last executing test programs:

1.152521044s ago: executing program 2 (id=2588):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003"], 0x2c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc054}, 0x80)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="58010000100001000000000000000000fe8000000000000000000000000000bb00000000000000000000ffffe000000200000025000000000000000032000000", @ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="7f0000010000000000000000000000000010000032000000000000000000000000000000000000010000000000000000a3020000000000007f00000000000000ffffffffffffffff0000000000000000330000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000009200000000000000000000000a0002"], 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x184, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'nhpoly1305-sse2\x00'}, 0x0, 0x60}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

1.082596948s ago: executing program 2 (id=2590):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x3}, 0xe)
connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x0, @none, 0x4f70}, 0xe)
sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x0, 0x2, 0xb01, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xe8f}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe50}, @CTA_EXPECT_CLASS={0x8}]}, 0x80}}, 0x40081)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x25, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x88}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x4, 0x4, 0x5, 0x3}, {0x4, 0x3, 0xe, 0x3}], 0x10, 0xb7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='scsi_eh_wakeup\x00', r4, 0x0, 0x4}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44080)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0xcc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x23, 0x3, "9cb522fc3cf28ecf341975363e37b6c597d1e20e871ff695bd9c36c5224855"}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x2c}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xc0}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044140)

1.079774058s ago: executing program 0 (id=2592):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @private=0xa010101}}, 0x0, 0x0, 0x38, 0x0, "394281e595fd9ef506cdb5a28c934734c6bde18882e299a83da979fa66c8aedcdb0492dbfbac6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b7500d7600"}, 0xd8)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x800)
r8 = socket(0x10, 0x803, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e1b1f2995"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000380)='\x00', 0x0, 0x2}, 0x50)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r11 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r11, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

964.284119ms ago: executing program 0 (id=2593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x0)
close(0x3)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="f50af706f0e545924a2bf062b28d2a70a22372fc2ae47e6a7d9ed9bc87f454a829a0a7eefbc5ffe01786e2fbbb5d1667fda313eb82fe9291dc306de787a135f0c8123dc020e7240589df143adbc8ca7db49604c9fc5f7ab9fbe997b1d11effbda971704ebc689719005f0c3bff2d896070d8ad254cc597c3045369ef54e3c0279539da987bed639e254188ee7ef4e156", @ANYRESOCT=r5], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000001b00010000000000000000000400fe801ae6bbc07ccc72752445f0e1630af9fdfee1488cebfcb280a8ff9a4d4590ab5ad93b986fcc6622d2d6f2322390a6ff99725bb5c280855045522b3fa4a25d2e238abb3ac5d5c78ae0f61bd4ddb84d2cc44789c3cf6e9c2a84988db0c9bcb6858db2f3e941cb9ceac54249ebd600694dd2d3d9dc61c4c78928452f008f0250c865d550c9dee302e9f103613277169340ce3bc70f0c8eeefd8f5817cd06311dabb739340ff78feeeb8a0a90600040b1083a2e070000000000000040a09bd7d6489669cfaf33a74c"], 0x14}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00'})

962.66165ms ago: executing program 0 (id=2595):
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000ec0))
close(0x3)

913.804197ms ago: executing program 0 (id=2597):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYRES8], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYRES8], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x3, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
shutdown(r4, 0x1)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000001801040700ff00c5"], 0x24e2)
socket$kcm(0x10, 0x3, 0x10) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={<r8=>0x0, 0x5, 0x30}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000380)={r8, 0x3}, &(0x7f00000003c0)=0x8)
splice(r0, 0x0, r6, 0x0, 0x47, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x94) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c001300020105000000000000000000000000080800034000001000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c001300020105000000000000000000000000080800034000001000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8098}, 0x0)

843.691881ms ago: executing program 0 (id=2599):
socket$tipc(0x1e, 0x2, 0x0) (async)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000106000000000000000000d396c28de9c800000000000067000000", @ANYRES32, @ANYBLOB="0600000004000000ff0f00000700000088000000"], 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="000106000000000000000000d396c28de9c800000000000067000000", @ANYRES32, @ANYBLOB="0600000004000000ff0f00000700000088000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r3=>0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, r3}) (async)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, r3})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x20, @private=0xa010108}, 0x10)
listen(r8, 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000240)=0x82)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000080)={r12}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r12, @in6={{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x31, 0xff, 0x1, 0x2, 0x80, 0x7, 0x5}, &(0x7f00000001c0)=0x9c)
setsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
bind$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0xffffd8ee}, 0x10) (async)
bind$vsock_stream(r9, &(0x7f0000000200)={0x28, 0x0, 0xffffd8ee}, 0x10)
setsockopt$inet6_int(r4, 0x29, 0x10, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @empty, 0x0, 0x0, 0x1, 0x100, 0x0, 0xa0022, r3}) (async)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @empty, 0x0, 0x0, 0x1, 0x100, 0x0, 0xa0022, r3})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10)

252.402961ms ago: executing program 2 (id=2607):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4048001)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x89c, 0x4)
getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "5c672070db1d4549643b3d4bc452c705"}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x58}}, 0x0)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$alg(r10, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)=';', 0x1}], 0x2}], 0x1, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}}, 0x4)

251.010322ms ago: executing program 1 (id=2608):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095004000e5ff0000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r4, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r5=>0x0})
unshare(0x22020600) (async)
r6 = socket(0x18, 0x0, 0x2)
getpeername$netrom(r6, 0x0, &(0x7f0000000080)=0xffffffffffffff77) (async)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
accept4$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x800) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
setsockopt$sock_attach_bpf(r9, 0x88, 0x67, &(0x7f00000002c0)=r10, 0x4) (async)
sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x38}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r15, 0x6, 0x6, 0x0, &(0x7f0000000e00)) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

71.411297ms ago: executing program 1 (id=2609):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611071000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001300)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0x800}}, 0x3, 0xb}, 0x90)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'pimreg\x00', 0x1000})

70.495587ms ago: executing program 1 (id=2610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a00000005d8d0045b6e491fbddf89ce0fc68d3d9fe94f69b705447452f5e080e4acfda7476f3761911d82808f1c8754c8a926ce758be741887605dfb867060b2a60f2d65fb943f4b76e01db5077019694bce4d33b8a89cdab23c680007a4abf7f9ac", @ANYRES16=r1, @ANYBLOB="140e2cbd7000fddbdf250a000000080002000300000008000400010000000800020000000000080004000400000008000300020000000800040008000000050005000200000054000180060005004e23000014000400fe8000000000000000000000000000aa060005004e2200000800060002000000050002000700000014000400fe8000000000000000000000000000aa0600010002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x10}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, @random="2b909aad7aa24560420849ed"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004040)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000140))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000004c0))
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000cacc010200000000000000000000000cfe4352bb43491cae806b3aec7017f22cbeb8575b7533de24515355af57da0a2b6ad1957a000000000000d23f7d4da0238e974d0093e004f7697695062b6e70580ae94b79c3e1dca95910b5375cacc2622aad2b1900"/115], 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x0)

67.755014ms ago: executing program 2 (id=2611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "fc"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x4800)
getsockname(r3, 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x84, r2, 0x813, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x84}}, 0x0)

67.368759ms ago: executing program 1 (id=2612):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4fcff)

12.315287ms ago: executing program 2 (id=2613):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568}, 0x94) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$kcm(0x11, 0xa, 0x300) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x25, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x50) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000f5ffffffffff07000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0)

10.702608ms ago: executing program 1 (id=2614):
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) (async)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000080)="ff020400020000010000000000000000000000c4", 0x14) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000540)) (async)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)={0x964, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0xfffffb0a}, 0x2, 0x8, 0xeb40, 0x8, 0x24, 'syz0\x00', "12acf0dba06241876f3576338c3892d3ee3c570894e4ce9714f3f6c7fc08b183", "ec862cd4f400b4048e910ac55c3549b8d1842c838c4beb3ec4e4d73c03e849b9", [{0x0, 0xd7b, {0x1, 0x8}}, {0x4, 0x2, {0x35db6e597116c508, 0x8}}, {0x10, 0x1, {0x0, 0x80000000}}, {0x6, 0x8, {0x3, 0x2}}, {0x8, 0x6, {0x1, 0x7}}, {0x6, 0x1, {0x1, 0x4}}, {0x5, 0xfff7, {0x0, 0x5}}, {0x9, 0x3, {0x3, 0x100}}, {0x0, 0xffff, {0x3, 0x40}}, {0xfff9, 0x8, {0x2, 0xffff8000}}, {0x9, 0x6, {0x2, 0x6}}, {0xa, 0x3, {0x3, 0x1}}, {0x40, 0x8, {0x2, 0x8}}, {0x5, 0x100, {0x1, 0x8}}, {0xe3d, 0x1a, {0x0, 0x101}}, {0x8, 0x1800, {0x2, 0xbf}}, {0x238, 0x100, {0x2, 0x5}}, {0x5, 0x9204, {0x0, 0x5}}, {0xfff8, 0x40, {0x3, 0x10}}, {0x8, 0x3, {0x1, 0x4}}, {0x3, 0x0, {0x1, 0x9}}, {0x401, 0x9, {0x2, 0x2}}, {0x9, 0x3, {0x2}}, {0x3, 0x4}, {0x7, 0x4, {0x1, 0xa}}, {0xba3, 0x1, {0x2, 0x1}}, {0x4, 0x0, {0x0, 0xe665}}, {0x1, 0x167d, {0x1, 0x33de}}, {0xb1c, 0x457f, {0x1, 0xfff}}, {0x260, 0xc, {0x1, 0x1}}, {0x80, 0x0, {0x1, 0x9}}, {0x7fff, 0x6, {0x2, 0x2}}, {0xfff, 0x2, {0x3, 0x8}}, {0x4, 0x3, {0x1, 0x100}}, {0x9, 0x322, {0x1, 0x3}}, {0xc, 0x7f, {0x2, 0x6}}, {0x0, 0x1809, {0x1, 0xfe}}, {0x4, 0x53, {0x1, 0x800}}, {0x3, 0x5, {0x2, 0x134}}, {0x0, 0x0, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x3, 0x5, 0xf, 0x2, 0x1a, 'syz1\x00', "bc7d315f0912a25c2fb80d7a6423360628d92a666fefc4bebc46045aad3c35bc", "03d1ceae48461e96a8ceca714076c322d8799268b93572d9e42242936a2a0176", [{0x3, 0x8000, {0x1}}, {0x100, 0x0, {0x3, 0x8}}, {0x0, 0x100, {0x3, 0x6}}, {0x1, 0x85, {0x1, 0x7}}, {0x0, 0x9, {0x1, 0x3}}, {0x808, 0x3, {0x2, 0x1}}, {0x6, 0x1, {0x1, 0x80}}, {0xfff8, 0x0, {0x2, 0x5}}, {0x28a8, 0x2, {0x1, 0x1}}, {0x3, 0x9, {0x1, 0x8}}, {0x7, 0x0, {0x3, 0xf616}}, {0xf4c, 0x8, {0x3, 0x169f}}, {0x3, 0x9, {0x0, 0xfffff691}}, {0x9, 0x1, {0x3, 0x4}}, {0x1, 0x9, {0x1, 0xffffff80}}, {0x9, 0x1, {0x3, 0x4a}}, {0x1, 0x9, {0x3, 0x4}}, {0x1, 0x0, {0x1, 0x1a4}}, {0x6, 0x9, {0x1, 0x6}}, {0x0, 0x8b, {0x1, 0x9}}, {0x9, 0x80, {0x3, 0x6}}, {0x6, 0x0, {0x0, 0x6}}, {0x5, 0x2, {0x3, 0x402}}, {0x100, 0x3, {0x2, 0xff}}, {0x7, 0x6, {0x1, 0x7f}}, {0x6, 0x9, {0x2, 0x19}}, {0x8, 0x400, {0x3, 0xffffffff}}, {0x5, 0x389c, {0x3, 0x3ff}}, {0x9, 0x5, {0x0, 0x5}}, {0xffff, 0x4, {0x1, 0x9}}, {0x4a, 0xc, {0x2, 0x400}}, {0x101, 0xe5, {0x0, 0x5}}, {0x5, 0x4, {0x2, 0x4}}, {0x8, 0x3, {0x0, 0x2}}, {0x4, 0x4, {0x3, 0x3}}, {0x8, 0x0, {0x3, 0x5}}, {0x139, 0x1000, {0x3, 0x1}}, {0x9, 0xffc0, {0x2, 0x5}}, {0x80, 0x800, {0x1, 0x4171}}, {0xf, 0x8, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x7621d4c4fb4c6aa6, 0xe0}, 0x4, 0x2, 0xe60a, 0xf, 0x9, 'syz1\x00', "b7a7866888b6e7b0af1b73c9cfeacef8ead823efabf766a5547f7ed042be6139", "9adc25145a52d70b780c8464553e3342a10e0039601fa1811e20e46cf6b45850", [{0x7fff, 0x800, {0x3, 0xa}}, {0x9, 0x2, {0x0, 0x5b1b}}, {0x3, 0x4, {0x3, 0x3b2d}}, {0x7, 0x2, {0x0, 0xe}}, {0x518, 0x1, {0x2, 0x1}}, {0x6000, 0x9, {0x3, 0x3}}, {0xf, 0x6bd7, {0x2, 0xef}}, {0x4, 0x4, {0x3, 0x1}}, {0xa221, 0x4, {0x2, 0x6}}, {0x81, 0x6, {0x0, 0x8}}, {0x1, 0xfff, {0x1, 0x9e}}, {0x8, 0x8, {0x1, 0x8}}, {0x0, 0x40, {0x1, 0x3032}}, {0x5, 0x5, {0x3, 0x1000}}, {0x9, 0x7, {0x0, 0x4}}, {0x7, 0x8001, {0x0, 0x8001}}, {0x4, 0xb, {0x3, 0x8}}, {0x81, 0x4, {0x3, 0x4855}}, {0x0, 0x2, {0x3, 0x1}}, {0x7, 0xab1, {0x2, 0x5}}, {0x9, 0x400, {0x1, 0xe71}}, {0xf471, 0x0, {0x2, 0x898}}, {0xf800, 0x1, {0x0, 0x8bb}}, {0x6, 0xdf5, {0x0, 0x5}}, {0x7, 0x1ff, {0x3, 0x4}}, {0x9, 0x0, {0x1, 0x5}}, {0xfff9, 0x932, {0x0, 0x4}}, {0xe, 0x6, {0x1, 0xa}}, {0x6, 0xb000, {0x3, 0x4}}, {0x6, 0x8, {0x2, 0x9}}, {0x5, 0xa45, {0x0, 0x9}}, {0x3, 0x8000, {0x2, 0x3}}, {0x3af7, 0x913e, {0x2, 0x9}}, {0x5, 0x6, {0x0, 0x9}}, {0x1, 0xfff, {0x3}}, {0x5, 0x3, {0x0, 0x72}}, {0x0, 0x10, {0x0, 0x10001}}, {0x3ff, 0xe05, {0x3, 0x6}}, {0x6, 0x6, {0x2, 0x5}}, {0x10, 0x9, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x822}, 0x0, 0x1, 0x2, 0x1, 0x25, 'syz1\x00', "6a088693634735190e9d7c2a0ad19a9af2b4284ef067d00736a2624c4a655e4d", "17fab8feb540261d9f97729c3b6729b47270fa599da8d26edb975af8502b8cb5", [{0x1b01, 0x8000, {0x1, 0x800}}, {0xd, 0x2, {0x1, 0x9}}, {0x9, 0xf, {0x1, 0x5}}, {0xe, 0x6, {0x2, 0x6}}, {0x8, 0x4, {0x0, 0x80}}, {0x0, 0xffff, {0x3, 0x9}}, {0x8, 0x2, {0x1, 0x10000}}, {0x6, 0x5080, {0x0, 0xc}}, {0xfff9, 0x200, {0x1, 0xf7e}}, {0x40, 0xdd, {0x3, 0x820}}, {0x9, 0xffff, {0x1, 0x4}}, {0x7fff, 0x1, {0x1, 0x2}}, {0x4, 0x2, {0x2, 0x65}}, {0x2, 0x5, {0x3, 0x5}}, {0x0, 0x5d, {0x3, 0x3}}, {0x5, 0x2, {0x1, 0x40}}, {0x2, 0x7, {0x3, 0xb}}, {0x1, 0x5, {0x3, 0x8}}, {0x6b, 0x9, {0x2, 0x4}}, {0x7, 0xfffc, {0x1, 0xffffffff}}, {0x25a5, 0x7, {0x2, 0x4}}, {0x7f, 0x1, {0x1, 0x40}}, {0xffff, 0x9, {0x3}}, {0x0, 0x8, {0x1, 0xa0}}, {0x4, 0x4, {0x2, 0x9}}, {0x5, 0x278, {0x0, 0x7}}, {0xd, 0x3, {0x2, 0x6}}, {0xfff9, 0x0, {0x2}}, {0x1, 0x9, {0x1, 0x4}}, {0xa3a, 0x3, {0x3, 0x1}}, {0x3, 0x469, {0x0, 0xf382}}, {0x7, 0x2, {0x2, 0x2}}, {0x1, 0x252, {0x2, 0x4}}, {0x8, 0xa, {0x2}}, {0x0, 0x9, {0x2, 0x3}}, {0x3, 0x3, {0x0, 0x1}}, {0x1, 0xa1f5}, {0xfffc, 0x3ff, {0x3, 0x13}}, {0x7, 0x1, {0x3, 0xe7}}, {0x4, 0x2, {0x2, 0x8001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
unshare(0x6a040080) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44)

10.450302ms ago: executing program 2 (id=2615):
unshare(0x22020400)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r0, 0xff, 0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @extra_flags={0x8, 0x18, 0x80000000}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
unshare(0x40100)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, 0x0, 0x4048800)
sendmsg$nl_route(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000008c0)={{}, "b002cccacccdd443e15085c474a39cb26b3cd0974b3c6068cfb938381977338e1be4d1cfb31bab03ddf297238ea9af3ad1a986a705cbf6a5736113224739dfb72d31a308a82e71e972efb74b867e70be0c3f8d8c3ebb03e94bd351e876c01dcde6d584cb61dca29225535f9da7b5c93f208d7e9dfcca1902732ea60b84a2ac9cbf94eedceafc6e37d550eb147465680e607dcd49891e9faddd8e3aa6a1722002ad19d6740f663e1f3ce91563253fdfd3d4b8b1b625540e2544efece17b1adc1b953d339a2ff10dc815fa7d56245f8c31816524b2edd69eaadde7f4cb6dc657d3b597ec71d49926616a78207027a3b4f1571ee97a8a5aafbe3386bde47bc30850376f0b9e117c3047eb5c8792ab96601650c573654bbca26388e790b253ae68fb1bb0d1af4ca626aa5b6b02fc180f6fbebf0fd417133a7a16eef81c81826f4683de49e89daf984aad6044944d0aa641ca770e58c8d64787b63e90845ddde18629eefb2a7c311a253f442a83eb3a90281f55ec93a817f834fc360de1358857ff387ad61d08a8eb8eb191808942a059472ff38ecc302d23feacab78119d990d52fc5a811d911c4edd14682f71144e062bd68bc116a69bdea0444995f909b047ab3966bf026e2b2864be6ee95d3713c63ee5341c0d05984d0dd5a0fd75eec77e2180414a4f0a05bd2990f90ac5157cd65e8e11a5d016456b95fac194ea8af8eb74750905e50e86bd75ac9524ec828361de2cd56a68e6350b7cdddd7c69fa4b2fc2e9c195c8f7bc53569958c998f344e290158c20ac8151bd069dc5f1270666e9431a2baa92feb4262c43464cd227d077c056d1c5a8ea0eff28f086801bd9fb9e85f2cd43d82595ab8b6807c354f9007a94f166be9375b99283f5f97d639d626e1e430326bb46c4c2fc12efcd306fdf3892d0e1007e23d49e910213a5a2d07b7f1075609796745e9f0c709c62c4981c09cc5f3be70e5b4d203829e7b917e7d56cd311ac0f8c78833e71c597a933a0be7a86ccc6e45cff38442ad8ed14f5e2d9c063fd7a22f9f8010684e3268b12ea54308d82fe0e94d828a46b071e33b067889cd80ca8e719df7c848bd1e3d7f70fc9d8bf492dbbbc0b6394e2ba9c8206689c5f7d7469080598d742d492d75bd28e59d760444fe647b5cd5afe33814c9406ba9bb545ac7992811a781e7115e5614fa91bdb9b3814251d5863e55fc903314eead9c8f8c6dd64b9663e46134c0e12c76f5cb4d5b841a924e1370e13509776a7a76875b0a2376ddf1cdf3ddf60fc797bacd12cde53d83ece803ed9ea0a0b4fb2de25bc711aca9e2ebb1e4bf146a8f3ad77bd4a8883b85f6dbce5564a0120c0a27aa232ba5a66643f7672607c546ba55278fd8b28fd3fb8a371b83ba7d279debbf8beb200a2e4ed04eac7f6bc587656953c21ef568c4653271b00b2305c3729abf7a72ce8031ba0b12706b8d3369048ff6db37264cdbf8eb5be1cc8d567dde0a857751226083029e733c75350a3f9b9192edb44b291760e9de5e517748f4d4a9a0d7b58a28f9ef04c72f6eaf73d476210dc182ac7eb7c8fd8edb072e005006f5a3b1e90e5a01e23abdacd107b83b685b4afc9059d632fc49ac5e31c248fb6085ef63245766b8139667737d167dce98bba8a377e02d04fb9bf9d227d02d08803e065f0ec5789e6d6f2f5ad811f36dd32202a9f7c8d36c3b4ad2de40ed2726281ef4bfcb018cc5cddf418474e5d0e5519c01c0e949878eddc1dd2fa685af9b70808c096418f4eb9857c666dca2a7502e8bdf38a8f93012107c1a27bc90a62fb47d2144d964fed22bbb2c628714f9220cf45b5c30668d01177edd15f2fa08d4e781d6b40c41f745a3712f430e2607e9a7e9e22dd41d80a642f622c5e9f406598dc92d991d9bed48a6e10a36ac83e00a2379fca9afd56b1237619f1defe092bedaeeaadb525d3ae055c0b5c788156b7fd103932fb67bda05d2a8640bd87acfd891e22132d3d6ea668c79bdd9975f380624462365777955db33607c0756a52b371f04556407c2a7b63d0d438bb9393e831d8acfb418b246cae032e56db0c4b22672b1dfaf297436b9b7c1beb74f85be08529f14b00d2685a7580be2c275b9ff584fdc12992be37d0e6cdf8fd0fd9c8567332b4daed7494678d8806ba4057d536c5b5c7e3affbaa5ea04fc3dfed6c10b255a8be905fd519084d9077971c73726f52c249e8e87e60ce3451ed6031db830b33a0f01bf769c25e2cfda9ca30d7b4d95d56765dd4dde4bcf8681929221bf8b7bc2e18b3c8e8650428b18911569a2475294e2f46f682017151d49d1fa9b1349973ed1c9e1f19f3933dba1a28244ee83497a567af442170edc9445e4d930e2ba6b6a24cfe58dfcfe5b406ad81f50e0541cbfd51dd8efa06334effa9feab6da79a1582cc5e810768a70a3bbe84aa9c9993588c13cb8b262c428f59defc66579001a81cdbe6ff90fb722f3541ff08998811e9e4202491773de993dbf8f6fe8e3788803f87f8a7958f878aa66a1a7a12a951595497a5c645fd7a3e7f7eb43c5f8db269e5df665f3d326d134d7da7eec0df723445f4bb4077a176e642a8bfe67a81c88913df587c81f74eaa5224e7c88bd53a143b61865c87b87be4a86416955b4db7c21a4901ec68df06c3b90b94f32c7df3fe8f43654a18d687bfda78b183a52d45456e03f34c5e5213e83fa5fc4f493f821191585d633f8d4dcb4faf4b0a85cd83b236c744f01d2cd51d2c70bcedd373c482497cddd717b45a53c4aa1749330ea8786ac7ecdbe5ab29aa67f087fcb4989549002f828454b66d0316973706015396a491be0f3249c6896c15999b8413541a1fcb2f08246e36633acb13db75fb19ea554c1a789b26d4f1209a9c6e605142a978c695c775d211f3575ede26ae0efadb290650d830eab1ab7e6cd659c18782f5dd86dfd2fea3a9cee92e39f19f49a1649c2690f58da9d216f6a46ed01a856f06c54a3d7217b451dd1ba24f33c191e2496dc9154ffbf1ee4503eb63a46d6a91126c89fef9fd97c67f558799f90104dfd29bbd1fa23a6421231837729525f51580078f56ec71ad2d8765d69fd7d8d255722301ac50c6259eba4b741adf23bf5f2ad929939b22d5da243e365593d7e68a30f29bfd44c63c1bdc0cdcd500b26ea837f6a8b0be6edd56fcfd48879a39304e0c82659f4f9b77e8f3271e3ebc85ef35ea3b0b400330a33790ceca632caab0b90bbd6bc987e8f353eb6ae74c08e97a3de4e8a72aa972a15a22f0ca9847db08eb572b452516cedd791c2e15e289c248a253673dd1dcfe5c2d40055c693cb051882b11b86cdf63f915d8042b2e418a275a8a48bc4a226ccb9365f1ee9a6c5e510ef0454c43e407a73bdc8385bdca466be23c9d056edc94f96c2cc4829f9f04fb1dfbf84cef5e373004d9ccd22e87b9e076141790785f1adcda0765c0f6580fa6be9e93e6e8d36d68fbd7d989be6863ae0d6aad848809d77ea18262af8ab03a70762145232b800401db9edd49cb49c054d989bf3500475d9cc4dbb6848e59a6e0b3eea6fa9bfd1dc1f03f3ba345d6e378b2609edbc3028e29c4b342d76a49425372e821035031205c7854bc3e8751001e753b553949a09f9c4ea6af14ff963bf823b54eaf93058e1dcb048ae15294fc749d34585ac7a96b854a7d32c64de98a15df46e4264c0425c5e69a559ff8ee4f056ba8f641c1914e995d4fa41706a33da412b0d76335e54941bcb3ff8d5dfbbda1fb86b6da14b9b6199b933a62ab6cd841460c42eedd9ec745a5ea999adb602686f0fa81d81fee01e0feee0805c4cdd05a45133ba8850609ecf2d0acd49110de7ead84e9d0580087bf46177928bd7ff946f77a33c3d383fac6c3a46ec553f81bcc83e3aa431c2817ca8131257642cd4da0277546ded83bab7ebfdc13281ab34fbb60ba7dfde60daa4a485615db7b1da839ead6614b2c89282ce30f275db78d08a17d4b12b49f7306fb80b68b12d25f378b4e67d6527e10ddbb795a838514b204e430195eff6e02e2e51ac94c117b8bc54b81209af8aa63205378729c7183d2d8c0001a52252a7ca75c56b465b9cca39f09102814c0c9a985a184c737f01fef1e7a88fa58010ca787a364ad7e98d53803a9f826ccdbf1e3963035caa91deb6eb47a94ae4914cadcfbf486aa4703d78cb2afb102b3eeb882e716b8021936474ff52be58dcf85cbf2d29c51e4bf4741f062ec6ef2d02cb560a8c39bc99d37f203eadc82957fa29f687d66f388270e6557f338c77c2f9aa153581ca44d0453fefbaec4b53f05be3ef2178686259d0981295a0d59f4a165d05475a62121dfd343deccb6a3985bea540408c9af46bfb20df1fd7ec3c26e3d35a375e1995eff565c92b410140d9dd79adcaca29630df12debb92b7d2d614fafc8cc4d324556c92e75f0478ab1ffc5dfa388de506bb4a06bac5254aa8221ea3574bd91fb112f3ed0accc1144466625e616845d34834dc36865be84130d7aaec079bc452a8ef8fd02dd2ada1dd518193855c68e1ae6890f606758393c179d59518efa2e18fdc4a40f227921e57a843747f061c45665c1920da84f307dcbcf1046b14348f5051721c42ff915d7325cde5e56c7a4356d52b48a3cb4431e8c4835d4066ae22518d23026f8bdee43348544f88a233570bad53c821cf56f3d7f0e78bc548df0a5732f92e1a60a8079142c5fa665813bbbe9b4a9c523d24c330d75b2e6e4ecacb6e1d0c12aa28be81626e068b664d6ef613bed54124a932db865aec7513465b6c7faa59f9c62d76f27250d3fa07a7d60c293931e7af9099ee4e0c6a28e7236470f42e180193c366a396bbd6bd165d465ad63c25c54c4157107b1bb8e06e3e23bf2dccbaf0e88b3f185b8ed619efea80df1bf4000b5cf21d2ec178492bf7a5afe0544bda13c8de3684ae139fff12c04cf896f49516e39130a3466c680c1d04a8a10d9d4d390ff8fe7c0234bdfeacf2b8993ccfea485546a889844001bfc87c9db00dfff316b65845d9df32d94d3a3c5b34cd9990fa8f213b8fe6e6370cd270b9ec5924e39a1716fa3b81a775b37e97e431ef16793b1e7d4c16fa626f7a5b0e1baf855bd23da03d19a759b079fb97ebb5bd54952c716a9d6185fd9209a7dfbf6a13441711d43dd26ee71a8b192b682acce1911cb4da23203bd0e714b5a44f7d4df82e090d74c67b463d87a9f7be2cefed14b6b3e026f391422a6605f80c618b3fdfb8d593815700526c1d19f353bc1ae1baef0ddf99ab7b4212ef6f88d3a5b3bda5348886e86b616ac84dbdd54464848bb69c9e5195d8ee29dfa6cdb6f64aebdffd0b89e19fe2a5a57509a8cac97463d8f0d6e9d4d494f83a2e53ac21c49971456088cc9f171a02e786db06d3861b315d4b189ef5f98c3aec0652b4c8f13ddc1eea1017d98322223f92382a5bb613efb61f497344be1f0b1ed7f772ace0c7b22635826133bc3ab0dbc03cc84754e7d5517185b1a47609e56e026bdc0dba61450d074b77989bfc498294ce51e1924a121675c098df33a393c645d80217de73473523138b4bcf3acb28cc13ac0e1cfc62380c9479a660b2eb3f7714e2d8650df7ba5c31c3c68a4eb112a4986c905f5acf81529e8e17b72b8adbd8c60a8f069a178660644807a5c7226eb562c36a8f7a7cc0e7df667036780450b8d5b8e6bc68c9f47fe4b49fe5583f92bf9a7d8acd539146b63a304e2ee13ab52190c2893808982206bd90dabd5fd41095bc2ac510af1a50615588d7fc0a3831a9fe2432cb2ccb12b296f2b1bed8c2bf9b1a"})
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @empty, 0x0, "1a438aec284f6a92ef201d87e3763f0eabc61c5198f5d33b07c295165af5cbf6", 0x0, 0x2, 0x5, 0x9}, 0x3c)

7.711891ms ago: executing program 0 (id=2616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8], 0x20}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pK    \x00'}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cgroup.controllers\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfba8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0x14, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_query, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xec, &(0x7f00000004c0)=""/236, 0x41000, 0x31, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x9, 0x3, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4], &(0x7f0000000940)=[{0x3, 0x5, 0x5, 0x9}], 0x10, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r10=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r14 = socket$unix(0x1, 0x2, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r16, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

0s ago: executing program 1 (id=2617):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)
socket$kcm(0x2, 0xa, 0x2)
socket$kcm(0x2d, 0x2, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x100000c}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='afs_make_fs_call1\x00', 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

kernel console output (not intermixed with test programs):

[   69.863238][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.876178][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.925103][ T7144] netlink: 'syz.0.408': attribute type 12 has an invalid length.
[   70.262058][ T7154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.273365][ T7155] tipc: Resetting bearer <eth:syzkaller0>
[   70.280243][ T7153] tipc: Disabling bearer <eth:syzkaller0>
[   70.705754][ T7176] netlink: 'syz.2.419': attribute type 3 has an invalid length.
[   70.758194][ T7180] net_ratelimit: 10 callbacks suppressed
[   70.758206][ T7180] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   70.762474][ T7180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.935969][ T7188] ieee802154 phy0 wpan0: encryption failed: -22
[   71.010556][ T7136] Set syz1 is full, maxelem 65536 reached
[   71.089615][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.092777][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.121535][ T7203] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   71.124966][ T7203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.230676][ T7205] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   71.230821][   T10] IPVS: starting estimator thread 0...
[   71.284600][ T7227] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   71.318403][ T7234] netlink: 'syz.1.436': attribute type 2 has an invalid length.
[   71.320974][ T7234] netlink: 'syz.1.436': attribute type 2 has an invalid length.
[   71.323995][ T7234] netlink: 'syz.1.436': attribute type 2 has an invalid length.
[   71.332872][ T7216] IPVS: using max 92 ests per chain, 220800 per kthread
[   71.400577][ T7249] 8021q: VLANs not supported on ipvlan1
[   71.405771][ T7249] macsec1: entered promiscuous mode
[   71.408706][ T7249] macsec1: entered allmulticast mode
[   71.436222][ T7254] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.624607][ T7280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.631119][ T7285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.638900][ T7280] syzkaller0: entered promiscuous mode
[   71.640625][ T7280] syzkaller0: entered allmulticast mode
[   71.648018][ T7285] tipc: Resetting bearer <eth:syzkaller0>
[   71.662476][ T7287] ip_vti0: entered allmulticast mode
[   71.668381][ T7287] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.673071][ T7287] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.699241][ T7286] ip_vti0: left allmulticast mode
[   72.437648][ T7278] tipc: Resetting bearer <eth:syzkaller0>
[   72.440919][ T7278] tipc: Disabling bearer <eth:syzkaller0>
[   72.535514][ T7331] syzkaller1: entered promiscuous mode
[   72.538515][ T7331] syzkaller1: entered allmulticast mode
[   72.541405][ T7331] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   72.692255][ T7344] netlink: ct family unspecified
[   72.694405][ T7344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.947951][   T10] IPVS: starting estimator thread 0...
[   72.955265][ T7362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.005457][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.009752][ T7375] __nla_validate_parse: 67 callbacks suppressed
[   73.009801][ T7375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.479'.
[   73.038098][ T7370] IPVS: using max 92 ests per chain, 220800 per kthread
[   73.058507][ T7377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.062483][ T7380] netlink: ct family unspecified
[   73.063808][ T7378] syzkaller0: entered promiscuous mode
[   73.066330][ T7378] syzkaller0: entered allmulticast mode
[   73.083479][ T7378] tipc: Resetting bearer <eth:syzkaller0>
[   73.097887][ T7378] tipc: Disabling bearer <eth:syzkaller0>
[   73.112856][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'.
[   73.197335][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   73.296588][ T7405] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.489'.
[   74.047537][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'.
[   74.051167][ T7412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'.
[   74.076045][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'.
[   74.080990][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[   74.116318][ T7416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.493'.
[   74.135985][ T7416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.493'.
[   74.295256][ T7429] syzkaller1: entered promiscuous mode
[   74.298572][ T7429] syzkaller1: entered allmulticast mode
[   74.437339][ T7455] tipc: Failed to remove unknown binding: 66,1,1/0:3829852397/3829852399
[   74.443765][ T7455] tipc: Failed to remove unknown binding: 66,1,1/0:3829852397/3829852399
[   74.446564][ T7455] tipc: Failed to remove unknown binding: 66,1,1/0:3829852397/3829852399
[   74.545757][ T7470] syzkaller0: entered promiscuous mode
[   74.548294][ T7470] syzkaller0: entered allmulticast mode
[   74.584528][ T7477] bond0: Unable to set down delay as MII monitoring is disabled
[   74.646057][ T7481] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   74.999745][ T7511] C: renamed from team_slave_0
[   75.002600][ T7511] validate_nla: 34 callbacks suppressed
[   75.002609][ T7511] netlink: 'syz.2.520': attribute type 4 has an invalid length.
[   75.191800][ T7526] netlink: 'syz.2.524': attribute type 1 has an invalid length.
[   75.204460][ T7526] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.212080][ T7527] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.215086][ T7527] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[   75.220129][ T7527] bond1: (slave vcan0): Error -95 calling set_mac_address
[   75.229281][ T7526] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[   75.233889][ T7526] bond1: (slave vcan0): Error -95 calling set_mac_address
[   75.363465][ T7534] netlink: 'syz.2.527': attribute type 10 has an invalid length.
[   75.366663][ T7534] batman_adv: batadv0: Interface deactivated: dummy0
[   75.369620][ T7534] batman_adv: batadv0: Removing interface: dummy0
[   75.372981][ T7534] bridge0: port 3(dummy0) entered blocking state
[   75.375654][ T7534] bridge0: port 3(dummy0) entered disabled state
[   75.378404][ T7534] dummy0: entered allmulticast mode
[   76.071319][ T7546] netlink: 'syz.1.533': attribute type 3 has an invalid length.
[   76.077478][ T7546] syz_tun: entered allmulticast mode
[   76.080941][ T7546] siw: device registration error -23
[   76.104515][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.108793][ T7546] 8021q: adding VLAN 0 to HW filter on device team0
[   76.114446][ T7546] net_ratelimit: 15 callbacks suppressed
[   76.114455][ T7546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.130230][ T7545] syz_tun: left allmulticast mode
[   76.166916][ T7548] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   76.169597][ T7548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.263316][ T7552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.290265][ T7556] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[   76.377826][ T7566] tipc: Enabled bearer <eth:gre0>, priority 10
[   76.396365][ T7570] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   76.401368][ T7570] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.759463][ T7595] ip6tnl2: entered promiscuous mode
[   76.786444][ T7595] netlink: 'syz.0.551': attribute type 83 has an invalid length.
[   77.199719][ T7606] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   77.209869][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.507421][ T5309] tipc: Node number set to 4222664007
[   78.107849][ T7635] netlink: ct family unspecified
[   78.110030][ T7635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.154634][ T7639] __nla_validate_parse: 22 callbacks suppressed
[   78.154646][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'.
[   78.205712][ T7645] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[   78.232615][ T7645] bond3: (slave gretap2): making interface the new active one
[   78.236243][ T7645] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   78.251999][ T7645] bond3: (slave gretap3): Enslaving as an active interface with an up link
[   78.295248][ T7650] team0 (unregistering): Port device team_slave_0 removed
[   78.300829][ T7650] team0 (unregistering): Port device team_slave_1 removed
[   79.331386][ T7680] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.580'.
[   79.429869][ T7688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.583'.
[   80.010519][ T7708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.012863][ T7709] syzkaller0: entered promiscuous mode
[   80.014980][ T7709] syzkaller0: entered allmulticast mode
[   80.023895][ T7709] tipc: Resetting bearer <eth:syzkaller0>
[   80.027827][ T7709] tipc: Disabling bearer <eth:syzkaller0>
[   80.080877][ T7713] netlink: 'syz.2.591': attribute type 10 has an invalid length.
[   80.086516][ T7713] netlink: 'syz.2.591': attribute type 10 has an invalid length.
[   80.089664][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.591'.
[   80.093121][ T7713] batadv0: entered promiscuous mode
[   80.095175][ T7713] batadv0: entered allmulticast mode
[   80.098095][ T7713] bridge0: port 4(batadv0) entered blocking state
[   80.100752][ T7713] bridge0: port 4(batadv0) entered disabled state
[   80.214583][ T7718] veth1_to_team: entered allmulticast mode
[   80.217415][ T6049] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   80.221047][ T6049] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   80.353135][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[   80.364592][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[   80.406120][ T7722] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   80.443480][ T7724] netlink: 'syz.1.596': attribute type 1 has an invalid length.
[   80.446427][ T7724] netlink: 224 bytes leftover after parsing attributes in process `syz.1.596'.
[   80.618250][ T7738] netlink: 'syz.1.600': attribute type 10 has an invalid length.
[   80.620862][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'.
[   81.076259][ T7748] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   81.327295][  T794] cfg80211: failed to load regulatory.db
[   81.423542][ T7757] veth1_macvtap: left promiscuous mode
[   81.425582][ T7757] macsec0: entered promiscuous mode
[   81.428669][ T7757] macsec0: entered allmulticast mode
[   81.432832][ T7757] veth1_macvtap: entered promiscuous mode
[   81.434723][ T7757] veth1_macvtap: entered allmulticast mode
[   81.438806][ T7757] macsec0: left promiscuous mode
[   81.440479][ T7757] macsec0: left allmulticast mode
[   81.442177][ T7757] veth1_macvtap: left allmulticast mode
[   81.548081][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'.
[   81.738715][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'.
[   81.898594][ T7776] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[   81.990261][ T7784] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[   82.022804][ T7787] net_ratelimit: 8 callbacks suppressed
[   82.022823][ T7787] openvswitch: netlink: Key type 15622 is out of range max 32
[   82.155358][ T7803] nftables ruleset with unbound chain
[   82.564472][ T7813] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   82.593881][ T7815] netlink: 'syz.0.624': attribute type 23 has an invalid length.
[   82.731510][ T7833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.735633][ T7833] syzkaller0: entered promiscuous mode
[   82.738873][ T7833] syzkaller0: entered allmulticast mode
[   82.748376][ T7833] tipc: Resetting bearer <eth:syzkaller0>
[   82.752391][ T7833] tipc: Disabling bearer <eth:syzkaller0>
[   82.800901][ T7838] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   82.865830][ T7844] netlink: ct family unspecified
[   82.870499][ T7844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.962087][ T7854] veth0_to_team: entered promiscuous mode
[   82.993869][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.072730][ T7870] netlink: ct family unspecified
[   83.074757][ T7870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.148697][ T7877] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   83.167824][ T7879] __nla_validate_parse: 14 callbacks suppressed
[   83.167838][ T7879] netlink: 256 bytes leftover after parsing attributes in process `syz.1.643'.
[   83.173641][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.643'.
[   83.193610][ T7879] rdma_rxe: rxe_newlink: failed to add lo
[   83.198246][ T7879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.205268][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'.
[   83.372168][ T7883] macsec2: entered promiscuous mode
[   83.374280][ T7883] syzkaller0: entered promiscuous mode
[   83.377818][ T7883] syzkaller0: left promiscuous mode
[   83.650152][ T7908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.652368][ T7909] syzkaller0: entered promiscuous mode
[   83.654237][ T7909] syzkaller0: entered allmulticast mode
[   83.659145][ T7905] netlink: 'syz.2.651': attribute type 29 has an invalid length.
[   83.676215][ T7908] tipc: Resetting bearer <eth:syzkaller0>
[   83.685200][ T7908] tipc: Disabling bearer <eth:syzkaller0>
[   83.878812][ T7925] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.104391][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[   84.108973][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'.
[   84.195402][ T7941] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[   84.236402][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'.
[   84.240586][ T7944] bridge0: port 4(batadv0) entered disabled state
[   84.243876][ T7944] dummy0: left allmulticast mode
[   84.245577][ T7944] bridge0: port 3(dummy0) entered disabled state
[   84.254366][ T7944] bridge_slave_1: left allmulticast mode
[   84.256577][ T7944] bridge_slave_1: left promiscuous mode
[   84.260580][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.265140][ T7944] bridge_slave_0: left allmulticast mode
[   84.269716][ T7944] bridge_slave_0: left promiscuous mode
[   84.272102][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.494457][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.502586][ T7954] bond0: (slave rose0): Enslaving as an active interface with an up link
[   84.508979][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.665'.
[   84.600368][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'.
[   84.728315][ T7972] bridge5: left promiscuous mode
[   84.730123][ T7972] bridge5: left allmulticast mode
[   84.741437][ T7972] macsec1: left promiscuous mode
[   84.743413][ T7972] macsec1: left allmulticast mode
[   84.758975][ T5860] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.762365][ T5860] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.765613][ T5860] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.771456][ T5860] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.780311][ T5860] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.783543][ T5860] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.790281][ T5860] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.794056][ T5860] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.869006][ T7987] netlink: 'syz.2.672': attribute type 1 has an invalid length.
[   84.955480][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'.
[   84.983494][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'.
[   85.087955][ T8005] validate_nla: 1 callbacks suppressed
[   85.087970][ T8005] netlink: 'syz.0.678': attribute type 2 has an invalid length.
[   85.097773][ T8006] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003
[   85.100969][ T8006] netlink: 'syz.2.677': attribute type 11 has an invalid length.
[   85.103608][ T8006] netlink: 'syz.2.677': attribute type 11 has an invalid length.
[   85.218319][ T8008] Bluetooth: MGMT ver 1.23
[   85.221178][ T8008] siw: device registration error -23
[   85.254760][ T8018] bridge0: port 3(batadv2) entered blocking state
[   85.257064][ T8018] bridge0: port 3(batadv2) entered disabled state
[   85.259294][ T8018] batadv2: entered allmulticast mode
[   85.261756][ T8018] batadv2: entered promiscuous mode
[   85.459818][ T8025] netlink: 'syz.0.685': attribute type 21 has an invalid length.
[   85.464610][ T8025] netlink: 'syz.0.685': attribute type 5 has an invalid length.
[   85.468218][ T8025] netlink: 'syz.0.685': attribute type 6 has an invalid length.
[   85.713326][ T8053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.719228][ T8053] syzkaller0: entered promiscuous mode
[   85.721200][ T8053] syzkaller0: entered allmulticast mode
[   85.754985][ T8052] tipc: Resetting bearer <eth:syzkaller0>
[   85.757451][ T6049] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[   85.761768][ T6049] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[   85.769407][ T8052] tipc: Disabling bearer <eth:syzkaller0>
[   85.913346][ T8068] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   85.913380][ T5860] bond0: (slave bond_slave_0): interface is now down
[   85.919402][ T5860] bond0: (slave bond_slave_1): interface is now down
[   85.922140][ T5860] bond0: (slave dummy0): interface is now down
[   85.925051][ T5860] bond0: now running without any active interface!
[   86.103065][ T8083] netlink: 'syz.1.701': attribute type 13 has an invalid length.
[   86.109285][ T8083] gretap0: refused to change device tx_queue_len
[   86.212699][ T8096] netlink: 'syz.0.708': attribute type 83 has an invalid length.
[   87.734415][ T8160] syzkaller0: entered promiscuous mode
[   87.736240][ T8160] syzkaller0: entered allmulticast mode
[   88.066528][ T8176] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   88.073617][ T8176] netlink: 'syz.1.733': attribute type 21 has an invalid length.
[   88.176750][ T8181] erspan0: entered promiscuous mode
[   88.179695][ T8181] erspan0: left promiscuous mode
[   88.183482][ T8190] __nla_validate_parse: 25 callbacks suppressed
[   88.183495][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.1.738'.
[   88.222496][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'.
[   88.356569][ T8203] netlink: 56 bytes leftover after parsing attributes in process `syz.1.742'.
[   88.383893][ T8208] netlink: 44 bytes leftover after parsing attributes in process `syz.0.743'.
[   88.388014][ T8208] netlink: 43 bytes leftover after parsing attributes in process `syz.0.743'.
[   88.392607][ T8208] netlink: 'syz.0.743': attribute type 6 has an invalid length.
[   88.396345][ T8208] netlink: 'syz.0.743': attribute type 5 has an invalid length.
[   88.402749][ T8208] netlink: 43 bytes leftover after parsing attributes in process `syz.0.743'.
[   88.412104][ T8205] delete_channel: no stack
[   88.455803][ T8218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.746'.
[   88.493804][ T8220] netlink: 248 bytes leftover after parsing attributes in process `syz.2.747'.
[   88.575418][ T8228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.582352][ T8228] syzkaller0: entered promiscuous mode
[   88.584034][ T8228] syzkaller0: entered allmulticast mode
[   88.594240][ T8228] tipc: Resetting bearer <eth:syzkaller0>
[   88.600781][ T8227] tipc: Resetting bearer <eth:syzkaller0>
[   88.607329][ T8227] tipc: Disabling bearer <eth:syzkaller0>
[   88.614110][ T8231] veth4: entered allmulticast mode
[   88.619931][ T8233] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.749'.
[   88.623715][ T8226] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.749'.
[   88.743325][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.926054][ T8281] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.933491][ T8279] IPv6: sit1: Disabled Multicast RS
[   88.975157][ T8294] net_ratelimit: 19 callbacks suppressed
[   88.975168][ T8294] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   88.985845][ T8293] netlink: 'syz.1.767': attribute type 21 has an invalid length.
[   88.993344][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.053312][ T6049] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   89.063508][ T8300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.079021][ T6049] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   89.087183][ T6049] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   89.095871][ T8300] syzkaller0: entered promiscuous mode
[   89.098422][ T8300] syzkaller0: entered allmulticast mode
[   89.102689][ T6049] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   89.194691][ T8300] tipc: Resetting bearer <eth:syzkaller0>
[   89.204976][ T8299] tipc: Resetting bearer <eth:syzkaller0>
[   89.218140][ T8299] tipc: Disabling bearer <eth:syzkaller0>
[   89.258837][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.266054][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.334151][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   89.433881][ T8338] syzkaller0: entered promiscuous mode
[   89.436119][ T8338] syzkaller0: entered allmulticast mode
[   90.227277][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.241109][ T8352] siw: device registration error -23
[   90.249397][ T8355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.292316][ T8362] pim6reg: entered allmulticast mode
[   90.297796][ T8361] pim6reg: left allmulticast mode
[   90.315428][ T8367] pimreg: left allmulticast mode
[   90.378014][ T8371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.414367][ T8373] 8021q: adding VLAN 0 to HW filter on device bond4
[   90.418698][ T8373] bond0: (slave bond4): Enslaving as an active interface with an up link
[   90.519182][ T8383] netlink: 'syz.2.794': attribute type 1 has an invalid length.
[   90.605096][ T8383] bond2: (slave gretap1): making interface the new active one
[   90.608824][ T8383] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   90.693014][ T8383] syz.2.794 (8383) used greatest stack depth: 19632 bytes left
[   90.884028][ T8425] batadv_slave_1: entered promiscuous mode
[   90.912229][ T8427] batadv_slave_1: left promiscuous mode
[   90.923885][ T8431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   90.926114][ T8431] IPv6: NLM_F_CREATE should be set when creating new route
[   90.928493][ T8431] IPv6: NLM_F_CREATE should be set when creating new route
[   90.998509][ T8445] netlink: 'syz.1.813': attribute type 1 has an invalid length.
[   91.011841][ T8445] bond5: entered promiscuous mode
[   91.014158][ T8445] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.024720][ T8445] batadv1: entered promiscuous mode
[   91.027789][ T8445] batadv1: entered allmulticast mode
[   91.031155][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv1
[   91.035143][ T8445] bond5: (slave batadv1): making interface the new active one
[   91.038934][ T8445] bond5: (slave batadv1): Enslaving as an active interface with an up link
[   91.214734][ T8454] netlink: 'syz.1.815': attribute type 13 has an invalid length.
[   91.217799][ T8454] netlink: 'syz.1.815': attribute type 17 has an invalid length.
[   91.279389][ T8454] bond5: left promiscuous mode
[   91.283085][ T8454] batadv1: left promiscuous mode
[   91.285300][ T8454] batadv1: left allmulticast mode
[   91.288295][ T6049] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[   91.291624][ T6049] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[   91.296537][ T6049] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[   91.300115][ T6049] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[   91.371028][ T8458] openvswitch: netlink: Flow actions attr not present in new flow.
[   91.499245][ T8464] netlink: 'syz.1.819': attribute type 5 has an invalid length.
[   91.640257][ T8473] openvswitch: netlink: Flow key attr not present in new flow.
[   91.974320][ T8502] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   91.979248][ T8502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.720008][ T8529] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   92.723284][ T8529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.994247][ T8536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.997083][ T8536] syzkaller0: entered promiscuous mode
[   92.998933][ T8536] syzkaller0: entered allmulticast mode
[   93.004716][ T8540] tipc: Resetting bearer <eth:syzkaller0>
[   93.009975][ T8535] tipc: Resetting bearer <eth:syzkaller0>
[   93.012884][ T8535] tipc: Disabling bearer <eth:syzkaller0>
[   93.748689][ T8567] __nla_validate_parse: 27 callbacks suppressed
[   93.748711][ T8567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'.
[   93.762108][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[   93.815260][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'.
[   93.825695][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[   96.146895][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[   96.205623][ T8585] dvmrp0: entered allmulticast mode
[   96.235748][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'.
[   96.266129][ T8594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.862'.
[   96.279556][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'.
[   96.280613][ T8597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.863'.
[   96.433172][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.866'.
[   96.447873][ T8607] syzkaller1: entered promiscuous mode
[   96.450046][ T8607] syzkaller1: entered allmulticast mode
[   96.603676][ T8626] IPVS: Scheduler module ip_vs_sip not found
[   96.755414][ T8658] net_ratelimit: 4 callbacks suppressed
[   96.755427][ T8658] openvswitch: netlink: Flow actions attr not present in new flow.
[   96.854051][ T8663] tap0: tun_chr_ioctl cmd 1074025677
[   96.858166][ T8663] tap0: linktype set to 0
[   96.860185][ T8664] tap0: tun_chr_ioctl cmd 1074025677
[   96.863542][ T8664] tap0: linktype set to 0
[   97.675301][ T8681] netlink: 'syz.0.887': attribute type 1 has an invalid length.
[   98.013518][ T8705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.022765][ T8705] syzkaller0: entered promiscuous mode
[   98.025015][ T8705] syzkaller0: entered allmulticast mode
[   98.026341][ T8707] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   98.036422][ T8707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.044496][ T8705] tipc: Resetting bearer <eth:syzkaller0>
[   98.048865][ T8702] tipc: Resetting bearer <eth:syzkaller0>
[   98.056254][ T8702] tipc: Disabling bearer <eth:syzkaller0>
[   98.185273][ T8721] bond0: (slave dummy0): Releasing backup interface
[   98.204846][ T8721] bridge_slave_0: left allmulticast mode
[   98.212704][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.229186][ T8721] bridge_slave_1: left allmulticast mode
[   98.232883][ T8721] bridge_slave_1: left promiscuous mode
[   98.240137][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.250976][ T8721] bond0: (slave bond_slave_0): Releasing backup interface
[   98.266920][ T8721] bond0: (slave bond_slave_1): Releasing backup interface
[   98.268750][ T8713] netlink: 'syz.2.893': attribute type 2 has an invalid length.
[   98.282103][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.284707][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.305598][ T8721] batadv2: left allmulticast mode
[   98.308707][ T8721] batadv2: left promiscuous mode
[   98.311272][ T8721] bridge0: port 3(batadv2) entered disabled state
[   98.772180][ T8815] openvswitch: netlink: Key type 5382 is out of range max 32
[   98.791966][ T8817] __nla_validate_parse: 47 callbacks suppressed
[   98.791980][ T8817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.905'.
[   98.839015][ T8817] smc: net device bond0 applied user defined pnetid SYZ2
[   98.939332][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'.
[   98.942880][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'.
[   98.950124][ T8832] netlink: 332 bytes leftover after parsing attributes in process `syz.0.910'.
[   98.954381][ T8832] netlink: 104 bytes leftover after parsing attributes in process `syz.0.910'.
[   98.958647][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.910'.
[   98.959781][ T8834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.911'.
[   99.070692][ T8840] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.103492][ T8840] netlink: 112 bytes leftover after parsing attributes in process `syz.1.914'.
[   99.182292][ T8853] netem: change failed
[   99.245037][ T8858] netlink: 68 bytes leftover after parsing attributes in process `syz.1.918'.
[   99.275718][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'.
[   99.302592][ T8868] netlink: 'syz.1.920': attribute type 4 has an invalid length.
[   99.483010][ T8876] netlink: 'syz.2.923': attribute type 21 has an invalid length.
[   99.496151][ T8876] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   99.875636][ T8919] tipc: New replicast peer: 255.255.255.255
[   99.880290][ T8919] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.026031][ T8931] netlink: 'syz.2.938': attribute type 23 has an invalid length.
[  101.175994][ T8970] pim6reg: entered allmulticast mode
[  101.183087][ T8969] pim6reg: left allmulticast mode
[  101.335960][ T8992] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  101.339940][ T8992] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  101.414026][ T9002] vlan2: entered promiscuous mode
[  101.416203][ T9002] vlan2: entered allmulticast mode
[  101.420871][ T9002] hsr_slave_1: entered allmulticast mode
[  101.613053][ T9021] veth5: entered promiscuous mode
[  101.621818][ T9022] veth7: entered promiscuous mode
[  101.655226][ T9025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.659238][ T9025] syzkaller0: entered promiscuous mode
[  101.661259][ T9025] syzkaller0: entered allmulticast mode
[  101.669224][ T9024] tipc: Resetting bearer <eth:syzkaller0>
[  101.674956][ T9024] tipc: Disabling bearer <eth:syzkaller0>
[  101.688079][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.701213][ T9018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  101.864667][ T9035] netlink: ct family unspecified
[  101.866542][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.929548][ T9043] netlink: 'syz.1.973': attribute type 1 has an invalid length.
[  101.951792][ T9045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.989457][ T9045] netlink: 'syz.1.974': attribute type 10 has an invalid length.
[  102.075591][ T9050] tipc: Resetting bearer <eth:gre0>
[  102.125875][ T9050] bridge_slave_0: left promiscuous mode
[  102.134206][ T9050] veth0_to_team: left promiscuous mode
[  102.136082][ T9050] veth0_to_team: left allmulticast mode
[  102.199811][ T9050] ip6tnl2: left promiscuous mode
[  102.202636][ T9050] veth5: left promiscuous mode
[  102.204225][ T9050] veth7: left promiscuous mode
[  102.205944][ T5860] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.208878][ T5860] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.211753][ T5860] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.215703][ T5860] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.394737][ T9066] netlink: ct family unspecified
[  102.398422][ T9066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.436894][ T9068] netlink: 'syz.0.979': attribute type 1 has an invalid length.
[  102.456154][ T9068] bond2: (slave geneve2): making interface the new active one
[  102.460689][ T9068] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  102.463892][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  102.469762][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  102.473260][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  102.476065][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  102.528018][ T9079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.531444][ T9079] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  102.533777][ T9079] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  102.573771][ T9086] netlink: ct family unspecified
[  102.573900][ T9084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.575773][ T9086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.962618][ T5860] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  103.166508][ T9129] netlink: 'syz.1.994': attribute type 4 has an invalid length.
[  103.654327][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  103.656889][    T9] tipc: Node number set to 4190755126
[  103.659569][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  103.663177][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  103.668114][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  103.682791][ T9136] netlink: 'syz.0.997': attribute type 15 has an invalid length.
[  103.782810][ T9143] netlink: 'syz.0.1000': attribute type 32 has an invalid length.
[  103.794939][ T9149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.802891][ T9149] tipc: Resetting bearer <eth:syzkaller0>
[  103.805586][ T9149] __nla_validate_parse: 35 callbacks suppressed
[  103.805598][ T9149] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1002'.
[  103.838385][ T9154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'.
[  103.846613][ T9154] IPv6: sit2: Disabled Multicast RS
[  103.849360][ T9154] sit2: entered allmulticast mode
[  104.057057][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'.
[  104.064532][ T9172] netlink: 'syz.0.1007': attribute type 21 has an invalid length.
[  104.071056][ T9172] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1007'.
[  104.082908][ T9171] delete_channel: no stack
[  104.154560][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1008'.
[  104.435141][ T9182] netlink: ct family unspecified
[  104.437215][ T9182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.561107][   T55] Bluetooth: hci2: link tx timeout
[  104.562974][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.565922][ T5239] Bluetooth: hci2: link tx timeout
[  104.569057][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.571611][ T5239] Bluetooth: hci2: link tx timeout
[  104.573290][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.575683][ T5239] Bluetooth: hci2: link tx timeout
[  104.577597][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.580603][ T5239] Bluetooth: hci2: link tx timeout
[  104.582540][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.633524][ T9199] vxcan1: entered allmulticast mode
[  104.689548][ T9203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  104.739974][ T9207] netlink: ct family unspecified
[  104.744985][ T9207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.788174][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'.
[  104.791263][ T9211] netlink: 'syz.0.1018': attribute type 1 has an invalid length.
[  104.794330][ T9211] netlink: 'syz.0.1018': attribute type 2 has an invalid length.
[  104.850376][ T9211] netlink: 'syz.0.1018': attribute type 1 has an invalid length.
[  104.853321][ T9211] netlink: 'syz.0.1018': attribute type 2 has an invalid length.
[  104.987718][ T9239] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1029'.
[  105.017952][ T9246] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  105.020454][ T9247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'.
[  105.037003][ T9248] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  105.042089][ T9248] CPU: 0 UID: 0 PID: 9248 Comm: syz.0.1031 Not tainted syzkaller #0 PREEMPT(full) 
[  105.042123][ T9248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.042131][ T9248] Call Trace:
[  105.042136][ T9248]  <TASK>
[  105.042142][ T9248]  dump_stack_lvl+0x189/0x250
[  105.042167][ T9248]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.042181][ T9248]  ? __pfx__printk+0x10/0x10
[  105.042198][ T9248]  ? kernfs_root+0x1c/0x230
[  105.042214][ T9248]  ? kernfs_path_from_node+0x2f/0x290
[  105.042228][ T9248]  ? kernfs_path_from_node+0x250/0x290
[  105.042241][ T9248]  ? kernfs_path_from_node+0x2f/0x290
[  105.042255][ T9248]  sysfs_warn_dup+0x8e/0xa0
[  105.042269][ T9248]  sysfs_do_create_link_sd+0xc0/0x110
[  105.042284][ T9248]  device_add_class_symlinks+0x1cf/0x240
[  105.042299][ T9248]  device_add+0x475/0xb50
[  105.042313][ T9248]  wiphy_register+0x1ba6/0x28d0
[  105.042339][ T9248]  ? __pfx_wiphy_register+0x10/0x10
[  105.042356][ T9248]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  105.042373][ T9248]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  105.042417][ T9248]  ieee80211_register_hw+0x3425/0x4080
[  105.042439][ T9248]  ? ieee80211_register_hw+0x13f1/0x4080
[  105.042456][ T9248]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  105.042472][ T9248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.042492][ T9248]  ? __hrtimer_setup+0x187/0x210
[  105.042506][ T9248]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  105.042526][ T9248]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  105.042553][ T9248]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  105.042569][ T9248]  ? trace_kmalloc+0x1f/0xd0
[  105.042586][ T9248]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  105.042603][ T9248]  ? kstrndup+0xbf/0x160
[  105.042620][ T9248]  hwsim_new_radio_nl+0xea4/0x1b10
[  105.042637][ T9248]  ? __pfx___nla_validate_parse+0x10/0x10
[  105.042664][ T9248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.042685][ T9248]  ? __nla_parse+0x40/0x60
[  105.042704][ T9248]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  105.042731][ T9248]  genl_family_rcv_msg_doit+0x215/0x300
[  105.042749][ T9248]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  105.042769][ T9248]  ? bpf_lsm_capable+0x9/0x20
[  105.042787][ T9248]  ? security_capable+0x7e/0x2e0
[  105.042808][ T9248]  genl_rcv_msg+0x60e/0x790
[  105.042824][ T9248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.042838][ T9248]  ? __kasan_slab_alloc+0x6c/0x80
[  105.042856][ T9248]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  105.042872][ T9248]  ? __netlink_lookup+0xbd/0x810
[  105.042882][ T9248]  ? rcu_is_watching+0x15/0xb0
[  105.042900][ T9248]  netlink_rcv_skb+0x208/0x470
[  105.042921][ T9248]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.042935][ T9248]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.042948][ T9248]  ? lock_release+0x4b/0x3e0
[  105.042960][ T9248]  ? down_read+0x1ad/0x2e0
[  105.042968][ T9248]  genl_rcv+0x28/0x40
[  105.042977][ T9248]  netlink_unicast+0x82f/0x9e0
[  105.042988][ T9248]  ? __pfx_netlink_unicast+0x10/0x10
[  105.042997][ T9248]  ? netlink_sendmsg+0x642/0xb30
[  105.043003][ T9248]  ? skb_put+0x11b/0x210
[  105.043012][ T9248]  netlink_sendmsg+0x805/0xb30
[  105.043020][ T9248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.043027][ T9248]  ? futex_unqueue+0x22/0x240
[  105.043036][ T9248]  ? aa_sock_msg_perm+0xf1/0x1d0
[  105.043044][ T9248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.043052][ T9248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.043058][ T9248]  __sock_sendmsg+0x21c/0x270
[  105.043070][ T9248]  ____sys_sendmsg+0x505/0x830
[  105.043078][ T9248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.043088][ T9248]  ? import_iovec+0x74/0xa0
[  105.043098][ T9248]  ___sys_sendmsg+0x21f/0x2a0
[  105.043121][ T9248]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.043131][ T9248]  ? futex_wait+0x285/0x360
[  105.043148][ T9248]  ? __fget_files+0x2a/0x420
[  105.043155][ T9248]  ? __fget_files+0x3a0/0x420
[  105.043163][ T9248]  __x64_sys_sendmsg+0x19b/0x260
[  105.043171][ T9248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.043180][ T9248]  ? rcu_is_watching+0x15/0xb0
[  105.043188][ T9248]  ? rcu_is_watching+0x15/0xb0
[  105.043195][ T9248]  do_syscall_64+0xfa/0x3b0
[  105.043203][ T9248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.043212][ T9248]  ? exc_page_fault+0x9f/0xf0
[  105.043231][ T9248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.043242][ T9248] RIP: 0033:0x7f010c18ebe9
[  105.043254][ T9248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.043265][ T9248] RSP: 002b:00007f010cfa3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.043281][ T9248] RAX: ffffffffffffffda RBX: 00007f010c3b6090 RCX: 00007f010c18ebe9
[  105.043290][ T9248] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  105.043297][ T9248] RBP: 00007f010c211e19 R08: 0000000000000000 R09: 0000000000000000
[  105.043306][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.043313][ T9248] R13: 00007f010c3b6128 R14: 00007f010c3b6090 R15: 00007fff2a732438
[  105.043327][ T9248]  </TASK>
[  105.396154][ T5239] Bluetooth: hci2: link tx timeout
[  105.398429][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.401514][ T5239] Bluetooth: hci2: link tx timeout
[  105.403547][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.406560][ T5239] Bluetooth: hci2: link tx timeout
[  105.408941][ T5239] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.507619][ T9278] netlink: 'syz.0.1038': attribute type 1 has an invalid length.
[  105.510761][ T9278] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1038'.
[  105.544807][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  105.586385][ T9281] netlink: 'syz.2.1040': attribute type 1 has an invalid length.
[  105.870273][ T9312] tipc: New replicast peer: 0.0.0.0
[  105.872704][ T9312] tipc: Enabled bearer <udp:syz2>, priority 10
[  105.875161][ T9312] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  106.081602][ T9332] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  106.220558][ T9340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.301161][ T9347] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  106.405948][ T9357] bridge2: port 1(veth9) entered blocking state
[  106.411111][ T9357] bridge2: port 1(veth9) entered disabled state
[  106.413869][ T9357] veth9: entered allmulticast mode
[  106.416306][ T9357] veth9: entered promiscuous mode
[  106.423225][ T9357] bridge2: port 2(veth0_to_bond) entered blocking state
[  106.426435][ T9357] bridge2: port 2(veth0_to_bond) entered disabled state
[  106.429780][ T9357] veth0_to_bond: entered allmulticast mode
[  106.434348][ T9357] veth0_to_bond: entered promiscuous mode
[  106.606936][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[  106.752285][ T9375] bond4: entered promiscuous mode
[  106.754848][ T9375] 8021q: adding VLAN 0 to HW filter on device bond4
[  106.772693][ T9375] bond4: (slave bridge9): making interface the new active one
[  106.775336][ T9375] bridge9: entered promiscuous mode
[  106.778323][ T9375] bond4: (slave bridge9): Enslaving as an active interface with an up link
[  107.047155][ T9396] net_ratelimit: 6 callbacks suppressed
[  107.047167][ T9396] netlink: ct family unspecified
[  107.051060][ T9396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.174643][ T9406] ip6tnl3: entered promiscuous mode
[  107.177249][ T9406] ip6tnl3: entered allmulticast mode
[  107.247883][ T9420] netlink: ct family unspecified
[  107.249984][ T9420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.325545][ T9429] macsec1: entered promiscuous mode
[  107.328392][ T9429] macsec1: entered allmulticast mode
[  107.374374][ T9438] team0: Device ipvlan1 failed to register rx_handler
[  107.425587][ T9438] sock: sock_timestamping_bind_phc: sock not bind to device
[  107.599892][ T9452] syzkaller1: entered promiscuous mode
[  107.602320][ T9452] syzkaller1: entered allmulticast mode
[  107.682674][ T9454] tipc: Enabled bearer <eth:vlan0>, priority 18
[  107.706089][  T794] IPVS: starting estimator thread 0...
[  107.733015][ T9461] x9: renamed from bridge_slave_0
[  107.783255][ T9467] openvswitch: netlink: Message has 133 unknown bytes.
[  107.798241][ T9459] IPVS: using max 81 ests per chain, 194400 per kthread
[  108.174727][ T9499] dummy0: left promiscuous mode
[  108.179081][ T9499] batadv0: left promiscuous mode
[  108.180807][ T9499] batadv0: left allmulticast mode
[  108.182755][ T9499] veth1_to_team: left allmulticast mode
[  108.185364][ T9499] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  108.188825][ T9499] bond0: left promiscuous mode
[  108.198518][ T9499] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  108.229423][ T9499] tipc: Resetting bearer <eth:syzkaller0>
[  108.239130][ T9499] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  108.242272][ T9499] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  108.258226][ T9499] bond4: left promiscuous mode
[  108.260408][ T9499] bridge9: left promiscuous mode
[  108.269474][ T9499] macsec1: left promiscuous mode
[  108.271691][ T9499] macsec1: left allmulticast mode
[  108.438418][ T9506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.582309][ T9511] _Z`Ԁ@S: entered promiscuous mode
[  108.638050][ T9515] validate_nla: 6 callbacks suppressed
[  108.638062][ T9515] netlink: 'syz.2.1114': attribute type 29 has an invalid length.
[  108.643268][ T9515] netlink: 'syz.2.1114': attribute type 29 has an invalid length.
[  108.781162][ T9526] netlink: 'syz.2.1117': attribute type 10 has an invalid length.
[  108.854163][ T9528] __nla_validate_parse: 27 callbacks suppressed
[  108.854185][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1118'.
[  108.860988][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1118'.
[  108.865364][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1118'.
[  109.229639][ T9534] bond3: (slave gretap2): Releasing active interface
[  109.232248][ T9534] bond3: (slave gretap2): the permanent HWaddr of slave - 6a:8c:be:4d:b2:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  109.239062][ T9534] bond3: (slave gretap3): making interface the new active one
[  109.243483][ T9534] bond3: (slave gretap3): Releasing active interface
[  109.247590][ T9534] bond0: (slave bond4): Releasing backup interface
[  109.251561][ T9534] bond5: (slave batadv1): Releasing active interface
[  109.370247][ T9539] netlink: 'syz.1.1122': attribute type 4 has an invalid length.
[  109.496234][ T9545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1124'.
[  109.645503][ T9563] team0: Port device C removed
[  109.652593][ T9563] team0: Port device team_slave_1 removed
[  109.655309][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.660789][ T9563] batman_adv: batadv0: Removing interface: ip6gretap1
[  109.667968][ T9563] bond2: (slave gretap1): Releasing active interface
[  109.671922][ T9563] bond4: (slave bridge9): Releasing backup interface
[  109.682350][ T9563] team0: Mode changed to "activebackup"
[  109.884608][ T9579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1134'.
[  109.908006][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'.
[  109.956525][ T9590] netlink: 'syz.1.1137': attribute type 32 has an invalid length.
[  109.970322][ T9590] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1137'.
[  109.999455][ T9594] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1139'.
[  110.003620][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'.
[  110.030665][ T9598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1141'.
[  110.153140][ T9599] netlink: 'syz.2.1140': attribute type 13 has an invalid length.
[  110.156329][ T9599] netlink: 'syz.2.1140': attribute type 17 has an invalid length.
[  110.208454][ T9599] 8021q: adding VLAN 0 to HW filter on device team0
[  110.212606][ T9599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.471464][ T9625] raw_sendmsg: syz.2.1145 forgot to set AF_INET. Fix it!
[  111.194149][ T9636] team0: Mode changed to "broadcast"
[  111.267248][ T9647] team0: Mode changed to "activebackup"
[  111.328686][ T9661] netlink: 'syz.0.1158': attribute type 1 has an invalid length.
[  111.511328][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.737120][ T9694] syzkaller1: entered promiscuous mode
[  111.739457][ T9694] syzkaller1: entered allmulticast mode
[  111.892182][ T9699] sit2: entered promiscuous mode
[  111.943855][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.041285][ T9707] netlink: 'syz.1.1173': attribute type 4 has an invalid length.
[  112.518687][ T9718] netlink: 'syz.0.1178': attribute type 1 has an invalid length.
[  113.184590][ T9767] openvswitch: netlink: Missing valid actions attribute.
[  113.189729][ T9767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.213214][ T9762] geneve0: entered promiscuous mode
[  113.215051][ T9762] geneve0: entered allmulticast mode
[  114.054693][ T9779] validate_nla: 1 callbacks suppressed
[  114.054743][ T9779] netlink: 'syz.0.1197': attribute type 1 has an invalid length.
[  114.069403][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.074905][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.076611][ T9779] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  114.081841][ T9779] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  114.085940][ T9779] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  114.159168][ T9784] __nla_validate_parse: 144 callbacks suppressed
[  114.159196][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'.
[  114.253835][ T9797] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.299039][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'.
[  114.536101][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'.
[  114.551450][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[  114.618052][ T9827] syzkaller1: entered promiscuous mode
[  114.620628][ T9827] syzkaller1: entered allmulticast mode
[  114.623653][ T9828] ip6_vti0: Master is either lo or non-ether device
[  114.806127][ T9846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.883958][ T9852] netlink: 'syz.0.1223': attribute type 1 has an invalid length.
[  114.902344][ T9852] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.989338][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'.
[  114.993328][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'.
[  115.020102][ T9860] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.023715][ T9860] bond5: (slave bond6): Enslaving as an active interface with an up link
[  115.037320][ T9861] 8021q: adding VLAN 0 to HW filter on device bond7
[  115.040624][ T9861] bond5: (slave bond7): Enslaving as an active interface with an up link
[  115.049178][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  115.054725][ T9860] bond5 (unregistering): (slave bond6): Releasing backup interface
[  115.060101][ T9860] bond5 (unregistering): (slave bond7): Releasing backup interface
[  115.064685][ T9860] bond5 (unregistering): Released all slaves
[  115.213355][ T9871] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1227'.
[  115.996066][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  116.272694][ T9891] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1233'.
[  116.292974][ T9893] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  116.295648][ T9893] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  116.350597][ T9893] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  116.360664][ T9893] 8021q: adding VLAN 0 to HW filter on device bond6
[  116.367858][ T9893] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  117.311738][ T9941] IPv6: Can't replace route, no match found
[  117.334222][ T9943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.336746][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  117.339522][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  117.342040][ T9943] IPv6: NLM_F_CREATE should be set when creating new route
[  117.701683][ T9947] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  117.705235][ T9947] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  117.741323][ T9949] netlink: 'syz.0.1243': attribute type 7 has an invalid length.
[  117.747065][ T9949] : entered promiscuous mode
[  117.988071][ T9952] netlink: 'syz.0.1244': attribute type 1 has an invalid length.
[  117.999521][ T9952] bond5: entered promiscuous mode
[  118.001505][ T9952] bond5: entered allmulticast mode
[  118.003533][ T9952] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.588216][ T9969] netlink: 'syz.1.1249': attribute type 28 has an invalid length.
[  118.592068][ T9969] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  118.978081][ T9975] C: renamed from team_slave_0
[  118.981122][ T9975] netlink: 'syz.0.1251': attribute type 4 has an invalid length.
[  118.984268][ T9975] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  119.175658][ T9989] __nla_validate_parse: 24 callbacks suppressed
[  119.175670][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  119.222236][ T9993] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1258'.
[  119.225139][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  119.229115][ T9993] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  119.303600][ T9997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1260'.
[  119.346849][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.350453][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.354446][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.367080][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.370551][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.374169][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'.
[  119.385574][T10004] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.389498][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.420139][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.422666][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.473792][ T5860] bond6: (slave wlan0): failed to get link speed/duplex
[  119.596899][ T6049] bond6: (slave wlan0): failed to get link speed/duplex
[  119.707202][ T5860] bond6: (slave wlan0): failed to get link speed/duplex
[  119.827540][ T5860] bond6: (slave wlan0): failed to get link speed/duplex
[  119.936976][ T5860] bond6: (slave wlan0): failed to get link speed/duplex
[  120.057362][   T13] bond6: (slave wlan0): failed to get link speed/duplex
[  120.455410][T10074] netlink: ct family unspecified
[  120.582090][T10087] netlink: 'syz.0.1288': attribute type 10 has an invalid length.
[  120.603628][T10087] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  120.659122][T10096] nbd: must specify at least one socket
[  120.901319][T10062] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  121.044782][T10121] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  122.524848][T10181] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.783781][T10201] tipc: Resetting bearer <eth:gre0>
[  122.786194][T10201] tipc: Resetting bearer <eth:gre0>
[  122.832446][T10207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.933719][T10224] 8021q: adding VLAN 0 to HW filter on device bond5
[  122.990561][T10236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.993736][T10236] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  122.996025][T10236] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  122.999012][T10236] tipc: Resetting bearer <eth:syzkaller0>
[  123.002000][T10236] netlink: 'syz.2.1337': attribute type 1 has an invalid length.
[  123.170897][   T33] audit: type=1800 audit(1756323411.710:4): pid=10241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1339" name="memory.events" dev="tmpfs" ino=2170 res=0 errno=0
[  123.365902][T10246] macsec0: entered promiscuous mode
[  123.368392][T10246] syzkaller0: entered promiscuous mode
[  123.372811][T10246] syzkaller0: left promiscuous mode
[  124.192628][T10284] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  124.200310][T10284] __nla_validate_parse: 37 callbacks suppressed
[  124.200322][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'.
[  124.205035][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'.
[  124.427686][T10289] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1352'.
[  124.431353][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'.
[  124.435113][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'.
[  124.491645][T10293] net_ratelimit: 6 callbacks suppressed
[  124.491666][T10293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.501260][T10293] tipc: Failed to remove unknown binding: 66,1,1/10136234:3918762652/3918762654
[  124.505806][T10293] tipc: Failed to remove unknown binding: 66,1,1/10136234:3918762652/3918762654
[  124.510225][T10293] tipc: Failed to remove unknown binding: 66,1,1/10136234:3918762652/3918762654
[  124.515916][T10293] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1354'.
[  124.978677][T10306] netlink: 'syz.0.1358': attribute type 1 has an invalid length.
[  124.982047][T10307] netlink: 'syz.0.1358': attribute type 1 has an invalid length.
[  125.781786][T10337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1367'.
[  126.151134][T10344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1369'.
[  126.728867][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1377'.
[  126.742890][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'.
[  126.794521][T10373] netlink: 'syz.1.1378': attribute type 4 has an invalid length.
[  126.799544][T10373] netlink: 'syz.1.1378': attribute type 4 has an invalid length.
[  126.810684][T10373] netlink: 'syz.1.1378': attribute type 4 has an invalid length.
[  126.888448][T10384] netlink: ct family unspecified
[  126.890484][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.191347][T10395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.608686][T10423] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.611613][T10423] netlink: 'syz.0.1393': attribute type 13 has an invalid length.
[  127.813084][T10439] netlink: 'syz.1.1399': attribute type 3 has an invalid length.
[  127.819857][T10439] dvmrp0: left allmulticast mode
[  127.871164][T10440] siw: device registration error -23
[  127.891841][T10440] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.895466][T10440] 8021q: adding VLAN 0 to HW filter on device team0
[  127.902588][T10440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.914263][T10441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.991381][T10443] dvmrp0: entered allmulticast mode
[  128.094417][T10447] netlink: ct family unspecified
[  128.096176][T10447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.421489][T10474] netlink: ct family unspecified
[  128.423122][T10474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.430936][T10472] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  128.435107][T10472] syzkaller0: entered promiscuous mode
[  128.437590][T10472] syzkaller0: entered allmulticast mode
[  128.541802][T10482] vlan2: entered promiscuous mode
[  128.551883][T10484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.606857][  T794] page_pool_release_retry() stalled pool shutdown: id 20, 1 inflight 60 sec
[  128.641544][T10486] veth9: entered promiscuous mode
[  128.689419][T10487] erspan0: entered allmulticast mode
[  128.776087][T10491] syzkaller1: entered promiscuous mode
[  128.779740][T10491] syzkaller1: entered allmulticast mode
[  129.105036][T10507] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  129.214571][T10513] __nla_validate_parse: 8 callbacks suppressed
[  129.214611][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1427'.
[  129.277151][T10515] syzkaller1: entered promiscuous mode
[  129.278999][T10515] syzkaller1: entered allmulticast mode
[  129.418362][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1430'.
[  129.421947][T10523] netlink: 'syz.1.1430': attribute type 11 has an invalid length.
[  129.899524][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'.
[  130.196651][T10619] net_ratelimit: 2 callbacks suppressed
[  130.196665][T10619] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  130.285138][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  130.342465][T10636] dvmrp8: entered allmulticast mode
[  130.355299][T10635] dvmrp8: left allmulticast mode
[  130.392286][T10645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1445'.
[  130.438187][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1445'.
[  130.544529][T10666] netlink: 'syz.0.1450': attribute type 2 has an invalid length.
[  130.549188][T10665] netlink: 'syz.0.1450': attribute type 2 has an invalid length.
[  130.561180][T10665] tipc: Resetting bearer <eth:gre0>
[  130.563758][T10665] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  130.573802][T10665] veth0_to_team: entered promiscuous mode
[  130.575686][T10665] veth0_to_team: entered allmulticast mode
[  130.689687][T10677] netlink: 'syz.0.1453': attribute type 1 has an invalid length.
[  130.692029][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'.
[  130.856596][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'.
[  131.288925][T10650] Set syz1 is full, maxelem 65536 reached
[  131.472394][T10721] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  131.662453][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1470'.
[  131.695626][T10747] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  131.699131][T10747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1471'.
[  131.730950][T10750] netlink: zone id is out of range
[  131.733509][T10750] netlink: zone id is out of range
[  131.735767][T10750] netlink: zone id is out of range
[  131.738747][T10750] netlink: zone id is out of range
[  131.740984][T10750] netlink: zone id is out of range
[  131.743096][T10750] netlink: get zone limit has 8 unknown bytes
[  131.774315][T10752] netlink: ct family unspecified
[  131.925088][T10761] wg1: entered promiscuous mode
[  131.927333][T10761] wg1: entered allmulticast mode
[  132.506456][T10786] geneve4: entered promiscuous mode
[  132.508519][T10786] geneve4: entered allmulticast mode
[  132.535654][T10789] netlink: 'syz.1.1484': attribute type 1 has an invalid length.
[  132.550471][T10789] netlink: 'syz.1.1484': attribute type 10 has an invalid length.
[  132.664508][T10808] macsec2: entered promiscuous mode
[  132.666198][T10808] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  132.685129][T10808] macsec2: entered allmulticast mode
[  132.689780][T10808] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  132.762889][T10821] nbd: must specify at least one socket
[  132.915222][T10832] hsr_slave_0: left promiscuous mode
[  133.669087][T10841] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  133.691400][T10843] netlink: 'syz.2.1501': attribute type 83 has an invalid length.
[  133.985677][ T5309] IPVS: starting estimator thread 0...
[  134.025558][T10883] macsec2: entered promiscuous mode
[  134.029417][T10883] team0: entered promiscuous mode
[  134.077960][T10880] IPVS: using max 67 ests per chain, 160800 per kthread
[  134.143082][T10888] dvmrp0: entered allmulticast mode
[  134.147901][T10888] syzkaller1: entered promiscuous mode
[  134.149851][T10888] syzkaller1: entered allmulticast mode
[  134.172361][T10888] netlink: 'syz.2.1514': attribute type 1 has an invalid length.
[  134.175277][T10888] netlink: 'syz.2.1514': attribute type 1 has an invalid length.
[  134.253922][ T6049] IPVS: stop unused estimator thread 0...
[  134.403986][T10900] netlink: 'syz.2.1516': attribute type 13 has an invalid length.
[  134.406605][T10900] netlink: 'syz.2.1516': attribute type 17 has an invalid length.
[  134.413765][T10900] netlink: 'syz.2.1516': attribute type 12 has an invalid length.
[  134.543560][T10909] netlink: 'syz.2.1519': attribute type 4 has an invalid length.
[  134.552960][T10909] netlink: 'syz.2.1519': attribute type 4 has an invalid length.
[  134.584709][T10914] __nla_validate_parse: 15 callbacks suppressed
[  134.584723][T10914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1520'.
[  134.608359][T10914] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1520'.
[  134.614761][T10904] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1517'.
[  134.708798][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  134.711696][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  134.715748][   T10] hid-generic 0005:16BF:5505.0002: reserved main item tag 0xe
[  134.722625][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  134.791226][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'.
[  134.794766][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'.
[  134.805695][T10929] 8021q: adding VLAN 0 to HW filter on device bond6
[  134.866220][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  135.036404][   T10] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  135.040108][   T10] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  135.045314][   T10] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  135.658382][T10956] tipc: Resetting bearer <eth:gre0>
[  135.718769][T10956] veth0_to_team: left promiscuous mode
[  135.720688][T10956] veth0_to_team: left allmulticast mode
[  135.733499][T10956] sit2: left allmulticast mode
[  135.756855][T10956] bond5: left promiscuous mode
[  135.759258][T10956] bond5: left allmulticast mode
[  135.764307][T10956] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  135.769151][T10956] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  135.772065][T10956] macsec2: left promiscuous mode
[  135.774130][T10956] macsec2: left allmulticast mode
[  135.870060][T10979] dvmrp0: left allmulticast mode
[  135.926506][T10979] net_ratelimit: 11 callbacks suppressed
[  135.926515][T10979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.955754][T10982] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1534'.
[  135.990202][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.992948][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.996589][T10988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1536'.
[  136.003470][T10986] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  136.011200][T10986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.014687][T10986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.119064][T10992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  136.255127][T10998] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1540'.
[  136.485787][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1546'.
[  136.512689][T11018] lo: entered allmulticast mode
[  136.522357][T11018] lo: left allmulticast mode
[  136.577914][  T794] IPVS: starting estimator thread 0...
[  136.676875][T11024] IPVS: using max 92 ests per chain, 220800 per kthread
[  136.836126][   T12] IPVS: stop unused estimator thread 0...
[  137.269468][T11059] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  137.271265][T11058] IPVS: stopping backup sync thread 11059 ...
[  137.278280][T11058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  137.280950][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[  137.283548][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[  137.286604][T11058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.230404][T11094] validate_nla: 4 callbacks suppressed
[  138.230416][T11094] netlink: 'syz.0.1572': attribute type 30 has an invalid length.
[  138.238762][ T5733] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.242889][ T5733] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.246674][ T5733] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.252575][ T5733] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.297402][T11106] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.340898][T11112] netlink: 'syz.0.1578': attribute type 3 has an invalid length.
[  138.493629][T11123] erspan0: left allmulticast mode
[  138.539332][T11123] ip6tnl3: left promiscuous mode
[  138.541112][T11123] ip6tnl3: left allmulticast mode
[  138.542945][T11123] sit2: left promiscuous mode
[  138.548689][T11123] geneve4: left promiscuous mode
[  138.550436][T11123] geneve4: left allmulticast mode
[  138.553972][T11127] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  138.723531][T11148] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  138.922476][T11158] nbd: nbd0 already in use
[  138.924268][T11158] block nbd0: NBD_DISCONNECT
[  138.925760][T11158] block nbd0: Send disconnect failed -32
[  138.927977][T11158] block nbd0: shutting down sockets
[  138.933283][T11158] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  139.006187][T11164] nbd: illegal input index -1
[  139.010880][T11164] veth0_to_bond: left allmulticast mode
[  139.013267][T11164] veth0_to_bond: left promiscuous mode
[  139.015588][T11164] bridge2: port 2(veth0_to_bond) entered disabled state
[  139.019915][T11164] bond0: (slave wlan1): Releasing backup interface
[  139.023137][T11164] bond2: (slave geneve2): Releasing active interface
[  139.025956][T11164] veth9: left allmulticast mode
[  139.028448][T11164] veth9: left promiscuous mode
[  139.030201][T11164] bridge2: port 1(veth9) entered disabled state
[  139.053944][T11166] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  139.056336][T11166] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  139.058743][T11166] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  139.102564][T11168] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20004
[  139.414331][T11201] veth0_to_bond: entered allmulticast mode
[  139.424276][T11198] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  139.547950][T11209] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  139.552650][T11209] netlink: 'syz.2.1609': attribute type 4 has an invalid length.
[  139.590657][T11225] 8021q: VLANs not supported on nlmon0
[  139.599878][T11227] __nla_validate_parse: 71 callbacks suppressed
[  139.599895][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'.
[  139.627552][T11227] team0 (unregistering): left promiscuous mode
[  139.645152][T11232] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.653429][T11230] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  139.684911][T11237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'.
[  139.719235][T11241] netlink: 'syz.2.1621': attribute type 2 has an invalid length.
[  139.722484][T11241] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1621'.
[  139.739092][T11244] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002
[  139.776943][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1625'.
[  139.829431][T11260] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1628'.
[  139.871236][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1630'.
[  139.895091][T11266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1631'.
[  139.913392][T11266] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1631'.
[  140.014838][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'.
[  140.141585][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'.
[  140.186367][T11318] openvswitch: netlink: Flow key attr not present in new flow.
[  140.205645][T11317] bond6: (slave wlan0): Releasing active interface
[  140.249265][T11326] netlink: 'syz.1.1650': attribute type 29 has an invalid length.
[  140.321347][T11339] sctp: [Deprecated]: syz.2.1651 (pid 11339) Use of int in max_burst socket option deprecated.
[  140.321347][T11339] Use struct sctp_assoc_value instead
[  140.503601][T11354] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.513535][T11354] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.516058][T11354] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  140.521731][T11354] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  140.541160][T11362] syzkaller0: entered promiscuous mode
[  140.542868][T11362] syzkaller0: entered allmulticast mode
[  140.613855][ T6049] bond0 (unregistering): Released all slaves
[  140.871466][T11401] netlink: 'syz.0.1663': attribute type 1 has an invalid length.
[  140.886449][T11401] 8021q: adding VLAN 0 to HW filter on device bond8
[  140.901067][T11401] 8021q: adding VLAN 0 to HW filter on device bond8
[  140.904004][T11401] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  140.911220][T11401] bond8: (slave vcan1): Error -95 calling set_mac_address
[  140.922457][T11406] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  140.926167][T11406] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  140.930604][T11406] netlink: 'syz.1.1665': attribute type 1 has an invalid length.
[  140.950365][T11407] gretap1: entered promiscuous mode
[  140.954543][T11407] bond8: (slave gretap1): making interface the new active one
[  140.958157][T11407] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  140.970213][T11407] macvlan2: entered promiscuous mode
[  140.972397][T11407] macvlan2: entered allmulticast mode
[  140.976238][T11407] bond8: entered promiscuous mode
[  140.978932][T11407] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  140.983838][T11407] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  140.990629][T11407] bond8: left promiscuous mode
[  141.015098][T11411] 8021q: adding VLAN 0 to HW filter on device bond9
[  141.018167][T11411] bond8: (slave bond9): Enslaving as an active interface with an up link
[  141.120114][T11425] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  141.209214][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.221633][T11417] syzkaller1: entered promiscuous mode
[  141.223613][T11417] syzkaller1: entered allmulticast mode
[  141.226405][T11417] netlink: 'syz.0.1669': attribute type 1 has an invalid length.
[  141.353034][T11445] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  141.496596][T11455] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  141.532385][T11457] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.619009][T11457] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.670372][T11457] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.710740][T11457] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.749931][T11464] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  141.764986][ T5733] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.786902][ T5733] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.789876][ T5733] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.792626][ T5733] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.805252][T11468] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  141.816469][T11468] 8021q: adding VLAN 0 to HW filter on device bond10
[  141.825633][T11468] bond10: (slave gretap4): making interface the new active one
[  141.828529][T11468] bond10: (slave gretap4): Enslaving as an active interface with an up link
[  142.211777][T11499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.215529][T11499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.791140][T11511] netlink: 'syz.1.1697': attribute type 3 has an invalid length.
[  142.796084][T11511] dvmrp0: left allmulticast mode
[  143.084630][T11527] macvtap1: entered promiscuous mode
[  143.086534][T11527] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  143.711217][T11568] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.715153][T11568] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.818900][T11573] trusted_key: syz.2.1711 sent an empty control message without MSG_MORE.
[  143.876066][T11576] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002
[  143.881712][T11578] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002
[  143.967833][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  144.558102][T11590] lo speed is unknown, defaulting to 1000
[  144.560592][T11590] lo speed is unknown, defaulting to 1000
[  144.563120][T11590] lo speed is unknown, defaulting to 1000
[  144.570548][T11590] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  144.581395][T11590] lo speed is unknown, defaulting to 1000
[  144.584904][T11590] lo speed is unknown, defaulting to 1000
[  144.588262][T11590] lo speed is unknown, defaulting to 1000
[  144.626674][T11592] __nla_validate_parse: 43 callbacks suppressed
[  144.628938][T11592] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1717'.
[  144.709284][T11595] veth1_macvtap: left promiscuous mode
[  144.769638][T11602] nbd: illegal input index -1
[  144.779238][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  144.783122][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'.
[  144.828373][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'.
[  144.849033][T11615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.854989][   T10] lo speed is unknown, defaulting to 1000
[  144.895143][T11621] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  144.900286][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'.
[  145.012593][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'.
[  145.051219][T11645] syzkaller1: entered promiscuous mode
[  145.053209][T11645] syzkaller1: entered allmulticast mode
[  145.112109][T11655] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1736'.
[  145.122944][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1736'.
[  145.126883][T11655] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  145.146446][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1737'.
[  145.150871][T11658] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1737'.
[  146.144384][T11718] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  146.318615][T11731] validate_nla: 2 callbacks suppressed
[  146.318631][T11731] netlink: 'syz.1.1762': attribute type 1 has an invalid length.
[  146.384093][T11737] netlink: 'syz.2.1765': attribute type 2 has an invalid length.
[  146.390374][T11737] k*]: entered promiscuous mode
[  146.395541][T11737] veth0_to_team: entered promiscuous mode
[  146.398720][T11737] veth0_to_team: entered allmulticast mode
[  146.429869][T11740] netlink: 'syz.2.1766': attribute type 1 has an invalid length.
[  146.432516][T11739] netlink: 'syz.2.1766': attribute type 1 has an invalid length.
[  146.444796][T11742] netlink: 'syz.1.1767': attribute type 3 has an invalid length.
[  146.449584][T11742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.455275][T11742] siw: device registration error -23
[  146.471589][T11742] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.474519][T11742] 8021q: adding VLAN 0 to HW filter on device team0
[  146.480378][T11742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.589995][T11747] netlink: 'syz.1.1769': attribute type 10 has an invalid length.
[  147.285550][T11759] lo speed is unknown, defaulting to 1000
[  147.629597][T11782] 8021q: adding VLAN 0 to HW filter on device bond11
[  147.638261][T11782] macvlan2: entered promiscuous mode
[  147.640323][T11782] macvlan2: entered allmulticast mode
[  147.972294][T11812] 8021q: adding VLAN 0 to HW filter on device bond7
[  147.975220][T11812] bond0: (slave bond7): making interface the new active one
[  147.978045][T11812] bond0: (slave bond7): Enslaving as an active interface with an up link
[  148.031938][T11817] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  148.036023][T11817] syzkaller0: entered promiscuous mode
[  148.039926][T11817] syzkaller0: entered allmulticast mode
[  148.115592][T11823] netlink: ct family unspecified
[  148.117998][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.210783][T11830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  148.476546][T11841] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  148.480967][T11841] syzkaller0: entered promiscuous mode
[  148.483116][T11841] syzkaller0: entered allmulticast mode
[  148.902959][T11851] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  149.027317][T11862] lo speed is unknown, defaulting to 1000
[  149.651471][T11898] __nla_validate_parse: 27 callbacks suppressed
[  149.651483][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1811'.
[  149.726433][T11904] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1812'.
[  150.322253][T11914] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  150.324911][T11913] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  150.474571][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'.
[  150.501737][T11937] syzkaller1: entered promiscuous mode
[  150.503860][T11937] syzkaller1: entered allmulticast mode
[  150.672770][T11906] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  150.735324][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'.
[  150.769611][T11954] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1824'.
[  150.772762][T11954] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1824'.
[  150.797844][T11964] netlink: 'syz.1.1826': attribute type 10 has an invalid length.
[  150.819337][T11968] ip_vti0: entered allmulticast mode
[  150.842753][T11971] ip_vti0: left allmulticast mode
[  150.956541][T11981] netlink: 'syz.0.1830': attribute type 1 has an invalid length.
[  150.962304][T11981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'.
[  150.965361][T11981] netlink: 'syz.0.1830': attribute type 21 has an invalid length.
[  150.968109][T11981] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1830'.
[  150.971041][T11981] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1830'.
[  151.042336][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1828'.
[  151.097664][T11994] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  151.812486][T11999] lo speed is unknown, defaulting to 1000
[  151.851066][T12004] syzkaller0: entered promiscuous mode
[  151.852890][T12004] syzkaller0: entered allmulticast mode
[  152.007246][T12019] syzkaller1: entered promiscuous mode
[  152.011322][T12019] syzkaller1: entered allmulticast mode
[  152.048385][T12027] validate_nla: 1 callbacks suppressed
[  152.048396][T12027] netlink: 'syz.2.1842': attribute type 10 has an invalid length.
[  152.052871][T12027] veth0_vlan: left promiscuous mode
[  152.055946][T12027] veth0_vlan: entered promiscuous mode
[  152.057807][T12027] veth0_vlan: entered allmulticast mode
[  152.061001][T12027] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  152.114716][T12025] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  152.141690][T12025] bond9: (slave bridge6): making interface the new active one
[  152.145206][T12025] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  152.393145][T12062] netlink: 'syz.0.1850': attribute type 2 has an invalid length.
[  152.396017][T12062] netlink: 'syz.0.1850': attribute type 1 has an invalid length.
[  152.558417][T12074] tipc: Resetting bearer <eth:syzkaller0>
[  152.738653][T12094] openvswitch: netlink: Message has 1 unknown bytes.
[  152.743932][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.544291][T12212] sctp: [Deprecated]: syz.2.1864 (pid 12212) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.544291][T12212] Use struct sctp_sack_info instead
[  153.601502][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.605216][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.614123][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.618463][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.647499][T12226] netlink: 'syz.2.1867': attribute type 6 has an invalid length.
[  153.683084][T12233] netlink: 'syz.1.1868': attribute type 1 has an invalid length.
[  153.790346][T12243] syzkaller0: entered promiscuous mode
[  153.792081][T12243] syzkaller0: entered allmulticast mode
[  154.065901][T12288] netlink: 'syz.2.1881': attribute type 5 has an invalid length.
[  154.338753][T12316] netlink: 'syz.1.1888': attribute type 6 has an invalid length.
[  154.352126][T12318] netlink: 'syz.0.1889': attribute type 11 has an invalid length.
[  154.372047][T12321] IPVS: set_ctl: invalid protocol: 0 172.20.20.19:0
[  154.375547][T12321] netlink: 'syz.2.1891': attribute type 3 has an invalid length.
[  154.379832][T12321] netlink: 'syz.2.1891': attribute type 3 has an invalid length.
[  154.422509][T12328] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  154.461245][T12324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.499646][T12337] lo speed is unknown, defaulting to 1000
[  154.533477][T12342] bond0: (slave bond7): Releasing backup interface
[  154.556431][T12342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.722904][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.731588][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.831367][T12348] lo speed is unknown, defaulting to 1000
[  154.867706][T12348] __nla_validate_parse: 22 callbacks suppressed
[  154.867718][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'.
[  155.299918][T12373] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  155.331482][T12373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1901'.
[  155.341322][T12375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1902'.
[  155.341491][T12373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1901'.
[  155.348086][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1901'.
[  155.469250][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1903'.
[  155.663669][T12389] gretap2: entered promiscuous mode
[  155.771325][T12405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1906'.
[  155.789109][T12416] IPv6: NLM_F_REPLACE set, but no existing node found!
[  155.901824][T12425] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.985452][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'.
[  156.016349][T12439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.152891][T12452] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1915'.
[  156.244732][T12464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.484842][T12478] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1919'.
[  156.595699][T12496] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.785897][T12515] 8021q: adding VLAN 0 to HW filter on device bond10
[  156.794817][T12515] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  156.799133][T12515] bond10: (slave macvlan2): Enslaving as a backup interface with a down link
[  156.805138][T12515] bond8: (slave gretap1): Releasing active interface
[  156.815262][T12515] bond9: (slave bridge6): Releasing active interface
[  156.827882][T12515] bond10: (slave macvlan2): Releasing backup interface
[  156.850231][T12521] bond13: entered promiscuous mode
[  156.852134][T12521] 8021q: adding VLAN 0 to HW filter on device bond13
[  156.894765][T12528] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  156.929165][T12528] syzkaller0: entered promiscuous mode
[  156.931492][T12528] syzkaller0: entered allmulticast mode
[  156.946474][T12526] syzkaller1: entered promiscuous mode
[  156.948911][T12526] syzkaller1: entered allmulticast mode
[  157.252013][T12543] lo speed is unknown, defaulting to 1000
[  157.259551][T12548] IPv6: NLM_F_REPLACE set, but no existing node found!
[  157.326130][T12554] gretap0: entered promiscuous mode
[  157.339180][T12554] gretap0: left promiscuous mode
[  157.353074][T12555] sctp: [Deprecated]: syz.2.1936 (pid 12555) Use of int in max_burst socket option.
[  157.353074][T12555] Use struct sctp_assoc_value instead
[  157.420939][T12560] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  157.443085][T12562] lo speed is unknown, defaulting to 1000
[  157.582056][T12562] macsec0: entered promiscuous mode
[  157.584040][T12562] syzkaller0: entered promiscuous mode
[  157.588139][T12562] syzkaller0: left promiscuous mode
[  157.774296][T12587] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  157.778918][T12587] macvtap1: left promiscuous mode
[  157.793590][T12587] macvlan2: left promiscuous mode
[  157.795681][T12587] macvlan2: left allmulticast mode
[  157.813113][T12587] bond13: left promiscuous mode
[  157.845329][T12595] validate_nla: 6 callbacks suppressed
[  157.845345][T12595] netlink: 'syz.0.1948': attribute type 1 has an invalid length.
[  157.994337][T12601] lo speed is unknown, defaulting to 1000
[  158.179566][   T12] nci: nci_rx_work: unknown MT 0x1
[  158.885305][T12627] 8021q: adding VLAN 0 to HW filter on device bond11
[  158.980925][T12634] !: renamed from dummy0
[  159.011239][T12634] lo speed is unknown, defaulting to 1000
[  159.379978][T12669] netlink: 'syz.0.1968': attribute type 13 has an invalid length.
[  159.383075][T12669] netlink: 'syz.0.1968': attribute type 17 has an invalid length.
[  159.391060][T12669] tipc: Resetting bearer <eth:gre0>
[  159.393041][T12669] tipc: Resetting bearer <eth:gre0>
[  159.420677][T12669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.443541][T12669] lo speed is unknown, defaulting to 1000
[  159.841823][T12695] netlink: 'syz.2.1976': attribute type 3 has an invalid length.
[  159.861003][T12695] siw: device registration error -23
[  159.901734][T12701] netlink: 'syz.2.1977': attribute type 21 has an invalid length.
[  159.908138][T12701] __nla_validate_parse: 24 callbacks suppressed
[  159.908153][T12701] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1977'.
[  159.922339][T12701] netlink: 'syz.2.1977': attribute type 5 has an invalid length.
[  159.925359][T12701] netlink: 'syz.2.1977': attribute type 6 has an invalid length.
[  159.929700][T12701] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1977'.
[  159.984132][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'.
[  159.989935][T12706] netlink: 'syz.2.1979': attribute type 5 has an invalid length.
[  159.993061][T12706] netlink: 'syz.2.1979': attribute type 7 has an invalid length.
[  160.000120][T12706] : entered promiscuous mode
[  160.022154][T12711] netlink: 'syz.2.1981': attribute type 12 has an invalid length.
[  160.049132][T12716] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1982'.
[  160.080741][T12717] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1980'.
[  160.176385][T12723] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  160.388781][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1991'.
[  160.406132][T12743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1990'.
[  160.417779][T12743] vlan2: entered allmulticast mode
[  160.419676][T12743] bridge_slave_0: entered allmulticast mode
[  160.634569][T12757] lo speed is unknown, defaulting to 1000
[  160.649345][T12759] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  160.851476][T12769] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  160.855194][T12769] syzkaller0: entered promiscuous mode
[  160.858133][T12769] syzkaller0: entered allmulticast mode
[  160.939596][T12774] tipc: Resetting bearer <eth:gre0>
[  160.955567][T12774] bond0: (slave wlan1): refused to change device type
[  160.964081][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'.
[  161.240795][T12778] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2000'.
[  161.249600][T12778] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2000'.
[  161.257358][T12778] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  161.266964][T12778] syzkaller0: entered promiscuous mode
[  161.269066][T12778] syzkaller0: entered allmulticast mode
[  161.586405][T12817] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  161.589641][T12817] macsec2: entered promiscuous mode
[  161.591910][T12817] macsec2: entered allmulticast mode
[  161.593958][T12817] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  161.754958][T12825] rdma_rxe: rxe_newlink: failed to add lo
[  161.874643][T12842] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  161.885918][T12842] tipc: Resetting bearer <eth:gre0>
[  161.925764][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.929764][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.932398][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.938507][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  161.962766][T12849] lo speed is unknown, defaulting to 1000
[  162.886633][T12883] validate_nla: 7 callbacks suppressed
[  162.886654][T12883] netlink: 'syz.1.2029': attribute type 4 has an invalid length.
[  162.952650][T12883] lo speed is unknown, defaulting to 1000
[  163.017109][T12894] netlink: 'syz.0.2033': attribute type 10 has an invalid length.
[  163.173204][T12920] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  163.178454][T12920] syzkaller0: entered promiscuous mode
[  163.182987][T12920] syzkaller0: entered allmulticast mode
[  163.192885][T12920] syzkaller0: mtu less than device minimum
[  163.199662][T12920] netlink: del zone limit has 4 unknown bytes
[  163.249294][T12925] openvswitch: netlink: IP tunnel TTL not specified.
[  163.448756][T12942] vlan3: entered promiscuous mode
[  163.453928][T12944] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  163.669951][T12953] netlink: 'syz.2.2047': attribute type 10 has an invalid length.
[  163.803208][T12980] netlink: 'syz.2.2055': attribute type 12 has an invalid length.
[  163.911948][T12993] netlink: 'syz.1.2058': attribute type 3 has an invalid length.
[  164.182501][T13031] netlink: 'syz.1.2070': attribute type 29 has an invalid length.
[  164.186495][T13031] netlink: 'syz.1.2070': attribute type 29 has an invalid length.
[  164.325757][T13044] netlink: 'syz.0.2075': attribute type 5 has an invalid length.
[  164.469256][T13038] netlink: 'syz.1.2073': attribute type 1 has an invalid length.
[  164.472426][T13038] netlink: 'syz.1.2073': attribute type 1 has an invalid length.
[  165.031058][T13086] __nla_validate_parse: 21 callbacks suppressed
[  165.031082][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'.
[  165.109164][T13092] bond8: (slave bond9): Releasing backup interface
[  165.113899][T13092] bond10: (slave gretap4): Releasing active interface
[  165.129249][T13092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  165.180058][T13094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2086'.
[  165.199441][T13101] ip_vti0: entered allmulticast mode
[  165.204079][T13099] ip_vti0: left allmulticast mode
[  165.278307][T13110] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2090'.
[  165.359638][T13119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2092'.
[  165.419213][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'.
[  165.422584][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'.
[  165.465364][T13132] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2093'.
[  165.588423][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'.
[  165.649779][T13153] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  165.678629][T13154] syzkaller0: entered promiscuous mode
[  165.680373][T13154] syzkaller0: entered allmulticast mode
[  165.820151][T13166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2100'.
[  165.850265][T13171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2101'.
[  166.776559][T13283] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  166.960807][T13297] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.252291][T13326] IPVS: length: 163 != 13320
[  167.280278][T13331] syzkaller1: entered promiscuous mode
[  167.282560][T13331] syzkaller1: entered allmulticast mode
[  167.363503][T13334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.366564][T13334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.625314][T13369] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  167.628079][T13369] macsec2: left promiscuous mode
[  167.629938][T13369] macsec2: left allmulticast mode
[  167.652265][T13369] hsr_slave_0: left promiscuous mode
[  167.657927][T13369] hsr_slave_1: left promiscuous mode
[  167.775680][T13391] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  167.783089][T13391] syzkaller0: entered promiscuous mode
[  167.785088][T13391] syzkaller0: entered allmulticast mode
[  167.910943][T13404] Bluetooth: MGMT ver 1.23
[  168.049249][T13418] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  168.053337][T13418] syzkaller0: entered promiscuous mode
[  168.055690][T13418] syzkaller0: entered allmulticast mode
[  169.105712][T13475] siw: device registration error -23
[  169.129739][T13475] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.133574][T13475] 8021q: adding VLAN 0 to HW filter on device team0
[  169.139427][T13475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.419511][T13510] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  169.452242][T13513] validate_nla: 5 callbacks suppressed
[  169.452260][T13513] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  169.470692][T13512] sctp: [Deprecated]: syz.1.2174 (pid 13512) Use of int in maxseg socket option.
[  169.470692][T13512] Use struct sctp_assoc_value instead
[  169.685660][T13538] openvswitch: netlink: Flow actions attr not present in new flow.
[  169.744850][T13543] lo speed is unknown, defaulting to 1000
[  169.925913][T13570] netlink: 'syz.0.2190': attribute type 1 has an invalid length.
[  169.967026][T13432] Bluetooth: hci2: command 0x0406 tx timeout
[  169.967057][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  170.015011][T13581] netlink: 'syz.0.2193': attribute type 1 has an invalid length.
[  170.076583][T13583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  170.447270][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  170.996458][T13602] __nla_validate_parse: 25 callbacks suppressed
[  170.996470][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'.
[  171.894929][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  171.898509][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  171.911717][T13613] netlink: 'syz.0.2201': attribute type 10 has an invalid length.
[  171.916628][T13613] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  171.939758][T13617] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  172.240600][T13641] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2210'.
[  172.324141][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2211'.
[  172.328758][T13646] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2211'.
[  172.365005][T13649] IPVS: length: 62 != 24
[  172.432555][T13655] syzkaller1: entered promiscuous mode
[  172.434701][T13655] syzkaller1: entered allmulticast mode
[  172.439851][T13655] netlink: 'syz.0.2215': attribute type 21 has an invalid length.
[  172.442721][T13655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2215'.
[  172.446085][T13655] netlink: 'syz.0.2215': attribute type 4 has an invalid length.
[  172.450281][T13655] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2215'.
[  172.470387][T13664] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  172.483552][T13664] netlink: 'syz.1.2216': attribute type 10 has an invalid length.
[  172.486492][T13664] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  172.624910][T13670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2219'.
[  172.718100][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2220'.
[  173.568362][T13679] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  173.572057][T13679] syzkaller0: entered promiscuous mode
[  173.574044][T13679] syzkaller0: entered allmulticast mode
[  173.795940][T13681] netlink: 'syz.1.2223': attribute type 1 has an invalid length.
[  173.845608][T13691] lo speed is unknown, defaulting to 1000
[  173.904318][T13697] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  174.216388][T13706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.220970][T13706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.467317][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.501283][T13729] openvswitch: netlink: Multiple metadata blocks provided
[  174.545390][T13733] netlink: 'syz.0.2239': attribute type 11 has an invalid length.
[  174.549267][T13733] netlink: 'syz.0.2239': attribute type 11 has an invalid length.
[  174.694229][T13739] netlink: 'syz.0.2241': attribute type 41 has an invalid length.
[  174.698139][T13739] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  174.919256][T13757] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.924394][T13757] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.936778][T13763] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  174.944061][T13763] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  174.958579][T13763] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002
[  175.099350][T13786] openvswitch: netlink: Flow actions attr not present in new flow.
[  176.096600][T13814] __nla_validate_parse: 14 callbacks suppressed
[  176.096616][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2263'.
[  176.103263][T13814] bond0: invalid ARP target 0.0.0.0 specified for addition
[  176.106258][T13814] bond0: option arp_ip_target: invalid value (0)
[  176.108915][T13814] bond0: Removing last arp target with arp_interval on
[  176.231823][T13818] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2265'.
[  176.270536][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[  176.274032][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'.
[  176.354771][T13826] netlink: 'syz.0.2267': attribute type 6 has an invalid length.
[  176.358403][T13826] netlink: 'syz.0.2267': attribute type 6 has an invalid length.
[  176.715425][T13834] net veth1_virt_wifi : renamed from virt_wifi0
[  177.882526][T13865] bond0: entered promiscuous mode
[  177.890055][T13865] batadv0: entered promiscuous mode
[  177.892241][T13865] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  177.895207][T13865] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  177.898761][T13865] hsr0: entered allmulticast mode
[  177.900673][T13865] bond0: entered allmulticast mode
[  177.902676][T13865] batadv0: entered allmulticast mode
[  177.905237][T13865] 8021q: adding VLAN 0 to HW filter on device hsr0
[  177.909149][T13865] bond0: left promiscuous mode
[  177.911613][T13865] batadv0: left promiscuous mode
[  177.996547][T13869] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2278'.
[  178.171992][T13888] netlink: 798 bytes leftover after parsing attributes in process `syz.2.2282'.
[  178.259364][T13894] netlink: 'syz.2.2283': attribute type 1 has an invalid length.
[  178.350001][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2284'.
[  178.389292][T13905] openvswitch: netlink: Duplicate or invalid key (type 0).
[  178.391944][T13905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.409438][T13908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2287'.
[  178.443427][T13916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2290'.
[  178.447210][T13916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2290'.
[  178.755688][T13933] netlink: 'syz.2.2294': attribute type 10 has an invalid length.
[  178.872316][T13945] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.093477][T13970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.224369][T13979] batadv1: entered allmulticast mode
[  179.227246][T13979] 8021q: adding VLAN 0 to HW filter on device batadv1
[  179.403638][T13991] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  179.406841][T13991] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  179.411612][T13991] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  179.672364][T14025] openvswitch: netlink: Flow actions attr not present in new flow.
[  179.699002][T14028] netlink: 'syz.1.2321': attribute type 83 has an invalid length.
[  179.735667][T14033] 8021q: VLANs not supported on ip_vti0
[  179.924773][T14048] siw: device registration error -23
[  180.011490][T14063] openvswitch: netlink: Flow actions attr not present in new flow.
[  180.339659][T14112] netlink: 'syz.1.2350': attribute type 4 has an invalid length.
[  180.446372][T14130] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  180.608183][T14145] lo speed is unknown, defaulting to 1000
[  180.616865][T14147] netlink: 'syz.2.2361': attribute type 1 has an invalid length.
[  180.619237][T14147] netlink: 'syz.2.2361': attribute type 2 has an invalid length.
[  180.638478][T14149] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  180.640802][T14149] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  180.643202][T14149] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  180.685146][T14153] vlan3: entered promiscuous mode
[  180.701862][T14155] lo speed is unknown, defaulting to 1000
[  180.798147][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  180.803269][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  180.806164][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  180.812541][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  180.816597][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  180.826647][T14161] netlink: 'syz.0.2366': attribute type 3 has an invalid length.
[  181.218830][T14190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.253986][T14192] __nla_validate_parse: 41 callbacks suppressed
[  181.253999][T14192] netlink: 700 bytes leftover after parsing attributes in process `syz.2.2376'.
[  181.279894][T14194] sctp: [Deprecated]: syz.2.2377 (pid 14194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.279894][T14194] Use struct sctp_sack_info instead
[  181.359221][T14198] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  181.444767][T14201] IPVS: length: 49 != 24
[  181.675820][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'.
[  181.679206][T14209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2382'.
[  181.682792][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'.
[  181.686052][T14209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2382'.
[  181.710443][T14215] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2383'.
[  181.713723][T14215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2383'.
[  181.874723][T14232] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2389'.
[  181.927901][T14235] syzkaller0: entered promiscuous mode
[  181.929779][T14235] syzkaller0: entered allmulticast mode
[  181.933159][T14234] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  181.945888][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'.
[  182.246510][T14254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2396'.
[  182.391406][T14258] vlan0: entered promiscuous mode
[  182.396171][T14258] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  182.470467][T14264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.591141][T14272] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  182.715794][T14289] nbd: must specify a size in bytes for the device
[  182.945743][T14318] dvmrp0: entered allmulticast mode
[  182.954265][T14318] openvswitch: netlink: Tunnel attr 27 out of range max 16
[  183.070657][T14326] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  183.207069][T14340] nbd0: detected capacity change from 0 to 63
[  183.212173][   T57] block nbd0: Receive control failed (result -104)
[  183.409436][T14373] 8021q: VLANs not supported on ip6tnl0
[  183.542300][T14396] IPv6: sit3: Disabled Multicast RS
[  183.630071][T14404] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  183.661734][T14410] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  183.791688][T14424] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.480412][T14435] rdma_rxe: rxe_newlink: failed to add vxcan1
[  184.765355][T14468] lo speed is unknown, defaulting to 1000
[  184.876133][T14483] dvmrp0: left allmulticast mode
[  184.941976][T14483] rdma_rxe: rxe_newlink: failed to add lo
[  184.951164][T14483] tipc: Resetting bearer <eth:gre0>
[  184.953365][T14483] tipc: Resetting bearer <eth:gre0>
[  184.960963][ T6049] bond0: (slave wlan1): interface is now down
[  184.961862][T14483] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.969070][T14483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.977936][ T6049] bond0: (slave wlan1): interface is now down
[  184.997258][ T5733] bond0: (slave wlan1): interface is now down
[  184.999296][ T5733] bond0: now running without any active interface!
[  185.058861][T14496] validate_nla: 198 callbacks suppressed
[  185.058875][T14496] netlink: 'syz.2.2469': attribute type 10 has an invalid length.
[  185.090462][T14499] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  185.175216][T14505] 8021q: VLANs not supported on nlmon0
[  185.242291][T14520] netlink: 'syz.0.2476': attribute type 1 has an invalid length.
[  185.303070][T14525] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  185.309093][T14525] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  185.326044][T14531] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  185.336447][T14533] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  185.345898][T14533] syzkaller0: entered promiscuous mode
[  185.348162][T14533] syzkaller0: entered allmulticast mode
[  185.356330][T14525] macvlan2: entered promiscuous mode
[  185.361088][T14525] macvlan2: entered allmulticast mode
[  185.364147][T14525] bond8: (slave macvlan2): Error -22 calling dev_set_mtu
[  185.459889][T14545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.597362][T14563] syzkaller0: entered promiscuous mode
[  185.602567][T14563] syzkaller0: entered allmulticast mode
[  185.794907][T14588] veth5: entered promiscuous mode
[  185.812280][T14589] veth5: entered promiscuous mode
[  185.826547][T14593] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  185.831608][T14593] syzkaller0: entered promiscuous mode
[  185.833678][T14593] syzkaller0: entered allmulticast mode
[  185.914025][T14596] netlink: 'syz.2.2497': attribute type 2 has an invalid length.
[  185.922016][T14596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.005475][T14606] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  186.012493][T14606] syzkaller0: entered promiscuous mode
[  186.014664][T14606] syzkaller0: entered allmulticast mode
[  186.320632][T14625] netlink: 'syz.0.2506': attribute type 1 has an invalid length.
[  186.331788][T14625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.363981][T14634] __nla_validate_parse: 40 callbacks suppressed
[  186.363996][T14634] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2508'.
[  186.370684][T14634] netlink: 'syz.2.2508': attribute type 1 has an invalid length.
[  186.374064][T14634] netlink: 'syz.2.2508': attribute type 2 has an invalid length.
[  186.382558][T14635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  186.390043][T14634] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  186.593930][T14665] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2515'.
[  186.668683][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  186.671955][T14676] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  186.674610][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'.
[  186.709931][T14686] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2517'.
[  186.952282][T14714] vlan2: entered promiscuous mode
[  186.955720][T14714] bridge0: port 1(vlan2) entered blocking state
[  186.958059][T14714] bridge0: port 1(vlan2) entered disabled state
[  186.960518][T14714] vlan2: entered allmulticast mode
[  186.962580][T14714] bridge0: entered allmulticast mode
[  186.965675][T14714] vlan2: left allmulticast mode
[  186.969365][T14714] bridge0: left allmulticast mode
[  187.050514][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2530'.
[  187.056471][T14719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2530'.
[  187.088766][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2531'.
[  187.094140][T14721] batadv0: entered promiscuous mode
[  187.098842][T14721] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  187.102398][T14721] batadv0: left promiscuous mode
[  187.223609][T14738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.708137][T14765] 8021q: VLANs not supported on nlmon0
[  187.710168][T14766] 8021q: VLANs not supported on nlmon0
[  187.801666][T14771] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  187.805762][T14771] syzkaller0: entered promiscuous mode
[  187.808526][T14771] syzkaller0: entered allmulticast mode
[  187.817093][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.820170][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.845284][T14773] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.851501][T14773] netlink: 'syz.2.2545': attribute type 21 has an invalid length.
[  187.854550][T14773] netlink: 'syz.2.2545': attribute type 1 has an invalid length.
[  187.857735][T14773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2545'.
[  187.889105][T14779] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2546'.
[  187.930090][T14783] netlink: 'syz.1.2549': attribute type 1 has an invalid length.
[  188.000774][T14788] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  188.043623][T14794] bond16: entered promiscuous mode
[  188.045461][T14794] bond16: entered allmulticast mode
[  188.048966][T14794] 8021q: adding VLAN 0 to HW filter on device bond16
[  188.066502][T14794] 8021q: adding VLAN 0 to HW filter on device bond17
[  188.072480][T14794] bond17: entered promiscuous mode
[  188.074902][T14794] bond17: entered allmulticast mode
[  188.077830][T14794] bond16: (slave bond17): Enslaving as a backup interface with a down link
[  188.081645][T14799] x;: renamed from bridge_slave_0
[  188.226446][T14809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.276510][T14815] lo speed is unknown, defaulting to 1000
[  188.288956][T14817] IPVS: Scheduler module ip_vs_sip not found
[  188.641630][T14850] syzkaller0: entered promiscuous mode
[  188.643438][T14850] syzkaller0: entered allmulticast mode
[  189.195714][T14901] lo speed is unknown, defaulting to 1000
[  189.666318][T14936] pimreg: entered allmulticast mode
[  189.671184][T14936] syz_tun: entered promiscuous mode
[  189.677848][T14936] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  189.687289][ T5733] bond0: (slave syz_tun): interface is now down
[  189.694646][ T5733] bond0: now running without any active interface!
[  189.725471][T14941] bridge10: port 1(bond14) entered blocking state
[  189.730366][T14941] bridge10: port 1(bond14) entered disabled state
[  189.733029][T14941] bond14: entered allmulticast mode
[  189.736545][T14941] bond14: entered promiscuous mode
[  190.303977][T14980] validate_nla: 6 callbacks suppressed
[  190.303996][T14980] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  190.309527][T14980] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  190.314159][T14982] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  190.317271][T14982] netlink: 'syz.1.2602': attribute type 1 has an invalid length.
[  190.480408][T14992] netlink: 'syz.1.2606': attribute type 1 has an invalid length.
[  190.583055][T14994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  190.590929][T14997] netlink: 'syz.1.2608': attribute type 7 has an invalid length.
[  190.595678][T14997] netlink: 'syz.1.2608': attribute type 8 has an invalid length.
[  190.689578][T15017] xt_socket: unknown flags 0xfc
[  190.784468][T15034] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  190.794255][T15034] ------------[ cut here ]------------
[  190.796095][T15034] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  190.801121][T15034] WARNING: CPU: 0 PID: 15034 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.805047][T15034] Modules linked in:
[  190.807126][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.0.2616 Not tainted syzkaller #0 PREEMPT(full) 
[  190.811747][T15034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.814946][T15034] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.817584][T15034] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 40 2c b0 8c e8 36 30 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 91 d7 f6 90 0f 0b 90 42 80 7c 3d
[  190.823556][T15034] RSP: 0018:ffffc90007f3f910 EFLAGS: 00010246
[  190.825379][T15034] RAX: 69b56072f0eb4900 RBX: 0000000000000000 RCX: 0000000000080000
[  190.828031][T15034] RDX: ffffc90007f91000 RSI: 00000000000045ef RDI: 00000000000045f0
[  190.830617][T15034] RBP: ffff888112251728 R08: 0000000000000003 R09: 0000000000000004
[  190.833018][T15034] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8881122529d0
[  190.835556][T15034] R13: ffff888112250d80 R14: 1ffff1102244a2e5 R15: dffffc0000000000
[  190.838160][T15034] FS:  00007f010cfc46c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  190.840892][T15034] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.843281][T15034] CR2: 00007f4c4cf16fc8 CR3: 0000000039438000 CR4: 00000000000006f0
[  190.846167][T15034] Call Trace:
[  190.847454][T15034]  <TASK>
[  190.848462][T15034]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  190.850832][T15034]  __ieee80211_link_release_channel+0x33b/0x4a0
[  190.852749][T15034]  ieee80211_if_change_type+0x14c/0x990
[  190.854712][T15034]  ? cfg80211_mgmt_registrations_update+0x192/0x8d0
[  190.857182][T15034]  ieee80211_change_iface+0xd5/0x510
[  190.858958][T15034]  cfg80211_change_iface+0x795/0xef0
[  190.860594][T15034]  cfg80211_wext_siwmode+0x1db/0x2b0
[  190.862156][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  190.863873][T15034]  ? full_name_hash+0x92/0xe0
[  190.865272][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  190.867206][T15034]  ioctl_standard_call+0xcb/0x1b0
[  190.868907][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  190.871146][T15034]  wext_ioctl_dispatch+0xee/0x410
[  190.873023][T15034]  ? __pfx_ioctl_standard_call+0x10/0x10
[  190.875158][T15034]  wext_handle_ioctl+0x100/0x1c0
[  190.877295][T15034]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  190.879322][T15034]  ? do_futex+0x333/0x420
[  190.880989][T15034]  sock_ioctl+0x15f/0x790
[  190.882661][T15034]  ? lock_release+0x4b/0x3e0
[  190.884381][T15034]  ? __pfx_sock_ioctl+0x10/0x10
[  190.885974][T15034]  ? __fget_files+0x2a/0x420
[  190.887967][T15034]  ? __fget_files+0x3a0/0x420
[  190.889753][T15034]  ? __fget_files+0x2a/0x420
[  190.891336][T15034]  ? bpf_lsm_file_ioctl+0x9/0x20
[  190.892832][T15034]  ? __pfx_sock_ioctl+0x10/0x10
[  190.894280][T15034]  __se_sys_ioctl+0xfc/0x170
[  190.895745][T15034]  do_syscall_64+0xfa/0x3b0
[  190.897789][T15034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.900049][T15034]  ? exc_page_fault+0x9f/0xf0
[  190.901878][T15034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.904138][T15034] RIP: 0033:0x7f010c18ebe9
[  190.905853][T15034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.913333][T15034] RSP: 002b:00007f010cfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  190.916373][T15034] RAX: ffffffffffffffda RBX: 00007f010c3b5fa0 RCX: 00007f010c18ebe9
[  190.919505][T15034] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  190.922101][T15034] RBP: 00007f010c211e19 R08: 0000000000000000 R09: 0000000000000000
[  190.925025][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.927805][T15034] R13: 00007f010c3b6038 R14: 00007f010c3b5fa0 R15: 00007fff2a732438
[  190.930453][T15034]  </TASK>
[  190.931609][T15034] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  190.933954][T15034] CPU: 0 UID: 0 PID: 15034 Comm: syz.0.2616 Not tainted syzkaller #0 PREEMPT(full) 
[  190.937240][T15034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.940507][T15034] Call Trace:
[  190.941719][T15034]  <TASK>
[  190.942832][T15034]  dump_stack_lvl+0x99/0x250
[  190.944576][T15034]  ? __asan_memcpy+0x40/0x70
[  190.946310][T15034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.948262][T15034]  ? __pfx__printk+0x10/0x10
[  190.950019][T15034]  vpanic+0x281/0x750
[  190.951451][T15034]  ? __pfx__printk+0x10/0x10
[  190.953120][T15034]  ? __pfx_vpanic+0x10/0x10
[  190.954634][T15034]  ? is_bpf_text_address+0x292/0x2b0
[  190.956464][T15034]  panic+0xb9/0xc0
[  190.957744][T15034]  ? __pfx_panic+0x10/0x10
[  190.959236][T15034]  __warn+0x31b/0x4b0
[  190.960711][T15034]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.962828][T15034]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.964933][T15034]  report_bug+0x2be/0x4f0
[  190.966318][T15034]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.968054][T15034]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.969764][T15034]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  190.971520][T15034]  handle_bug+0x84/0x160
[  190.973022][T15034]  exc_invalid_op+0x1a/0x50
[  190.974424][T15034]  asm_exc_invalid_op+0x1a/0x20
[  190.975933][T15034] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  190.977831][T15034] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 40 2c b0 8c e8 36 30 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 91 d7 f6 90 0f 0b 90 42 80 7c 3d
[  190.983914][T15034] RSP: 0018:ffffc90007f3f910 EFLAGS: 00010246
[  190.986234][T15034] RAX: 69b56072f0eb4900 RBX: 0000000000000000 RCX: 0000000000080000
[  190.989296][T15034] RDX: ffffc90007f91000 RSI: 00000000000045ef RDI: 00000000000045f0
[  190.992744][T15034] RBP: ffff888112251728 R08: 0000000000000003 R09: 0000000000000004
[  190.996025][T15034] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff8881122529d0
[  190.999236][T15034] R13: ffff888112250d80 R14: 1ffff1102244a2e5 R15: dffffc0000000000
[  191.002338][T15034]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  191.004650][T15034]  __ieee80211_link_release_channel+0x33b/0x4a0
[  191.007035][T15034]  ieee80211_if_change_type+0x14c/0x990
[  191.009184][T15034]  ? cfg80211_mgmt_registrations_update+0x192/0x8d0
[  191.011583][T15034]  ieee80211_change_iface+0xd5/0x510
[  191.013617][T15034]  cfg80211_change_iface+0x795/0xef0
[  191.015593][T15034]  cfg80211_wext_siwmode+0x1db/0x2b0
[  191.017679][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  191.019939][T15034]  ? full_name_hash+0x92/0xe0
[  191.021755][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  191.023942][T15034]  ioctl_standard_call+0xcb/0x1b0
[  191.025834][T15034]  ? __pfx_cfg80211_wext_siwmode+0x10/0x10
[  191.027903][T15034]  wext_ioctl_dispatch+0xee/0x410
[  191.029399][T15034]  ? __pfx_ioctl_standard_call+0x10/0x10
[  191.031066][T15034]  wext_handle_ioctl+0x100/0x1c0
[  191.032639][T15034]  ? __pfx_wext_handle_ioctl+0x10/0x10
[  191.034681][T15034]  ? do_futex+0x333/0x420
[  191.036338][T15034]  sock_ioctl+0x15f/0x790
[  191.037943][T15034]  ? lock_release+0x4b/0x3e0
[  191.039687][T15034]  ? __pfx_sock_ioctl+0x10/0x10
[  191.041543][T15034]  ? __fget_files+0x2a/0x420
[  191.043279][T15034]  ? __fget_files+0x3a0/0x420
[  191.045122][T15034]  ? __fget_files+0x2a/0x420
[  191.046939][T15034]  ? bpf_lsm_file_ioctl+0x9/0x20
[  191.048941][T15034]  ? __pfx_sock_ioctl+0x10/0x10
[  191.050889][T15034]  __se_sys_ioctl+0xfc/0x170
[  191.052743][T15034]  do_syscall_64+0xfa/0x3b0
[  191.054463][T15034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.056773][T15034]  ? exc_page_fault+0x9f/0xf0
[  191.058663][T15034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.061064][T15034] RIP: 0033:0x7f010c18ebe9
[  191.062794][T15034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.070065][T15034] RSP: 002b:00007f010cfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  191.073179][T15034] RAX: ffffffffffffffda RBX: 00007f010c3b5fa0 RCX: 00007f010c18ebe9
[  191.076137][T15034] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000006
[  191.079064][T15034] RBP: 00007f010c211e19 R08: 0000000000000000 R09: 0000000000000000
[  191.082043][T15034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  191.084957][T15034] R13: 00007f010c3b6038 R14: 00007f010c3b5fa0 R15: 00007fff2a732438
[  191.087957][T15034]  </TASK>
[  191.089812][T15034] Kernel Offset: disabled
[  191.091506][T15034] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:37:59  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000014481 RDI=0000000000014482 RBP=00000000000003f8 RSP=ffffc90007f3f0b0
R8 =ffff888106838237 R9 =1ffff11020d07046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8f0 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f010cfc46c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c4cf16fc8 CR3=0000000039438000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f010c212e53
XMM06=0000000000000000 00007f010c212e4d XMM07=0000000000000000 00007f010c212e61
XMM08=0000000000000000 00007f010c212ee7 XMM09=0000000000000000 00007f010c212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021d7d649 RBX=ffff888109a45e08 RCX=dffffc0000000000 RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc900092e66a0 RBP=ffffffff99c92b78 RSP=ffffc900092e67c0
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff5200125ccd4
R12=ffff88810ebeb248 R13=ffff88810ebeb230 R14=dffffc0000000000 R15=0000000000000007
RIP=ffffffff84d02bbe RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7e7a3bd380 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7e7a527fe4 CR3=000000010fc46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=0000555588104016 0000555588103b90 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00005555880f2498 XMM05=00005555880f6203 00005555880f6070
XMM06=0000000000000000 0000000000000000 XMM07=02e0020020aa0302 d4020020a80302b8
XMM08=020020a60302a402 0020a40302b00200 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
