17460] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3998'.
[  265.426294][T17471] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4003'.
[  265.467157][T17473] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  265.760149][T17471] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.764034][T17471] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.767545][T17471] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.771955][T17471] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.808057][T17471] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  265.812187][T17471] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  265.815148][T17471] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  265.818280][T17471] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  265.848959][   T10] lo speed is unknown, defaulting to 1000
[  265.851158][   T10] syz2: Port: 1 Link DOWN
[  266.122742][T17504] netlink: 'syz.0.4016': attribute type 39 has an invalid length.
[  266.533416][T17539] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  266.736892][T17561] batadv_slave_1: entered promiscuous mode
[  266.756037][T17560] batadv_slave_1: left promiscuous mode
[  266.807888][T17572] validate_nla: 1 callbacks suppressed
[  266.807898][T17572] netlink: 'syz.2.4044': attribute type 1 has an invalid length.
[  266.832688][T17572] 8021q: adding VLAN 0 to HW filter on device bond17
[  266.847302][T17572] veth1: entered promiscuous mode
[  266.861544][T17572] bond17: (slave veth1): Enslaving as a backup interface with a down link
[  266.876940][T17572] bond17: (slave veth1): Releasing backup interface
[  266.912526][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  267.044053][T17589] netlink: 'syz.2.4051': attribute type 1 has an invalid length.
[  267.093728][T17593] batadv_slave_1: entered promiscuous mode
[  267.858719][T17644] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  268.821048][T17673] netlink: 'syz.2.4081': attribute type 1 has an invalid length.
[  268.855501][T17677] xt_TCPMSS: Only works on TCP SYN packets
[  268.964343][T17673] 8021q: adding VLAN 0 to HW filter on device bond18
[  269.000831][T17681] veth31: entered promiscuous mode
[  269.006109][T17681] bond18: (slave veth31): Enslaving as a backup interface with a down link
[  269.067120][T17690] netlink: 'syz.2.4085': attribute type 10 has an invalid length.
[  269.073792][T17690] batman_adv: batadv0: Adding interface: team0
[  269.076222][T17690] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.087377][T17690] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  269.110991][T17690] netlink: 'syz.2.4085': attribute type 10 has an invalid length.
[  269.114253][T17690] team0: entered promiscuous mode
[  269.117328][T17690] 8021q: adding VLAN 0 to HW filter on device team0
[  269.122245][T17690] batman_adv: batadv0: Interface activated: team0
[  269.124868][T17690] batman_adv: batadv0: Interface deactivated: team0
[  269.127417][T17690] batman_adv: batadv0: Removing interface: team0
[  269.257919][T17700] @: renamed from bond_slave_0
[  269.599491][T17714] netlink: 'syz.1.4093': attribute type 1 has an invalid length.
[  269.652989][T17717] IPv6: Can't replace route, no match found
[  269.688408][T17719] __nla_validate_parse: 34 callbacks suppressed
[  269.688422][T17719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4096'.
[  269.788644][T17723] lo: entered promiscuous mode
[  269.797120][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4098'.
[  269.802585][T17722] lo: left promiscuous mode
[  269.915634][T17736] ip6gre3: entered promiscuous mode
[  269.947141][T17737] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  269.960317][T17732] nbd1: detected capacity change from 0 to 127
[  269.967987][   T56] block nbd1: Receive control failed (result -32)
[  269.972934][T17499] block nbd1: Send control failed (result -32)
[  269.975838][T17499] block nbd1: Request send failed, requeueing
[  269.993219][T17499] block nbd1: Dead connection, failed to find a fallback
[  269.998685][   T61] block nbd1: Dead connection, failed to find a fallback
[  270.003450][   T61] block nbd1: shutting down sockets
[  270.005418][   T61] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.008287][T17741] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  270.008492][   T61] Buffer I/O error on dev nbd1, logical block 0, async page read
[  270.012726][T17741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4105'.
[  270.018489][T17499] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.025549][T17499] Buffer I/O error on dev nbd1, logical block 1, async page read
[  270.028405][T17499] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.031733][T17499] Buffer I/O error on dev nbd1, logical block 2, async page read
[  270.034144][T17499] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.038118][T17499] Buffer I/O error on dev nbd1, logical block 3, async page read
[  270.042890][T17499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.045676][T17499] Buffer I/O error on dev nbd1, logical block 0, async page read
[  270.048926][T17499] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.052275][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4105'.
[  270.058972][T17499] Buffer I/O error on dev nbd1, logical block 1, async page read
[  270.069280][T17499] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.073863][T17499] Buffer I/O error on dev nbd1, logical block 2, async page read
[  270.076356][T17499] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.079057][T17499] Buffer I/O error on dev nbd1, logical block 3, async page read
[  270.083458][T17499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.086268][T17499] Buffer I/O error on dev nbd1, logical block 0, async page read
[  270.088662][T17499] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  270.092536][T17499] Buffer I/O error on dev nbd1, logical block 1, async page read
[  270.102244][T17499] ldm_validate_partition_table(): Disk read failed.
[  270.107249][T17499] Dev nbd1: unable to read RDB block 0
[  270.117456][T17499]  nbd1: unable to read partition table
[  270.146055][T17499] ldm_validate_partition_table(): Disk read failed.
[  270.153943][T17499] Dev nbd1: unable to read RDB block 0
[  270.157809][T17499]  nbd1: unable to read partition table
[  270.173573][T17745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4107'.
[  270.283536][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'.
[  270.488834][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4117'.
[  270.504782][T17775] netlink: 'syz.2.4117': attribute type 1 has an invalid length.
[  270.508261][T17775] netlink: 'syz.2.4117': attribute type 4 has an invalid length.
[  270.520729][T17775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4117'.
[  270.642476][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'.
[  271.016112][T17805] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4130'.
[  271.399750][T17830] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  271.421635][T17830] bond18: entered promiscuous mode
[  271.430733][T17830] bond18: entered allmulticast mode
[  271.434008][T17830] 8021q: adding VLAN 0 to HW filter on device bond18
[  271.702953][T17864] netlink: 'syz.1.4149': attribute type 5 has an invalid length.
[  271.827776][T17872] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  271.946464][T17881] syzkaller1: entered promiscuous mode
[  271.948627][T17881] syzkaller1: entered allmulticast mode
[  272.867655][T17930] SET target dimension over the limit!
[  273.508039][T17959] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  273.616152][T17970] 0: renamed from hsr0
[  273.626132][T17970] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  273.631082][T17970] 0: Slave B (c0) is not up; please bring it up to get a fully working HSR network
[  273.635525][T17970] 0: entered allmulticast mode
[  273.637245][T17970] hsr_slave_0: entered allmulticast mode
[  273.646831][T17970] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  273.661806][T17970] netlink: 'syz.1.4187': attribute type 6 has an invalid length.
[  274.322833][T18024] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  274.697052][T18037] __nla_validate_parse: 30 callbacks suppressed
[  274.697065][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4211'.
[  274.841735][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.846034][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.849445][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.852902][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.855996][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.859177][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.866344][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.869430][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  274.873432][T18044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4214'.
[  275.118524][T18050] netlink: 'syz.2.4216': attribute type 3 has an invalid length.
[  275.554646][T18058] netlink: 'syz.1.4218': attribute type 2 has an invalid length.
[  275.567112][T18058] : entered promiscuous mode
[  275.617397][T18064] netlink: 'syz.2.4222': attribute type 11 has an invalid length.
[  314.217874][T18075] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  314.221895][T18075] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  314.227034][T18075] __nla_validate_parse: 25 callbacks suppressed
[  314.227047][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'.
[  314.263799][T18074] tipc: Enabled bearer <udp:syz2>, priority 6
[  314.328479][T18079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.381371][T18079] sctp: [Deprecated]: syz.1.4230 (pid 18079) Use of struct sctp_assoc_value in delayed_ack socket option.
[  314.381371][T18079] Use struct sctp_sack_info instead
[  314.446459][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.450433][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.454166][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.457762][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.462340][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.485267][T18084] wg1 speed is unknown, defaulting to 1000
[  314.487962][T18084] lo speed is unknown, defaulting to 1000
[  314.505801][T18090] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4232'.
[  314.508581][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4232'.
[  314.574254][T18087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4231'.
[  314.604309][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4231'.
[  314.654256][T18101] netlink: 'syz.2.4233': attribute type 21 has an invalid length.
[  314.656948][T18101] netlink: 'syz.2.4233': attribute type 6 has an invalid length.
[  314.660176][T18101] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4233'.
[  314.663042][T18084] chnl_net:caif_netlink_parms(): no params data found
[  314.728390][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'.
[  314.747538][T18084] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.749823][T18084] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.752564][T18084] bridge_slave_0: entered allmulticast mode
[  314.755434][T18084] bridge_slave_0: entered promiscuous mode
[  314.782529][T18084] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.784831][T18084] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.787110][T18084] bridge_slave_1: entered allmulticast mode
[  314.790826][T18084] bridge_slave_1: entered promiscuous mode
[  314.822161][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.828295][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  314.858643][T18084] team0: Port device team_slave_0 added
[  314.868868][T18084] team0: Port device team_slave_1 added
[  314.913417][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'.
[  314.917597][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.920968][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.931217][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.942863][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.945037][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.952908][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.996062][T18084] hsr_slave_0: entered promiscuous mode
[  314.998343][T18084] hsr_slave_1: entered promiscuous mode
[  315.132136][T18128] xt_NFQUEUE: number of total queues is 0
[  315.187283][T18084] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  315.195234][T18084] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  315.202383][T18084] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  315.209046][T18084] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  315.244838][T18084] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.247103][T18084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.249470][T18084] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.251721][T18084] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.275988][T18141] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  315.295015][T18140] x_tables: duplicate underflow at hook 2
[  315.332040][T18084] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.340539][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.344572][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.381752][T18084] 8021q: adding VLAN 0 to HW filter on device team0
[  315.392368][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.394761][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.414962][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.417326][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.673087][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.766701][T18084] veth0_vlan: entered promiscuous mode
[  315.783709][T18084] veth1_vlan: entered promiscuous mode
[  315.805534][T18084] veth0_macvtap: entered promiscuous mode
[  315.809557][T18084] veth1_macvtap: entered promiscuous mode
[  315.832210][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.845763][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.851173][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'.
[  315.852234][T18084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.857410][T18084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.862882][T18084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.865446][T18084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.926689][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.929096][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.962108][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.965554][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.060892][T18176] ipt_rpfilter: unknown options
[  316.076084][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'.
[  316.294239][T18192] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  316.294295][ T5865] bond0: (slave bond_slave_0): interface is now down
[  316.310971][ T5865] bond0: (slave bond_slave_1): interface is now down
[  316.325229][ T5865] bond0: now running without any active interface!
[  316.510851][   T55] Bluetooth: hci3: command tx timeout
[  316.519257][T18205] netlink: 'syz.3.4268': attribute type 7 has an invalid length.
[  316.522468][T18205] netlink: 'syz.3.4268': attribute type 3 has an invalid length.
[  316.616698][T18210] : entered promiscuous mode
[  317.102430][T18230] openvswitch: netlink: Key type 30 is not supported
[  317.901231][T18256] Bluetooth: MGMT ver 1.23
[  318.169554][T18264] vlan3: entered promiscuous mode
[  318.174116][T18264] vlan3: entered allmulticast mode
[  318.590138][   T55] Bluetooth: hci3: command tx timeout
[  318.653485][T18280] netlink: 'syz.2.4297': attribute type 4 has an invalid length.
[  318.659793][T18287] netlink: 'syz.2.4297': attribute type 4 has an invalid length.
[  318.906715][T18306] bond18: (slave veth31): Releasing backup interface
[  318.910912][T18303] nbd2: detected capacity change from 0 to 127
[  318.951413][   T57] block nbd2: Receive control failed (result -104)
[  319.194682][T18323] sctp: [Deprecated]: syz.2.4312 (pid 18323) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.194682][T18323] Use struct sctp_sack_info instead
[  319.222618][T18323] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000
[  319.726434][T18342] __nla_validate_parse: 16 callbacks suppressed
[  319.726450][T18342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4320'.
[  319.736370][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4320'.
[  319.743256][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4320'.
[  319.746564][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4320'.
[  319.751394][T18342] @: renamed from vlan0 (while UP)
[  319.755848][T18342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4320'.
[  319.816432][T18344] netlink: 'syz.3.4321': attribute type 11 has an invalid length.
[  319.819173][T18344] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4321'.
[  320.078300][T18351] IPVS: Unknown mcast interface: vlan0
[  320.170618][T18363] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4327'.
[  320.293821][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'.
[  320.354272][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'.
[  320.369939][T18380] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  320.493495][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4336'.
[  320.667752][T18402] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.673956][   T55] Bluetooth: hci3: command tx timeout
[  320.822487][T18416] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  320.845220][T18416] bond1: entered promiscuous mode
[  320.847741][T18416] bond1: entered allmulticast mode
[  320.849720][T18416] 8021q: adding VLAN 0 to HW filter on device bond1
[  320.865075][T18416] dummy0: entered promiscuous mode
[  320.866818][T18416] vlan0: entered promiscuous mode
[  321.046104][T18427] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  321.587966][T18437] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  321.592212][T18437] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  321.597198][T18437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  321.601074][T18437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.611579][T18437] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.615110][T18437] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.618644][T18437] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.622384][T18437] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  322.388494][T18473] bridge0: entered promiscuous mode
[  322.391204][T18473] vlan0: entered promiscuous mode
[  322.427723][T18476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.533055][T18478] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  322.760715][   T55] Bluetooth: hci3: command tx timeout
[  323.560246][T18522] netlink: 'syz.2.4385': attribute type 10 has an invalid length.
[  323.563014][T18522] team0: left promiscuous mode
[  323.565766][T18522] batman_adv: batadv0: Adding interface: team0
[  323.567706][T18522] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.575991][T18522] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  323.579291][T18522] netlink: 'syz.2.4385': attribute type 10 has an invalid length.
[  323.582920][T18522] team0: entered promiscuous mode
[  323.586139][T18522] 8021q: adding VLAN 0 to HW filter on device team0
[  323.588344][T18522] batman_adv: batadv0: Interface activated: team0
[  323.590986][T18522] batman_adv: batadv0: Interface deactivated: team0
[  323.593993][T18522] batman_adv: batadv0: Removing interface: team0
[  323.720616][T18530] wg1 speed is unknown, defaulting to 1000
[  323.723405][T18530] lo speed is unknown, defaulting to 1000
[  323.773809][T18529] netlink: 'syz.2.4387': attribute type 13 has an invalid length.
[  323.777111][T18529] netlink: 'syz.2.4387': attribute type 11 has an invalid length.
[  323.983160][T18535] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  324.125149][T18541] openvswitch: netlink: IP tunnel dst address not specified
[  325.492930][T18579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  325.496426][T18579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  325.689126][T18585] netlink: 'syz.1.4406': attribute type 27 has an invalid length.
[  325.869507][T18595] ipt_REJECT: TCP_RESET invalid for non-tcp
[  326.137045][T18611] __nla_validate_parse: 16 callbacks suppressed
[  326.137058][T18611] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4414'.
[  326.257678][T18618] netlink: 'syz.1.4417': attribute type 1 has an invalid length.
[  326.265345][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4417'.
[  326.323900][T18620] unknown channel width for channel at 909000KHz?
[  326.326464][T18620] unknown channel width for channel at 909000KHz?
[  326.330620][T18620] unknown channel width for channel at 909000KHz?
[  326.385345][T18623] wg1 speed is unknown, defaulting to 1000
[  326.389450][T18623] lo speed is unknown, defaulting to 1000
[  326.503681][T18631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4422'.
[  326.515800][T18633] netlink: 'syz.1.4421': attribute type 1 has an invalid length.
[  326.518200][T18633] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4421'.
[  326.661248][T18647] netlink: 'syz.3.4426': attribute type 9 has an invalid length.
[  326.663675][T18647] netlink: 'syz.3.4426': attribute type 7 has an invalid length.
[  326.666008][T18647] netlink: 'syz.3.4426': attribute type 8 has an invalid length.
[  326.717936][T18649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4427'.
[  326.859437][T18653] nbd: socks must be embedded in a SOCK_ITEM attr
[  326.878739][T18653] block nbd3: shutting down sockets
[  326.885891][T18647] wg1 speed is unknown, defaulting to 1000
[  326.899309][T18647] lo speed is unknown, defaulting to 1000
[  327.266367][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4435'.
[  327.268920][T18687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4437'.
[  327.307101][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'.
[  327.639169][T18711] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4446'.
[  327.677240][T18710] wg1 speed is unknown, defaulting to 1000
[  327.879371][T18720] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4448'.
[  327.968979][T18725] netlink: 'syz.3.4449': attribute type 11 has an invalid length.
[  328.069359][T18729] team0: Port device geneve0 added
[  328.288001][T18738] dvmrp1: left allmulticast mode
[  328.363737][T18740] delete_channel: no stack
[  328.484895][   T33] audit: type=1804 audit(1752283541.997:9): pid=18751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4461" name="/newroot/1436/memory.events" dev="tmpfs" ino=7280 res=1 errno=0
[  328.503789][   T33] audit: type=1800 audit(1752283541.997:10): pid=18751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4461" name="memory.events" dev="tmpfs" ino=7280 res=0 errno=0
[  328.542564][T18754] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  328.724890][T18758] nbd: must specify a size in bytes for the device
[  329.012060][T18767] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  329.411947][T18794] lo: entered promiscuous mode
[  329.414404][T18794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  329.440583][T18799] ipt_REJECT: TCP_RESET invalid for non-tcp
[  330.601983][T18826] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  330.703181][T18837] xt_cluster: node mask cannot exceed total number of nodes
[  330.828864][T18857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.864359][T18861] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.213878][T18891] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.375840][T18904] __nla_validate_parse: 15 callbacks suppressed
[  331.375859][T18904] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4516'.
[  331.581849][T18921] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.785921][T18939] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.887428][T18944] validate_nla: 3 callbacks suppressed
[  331.887444][T18944] netlink: 'syz.1.4531': attribute type 3 has an invalid length.
[  331.892931][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4531'.
[  331.995193][T18950] xt_policy: output policy not valid in PREROUTING and INPUT
[  331.998444][T18950] sctp: [Deprecated]: syz.1.4533 (pid 18950) Use of int in max_burst socket option deprecated.
[  331.998444][T18950] Use struct sctp_assoc_value instead
[  332.223291][T18960] netlink: 'syz.3.4538': attribute type 1 has an invalid length.
[  332.226529][T18960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.283802][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4539'.
[  332.686386][T18968] wg1 speed is unknown, defaulting to 1000
[  333.009403][T18983] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  333.372726][T19018] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  333.441824][T19023] xt_l2tp: v2 doesn't support IP mode
[  333.511186][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'.
[  333.514431][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4558'.
[  333.528039][T19030] netlink: 'syz.3.4559': attribute type 3 has an invalid length.
[  333.532825][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4559'.
[  333.588757][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4560'.
[  333.744798][T19045] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4565'.
[  333.748775][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4565'.
[  334.004678][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'.
[  334.158074][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.161542][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.164105][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.166503][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.169082][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.175259][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.178714][T19077] netlink: 'syz.1.4576': attribute type 4 has an invalid length.
[  334.505292][T19100] rdma_rxe: rxe_newlink: failed to add lo
[  334.569545][T19106] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  334.575067][T19105] ip6gre0: entered allmulticast mode
[  334.866695][T19122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  334.926195][T19126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.931381][T19126] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  334.933849][T19126] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  334.937028][T19126] tipc: Resetting bearer <eth:syzkaller0>
[  334.954493][T19126] tipc: Resetting bearer <eth:syzkaller0>
[  335.209433][T19138] 8021q: adding VLAN 0 to HW filter on device bond19
[  335.256574][T19138] 8021q: adding VLAN 0 to HW filter on device bond19
[  335.260535][T19138] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address
[  335.267373][T19138] bond19: (slave vxcan5): Error -95 calling set_mac_address
[  335.308561][T19147] bond19: (slave bridge5): Enslaving as an active interface with a down link
[  335.538909][T19158] wg1 speed is unknown, defaulting to 1000
[  335.543559][T19154] sctp: [Deprecated]: syz.3.4606 (pid 19154) Use of int in max_burst socket option.
[  335.543559][T19154] Use struct sctp_assoc_value instead
[  335.716986][T19169] wg1 speed is unknown, defaulting to 1000
[  336.658872][T19214] __nla_validate_parse: 6 callbacks suppressed
[  336.658884][T19214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4621'.
[  337.327241][T19240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4625'.
[  337.456541][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4627'.
[  337.550602][T19244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4626'.
[  337.582614][T19252] wg1 speed is unknown, defaulting to 1000
[  337.710189][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4628'.
[  337.815630][T19260] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  337.907214][T19262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4631'.
[  338.332681][T19269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4634'.
[  338.336245][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4634'.
[  338.680216][   T55] Bluetooth: hci3: command tx timeout
[  338.874585][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4643'.
[  338.877540][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4643'.
[  338.888120][T19294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.948577][T19302] tap0: tun_chr_ioctl cmd 1074025677
[  338.950594][T19302] tap0: linktype set to 768
[  339.644216][T19294] Bluetooth: hci1: Opcode 0x080f failed: -4
[  339.697424][T19308] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  339.722231][T19310] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  339.887092][T19318] xt_time: unknown flags 0x4
[  339.937954][T19322] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  340.004673][T19324] xt_CT: No such helper "syz0"
[  340.335790][T19350] tipc: Started in network mode
[  340.337911][T19350] tipc: Node identity 6e766324f39, cluster identity 4711
[  340.341259][T19350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.345719][T19350] syzkaller0: entered promiscuous mode
[  340.347918][T19350] syzkaller0: entered allmulticast mode
[  340.355067][T19350] tipc: Resetting bearer <eth:syzkaller0>
[  340.359439][T19348] tipc: Resetting bearer <eth:syzkaller0>
[  340.377020][T19348] tipc: Disabling bearer <eth:syzkaller0>
[  340.479171][T19359] validate_nla: 27 callbacks suppressed
[  340.479184][T19359] netlink: 'syz.3.4667': attribute type 2 has an invalid length.
[  340.570777][T19364] syzkaller1: entered promiscuous mode
[  340.577397][T19364] syzkaller1: entered allmulticast mode
[  340.726263][T19372] netlink: 'syz.3.4673': attribute type 8 has an invalid length.
[  340.910604][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  341.677125][T19423] __nla_validate_parse: 8 callbacks suppressed
[  341.677140][T19423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4689'.
[  341.682851][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4689'.
[  341.685897][T19423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4689'.
[  341.688858][T19423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4689'.
[  341.692362][T19423] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4689'.
[  341.869618][T19434] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4693'.
[  341.968667][T19438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4695'.
[  341.993372][T19441] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4696'.
[  342.012486][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4697'.
[  342.039262][T19447] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29184
[  342.074248][T19453] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4700'.
[  342.135952][T19459] vxcan1: MTU too low for tipc bearer
[  342.137743][T19459] tipc: Enabling of bearer <eth:vxcan1> rejected, failed to enable media
[  342.146803][T19462] netlink: 'syz.2.4704': attribute type 2 has an invalid length.
[  342.894124][T19507] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  342.998562][T19513] netlink: 'syz.1.4721': attribute type 9 has an invalid length.
[  343.233743][T19527] netlink: 'syz.1.4728': attribute type 1 has an invalid length.
[  343.557704][ T5898] wlan1: Trigger new scan to find an IBSS to join
[  344.140231][T19572] netlink: 'syz.2.4741': attribute type 1 has an invalid length.
[  344.196916][T19579] 8021q: adding VLAN 0 to HW filter on device bond19
[  344.268097][T19572] veth35: entered promiscuous mode
[  344.279084][T19572] bond19: (slave veth35): Enslaving as a backup interface with a down link
[  344.287964][T19579] tipc: Resetting bearer <eth:syzkaller0>
[  344.297252][T19579] bond19: (slave veth35): Releasing backup interface
[  345.447007][T19596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.603077][ T5891] hid-generic 0005:16BF:5505.0002: item fetching failed at offset 0/3
[  345.607664][ T5891] hid-generic 0005:16BF:5505.0002: probe with driver hid-generic failed with error -22
[  345.646563][ T5894] hid-generic 0005:16BF:5505.0003: item fetching failed at offset 0/3
[  345.655357][ T5894] hid-generic 0005:16BF:5505.0003: probe with driver hid-generic failed with error -22
[  345.778656][T19630] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  346.178272][T19654] delete_channel: no stack
[  346.298846][T19661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.305148][T19661] syzkaller0: entered promiscuous mode
[  346.308159][T19661] syzkaller0: entered allmulticast mode
[  346.343431][T19661] tipc: Resetting bearer <eth:syzkaller0>
[  346.357111][T19661] tipc: Disabling bearer <eth:syzkaller0>
[  346.471869][T19678] xt_hashlimit: size too large, truncated to 1048576
[  346.591695][   T32] wlan1: Trigger new scan to find an IBSS to join
[  346.784675][T19701] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  346.789203][T19699] __nla_validate_parse: 24 callbacks suppressed
[  346.789214][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'.
[  347.305080][T19719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4789'.
[  347.606849][T19734] netlink: 'syz.1.4794': attribute type 1 has an invalid length.
[  347.782913][T19738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4796'.
[  347.836749][T19747] netlink: 'syz.1.4799': attribute type 2 has an invalid length.
[  347.841533][T19747] netlink: 'syz.1.4799': attribute type 1 has an invalid length.
[  347.844891][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.848059][T19747] netlink: 'syz.1.4799': attribute type 2 has an invalid length.
[  347.859965][T19747] netlink: 'syz.1.4799': attribute type 1 has an invalid length.
[  347.862427][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.870537][T19747] netlink: 'syz.1.4799': attribute type 2 has an invalid length.
[  347.873064][T19747] netlink: 'syz.1.4799': attribute type 1 has an invalid length.
[  347.875549][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.880300][T19747] netlink: 'syz.1.4799': attribute type 2 has an invalid length.
[  347.883595][T19747] netlink: 'syz.1.4799': attribute type 1 has an invalid length.
[  347.888269][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.892680][T19747] netlink: 'syz.1.4799': attribute type 2 has an invalid length.
[  347.895167][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.898188][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  347.904370][T19747] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4799'.
[  348.083359][T19759] openvswitch: netlink: IPv4 tunnel dst address is zero
[  348.281893][T19771] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  348.285408][T19771] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  348.847656][ T5891] IPVS: starting estimator thread 0...
[  348.849786][T19811] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004
[  348.936966][T19813] IPVS: using max 42 ests per chain, 100800 per kthread
[  348.965721][T19818] veth0_vlan: left promiscuous mode
[  348.969598][T19818] veth0_vlan: entered promiscuous mode
[  348.982033][T19818] team0: Device veth0_vlan failed to register rx_handler
[  349.477491][T19851] blkio.reset_stats is deprecated
[  349.484565][   T61] block nbd2: Possible stuck request ffff888021e28000: control (read@0,1024B). Runtime 30 seconds
[  349.489132][   T61] block nbd2: Possible stuck request ffff888021e28200: control (read@1024,1024B). Runtime 30 seconds
[  349.496749][   T61] block nbd2: Possible stuck request ffff888021e28400: control (read@2048,1024B). Runtime 30 seconds
[  349.501933][   T61] block nbd2: Possible stuck request ffff888021e28600: control (read@3072,1024B). Runtime 30 seconds
[  349.530834][T19853] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  349.551180][  T103] wlan1: Trigger new scan to find an IBSS to join
[  349.624907][T19864] xt_ecn: cannot match TCP bits for non-tcp packets
[  349.726430][T19872] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004
[  349.766934][T19877] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  350.440966][   T36] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  350.868028][T19897] xt_hashlimit: max too large, truncated to 1048576
[  350.887111][T19897] pim6reg: entered allmulticast mode
[  350.920055][T19897] pim6reg: left allmulticast mode
[  351.954346][T19928] __nla_validate_parse: 46 callbacks suppressed
[  351.954369][T19928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4865'.
[  351.970195][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4865'.
[  351.973776][T19928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4865'.
[  351.977327][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4865'.
[  351.983348][T19928] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4865'.
[  352.165858][T19944] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4870'.
[  352.296638][T19953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4874'.
[  352.304686][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'.
[  352.307096][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'.
[  352.313675][T19953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4874'.
[  352.389505][T19957] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  352.393565][T19957] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  352.623597][T19971] IPVS: Error joining to the multicast group
[  352.700429][T19978] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  352.741363][T19980] syzkaller0: entered promiscuous mode
[  352.743534][T19980] syzkaller0: entered allmulticast mode
[  352.747372][T19979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.754735][T19979] tipc: Resetting bearer <eth:syzkaller0>
[  352.757904][T19977] tipc: Resetting bearer <eth:syzkaller0>
[  352.776414][T19977] tipc: Disabling bearer <eth:syzkaller0>
[  352.851468][T19988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  352.968758][T19988] xt_cgroup: path and classid specified
[  353.328991][T20024] netem: unknown loss type 13
[  353.334552][T20024] netem: change failed
[  353.336853][T20024] validate_nla: 62 callbacks suppressed
[  353.336862][T20024] netlink: 'syz.3.4897': attribute type 29 has an invalid length.
[  353.344118][T20026] netlink: 'syz.3.4897': attribute type 29 has an invalid length.
[  353.379010][T20030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  353.955658][T20072] wg1 speed is unknown, defaulting to 1000
[  354.135087][T20080] macvlan0: entered allmulticast mode
[  354.142348][T20081] netlink: 'syz.2.4912': attribute type 11 has an invalid length.
[  354.194422][T20080] macvlan0 (unregistering): left allmulticast mode
[  355.175954][T20125] --map-set only usable from mangle table
[  355.621196][T20149] wg1 speed is unknown, defaulting to 1000
[  355.710559][T20157] pim6reg: entered allmulticast mode
[  355.713668][T20157] pim6reg: left allmulticast mode
[  355.778933][T20160] tipc: Resetting bearer <eth:syzkaller0>
[  355.783835][T20160] tipc: Resetting bearer <eth:syzkaller0>
[  355.798453][T20160] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  355.952124][T20167] tipc: Resetting bearer <eth:syzkaller0>
[  356.649605][T20188] bridge0: entered allmulticast mode
[  357.628051][T20222] netlink: 'syz.1.4961': attribute type 3 has an invalid length.
[  358.156439][T20248] __nla_validate_parse: 23 callbacks suppressed
[  358.156457][T20248] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4970'.
[  358.288531][T20250] vlan0: entered promiscuous mode
[  358.291507][T20250] bond0: entered promiscuous mode
[  358.293667][T20250] bond_slave_0: entered promiscuous mode
[  358.296097][T20250] bond_slave_1: entered promiscuous mode
[  358.506739][T20255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'.
[  358.516687][T20255] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4973'.
[  358.618177][T20262] sctp: [Deprecated]: syz.3.4976 (pid 20262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  358.618177][T20262] Use struct sctp_sack_info instead
[  358.632833][T20264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4977'.
[  358.635831][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4977'.
[  358.638616][T20264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4977'.
[  358.644086][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4977'.
[  358.648115][T20264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4977'.
[  358.682933][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4978'.
[  358.832964][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4985'.
[  359.001014][T20288] netlink: 'syz.2.4987': attribute type 1 has an invalid length.
[  359.004019][T20288] nbd: error processing sock list
[  359.007126][T20288] block nbd3: shutting down sockets
[  359.128565][T20303] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.133543][T20303] tipc: Resetting bearer <eth:syzkaller0>
[  359.138129][T20303] vlan0: entered promiscuous mode
[  359.276877][T20309] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  359.397705][T20311] wg1 speed is unknown, defaulting to 1000
[  360.004112][T20341] smc: net device bond0 applied user defined pnetid SYZ2
[  360.010719][T20341] smc: net device nicvf0 erased user defined pnetid SYZ0
[  360.020772][T20341] smc: net device bond0 erased user defined pnetid SYZ2
[  360.847290][T20373] netem: change failed
[  360.931747][T20379] netlink: 'syz.3.5017': attribute type 1 has an invalid length.
[  361.694854][T20438] netlink: 'syz.1.5035': attribute type 3 has an invalid length.
[  361.699085][T20438] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  361.727617][T20439] netlink: 'syz.2.5034': attribute type 4 has an invalid length.
[  361.746921][T20439] netlink: 'syz.2.5034': attribute type 4 has an invalid length.
[  361.884660][T20452] netlink: 'syz.1.5039': attribute type 7 has an invalid length.
[  361.895777][T20452] netlink: 'syz.1.5039': attribute type 13 has an invalid length.
[  361.902383][T20452] netlink: 'syz.1.5039': attribute type 17 has an invalid length.
[  361.905785][T20452] lo: left promiscuous mode
[  361.920698][T20452] erspan0: left promiscuous mode
[  361.933145][T20452] ip6gre0: left allmulticast mode
[  361.935666][T20452] syz_tun: left allmulticast mode
[  361.949162][T20452] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.958903][T20452] dummy0: left promiscuous mode
[  361.962536][T20452] caif0: left allmulticast mode
[  361.964166][T20452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.971533][T20451] delete_channel: no stack
[  362.484915][T20473] delete_channel: no stack
[  362.959475][T20498] x_tables: duplicate underflow at hook 2
[  363.194217][T20508] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  363.751173][T20528] __nla_validate_parse: 34 callbacks suppressed
[  363.751189][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5067'.
[  363.799537][T20530] netlink: 'syz.1.5068': attribute type 3 has an invalid length.
[  363.802911][T20530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5068'.
[  363.859032][T20534] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  363.866270][T20532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5069'.
[  363.938728][T20537] netlink: 'syz.1.5070': attribute type 4 has an invalid length.
[  363.977437][T20539] xt_hashlimit: size too large, truncated to 1048576
[  364.208920][T20548] C: renamed from team_slave_0
[  364.216283][T20548] netlink: 'syz.2.5074': attribute type 3 has an invalid length.
[  364.221486][T20548] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5074'.
[  364.238768][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5075'.
[  364.337270][T20563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5078'.
[  364.347497][T20566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  364.688758][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'.
[  364.746116][T20582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5085'.
[  364.749679][T20582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5085'.
[  364.796540][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5086'.
[  364.833437][T20587] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  365.169004][T20616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  366.071683][T20661] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  366.342751][T20676] tun0: tun_chr_ioctl cmd 1074025677
[  366.344705][T20676] tun0: linktype set to 773
[  366.364295][T20678] sctp: [Deprecated]: syz.2.5124 (pid 20678) Use of int in maxseg socket option.
[  366.364295][T20678] Use struct sctp_assoc_value instead
[  366.519179][T20689] bridge3: entered allmulticast mode
[  366.527922][T20689] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  366.926713][T20734] x_tables: duplicate underflow at hook 1
[  366.929088][T20734] x_tables: duplicate underflow at hook 1
[  367.066584][T20746] netlink: 'syz.3.5144': attribute type 1 has an invalid length.
[  367.153657][T20753] netlink: 'syz.1.5147': attribute type 2 has an invalid length.
[  367.372293][T20761] netlink: 'syz.1.5149': attribute type 83 has an invalid length.
[  368.173822][T20788] netlink: 'syz.3.5160': attribute type 1 has an invalid length.
[  368.263520][T20788] wg1 speed is unknown, defaulting to 1000
[  368.340743][T20792] netlink: 'syz.1.5161': attribute type 39 has an invalid length.
[  368.558923][T20807] wg1 speed is unknown, defaulting to 1000
[  370.446673][T20890] netlink: 'syz.1.5186': attribute type 15 has an invalid length.
[  370.640474][T20912] bridge0: port 1(veth0_to_bridge) entered blocking state
[  370.643637][T20912] bridge0: port 1(veth0_to_bridge) entered disabled state
[  370.647872][T20912] veth0_to_bridge: entered allmulticast mode
[  370.657343][T20912] veth0_to_bridge: entered promiscuous mode
[  370.688030][T20914] xt_recent: Unsupported userspace flags (00000048)
[  370.803721][T20926] netlink: 'syz.1.5197': attribute type 33 has an invalid length.
[  370.806821][T20926] __nla_validate_parse: 23 callbacks suppressed
[  370.806833][T20926] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5197'.
[  370.814060][T20930] netlink: 'syz.1.5197': attribute type 33 has an invalid length.
[  370.820401][T20930] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5197'.
[  370.858786][T20933] veth0: entered promiscuous mode
[  370.872861][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5198'.
[  371.697131][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5200'.
[  371.719504][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5199'.
[  371.791075][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'.
[  371.793958][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'.
[  371.796889][T20955] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  371.801885][T20955] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  371.864201][T20964] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  371.956855][T20970] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  372.007228][T20977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5209'.
[  372.012345][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5209'.
[  372.015627][T20977] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5209'.
[  372.157055][T20988] netlink: 'syz.2.5212': attribute type 3 has an invalid length.
[  373.262488][T21026] netlink: 'syz.3.5226': attribute type 12 has an invalid length.
[  373.265556][T21026] netlink: 'syz.3.5226': attribute type 29 has an invalid length.
[  373.268611][T21026] netlink: 'syz.3.5226': attribute type 2 has an invalid length.
[  373.467903][T21040] netlink: 'syz.3.5232': attribute type 1 has an invalid length.
[  373.740762][T12268] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  373.743854][T12268] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  373.770484][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  373.887364][T21070] wg1 speed is unknown, defaulting to 1000
[  373.951135][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  374.076349][T21093] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  374.198831][T21101] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  374.240229][T21103] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  374.243382][T21103] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  374.246489][T21103] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  374.249716][T21103] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  374.264834][T21103] macvlan0: entered allmulticast mode
[  374.273964][T21103] netlink: 'syz.1.5252': attribute type 1 has an invalid length.
[  374.277051][T21103] netlink: 'syz.1.5252': attribute type 2 has an invalid length.
[  374.324057][T21101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.328076][T21101] batadv_slave_0: entered promiscuous mode
[  374.432292][   T10] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  374.439164][T21115] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  374.524921][T21120] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  375.327356][T21161] hsr_slave_0: left promiscuous mode
[  375.340086][T21161] hsr_slave_1: left promiscuous mode
[  375.429695][T21156] wg1 speed is unknown, defaulting to 1000
[  375.547867][T21171] netlink: 'syz.2.5276': attribute type 5 has an invalid length.
[  375.692964][T21177] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  375.939240][T21195] __nla_validate_parse: 23 callbacks suppressed
[  375.939259][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5284'.
[  376.028005][T21200] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  376.220351][T21206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5289'.
[  376.254090][T21208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5290'.
[  376.257582][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'.
[  376.264451][T21208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5290'.
[  376.267779][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'.
[  376.272880][T21208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5290'.
[  376.302433][T21210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5291'.
[  376.376889][T21215] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  376.438777][T21217] wg1 speed is unknown, defaulting to 1000
[  376.737921][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5295'.
[  376.777146][T21223] !: renamed from dummy0 (while UP)
[  376.799120][T21226] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  376.868469][T21234] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5298'.
[  376.927848][T21236] wg1 speed is unknown, defaulting to 1000
[  377.534649][T21267] netlink: 'syz.3.5304': attribute type 1 has an invalid length.
[  377.537548][T21267] netlink: 'syz.3.5304': attribute type 2 has an invalid length.
[  377.542336][T21267] netlink: 'syz.3.5304': attribute type 4 has an invalid length.
[  377.950187][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  378.107115][T21285] "syz.1.5311" (21285) uses obsolete ecb(arc4) skcipher
[  378.124959][T21285] nbd: nbd1 already in use
[  378.127934][T21285] block nbd1: NBD_DISCONNECT
[  378.129803][T21285] block nbd1: Send disconnect failed -32
[  378.728263][T21327] netlink: 'syz.1.5324': attribute type 32 has an invalid length.
[  379.405637][T21367] xt_time: unknown flags 0x4
[  379.564739][   T61] block nbd2: Possible stuck request ffff888021e28000: control (read@0,1024B). Runtime 60 seconds
[  379.568856][   T61] block nbd2: Possible stuck request ffff888021e28200: control (read@1024,1024B). Runtime 60 seconds
[  379.574163][   T61] block nbd2: Possible stuck request ffff888021e28400: control (read@2048,1024B). Runtime 60 seconds
[  379.578559][   T61] block nbd2: Possible stuck request ffff888021e28600: control (read@3072,1024B). Runtime 60 seconds
[  380.468117][T21406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.483279][T21406] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  380.519047][   T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  380.994580][T21445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.004725][T21445] syzkaller0: entered promiscuous mode
[  381.006739][T21445] syzkaller0: entered allmulticast mode
[  381.012884][T21449] __nla_validate_parse: 36 callbacks suppressed
[  381.012901][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'.
[  381.034789][T21445] tipc: Resetting bearer <eth:syzkaller0>
[  381.067013][T21457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'.
[  381.072393][T21445] tipc: Disabling bearer <eth:syzkaller0>
[  381.092108][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5367'.
[  381.130664][T21460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5369'.
[  381.133455][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5369'.
[  381.136449][T21460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5369'.
[  381.139634][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5369'.
[  381.145916][T21460] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5369'.
[  381.185781][T21462] netlink: 'syz.2.5368': attribute type 1 has an invalid length.
[  381.426628][T21478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5375'.
[  381.433898][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.436355][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.441927][T21481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5376'.
[  381.447095][T21480] IPVS: set_ctl: invalid protocol: 59 172.30.0.3:20004
[  382.172105][T21474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.303601][T21503] netlink: 'syz.1.5384': attribute type 1 has an invalid length.
[  382.871046][T21543] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.877327][T21545] netlink: 'syz.1.5397': attribute type 1 has an invalid length.
[  382.883368][T21545] netlink: 'syz.1.5397': attribute type 1 has an invalid length.
[  382.891044][T21545] netlink: 'syz.1.5397': attribute type 1 has an invalid length.
[  382.894177][T21545] netlink: 'syz.1.5397': attribute type 1 has an invalid length.
[  383.233911][T21576] bond3: entered promiscuous mode
[  383.236319][T21576] 8021q: adding VLAN 0 to HW filter on device bond3
[  383.285570][T21583] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  383.857394][T21631] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  383.870787][T21631] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.058749][T21637] netlink: 'syz.1.5428': attribute type 1 has an invalid length.
[  384.275837][T21662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.327365][T21667] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  385.818375][T21728] sctp: [Deprecated]: syz.3.5451 (pid 21728) Use of int in maxseg socket option.
[  385.818375][T21728] Use struct sctp_assoc_value instead
[  385.827181][T21727] sctp: [Deprecated]: syz.3.5451 (pid 21727) Use of int in maxseg socket option.
[  385.827181][T21727] Use struct sctp_assoc_value instead
[  385.950153][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  386.231974][T21761] __nla_validate_parse: 54 callbacks suppressed
[  386.231996][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5463'.
[  386.401919][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5469'.
[  386.492582][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5472'.
[  386.553112][T21787] netlink: 'syz.3.5474': attribute type 1 has an invalid length.
[  386.556141][T21787] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5474'.
[  386.573510][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5473'.
[  386.612991][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5475'.
[  386.865179][T21803] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5480'.
[  387.144120][T21815] netlink: 'syz.3.5486': attribute type 6 has an invalid length.
[  387.206031][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'.
[  387.398729][T21833] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5491'.
[  387.405478][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5491'.
[  387.606026][T21839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.757534][T21847] netlink: 'syz.1.5498': attribute type 10 has an invalid length.
[  388.201063][T21864] wg1 speed is unknown, defaulting to 1000
[  388.802132][T21885] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  388.902875][T21887] nbd1: detected capacity change from 0 to 63
[  388.905854][T21894] netlink: 'syz.3.5516': attribute type 1 has an invalid length.
[  388.918571][   T57] block nbd1: Receive control failed (result -32)
[  389.169708][T21909] netlink: 'syz.1.5521': attribute type 21 has an invalid length.
[  389.650790][T21935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.754822][T21953] netlink: 'syz.1.5536': attribute type 1 has an invalid length.
[  389.799503][T21953] bond21: (slave vxcan1): The slave device specified does not support setting the MAC address
[  389.809622][T21953] bond21: (slave vxcan1): Error -95 calling set_mac_address
[  389.842071][T21956] netlink: 'syz.2.5537': attribute type 2 has an invalid length.
[  389.863940][T21957] macvlan2: entered promiscuous mode
[  389.870670][T21957] macvlan2: entered allmulticast mode
[  389.873148][T21957] bond21: entered promiscuous mode
[  389.876229][T21957] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  389.883302][T21957] bond21: left promiscuous mode
[  390.093255][T21972] wg1 speed is unknown, defaulting to 1000
[  390.236213][   T55] Bluetooth: hci3: link tx timeout
[  390.239193][   T55] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  390.257504][ T5218] Bluetooth: hci3: link tx timeout
[  390.259660][ T5218] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  390.266798][ T5218] Bluetooth: hci3: link tx timeout
[  390.268893][ T5218] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  390.272500][ T5218] Bluetooth: hci3: link tx timeout
[  390.274559][ T5218] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  390.277417][ T5218] Bluetooth: hci3: link tx timeout
[  390.279408][ T5218] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  390.347226][T21991] x_tables: duplicate underflow at hook 3
[  390.628786][T22006] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  390.647823][T22004] wg1 speed is unknown, defaulting to 1000
[  390.735133][T22012] netlink: 'syz.1.5556': attribute type 29 has an invalid length.
[  390.895511][T22028] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.898438][T22028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.928232][T22030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  391.093345][T22039] wg1 speed is unknown, defaulting to 1000
[  391.334330][T22050] netlink: 'syz.3.5567': attribute type 1 has an invalid length.
[  391.344977][T22055] "syz.2.5569" (22055) uses obsolete ecb(arc4) skcipher
[  391.368610][T22050] 8021q: adding VLAN 0 to HW filter on device bond4
[  391.392914][T22050] bond4: (slave gretap1): making interface the new active one
[  391.397179][T22050] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  391.502746][T22062] netlink: 'syz.2.5571': attribute type 64 has an invalid length.
[  391.515025][T22063] __nla_validate_parse: 18 callbacks suppressed
[  391.515040][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5571'.
[  391.676518][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5575'.
[  392.028240][T22099] netlink: 'syz.2.5579': attribute type 11 has an invalid length.
[  392.031542][T22099] validate_nla: 29 callbacks suppressed
[  392.031554][T22099] netlink: 'syz.2.5579': attribute type 4 has an invalid length.
[  392.036571][T22099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5579'.
[  392.116085][T22105] netlink: 'syz.1.5582': attribute type 12 has an invalid length.
[  392.130142][T22105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5582'.
[  392.155712][T22108] xt_hashlimit: size too large, truncated to 1048576
[  392.270787][ T5218] Bluetooth: hci3: command 0x0406 tx timeout
[  392.522210][T22128] netlink: 'syz.2.5592': attribute type 1 has an invalid length.
[  392.788008][T22140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5596'.
[  392.797289][T22140] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5596'.
[  393.339604][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  393.344702][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  393.348471][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  393.355776][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  393.359359][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  393.387324][T22155] wg1 speed is unknown, defaulting to 1000
[  393.488659][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5603'.
[  393.641126][T22155] chnl_net:caif_netlink_parms(): no params data found
[  393.668436][T22179] vxcan2: entered promiscuous mode
[  393.746290][T22155] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.749136][T22155] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.755952][T22155] bridge_slave_0: entered allmulticast mode
[  393.762130][T22155] bridge_slave_0: entered promiscuous mode
[  393.766864][T22155] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.769778][T22155] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.776815][T22155] bridge_slave_1: entered allmulticast mode
[  393.781645][T22155] bridge_slave_1: entered promiscuous mode
[  393.830662][T22155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.837471][T22155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.893242][T22155] team0: Port device team_slave_0 added
[  393.922032][T22155] team0: Port device team_slave_1 added
[  393.960868][T22155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.963574][T22155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.977702][T22155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.985132][T22155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.987906][T22155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.002946][T22155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.054151][T22155] hsr_slave_0: entered promiscuous mode
[  394.057285][T22155] hsr_slave_1: entered promiscuous mode
[  394.060630][T22155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.063563][T22155] Cannot create hsr debugfs directory
[  394.527764][T22155] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  394.545617][T22155] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  394.554876][T22155] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  394.571347][T22155] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  394.614105][T22155] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.617172][T22155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.620411][T22155] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.623403][T22155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.716914][T22219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5617'.
[  394.721511][T22219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5617'.
[  394.725116][T22219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5617'.
[  394.753457][  T103] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.757886][  T103] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.787287][T22155] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.861768][T22155] 8021q: adding VLAN 0 to HW filter on device team0
[  394.902386][  T103] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.905301][  T103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.912830][  T103] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.915728][  T103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.939090][T22224] wg1 speed is unknown, defaulting to 1000
[  395.187501][T22238] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  395.271950][T22155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.390272][   T55] Bluetooth: hci1: command tx timeout
[  395.403278][T22155] veth0_vlan: entered promiscuous mode
[  395.417316][T22155] veth1_vlan: entered promiscuous mode
[  395.503308][T22155] veth0_macvtap: entered promiscuous mode
[  395.509450][T22155] veth1_macvtap: entered promiscuous mode
[  395.549006][T22155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.577521][T22155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.597956][T22155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.602537][T22155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.606183][T22155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.609674][T22155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.784445][ T9009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.787500][ T9009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.827127][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.831167][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.327106][T22280] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  396.332575][T22280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.517715][T22286] xt_hashlimit: size too large, truncated to 1048576
[  396.742413][T22292] lo speed is unknown, defaulting to 1000
[  396.743394][T22294] netlink: 'syz.3.5644': attribute type 2 has an invalid length.
[  396.744789][T22292] lo speed is unknown, defaulting to 1000
[  396.754666][T22292] lo speed is unknown, defaulting to 1000
[  396.771578][T22292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  396.823595][T22292] lo speed is unknown, defaulting to 1000
[  396.827408][T22292] lo speed is unknown, defaulting to 1000
[  396.834417][T22295] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  396.849665][T22292] lo speed is unknown, defaulting to 1000
[  396.862769][T22292] lo speed is unknown, defaulting to 1000
[  396.866600][T22292] lo speed is unknown, defaulting to 1000
[  397.082750][T22309] xt_hashlimit: size too large, truncated to 1048576
[  397.252217][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.665554][T22321] __nla_validate_parse: 12 callbacks suppressed
[  397.665566][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5654'.
[  397.728386][T22326] xt_hashlimit: size too large, truncated to 1048576
[  397.743159][T22324] netlink: 'syz.1.5655': attribute type 2 has an invalid length.
[  397.797184][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5657'.
[  397.839744][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  397.849834][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  397.856317][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  397.862448][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  397.867096][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  397.907232][T22331] wg1 speed is unknown, defaulting to 1000
[  397.912736][T22331] lo speed is unknown, defaulting to 1000
[  398.067645][T22348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5661'.
[  398.071448][T22348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5661'.
[  398.074886][T22348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5661'.
[  398.078351][T22348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5661'.
[  398.082897][T22348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5661'.
[  398.117124][T22331] chnl_net:caif_netlink_parms(): no params data found
[  398.245907][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5662'.
[  398.258798][T22331] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.262808][T22331] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.266975][T22331] bridge_slave_0: entered allmulticast mode
[  398.271463][T22331] bridge_slave_0: entered promiscuous mode
[  398.277544][T22331] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.280737][T22331] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.283652][T22331] bridge_slave_1: entered allmulticast mode
[  398.288426][T22331] bridge_slave_1: entered promiscuous mode
[  398.333085][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.339643][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.452244][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.475294][T22331] team0: Port device team_slave_0 added
[  398.488340][T22367] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5668'.
[  398.497490][T22331] team0: Port device team_slave_1 added
[  398.518024][T22371] xt_hashlimit: size too large, truncated to 1048576
[  398.584160][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.875944][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.878719][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.891854][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.929402][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.938469][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.944208][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.954170][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.086239][T22331] hsr_slave_0: entered promiscuous mode
[  399.088601][T22391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5674'.
[  399.089409][T22331] hsr_slave_1: entered promiscuous mode
[  399.115938][T22331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.118907][T22331] Cannot create hsr debugfs directory
[  399.342999][ T5865] bridge_slave_1: left allmulticast mode
[  399.345740][ T5865] bridge_slave_1: left promiscuous mode
[  399.350216][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.359624][ T5865] bridge_slave_0: left allmulticast mode
[  399.363553][ T5865] bridge_slave_0: left promiscuous mode
[  399.365913][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.962180][   T55] Bluetooth: hci1: command tx timeout
[  399.962219][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.976575][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.983738][ T5865] bond0 (unregistering): Released all slaves
[  400.055829][T22413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.081714][T22414] syzkaller0: entered promiscuous mode
[  400.084373][T22414] syzkaller0: entered allmulticast mode
[  400.096138][T22419] tipc: Resetting bearer <eth:syzkaller0>
[  400.165555][T22410] tipc: Resetting bearer <eth:syzkaller0>
[  400.183111][T22410] tipc: Disabling bearer <eth:syzkaller0>
[  400.358058][ T5865] hsr_slave_0: left promiscuous mode
[  400.363948][ T5865] hsr_slave_1: left promiscuous mode
[  400.367068][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.370534][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.378563][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.388068][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.463872][ T5865] veth1_macvtap: left promiscuous mode
[  400.467043][ T5865] veth0_macvtap: left promiscuous mode
[  400.469524][ T5865] veth1_vlan: left promiscuous mode
[  400.481958][ T5865] veth0_vlan: left promiscuous mode
[  401.048279][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  401.093848][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  401.826469][T22443] tun0: tun_chr_ioctl cmd 1074025675
[  401.828663][T22443] tun0: persist enabled
[  401.848757][T22443] tun0: tun_chr_ioctl cmd 1074025675
[  401.862467][T22443] tun0: persist enabled
[  401.870820][T22443] tun0: tun_chr_ioctl cmd 35108
[  402.005318][T22331] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  402.017195][T22331] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  402.025394][T22331] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  402.032594][   T55] Bluetooth: hci1: command tx timeout
[  402.032974][T22331] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  402.070723][T22463] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  402.140512][T22331] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.158414][T22331] 8021q: adding VLAN 0 to HW filter on device team0
[  402.165394][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.167775][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.174767][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.177229][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.324547][T22471] netlink: 'syz.3.5692': attribute type 9 has an invalid length.
[  402.329823][T22471] netlink: 'syz.3.5692': attribute type 9 has an invalid length.
[  402.372041][T22331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.434845][T22331] veth0_vlan: entered promiscuous mode
[  402.454824][T22331] veth1_vlan: entered promiscuous mode
[  402.500389][T22331] veth0_macvtap: entered promiscuous mode
[  402.506009][T22331] veth1_macvtap: entered promiscuous mode
[  402.523119][T22331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.541236][T22331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.551571][T22331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.554975][T22331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.558003][T22331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.561455][T22331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.590066][    C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured!
[  402.621880][ T5898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.629601][ T5898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.644085][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.647900][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.087257][T22486] __nla_validate_parse: 4 callbacks suppressed
[  403.087273][T22486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5697'.
[  403.093956][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5697'.
[  403.097474][T22486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5697'.
[  403.101638][T22486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5697'.
[  403.105260][T22486] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5697'.
[  403.175226][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5698'.
[  403.301595][T22492] xt_hashlimit: size too large, truncated to 1048576
[  403.439176][T22498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'.
[  403.465555][T22498] 8021q: adding VLAN 0 to HW filter on device bond22
[  403.479388][T22498] macvlan2: entered promiscuous mode
[  403.482183][T22498] macvlan2: entered allmulticast mode
[  403.485439][T22498] bond22: (slave macvlan2): Opening slave failed
[  403.852402][T22510] wg1 speed is unknown, defaulting to 1000
[  403.858516][T22510] lo speed is unknown, defaulting to 1000
[  404.406263][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5714'.
[  404.413416][T22527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5714'.
[  404.501422][T22535] tipc: Can't bind to reserved service type 0
[  404.614240][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.634923][T22537] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  405.112053][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  405.119427][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  405.123077][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  405.128706][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  405.133900][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  405.170227][T22558] wg1 speed is unknown, defaulting to 1000
[  405.175582][T22558] lo speed is unknown, defaulting to 1000
[  405.209141][T22566] netlink: 'syz.1.5723': attribute type 2 has an invalid length.
[  405.373937][T22558] chnl_net:caif_netlink_parms(): no params data found
[  405.518487][T22558] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.523019][T22558] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.526013][T22558] bridge_slave_0: entered allmulticast mode
[  405.534446][T22558] bridge_slave_0: entered promiscuous mode
[  405.541437][T22558] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.544398][T22558] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.547520][T22558] bridge_slave_1: entered allmulticast mode
[  405.555674][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'.
[  405.556989][T22558] bridge_slave_1: entered promiscuous mode
[  405.622940][T22558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.638080][T22558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.701830][T22558] team0: Port device team_slave_0 added
[  405.709503][T22558] team0: Port device team_slave_1 added
[  405.799113][T22558] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.804257][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.817325][T22558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.823303][T22558] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.825390][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.837905][T22558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.895115][T22558] hsr_slave_0: entered promiscuous mode
[  405.898392][T22558] hsr_slave_1: entered promiscuous mode
[  405.902154][T22558] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  405.905084][T22558] Cannot create hsr debugfs directory
[  406.404172][T22605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.468026][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.499288][T22605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.542189][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.598186][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.627063][T22605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.737226][T22605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.754798][ T5865] bridge_slave_1: left allmulticast mode
[  406.756878][ T5865] bridge_slave_1: left promiscuous mode
[  406.758932][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.766262][T22610] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  406.776119][ T5865] bridge_slave_0: left allmulticast mode
[  406.777955][ T5865] bridge_slave_0: left promiscuous mode
[  406.779817][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.240384][   T55] Bluetooth: hci1: command tx timeout
[  407.290108][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  407.294888][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.299485][ T5865] bond0 (unregistering): Released all slaves
[  407.519596][T22605] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.563410][T22605] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.588585][T22623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  407.625066][T22605] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.643916][T22605] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.687899][ T5865] hsr_slave_0: left promiscuous mode
[  407.694812][ T5865] hsr_slave_1: left promiscuous mode
[  407.697179][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.699658][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.703593][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.705992][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.738164][ T5865] veth1_macvtap: left promiscuous mode
[  407.740859][ T5865] veth0_macvtap: left promiscuous mode
[  407.742599][ T5865] veth1_vlan: left promiscuous mode
[  407.744251][ T5865] veth0_vlan: left promiscuous mode
[  407.855075][T22630] netlink: 'syz.3.5743': attribute type 1 has an invalid length.
[  407.858101][T22630] netlink: 'syz.3.5743': attribute type 2 has an invalid length.
[  407.861773][T22630] netlink: 'syz.3.5743': attribute type 8 has an invalid length.
[  408.308756][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  408.370218][ T5865] team0 (unregistering): Port device team_slave_0 removed
[  409.135940][T22637] __nla_validate_parse: 5 callbacks suppressed
[  409.135959][T22637] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5746'.
[  409.142910][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5746'.
[  409.146333][T22637] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5746'.
[  409.149140][T22558] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  409.155031][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5746'.
[  409.158271][T22637] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5746'.
[  409.167860][T22558] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  409.220011][T22558] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  409.258288][T22558] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  409.300567][T17675] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  409.310268][   T55] Bluetooth: hci1: command tx timeout
[  409.312933][T17675] ref_tracker: batadv_slave_0@ffff88811a872610 has 1/1 users at
[  409.312933][T17675]      batadv_hard_if_event+0x122c/0x1a50
[  409.312933][T17675]      notifier_call_chain+0x1b6/0x3e0
[  409.312933][T17675]      register_netdevice+0x1608/0x1ae0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  409.312933][T17675]      veth_newlink+0x5cc/0xa50
[  409.312933][T17675]      rtnl_newlink_create+0x310/0xb00
[  409.312933][T17675]      rtnl_newlink+0x16d6/0x1c70
[  409.312933][T17675]      rtnetlink_rcv_msg+0x7cf/0xb70
[  409.312933][T17675]      netlink_rcv_skb+0x208/0x470
[  409.312933][T17675]      netlink_unicast+0x75c/0x8e0
[  409.312933][T17675]      netlink_sendmsg+0x805/0xb30
[  409.312933][T17675]      __sock_sendmsg+0x21c/0x270
[  409.312933][T17675]      __sys_sendto+0x3bd/0x520
[  409.312933][T17675]      __x64_sys_sendto+0xde/0x100
[  409.312933][T17675]      do_syscall_64+0xfa/0x3b0
[  409.312933][T17675]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.312933][T17675] 
[  409.433877][T22558] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.453701][ T5865] veth0_to_bridge: left allmulticast mode
[  409.455684][ T5865] veth0_to_bridge: left promiscuous mode
[  409.457770][ T5865] bridge0: port 1(veth0_to_bridge) entered disabled state
[  409.646893][   T61] block nbd2: Possible stuck request ffff888021e28000: control (read@0,1024B). Runtime 90 seconds
[  409.650825][   T61] block nbd2: Possible stuck request ffff888021e28200: control (read@1024,1024B). Runtime 90 seconds
[  409.654429][   T61] block nbd2: Possible stuck request ffff888021e28400: control (read@2048,1024B). Runtime 90 seconds
[  409.657920][   T61] block nbd2: Possible stuck request ffff888021e28600: control (read@3072,1024B). Runtime 90 seconds
[  410.565524][ T5865] bridge0 (unregistering): left allmulticast mode
[  411.086965][ T5865] bond0 (unregistering): Released all slaves
[  411.096538][ T5865] bond1 (unregistering): Released all slaves
[  411.105373][ T5865] bond2 (unregistering): Released all slaves
[  411.255675][ T5865] bond3 (unregistering): Released all slaves
[  411.405502][   T55] Bluetooth: hci1: command tx timeout
[  411.429584][ T5865] bond4 (unregistering): Released all slaves
[  411.588791][ T5865] bond5 (unregistering): Released all slaves
[  411.600663][ T5865] bond6 (unregistering): Released all slaves
[  411.612553][ T5865] bond7 (unregistering): Released all slaves
[  411.624121][ T5865] bond8 (unregistering): Released all slaves
[  411.639414][ T5865] bond9 (unregistering): Released all slaves
[  411.659342][ T5865] bond10 (unregistering): Released all slaves
[  411.673531][ T5865] bond11 (unregistering): Released all slaves
[  411.818203][ T5865] bond12 (unregistering): Released all slaves
[  411.967393][ T5865] bond13 (unregistering): Released all slaves
[  412.125704][ T5865] bond14 (unregistering): Released all slaves
[  412.298424][ T5865] bond15 (unregistering): Released all slaves
[  412.447920][ T5865] bond16 (unregistering): Released all slaves
[  412.586781][ T5865] bond17 (unregistering): Released all slaves
[  412.750590][ T5865] bond18 (unregistering): Released all slaves
[  412.928677][ T5865] bond19 (unregistering): Released all slaves
[  412.940951][ T5865] bond20 (unregistering): Released all slaves
[  413.139523][ T5865] : left promiscuous mode
[  413.274549][ T5865] tipc: Disabling bearer <udp:syz2>
[  413.288080][ T5865] tipc: Disabling bearer <eth:syzkaller0>
[  413.360671][ T5865] tipc: Left network mode
[  415.075204][ T5865] IPVS: stop unused estimator thread 0...
[  415.466797][ T5865] bridge_slave_1: left allmulticast mode
[  415.469082][ T5865] bridge_slave_1: left promiscuous mode
[  415.472120][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.477048][ T5865] bridge_slave_0: left allmulticast mode
[  415.479219][ T5865] bridge_slave_0: left promiscuous mode
[  415.481479][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.841028][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.845475][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.850155][ T5865] bond0 (unregistering): Released all slaves
[  415.958305][ T5865] hsr_slave_0: left promiscuous mode
[  415.961498][ T5865] hsr_slave_1: left promiscuous mode
[  415.963576][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[  415.966254][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.150415][ T5865] team0 (unregistering): Port device team_slave_1 removed
[  416.193012][ T5865] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
01:27:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822ec747 RBX=ffff8880fc300000 RCX=ffff888022489cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000320f558
R8 =0000000000000000 R9 =ffffffff822ed787 R10=dffffc0000000000 R11=fffff94000884819
R12=0000000000110903 R13=dffffc0000000000 R14=ffff88805fffa801 R15=0000000000001000
RIP=ffffffff822ec747 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb6bdce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fb6bd1856a3 00007fb6bd1856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=00005555580c2e7d 00005555580c21d0
XMM06=0000000000000000 0000000000000000 XMM07=1000038004010800 0601689000080003
XMM08=e00300100003d003 00100003c0030210 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
info registers vcpu 1

CPU#1
RAX=c2af1e6be6d77700 RBX=ffff8881107a5700 RCX=c2af1e6be6d77700 RDX=0000000000000002
RSI=ffffffff8db865a0 RDI=ffff8881107a5700 RBP=0000000000000000 RSP=ffffc90000107938
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000020f20
R12=ffff8880237962e0 R13=dffffc0000000000 R14=ffffffff8b3d6538 R15=ffff88810a18be10
RIP=ffffffff819ee6b1 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30406ff8 CR3=0000000106c24000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81686f4f ffffffff81686ebd
XMM02=ffffffff894bf4c9 ffffffff81686ebd XMM03=ffffffff823ce044 ffffffff823cdedd
XMM04=671d21fb781b75b0 32f79b1ddc8334ce XMM05=d009f28b822af075 380a599ebb909293
XMM06=736508087e3c2bc0 fb1a43c66059b506 XMM07=671d21fb781b75b0 32f79b1ddc8334ce
XMM08=c0b08311afe15e40 79d10c15483247b0 XMM09=0000000000000000 00007fa62e411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
