last executing test programs:

2.017782224s ago: executing program 2 (id=11803):
syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0)
r4 = socket(0x22, 0x2, 0x1)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d0007f0d1e7a17fca779daf07000000", @ANYRES32=r6, @ANYBLOB="0000d20b"], 0x1c}}, 0x0)
accept4$inet(r4, 0x0, 0x0, 0x0) (async)
accept4$inet(r4, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) (async)
bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) (async)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0)
recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0) (async)
recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

1.859417072s ago: executing program 2 (id=11804):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffd}, 0x20}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x1c, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900", @ANYRES8=r1], 0x48}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@local, 0x78, r10})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

1.858940024s ago: executing program 2 (id=11805):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x70}}, 0x8810)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="93cdf1089cbd3c2a59eb16f6f5ad51801c000000fcc6b7b76ec6a2aa7ef6bd2ec0de89154458026f38263d8f161a", @ANYRES16=r3, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x4000000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000000000000000000000000000000000000500000000000000010000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000ffffffffffffff000000000000000004000000000000000300000000000000000000000000000000000000010000000000001001000e00040000000a0000008a40c4310000000000000000050000000c00000008001600060000000c001c001ed1c145035fd280d2", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {0xfff2, 0x8}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0xffffffffffffff2a}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x36c8c288b68eaef2}}, 0x4000010)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

1.16131015s ago: executing program 2 (id=11808):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000580)=""/238, 0xee}, {&(0x7f0000000680)=""/107, 0x6b}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/148, 0x94}], 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xffbfff}, 0x10)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000020fe000002000000000800040001000000", 0x24)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4040040)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
r6 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
connect$inet6(r6, &(0x7f00000000c0), 0x1c)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r7, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r10, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x439, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x12541, 0x4d03}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x5c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x2}, {0x8, 0xd, 0x0, 0x0, 0x1}, {0x8, 0x11, 0x0, 0x0, 0x6}, {0x8, 0x18, 0x0, 0x0, 0x3c}, {0x8, 0x1e, 0x0, 0x0, 0xe3f}, {0x8, 0x2, 0x0, 0x0, 0xdde}, {0x8, 0x19, 0x0, 0x0, 0x7fffffff}, {0x8, 0x1, 0x0, 0x0, 0x334}, {0x8, 0x3, 0x0, 0x0, 0xc}]}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_inet_SIOCGIFADDR(r12, 0x8915, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x0, @multicast1}})
setsockopt$CAN_RAW_FILTER(r12, 0x65, 0x1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x1}, {0x1}}, {{0x10, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x28)

937.66654ms ago: executing program 1 (id=11813):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
write$cgroup_int(r6, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r6, 0x0, 0x3b, 0x3f, &(0x7f0000000180)="8e92a9af79b576cedd1563a750de19b335f71a8f7ca9c2daea8e9ef304e0097700e4981420fe7b3fbb5e19d746e327538616825f084f2cecfe7bec", &(0x7f0000000200)=""/63, 0x7ff, 0x0, 0x6a, 0x1000, &(0x7f0000000680)="4b30b7c9b41be610645e2a2663f05643fb1cb49ba2ca444e74abe045f796d8ee097c5d9c35b6d6ed6856ef3ad7c914a2d1b560e762aa1cb94b090c7cfe03b755e58fe0606bc6409a516e3bd9b13d99ef6f002ba9b48499a5cb643ad61fa730fc981c3396729622201814", &(0x7f0000001780)="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", 0x4, 0x0, 0x4}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x66, 0x3, 0x8000, 0x6, 0x0, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"/452], 0x1c4}, 0x1, 0x0, 0x0, 0x60004}, 0x20000805)
sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))

571.122314ms ago: executing program 1 (id=11818):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
accept$ax25(r2, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x11, 0x6, @broadcast}, 0x10)
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='veth0_to_bond\x00')
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0xffea, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
unshare(0x22020600)
unshare(0x2a020400)
sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYRESOCT=r3, @ANYRESDEC=r4], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0xe8, 0x320, 0x440, 0x440, 0xe8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xff000000, 0xa348fa5a8cffd889], 'vcan0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x3, 0x6a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x644, 0x7f, @ipv6=@mcast2, 0x4e22}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffff7f, 0xff000000, 0x0, 0xff], 'veth0_vlan\x00', '\x00', {}, {0xff}, 0x3a, 0xf7, 0x4, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x28, 0x1, 0x7fff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xa02529c283c5d53b, 0xff000000, 0xffffffff], [0xffffffff, 0xff0000ff, 0xffffff00], 'vlan0\x00', 'veth1\x00', {}, {0xff}, 0x84, 0x4, 0x1, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x5, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @private0, [0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 'nicvf0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x2c, 0xfb, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x32}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0x0, 0x1fffffffe], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}, 0x87, 0x9, 0x3, 0x44}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x2c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
getsockopt$sock_buf(r7, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)

569.970892ms ago: executing program 0 (id=11819):
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x51, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)
socket(0x10, 0x803, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffff001, 0x19}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048811}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000001000000000000000300001e95000000004f4741a2e0e5acdaacec001000"], &(0x7f0000000080)='syzkaller\x00', 0x40008, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r13], 0x54}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) (async)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)

509.884984ms ago: executing program 1 (id=11820):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x18)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

509.023453ms ago: executing program 1 (id=11821):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4)
socket(0x1e, 0x4, 0x0) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, 0x0, &(0x7f0000000300))
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f000000e680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="578d2abd7000fbdbdf25020000c5ee066d0d152fb6526b0003007f00000106000100020000009abca9dcbe6221984aaebca2a641484dca95a7ce99247a7db8bfcd644f200009edeb7c95cf9ead2809229af7babdc7d4b629cc6722153d247b"], 0x28}, 0x1, 0x300000000000000, 0x0, 0x8040000}, 0x90)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140))
socket$inet_udplite(0x2, 0x2, 0x88)

388.509178ms ago: executing program 1 (id=11822):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="050302000000000008001d000502000008000500", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

387.719594ms ago: executing program 0 (id=11823):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x70}}, 0x8810)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="93cdf1089cbd3c2a59eb16f6f5ad51801c000000fcc6b7b76ec6a2aa7ef6bd2ec0de89154458026f38263d8f161a", @ANYRES16=r3, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x4000000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000000000000000000000000000000000000500000000000000010000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000ffffffffffffff000000000000000004000000000000000300000000000000000000000000000000000000010000000000001001000e00040000000a0000008a40c4310000000000000000050000000c00000008001600060000000c001c001ed1c145035fd280d2", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {0xfff2, 0x8}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0xffffffffffffff2a}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x36c8c288b68eaef2}}, 0x4000010)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

386.978548ms ago: executing program 0 (id=11824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$ppp(r1, &(0x7f00000001c0)="0abd350e79dba193fe2ad887762e99e8451854b3423a649fc04b738151cfc8282a13859d340e9c6dec767b51e5eec04409f2642654", 0x35)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'virt_wifi0\x00', @random})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
pipe(&(0x7f0000000140)) (async)
write$ppp(r1, &(0x7f00000001c0)="0abd350e79dba193fe2ad887762e99e8451854b3423a649fc04b738151cfc8282a13859d340e9c6dec767b51e5eec04409f2642654", 0x35) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x1f, 0x0, {}, {0xfff1, 0x2}, {0x6, 0xe}}}, 0x24}}, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
close(r6) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'virt_wifi0\x00', @random}) (async)

384.715162ms ago: executing program 1 (id=11825):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
write(r0, &(0x7f00000002c0), 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

279.688723ms ago: executing program 2 (id=11826):
unshare(0x26020480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, 0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a64c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r6}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00010001"], 0x20}}, 0x0)
vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000480)="18cf58819f24f1f8e344a5129345f7eca3e2aaa100ba242786b65b1673c80ba5ac0064baff6207dacc4ff8f38d3ee420b4e750deebead1d96927ce38279a744ecad2272a6003837946d7ae6a1924581287689b024509bf", 0x57}, {&(0x7f0000000300)="473843d17ec76f1144056b47ed545845d786f7e9892d9fbe87b2e2ada040b0b68301f91ad6ef5b4ba079b0121f484c6c58bfda50d842", 0x36}, {&(0x7f0000000380)="0f20c554b8", 0x5}, {&(0x7f0000000500)}, {&(0x7f0000000540)="44d9c55683253ba002c5e17a3419c04d6766c33527b547fe9fb505a4aa472b3b3017a06b00dc5d21a067befd8f19049ad76ab459f2a0fd56f18d220263389c569373531f2548e9a229225f79c0f6c8aa9008b9c4033f33039af4c5dc406715d3fd8d40b9bfa92a688679f435cab532a368acf50cf419cddbc81efd382fbcaccc1baf7deb4666db537092237937b379117d673994f17fef20087dcfc7077be6fd420b6601c4cbfe6c02707f0b9b814abc4ad225d96559a1847eb9acb76b13c85c2eb810973a03b94e52", 0xc9}], 0x5, 0x4)
sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1, 0x84, 0x3, {0x0, 0x2710}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "a286a4ce4b24faf4"}}, 0x48}, 0x1, 0x0, 0x0, 0x404c001}, 0x81)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
close(0x3)
r9 = socket(0x8, 0x4, 0xc)
unshare(0x28000)
write(r9, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)

207.403451ms ago: executing program 0 (id=11827):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24802}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4006)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

159.070297ms ago: executing program 0 (id=11828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2061, 0x0)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0xfff)
connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
close(r1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x3b, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380001008aee2956", @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r10, &(0x7f0000000000), 0xe)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff5, 0x6, 0x7, 0x3}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

59.595058ms ago: executing program 2 (id=11829):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
pread64(r3, &(0x7f0000002200)=""/89, 0x59, 0x10000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c5000010110000305fcf5ffff00000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0100c28000080005000300000008000500", @ANYRES32=r2, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

0s ago: executing program 0 (id=11830):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x70}}, 0x8810)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="93cdf1089cbd3c2a59eb16f6f5ad51801c000000fcc6b7b76ec6a2aa7ef6bd2ec0de89154458026f38263d8f161a", @ANYRES16=r3, @ANYBLOB="010000000000fddbdf253f00000008000300", @ANYRES32=r0, @ANYBLOB], 0x1c}}, 0x4000000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000000000000000000000000000000000000500000000000000010000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000ffffffffffffff000000000000000004000000000000000300000000000000000000000000000000000000010000000000001001000e00040000000a0000008a40c4310000000000000000050000000c00000008001600060000000c001c001ed1c145035fd280d2", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe}, {0xfff2, 0x8}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0xffffffffffffff2a}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x5}}}}]}, 0x36c8c288b68eaef2}}, 0x4000010)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

kernel console output (not intermixed with test programs):

_rcv_msg+0x60e/0x790
[  771.678963][T13302]  ? __pfx_genl_rcv_msg+0x10/0x10
[  771.678970][T13302]  ? __kasan_slab_alloc+0x6c/0x80
[  771.678981][T13302]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  771.678990][T13302]  ? __netlink_lookup+0xbd/0x810
[  771.678996][T13302]  ? rcu_is_watching+0x15/0xb0
[  771.679007][T13302]  netlink_rcv_skb+0x208/0x470
[  771.679018][T13302]  ? __pfx_genl_rcv_msg+0x10/0x10
[  771.679027][T13302]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  771.679039][T13302]  ? lock_release+0x4b/0x3e0
[  771.679051][T13302]  ? down_read+0x1ad/0x2e0
[  771.679058][T13302]  genl_rcv+0x28/0x40
[  771.679066][T13302]  netlink_unicast+0x82f/0x9e0
[  771.679077][T13302]  ? __pfx_netlink_unicast+0x10/0x10
[  771.679086][T13302]  ? netlink_sendmsg+0x642/0xb30
[  771.679097][T13302]  ? skb_put+0x11b/0x210
[  771.679105][T13302]  netlink_sendmsg+0x805/0xb30
[  771.679117][T13302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  771.679128][T13302]  ? aa_sock_msg_perm+0xf1/0x1d0
[  771.679142][T13302]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  771.679151][T13302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  771.679161][T13302]  __sock_sendmsg+0x21c/0x270
[  771.679172][T13302]  ____sys_sendmsg+0x505/0x830
[  771.679181][T13302]  ? __pfx_____sys_sendmsg+0x10/0x10
[  771.679191][T13302]  ? import_iovec+0x74/0xa0
[  771.679201][T13302]  ___sys_sendmsg+0x21f/0x2a0
[  771.679209][T13302]  ? __pfx____sys_sendmsg+0x10/0x10
[  771.679218][T13302]  ? futex_wake+0x4b2/0x560
[  771.679234][T13302]  ? __fget_files+0x2a/0x420
[  771.679247][T13302]  ? __fget_files+0x3a0/0x420
[  771.679259][T13302]  __x64_sys_sendmsg+0x19b/0x260
[  771.679267][T13302]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  771.679277][T13302]  ? rcu_is_watching+0x15/0xb0
[  771.679285][T13302]  ? rcu_is_watching+0x15/0xb0
[  771.679293][T13302]  do_syscall_64+0xfa/0x3b0
[  771.679305][T13302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.679314][T13302]  ? exc_page_fault+0x9f/0xf0
[  771.679324][T13302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.679332][T13302] RIP: 0033:0x7f73fd18ebe9
[  771.679340][T13302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.679348][T13302] RSP: 002b:00007f73fe0c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  771.679358][T13302] RAX: ffffffffffffffda RBX: 00007f73fd3b5fa0 RCX: 00007f73fd18ebe9
[  771.679364][T13302] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  771.679370][T13302] RBP: 00007f73fd211e19 R08: 0000000000000000 R09: 0000000000000000
[  771.679375][T13302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  771.679380][T13302] R13: 00007f73fd3b6038 R14: 00007f73fd3b5fa0 R15: 00007ffcb636dec8
[  771.679393][T13302]  </TASK>
[  771.966486][T13314] netlink: 'syz.0.10518': attribute type 4 has an invalid length.
[  772.656778][T13324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  772.659432][T13324] syzkaller0: entered promiscuous mode
[  772.661280][T13324] syzkaller0: entered allmulticast mode
[  772.668188][T13324] tipc: Resetting bearer <eth:syzkaller0>
[  772.673479][T13323] tipc: Resetting bearer <eth:syzkaller0>
[  772.762705][T13329] netlink: 'syz.0.10524': attribute type 2 has an invalid length.
[  772.851053][T13335] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:20002
[  772.879672][T22846] tipc: Resetting bearer <eth:syzkaller0>
[  772.930339][T13345] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  773.758294][T13360] __nla_validate_parse: 21 callbacks suppressed
[  773.758309][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10533'.
[  773.853605][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10534'.
[  773.857457][T13362] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  773.860555][T13362] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10534'.
[  773.913681][T13371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  773.917480][T13371] syzkaller0: entered promiscuous mode
[  773.919763][T13371] syzkaller0: entered allmulticast mode
[  773.940746][T13371] tipc: Resetting bearer <eth:syzkaller0>
[  773.950443][T13375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10535'.
[  773.955013][T13370] tipc: Resetting bearer <eth:syzkaller0>
[  773.959436][T13370] tipc: Disabling bearer <eth:syzkaller0>
[  773.983020][T13374] 8021q: adding VLAN 0 to HW filter on device bond57
[  773.986745][T13374] bond56: (slave bond57): making interface the new active one
[  773.989691][T13374] bond56: (slave bond57): Enslaving as an active interface with an up link
[  773.995020][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10537'.
[  774.171315][T13379] tipc: Resetting bearer <eth:syzkaller0>
[  774.173922][T13379] tipc: Resetting bearer <eth:syzkaller0>
[  774.177754][T13374] 8021q: adding VLAN 0 to HW filter on device bond56
[  774.181217][T13383] tipc: Resetting bearer <eth:syzkaller0>
[  774.190699][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  774.242016][T13394] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  774.320603][T13395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  774.333419][T13403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  774.388825][T13395] C speed is unknown, defaulting to 1000
[  774.409726][T13408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.413627][T13408] syzkaller0: entered promiscuous mode
[  774.417939][T13408] syzkaller0: entered allmulticast mode
[  774.437860][T13408] tipc: Resetting bearer <eth:syzkaller0>
[  774.482052][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10544'.
[  774.493340][T13406] tipc: Resetting bearer <eth:syzkaller0>
[  774.500063][T13406] tipc: Disabling bearer <eth:syzkaller0>
[  774.571183][T13417] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  774.576910][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10546'.
[  774.663788][T13419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10547'.
[  774.665771][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10548'.
[  774.669746][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10547'.
[  774.732819][T13430] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  774.800029][T13437] bridge68: entered promiscuous mode
[  774.801840][T13437] macsec4: entered promiscuous mode
[  774.803639][T13437] macsec4: entered allmulticast mode
[  774.809561][T13437] bridge68: entered allmulticast mode
[  774.814730][T13437] bridge68: port 1(macsec4) entered blocking state
[  774.817650][T13437] bridge68: port 1(macsec4) entered disabled state
[  774.822033][T13437] bridge68: left allmulticast mode
[  774.824209][T13437] bridge68: left promiscuous mode
[  775.053837][T13461] tipc: Resetting bearer <eth:syzkaller0>
[  775.085029][T13461] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  775.095674][T13461] netdevsim0: mtu greater than device maximum
[  775.109406][T13458] tipc: Resetting bearer <eth:syzkaller0>
[  775.163052][T13465] tipc: Resetting bearer <eth:syzkaller0>
[  775.167589][T13465] syzkaller0: left promiscuous mode
[  775.169409][T13465] syzkaller0: left allmulticast mode
[  775.179525][T13468] syzkaller0: left promiscuous mode
[  775.181626][T13468] syzkaller0: left allmulticast mode
[  775.183759][T13468] tipc: Resetting bearer <eth:syzkaller0>
[  775.213264][T13474] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  775.216378][T13474] syzkaller0: entered promiscuous mode
[  775.218098][T13474] syzkaller0: entered allmulticast mode
[  775.219964][T13474] tipc: Resetting bearer <eth:syzkaller0>
[  775.510617][T13489] tipc: Resetting bearer <eth:syzkaller0>
[  775.513672][T13489] bond0: Error: Cannot enslave bond to itself.
[  775.544963][T13488] tipc: Resetting bearer <eth:syzkaller0>
[  775.676806][T13503] dvmrp8: entered allmulticast mode
[  775.680495][T13502] dvmrp8: left allmulticast mode
[  775.782001][T13505] tipc: Resetting bearer <eth:syzkaller0>
[  775.786957][T13505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  775.821280][T13504] tipc: Resetting bearer <eth:syzkaller0>
[  775.986020][T13517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  775.989555][ T8649] tipc: Resetting bearer <eth:syzkaller0>
[  776.140967][T13535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  776.144652][T13535] syzkaller0: entered promiscuous mode
[  776.146584][T13535] syzkaller0: entered allmulticast mode
[  776.232472][T13540] IPv6: Can't replace route, no match found
[  776.337373][T13561] validate_nla: 15 callbacks suppressed
[  776.337392][T13561] netlink: 'syz.1.10594': attribute type 21 has an invalid length.
[  776.442671][T13578] bond56: (slave bond57): Releasing backup interface
[  776.493926][T13576] netlink: 'syz.1.10597': attribute type 39 has an invalid length.
[  776.522427][T13583] veth0: entered promiscuous mode
[  776.543552][T13583] veth0: left promiscuous mode
[  776.629454][T13590] netlink: 'syz.0.10601': attribute type 23 has an invalid length.
[  776.688032][T13589] veth0: entered promiscuous mode
[  776.691512][T13589] veth0 (unregistering): left promiscuous mode
[  776.742518][T13591] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  776.748758][T13591] CPU: 1 UID: 0 PID: 13591 Comm: syz.1.10602 Not tainted syzkaller #0 PREEMPT(full) 
[  776.748781][T13591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  776.748789][T13591] Call Trace:
[  776.748793][T13591]  <TASK>
[  776.748799][T13591]  dump_stack_lvl+0x189/0x250
[  776.748817][T13591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  776.748828][T13591]  ? __pfx__printk+0x10/0x10
[  776.748840][T13591]  ? kernfs_root+0x1c/0x230
[  776.748852][T13591]  ? kernfs_path_from_node+0x2f/0x290
[  776.748861][T13591]  ? kernfs_path_from_node+0x250/0x290
[  776.748869][T13591]  ? kernfs_path_from_node+0x2f/0x290
[  776.748879][T13591]  sysfs_warn_dup+0x8e/0xa0
[  776.748889][T13591]  sysfs_do_create_link_sd+0xc0/0x110
[  776.748898][T13591]  device_add_class_symlinks+0x1cf/0x240
[  776.748909][T13591]  device_add+0x475/0xb50
[  776.748917][T13591]  wiphy_register+0x1ba6/0x28d0
[  776.748934][T13591]  ? __pfx_wiphy_register+0x10/0x10
[  776.748945][T13591]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  776.748957][T13591]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  776.748981][T13591]  ieee80211_register_hw+0x3484/0x4100
[  776.748995][T13591]  ? ieee80211_register_hw+0x14a1/0x4100
[  776.749005][T13591]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  776.749016][T13591]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  776.749029][T13591]  ? __hrtimer_setup+0x187/0x210
[  776.749038][T13591]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  776.749051][T13591]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  776.749067][T13591]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  776.749077][T13591]  ? trace_kmalloc+0x1f/0xd0
[  776.749089][T13591]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  776.749100][T13591]  ? kstrndup+0xbf/0x160
[  776.749112][T13591]  hwsim_new_radio_nl+0xea4/0x1b10
[  776.749123][T13591]  ? __pfx___nla_validate_parse+0x10/0x10
[  776.749140][T13591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  776.749153][T13591]  ? __nla_parse+0x40/0x60
[  776.749165][T13591]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  776.749203][T13591]  genl_family_rcv_msg_doit+0x215/0x300
[  776.749216][T13591]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  776.749231][T13591]  ? bpf_lsm_capable+0x9/0x20
[  776.749244][T13591]  ? security_capable+0x7e/0x2e0
[  776.749259][T13591]  genl_rcv_msg+0x60e/0x790
[  776.749268][T13591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  776.749277][T13591]  ? __kasan_slab_alloc+0x6c/0x80
[  776.749287][T13591]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  776.749297][T13591]  ? __netlink_lookup+0xbd/0x810
[  776.749303][T13591]  ? rcu_is_watching+0x15/0xb0
[  776.749314][T13591]  netlink_rcv_skb+0x208/0x470
[  776.749325][T13591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  776.749334][T13591]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  776.749346][T13591]  ? lock_release+0x4b/0x3e0
[  776.749359][T13591]  ? down_read+0x1ad/0x2e0
[  776.749366][T13591]  genl_rcv+0x28/0x40
[  776.749374][T13591]  netlink_unicast+0x82f/0x9e0
[  776.749385][T13591]  ? __pfx_netlink_unicast+0x10/0x10
[  776.749395][T13591]  ? netlink_sendmsg+0x642/0xb30
[  776.749406][T13591]  ? skb_put+0x11b/0x210
[  776.749415][T13591]  netlink_sendmsg+0x805/0xb30
[  776.749428][T13591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.749439][T13591]  ? futex_unqueue+0x22/0x240
[  776.749448][T13591]  ? aa_sock_msg_perm+0xf1/0x1d0
[  776.749456][T13591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  776.749465][T13591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.749476][T13591]  __sock_sendmsg+0x21c/0x270
[  776.749490][T13591]  ____sys_sendmsg+0x505/0x830
[  776.749504][T13591]  ? __pfx_____sys_sendmsg+0x10/0x10
[  776.749520][T13591]  ? import_iovec+0x74/0xa0
[  776.749534][T13591]  ___sys_sendmsg+0x21f/0x2a0
[  776.749545][T13591]  ? __pfx____sys_sendmsg+0x10/0x10
[  776.749593][T13591]  ? futex_wait+0x285/0x360
[  776.749611][T13591]  ? __fget_files+0x2a/0x420
[  776.749626][T13591]  ? __fget_files+0x3a0/0x420
[  776.749639][T13591]  __x64_sys_sendmsg+0x19b/0x260
[  776.749648][T13591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  776.749659][T13591]  ? rcu_is_watching+0x15/0xb0
[  776.749668][T13591]  ? rcu_is_watching+0x15/0xb0
[  776.749676][T13591]  do_syscall_64+0xfa/0x3b0
[  776.749689][T13591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.749698][T13591]  ? exc_page_fault+0x9f/0xf0
[  776.749709][T13591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.749717][T13591] RIP: 0033:0x7ff70598ebe9
[  776.749727][T13591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  776.749736][T13591] RSP: 002b:00007ff706896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  776.749747][T13591] RAX: ffffffffffffffda RBX: 00007ff705bb6090 RCX: 00007ff70598ebe9
[  776.749753][T13591] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  776.749759][T13591] RBP: 00007ff705a11e19 R08: 0000000000000000 R09: 0000000000000000
[  776.749765][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  776.749770][T13591] R13: 00007ff705bb6128 R14: 00007ff705bb6090 R15: 00007ffe9ea3cf38
[  776.749781][T13591]  </TASK>
[  777.029330][T13600] IPv6: sit12: Disabled Multicast RS
[  777.031756][T13600] sit12: entered allmulticast mode
[  777.102735][T13603] syzkaller1: entered promiscuous mode
[  777.104605][T13603] syzkaller1: entered allmulticast mode
[  777.118698][T13607] tipc: Resetting bearer <eth:syzkaller0>
[  777.252473][T13617] netlink: 'syz.1.10609': attribute type 10 has an invalid length.
[  777.352073][T13625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.648869][T13645] mac80211_hwsim hwsim7 netdevsim0: left promiscuous mode
[  777.651994][T13645] mac80211_hwsim hwsim7 netdevsim0: entered allmulticast mode
[  777.742764][T13657] tipc: Resetting bearer <eth:syzkaller0>
[  777.753030][T13656] tipc: Resetting bearer <eth:syzkaller0>
[  777.774344][T13656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  777.952021][T13671] netlink: 'syz.0.10623': attribute type 1 has an invalid length.
[  777.955431][T13671] netlink: 'syz.0.10623': attribute type 1 has an invalid length.
[  778.040829][T13680] netlink: 'syz.0.10626': attribute type 1 has an invalid length.
[  778.044002][T13680] netlink: 'syz.0.10626': attribute type 2 has an invalid length.
[  778.096365][T13684] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  778.142567][T13687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.193668][T13690] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.284789][T13693] tipc: Resetting bearer <eth:syzkaller0>
[  778.291424][T13693] syzkaller0: left promiscuous mode
[  778.293509][T13693] syzkaller0: left allmulticast mode
[  778.303276][T13697] netlink: 'syz.1.10631': attribute type 10 has an invalid length.
[  778.350464][T13707] workqueue: Failed to create a rescuer kthread for wq "bond58": -EINTR
[  778.370708][T13712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.378217][T13712] syzkaller0: entered promiscuous mode
[  778.380359][T13712] syzkaller0: entered allmulticast mode
[  778.383213][T13712] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  778.388523][T13712] tipc: Resetting bearer <eth:syzkaller0>
[  778.429227][T13715] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.444634][T13720] tipc: Resetting bearer <eth:syzkaller0>
[  778.503728][T13726] tipc: Resetting bearer <eth:syzkaller0>
[  778.522066][T13726] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  778.832900][T13726] tipc: Resetting bearer <eth:syzkaller0>
[  778.950412][T13746] netlink: 'syz.1.10641': attribute type 21 has an invalid length.
[  778.953650][T13746] __nla_validate_parse: 38 callbacks suppressed
[  778.953661][T13746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10641'.
[  779.065678][   T27] tipc: Resetting bearer <eth:syzkaller0>
[  779.203649][T13766] tipc: Resetting bearer <eth:syzkaller0>
[  779.252793][T13771] tipc: Resetting bearer <eth:syzkaller0>
[  779.404844][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10648'.
[  779.479001][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10649'.
[  779.724636][T13788] tipc: Resetting bearer <eth:syzkaller0>
[  779.820997][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10651'.
[  780.272066][T13801] C speed is unknown, defaulting to 1000
[  780.309850][T13803] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10654'.
[  780.320829][T13803] geneve10: entered allmulticast mode
[  780.324036][T26403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.327871][T26403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.330586][T26403] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.333660][T26403] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.548603][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10656'.
[  780.680064][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10657'.
[  780.684576][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  780.684624][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10657'.
[  780.689100][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  780.694258][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  780.704487][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  780.754724][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10659'.
[  780.824842][T13825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10661'.
[  780.832707][T13825] net_ratelimit: 2 callbacks suppressed
[  780.832728][T13825] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  781.101269][T13843] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  781.109657][T13846] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  781.147538][T13852] batadv0: entered promiscuous mode
[  781.150765][T13852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  781.154889][T13848] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  781.434598][T13874] validate_nla: 4 callbacks suppressed
[  781.434616][T13874] netlink: 'syz.1.10672': attribute type 4 has an invalid length.
[  781.542721][T13880] netlink: 'syz.1.10674': attribute type 1 has an invalid length.
[  781.576928][T13880] 8021q: adding VLAN 0 to HW filter on device bond68
[  781.581244][T13880] bond67: (slave bond68): making interface the new active one
[  781.584868][T13880] bond67: (slave bond68): Enslaving as an active interface with an up link
[  781.591445][T13880] 8021q: adding VLAN 0 to HW filter on device bond67
[  781.613782][T13884] netlink: 'syz.1.10675': attribute type 4 has an invalid length.
[  781.714446][T13892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  781.718058][T13892] syzkaller0: entered promiscuous mode
[  781.719860][T13892] syzkaller0: entered allmulticast mode
[  781.749535][T13894] C speed is unknown, defaulting to 1000
[  781.779708][T13891] tipc: Resetting bearer <eth:syzkaller0>
[  781.787392][T13891] tipc: Disabling bearer <eth:syzkaller0>
[  781.855252][T13894] netlink: 'syz.1.10680': attribute type 1 has an invalid length.
[  781.865453][ T8649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  781.867990][ T8649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  781.923339][T13907] netlink: 'syz.1.10680': attribute type 13 has an invalid length.
[  781.933461][T13907] netlink: 'syz.1.10680': attribute type 17 has an invalid length.
[  781.965856][T13907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  782.061742][T13912] 8021q: adding VLAN 0 to HW filter on device bond34
[  782.074257][T13912] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  782.077936][T13912] bond34: (slave macvlan7): Enslaving as a backup interface with a down link
[  782.094118][T13914] netlink: 'syz.1.10682': attribute type 13 has an invalid length.
[  782.290543][T13914] tipc: Resetting bearer <eth:syzkaller0>
[  782.314058][T13916] mac80211_hwsim hwsim409 wlan1: entered promiscuous mode
[  782.325434][T13916] macvtap0: entered promiscuous mode
[  782.332285][T13916] mac80211_hwsim hwsim409 wlan1: left promiscuous mode
[  782.352762][ T5715] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  782.362002][ T5715] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  782.370524][ T5715] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  782.373855][ T5715] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  782.433660][T13921] C speed is unknown, defaulting to 1000
[  782.699061][T13956] dvmrp0: left allmulticast mode
[  782.727326][T13948] netlink: 'syz.1.10693': attribute type 12 has an invalid length.
[  782.971053][T13978] netlink: 'syz.1.10698': attribute type 4 has an invalid length.
[  782.974587][T13978] netlink: 'syz.1.10698': attribute type 4 has an invalid length.
[  783.039910][T13982] syzkaller0: entered promiscuous mode
[  783.041800][T13982] syzkaller0: entered allmulticast mode
[  783.806822][T13976] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  812.172892][T13992] netlink: 'syz.1.10701': attribute type 10 has an invalid length.
[  812.185792][T13989] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  812.202148][T13994] __nla_validate_parse: 11 callbacks suppressed
[  812.202159][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10703'.
[  812.223407][T13994] veth39: entered promiscuous mode
[  812.242072][T13996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  812.254804][T13996] syzkaller0: entered promiscuous mode
[  812.261080][T13996] syzkaller0: entered allmulticast mode
[  812.273368][T13995] tipc: Resetting bearer <eth:syzkaller0>
[  812.278359][T13995] tipc: Disabling bearer <eth:syzkaller0>
[  812.283592][T14000] netlink: 'syz.1.10706': attribute type 21 has an invalid length.
[  812.286641][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10705'.
[  812.292745][T14000] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10706'.
[  812.295763][T13998] netlink: 'syz.0.10705': attribute type 30 has an invalid length.
[  812.301681][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  812.301763][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10705'.
[  812.305571][T14000] netlink: 'syz.1.10706': attribute type 5 has an invalid length.
[  812.308390][T13998] netlink: 'syz.0.10705': attribute type 30 has an invalid length.
[  812.310651][T14000] netlink: 'syz.1.10706': attribute type 6 has an invalid length.
[  812.318862][T14000] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10706'.
[  812.321955][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  812.325006][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  812.328279][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  812.351483][T14000] lo speed is unknown, defaulting to 1000
[  812.355641][T14000] lo speed is unknown, defaulting to 1000
[  812.358187][T14000] lo speed is unknown, defaulting to 1000
[  812.367357][T14000] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  812.384818][T14000] lo speed is unknown, defaulting to 1000
[  812.389197][T14000] lo speed is unknown, defaulting to 1000
[  812.392682][T14000] lo speed is unknown, defaulting to 1000
[  812.439285][T14013] netlink: 'syz.2.10710': attribute type 4 has an invalid length.
[  812.440378][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10709'.
[  812.576569][T14020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  812.581489][ T7233] lo speed is unknown, defaulting to 1000
[  812.696012][T14030] rose0: entered allmulticast mode
[  812.742724][T14030] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  812.749941][T14030] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10715'.
[  812.792731][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10716'.
[  812.869008][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10718'.
[  813.013192][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10720'.
[  813.081679][T14057] netlink: 'syz.2.10720': attribute type 4 has an invalid length.
[  813.088407][ T1273] C speed is unknown, defaulting to 1000
[  813.091788][ T1273] syz0: Port: 1 Link ACTIVE
[  813.093598][ T1273] C speed is unknown, defaulting to 1000
[  813.604015][T14086] IPv6: sit12: Disabled Multicast RS
[  813.607128][T14086] sit12: entered allmulticast mode
[  813.736218][T14099] syzkaller0: left promiscuous mode
[  813.739119][T14099] syzkaller0: left allmulticast mode
[  813.741494][T14099] tipc: Resetting bearer <eth:syzkaller0>
[  813.821143][T14103] dvmrp0: entered allmulticast mode
[  813.963709][T14110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  814.003072][T14113] team0: entered promiscuous mode
[  814.004997][T14113] team0: entered allmulticast mode
[  814.010338][T14113] 8021q: adding VLAN 0 to HW filter on device team0
[  814.166770][T14120] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  814.209650][T14122] netlink: 'syz.0.10741': attribute type 20 has an invalid length.
[  814.216189][T14122] netlink: 'syz.0.10741': attribute type 20 has an invalid length.
[  814.226676][T14124] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  814.425873][T14131] bridge90: entered allmulticast mode
[  814.566483][T14141] ipvlan0: left promiscuous mode
[  814.578145][ T1273] C speed is unknown, defaulting to 1000
[  814.580343][T14143] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  814.584538][ T1273] syz0: Port: 1 Link DOWN
[  814.594357][ T1273] C speed is unknown, defaulting to 1000
[  814.660543][T14148] veth41: entered promiscuous mode
[  814.671343][ T7233] C speed is unknown, defaulting to 1000
[  814.673366][ T7233] syz0: Port: 1 Link ACTIVE
[  814.675022][ T7233] C speed is unknown, defaulting to 1000
[  814.867044][T14173] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  814.961663][T14177] netlink: 'syz.2.10759': attribute type 11 has an invalid length.
[  815.065429][T14180] bond64: left promiscuous mode
[  815.067130][T14180] bond64: left allmulticast mode
[  815.069135][T14180] veth37: left promiscuous mode
[  815.070932][T14180] tipc: Resetting bearer <eth:syzkaller0>
[  815.077664][T14180] veth39: left promiscuous mode
[  815.081019][ T7233] lo speed is unknown, defaulting to 1000
[  815.083403][ T7233] syz2: Port: 1 Link DOWN
[  815.085179][T14186] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  815.231147][T14199] rdma_rxe: rxe_newlink: failed to add lo
[  815.248508][T14199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  815.403199][T14210] gtp18: entered promiscuous mode
[  815.404852][T14210] gtp18: entered allmulticast mode
[  815.852724][T14240] mac80211_hwsim hwsim3 netdevsim0: Master is either lo or non-ether device
[  815.941246][T14250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  815.949665][T14251] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  815.956513][ T7234] C speed is unknown, defaulting to 1000
[  815.969207][ T7234] syz0: Port: 1 Link DOWN
[  815.971117][ T7234] C speed is unknown, defaulting to 1000
[  816.053833][T14253] pim6reg1: entered promiscuous mode
[  816.057080][T14253] pim6reg1: entered allmulticast mode
[  816.071733][T14259] IPv6: Can't replace route, no match found
[  816.079822][T14259] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  816.083780][T14259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.129941][T14259] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  816.133984][T14259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.171921][T14268] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  816.178969][T14259] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  816.183211][T14259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.200443][T14268] syzkaller0: entered promiscuous mode
[  816.202708][T14268] syzkaller0: entered allmulticast mode
[  816.214375][T14268] tipc: Resetting bearer <eth:syzkaller0>
[  816.228550][T14259] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  816.232432][T14259] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.244953][T14267] tipc: Resetting bearer <eth:syzkaller0>
[  816.274568][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  816.278162][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  816.284254][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  816.287904][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  816.299204][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  816.303903][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  816.308926][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  816.311443][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  816.351919][T22846] tipc: Resetting bearer <eth:syzkaller0>
[  816.355498][T14279] syzkaller0: left promiscuous mode
[  816.357637][T14279] syzkaller0: left allmulticast mode
[  817.286571][T14312] __nla_validate_parse: 22 callbacks suppressed
[  817.286592][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10791'.
[  817.433995][T14315] validate_nla: 9 callbacks suppressed
[  817.434033][T14315] netlink: 'syz.1.10792': attribute type 4 has an invalid length.
[  817.440811][ T5884] lo speed is unknown, defaulting to 1000
[  817.442971][ T5884] syz2: Port: 1 Link ACTIVE
[  817.744122][T14335] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10795'.
[  817.750239][T14330] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10795'.
[  817.803613][T14339] C speed is unknown, defaulting to 1000
[  817.858906][T14344] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10799'.
[  817.862074][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10799'.
[  817.863348][T14339] lo speed is unknown, defaulting to 1000
[  817.969916][T14348] netlink: 'syz.1.10800': attribute type 5 has an invalid length.
[  818.069696][T14357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10804'.
[  818.104296][T14361] netlink: 'syz.2.10805': attribute type 16 has an invalid length.
[  818.107936][T14361] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10805'.
[  818.164137][T14368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10807'.
[  818.223151][T14364] netlink: 'syz.1.10806': attribute type 39 has an invalid length.
[  818.319139][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10809'.
[  818.454676][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10812'.
[  818.544841][T14332] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  818.638990][T14396] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  818.831063][T14416] bond34: (slave macvlan7): Releasing backup interface
[  818.853530][T14416] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  818.912612][T14422] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  818.944418][T14424] netlink: 'syz.1.10823': attribute type 13 has an invalid length.
[  818.948396][T14424] netlink: 'syz.1.10823': attribute type 17 has an invalid length.
[  819.015624][T14424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  819.039954][T14428] C speed is unknown, defaulting to 1000
[  819.122828][T14428] lo speed is unknown, defaulting to 1000
[  819.566160][T14461] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.570033][T14461] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.619507][T14461] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.623440][T14461] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.669958][T14461] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.673787][T14461] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.719721][T14461] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  819.723471][T14461] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.802031][T26403] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  819.805808][T26403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.814367][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  819.819173][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.830505][ T5715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  819.833684][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.843741][ T5715] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  819.847200][ T5715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.463446][T14481] netlink: 'syz.2.10842': attribute type 10 has an invalid length.
[  820.504542][T14475] netlink: 'syz.1.10841': attribute type 9 has an invalid length.
[  820.562054][T14487] netlink: 'syz.1.10841': attribute type 1 has an invalid length.
[  820.650830][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  820.654005][T14490] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  820.664232][T14489] tipc: Resetting bearer <eth:syzkaller0>
[  820.814510][T14509] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  820.930938][T14520] tipc: Resetting bearer <eth:syzkaller0>
[  820.937835][T14520] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  820.945320][T14519] tipc: Resetting bearer <eth:syzkaller0>
[  821.225175][T14548] netlink: 'syz.1.10855': attribute type 12 has an invalid length.
[  821.329268][T14550] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  821.672388][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  821.676113][T14579] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  821.931749][T14609] xt_time: invalid argument - start or stop time greater than 23:59:59
[  822.090991][T14626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  822.170617][T14636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  822.173939][T14636] syzkaller0: entered promiscuous mode
[  822.178377][T14636] syzkaller0: entered allmulticast mode
[  822.190536][T14636] tipc: Resetting bearer <eth:syzkaller0>
[  822.202385][T14635] tipc: Resetting bearer <eth:syzkaller0>
[  822.214889][T14635] tipc: Disabling bearer <eth:syzkaller0>
[  822.310118][T14655] __nla_validate_parse: 26 callbacks suppressed
[  822.310138][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10884'.
[  822.494961][T14661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10887'.
[  822.504013][T14665] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10889'.
[  822.510537][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10889'.
[  822.561213][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10888'.
[  822.619844][T14674] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  822.653720][T14678] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10891'.
[  822.740766][T14680] tipc: Resetting bearer <eth:syzkaller0>
[  822.743978][T14680] bond67: (slave bond68): Releasing backup interface
[  822.757975][T14680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  822.797064][T14682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10893'.
[  822.886575][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10895'.
[  822.889806][T14686] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10895'.
[  823.357980][T14690] validate_nla: 1 callbacks suppressed
[  823.357994][T14690] netlink: 'syz.2.10897': attribute type 10 has an invalid length.
[  823.391525][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10899'.
[  823.394887][T14693] tipc: Enabled bearer <eth:vlan0>, priority 18
[  823.586498][ T8649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  823.589503][ T8649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  823.806457][T14734] netlink: 'syz.1.10908': attribute type 1 has an invalid length.
[  824.204310][T14739] tipc: Resetting bearer <eth:syzkaller0>
[  824.276087][T14742] tipc: Resetting bearer <eth:syzkaller0>
[  824.472788][T14761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.477097][T14761] syzkaller0: entered promiscuous mode
[  824.478959][T14761] syzkaller0: entered allmulticast mode
[  824.484598][T14763] netlink: 'syz.1.10919': attribute type 9 has an invalid length.
[  824.487519][T14761] tipc: Resetting bearer <eth:syzkaller0>
[  824.563485][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  824.568121][T14760] tipc: Disabling bearer <eth:syzkaller0>
[  824.659634][T14770] netlink: 'syz.1.10922': attribute type 1 has an invalid length.
[  824.680799][T14770] 8021q: adding VLAN 0 to HW filter on device bond70
[  824.684677][T14770] bond69: (slave bond70): making interface the new active one
[  824.687862][T14770] bond69: (slave bond70): Enslaving as an active interface with an up link
[  824.744683][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  824.869786][T14781] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  824.873275][T14781] syzkaller0: entered promiscuous mode
[  824.875303][T14781] syzkaller0: entered allmulticast mode
[  824.907532][T14786] team0: Refused to change device type
[  824.971369][T14795] netlink: 'syz.2.10929': attribute type 13 has an invalid length.
[  824.975482][T14795] netlink: 'syz.2.10929': attribute type 17 has an invalid length.
[  824.993316][T14795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  824.999953][ T5884] C speed is unknown, defaulting to 1000
[  825.002700][ T5884] syz0: Port: 1 Link ACTIVE
[  825.003770][T14797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  825.010011][ T5884] C speed is unknown, defaulting to 1000
[  825.038729][T14795] C speed is unknown, defaulting to 1000
[  825.068159][T14803] netlink: 'syz.0.10934': attribute type 4 has an invalid length.
[  825.080898][T14804] nbd: couldn't find a device at index 0
[  825.123546][T14795] lo speed is unknown, defaulting to 1000
[  825.134038][T14801] netlink: 'syz.1.10933': attribute type 39 has an invalid length.
[  825.169048][T14818] tipc: Resetting bearer <eth:syzkaller0>
[  825.171710][T14818] bond69: (slave bond70): Releasing backup interface
[  825.254397][T14828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  825.258610][T14829] netlink: 'syz.0.10938': attribute type 4 has an invalid length.
[  825.329922][T14833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  825.339215][T14833] syzkaller1: entered promiscuous mode
[  825.341632][T14833] syzkaller1: entered allmulticast mode
[  825.483263][T14840] netlink: 'syz.0.10942': attribute type 21 has an invalid length.
[  826.285828][T14846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.289311][T14846] syzkaller0: entered promiscuous mode
[  826.291573][T14846] syzkaller0: entered allmulticast mode
[  826.385831][T14851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  826.416361][T14846] tipc: Resetting bearer <eth:syzkaller0>
[  826.423219][T14845] tipc: Resetting bearer <eth:syzkaller0>
[  826.427133][T14845] tipc: Disabling bearer <eth:syzkaller0>
[  826.448353][T14851] C speed is unknown, defaulting to 1000
[  826.532604][T14851] lo speed is unknown, defaulting to 1000
[  827.330340][T14888] __nla_validate_parse: 27 callbacks suppressed
[  827.330358][T14888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10956'.
[  827.338184][T14888] nbd: couldn't find a device at index 0
[  827.372040][T14888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10956'.
[  827.440372][T14893] syzkaller0: left promiscuous mode
[  827.442153][T14893] syzkaller0: left allmulticast mode
[  827.484060][T14895] 0{X: Device is already in use.
[  827.592946][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10964'.
[  827.681695][T14911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  827.702261][T14914] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  827.726726][T14911] C speed is unknown, defaulting to 1000
[  827.754909][T14918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10967'.
[  827.762112][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10967'.
[  827.798445][T14911] lo speed is unknown, defaulting to 1000
[  827.812093][T14921] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  827.816322][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.1.10966 Not tainted syzkaller #0 PREEMPT(full) 
[  827.816336][T14921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  827.816343][T14921] Call Trace:
[  827.816347][T14921]  <TASK>
[  827.816352][T14921]  dump_stack_lvl+0x189/0x250
[  827.816370][T14921]  ? __pfx_dump_stack_lvl+0x10/0x10
[  827.816383][T14921]  ? __pfx__printk+0x10/0x10
[  827.816397][T14921]  ? kernfs_root+0x1c/0x230
[  827.816409][T14921]  ? kernfs_path_from_node+0x2f/0x290
[  827.816418][T14921]  ? kernfs_path_from_node+0x250/0x290
[  827.816426][T14921]  ? kernfs_path_from_node+0x2f/0x290
[  827.816438][T14921]  sysfs_warn_dup+0x8e/0xa0
[  827.816447][T14921]  sysfs_do_create_link_sd+0xc0/0x110
[  827.816458][T14921]  device_add_class_symlinks+0x1cf/0x240
[  827.816476][T14921]  device_add+0x475/0xb50
[  827.816489][T14921]  wiphy_register+0x1ba6/0x28d0
[  827.816520][T14921]  ? __pfx_wiphy_register+0x10/0x10
[  827.816539][T14921]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  827.816557][T14921]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  827.816585][T14921]  ieee80211_register_hw+0x3484/0x4100
[  827.816604][T14921]  ? ieee80211_register_hw+0x14a1/0x4100
[  827.816618][T14921]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  827.816627][T14921]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  827.816641][T14921]  ? __hrtimer_setup+0x187/0x210
[  827.816650][T14921]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  827.816666][T14921]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  827.816681][T14921]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  827.816691][T14921]  ? trace_kmalloc+0x1f/0xd0
[  827.816702][T14921]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  827.816713][T14921]  ? kstrndup+0xbf/0x160
[  827.816724][T14921]  hwsim_new_radio_nl+0xea4/0x1b10
[  827.816734][T14921]  ? __pfx___nla_validate_parse+0x10/0x10
[  827.816750][T14921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  827.816761][T14921]  ? __nla_parse+0x40/0x60
[  827.816773][T14921]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  827.816785][T14921]  genl_family_rcv_msg_doit+0x215/0x300
[  827.816795][T14921]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  827.816807][T14921]  ? bpf_lsm_capable+0x9/0x20
[  827.816818][T14921]  ? security_capable+0x7e/0x2e0
[  827.816832][T14921]  genl_rcv_msg+0x60e/0x790
[  827.816841][T14921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  827.816849][T14921]  ? __kasan_slab_alloc+0x6c/0x80
[  827.816860][T14921]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  827.816869][T14921]  ? __netlink_lookup+0xbd/0x810
[  827.816876][T14921]  ? rcu_is_watching+0x15/0xb0
[  827.816885][T14921]  netlink_rcv_skb+0x208/0x470
[  827.816897][T14921]  ? __pfx_genl_rcv_msg+0x10/0x10
[  827.816905][T14921]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  827.816918][T14921]  ? lock_release+0x4b/0x3e0
[  827.816930][T14921]  ? down_read+0x1ad/0x2e0
[  827.816937][T14921]  genl_rcv+0x28/0x40
[  827.816944][T14921]  netlink_unicast+0x82f/0x9e0
[  827.816956][T14921]  ? __pfx_netlink_unicast+0x10/0x10
[  827.816966][T14921]  ? netlink_sendmsg+0x642/0xb30
[  827.816976][T14921]  ? skb_put+0x11b/0x210
[  827.816985][T14921]  netlink_sendmsg+0x805/0xb30
[  827.816997][T14921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.817017][T14921]  ? aa_sock_msg_perm+0xf1/0x1d0
[  827.817025][T14921]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  827.817034][T14921]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.817045][T14921]  __sock_sendmsg+0x21c/0x270
[  827.817057][T14921]  ____sys_sendmsg+0x505/0x830
[  827.817068][T14921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  827.817078][T14921]  ? import_iovec+0x74/0xa0
[  827.817089][T14921]  ___sys_sendmsg+0x21f/0x2a0
[  827.817097][T14921]  ? __pfx____sys_sendmsg+0x10/0x10
[  827.817106][T14921]  ? futex_wake+0x4b2/0x560
[  827.817123][T14921]  ? __fget_files+0x2a/0x420
[  827.817136][T14921]  ? __fget_files+0x3a0/0x420
[  827.817149][T14921]  __x64_sys_sendmsg+0x19b/0x260
[  827.817157][T14921]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  827.817168][T14921]  ? rcu_is_watching+0x15/0xb0
[  827.817176][T14921]  do_syscall_64+0xfa/0x3b0
[  827.817189][T14921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.817198][T14921]  ? exc_page_fault+0x9f/0xf0
[  827.817238][T14921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.817247][T14921] RIP: 0033:0x7ff70598ebe9
[  827.817257][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  827.817267][T14921] RSP: 002b:00007ff706896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  827.817278][T14921] RAX: ffffffffffffffda RBX: 00007ff705bb6090 RCX: 00007ff70598ebe9
[  827.817285][T14921] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  827.817291][T14921] RBP: 00007ff705a11e19 R08: 0000000000000000 R09: 0000000000000000
[  827.817296][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  827.817322][T14921] R13: 00007ff705bb6128 R14: 00007ff705bb6090 R15: 00007ffe9ea3cf38
[  827.817333][T14921]  </TASK>
[  827.997317][T14919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  828.180424][T14933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  828.203754][T14932] C speed is unknown, defaulting to 1000
[  828.289734][T14932] lo speed is unknown, defaulting to 1000
[  828.750946][T14947] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  828.786224][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10973'.
[  828.971455][T14957] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  828.996759][T14957] syzkaller0: entered promiscuous mode
[  829.003425][T14957] syzkaller0: entered allmulticast mode
[  829.149585][T14970] macvtap0: entered promiscuous mode
[  829.151268][T14970] mac80211_hwsim hwsim198 wlan1: entered promiscuous mode
[  829.181021][T14972] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  829.231162][T14979] validate_nla: 9 callbacks suppressed
[  829.231175][T14979] netlink: 'syz.1.10981': attribute type 1 has an invalid length.
[  829.263476][T14979] 8021q: adding VLAN 0 to HW filter on device bond71
[  829.287150][T14979] veth43: entered promiscuous mode
[  829.290783][T14979] bond71: (slave veth43): Enslaving as a backup interface with a down link
[  829.303168][T14979] tipc: Resetting bearer <eth:syzkaller0>
[  829.310000][T14979] bond71: (slave veth43): Releasing backup interface
[  829.351551][T14982] tipc: Resetting bearer <eth:syzkaller0>
[  829.362483][T14982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  829.374273][T14981] tipc: Resetting bearer <eth:syzkaller0>
[  829.461836][T14985] syzkaller0: left promiscuous mode
[  829.464239][T14985] syzkaller0: left allmulticast mode
[  829.466843][T14985] tipc: Resetting bearer <eth:syzkaller0>
[  829.495722][T14985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10983'.
[  829.639119][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10984'.
[  829.689755][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10984'.
[  829.920672][T15003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10987'.
[  830.000752][T15010] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  830.061740][T15016] mac80211_hwsim hwsim456 wlan0: entered promiscuous mode
[  830.118493][T15018] dvmrp0: entered allmulticast mode
[  830.136317][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  830.179188][T15025] netlink: 'syz.2.10995': attribute type 10 has an invalid length.
[  830.182768][T15025] netlink: 'syz.2.10995': attribute type 10 has an invalid length.
[  830.263708][T15029] smc: removing net device bond0 with user defined pnetid SYZ2
[  830.270870][T15029] bond0 (unregistering): Released all slaves
[  830.519586][T15054] vxcan0: entered promiscuous mode
[  830.530498][T15054] vxcan1: entered promiscuous mode
[  830.664977][T15069] tipc: Resetting bearer <eth:syzkaller0>
[  830.672027][T15069] syzkaller0: entered promiscuous mode
[  830.674180][T15069] syzkaller0: entered allmulticast mode
[  830.689514][T15068] tipc: Resetting bearer <eth:syzkaller0>
[  831.047787][ T5884] C speed is unknown, defaulting to 1000
[  831.050036][ T5884] syz0: Port: 1 Link DOWN
[  831.051882][ T5884] C speed is unknown, defaulting to 1000
[  831.095428][T15095] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  831.146075][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  831.291719][T15114] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  831.321133][T15116] netlink: 'syz.0.11019': attribute type 10 has an invalid length.
[  831.323698][T15116] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  831.601402][T15131] tipc: Resetting bearer <eth:syzkaller0>
[  831.608106][T15131] xt_policy: too many policy elements
[  831.912182][T15168] C speed is unknown, defaulting to 1000
[  831.964165][T15173] netlink: 'syz.1.11037': attribute type 5 has an invalid length.
[  831.976955][T15168] lo speed is unknown, defaulting to 1000
[  832.038388][T15183] netlink: 'syz.1.11041': attribute type 83 has an invalid length.
[  832.278521][T15206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  832.660883][T15213] netlink: 'syz.2.11047': attribute type 5 has an invalid length.
[  832.998021][T15225] C speed is unknown, defaulting to 1000
[  833.003693][T15230] __nla_validate_parse: 21 callbacks suppressed
[  833.003704][T15230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11051'.
[  833.012043][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11051'.
[  833.068183][T15225] lo speed is unknown, defaulting to 1000
[  833.151537][T15235] tipc: Resetting bearer <eth:syzkaller0>
[  833.156333][T15235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  833.187302][T15234] tipc: Resetting bearer <eth:syzkaller0>
[  833.227423][T15239] tipc: Resetting bearer <eth:syzkaller0>
[  833.232474][T15239] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  833.270284][T15241] tipc: Resetting bearer <eth:syzkaller0>
[  833.280476][T15244] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  833.324138][T15246] netlink: 'syz.1.11056': attribute type 4 has an invalid length.
[  833.343554][ T7235] lo speed is unknown, defaulting to 1000
[  833.360682][ T7235] syz2: Port: 1 Link DOWN
[  833.511549][T15259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11058'.
[  833.545019][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11060'.
[  833.556162][ T5715] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  833.592451][T15270] C speed is unknown, defaulting to 1000
[  833.702624][T15270] lo speed is unknown, defaulting to 1000
[  833.755891][T15275] tipc: Resetting bearer <eth:vlan0>
[  833.811145][T15275] tipc: Resetting bearer <eth:syzkaller0>
[  833.843022][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  833.846362][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.849452][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  833.852204][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.854927][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  833.862975][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.866297][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  833.869423][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.307274][ T4182] tipc: Resetting bearer <eth:syzkaller0>
[  834.355768][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11062'.
[  834.359180][T15278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11062'.
[  834.418529][T15280] netlink: 'syz.1.11063': attribute type 12 has an invalid length.
[  834.487141][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11065'.
[  834.536412][T15287] mac80211_hwsim hwsim198 wlan1 (unregistering): left promiscuous mode
[  834.718227][T15293] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11067'.
[  834.757272][T15297] netlink: 'syz.2.11068': attribute type 13 has an invalid length.
[  834.759775][T15297] netlink: 'syz.2.11068': attribute type 17 has an invalid length.
[  834.779159][T15297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  834.784502][ T7234] C speed is unknown, defaulting to 1000
[  834.792916][ T7234] syz0: Port: 1 Link ACTIVE
[  834.804958][ T7234] C speed is unknown, defaulting to 1000
[  834.847724][T15303] netlink: 'syz.1.11069': attribute type 1 has an invalid length.
[  834.851202][T15302] netlink: 'syz.1.11069': attribute type 1 has an invalid length.
[  834.903717][T15302] veth47: entered promiscuous mode
[  834.912825][T15302] bond72: (slave veth47): Enslaving as a backup interface with a down link
[  834.933713][T15303] veth49: entered promiscuous mode
[  834.941925][T15303] bond72: (slave veth49): Enslaving as a backup interface with a down link
[  834.947488][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11069'.
[  834.951684][T15302] 8021q: adding VLAN 0 to HW filter on device bond72
[  834.954878][T15303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11069'.
[  835.043435][T15317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.053470][T15317] syzkaller0: entered promiscuous mode
[  835.055931][T15317] syzkaller0: entered allmulticast mode
[  835.071742][T15317] tipc: Resetting bearer <eth:syzkaller0>
[  835.076942][T15316] tipc: Resetting bearer <eth:syzkaller0>
[  835.081163][T15316] tipc: Disabling bearer <eth:syzkaller0>
[  835.284262][T15337] netlink: 'syz.0.11075': attribute type 10 has an invalid length.
[  835.287428][T15337] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  835.499221][T15354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.536630][T15356] syzkaller1: entered promiscuous mode
[  835.538452][T15356] syzkaller1: entered allmulticast mode
[  835.584142][T15356] tipc: Resetting bearer <eth:syzkaller0>
[  836.132230][T15359] pim6reg1: entered promiscuous mode
[  836.134230][T15359] pim6reg1: entered allmulticast mode
[  836.329104][T15353] tipc: Disabling bearer <eth:syzkaller0>
[  836.355878][T15365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  836.360623][T15365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  836.367199][T15364] tipc: Resetting bearer <eth:syzkaller0>
[  836.379632][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  836.405769][T15367] netlink: 'syz.1.11087': attribute type 12 has an invalid length.
[  836.528790][T15376] netlink: 'syz.2.11088': attribute type 1 has an invalid length.
[  837.303141][T15393] IPv6: Can't replace route, no match found
[  838.059869][T15418] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  838.100025][T15420] tipc: Resetting bearer <eth:vlan0>
[  838.193559][T15431] __nla_validate_parse: 13 callbacks suppressed
[  838.193572][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11102'.
[  838.200629][T15431] netlink: 'syz.0.11102': attribute type 20 has an invalid length.
[  838.206314][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11102'.
[  838.210968][T15431] netlink: 'syz.0.11102': attribute type 20 has an invalid length.
[  838.245036][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11104'.
[  838.269674][T15439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11105'.
[  838.276743][T15439] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  838.279825][T15439] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  838.329733][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11106'.
[  838.333797][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11106'.
[  838.361736][T15444] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  838.822739][T15462] tipc: Resetting bearer <eth:syzkaller0>
[  838.826278][T15462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  838.834506][T15461] tipc: Resetting bearer <eth:syzkaller0>
[  838.961535][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11114'.
[  839.054376][T15472] tipc: Resetting bearer <eth:syzkaller0>
[  839.059246][T15472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11116'.
[  839.142361][T15471] tipc: Resetting bearer <eth:syzkaller0>
[  839.164801][T15483] netlink: 17 bytes leftover after parsing attributes in process `syz.0.11118'.
[  839.171186][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11119'.
[  839.307829][T15494] syzkaller0: left promiscuous mode
[  839.309792][T15494] syzkaller0: left allmulticast mode
[  839.313475][T15494] tipc: Resetting bearer <eth:syzkaller0>
[  839.379917][T15506] geneve10: entered promiscuous mode
[  839.385498][ T5715] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.388090][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.390641][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.403363][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.445687][T15521] validate_nla: 3 callbacks suppressed
[  839.445698][T15521] netlink: 'syz.2.11129': attribute type 2 has an invalid length.
[  839.451963][T15521] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  839.463244][T15523] syzkaller0: left promiscuous mode
[  839.475182][T15523] syzkaller0: left allmulticast mode
[  839.498946][T22846] tipc: Resetting bearer <eth:syzkaller0>
[  839.513273][T15527] pimreg: entered allmulticast mode
[  839.529508][T15527] netlink: 'syz.0.11132': attribute type 11 has an invalid length.
[  839.581372][T15539] atomic_op ffff888043405198 conn xmit_atomic 0000000000000000
[  839.586083][T15539] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[  839.592310][T15539] atomic_op ffff888000fef998 conn xmit_atomic 0000000000000000
[  839.595680][T15527] block nbd4: server does not support multiple connections per device.
[  839.599219][T15527] block nbd4: shutting down sockets
[  839.911468][T15581] netlink: 'syz.0.11149': attribute type 10 has an invalid length.
[  839.916642][T15579] netlink: 'syz.1.11148': attribute type 1 has an invalid length.
[  839.922188][T15581] netlink: 'syz.0.11149': attribute type 10 has an invalid length.
[  840.068221][T15592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  840.134031][T15605] tipc: Resetting bearer <eth:syzkaller0>
[  840.162381][T15612] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  840.253843][T15633] tipc: Resetting bearer <eth:syzkaller0>
[  840.257066][T15633] bond72: (slave veth47): Releasing backup interface
[  840.259680][T15633] bond72: (slave veth47): the permanent HWaddr of slave - 62:2a:b7:02:01:43 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  840.275676][T15633] bond72: (slave veth49): Releasing backup interface
[  840.321819][T15637] tipc: Resetting bearer <eth:syzkaller0>
[  840.324228][T15639] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  840.372584][T15643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  840.396087][T15645] netlink: 'syz.0.11169': attribute type 10 has an invalid length.
[  840.419159][T15647] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  840.496268][T15654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.520526][T15654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.534911][T15656] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  840.560599][T15654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.566368][T15659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  840.569659][T15660] syzkaller0: entered promiscuous mode
[  840.571925][T15660] syzkaller0: entered allmulticast mode
[  840.630182][T15654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.679105][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.692616][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.702176][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  840.723378][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.838119][T15685] netlink: 'syz.2.11183': attribute type 10 has an invalid length.
[  840.906804][T15691] netlink: 'syz.2.11184': attribute type 13 has an invalid length.
[  840.909427][T15691] netlink: 'syz.2.11184': attribute type 17 has an invalid length.
[  840.914004][T15691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  841.361234][T15712] netlink: 'syz.2.11190': attribute type 4 has an invalid length.
[  841.365002][ T7234] C speed is unknown, defaulting to 1000
[  841.371857][ T7234] syz0: Port: 1 Link DOWN
[  841.373294][ T7234] C speed is unknown, defaulting to 1000
[  841.375366][T15712] nbd: couldn't find a device at index 0
[  841.404220][T15716] tipc: Resetting bearer <eth:syzkaller0>
[  841.422490][T15716] tipc: Resetting bearer <eth:syzkaller0>
[  841.547049][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  841.568782][T15733] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  841.761857][T15751] IPv6: sit12: Disabled Multicast RS
[  841.764835][T15751] sit12: entered allmulticast mode
[  841.814606][T15760] tipc: Resetting bearer <eth:syzkaller0>
[  841.828643][T15760] tipc: Resetting bearer <eth:syzkaller0>
[  841.841405][T15766] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2)
[  842.213613][T15796] macsec4: entered promiscuous mode
[  842.216237][T15796] macsec4: entered allmulticast mode
[  842.218427][T15796] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  842.615896][ T8646] tipc: Resetting bearer <eth:syzkaller0>
[  842.739755][T15811] 8021q: adding VLAN 0 to HW filter on device bond34
[  842.815065][T15817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  842.850707][T15819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.120288][T15836] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.225533][T15858] __nla_validate_parse: 24 callbacks suppressed
[  843.225544][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11229'.
[  843.256531][T15865] netlink: 15 bytes leftover after parsing attributes in process `syz.1.11231'.
[  843.273482][T15865] C speed is unknown, defaulting to 1000
[  843.282652][T15863] mac80211_hwsim hwsim7 netdevsim0: entered promiscuous mode
[  843.284994][T15863] mac80211_hwsim hwsim7 netdevsim0: left allmulticast mode
[  843.307330][T15867] pim6reg1: entered promiscuous mode
[  843.309181][T15867] pim6reg1: entered allmulticast mode
[  843.339894][T15870] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.352820][T15865] lo speed is unknown, defaulting to 1000
[  843.482440][T15884] syzkaller0: left promiscuous mode
[  843.484405][T15884] syzkaller0: left allmulticast mode
[  843.502341][T15865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  843.546017][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11237'.
[  843.590890][T15889] bond58: entered promiscuous mode
[  843.592766][T15889] 8021q: adding VLAN 0 to HW filter on device bond58
[  843.620851][T15889] 8021q: adding VLAN 0 to HW filter on device bond58
[  843.623684][T15889] bond58: (slave wireguard2): The slave device specified does not support setting the MAC address
[  843.629907][T15889] bond58: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  843.641639][T15889] bond58: (slave wireguard2): making interface the new active one
[  843.715243][T15889] wireguard2: entered promiscuous mode
[  843.718802][T15889] bond58: (slave wireguard2): Enslaving as an active interface with an up link
[  843.772212][T15893] unsupported nla_type 52263
[  843.829480][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11239'.
[  843.949205][T15900] tipc: Resetting bearer <eth:syzkaller0>
[  843.958547][T15902] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.974076][T15899] tipc: Resetting bearer <eth:syzkaller0>
[  844.108210][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11242'.
[  844.338686][T15922] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20002
[  844.375966][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11248'.
[  844.402383][T15936] pimreg: left allmulticast mode
[  844.411701][T15925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11247'.
[  844.417463][T15937] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  844.524431][T15954] validate_nla: 11 callbacks suppressed
[  844.524448][T15954] netlink: 'syz.2.11254': attribute type 1 has an invalid length.
[  844.614014][T15966] netlink: 9 bytes leftover after parsing attributes in process `syz.2.11255'.
[  844.620764][T15966] 1{X: entered promiscuous mode
[  844.630832][T15958] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11255'.
[  844.634554][T15958] 0{X: renamed from 31{X
[  844.638751][T15958] 0{X: left promiscuous mode
[  844.640958][T15958] 0{X: entered allmulticast mode
[  844.644449][T15958] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  844.779965][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  845.004493][T15990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11263'.
[  845.286145][T16012] netlink: 'syz.1.11267': attribute type 30 has an invalid length.
[  845.302403][T16012] netlink: 'syz.1.11267': attribute type 30 has an invalid length.
[  845.305616][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  845.309044][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  845.317286][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  845.322080][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  845.331272][T16009] netlink: 'syz.2.11265': attribute type 16 has an invalid length.
[  845.334244][T16009] netlink: 'syz.2.11265': attribute type 17 has an invalid length.
[  845.341813][T16009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  845.346971][ T7235] C speed is unknown, defaulting to 1000
[  845.349106][ T7235] syz0: Port: 1 Link ACTIVE
[  845.350715][ T7235] C speed is unknown, defaulting to 1000
[  846.030127][T16033] netlink: 'syz.0.11273': attribute type 9 has an invalid length.
[  846.132384][T16040] netlink: 'syz.0.11275': attribute type 10 has an invalid length.
[  846.165306][T16036] netlink: 'syz.2.11274': attribute type 1 has an invalid length.
[  846.212463][T16050] 1{X: renamed from 30{X (while UP)
[  846.216885][T16050] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  846.370167][T16063] tipc: Resetting bearer <eth:syzkaller0>
[  846.378367][T16065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  846.382386][T16063] syzkaller0: entered promiscuous mode
[  846.387209][T16063] syzkaller0: entered allmulticast mode
[  846.420259][T16063] tipc: Resetting bearer <eth:syzkaller0>
[  846.537055][T16081] nbd5: detected capacity change from 0 to 127
[  846.593345][T16095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.597037][T16095] syzkaller0: entered promiscuous mode
[  846.599566][T16095] syzkaller0: entered allmulticast mode
[  846.604291][   T56] block nbd5: Receive control failed (result -32)
[  846.631600][T16095] tipc: Resetting bearer <eth:syzkaller0>
[  846.653256][T16095] tipc: Resetting bearer <eth:syzkaller0>
[  846.669311][T16095] tipc: Disabling bearer <eth:syzkaller0>
[  846.746646][T16118] bridge70: entered promiscuous mode
[  846.748899][T16118] macsec0: entered promiscuous mode
[  846.751860][T16118] macsec0: entered allmulticast mode
[  846.754213][T16118] bridge70: entered allmulticast mode
[  846.758690][T16118] bridge70: port 1(macsec0) entered blocking state
[  846.761312][T16118] bridge70: port 1(macsec0) entered disabled state
[  846.764999][T16118] bridge70: left allmulticast mode
[  846.766884][T16118] bridge70: left promiscuous mode
[  846.790292][T16114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  846.825722][ T8646] tipc: Resetting bearer <eth:syzkaller0>
[  846.867966][T16127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.874361][T16127] syzkaller0: entered promiscuous mode
[  846.883373][T16127] syzkaller0: entered allmulticast mode
[  846.892705][T16127] pimreg0: mtu less than device minimum
[  846.900009][T16126] tipc: Resetting bearer <eth:syzkaller0>
[  846.907511][T16126] tipc: Disabling bearer <eth:syzkaller0>
[  846.933127][T16129] netlink: 'syz.1.11303': attribute type 4 has an invalid length.
[  847.008947][T16150] netlink: 'syz.0.11310': attribute type 10 has an invalid length.
[  847.168909][T16165] macvlan9: entered promiscuous mode
[  847.294160][T16186] ip6gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue
[  847.386370][T16201] tipc: Resetting bearer <eth:syzkaller0>
[  847.390042][T16201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  847.403973][T16200] tipc: Resetting bearer <eth:syzkaller0>
[  847.838773][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  847.888781][T16226] sctp: [Deprecated]: syz.0.11335 (pid 16226) Use of int in max_burst socket option deprecated.
[  847.888781][T16226] Use struct sctp_assoc_value instead
[  848.038901][T16238] tipc: Resetting bearer <eth:syzkaller0>
[  848.046372][T16238] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  848.099987][T16238] tipc: Resetting bearer <eth:syzkaller0>
[  848.129358][T16238] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  848.142883][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.146849][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.150731][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.153917][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.165028][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.172095][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.181996][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  848.185897][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  848.374243][T16251] sctp: [Deprecated]: syz.1.11344 (pid 16251) Use of struct sctp_assoc_value in delayed_ack socket option.
[  848.374243][T16251] Use struct sctp_sack_info instead
[  848.400908][T16254] __nla_validate_parse: 33 callbacks suppressed
[  848.400921][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11345'.
[  848.460934][T16258] dvmrp8: entered allmulticast mode
[  848.478496][T16258] C speed is unknown, defaulting to 1000
[  848.584391][T16258] lo speed is unknown, defaulting to 1000
[  848.630760][T16257] dvmrp8: left allmulticast mode
[  848.769295][T16262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  848.796051][T16261] tipc: Resetting bearer <eth:syzkaller0>
[  848.831099][T16269] bridge71: entered allmulticast mode
[  848.856685][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  848.909936][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11349'.
[  849.054265][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11351'.
[  849.170007][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11352'.
[  849.324194][T16290] tipc: Resetting bearer <eth:syzkaller0>
[  849.332465][T16290] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.339828][T16289] tipc: Resetting bearer <eth:syzkaller0>
[  849.359040][T16292] tipc: Resetting bearer <eth:syzkaller0>
[  849.363060][T16292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.373163][T16291] tipc: Resetting bearer <eth:syzkaller0>
[  849.407895][T16294] tipc: Resetting bearer <eth:syzkaller0>
[  849.412399][T16294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  849.482482][T16296] 8021q: adding VLAN 0 to HW filter on device bond2
[  849.609345][T16311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11359'.
[  849.711052][T16323] syzkaller0: entered promiscuous mode
[  849.713075][T16323] syzkaller0: entered allmulticast mode
[  849.906522][T16335] validate_nla: 6 callbacks suppressed
[  849.906534][T16335] netlink: 'syz.0.11365': attribute type 10 has an invalid length.
[  849.911939][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11365'.
[  849.914915][T16335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11365'.
[  849.918257][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11365'.
[  849.921957][T16335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11365'.
[  850.013426][T16346] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  850.017598][T16346] syzkaller0: entered promiscuous mode
[  850.019882][T16346] syzkaller0: entered allmulticast mode
[  850.169674][T16355] C speed is unknown, defaulting to 1000
[  850.217669][T16355] lo speed is unknown, defaulting to 1000
[  850.243840][T16293] tipc: Resetting bearer <eth:syzkaller0>
[  850.355828][T16362] syzkaller0: left promiscuous mode
[  850.357515][T16362] syzkaller0: left allmulticast mode
[  850.360855][T16365] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11375'.
[  850.588345][T16372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  850.592196][T16372] syzkaller0: entered promiscuous mode
[  850.593930][T16372] syzkaller0: entered allmulticast mode
[  850.603831][T16372] tipc: Resetting bearer <eth:syzkaller0>
[  850.606680][T16372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.609124][T16372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.612013][T16372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.614448][T16372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.619851][T16371] tipc: Resetting bearer <eth:syzkaller0>
[  850.623454][T16371] tipc: Disabling bearer <eth:syzkaller0>
[  850.627242][T16374] netlink: 'syz.0.11378': attribute type 1 has an invalid length.
[  850.648253][T16374] veth49: entered promiscuous mode
[  850.685036][T16386] netlink: 'syz.2.11381': attribute type 5 has an invalid length.
[  850.691293][T16384] rdma_rxe: rxe_newlink: failed to add lo
[  850.693492][T16388] netlink: 'syz.2.11381': attribute type 5 has an invalid length.
[  850.721785][T16384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  850.728881][ T7235] lo speed is unknown, defaulting to 1000
[  850.740605][ T7235] syz2: Port: 1 Link ACTIVE
[  850.772765][T16398] netlink: 'syz.0.11385': attribute type 10 has an invalid length.
[  850.785524][T16394] netem: unknown loss type 12
[  850.787068][T16394] netem: change failed
[  850.857223][T16403] mac80211_hwsim hwsim456 wlan0: left promiscuous mode
[  850.865050][T16411] netlink: 'syz.2.11388': attribute type 1 has an invalid length.
[  850.865479][ T7235] C speed is unknown, defaulting to 1000
[  850.869816][ T7235] syz0: Port: 1 Link DOWN
[  850.873068][T16410] tipc: Resetting bearer <eth:syzkaller0>
[  850.883051][ T7235] C speed is unknown, defaulting to 1000
[  850.953066][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  851.078237][T16439] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  851.081190][T16439] syzkaller0: entered promiscuous mode
[  851.083232][T16439] syzkaller0: entered allmulticast mode
[  851.221796][T16452] netlink: 'syz.1.11404': attribute type 10 has an invalid length.
[  851.368802][T16473] sctp: [Deprecated]: syz.1.11410 (pid 16473) Use of int in max_burst socket option deprecated.
[  851.368802][T16473] Use struct sctp_assoc_value instead
[  851.429326][T16480] tipc: Resetting bearer <eth:syzkaller0>
[  851.440472][T16480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  851.453766][T16479] tipc: Resetting bearer <eth:syzkaller0>
[  851.493611][T16485] bond58: (slave wireguard2): Releasing backup interface
[  851.496287][T16485] wireguard2: left promiscuous mode
[  851.544107][T16501] netlink: 'syz.1.11417': attribute type 1 has an invalid length.
[  851.548344][T16501] netlink: 'syz.1.11417': attribute type 10 has an invalid length.
[  851.551399][T16501] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  851.558689][T16484] tipc: Resetting bearer <eth:vlan0>
[  851.560839][T16484] vlan0: entered promiscuous mode
[  851.563119][T16484] erspan0: entered promiscuous mode
[  851.592273][T16504] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  851.785887][T16530] netlink: zone id is out of range
[  851.787520][T16530] netlink: zone id is out of range
[  851.789179][T16530] netlink: zone id is out of range
[  851.791058][T16530] netlink: zone id is out of range
[  851.807774][T16533] rdma_rxe: rxe_newlink: failed to add lo
[  851.905074][T16547] netlink: 'syz.1.11431': attribute type 6 has an invalid length.
[  851.957401][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  851.988852][T16551] bond73 (unregistering): Released all slaves
[  852.050623][T16555] syzkaller1: entered promiscuous mode
[  852.052435][T16555] syzkaller1: entered allmulticast mode
[  852.139163][T16563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  852.498317][T16613] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  852.543787][T16617] 1{X: left allmulticast mode
[  852.560487][ T7240] C speed is unknown, defaulting to 1000
[  852.562735][ T7240] syz0: Port: 1 Link ACTIVE
[  852.579158][ T7240] C speed is unknown, defaulting to 1000
[  852.782631][T16632] bond60: entered promiscuous mode
[  852.784404][T16632] bond60: entered allmulticast mode
[  852.787465][T16632] 8021q: adding VLAN 0 to HW filter on device bond60
[  852.818667][T16632] C speed is unknown, defaulting to 1000
[  852.874382][T16632] lo speed is unknown, defaulting to 1000
[  852.930441][T16638] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  852.987332][T16640] macsec7: entered promiscuous mode
[  852.989148][T16640] bridge0: entered promiscuous mode
[  852.991753][T16640] bridge0: port 1(macsec7) entered blocking state
[  852.994439][T16640] bridge0: port 1(macsec7) entered disabled state
[  852.997029][T16640] macsec7: entered allmulticast mode
[  852.998761][T16640] bridge0: entered allmulticast mode
[  853.001042][T16640] macsec7: left allmulticast mode
[  853.002740][T16640] bridge0: left allmulticast mode
[  853.004875][T16640] bridge0: left promiscuous mode
[  853.238895][T16669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  853.241623][T16669] syzkaller0: entered promiscuous mode
[  853.243382][T16669] syzkaller0: entered allmulticast mode
[  853.249084][T16669] tipc: Resetting bearer <eth:syzkaller0>
[  853.251114][T16671] syzkaller0: left promiscuous mode
[  853.252760][T16671] syzkaller0: left allmulticast mode
[  853.264312][T16672] tipc: Resetting bearer <eth:syzkaller0>
[  853.270671][T16672] tipc: Disabling bearer <eth:syzkaller0>
[  853.476780][T16690] pim6reg1: entered promiscuous mode
[  853.478546][T16690] pim6reg1: entered allmulticast mode
[  853.590078][T16692] __nla_validate_parse: 52 callbacks suppressed
[  853.590089][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11481'.
[  853.667992][T16694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11482'.
[  853.670851][T16694] team0: Mode changed to "broadcast"
[  853.673114][T16694] tipc: Enabled bearer <eth:team0>, priority 0
[  853.759312][T16699] syzkaller0: entered promiscuous mode
[  853.764589][T16699] syzkaller0: entered allmulticast mode
[  853.768239][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11484'.
[  853.768255][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11484'.
[  853.950592][T16717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11488'.
[  853.953516][T16717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11488'.
[  854.042643][T16722] veth49: entered promiscuous mode
[  854.046659][T16722] bond61: (slave veth49): Enslaving as a backup interface with a down link
[  854.081826][T16727] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  854.084879][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11491'.
[  854.113399][T16729] syzkaller0: left promiscuous mode
[  854.115335][T16729] syzkaller0: left allmulticast mode
[  854.173749][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11494'.
[  854.424829][T16741] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11496'.
[  854.427815][T16741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11496'.
[  854.704596][T16762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  854.728562][T16762] syzkaller0: entered promiscuous mode
[  854.730355][T16762] syzkaller0: entered allmulticast mode
[  854.732525][T16762] tipc: Resetting bearer <eth:syzkaller0>
[  854.763035][T16761] tipc: Resetting bearer <eth:syzkaller0>
[  854.790484][T16761] tipc: Disabling bearer <eth:syzkaller0>
[  854.967850][ T7234] C speed is unknown, defaulting to 1000
[  854.969575][ T7234] syz0: Port: 1 Link DOWN
[  854.973496][ T7234] C speed is unknown, defaulting to 1000
[  855.001891][T16771] validate_nla: 6 callbacks suppressed
[  855.001902][T16771] netlink: 'syz.0.11504': attribute type 10 has an invalid length.
[  855.267705][T16774] netlink: 'syz.1.11505': attribute type 2 has an invalid length.
[  855.391967][T16781] tipc: Resetting bearer <eth:syzkaller0>
[  855.422500][T16784] tipc: Resetting bearer <eth:syzkaller0>
[  855.555706][T16794] netlink: 'syz.1.11507': attribute type 9 has an invalid length.
[  855.615711][T16786] netlink: 'syz.1.11507': attribute type 1 has an invalid length.
[  855.659330][T16793] syzkaller0: entered promiscuous mode
[  855.661154][T16793] syzkaller0: entered allmulticast mode
[  855.738243][T16804] netlink: 'syz.1.11513': attribute type 13 has an invalid length.
[  855.741859][T16804] netlink: 'syz.1.11513': attribute type 17 has an invalid length.
[  855.830163][T16804] net_ratelimit: 22 callbacks suppressed
[  855.830174][T16804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  855.877947][T16804] C speed is unknown, defaulting to 1000
[  855.943328][T16818] netlink: 'syz.0.11516': attribute type 10 has an invalid length.
[  855.989805][T16804] lo speed is unknown, defaulting to 1000
[  856.232650][T22846] tipc: Resetting bearer <eth:syzkaller0>
[  856.613614][T16854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.622340][T16854] syzkaller0: entered promiscuous mode
[  856.624156][T16854] syzkaller0: entered allmulticast mode
[  856.661863][T16854] tipc: Resetting bearer <eth:syzkaller0>
[  856.670413][T16853] tipc: Resetting bearer <eth:syzkaller0>
[  856.680579][T16853] tipc: Disabling bearer <eth:syzkaller0>
[  856.752371][T16862] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  856.841829][T16867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.860041][T16867] syzkaller0: entered promiscuous mode
[  856.862540][T16867] syzkaller0: entered allmulticast mode
[  856.869695][T16866] tipc: Resetting bearer <eth:syzkaller0>
[  856.921390][T16866] tipc: Disabling bearer <eth:syzkaller0>
[  856.954919][T16868] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  856.986322][T16868] vlan0: left promiscuous mode
[  856.988645][T16868] erspan0: left promiscuous mode
[  856.995458][T16868] tipc: Resetting bearer <eth:syzkaller0>
[  856.998692][T16868] syzkaller0: left promiscuous mode
[  857.000649][T16868] syzkaller0: left allmulticast mode
[  857.003978][T16868] geneve10: left allmulticast mode
[  857.006726][T16868] team0: left promiscuous mode
[  857.008324][T16868] team0: left allmulticast mode
[  857.010078][T16868] bridge90: left allmulticast mode
[  857.011710][T16868] gtp18: left promiscuous mode
[  857.013442][T16868] gtp18: left allmulticast mode
[  857.018578][T16868] bond58: left promiscuous mode
[  857.032475][T16868] macvlan9: left promiscuous mode
[  857.040133][T16868] bond60: left promiscuous mode
[  857.043114][T16868] bond60: left allmulticast mode
[  857.047371][T16868] veth49: left promiscuous mode
[  857.780585][T16897] netlink: 'syz.0.11536': attribute type 12 has an invalid length.
[  857.787091][T16899] tipc: Resetting bearer <eth:syzkaller0>
[  857.793790][T16899] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  857.812608][T16898] tipc: Resetting bearer <eth:syzkaller0>
[  857.822505][T16897] C speed is unknown, defaulting to 1000
[  857.961253][T16897] lo speed is unknown, defaulting to 1000
[  858.172781][T16934] netlink: 'syz.0.11545': attribute type 20 has an invalid length.
[  858.181575][T16934] netlink: 'syz.0.11545': attribute type 20 has an invalid length.
[  858.257369][T16938] tipc: Resetting bearer <eth:syzkaller0>
[  858.265997][ T5884] lo speed is unknown, defaulting to 1000
[  858.266024][T16940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  858.267915][ T5884] syz2: Port: 1 Link DOWN
[  858.431557][T16961] syzkaller0: refused to change device tx_queue_len
[  858.474898][T16963] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  858.532975][T16973] tipc: Disabling bearer <eth:team0>
[  858.631644][T16980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  858.814197][T16990] __nla_validate_parse: 18 callbacks suppressed
[  858.814208][T16990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11563'.
[  858.834321][ T5884] C speed is unknown, defaulting to 1000
[  858.836705][ T5884] syz0: Port: 1 Link ACTIVE
[  858.838606][ T5884] C speed is unknown, defaulting to 1000
[  858.950487][T16992] netlink: 'syz.0.11564': attribute type 11 has an invalid length.
[  858.953195][T16992] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11564'.
[  858.958231][T16992] syzkaller0: entered promiscuous mode
[  858.960056][T16992] syzkaller0: entered allmulticast mode
[  859.005578][T16996] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  859.050844][T16998] ip6tnl13: entered promiscuous mode
[  859.052633][T16998] ip6tnl13: entered allmulticast mode
[  859.393719][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11569'.
[  859.507005][T17016] tipc: Resetting bearer <eth:syzkaller0>
[  859.519578][T17015] tipc: Resetting bearer <eth:syzkaller0>
[  859.550901][T17019] tipc: Resetting bearer <eth:syzkaller0>
[  859.554579][T17019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11572'.
[  859.585874][T17019] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  859.642222][T17028] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  859.671336][T17032] tipc: Resetting bearer <eth:syzkaller0>
[  859.674150][T17032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  859.697205][T17034] tipc: Resetting bearer <eth:syzkaller0>
[  859.702476][T17036] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11574'.
[  859.767699][T17042] syzkaller0: left promiscuous mode
[  859.769329][T17042] syzkaller0: left allmulticast mode
[  859.771165][T17042] tipc: Resetting bearer <eth:syzkaller0>
[  859.800749][T17044] 8021q: adding VLAN 0 to HW filter on device bond7
[  859.808503][T17044] bond7: (slave macvlan0): Enslaving as a backup interface with a down link
[  859.813760][T17044] tipc: Resetting bearer <eth:syzkaller0>
[  859.816697][T17044] bond7: (slave macvlan0): Releasing backup interface
[  860.011783][T17059] ip6gre4: entered allmulticast mode
[  860.070824][T17065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  860.375719][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  887.677086][T17069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11587'.
[  887.751248][T17074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11589'.
[  887.771084][T17081] netlink: 312 bytes leftover after parsing attributes in process `syz.1.11590'.
[  887.781290][T17085] validate_nla: 8 callbacks suppressed
[  887.781310][T17085] netlink: 'syz.0.11591': attribute type 1 has an invalid length.
[  887.789458][T17088] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11592'.
[  887.813341][T17085] 8021q: adding VLAN 0 to HW filter on device bond62
[  887.817958][T17088] 0{X: renamed from 31{X
[  887.823046][T17088] 0{X: entered allmulticast mode
[  887.827983][T17088] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  887.848433][T17085] veth51: entered promiscuous mode
[  887.853920][T17085] bond62: (slave veth51): Enslaving as an active interface with a down link
[  887.901179][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11593'.
[  887.928575][T17097] 8021q: adding VLAN 0 to HW filter on device bond34
[  887.940685][T17097] bond34: (slave macvlan11): Enslaving as a backup interface with a down link
[  887.946739][T17097] bond61: (slave veth49): Releasing backup interface
[  887.951708][T17097] bond62: (slave veth51): Releasing active interface
[  887.957860][T17097] bond34: (slave macvlan11): Releasing backup interface
[  888.000672][T17104] netlink: 'syz.0.11597': attribute type 4 has an invalid length.
[  888.005901][T17104] netlink: 'syz.0.11597': attribute type 4 has an invalid length.
[  888.343659][T17128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  888.481915][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11603'.
[  888.506611][T17141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11604'.
[  888.623038][T17151] tipc: Resetting bearer <eth:syzkaller0>
[  888.658721][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11607'.
[  888.811218][T17179] netlink: 'syz.2.11613': attribute type 12 has an invalid length.
[  888.829645][T17182] pim6reg1: entered promiscuous mode
[  888.831590][T17182] pim6reg1: entered allmulticast mode
[  888.946366][T17185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11615'.
[  889.006745][ T5715] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  889.052369][T17185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  889.058010][T17185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  889.212874][T17195] IPv6: Can't replace route, no match found
[  889.220834][T17195] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11617'.
[  889.329280][T17204] 8021q: adding VLAN 0 to HW filter on device bond2
[  889.623454][T17220] netlink: 'syz.1.11624': attribute type 1 has an invalid length.
[  889.641679][T17220] can: request_module (can-proto-5) failed.
[  889.815637][T17239] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  889.899023][T17249] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  889.903564][T17249] CPU: 0 UID: 0 PID: 17249 Comm: syz.1.11632 Not tainted syzkaller #0 PREEMPT(full) 
[  889.903582][T17249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  889.903590][T17249] Call Trace:
[  889.903599][T17249]  <TASK>
[  889.903606][T17249]  dump_stack_lvl+0x189/0x250
[  889.903628][T17249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  889.903642][T17249]  ? __pfx__printk+0x10/0x10
[  889.903659][T17249]  ? kernfs_root+0x1c/0x230
[  889.903674][T17249]  ? kernfs_path_from_node+0x2f/0x290
[  889.903687][T17249]  ? kernfs_path_from_node+0x250/0x290
[  889.903697][T17249]  ? kernfs_path_from_node+0x2f/0x290
[  889.903710][T17249]  sysfs_warn_dup+0x8e/0xa0
[  889.903721][T17249]  sysfs_do_create_link_sd+0xc0/0x110
[  889.903742][T17249]  device_add_class_symlinks+0x1cf/0x240
[  889.903759][T17249]  device_add+0x475/0xb50
[  889.903772][T17249]  wiphy_register+0x1ba6/0x28d0
[  889.903793][T17249]  ? __pfx_wiphy_register+0x10/0x10
[  889.903806][T17249]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  889.903820][T17249]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  889.903842][T17249]  ieee80211_register_hw+0x3484/0x4100
[  889.903858][T17249]  ? ieee80211_register_hw+0x14a1/0x4100
[  889.903871][T17249]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  889.903883][T17249]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  889.903899][T17249]  ? __hrtimer_setup+0x187/0x210
[  889.903909][T17249]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  889.903926][T17249]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  889.903946][T17249]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  889.903959][T17249]  ? trace_kmalloc+0x1f/0xd0
[  889.903975][T17249]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  889.903990][T17249]  ? kstrndup+0xbf/0x160
[  889.904006][T17249]  hwsim_new_radio_nl+0xea4/0x1b10
[  889.904021][T17249]  ? __pfx___nla_validate_parse+0x10/0x10
[  889.904042][T17249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  889.904058][T17249]  ? __nla_parse+0x40/0x60
[  889.904074][T17249]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  889.904091][T17249]  genl_family_rcv_msg_doit+0x215/0x300
[  889.904105][T17249]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  889.904121][T17249]  ? bpf_lsm_capable+0x9/0x20
[  889.904136][T17249]  ? security_capable+0x7e/0x2e0
[  889.904162][T17249]  genl_rcv_msg+0x60e/0x790
[  889.904179][T17249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  889.904192][T17249]  ? __kasan_slab_alloc+0x6c/0x80
[  889.904210][T17249]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  889.904226][T17249]  ? __netlink_lookup+0xbd/0x810
[  889.904236][T17249]  ? rcu_is_watching+0x15/0xb0
[  889.904253][T17249]  netlink_rcv_skb+0x208/0x470
[  889.904277][T17249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  889.904291][T17249]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  889.904311][T17249]  ? lock_release+0x4b/0x3e0
[  889.904331][T17249]  ? down_read+0x1ad/0x2e0
[  889.904344][T17249]  genl_rcv+0x28/0x40
[  889.904355][T17249]  netlink_unicast+0x82f/0x9e0
[  889.904370][T17249]  ? __pfx_netlink_unicast+0x10/0x10
[  889.904422][T17249]  ? netlink_sendmsg+0x642/0xb30
[  889.904439][T17249]  ? skb_put+0x11b/0x210
[  889.904452][T17249]  netlink_sendmsg+0x805/0xb30
[  889.904474][T17249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  889.904492][T17249]  ? futex_unqueue+0x22/0x240
[  889.904505][T17249]  ? aa_sock_msg_perm+0xf1/0x1d0
[  889.904516][T17249]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  889.904529][T17249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  889.904544][T17249]  __sock_sendmsg+0x21c/0x270
[  889.904559][T17249]  ____sys_sendmsg+0x505/0x830
[  889.904572][T17249]  ? __pfx_____sys_sendmsg+0x10/0x10
[  889.904585][T17249]  ? import_iovec+0x74/0xa0
[  889.904616][T17249]  ___sys_sendmsg+0x21f/0x2a0
[  889.904629][T17249]  ? __pfx____sys_sendmsg+0x10/0x10
[  889.904643][T17249]  ? futex_wait+0x285/0x360
[  889.904668][T17249]  ? __fget_files+0x2a/0x420
[  889.904687][T17249]  ? __fget_files+0x3a0/0x420
[  889.904709][T17249]  __x64_sys_sendmsg+0x19b/0x260
[  889.904721][T17249]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  889.904735][T17249]  ? rcu_is_watching+0x15/0xb0
[  889.904747][T17249]  ? rcu_is_watching+0x15/0xb0
[  889.904758][T17249]  do_syscall_64+0xfa/0x3b0
[  889.904776][T17249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.904788][T17249]  ? exc_page_fault+0x9f/0xf0
[  889.904802][T17249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.904813][T17249] RIP: 0033:0x7ff70598ebe9
[  889.904827][T17249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.904840][T17249] RSP: 002b:00007ff7068b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  889.904856][T17249] RAX: ffffffffffffffda RBX: 00007ff705bb5fa0 RCX: 00007ff70598ebe9
[  889.904867][T17249] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  889.904876][T17249] RBP: 00007ff705a11e19 R08: 0000000000000000 R09: 0000000000000000
[  889.904885][T17249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.904894][T17249] R13: 00007ff705bb6038 R14: 00007ff705bb5fa0 R15: 00007ffe9ea3cf38
[  889.904910][T17249]  </TASK>
[  890.201405][T17263] tipc: Resetting bearer <eth:vlan0>
[  890.219908][T17263] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  890.243681][T17263] tipc: Resetting bearer <eth:syzkaller0>
[  890.245901][T17263] syzkaller0: left promiscuous mode
[  890.247522][T17263] syzkaller0: left allmulticast mode
[  890.252593][T17263] ip6gre4: left allmulticast mode
[  890.259166][T17263] veth51: left promiscuous mode
[  890.266652][T17263] netlink: 'syz.0.11637': attribute type 1 has an invalid length.
[  890.318495][T17265] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  890.350231][T17272] tipc: Resetting bearer <eth:syzkaller0>
[  890.354960][T17273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  890.358544][T17272] syzkaller0: entered promiscuous mode
[  890.361457][T17272] syzkaller0: entered allmulticast mode
[  890.368157][T17271] tipc: Resetting bearer <eth:syzkaller0>
[  890.399986][T17277] vcan0: entered promiscuous mode
[  890.472152][T17283] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  890.662312][T17318] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  890.667191][T17318] syzkaller0: entered promiscuous mode
[  890.669765][T17318] syzkaller0: entered allmulticast mode
[  890.676012][T17318] sit0: mtu less than device minimum
[  890.825904][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  891.567409][T17326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  891.580555][ T7240] lo speed is unknown, defaulting to 1000
[  891.584159][T17332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  891.595361][ T7240] syz2: Port: 1 Link ACTIVE
[  891.599304][T17332] syzkaller0: entered promiscuous mode
[  891.601641][T17332] syzkaller0: entered allmulticast mode
[  891.616330][T17332] tipc: Resetting bearer <eth:syzkaller0>
[  891.754377][T17344] netlink: 'syz.1.11665': attribute type 1 has an invalid length.
[  891.812120][T17349] netlink: 'syz.1.11665': attribute type 11 has an invalid length.
[  891.823862][T17349] bond74: entered promiscuous mode
[  891.829349][T17349] bond74: entered allmulticast mode
[  891.831751][T17349] 8021q: adding VLAN 0 to HW filter on device bond74
[  891.844927][T17344] bridge74: entered promiscuous mode
[  891.847869][T17344] bridge74: entered allmulticast mode
[  891.849998][T17344] bond74: (slave bridge74): Enslaving as a backup interface with an up link
[  891.925683][ T5862] bond74: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  891.931350][T17361] netlink: 'syz.1.11669': attribute type 10 has an invalid length.
[  891.934341][T17361] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  891.962595][T17363] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  891.986467][T17366] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  892.035303][   T13] bond74: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  892.078784][T17373] tipc: Resetting bearer <eth:syzkaller0>
[  892.081832][T17373] bond74: (slave bridge74): Removing an active aggregator
[  892.090705][T17373] bond74: (slave bridge74): Releasing backup interface
[  892.094629][T17373] bridge74: left promiscuous mode
[  892.097232][T17373] bridge74: left allmulticast mode
[  892.340414][T17329] tipc: Resetting bearer <eth:syzkaller0>
[  892.344125][T17329] tipc: Disabling bearer <eth:syzkaller0>
[  892.407237][T17399] tipc: Resetting bearer <eth:syzkaller0>
[  892.411479][T17399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  892.471042][T17398] tipc: Resetting bearer <eth:syzkaller0>
[  892.482852][T17404] 0{X: left allmulticast mode
[  892.492285][T17404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  892.530496][T17409] netlink: 'syz.1.11683': attribute type 1 has an invalid length.
[  892.849617][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  892.881903][T17431] validate_nla: 1 callbacks suppressed
[  892.881918][T17431] netlink: 'syz.1.11688': attribute type 10 has an invalid length.
[  892.887213][T17431] __nla_validate_parse: 25 callbacks suppressed
[  892.887223][T17431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11688'.
[  892.888402][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11687'.
[  892.889382][T17431] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  893.096281][T17439] tipc: Resetting bearer <eth:syzkaller0>
[  893.744396][T17441] tipc: Resetting bearer <eth:syzkaller0>
[  893.788279][T17441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11691'.
[  893.848035][T17447] tipc: Resetting bearer <eth:syzkaller0>
[  893.849319][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11693'.
[  893.853141][T17449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11693'.
[  893.899505][T17459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11694'.
[  894.131586][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11700'.
[  894.135662][T17480] netlink: 'syz.2.11700': attribute type 20 has an invalid length.
[  894.140106][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11700'.
[  894.143644][T17480] netlink: 'syz.2.11700': attribute type 20 has an invalid length.
[  894.165638][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11701'.
[  894.199318][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11698'.
[  894.208670][T17490] netlink: 'syz.2.11702': attribute type 10 has an invalid length.
[  894.218413][T17490] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  894.233460][T17494] netlink: 'syz.1.11701': attribute type 10 has an invalid length.
[  894.240726][T17494] netlink: 'syz.1.11701': attribute type 10 has an invalid length.
[  894.273499][T17499] netlink: 'syz.2.11704': attribute type 4 has an invalid length.
[  894.281502][ T5808] C speed is unknown, defaulting to 1000
[  894.283704][ T5808] syz0: Port: 1 Link DOWN
[  894.285209][ T5808] C speed is unknown, defaulting to 1000
[  894.374624][T17512] pim6reg1: entered promiscuous mode
[  894.381777][T17512] pim6reg1: entered allmulticast mode
[  894.418768][T17510] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  894.500346][T17512] syzkaller0: left promiscuous mode
[  894.502479][T17512] syzkaller0: left allmulticast mode
[  894.601400][T17512] bond63 (unregistering): Released all slaves
[  894.730103][T17528] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  894.733357][T17528] syzkaller0: entered promiscuous mode
[  894.736577][T17528] syzkaller0: entered allmulticast mode
[  894.746253][T17530] bond2: option mode: unable to set because the bond device is up
[  895.068782][T17563] tipc: Resetting bearer <eth:syzkaller0>
[  895.129010][T17574] netlink: 'syz.2.11723': attribute type 4 has an invalid length.
[  895.132645][T17575] netlink: 'syz.2.11723': attribute type 4 has an invalid length.
[  895.153434][T17568] tipc: Resetting bearer <eth:syzkaller0>
[  895.159503][T17568] syzkaller0: left promiscuous mode
[  895.161317][T17568] syzkaller0: left allmulticast mode
[  895.168037][T17575] netlink: 'syz.2.11723': attribute type 4 has an invalid length.
[  895.171580][ T7235] C speed is unknown, defaulting to 1000
[  895.183669][ T7235] C speed is unknown, defaulting to 1000
[  895.187822][ T7233] C speed is unknown, defaulting to 1000
[  895.190027][ T5808] C speed is unknown, defaulting to 1000
[  895.192308][ T7233] C speed is unknown, defaulting to 1000
[  895.194498][ T1273] C speed is unknown, defaulting to 1000
[  895.201909][T17580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  895.204651][T17580] IPv6: NLM_F_CREATE should be set when creating new route
[  895.208183][T17579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  895.222019][T17580] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  895.231659][T17579] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  895.243622][T17579] syzkaller0: entered promiscuous mode
[  895.246006][T17579] syzkaller0: entered allmulticast mode
[  895.253396][T17583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  895.272054][T17583] syzkaller0: entered promiscuous mode
[  895.274334][T17583] syzkaller0: entered allmulticast mode
[  895.302629][T17583] tipc: Resetting bearer <eth:syzkaller0>
[  895.311874][T17582] tipc: Resetting bearer <eth:syzkaller0>
[  895.316278][T17582] tipc: Disabling bearer <eth:syzkaller0>
[  895.480101][ T5844] cgroup: fork rejected by pids controller in /syz0
[  895.747211][T17617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  895.750171][T17617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  895.753332][T17617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  895.756978][T17617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  895.759518][T17617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  895.776237][T17616] C speed is unknown, defaulting to 1000
[  895.825396][T17616] lo speed is unknown, defaulting to 1000
[  895.896092][T17616] chnl_net:caif_netlink_parms(): no params data found
[  895.932567][T17616] bridge0: port 1(bridge_slave_0) entered blocking state
[  895.935763][T17616] bridge0: port 1(bridge_slave_0) entered disabled state
[  895.938778][T17616] bridge_slave_0: entered allmulticast mode
[  895.942137][T17616] bridge_slave_0: entered promiscuous mode
[  895.946452][T17616] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.949652][T17616] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.952648][T17616] bridge_slave_1: entered allmulticast mode
[  895.956343][T17616] bridge_slave_1: entered promiscuous mode
[  895.975866][T17616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  895.981639][T17616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  895.990317][T17626] tipc: Resetting bearer <eth:syzkaller0>
[  896.014601][T17616] team0: Port device team_slave_0 added
[  896.018593][T17616] team0: Port device team_slave_1 added
[  896.031234][T17616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.033691][T17616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.047221][T17616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.051656][T17616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  896.054171][T17616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  896.063015][T17616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  896.072679][T17626] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  896.091618][T17616] hsr_slave_0: entered promiscuous mode
[  896.094248][T17616] hsr_slave_1: entered promiscuous mode
[  896.103597][T17633] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  896.240571][T17642] netlink: 'syz.1.11740': attribute type 11 has an invalid length.
[  896.339920][T17616] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  896.344606][T17616] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  896.351559][T17616] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  896.355731][T17616] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  896.405187][T17616] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.418156][T17616] 8021q: adding VLAN 0 to HW filter on device team0
[  896.424021][T22844] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.426304][T22844] bridge0: port 1(bridge_slave_0) entered forwarding state
[  896.433401][T22844] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.435776][T22844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  896.569004][T17616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  896.596304][T17616] veth0_vlan: entered promiscuous mode
[  896.601302][T17616] veth1_vlan: entered promiscuous mode
[  896.620507][T17616] veth0_macvtap: entered promiscuous mode
[  896.624703][T17616] veth1_macvtap: entered promiscuous mode
[  896.652983][T17616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  896.669287][T17616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.683946][T26403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.700011][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.703097][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.710025][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.824081][T22845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.828273][T22845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  896.894705][T22845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  896.898481][T22845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  896.933423][   T33] audit: type=1800 audit(1755849730.169:6): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11733" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0
[  896.943771][   T33] audit: type=1804 audit(1755849730.169:7): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11733" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0
[  897.032526][T17697] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.035362][T17697] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.080878][T17697] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  897.096061][T17697] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  897.240590][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.244355][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.252031][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.263561][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  897.521705][T17712] tipc: Trying to set illegal importance in message
[  897.639954][T17725] sctp: [Deprecated]: syz.2.11757 (pid 17725) Use of struct sctp_assoc_value in delayed_ack socket option.
[  897.639954][T17725] Use struct sctp_sack_info instead
[  897.668121][ T7233] lo speed is unknown, defaulting to 1000
[  897.670861][ T7233] syz2: Port: 1 Link DOWN
[  897.674326][ T7233] lo speed is unknown, defaulting to 1000
[  897.677299][ T7233] syz2: Port: 1 Link ACTIVE
[  897.815363][T17617] Bluetooth: hci0: command tx timeout
[  898.589318][T17765] __nla_validate_parse: 22 callbacks suppressed
[  898.589331][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11766'.
[  898.604594][T17768] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  898.659815][T17770] validate_nla: 9 callbacks suppressed
[  898.659829][T17770] netlink: 'syz.1.11768': attribute type 1 has an invalid length.
[  898.671933][T17770] veth51: entered promiscuous mode
[  898.718166][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11768'.
[  898.748241][T17775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11769'.
[  898.780600][T17780] "syz.1.11770" (17780) uses obsolete ecb(arc4) skcipher
[  898.883787][T17782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11771'.
[  899.451533][T17784] tipc: Resetting bearer <eth:syzkaller0>
[  899.472477][T17784] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  899.486936][T17783] tipc: Resetting bearer <eth:syzkaller0>
[  899.511724][T17792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  899.637543][T17791] tipc: Disabling bearer <eth:syzkaller0>
[  899.788235][T17805] netlink: 'syz.2.11778': attribute type 1 has an invalid length.
[  899.799316][T17805] smc: adding net device bond0 with user defined pnetid SYZ2
[  899.804437][T17805] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.882736][T17811] tap0: tun_chr_ioctl cmd 1074025677
[  899.884693][T17811] tap0: linktype set to 805
[  899.895327][T17617] Bluetooth: hci0: command tx timeout
[  899.971200][T17815] netlink: 'syz.2.11782': attribute type 1 has an invalid length.
[  899.991842][T17815] netlink: 'syz.2.11782': attribute type 4 has an invalid length.
[  900.018537][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11782'.
[  900.027171][T17815] 8021q: adding VLAN 0 to HW filter on device bond57
[  900.046447][T17818] bond7: option mode: unable to set because the bond device is up
[  900.088323][T22845] tipc: Resetting bearer <eth:syzkaller0>
[  900.110775][T17828] netlink: 'syz.2.11786': attribute type 1 has an invalid length.
[  900.114169][T17828] netlink: 'syz.2.11786': attribute type 2 has an invalid length.
[  900.171687][T17833] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.11788'.
[  900.192019][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11789'.
[  900.286761][T17847] netlink: 'syz.2.11791': attribute type 13 has an invalid length.
[  900.289227][T17847] netlink: 'syz.2.11791': attribute type 17 has an invalid length.
[  900.360595][T17858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11794'.
[  900.363528][T17858] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11794'.
[  900.379155][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11796'.
[  900.546386][T17861] tipc: Resetting bearer <eth:syzkaller0>
[  900.562282][T17866] tipc: Resetting bearer <eth:syzkaller0>
[  900.567850][T17849] netdevsim0: mtu greater than device maximum
[  900.569797][T17854] C speed is unknown, defaulting to 1000
[  900.610669][T17854] lo speed is unknown, defaulting to 1000
[  901.529642][T17882] syzkaller0: left promiscuous mode
[  901.531403][T17882] syzkaller0: left allmulticast mode
[  901.533580][T17882] tipc: Resetting bearer <eth:syzkaller0>
[  901.604556][T17891] netlink: 'syz.2.11803': attribute type 2 has an invalid length.
[  901.635049][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  901.975497][T17617] Bluetooth: hci0: command tx timeout
[  902.458803][T17909] IPVS: length: 163 != 206581052192
[  902.465019][T17909] netlink: 'syz.0.11807': attribute type 4 has an invalid length.
[  902.540384][T17917] vlan0: entered allmulticast mode
[  902.564333][T17921] tipc: Resetting bearer <eth:syzkaller0>
[  902.588454][T17921] syzkaller0: entered promiscuous mode
[  902.590870][T17921] syzkaller0: entered allmulticast mode
[  902.655020][T17920] tipc: Resetting bearer <eth:syzkaller0>
[  903.141909][T17951] veth3: entered promiscuous mode
[  903.268275][T17970] tipc: Started in network mode
[  903.269922][T17970] tipc: Node identity f69a2bf753c8, cluster identity 4711
[  903.272422][T17970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  903.275262][T17970] syzkaller0: entered promiscuous mode
[  903.277159][T17970] syzkaller0: entered allmulticast mode
[  903.281304][T17970] virt_wifi0: mtu less than device minimum
[  903.299442][T17973] tipc: Resetting bearer <eth:syzkaller0>
[  903.304629][T17973] tipc: Disabling bearer <eth:syzkaller0>
[  903.409738][ T6050] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  903.413860][ T6050] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  903.425317][ T6050] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  903.438347][ T6050] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  903.504353][T22844] tipc: Resetting bearer <eth:syzkaller0>
[  903.512792][T17984] syzkaller0: entered promiscuous mode
[  903.518032][T17984] syzkaller0: entered allmulticast mode
[  903.548970][T17987] pim6reg1: entered promiscuous mode
[  903.550799][T17987] pim6reg1: entered allmulticast mode
[  903.603042][T17989] __nla_validate_parse: 23 callbacks suppressed
[  903.603059][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11830'.
[  918.762880][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  918.767501][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  918.769735][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  918.772500][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  918.774834][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  920.348750][T17617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  920.351105][T17617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  920.353338][T17617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  920.355809][T17617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  920.358120][T17617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  920.610290][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  920.613404][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  920.622094][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  920.625476][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  920.628521][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  920.855634][ T5855] Bluetooth: hci3: command tx timeout
[  922.375468][ T5855] Bluetooth: hci4: command tx timeout
[  922.700754][ T5855] Bluetooth: hci5: command tx timeout
[  922.935597][ T5855] Bluetooth: hci3: command tx timeout
[  924.457863][ T5855] Bluetooth: hci4: command tx timeout
[  924.775621][ T5855] Bluetooth: hci5: command tx timeout
[  925.015459][ T5855] Bluetooth: hci3: command tx timeout
[  926.535620][ T5855] Bluetooth: hci4: command tx timeout
[  926.855559][ T5855] Bluetooth: hci5: command tx timeout
[  927.097112][ T5855] Bluetooth: hci3: command tx timeout
[  928.615513][ T5855] Bluetooth: hci4: command tx timeout
[  928.935744][ T5855] Bluetooth: hci5: command tx timeout
[ 1008.615130][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1008.617669][    C1] rcu: 	1-...!: (1 GPs behind) idle=d534/1/0x4000000000000000 softirq=295020/295021 fqs=1458
[ 1008.622063][    C1] rcu: 	(t=10501 jiffies g=182369 q=9144 ncpus=2)
[ 1008.624497][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 7582 jiffies! g182369 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1008.628469][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=74153
[ 1008.631137][    C1] rcu: rcu_preempt kthread starved for 7584 jiffies! g182369 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 1008.635068][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1008.638771][    C1] rcu: RCU grace-period kthread stack dump:
[ 1008.641128][    C1] task:rcu_preempt     state:I stack:27224 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1008.646203][    C1] Call Trace:
[ 1008.647554][    C1]  <TASK>
[ 1008.648559][    C1]  __schedule+0x1798/0x4cc0
[ 1008.650049][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1008.651636][    C1]  ? __pfx___schedule+0x10/0x10
[ 1008.653429][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1008.655551][    C1]  ? schedule+0x91/0x360
[ 1008.657088][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1008.658801][    C1]  ? lock_release+0x4b/0x3e0
[ 1008.660288][    C1]  schedule+0x165/0x360
[ 1008.661588][    C1]  schedule_timeout+0x12b/0x270
[ 1008.663131][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1008.665018][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1008.666511][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1008.668182][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1008.669925][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1008.671459][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1008.673371][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1008.674956][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1008.676510][    C1]  ? finish_swait+0xcd/0x1f0
[ 1008.677870][    C1]  rcu_gp_kthread+0x99/0x390
[ 1008.679545][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1008.681275][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1008.682964][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1008.684497][    C1]  kthread+0x711/0x8a0
[ 1008.685754][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1008.687377][    C1]  ? __pfx_kthread+0x10/0x10
[ 1008.688751][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.690371][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1008.692378][    C1]  ? __pfx_kthread+0x10/0x10
[ 1008.694119][    C1]  ret_from_fork+0x3fc/0x770
[ 1008.695955][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1008.697877][    C1]  ? __switch_to_asm+0x39/0x70
[ 1008.699721][    C1]  ? __switch_to_asm+0x33/0x70
[ 1008.701580][    C1]  ? __pfx_kthread+0x10/0x10
[ 1008.703286][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1008.704848][    C1]  </TASK>
[ 1008.705847][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1008.707746][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1008.709589][    C0] NMI backtrace for cpu 0
[ 1008.709613][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1008.709629][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1008.709639][    C0] RIP: 0010:kasan_check_range+0xa5/0x2c0
[ 1008.709670][    C0] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 de 01 00 00 <49> ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd 83 e5 07 0f 84 b5
[ 1008.709682][    C0] RSP: 0018:ffffc90000007888 EFLAGS: 00000246
[ 1008.709696][    C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff8b7c1dbc
[ 1008.709706][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888108f918c0
[ 1008.709714][    C0] RBP: ffffc900000079b8 R08: ffff888108f918c3 R09: 1ffff110211f2318
[ 1008.709724][    C0] R10: dffffc0000000000 R11: ffffed10211f2318 R12: 0000000000000001
[ 1008.709734][    C0] R13: 0000000000000001 R14: ffffed10211f2319 R15: 1ffff110211f2318
[ 1008.709743][    C0] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[ 1008.709754][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1008.709762][    C0] CR2: 0000560b1676ee77 CR3: 0000000109780000 CR4: 00000000000006f0
[ 1008.709796][    C0] Call Trace:
[ 1008.709805][    C0]  <IRQ>
[ 1008.709815][    C0]  native_queued_spin_lock_slowpath+0xbc/0x8e0
[ 1008.709849][    C0]  ? __pfx_native_queued_spin_lock_slowpath+0x10/0x10
[ 1008.709871][    C0]  queued_spin_lock_slowpath+0x43/0x50
[ 1008.709891][    C0]  do_raw_spin_lock+0x21f/0x290
[ 1008.709908][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1008.709921][    C0]  ? __pfx_sched_balance_rq+0x10/0x10
[ 1008.709944][    C0]  __xfrm_state_delete+0xba/0xca0
[ 1008.709965][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1008.709980][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1008.709996][    C0]  xfrm_timer_handler+0x18f/0xa00
[ 1008.710017][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1008.710034][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1008.710049][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1008.710066][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1008.710083][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1008.710100][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1008.710115][    C0]  __hrtimer_run_queues+0x52c/0xc60
[ 1008.710174][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1008.710188][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1008.710205][    C0]  hrtimer_run_softirq+0x187/0x2b0
[ 1008.710221][    C0]  handle_softirqs+0x286/0x870
[ 1008.710235][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 1008.710249][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1008.710264][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1008.710281][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 1008.710294][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1008.710310][    C0]  irq_exit_rcu+0x9/0x30
[ 1008.710321][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1008.710341][    C0]  </IRQ>
[ 1008.710346][    C0]  <TASK>
[ 1008.710352][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1008.710368][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1008.710381][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1008.710392][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[ 1008.710403][    C0] RAX: cbe457c52b5c4400 RBX: ffffffff819683b8 RCX: cbe457c52b5c4400
[ 1008.710415][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[ 1008.710424][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[ 1008.710433][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[ 1008.710443][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[ 1008.710454][    C0]  ? do_idle+0x1e8/0x510
[ 1008.710467][    C0]  ? do_idle+0x1e8/0x510
[ 1008.710479][    C0]  default_idle+0x13/0x20
[ 1008.710492][    C0]  default_idle_call+0x74/0xb0
[ 1008.710503][    C0]  do_idle+0x1e8/0x510
[ 1008.710516][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1008.710532][    C0]  cpu_startup_entry+0x44/0x60
[ 1008.710543][    C0]  rest_init+0x2de/0x300
[ 1008.710554][    C0]  start_kernel+0x3a9/0x410
[ 1008.710570][    C0]  x86_64_start_reservations+0x24/0x30
[ 1008.710589][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1008.710607][    C0]  common_startup_64+0x13e/0x147
[ 1008.710628][    C0]  </TASK>
[ 1008.711599][    C1] CPU: 1 UID: 0 PID: 17989 Comm: syz.0.11830 Not tainted syzkaller #0 PREEMPT(full) 
[ 1008.711611][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1008.711617][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x11/0x70
[ 1008.711633][    C1] Code: 5b e9 73 98 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 50 a0 92 <65> 8b 15 e8 a4 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[ 1008.711640][    C1] RSP: 0018:ffffc9000482f0d8 EFLAGS: 00000287
[ 1008.711649][    C1] RAX: ffffffff8a21a2e2 RBX: 0000000001000000 RCX: ffff888040521cc0
[ 1008.711656][    C1] RDX: ffff888040521cc0 RSI: 0000000003000000 RDI: 0000000001000000
[ 1008.711661][    C1] RBP: ffffc9000482f230 R08: 0000000000000000 R09: 0000000000000000
[ 1008.711666][    C1] R10: dffffc0000000000 R11: fffff52000905e0c R12: dffffc0000000000
[ 1008.711672][    C1] R13: ffff888039267a80 R14: 0000000003000000 R15: ffffc9000482f6a0
[ 1008.711678][    C1] FS:  00007f60abbc66c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[ 1008.711685][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1008.711690][    C1] CR2: 00007f10f1e21fc8 CR3: 000000010f83e000 CR4: 00000000000006f0
[ 1008.711713][    C1] Call Trace:
[ 1008.711719][    C1]  <TASK>
[ 1008.711723][    C1]  xfrm_alloc_spi+0x4b2/0xf30
[ 1008.711736][    C1]  ? xfrm_alloc_spi+0x2a0/0xf30
[ 1008.711747][    C1]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[ 1008.711755][    C1]  ? xfrm_find_acq+0x87/0xa0
[ 1008.711764][    C1]  xfrm_alloc_userspi+0x70b/0xc90
[ 1008.711777][    C1]  ? apparmor_capable+0x137/0x1b0
[ 1008.711787][    C1]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[ 1008.711797][    C1]  ? __nla_parse+0x40/0x60
[ 1008.711810][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1008.711820][    C1]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1008.711835][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1008.711845][    C1]  ? kasan_save_track+0x4f/0x80
[ 1008.711855][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1008.711864][    C1]  ? trace_contention_end+0x39/0x120
[ 1008.711871][    C1]  ? __mutex_lock+0x335/0x1350
[ 1008.711884][    C1]  netlink_rcv_skb+0x208/0x470
[ 1008.711897][    C1]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1008.711906][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1008.711918][    C1]  ? lock_release+0x4b/0x3e0
[ 1008.711929][    C1]  ? net_generic+0x1e/0x240
[ 1008.711936][    C1]  ? net_generic+0x1e/0x240
[ 1008.711944][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1008.711955][    C1]  xfrm_netlink_rcv+0x79/0x90
[ 1008.711963][    C1]  netlink_unicast+0x82f/0x9e0
[ 1008.711975][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[ 1008.711984][    C1]  ? netlink_sendmsg+0x642/0xb30
[ 1008.711994][    C1]  ? skb_put+0x11b/0x210
[ 1008.712002][    C1]  netlink_sendmsg+0x805/0xb30
[ 1008.712014][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1008.712029][    C1]  ? futex_unqueue+0x22/0x240
[ 1008.712038][    C1]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1008.712045][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1008.712054][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1008.712065][    C1]  __sock_sendmsg+0x21c/0x270
[ 1008.712076][    C1]  ____sys_sendmsg+0x505/0x830
[ 1008.712086][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1008.712095][    C1]  ? import_iovec+0x74/0xa0
[ 1008.712105][    C1]  ___sys_sendmsg+0x21f/0x2a0
[ 1008.712113][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1008.712122][    C1]  ? futex_wait+0x285/0x360
[ 1008.712166][    C1]  ? __fget_files+0x2a/0x420
[ 1008.712179][    C1]  ? __fget_files+0x3a0/0x420
[ 1008.712191][    C1]  __x64_sys_sendmsg+0x19b/0x260
[ 1008.712200][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1008.712210][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1008.712218][    C1]  do_syscall_64+0xfa/0x3b0
[ 1008.712232][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.712239][    C1]  ? exc_page_fault+0x9f/0xf0
[ 1008.712249][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1008.712257][    C1] RIP: 0033:0x7f60aad8ebe9
[ 1008.712267][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1008.712274][    C1] RSP: 002b:00007f60abbc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1008.712282][    C1] RAX: ffffffffffffffda RBX: 00007f60aafb5fa0 RCX: 00007f60aad8ebe9
[ 1008.712288][    C1] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 000000000000000a
[ 1008.712293][    C1] RBP: 00007f60aae11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1008.712298][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1008.712303][    C1] R13: 00007f60aafb6038 R14: 00007f60aafb5fa0 R15: 00007ffda2245678
[ 1008.712312][    C1]  </TASK>

VM DIAGNOSIS:
08:04:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff888108f918c0 RCX=ffffffff8b7c1dbc RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888108f918c0 RBP=ffffc900000079b8 RSP=ffffc900000078c0
R8 =ffff888108f918c3 R9 =1ffff110211f2318 R10=dffffc0000000000 R11=ffffed10211f2319
R12=1ffff92000000f20 R13=0000000000000001 R14=ffffc90000007920 R15=1ffff110211f2318
RIP=ffffffff8b7c1daf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560b1676ee77 CR3=0000000109780000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055559167e490
XMM02=0016000000000015 080e800300000000 XMM03=0000000000000000 0000000000000001
XMM04=0000000000000000 0000000000000011 XMM05=000055559169d56a 000055559169cf20
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 000000000003bf12
XMM08=0000000000000000 0000000000000016 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99def670 RSP=ffffc900001e0510
R8 =ffff888020c80237 R9 =1ffff11004190046 R10=dffffc0000000000 R11=ffffffff854f1bb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1c27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f60abbc66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f10f1e21fc8 CR3=000000010f83e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f60aae12e53
XMM06=0000000000000000 00007f60aae12e4d XMM07=0000000000000000 00007f60aae12e61
XMM08=0000000000000000 00007f60aae12ee7 XMM09=0000000000000000 00007f60aae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
