last executing test programs:

2.069427464s ago: executing program 1 (id=781):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
sendto$isdn(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x22, 0xff, 0x4, 0xd, 0x81}, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x421, 0x70bd2d, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x5}]}}}]}, 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000001000000010001000200000000080100", @ANYRES32=r6, @ANYBLOB="76f7ffff00000000000000800000000000000000", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0500000003000000010000000400"/24, @ANYRES32=r8, @ANYBLOB], 0x50)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a00001d000000060001000000000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x20)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4048004)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x120, 0x0, 0x0)

1.959453451s ago: executing program 1 (id=784):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x80ff) (async, rerun: 64)
r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f000000000000000c000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r3], 0x78}}, 0x0)

1.856680668s ago: executing program 1 (id=786):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x304}}, 0x0)
ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000540))
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500))
write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$rds(0x15, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
socket(0x2, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0)
splice(r6, 0x0, r4, 0x0, 0xffffffff, 0x0)
write(r2, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

1.089989901s ago: executing program 0 (id=796):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct]}, {0x0, [0x30, 0x2e, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="d3070000020000000400"/22], 0x50)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

988.227767ms ago: executing program 1 (id=797):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000700)=0x4, 0x4) (async)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108)

986.085782ms ago: executing program 0 (id=798):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000ffffc0fe08000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

984.268439ms ago: executing program 1 (id=799):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffd76, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000414010028bd70000300df25"], 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x7ff, 0x4) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e2d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000300", @ANYRES32=r8], 0x34}}, 0x4008000) (async)
read(r1, &(0x7f0000000040)=""/60, 0x3c)

983.839603ms ago: executing program 0 (id=800):
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @rose, @bcast, @null, @null, @remote, @rose, @null]}, &(0x7f0000000080)=0x48, 0x80000)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x7, 0x9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x1000, 0xf7, &(0x7f0000000100)="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", &(0x7f0000001100)=""/247, 0xb61a, 0x0, 0x70, 0xb1, &(0x7f0000001200)="18a628f000d6871263721dd7da2c93f7986485b2a36976e75d1decb484c60c063cc49c34b1e2ed1a169e616048172411334ac509eff2cc35deb0d9bb2dc18b9a1348d53ee72feddb40f0f2fb9382e06e4aed1f00f0e9f94c361646a8e187b581acaaf88b13f71ff811aceb1ff2dfc286", &(0x7f0000001280)="9857f9bcd7a476a4ee311843ebf653750fc9894fca777ac0bb609c52536f507199de5afe9ad71c146961bde08c9f0a72edf8ace40ad00f9a8dd288af83176173e22380a1df6bcc6e47243b8b137f9c0a8f0e2c7aa0b56c1341e5b8bf44cba66f926b596320af871dd75efb8136ec4e637f8e097739a8446066a9b5327c6a9c19884ca3ba943d5b542a43436690d168f099fe710b5e937a31c9067e74c3ba22796c697e868d45558d991afadb91489324d6", 0x3}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000013c0)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'sit0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'sit0\x00', <r2=>0x0})
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x0, @multicast1}, &(0x7f0000001480)=0x10, 0x80800)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000014c0)='bic\x00', 0x4)
pipe(&(0x7f0000001500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000001540)=0x3, 0x4)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001580)={0x2}, 0x4)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)=@delqdisc={0x108, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0x4}, {0xd}, {0x3, 0x3}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf0ec}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x24008004}, 0x40)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f00000017c0)={'filter\x00', 0x4}, 0x68)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', r5}, 0x18) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00', r5}, 0x18)
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000018c0)={0x0, 0x0, "cf637ee3f95236b4ebcfbe08d5c2bed2"}) (async)
ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f00000018c0)={0x0, 0x0, "cf637ee3f95236b4ebcfbe08d5c2bed2"})
close(r3) (async)
close(r3)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000001900)={'raw\x00', 0x2, [{}, {}]}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001980)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000019c0)={0x1d, r6, 0x1, {0x2, 0x1, 0x1}, 0x1}, 0x18)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001a40), r5)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x78, r7, 0x400, 0x70bd25, 0xcf, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c085}, 0x4001) (async)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x78, r7, 0x400, 0x70bd25, 0xcf, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c085}, 0x4001)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001b80)={<r8=>0x0, 0x9, 0x10, 0x10000}, &(0x7f0000001bc0)=0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001c00)={r8, 0x89ba, 0x5}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c40)={@multicast2, 0x0, 0x0, 0x70, 0x0, [{@multicast1}, {@multicast2}, {@empty}, {@loopback}, {@multicast1}, {@multicast1}, {@local}]}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000001cc0)={'sit0\x00', &(0x7f0000001c40)={@multicast2, 0x0, 0x0, 0x70, 0x0, [{@multicast1}, {@multicast2}, {@empty}, {@loopback}, {@multicast1}, {@multicast1}, {@local}]}})
connect$l2tp6(0xffffffffffffffff, &(0x7f0000001d00)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x185b, 0x2}, 0x20)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001d40), &(0x7f0000001d80)=0x4)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000001dc0))
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001e00)={r9}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001e00)={<r10=>r9})
bind$unix(r10, &(0x7f0000001e40)=@file={0x0, './file0\x00'}, 0x6e) (async)
bind$unix(r10, &(0x7f0000001e40)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f0000001ec0)={@empty, @multicast1}, 0x8)

897.098919ms ago: executing program 0 (id=801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)={0x34, r1, 0x1, 0x70bd22, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044014) (async)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48)
close(r5) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f0000006840), 0x0}, 0x20)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) (async)
sendto$inet(r4, &(0x7f0000000180)="5cc9b33e0af3f1f0a926ea5af86bb4fcaeffe974929d516677a7dbaa17cbe176c6c44d68926bd4f64a3fa654395d0d73adc7561f2175f6281dee42be80cca092c9fc9ec58e2dd847df71ea19e8a3d4d135d5c3d48578044c26b8db1206ee3022252926ccc5d11ced2629900ec57dac8d339b7e0d7483e271541d2b45df696a18d3bdb2066a0eeda70b073e6e13f795b4422095f866067c00d1e592b083672e0c3e54052bd11aa15eb85fbb2e232fb058a483b425525153e4b49a8ebcffc41a56b6fd9b8e", 0xc4, 0x4000, 0x0, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x31d}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x510}], 0x1) (async)
sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

896.527938ms ago: executing program 0 (id=802):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5}, 0xe)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r9, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="6204", 0x2}], 0x1}, 0x4008001)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r12, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8)
setsockopt(r12, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x1b, 0x0, &(0x7f0000000180))
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r11, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}}, 0x20)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})

268.830942ms ago: executing program 2 (id=805):
r0 = socket(0x5, 0x3, 0x7)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x89, 0x0, &(0x7f0000000080))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)=""/87, &(0x7f0000000000)=0x57)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}})

168.571946ms ago: executing program 2 (id=806):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10)
write(r2, &(0x7f0000000200)="240000001a005f04dff8f40700090401802020000000c1428aebd4961cc3000800010000", 0x24)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x60, r6, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0)

166.947549ms ago: executing program 2 (id=807):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e64"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x800, 0x70bd2b, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}}, 0x20000000)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x42, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x8, 0x2, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
close(r4)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000180)='\x00', 0x1)

98.390268ms ago: executing program 1 (id=808):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x7, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r4)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000f00000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000900090603000000feff"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r8], 0x3c}}, 0x0)
r9 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x24)
bind$can_raw(r9, &(0x7f0000000340)={0x1d, r10}, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
gettid()

95.930428ms ago: executing program 2 (id=809):
r0 = socket(0x23, 0x2, 0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000467910000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r0, 0xfffffffffffffffd, 0x40004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x0, 0x10}}}, 0x24}}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) (async)
sendmsg$nl_route(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) (async)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x100)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r6, 0x25, 0x2, @void}, 0x10)

806.198µs ago: executing program 0 (id=810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001888ff00000000000000000000000000000000ff028dffffff000000000000000000014f194e7b2a14bf4e8b3ccda096058389725fab2000189078"], 0x52)

440.489µs ago: executing program 2 (id=811):
r0 = socket(0x11, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe0b85334efa1736d}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x4044890)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @remote}, &(0x7f0000000040)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4, '\x00', r2}, 0x94)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x4d, 0x0, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x9, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="9031b3611cbe12a9de2bb74dbb19af0c5791d874ec4860fd60d5820d0eb055f053f6851dee723d26daa430bd72f7ef32cc263920b27a7569bea43b0596bbe1829e802cd3e084fa8e4cc71742b6143dd2b8046428b930404f77924d55291aacdcc820b22d86ff3f9f317f35c484fe404d76d85bb0196cb452b9cce3e1bc081f6fd8dd0b205ab549429a30f5e238afc2aa33ae5b41f037d1ffd55f77efe41e2ecf98e08596b27a694b2332fe02101bc70ca0cb26b5828f96166a5dcbebc4a49f5668dd765a2b112eb42745f80d4de1dec3599966c49a3fc1725eeb", @ANYRESHEX, @ANYBLOB="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"/4111], 0x80}, 0x1, 0x7}, 0xc014)

0s ago: executing program 2 (id=812):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40010)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x44844)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x4000010)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={<r7=>r6})
syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000540)={0x0, @adiantum, 0x0, @desc1})
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0xc004)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r7)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000700)={0x0, 'wg0\x00', {}, 0x8})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000780)={@broadcast, @rand_addr, <r12=>0x0}, &(0x7f00000007c0)=0xc)
sendmsg$sock(r11, &(0x7f0000000e00)={&(0x7f0000000800)=@ll={0x11, 0x1b, r12, 0x1, 0x4}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)="a79c7dd67b922ede1e16b606d27b81cb6a1d81088031b2c16307f3324d536ddae2492fcd9cda31d07b7188eea3c3f009457d7779232f67652367c03d7733080b062828a8d1e643c48c06b2ded2f97d17d6123778d239aa38465aef07cc5aa94a984ce54e71ab0179d1e3d943cade4d409e604258fa33ef7d24b5b6c5a44514ed2a", 0x81}, {&(0x7f0000000940)="37b7b36874f061abdb6621c4539575cef041e8eb82b98288d168c5276c2aeb58d0a69b1cdedf42d2d5a584dd5ddeaa92d5680fa67568be5e102e96aba0a20f213b78a3d91915f0e05bee4d63893398569905f4298aee87671c0288b6be3e1c714c69f6c94ec59ec1f585f37b52365a3265bbc555d7fc3e8878cb5283ae0342614d5f49387580926cfb9227a24c52e330aa069040af4958e12f0c0bcc3ac21e58aa184a7e938531c7dcead49c8012f6a2b8a362ed5b6d69a83e97d957458bf04f0a7ac75facbd2ed8f8c772a941b85c0fb0fb4b0c580c63e3c6", 0xd9}, {&(0x7f0000000a40)="9bbd6488ce5d2223720ba3c59a73755f3674b570f6391b2f74b5540f79d507d5ff234efbd58b59c1bafa383ee86774799213ff5fe6fa3b3f75146f5cbb3e9dbf51b52cdce57f2772dc9b91f9b33ee830785a55066e2de7d9d2b6c1c36e2521301529", 0x62}, {&(0x7f0000000ac0)="682f4cd572ea57ac927adb6f27ce156d7205887b4a5e03fbaab37877478aa941210833b2e782494da257cc2555f1f5c313079a2002f796a8d80c7932be1cf3aa6f5cc85d3170e2a6ec7a9da7da86155099b5f41884", 0x55}, {&(0x7f0000000b40)="e37b631c23e4dc48009a75adb5baa2c9640aeb98df3c1511a30347123052104ef8e1a076a61f44ff522da9d0b07a72cfce8243ffdf495c56bfa07fa9565383f6b9481a46bf8ed7a1dfda6a220f13355e48e5027f1cc6e4ba811e862b653ef019084d58a96641514a280997a1fda3f7d36adf4d52779c712b3df17d297a38b072f0727ba2babcd0462abec74627f24255395574d2882efe168fb76dcccca25e535c88817d5ea9c6b170a7", 0xaa}, {&(0x7f0000000c00)="fa8ba2bb65c091588103af44e653018c388f9dc080a4c30a0105cd21db7978dcf5396a1c6e060eed157aeb2a0c8aec346f54b113cac4f710aec19b5f30e57a62d4cc3c2db56a58dc50f15cb915d2301c9081103d971a40b7fbc28df473ce090965025af7470497b47a7ee13c292463341dd7a4521bc829b450887e076d510db1f24795427333d7d1d88400c4a704a60f38f23d21513146414096bba0f716ff3bc24f151d5b956c29ef38de", 0xab}], 0x6, &(0x7f0000000d40)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x90}, 0x4008005)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'bond_slave_1\x00', <r13=>0x0})
syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r1)
getsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000f40), r7)
socket$nl_generic(0x10, 0x3, 0x10)
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x28, &(0x7f0000000f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@generic={0x80, 0xd, 0x9, 0x6, 0xad93}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf729}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x296}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x5b, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0x1], &(0x7f0000001180)=[{0x4, 0x4, 0x3, 0x6}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002540)={r14, 0x0, 0xac, 0xcf, &(0x7f0000001280)="629c4ae5ac755c107b3a2f7e45c01651ccdc4673cd6c1df027d184c8d50c148143e5203c092fbe21c698031c77d2ffb0078fe585a43f9e1900a902647a96182c32cfe874629d0b015c46c20cc2157f62508a318e825259c4d6a603be87ef65ed4d0fe5cdf327fef54d72ba960143360245b85bbd5ea37281b7ddf06745556b0a62fab49e6b2fb1d4172a21d31763b4b8836817cf7e2dca3cbdd33b98e9ec8b052e3179c7dd6e694cbff4973b", &(0x7f0000001340)=""/207, 0x3, 0x0, 0x1000, 0xe3, &(0x7f0000001440)="c0876eb76222ac1dc0db97e15e4348d6a550823a887c86bfade457e896193ddbfad84705ad4a3cda10f3706712962db2a905690b29728fbc01ce776df40ff1e12e42429ea12338a6e89e7b2c13a3ec609adc03bf1a7f59dad0ba765d965d82959bda3e9fcdc9c189df6368e9ccc9abd00859176ac3e226a0a075d9e93fac42f574da9503ac8e357e150d7d70c478019258062661550fd539e33a8aee6ed3e43da9f17fc6c1be2b03349a0c6526b73110a65e0c71c5a67a2ce259b1d003435bf95e15e72c517256fa4e0459d7e9cc536f3e1828241082e8bd0ebc119a332d46386e20f1d2d26e28c463b56b097c171c911128aa39e6f727056116ea377d9c1ec383e8ca34a4a82b616af1c7be8fcce579144e62b7a122218d9083b1032e0440a1fd8d30eb3ccb6ba1cda5fe236711d81c6bb338f24acc6ca2ff47788a2f1bfb6fccbb0df8e96a6973988220f702759420fcb52c7fb00bb015735d302c3ed27494d81a0792aae9fb0821bbf456e847deea4b64b7c01fe8e4822aa77631766304a07f9f21e0681a0115c3b5dbe0d4808c496df285a60140be118f5a2117fcd584f65c67a89edf702454e645d6d4d41a48414d252caf45067e4254007652d8f3234e01ce30913a9bb28fae253ed20c0d72191a25adea49c94555ab56943e5c8d0cf1893fc12b898b1801ea418bfa0e95ca513aca67b3df9584a826b43f9d97ff6a7656e7ceaef76ee78cf2af25d00471c31cb9d05b85caa6ec6263b0aa227cee6f57facb2b531ee6788d98f37e66a19934f17615b852bf532e2059500e16f2e63ea2582886748b34b9f8a82e79f2510c8a64bc8bafa5338acf399a3aaa5e6b359554a76b6c8fa25c2871f10b3f8f7087a919e55b55900e31a8a9ec79a48a702623d9c3926a650b5bc2f5759b0f89c8a416aea6e9ab4a52f7d703e33b22cfefc562ba8bb09027c939e7a7af0b8635bae8351ed36027c21d394bf40f5ca36c3256afe41c8cc4f978068f5ea5bcea431c84c32ca71838f374603b5305880f7e7f4f02e7f4b02959797e475b6328c759b65e2065f8b0a1173b5ec5fb3b752ffacdf3d37443ba9128710a98b84233196654c80f10d562599454729ac9e5a47f28135f6b2231a0fdacf720a13b66bd8794efcf5eae7023ef3cd507a4864aa98db193e8d2a31167e78bc0e71891d6c55a8b2d0e784fcb02616d6bb23a1b0e9265f78e70cf0d4d86bf534e5eeb3a2b61f9392b50aea9a309220db2c4eab9f4a20e6d94b029a6a71547925b7ad2764feb9c0b9b48428e8cfc85b53277fec23dee263ea5c313e269b4e195b4bc6a70850433254584e65e6fb83040327a4f5b04e038c5082e7c0e39daf2d2ab18416cb004b38bb41141fb49d34ce4e15d88ba051cee60a6202542ccc9f8a10e7575fe08e068e3ff0b9970d979562a9a378fd7b5853fc32e3b557ccca14e81885fb3ab41124a0314153421996f69d62ff04decb8b986f259781710df05f3932f060249ee24778c3686798647df8b46753d764c91fafce422fbc1e7ee324e78c7ed098ec7d6a39c475e390d6d781ac62044903f451662f28a9885ce3799b058db533f2dca33636969528c89dea80b8afa3ac04eead68376289aa8a974ce5c41f42a5182ad7209b007c9a19fbb5f6706e68a9a2cc75d018ff1daea9bb6137010e9ec6fa6f0b7e0774b2f28cf6e1859141f84f604aa2f639e5adbd98dcadc48d29d5beb40664470a84db14861698f6b000354c12ee6548f24b2d8ea048db3385840a453fe5614a5b605bdcfcc2c77134b98e678593a2bb058a961c6252069a1206481de3fe23bbbfaac645a28ddf3646cbad354c308e57f7c5ac4fa50ad5e68e2ddbe4ef2a9a3fca2771da5bf2817f867f46b5907d1fea2f6db386d6d36703805c5bd99d9745854b3434260ba978f4a89d78ce94503f7d071901ad27cc7ffa18cd1b8fdd2725f7cb7bb99a95a30912e05cb761d25d1495c76c9d474be2adc5503ab9b75270c726a7346864919cd640b314998b19c2c3b249c98d96cb307a3ea28eefe1c71f122e92f9e692ab69e1781dcc324077d3856ae6ee71b3c76552d6ca7730abf2166a4698eef08847c97ede9fa968715e0e374b204587658ef77b021c67bd6cb101a825f2b6cf566770113686bcf3e6791ec7c534a79189f38800d0cc8070356fd5d6d50f6dd90bf36dd50aad49ab3dce3201b01c32928729403cfc50f85fc4004c7bc71348d9bbf4323fa424a406679540f9803a3c29c60718821b807dc6a6a62e73ae2a10274a946e78c9bd23c55944e5fb41c82ee98bf2d5be610d3e98b382a574dfae486c43c6cec31d6d07d1ea5b68bf951d62fd2a9885f24255e0bcdbf0b4948d592fc435abb9db523cb4021e8072208568c6e076d374c1cddd31f52277872d0d86bfad2e6d92c216a0b6d7e3e6187541473c72337624f4f705c2f0251d2b19bc017c074a41b1e61b866e13459a9f7ea1a912998b2f94bf42ede24e80ac353ec25b9cdfa16134fdeb707501602926e1c12510557901d8b712352573ee45748cdf49f79a2e80d51da222b4dfd07002dc00baad1b61e8a122623483086f3422890c34e74718adc236ed0c964462b265956e0230c78a04cf65c5282ee9464d069b44e096092698ce89c6c51ed55c4a48d97928b02c899c9b088adff541b94768a1aafc8e749c09c20bf52cba63d4e410fd7ca54a88115e9cb5414b38fcb114f59889bc8f3d592d2a0588c19c965d4910aeb3fb1cb69b1902bd6bbe888dafb5c5f76bb9acecfc205c796a6b45f09982b6f43416886cd4eaed9ceae3cc36a50b1c1030bcf0d717d68f37e543cd34c27221b0e128aec3432cef774646302575b651c625d601872b17f5e56257877d58437fe7789bd933aae1db73a07a5066c87f4b4574bb0bb300d2f350c4ee6765ebc1daef73bdbbab6183e3bbe8295350c1f6ea5964ffbb35532b577fc20bad04567d7b7da941cc5cc61028d44344c9f2f5745a9b9814c1873f0a15f5fc722c05525514cbdffc82100caea9af465745443522211de8d6f1cc2fe771a5b5d48b331feb4928bddd8f15addc36ce6cfd7c7e64215fd800b58f067c439e40d9e5519092020e75d2b5e6554461bf4595f698433c8bccbec8d422574b0981dc6a9f73d1c285b117bf9aa328dfc1decd7698f3f9833f0796a27c82cc33a3ae0af9e2b5b6920dcaa13da3ba2b7f9dc8d18dc60099258706bf1a10ecd46f0d0841a3fa485ea5e7e6e73eecc6886a9fe9b3b2945cb9e4ef707d7e3848f7a14da3f2245742344ce0e49c9cb13d3f2925d7fa5697ee9c7306eb86e0efc505fd1369ff32564ca8eb61658c0287893654f7ea9a6da45a2da09bac3dc936216dbe0b1e0444b8562a2c2c661bb0a87a4a9907c1383b21f60a4ad6e1e405c786a0a0e1cc4bc20b2725c4480e21d895f253a4c119d3ea38dcea674264455da524a7c3700323caf341ef20d9b6cdea417d191b4bb9537908ce97ed989d536668cf0cfe12fb760aa4cbe48d756545d788f0abf3e6121cac6fd12d293b375c044e0f3f22a1ddd3ea210cd8ed943c744bfd04942ad058ff4622ef76cb9796445dbce10348a99341932a5c6de23625caba26c787ed71ba63f02c77e8047bef42a0dbd9b2a8b709442f0894e63cabe3a493f6a51de28eda8ed5e09de73f590125499d884505b86dbd3e23cca10ea4c7ccbf8fa31822dc9ab035627bb25f4d279b52041ea45e4add5cf1e511a271207314c9a279cc4f998ece8e951f2e997771dad6bc5b8b1d8c588616a287d1dc25b655a1c162f824849db475255be92cae91732183cb458f0c30dbdf873d2357e2b00d9729f1fac7ec44467894e647638b655ed2bbc8bc133141a5d5951e20ecf2546d4fe878cbbb97b231dd5ff90116ae834e2cd9452093659bc7e12792e1187253f5399353bd0b69604ac166af70fa3d7c4d29cb0380d7b91122d497c37178da0d690a3412257507ef39482b6d98e9bef4fe9edc8e12917f4e24f3740e4a7dc583aeed53f4b98487748fed130228253432962116c2d8b19089c4719b973ff50a0a3ed8f3b907e2de89eb734ebcf2381563e1ed9c5412153b2e3eaa8db121aa46245678189c7944380e8fe15eaf0691f19de14d02aa1b19f39ba315c0d96c1f8e040e9c03eb84a0e576bf1df53f0ae8b7aca73566c7601b9e73c00ab1ce475a923aa40aaaba103d69a6ae7029b4edcf04108943c897a005d5e098fecebf1263c99716075cf651b3e4698cd7cbaf68f7cee66a34d68919ad77e3744cf485cd4914d06bd41f3cf9f1bd4985f0be120a237cc7b19a5e3b172d0e8d3b3e1355d04ab10b568ea6d41edc911c8a3ba33fa10a162d63c1c9310048608df9ee040ffb0e5ef4cc779f887208a38bea94d4a12775b51197ecfc83275b625b6eb0f9fbefcc51a88e8335baeda90a8fdff7510262c79b4e57fbba0701a186102d15dfbcaf386dd01e18b5244183df9f2e6b2275c59d8988d52251db35305d8c2d888634dbb2859631e7e2208c99e4826193b3b818c510b34d9c1458f14d1ea2b4d2eaa64dbfb0846c26e87efa4ca64ea93286742d94722d8ca8194f086b0ac6988391dc260e3218ea2bbd94e74984a46f3e1dfd5889e5a46dd252d803ee0c6a802f6fad7b8ebe14882ba7cebdae3b3c58a9a8eda26bea87f1efaf54cbf63289290d2de179ece38a6eeb9c58f2f37154f5c0245ac95bb01fee025752f7402e46e21f49d41c936e836d5c4a84fc97faa25b49d71516a9919d11a5bcc02be7a46b6d1227b5b9a9d9ba4b2b30a99e90bbad2cd5506af61d38aed24996b69296ba3d6477bac27b3cc4f4589c0def7c0980bf58488368966e2d5c7efaa6c7b5b0c2049292697cf38b21287629270b5fccb4dd69408abe6a1ff51bc758aabae22d23b8f40d2ae3ad12cf4f8c41551c4bcfd70a26039fdcee5313a262088b0a94256ae4f936f3a81e63c8d8a5a544829330799aa7f722a87e179c2365fcd5d8aedad537ba30077a0ce68df43071cde788f964bb88856e6a96333b5559fee307ea5c120b370a77e03834968e82ac99bf92359cd10952b20ba07e0d7cde27734c5ed8e40a53c47f36ce92e2c6173b08a916dbb9ab1ebdbea2dbeb89c8b833e56432747b7eef5fdf946e3b79fd7130d2a6b1d9312a6c2b3421e936619b54a95657c6ad2de6db302b20b5a7289f3d892da59323a3446917a75bdc916a38c611dd1e27dc877a9d6c487e76e552e9d41e7328d0693cbc99673390f2a8acc90562bc4e56b218139e633c6a7acbc873aefd039853fcbd03a0450f9dab3861273b365866cdc1eff41ff5b03f055c3331bb272ccc8e63c499402bacb94597fc9dfaf77089c2e0bca7233e2c0e5b03bdde0b582d5262935d46cb6de8103f2d99db8054dacf2497ac298e632bbc2a56c7978c427ded44909acb3dbd7e9574ba5223369beb922aacfc3564ab3ee809e296f7a89bcc5a85e37d533861c1d7b0a43750a86a131c97134649da7e6b3a218a0011f4500293027da0d418883d720048b37bdd10959eace4626a378a0cae1edcc0c076e102594b47f223b70f9ae48c65b7069184ec24f5b16a9553b2fbc3ff4b14d78510a6c9b6127ee2c474716f180882749f80de9f1074c4a9deb12cfd3acc52f7e4460c4aef126f44e8fece3287b36aaabd45b3962f1e2a217b6b178ada603cb9b34925c4604e81483c936e56ad22b8b22c51fee28d5068572bb998904476c062b721f2d04677be25e7adec961e402f7526b6130f8f964c5143f64195330e6d261ce571168efb91c", &(0x7f0000002440)="01a1f3df93990074d0202bf7593f231659d093d82f7c87b2e7ed2a447a42c8743bd0fa605fce47e647b356b2b37834febcebe4e9877d266519c05fbdedecf48e8f17d6cef6a00d757ecef1478d7de807875a6a6d7461876d027d449b56bbce995bd2c1c599ef7ea2d61322f4255e8363659776f3bde31aa3df300bf6c79431265c7bf7903cd1b6a74e93e31916e329408df9a9205f3b57237907841af20d502e30623ac67a7914a9dd2e80d093a75142f83d9b0429823eaeb56c9d252934912b6f41c34a902db80574da0f7c91eb48511d54c001c8cd09f7acf4bca1cf1be6f4a8b38e", 0x1, 0x0, 0x9}, 0x50)
r15 = openat$nci(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f0000002600))
connect$can_bcm(0xffffffffffffffff, &(0x7f0000002640)={0x1d, r13}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23186' (ED25519) to the list of known hosts.
syzkaller login: [   49.146432][ T5784] cgroup: Unknown subsys name 'net'
[   49.251643][ T5784] cgroup: Unknown subsys name 'cpuset'
[   49.257930][ T5784] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.127053][ T5784] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.702928][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.706610][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.717024][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.721020][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.724636][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.751701][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.755190][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.758771][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.762720][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.766227][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.770025][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.774019][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.778649][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.783399][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.786277][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.047863][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   56.122335][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.140661][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.144378][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.148153][ T5850] bridge_slave_0: entered allmulticast mode
[   56.151522][ T5850] bridge_slave_0: entered promiscuous mode
[   56.182189][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.184965][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.188134][ T5850] bridge_slave_1: entered allmulticast mode
[   56.190983][ T5850] bridge_slave_1: entered promiscuous mode
[   56.251676][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.255336][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   56.283212][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.357465][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.359939][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.362516][ T5846] bridge_slave_0: entered allmulticast mode
[   56.365620][ T5846] bridge_slave_0: entered promiscuous mode
[   56.372621][ T5850] team0: Port device team_slave_0 added
[   56.375538][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.378376][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.381377][ T5846] bridge_slave_1: entered allmulticast mode
[   56.384317][ T5846] bridge_slave_1: entered promiscuous mode
[   56.401448][ T5850] team0: Port device team_slave_1 added
[   56.444755][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.465467][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.479233][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.481946][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.484384][ T5851] bridge_slave_0: entered allmulticast mode
[   56.487646][ T5851] bridge_slave_0: entered promiscuous mode
[   56.491517][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.494515][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.505665][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.536013][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.540033][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.542539][ T5851] bridge_slave_1: entered allmulticast mode
[   56.545345][ T5851] bridge_slave_1: entered promiscuous mode
[   56.548966][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.551938][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.564692][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.578722][ T5846] team0: Port device team_slave_0 added
[   56.591210][ T5846] team0: Port device team_slave_1 added
[   56.619099][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.639187][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.692977][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.695982][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.707852][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.715880][ T5850] hsr_slave_0: entered promiscuous mode
[   56.718793][ T5850] hsr_slave_1: entered promiscuous mode
[   56.723113][ T5851] team0: Port device team_slave_0 added
[   56.726428][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.730239][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.741296][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.753343][ T5851] team0: Port device team_slave_1 added
[   56.820920][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.823958][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.836132][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.855515][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.859270][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.870514][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.906234][ T5846] hsr_slave_0: entered promiscuous mode
[   56.908915][ T5846] hsr_slave_1: entered promiscuous mode
[   56.911229][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.913315][ T5846] Cannot create hsr debugfs directory
[   56.969208][ T5851] hsr_slave_0: entered promiscuous mode
[   56.971778][ T5851] hsr_slave_1: entered promiscuous mode
[   56.974198][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.976219][ T5851] Cannot create hsr debugfs directory
[   57.144182][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.166889][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.185168][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.196751][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.244323][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.254838][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.266462][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.272285][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.328704][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.334263][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.344579][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.358296][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.405338][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.433783][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.440176][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.454326][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.457115][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.472829][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.476023][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.485682][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.510340][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.512791][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.526275][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.533328][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.536366][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.574822][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.598583][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.601617][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.616858][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.623392][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.626390][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.764525][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.768265][   T54] Bluetooth: hci0: command tx timeout
[   57.773601][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.824677][ T5846] veth0_vlan: entered promiscuous mode
[   57.839262][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.848519][   T54] Bluetooth: hci1: command tx timeout
[   57.855169][ T5846] veth1_vlan: entered promiscuous mode
[   57.858546][   T54] Bluetooth: hci2: command tx timeout
[   57.869326][ T5850] veth0_vlan: entered promiscuous mode
[   57.886363][ T5850] veth1_vlan: entered promiscuous mode
[   57.901220][ T5846] veth0_macvtap: entered promiscuous mode
[   57.913103][ T5846] veth1_macvtap: entered promiscuous mode
[   57.934926][ T5851] veth0_vlan: entered promiscuous mode
[   57.943448][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.951893][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.961696][ T5851] veth1_vlan: entered promiscuous mode
[   57.971834][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.975825][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.992717][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.001822][ T5850] veth0_macvtap: entered promiscuous mode
[   58.005397][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.023030][ T5850] veth1_macvtap: entered promiscuous mode
[   58.075804][ T5851] veth0_macvtap: entered promiscuous mode
[   58.091756][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.109109][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.120095][ T5851] veth1_macvtap: entered promiscuous mode
[   58.134951][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.139956][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.145641][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.150078][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.157060][  T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.160249][  T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.174583][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.207146][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.221822][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.225021][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.235766][  T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.242746][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.246595][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.251659][  T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.288010][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.290740][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.337450][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.366440][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.376686][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.395708][ T4634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.400269][ T4634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.430691][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.434073][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.455707][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.470825][ T5918] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.517103][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.523662][ T5919] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.526920][ T5919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.534854][ T5918] Zero length message leads to an empty skb
[   58.657839][ T5921] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   58.661371][ T5921] netlink: 'syz.2.3': attribute type 3 has an invalid length.
[   58.662866][ T5924] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   58.664562][ T5921] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.680869][ T5924] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   58.700327][ T5924] ipvlan1: entered promiscuous mode
[   58.702511][ T5924] ipvlan1: entered allmulticast mode
[   58.704876][ T5924] veth0_vlan: entered allmulticast mode
[   58.710512][ T5921] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.833168][ T5933] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET)
[   59.148367][ T5943] netlink: 'syz.0.8': attribute type 10 has an invalid length.
[   59.231859][    T9] cfg80211: failed to load regulatory.db
[   59.275275][ T5945] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.324656][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.336144][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.370704][ T5947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.446816][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.853769][ T5853] Bluetooth: hci0: command tx timeout
[   59.927208][ T5853] Bluetooth: hci2: command tx timeout
[   59.944901][ T5853] Bluetooth: hci1: command tx timeout
[   60.229803][ T6046] netlink: 'syz.1.20': attribute type 4 has an invalid length.
[   60.578421][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.605481][ T6052] syzkaller0: entered promiscuous mode
[   60.608266][ T6052] syzkaller0: entered allmulticast mode
[   60.628252][ T6052] tipc: Started in network mode
[   60.630182][ T6052] tipc: Node identity , cluster identity 4711
[   60.632643][ T6052] tipc: Failed to obtain node identity
[   60.634799][ T6052] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.915563][ T6069] netlink: 'syz.1.29': attribute type 4 has an invalid length.
[   61.927306][ T5853] Bluetooth: hci0: command tx timeout
[   62.011022][ T5853] Bluetooth: hci1: command tx timeout
[   62.012982][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[   62.104386][ T6072] syzkaller0: entered promiscuous mode
[   62.106346][ T6072] syzkaller0: entered allmulticast mode
[   62.131807][ T6072] tunl0: mtu less than device minimum
[   62.301664][ T6088] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   63.001010][ T6095] netlink: 'syz.1.37': attribute type 12 has an invalid length.
[   63.004789][ T6095] netlink: 'syz.1.37': attribute type 12 has an invalid length.
[   63.035967][ T6095] netlink: 'syz.1.37': attribute type 12 has an invalid length.
[   63.441410][ T6134] IPv6: NLM_F_CREATE should be specified when creating new route
[   63.525690][ T6148] __nla_validate_parse: 4 callbacks suppressed
[   63.525703][ T6148] netlink: 844 bytes leftover after parsing attributes in process `syz.0.49'.
[   63.634980][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'.
[   63.734835][ T6167] validate_nla: 62 callbacks suppressed
[   63.734851][ T6167] netlink: 'syz.0.52': attribute type 4 has an invalid length.
[   63.746049][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   63.835905][ T6175] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   63.994835][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   63.994835][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   64.007474][ T5853] Bluetooth: hci0: command tx timeout
[   64.087219][ T5238] Bluetooth: hci1: command tx timeout
[   64.089748][ T5853] Bluetooth: hci2: command 0x040f tx timeout
[   64.260498][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   64.282826][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'.
[   64.934359][ T6201] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[   64.938255][ T6202] team0: No ports can be present during mode change
[   64.944295][ T6206] vlan0: entered promiscuous mode
[   64.951707][ T6206] team0: Port device vlan0 added
[   64.953995][ T6209] syzkaller0: entered promiscuous mode
[   64.955885][ T6209] syzkaller0: entered allmulticast mode
[   64.961772][ T6208] tipc: Started in network mode
[   64.968981][ T6208] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   64.974656][ T6208] tipc: Enabled bearer <eth:team0>, priority 0
[   65.122033][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   65.231831][ T6227] Bluetooth: MGMT ver 1.23
[   65.964543][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810b322c00: rx timeout, send abort
[   65.973181][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810b323000: rx timeout, send abort
[   65.979849][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b322c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   65.989034][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b323000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.051361][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'.
[   66.097932][ T1269] tipc: Node number set to 11578026
[   66.123882][ T6262] netlink: 'syz.1.67': attribute type 3 has an invalid length.
[   66.167447][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   66.360136][ T6278] netlink: 'syz.0.72': attribute type 2 has an invalid length.
[   66.378141][ T6278] netlink: 'syz.0.72': attribute type 5 has an invalid length.
[   66.395178][ T6282] openvswitch: netlink: Multiple metadata blocks provided
[   66.486092][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   67.226144][ T6315] batadv_slave_1: entered promiscuous mode
[   67.230103][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.248178][ T6315] batadv_slave_1 (unregistering): left promiscuous mode
[   67.251328][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.327570][ T6319] netlink: 'syz.0.81': attribute type 4 has an invalid length.
[   67.599682][ T6332] syzkaller0: entered promiscuous mode
[   67.602124][ T6332] syzkaller0: entered allmulticast mode
[   67.610278][ T6332] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) !
[   67.720027][ T6345] openvswitch: netlink: Flow actions attr not present in new flow.
[   67.729928][ T6345] vlan2: entered allmulticast mode
[   67.732902][ T6345] batadv0: entered allmulticast mode
[   67.901497][ T6360] dvmrp1: tun_chr_ioctl cmd 1074025677
[   67.904671][ T6360] dvmrp1: linktype set to 805
[   67.944702][   T33] audit: type=1107 audit(1757986714.591:2): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ؐcmUdN<VWPLp$X21"-!Tb6h_'
[   68.247486][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   68.255163][ T6384] netlink: 'syz.0.100': attribute type 4 has an invalid length.
[   68.359925][ T6397] veth0: entered promiscuous mode
[   68.363574][ T6397] netlink: 'syz.1.105': attribute type 1 has an invalid length.
[   68.531974][ T6405] __nla_validate_parse: 11 callbacks suppressed
[   68.531987][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   68.605977][ T6407] netlink: 'syz.1.108': attribute type 58 has an invalid length.
[   68.609306][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'.
[   68.620903][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.108'.
[   68.660522][ T6409] vxcan0: entered allmulticast mode
[   68.690181][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'.
[   68.716568][ T6411] netlink: 844 bytes leftover after parsing attributes in process `syz.1.110'.
[   68.793434][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810b66d400: rx timeout, send abort
[   68.797149][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810b66d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.875922][ T6423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.881805][ T6426] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.888127][ T6423] syzkaller0: entered promiscuous mode
[   68.890689][ T6423] syzkaller0: entered allmulticast mode
[   68.931853][ T6423] tipc: Resetting bearer <eth:syzkaller0>
[   68.949930][ T6423] tipc: Disabling bearer <eth:syzkaller0>
[   69.051355][ T6433] netlink: 'syz.2.117': attribute type 4 has an invalid length.
[   69.112262][ T6438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.119'.
[   69.116339][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[   69.169517][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'.
[   69.191780][ T6442] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   69.195124][ T6442] netlink: 'syz.2.120': attribute type 11 has an invalid length.
[   69.199917][ T6442] netlink: 220 bytes leftover after parsing attributes in process `syz.2.120'.
[   69.220825][ T6442] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   69.404333][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   69.471249][ T6461] ksmbd: Unknown IPC event: 3, ignore.
[   69.971009][ T6499] netlink: 'syz.0.140': attribute type 18 has an invalid length.
[   69.976923][ T6501] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   70.205833][ T6521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.212817][ T6521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   70.217740][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   70.228854][ T6520] tipc: Disabling bearer <eth:syzkaller0>
[   70.291579][ T6529] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   71.132365][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.208077][ T6555] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   71.215276][ T6555] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   71.219856][ T6555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.360452][ T6565] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   71.376307][ T6565] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   71.383188][ T6565] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   71.502742][ T6581] veth1_to_team: entered promiscuous mode
[   71.504786][ T6582] openvswitch: netlink: Flow actions attr not present in new flow.
[   71.505887][ T6581] bond0: entered promiscuous mode
[   71.511120][ T6581] bond_slave_0: entered promiscuous mode
[   71.514120][ T6581] bond_slave_1: entered promiscuous mode
[   71.519346][ T6581] hsr1: entered allmulticast mode
[   71.521776][ T6581] veth1_to_team: entered allmulticast mode
[   71.524341][ T6581] bond0: entered allmulticast mode
[   71.526122][ T6581] bond_slave_0: entered allmulticast mode
[   71.529417][ T6581] bond_slave_1: entered allmulticast mode
[   71.600593][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.606413][ T6589] bond0: (slave rose0): Enslaving as an active interface with an up link
[   71.700170][ T6599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.710170][ T6600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.722061][ T6595] syzkaller0: entered promiscuous mode
[   71.724201][ T6595] syzkaller0: entered allmulticast mode
[   71.739304][ T6595] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   71.784212][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   71.804036][ T6593] tipc: Resetting bearer <eth:syzkaller0>
[   71.821503][ T6593] tipc: Disabling bearer <eth:syzkaller0>
[   72.160018][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.165098][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.189579][ T6631] tipc: Resetting bearer <eth:team0>
[   72.296537][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.310853][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.378849][ T6631] vlan0: left promiscuous mode
[   72.501671][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.513818][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.531733][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.553139][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.633234][ T6642] tipc: Started in network mode
[   72.637439][ T6642] tipc: Node identity 7e925d41848, cluster identity 4711
[   72.645596][ T6642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.650853][ T6642] syzkaller0: entered promiscuous mode
[   72.652728][ T6642] syzkaller0: entered allmulticast mode
[   72.729307][ T6655] tipc: Resetting bearer <eth:syzkaller0>
[   72.875570][ T6641] tipc: Resetting bearer <eth:syzkaller0>
[   72.890664][ T6641] tipc: Disabling bearer <eth:syzkaller0>
[   73.061251][ T6684] syzkaller0: entered promiscuous mode
[   73.063959][ T6684] syzkaller0: entered allmulticast mode
[   73.175991][ T6690] team0: No ports can be present during mode change
[   73.181135][ T6690] vlan0: entered promiscuous mode
[   73.189031][ T6690] team0: Port device vlan0 added
[   73.228570][ T6690] tipc: Enabled bearer <eth:team0>, priority 0
[   74.310479][ T6750] __nla_validate_parse: 21 callbacks suppressed
[   74.310492][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   74.318124][ T6750] team0: No ports can be present during mode change
[   74.349115][ T5886] tipc: Node number set to 4195507521
[   74.363922][ T6754] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[   74.366909][ T6754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.207'.
[   74.374765][ T6756] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   74.385316][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'.
[   74.429716][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'.
[   74.463568][ T6758] syzkaller1: entered promiscuous mode
[   74.465598][ T6758] syzkaller1: entered allmulticast mode
[   74.542435][ T6763] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   74.553322][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'.
[   74.563007][ T6763] nftables ruleset with unbound chain
[   74.726264][ T6775] netlink: 'syz.0.215': attribute type 13 has an invalid length.
[   74.825450][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.935414][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   75.022051][ T6799] tipc: Started in network mode
[   75.023798][ T6799] tipc: Node identity c634b7f1837a, cluster identity 4711
[   75.026389][ T6799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.032092][ T6799] syzkaller0: entered promiscuous mode
[   75.034760][ T6799] syzkaller0: entered allmulticast mode
[   75.049965][ T6799] tipc: Resetting bearer <eth:syzkaller0>
[   75.053053][ T6799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.073822][ T6801] tipc: Resetting bearer <eth:syzkaller0>
[   75.083599][ T6801] tipc: Disabling bearer <eth:syzkaller0>
[   75.240840][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.245157][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.359595][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'.
[   75.482188][ T6831] netlink: 520 bytes leftover after parsing attributes in process `syz.0.231'.
[   75.491878][ T6831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.495200][ T6832] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.501197][ T6831] syzkaller0: entered promiscuous mode
[   75.504131][ T6831] syzkaller0: entered allmulticast mode
[   75.513604][ T6831] tipc: Resetting bearer <eth:syzkaller0>
[   75.520841][ T6830] tipc: Resetting bearer <eth:syzkaller0>
[   75.533617][ T6830] tipc: Disabling bearer <eth:syzkaller0>
[   75.620955][ T6835] team0: No ports can be present during mode change
[   75.626312][ T6835] vlan0: entered promiscuous mode
[   75.636851][ T6835] team0: Port device vlan0 added
[   75.644502][ T6835] tipc: Enabled bearer <eth:team0>, priority 0
[   75.939482][ T6849] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   76.012620][ T6849] bond0: (slave bond_slave_1): Releasing backup interface
[   76.442285][ T6874] bridge_slave_0: left allmulticast mode
[   76.444447][ T6874] bridge_slave_0: left promiscuous mode
[   76.450477][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.469269][ T6874] bridge_slave_1: left allmulticast mode
[   76.471480][ T6874] bridge_slave_1: left promiscuous mode
[   76.475426][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.491081][ T6874] bond0: (slave bond_slave_0): Releasing backup interface
[   76.497691][ T6874] team0: Port device team_slave_0 removed
[   76.503533][ T6874] team0: Port device team_slave_1 removed
[   76.506448][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.511610][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.515738][ T6874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   76.527720][ T6874] netlink: 'syz.1.242': attribute type 10 has an invalid length.
[   76.535821][ T6874] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   76.657893][   T24] tipc: Node number set to 1162786801
[   76.678861][ T6891] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   76.746265][ T6896] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.783250][ T6901] netlink: 'syz.1.251': attribute type 30 has an invalid length.
[   76.804518][ T6901] netlink: 'syz.1.251': attribute type 30 has an invalid length.
[   76.804725][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.819268][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.823126][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.827253][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.298747][ T6927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.389254][ T6943] netlink: 'syz.2.261': attribute type 4 has an invalid length.
[   77.649224][ T6964] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   77.750759][ T6967] Driver unsupported XDP return value 0 on prog  (id 64) dev N/A, expect packet loss!
[   77.832362][ T6971] dvmrp8: entered allmulticast mode
[   77.882614][ T6974] netlink: 'syz.1.270': attribute type 10 has an invalid length.
[   78.369686][ T7004] netlink: 'syz.1.279': attribute type 4 has an invalid length.
[   78.404215][ T7005] pimreg: entered allmulticast mode
[   78.596620][ T7023] team0: No ports can be present during mode change
[   78.642309][ T7023] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   79.441972][ T7042] validate_nla: 2 callbacks suppressed
[   79.441988][ T7042] netlink: 'syz.1.289': attribute type 4 has an invalid length.
[   79.457680][ T7042] __nla_validate_parse: 29 callbacks suppressed
[   79.457694][ T7042] netlink: 152 bytes leftover after parsing attributes in process `syz.1.289'.
[   79.465422][ T7042] block nbd0: not configured, cannot reconfigure
[   79.521281][ T7045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.290'.
[   79.544847][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'.
[   79.812009][ T7073] netlink: 96 bytes leftover after parsing attributes in process `syz.1.298'.
[   79.818437][ T7076] veth0_to_bond: entered allmulticast mode
[   79.839065][ T7073] vlan2: entered allmulticast mode
[   79.841182][ T7073] gretap0: entered allmulticast mode
[   79.911295][ T7081] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   79.914745][ T7081] CPU: 1 UID: 0 PID: 7081 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) 
[   79.914762][ T7081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.914770][ T7081] Call Trace:
[   79.914776][ T7081]  <TASK>
[   79.914782][ T7081]  dump_stack_lvl+0x189/0x250
[   79.914805][ T7081]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.914821][ T7081]  ? __pfx__printk+0x10/0x10
[   79.914845][ T7081]  ? kernfs_path_from_node+0x2f/0x290
[   79.914859][ T7081]  ? kernfs_path_from_node+0x250/0x290
[   79.914871][ T7081]  ? kernfs_path_from_node+0x2f/0x290
[   79.914887][ T7081]  sysfs_warn_dup+0x8e/0xa0
[   79.914901][ T7081]  sysfs_do_create_link_sd+0xc0/0x110
[   79.914923][ T7081]  device_add_class_symlinks+0x1cf/0x240
[   79.914944][ T7081]  device_add+0x475/0xb50
[   79.914964][ T7081]  wiphy_register+0x1c81/0x2aa0
[   79.914995][ T7081]  ? __pfx_wiphy_register+0x10/0x10
[   79.915010][ T7081]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   79.915034][ T7081]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   79.915055][ T7081]  ieee80211_register_hw+0x3442/0x40a0
[   79.915087][ T7081]  ? ieee80211_register_hw+0x1461/0x40a0
[   79.915114][ T7081]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   79.915136][ T7081]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.915155][ T7081]  ? __hrtimer_setup+0x187/0x210
[   79.915167][ T7081]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   79.915185][ T7081]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   79.915229][ T7081]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   79.915247][ T7081]  ? trace_kmalloc+0x1f/0xd0
[   79.915263][ T7081]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   79.915281][ T7081]  ? kstrndup+0xbf/0x160
[   79.915303][ T7081]  hwsim_new_radio_nl+0xea4/0x1b10
[   79.915354][ T7081]  ? __pfx___nla_validate_parse+0x10/0x10
[   79.915379][ T7081]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.915410][ T7081]  ? __nla_parse+0x40/0x60
[   79.915427][ T7081]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   79.915454][ T7081]  genl_family_rcv_msg_doit+0x215/0x300
[   79.915479][ T7081]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   79.915509][ T7081]  ? bpf_lsm_capable+0x9/0x20
[   79.915526][ T7081]  ? security_capable+0x7e/0x2e0
[   79.915551][ T7081]  genl_rcv_msg+0x60e/0x790
[   79.915575][ T7081]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.915594][ T7081]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.915625][ T7081]  netlink_rcv_skb+0x208/0x470
[   79.915638][ T7081]  ? __lock_acquire+0xab9/0xd20
[   79.915658][ T7081]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.915678][ T7081]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.915708][ T7081]  ? down_read+0x1ad/0x2e0
[   79.915726][ T7081]  genl_rcv+0x28/0x40
[   79.915740][ T7081]  netlink_unicast+0x82f/0x9e0
[   79.915759][ T7081]  ? __pfx_netlink_unicast+0x10/0x10
[   79.915774][ T7081]  ? netlink_sendmsg+0x642/0xb30
[   79.915788][ T7081]  ? skb_put+0x11b/0x210
[   79.915806][ T7081]  netlink_sendmsg+0x805/0xb30
[   79.915829][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.915846][ T7081]  ? aa_sock_msg_perm+0xf1/0x1d0
[   79.915860][ T7081]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.915872][ T7081]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.915887][ T7081]  __sock_sendmsg+0x21c/0x270
[   79.915912][ T7081]  ____sys_sendmsg+0x505/0x830
[   79.915934][ T7081]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.915960][ T7081]  ? import_iovec+0x74/0xa0
[   79.915981][ T7081]  ___sys_sendmsg+0x21f/0x2a0
[   79.916001][ T7081]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.916047][ T7081]  ? __fget_files+0x2a/0x420
[   79.916057][ T7081]  ? __fget_files+0x3a0/0x420
[   79.916074][ T7081]  __x64_sys_sendmsg+0x19b/0x260
[   79.916091][ T7081]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   79.916112][ T7081]  ? rcu_is_watching+0x15/0xb0
[   79.916125][ T7081]  ? do_syscall_64+0xbe/0x3b0
[   79.916141][ T7081]  do_syscall_64+0xfa/0x3b0
[   79.916153][ T7081]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.916164][ T7081]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.916175][ T7081]  ? exc_page_fault+0x9f/0xf0
[   79.916188][ T7081]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.916199][ T7081] RIP: 0033:0x7fe55258eba9
[   79.916212][ T7081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.916222][ T7081] RSP: 002b:00007fe5507d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.916236][ T7081] RAX: ffffffffffffffda RBX: 00007fe5527d6090 RCX: 00007fe55258eba9
[   79.916244][ T7081] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[   79.916252][ T7081] RBP: 00007fe552611e19 R08: 0000000000000000 R09: 0000000000000000
[   79.916259][ T7081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.916266][ T7081] R13: 00007fe5527d6128 R14: 00007fe5527d6090 R15: 00007ffd0d6bf428
[   79.916287][ T7081]  </TASK>
[   79.916405][ T7073] netlink: 'syz.1.298': attribute type 30 has an invalid length.
[   80.181209][ T7094] netlink: 'syz.1.302': attribute type 2 has an invalid length.
[   80.194897][ T7094] k*: entered promiscuous mode
[   80.220965][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.224369][ T7094] 8021q: adding VLAN 0 to HW filter on device team0
[   80.227885][ T7094] tipc: Resetting bearer <eth:team0>
[   80.229787][ T7094] tipc: Resetting bearer <eth:team0>
[   80.233469][ T7094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.351904][ T7094] syz.1.302 (7094) used greatest stack depth: 19544 bytes left
[   80.454115][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.304'.
[   80.470470][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   80.495962][ T7110] netlink: 128 bytes leftover after parsing attributes in process `syz.2.305'.
[   80.518127][ T7110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.527066][ T7110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.604181][ T7099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.647158][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   82.058386][ T7124] 8021q: VLANs not supported on ip6_vti0
[   82.121632][ T7131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.129989][ T7131] syzkaller0: entered promiscuous mode
[   82.134680][ T7133] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   82.139679][ T7131] syzkaller0: entered allmulticast mode
[   82.159710][ T7131] tipc: Resetting bearer <eth:syzkaller0>
[   82.163712][ T7129] tipc: Resetting bearer <eth:syzkaller0>
[   82.173729][ T7129] tipc: Disabling bearer <eth:syzkaller0>
[   82.193494][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   82.194363][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   82.205764][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'.
[   82.246339][ T7133] bond0: (slave bond_slave_1): Releasing backup interface
[   82.257577][ T7133] bond_slave_1 (unregistering): left promiscuous mode
[   82.260570][ T7133] bond_slave_1 (unregistering): left allmulticast mode
[   82.296722][ T7144] openvswitch: netlink: Flow actions attr not present in new flow.
[   82.412189][ T7148] batadv_slave_1: entered promiscuous mode
[   82.414845][ T7148] batadv_slave_1: left promiscuous mode
[   82.638638][ T7162] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.653981][ T7162] netlink: 'syz.2.317': attribute type 10 has an invalid length.
[   82.672093][ T7162] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[   83.369518][ T7199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.434852][ T7207] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   83.440074][ T7207] netlink: 'syz.2.331': attribute type 29 has an invalid length.
[   83.443548][ T7207] netlink: 'syz.2.331': attribute type 29 has an invalid length.
[   83.449755][ T7207] unsupported nla_type 59
[   83.485334][ T7209] bond0: Caught tx_queue_len zero misconfig
[   83.587971][ T7215] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   83.590318][ T7215] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   84.741363][ T7260] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   85.125814][ T7282] __nla_validate_parse: 9 callbacks suppressed
[   85.125824][ T7282] netlink: 128 bytes leftover after parsing attributes in process `syz.0.354'.
[   85.170647][ T7282] syzkaller0: entered promiscuous mode
[   85.173001][ T7282] syzkaller0: entered allmulticast mode
[   85.185139][ T7282] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   85.189799][ T7282] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.938836][ T7291] netlink: 'syz.2.357': attribute type 64 has an invalid length.
[   85.940411][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[   86.803066][ T7297] netlink: 'syz.2.359': attribute type 12 has an invalid length.
[   86.883414][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'.
[   86.951377][ T7308] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   86.953940][ T7308] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   87.008543][ T7311] team0: Caught tx_queue_len zero misconfig
[   87.012825][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   87.065544][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[   87.081439][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[   87.257428][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   87.376632][ T7337] macvtap1: entered allmulticast mode
[   87.379917][ T7337] veth0_macvtap: entered allmulticast mode
[   87.563817][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.378'.
[   87.570543][ T7358] tipc: Resetting bearer <eth:team0>
[   87.573689][ T7358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   87.592164][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'.
[   87.613407][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'.
[   88.372611][ T7399] openvswitch: netlink: VXLAN extension 226 out of range max 1
[   88.403833][ T7404] block nbd1: not configured, cannot reconfigure
[   88.406204][ T7404] block nbd1: not configured, cannot reconfigure
[   88.413311][ T7404] block nbd1: not configured, cannot reconfigure
[   88.415720][ T7404] block nbd1: not configured, cannot reconfigure
[   88.557964][ T7410] netlink: 'syz.0.391': attribute type 4 has an invalid length.
[   88.568619][ T7426] syz_tun: entered allmulticast mode
[   88.571552][ T7426] unsupported nlmsg_type 40
[   88.610592][ T7427] syz_tun: left allmulticast mode
[   88.625811][ T7433] IPv6: NLM_F_CREATE should be specified when creating new route
[   88.645382][ T7435] netlink: 'syz.1.396': attribute type 21 has an invalid length.
[   88.654684][ T7435] netlink: 'syz.1.396': attribute type 1 has an invalid length.
[   88.700726][ T7442] team0: No ports can be present during mode change
[   88.703631][ T7442] vlan0: entered promiscuous mode
[   88.744767][ T7442] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   89.568218][ T7488] netlink: 'syz.1.410': attribute type 5 has an invalid length.
[   90.431586][ T7521] __nla_validate_parse: 8 callbacks suppressed
[   90.431598][ T7521] netlink: 112 bytes leftover after parsing attributes in process `syz.2.420'.
[   90.523085][ T7527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'.
[   90.859460][ T7549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.862913][ T7549] netlink: 'syz.2.428': attribute type 10 has an invalid length.
[   90.865936][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.873490][ T7549] netlink: 68 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.877749][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.882567][ T7549] netlink: 68 bytes leftover after parsing attributes in process `syz.2.428'.
[   90.936609][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.016031][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'.
[   91.023599][ T7557] team0: No ports can be present during mode change
[   91.065339][ T7557] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   91.558329][ T7569] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   91.594383][ T7569] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.594781][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[   91.616875][ T7569] bond1: (slave geneve2): making interface the new active one
[   91.623465][ T7569] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   91.705717][ T7579] netlink: 'syz.0.438': attribute type 10 has an invalid length.
[   91.709196][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[   91.776728][ T7584] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   92.048688][ T7602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.076522][ T7607] netlink: 'syz.0.448': attribute type 4 has an invalid length.
[   92.355505][ T7617] macsec1: entered allmulticast mode
[   92.360564][ T7617] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   92.374390][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.383407][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.499868][ T7638] netlink: 'syz.2.455': attribute type 4 has an invalid length.
[   93.266854][ T7629] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   93.320299][ T7650] syzkaller1: tun_chr_ioctl cmd 2148553947
[   93.412593][ T7656] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   94.654632][ T7698] team0: No ports can be present during mode change
[   94.658549][ T7698] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   94.913579][ T7714] netlink: 'syz.2.475': attribute type 4 has an invalid length.
[   95.362587][ T7735] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96
[   95.574411][ T7740] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[   95.622402][ T7740] syzkaller0: create flow: hash 3405718046 index 1
[   95.669291][ T7740] syzkaller0: delete flow: hash 3405718046 index 1
[   95.688856][ T7711] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   95.729882][ T7752] __nla_validate_parse: 21 callbacks suppressed
[   95.729894][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[   95.736665][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'.
[   96.620540][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   96.623909][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   96.708007][ T7774] openvswitch: netlink: Multiple metadata blocks provided
[   97.017563][ T7806] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   97.024708][ T7806] netlink: 14 bytes leftover after parsing attributes in process `syz.0.503'.
[   97.043766][ T7806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.051239][ T7806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.057809][ T7806] bond0 (unregistering): Released all slaves
[   97.090227][ T7809] netlink: 'syz.1.504': attribute type 4 has an invalid length.
[   97.194299][ T7813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.199985][ T7813] syzkaller0: entered promiscuous mode
[   97.202433][ T7813] syzkaller0: entered allmulticast mode
[   97.210423][ T7813] tipc: Resetting bearer <eth:syzkaller0>
[   97.214664][ T7810] tipc: Resetting bearer <eth:syzkaller0>
[   97.225566][ T7810] tipc: Disabling bearer <eth:syzkaller0>
[   97.472711][ T7825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'.
[   97.545372][ T7827] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.743330][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[   97.816228][ T7805] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   97.885665][ T7848] xt_l2tp: missing protocol rule (udp|l2tpip)
[   97.939386][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.943212][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.951145][ T7851] kthread_run failed with err -4
[   97.967911][ T5914] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   97.969491][ T7854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.977467][ T7854] syzkaller0: entered promiscuous mode
[   97.979633][ T7854] syzkaller0: entered allmulticast mode
[   98.019406][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'.
[   98.044140][ T7853] tipc: Resetting bearer <eth:syzkaller0>
[   98.065128][ T7853] tipc: Disabling bearer <eth:syzkaller0>
[   98.369335][ T5914] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.439449][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'.
[   98.483275][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'.
[   98.491401][ T7903] team0: No ports can be present during mode change
[   98.529125][ T7903] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[   98.586103][ T7909] veth1_to_team: entered promiscuous mode
[   98.589136][ T7909] veth1_to_team: left promiscuous mode
[   98.670796][ T7914] netlink: 'syz.1.537': attribute type 1 has an invalid length.
[   98.689048][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.705828][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.708534][ T7914] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   98.712920][ T7914] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   98.738474][ T5914] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.753286][ T7916] veth7: entered promiscuous mode
[   98.759670][ T7916] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.973968][ T7922] lo speed is unknown, defaulting to 1000
[   98.976088][ T7922] lo speed is unknown, defaulting to 1000
[   98.980842][ T7922] lo speed is unknown, defaulting to 1000
[   98.989702][ T7922] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   99.002463][ T7922] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.033261][ T7922] lo speed is unknown, defaulting to 1000
[   99.037419][ T7922] lo speed is unknown, defaulting to 1000
[   99.041294][ T7922] lo speed is unknown, defaulting to 1000
[   99.483393][ T7945] lo speed is unknown, defaulting to 1000
[   99.871890][ T7958] netlink: 'syz.2.548': attribute type 4 has an invalid length.
[   99.994736][ T7961] tipc: Resetting bearer <eth:team0>
[  100.002609][ T5914] lo speed is unknown, defaulting to 1000
[  100.008569][ T7961] syzkaller0: entered promiscuous mode
[  100.010725][ T7961] syzkaller0: entered allmulticast mode
[  100.641973][ T7957] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  100.652339][ T7974] hsr_slave_0: left promiscuous mode
[  100.655898][ T7974] hsr_slave_1: left promiscuous mode
[  100.885023][ T7991] __nla_validate_parse: 5 callbacks suppressed
[  100.885038][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[  100.922434][ T7995] netlink: 732 bytes leftover after parsing attributes in process `syz.1.557'.
[  100.925751][ T7995] netlink: 732 bytes leftover after parsing attributes in process `syz.1.557'.
[  100.989378][ T7997] dvmrp1: entered allmulticast mode
[  101.170032][ T8009] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  101.173553][ T8009] netlink: 'syz.1.562': attribute type 3 has an invalid length.
[  101.176847][ T8009] netlink: 564 bytes leftover after parsing attributes in process `syz.1.562'.
[  101.236213][ T8013] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[  101.402558][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.405292][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.687073][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  102.055426][ T8039] pim6reg1: entered promiscuous mode
[  102.059800][ T8039] pim6reg1: entered allmulticast mode
[  102.348580][ T8045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.572'.
[  102.487528][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.489088][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.490595][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.498819][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'.
[  102.553290][ T8067] lo speed is unknown, defaulting to 1000
[  102.706339][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'.
[  103.108088][ T8101] bridge_slave_1: left allmulticast mode
[  103.110849][ T8101] bridge_slave_1: left promiscuous mode
[  103.113436][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.123083][ T8101] bridge_slave_0: left allmulticast mode
[  103.125604][ T8101] bridge_slave_0: left promiscuous mode
[  103.131802][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.281125][ T8108] syzkaller1: entered promiscuous mode
[  103.283159][ T8108] syzkaller1: entered allmulticast mode
[  103.515718][ T8127] netlink: 'syz.0.592': attribute type 4 has an invalid length.
[  104.270760][ T8122] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  109.527495][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  124.247713][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  126.514525][ T8133] vlan2: entered promiscuous mode
[  126.516897][ T8133] vlan2: entered allmulticast mode
[  126.519718][ T8133] hsr_slave_1: entered allmulticast mode
[  126.527229][ T8133] __nla_validate_parse: 4 callbacks suppressed
[  126.527237][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  126.622654][ T8138] netlink: 216 bytes leftover after parsing attributes in process `syz.1.599'.
[  126.646808][ T8142] ip_vti0: entered promiscuous mode
[  126.654355][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'.
[  126.663620][ T8142] netlink: 'syz.0.600': attribute type 9 has an invalid length.
[  126.715173][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[  126.741308][ T8151] netlink: 'syz.1.601': attribute type 4 has an invalid length.
[  126.778523][ T8153] netlink: 'syz.0.603': attribute type 2 has an invalid length.
[  126.785641][ T8153] k*: entered promiscuous mode
[  126.791061][ T8153] ip_vti0: left promiscuous mode
[  126.801790][ T8153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.376426][ T8163] openvswitch: netlink: Missing valid actions attribute.
[  127.379925][ T8163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.488838][ T8144] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.519815][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'.
[  127.579315][ T8175] netlink: 'syz.2.609': attribute type 83 has an invalid length.
[  127.598379][ T8177] netlink: 'syz.1.610': attribute type 4 has an invalid length.
[  127.603051][    T9] lo speed is unknown, defaulting to 1000
[  127.605178][    T9] syz2: Port: 1 Link DOWN
[  127.608461][ T8177] netlink: 'syz.1.610': attribute type 4 has an invalid length.
[  127.609615][ T8175] lo speed is unknown, defaulting to 1000
[  127.612767][    T9] lo speed is unknown, defaulting to 1000
[  127.617488][    T9] syz2: Port: 1 Link ACTIVE
[  127.796076][ T8158] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  127.806250][ T8158] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  127.815764][ T8158] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  127.823227][ T8158] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  127.925275][ T8190] lo speed is unknown, defaulting to 1000
[  127.959993][ T8196] Bluetooth: MGMT ver 1.23
[  128.000060][ T8199] 8021q: VLANs not supported on tunl0
[  128.079453][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'.
[  128.130441][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'.
[  128.240434][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[  128.262362][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[  128.343347][ T8214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.399643][ T8214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.463345][ T8214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.509851][ T8214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.590600][ T5862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.600262][ T5862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.630593][ T5862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.635978][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.689217][ T8221] netlink: 'syz.0.623': attribute type 1 has an invalid length.
[  128.704641][ T8224] netlink: 'syz.2.624': attribute type 1 has an invalid length.
[  128.717824][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.738156][ T8221] bond0: (slave gretap1): making interface the new active one
[  128.741517][ T8221] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  128.751305][ T8224] bond3: (slave bridge0): making interface the new active one
[  128.756365][ T8224] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  128.799636][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  129.033895][ T8246] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  129.140667][ T8250] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  129.508351][ T8277] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  129.511590][ T8277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.545739][ T8279] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  129.778310][ T8287] netlink: 'syz.2.644': attribute type 10 has an invalid length.
[  129.786087][ T8287] dummy0: entered promiscuous mode
[  129.788279][ T8287] dummy0: entered allmulticast mode
[  129.790717][ T8287] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  129.886368][ T8289] mac80211_hwsim hwsim6 6: renamed from wlan0
[  129.938608][ T8291] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[  130.349406][ T8318] vti0: entered promiscuous mode
[  132.569528][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.522768][ T8334] lo speed is unknown, defaulting to 1000
[  133.565454][ T8345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.665336][ T8352] __nla_validate_parse: 12 callbacks suppressed
[  133.665351][ T8352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.662'.
[  133.669945][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'.
[  133.673058][ T8352] netlink: 43 bytes leftover after parsing attributes in process `syz.0.662'.
[  133.689197][ T8352] validate_nla: 1 callbacks suppressed
[  133.689205][ T8352] netlink: 'syz.0.662': attribute type 5 has an invalid length.
[  133.694422][ T8352] netlink: 43 bytes leftover after parsing attributes in process `syz.0.662'.
[  133.703451][ T8354] netlink: 300 bytes leftover after parsing attributes in process `syz.2.663'.
[  133.743747][ T8352] lo speed is unknown, defaulting to 1000
[  133.763666][ T8357] netlink: 112 bytes leftover after parsing attributes in process `syz.1.664'.
[  133.777355][ T8359] netlink: 192 bytes leftover after parsing attributes in process `syz.0.662'.
[  133.845033][ T8363] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.023882][ T8383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'.
[  134.150034][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[  134.151769][ T8385] lo speed is unknown, defaulting to 1000
[  134.153635][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[  134.160370][ T8391] netlink: 'syz.1.670': attribute type 18 has an invalid length.
[  134.195153][ T8390] veth0: entered promiscuous mode
[  134.281294][ T8395] netlink: 'syz.2.669': attribute type 10 has an invalid length.
[  134.300465][ T8395] bond0: (slave dummy0): Releasing backup interface
[  134.309155][ T8395] dummy0: left promiscuous mode
[  134.311068][ T8395] dummy0: left allmulticast mode
[  134.325630][ T8395] team0: Port device dummy0 added
[  134.329937][ T8390] veth0: left promiscuous mode
[  134.480591][ T8400] lo speed is unknown, defaulting to 1000
[  134.581449][ T8402] tc_dump_action: action bad kind
[  134.698843][ T8412] team0: No ports can be present during mode change
[  134.765798][ T8416] team0: No ports can be present during mode change
[  134.775613][ T8416] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  135.033880][ T8424] netlink: 'syz.2.682': attribute type 4 has an invalid length.
[  135.744024][ T8444] netlink: 'syz.1.687': attribute type 39 has an invalid length.
[  136.273224][ T8448] bridge: RTM_NEWNEIGH with invalid ether address
[  136.381080][ T8455] team0: No ports can be present during mode change
[  136.427642][ T8455] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  136.559748][ T8464] ip6gre1: entered allmulticast mode
[  136.610811][ T8469] bridge_slave_1: left allmulticast mode
[  136.613267][ T8469] bridge_slave_1: left promiscuous mode
[  136.615758][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.621873][ T8469] bridge_slave_0: left allmulticast mode
[  136.624324][ T8469] bridge_slave_0: left promiscuous mode
[  136.626618][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.749269][ T8475] lo speed is unknown, defaulting to 1000
[  137.070751][ T8492] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004
[  137.181667][ T8498] lo: Caught tx_queue_len zero misconfig
[  137.473939][ T8514] tipc: Resetting bearer <eth:team0>
[  137.630280][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.687278][ T8514] vlan0: left promiscuous mode
[  137.696618][ T8514] ipvlan1: left promiscuous mode
[  137.814595][ T8514] vti0: left promiscuous mode
[  137.860483][ T5862] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.864277][ T5862] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.868429][ T5862] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.871301][ T5862] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  137.940514][ T8536] netlink: 'syz.1.717': attribute type 1 has an invalid length.
[  137.944254][   T24] IPVS: starting estimator thread 0...
[  137.947578][ T8535] IPVS: rr: FWM 3 0x00000003 - no destination available
[  137.961056][ T8536] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.984188][ T8536] bond2: (slave geneve2): making interface the new active one
[  137.991642][ T8536] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  137.995054][ T5862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.999242][ T5862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.013182][ T8536] bond2: entered promiscuous mode
[  138.015046][ T8536] geneve2: entered promiscuous mode
[  138.026999][ T5862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.027304][ T8538] IPVS: using max 79 ests per chain, 189600 per kthread
[  138.030074][ T5862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.106687][ T8533] smc: net device bond0 applied user defined pnetid SYZ2
[  138.109998][ T8537] smc: net device bond0 erased user defined pnetid SYZ2
[  138.334593][ T8559] syzkaller1: entered promiscuous mode
[  138.337368][ T8559] syzkaller1: entered allmulticast mode
[  138.915623][ T8576] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  138.952720][ T8579] __nla_validate_parse: 79 callbacks suppressed
[  138.952734][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[  138.995701][ T8581] vlan2: entered allmulticast mode
[  138.997906][ T8581] batadv0: entered allmulticast mode
[  139.064887][ T8583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.079718][ T8583] tipc: Disabling bearer <eth:syzkaller0>
[  139.175659][ T8591] netlink: 'syz.2.732': attribute type 4 has an invalid length.
[  139.363633][ T8602] lo speed is unknown, defaulting to 1000
[  139.444957][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'.
[  140.212074][ T8636] lo speed is unknown, defaulting to 1000
[  140.249388][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'.
[  140.276062][ T8638] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  140.300801][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.337205][ T8644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.340700][ T8645] syzkaller0: entered promiscuous mode
[  140.342832][ T8645] syzkaller0: entered allmulticast mode
[  140.362245][ T8646] tipc: Resetting bearer <eth:syzkaller0>
[  140.374821][ T8646] tipc: Disabling bearer <eth:syzkaller0>
[  140.498706][ T8651] syzkaller1: entered promiscuous mode
[  140.507180][ T8651] syzkaller1: entered allmulticast mode
[  140.520116][ T8657] netlink: 'syz.2.748': attribute type 23 has an invalid length.
[  140.690300][ T8667] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  140.693296][ T8667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.750'.
[  140.804998][ T8680] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  140.809035][ T8680] netlink: 244 bytes leftover after parsing attributes in process `syz.2.755'.
[  140.813469][ T8680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.755'.
[  140.906182][ T8684] Bluetooth: MGMT ver 1.23
[  141.082067][ T8687] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.757'.
[  141.220794][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'.
[  141.281661][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'.
[  141.315259][ T8706] sctp: [Deprecated]: syz.0.761 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.315259][ T8706] Use struct sctp_sack_info instead
[  141.322614][ T8705] sctp: [Deprecated]: syz.0.761 (pid 8705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.322614][ T8705] Use struct sctp_sack_info instead
[  141.363384][ T8708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.762'.
[  141.376399][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.701742][ T8717] netlink: 'syz.1.765': attribute type 4 has an invalid length.
[  141.708282][ T1269] lo speed is unknown, defaulting to 1000
[  141.710241][ T1269] syz2: Port: 1 Link DOWN
[  141.712444][ T8717] netlink: 'syz.1.765': attribute type 4 has an invalid length.
[  141.721769][ T1269] lo speed is unknown, defaulting to 1000
[  141.724313][ T1269] syz2: Port: 1 Link ACTIVE
[  141.955888][ T8737] netlink: 'syz.0.771': attribute type 8 has an invalid length.
[  141.957215][ T8741] netlink: 'syz.2.772': attribute type 21 has an invalid length.
[  141.959928][ T8737] gretap0: entered promiscuous mode
[  142.075206][ T8753] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  142.298050][ T8774] bridge0: port 1(syz_tun) entered blocking state
[  142.301805][ T8774] bridge0: port 1(syz_tun) entered disabled state
[  142.309610][ T8774] syz_tun: entered allmulticast mode
[  142.312625][ T8774] syz_tun: entered promiscuous mode
[  142.373575][ T8783] lo speed is unknown, defaulting to 1000
[  142.393030][ T8789] netlink: 'syz.2.785': attribute type 11 has an invalid length.
[  142.420864][ T8789] vlan3: entered allmulticast mode
[  142.422634][ T8789] gretap0: entered allmulticast mode
[  142.476825][ T8799] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.659254][ T8802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.662203][ T8802] syzkaller0: entered promiscuous mode
[  142.664301][ T8802] syzkaller0: entered allmulticast mode
[  142.668498][ T8801] tipc: Resetting bearer <eth:syzkaller0>
[  142.680076][ T8801] tipc: Disabling bearer <eth:syzkaller0>
[  142.777995][ T8815] bridge0: port 1(erspan0) entered blocking state
[  142.781640][ T8815] bridge0: port 1(erspan0) entered disabled state
[  142.784439][ T8815] erspan0: entered allmulticast mode
[  142.791107][ T8815] erspan0: entered promiscuous mode
[  142.795059][ T8815] bridge0: port 1(erspan0) entered blocking state
[  142.798934][ T8815] bridge0: port 1(erspan0) entered forwarding state
[  142.805817][ T8815] erspan0: left allmulticast mode
[  142.808213][ T8815] erspan0: left promiscuous mode
[  142.811250][ T8815] bridge0: port 1(erspan0) entered disabled state
[  143.350023][ T8842] sctp: [Deprecated]: syz.0.800 (pid 8842) Use of int in max_burst socket option.
[  143.350023][ T8842] Use struct sctp_assoc_value instead
[  143.359890][ T8838] erspan0: entered promiscuous mode
[  143.423059][ T8852] ip6tnl0: Caught tx_queue_len zero misconfig
[  144.141140][ T8866] __nla_validate_parse: 20 callbacks suppressed
[  144.141151][ T8866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.807'.
[  144.194584][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.808'.
[  144.205156][ T8868] team0: No ports can be present during mode change
[  144.240170][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'.
[  144.254690][ T8868] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  144.262463][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.2.809'.
[  144.335250][ T8882] 8021q: VLANs not supported on wg0
[  144.399158][ T8887] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  144.419501][ T8890] ==================================================================
[  144.422755][ T8890] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  144.425776][ T8890] Read of size 1 at addr ffff88811aa83930 by task syz.0.814/8890
[  144.429474][ T8890] 
[  144.430339][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) 
[  144.430349][ T8890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.430354][ T8890] Call Trace:
[  144.430359][ T8890]  <TASK>
[  144.430363][ T8890]  dump_stack_lvl+0x189/0x250
[  144.430375][ T8890]  ? __kasan_check_byte+0x12/0x40
[  144.430387][ T8890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.430397][ T8890]  ? lock_release+0x4b/0x3e0
[  144.430409][ T8890]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.430419][ T8890]  print_report+0xca/0x240
[  144.430434][ T8890]  ? xfrm_state_find+0x2cf2/0x5400
[  144.430444][ T8890]  kasan_report+0x118/0x150
[  144.430455][ T8890]  ? xfrm_state_find+0x2cf2/0x5400
[  144.430467][ T8890]  xfrm_state_find+0x2cf2/0x5400
[  144.430479][ T8890]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.430491][ T8890]  ? xfrm_state_find+0x1da/0x5400
[  144.430501][ T8890]  ? __pfx_xfrm_state_find+0x10/0x10
[  144.430514][ T8890]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  144.430529][ T8890]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  144.430540][ T8890]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  144.430550][ T8890]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  144.430560][ T8890]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  144.430570][ T8890]  ? __lock_acquire+0xab9/0xd20
[  144.430589][ T8890]  ? xfrm_expand_policies+0x41f/0x6a0
[  144.430597][ T8890]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  144.430609][ T8890]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  144.430620][ T8890]  ? rcuref_put+0x1b7/0x210
[  144.430631][ T8890]  ? __pfx_rcuref_put+0x10/0x10
[  144.430641][ T8890]  ? __lock_acquire+0xab9/0xd20
[  144.430652][ T8890]  xfrm_lookup_route+0x3c/0x1c0
[  144.430659][ T8890]  __ip4_datagram_connect+0x9a5/0x1270
[  144.430674][ T8890]  udp_connect+0x33/0x1f0
[  144.430683][ T8890]  __sys_connect+0x316/0x440
[  144.430692][ T8890]  ? __pfx___sys_connect+0x10/0x10
[  144.430702][ T8890]  ? rcu_is_watching+0x15/0xb0
[  144.430711][ T8890]  __x64_sys_connect+0x7a/0x90
[  144.430719][ T8890]  do_syscall_64+0xfa/0x3b0
[  144.430729][ T8890]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.430736][ T8890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.430743][ T8890]  ? exc_page_fault+0x9f/0xf0
[  144.430751][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.430758][ T8890] RIP: 0033:0x7fe55258eba9
[  144.430766][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.430772][ T8890] RSP: 002b:00007fe5507f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  144.430781][ T8890] RAX: ffffffffffffffda RBX: 00007fe5527d5fa0 RCX: 00007fe55258eba9
[  144.430786][ T8890] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005
[  144.430791][ T8890] RBP: 00007fe552611e19 R08: 0000000000000000 R09: 0000000000000000
[  144.430795][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.430799][ T8890] R13: 00007fe5527d6038 R14: 00007fe5527d5fa0 R15: 00007ffd0d6bf428
[  144.430807][ T8890]  </TASK>
[  144.430809][ T8890] 
[  144.537512][ T8890] Allocated by task 7114:
[  144.539485][ T8890]  kasan_save_track+0x3e/0x80
[  144.541226][ T8890]  __kasan_slab_alloc+0x6c/0x80
[  144.542949][ T8890]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  144.544876][ T8890]  xfrm_state_alloc+0x24/0x2f0
[  144.546567][ T8890]  __find_acq_core+0x8a7/0x1c00
[  144.548328][ T8890]  xfrm_find_acq+0x78/0xa0
[  144.549924][ T8890]  xfrm_alloc_userspi+0x6b3/0xc90
[  144.551666][ T8890]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.553397][ T8890]  netlink_rcv_skb+0x208/0x470
[  144.555099][ T8890]  xfrm_netlink_rcv+0x79/0x90
[  144.556742][ T8890]  netlink_unicast+0x82f/0x9e0
[  144.558872][ T8890]  netlink_sendmsg+0x805/0xb30
[  144.560704][ T8890]  __sock_sendmsg+0x21c/0x270
[  144.562366][ T8890]  ____sys_sendmsg+0x505/0x830
[  144.564055][ T8890]  ___sys_sendmsg+0x21f/0x2a0
[  144.565724][ T8890]  __x64_sys_sendmsg+0x19b/0x260
[  144.567483][ T8890]  do_syscall_64+0xfa/0x3b0
[  144.569103][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.571159][ T8890] 
[  144.572014][ T8890] Freed by task 5899:
[  144.573401][ T8890]  kasan_save_track+0x3e/0x80
[  144.575045][ T8890]  kasan_save_free_info+0x46/0x50
[  144.577113][ T8890]  __kasan_slab_free+0x5b/0x80
[  144.578840][ T8890]  kmem_cache_free+0x18f/0x400
[  144.580624][ T8890]  xfrm_state_gc_task+0x52d/0x6b0
[  144.582668][ T8890]  process_scheduled_works+0xae1/0x17b0
[  144.585034][ T8890]  worker_thread+0x8a0/0xda0
[  144.587021][ T8890]  kthread+0x711/0x8a0
[  144.588765][ T8890]  ret_from_fork+0x439/0x7d0
[  144.590790][ T8890]  ret_from_fork_asm+0x1a/0x30
[  144.592492][ T8890] 
[  144.593349][ T8890] The buggy address belongs to the object at ffff88811aa83600
[  144.593349][ T8890]  which belongs to the cache xfrm_state of size 928
[  144.598351][ T8890] The buggy address is located 816 bytes inside of
[  144.598351][ T8890]  freed 928-byte region [ffff88811aa83600, ffff88811aa839a0)
[  144.603364][ T8890] 
[  144.604228][ T8890] The buggy address belongs to the physical page:
[  144.606464][ T8890] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811aa82d00 pfn:0x11aa80
[  144.609973][ T8890] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  144.612927][ T8890] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  144.615512][ T8890] page_type: f5(slab)
[  144.616980][ T8890] raw: 057ff00000000040 ffff88801afd7640 dead000000000122 0000000000000000
[  144.620532][ T8890] raw: ffff88811aa82d00 00000000800e0008 00000000f5000000 0000000000000000
[  144.623515][ T8890] head: 057ff00000000040 ffff88801afd7640 dead000000000122 0000000000000000
[  144.626525][ T8890] head: ffff88811aa82d00 00000000800e0008 00000000f5000000 0000000000000000
[  144.629510][ T8890] head: 057ff00000000002 ffffea00046aa001 00000000ffffffff 00000000ffffffff
[  144.632420][ T8890] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  144.635391][ T8890] page dumped because: kasan: bad access detected
[  144.637636][ T8890] page_owner tracks the page as allocated
[  144.639688][ T8890] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6272, tgid 6271 (syz.2.69), ts 66264866323, free_ts 66121408011
[  144.646113][ T8890]  post_alloc_hook+0x240/0x2a0
[  144.648071][ T8890]  get_page_from_freelist+0x21e4/0x22c0
[  144.650452][ T8890]  __alloc_frozen_pages_noprof+0x181/0x370
[  144.652491][ T8890]  alloc_pages_mpol+0x232/0x4a0
[  144.654198][ T8890]  allocate_slab+0x8a/0x370
[  144.655794][ T8890]  ___slab_alloc+0xbeb/0x1420
[  144.657496][ T8890]  kmem_cache_alloc_noprof+0x283/0x3c0
[  144.659420][ T8890]  xfrm_state_alloc+0x24/0x2f0
[  144.661188][ T8890]  pfkey_add+0x6e4/0x2e00
[  144.662870][ T8890]  pfkey_sendmsg+0xbfe/0x1090
[  144.664774][ T8890]  __sock_sendmsg+0x21c/0x270
[  144.666669][ T8890]  ____sys_sendmsg+0x52d/0x830
[  144.668514][ T8890]  ___sys_sendmsg+0x21f/0x2a0
[  144.670235][ T8890]  __sys_sendmmsg+0x227/0x430
[  144.672172][ T8890]  __x64_sys_sendmmsg+0xa0/0xc0
[  144.674118][ T8890]  do_syscall_64+0xfa/0x3b0
[  144.676009][ T8890] page last free pid 6255 tgid 6255 stack trace:
[  144.678566][ T8890]  __free_frozen_pages+0xbc4/0xd30
[  144.680716][ T8890]  __slab_free+0x303/0x3c0
[  144.682589][ T8890]  qlist_free_all+0x97/0x140
[  144.684550][ T8890]  kasan_quarantine_reduce+0x148/0x160
[  144.686843][ T8890]  __kasan_slab_alloc+0x22/0x80
[  144.688871][ T8890]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  144.691143][ T8890]  taskstats_exit+0x14a/0xa30
[  144.693121][ T8890]  do_exit+0x630/0x2300
[  144.694872][ T8890]  do_group_exit+0x21c/0x2d0
[  144.696793][ T8890]  __x64_sys_exit_group+0x3f/0x40
[  144.698913][ T8890]  x64_sys_call+0x21f7/0x2200
[  144.700878][ T8890]  do_syscall_64+0xfa/0x3b0
[  144.702716][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.705188][ T8890] 
[  144.706174][ T8890] Memory state around the buggy address:
[  144.708441][ T8890]  ffff88811aa83800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.711738][ T8890]  ffff88811aa83880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.714794][ T8890] >ffff88811aa83900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  144.718223][ T8890]                                      ^
[  144.720593][ T8890]  ffff88811aa83980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  144.723957][ T8890]  ffff88811aa83a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  144.726966][ T8890] ==================================================================
[  144.734753][ T8887] netlink: 76 bytes leftover after parsing attributes in process `syz.2.813'.
[  144.736535][ T8890] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  144.736545][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) 
[  144.736556][ T8890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.736561][ T8890] Call Trace:
[  144.736564][ T8890]  <TASK>
[  144.736568][ T8890]  dump_stack_lvl+0x99/0x250
[  144.736580][ T8890]  ? __asan_memcpy+0x40/0x70
[  144.736590][ T8890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.736600][ T8890]  ? __pfx__printk+0x10/0x10
[  144.736612][ T8890]  vpanic+0x281/0x750
[  144.736621][ T8890]  ? preempt_schedule+0xae/0xc0
[  144.736629][ T8890]  ? __pfx_vpanic+0x10/0x10
[  144.736637][ T8890]  ? preempt_schedule_common+0x83/0xd0
[  144.736645][ T8890]  ? preempt_schedule+0xae/0xc0
[  144.736652][ T8890]  ? __pfx_preempt_schedule+0x10/0x10
[  144.736661][ T8890]  panic+0xb9/0xc0
[  144.736668][ T8890]  ? __pfx_panic+0x10/0x10
[  144.736678][ T8890]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  144.736688][ T8890]  ? xfrm_state_find+0x2cf2/0x5400
[  144.736697][ T8890]  check_panic_on_warn+0x89/0xb0
[  144.736708][ T8890]  ? xfrm_state_find+0x2cf2/0x5400
[  144.736717][ T8890]  end_report+0x78/0x160
[  144.736727][ T8890]  kasan_report+0x129/0x150
[  144.736737][ T8890]  ? xfrm_state_find+0x2cf2/0x5400
[  144.736747][ T8890]  xfrm_state_find+0x2cf2/0x5400
[  144.736758][ T8890]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.736767][ T8890]  ? xfrm_state_find+0x1da/0x5400
[  144.736777][ T8890]  ? __pfx_xfrm_state_find+0x10/0x10
[  144.736789][ T8890]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  144.736800][ T8890]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  144.736807][ T8890]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  144.736847][ T8890]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  144.736860][ T8890]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  144.736870][ T8890]  ? __lock_acquire+0xab9/0xd20
[  144.736889][ T8890]  ? xfrm_expand_policies+0x41f/0x6a0
[  144.736897][ T8890]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  144.736911][ T8890]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  144.736924][ T8890]  ? rcuref_put+0x1b7/0x210
[  144.736956][ T8890]  ? __pfx_rcuref_put+0x10/0x10
[  144.736967][ T8890]  ? __lock_acquire+0xab9/0xd20
[  144.736978][ T8890]  xfrm_lookup_route+0x3c/0x1c0
[  144.736986][ T8890]  __ip4_datagram_connect+0x9a5/0x1270
[  144.737000][ T8890]  udp_connect+0x33/0x1f0
[  144.737010][ T8890]  __sys_connect+0x316/0x440
[  144.737020][ T8890]  ? __pfx___sys_connect+0x10/0x10
[  144.737032][ T8890]  ? rcu_is_watching+0x15/0xb0
[  144.737040][ T8890]  __x64_sys_connect+0x7a/0x90
[  144.737048][ T8890]  do_syscall_64+0xfa/0x3b0
[  144.737057][ T8890]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.737065][ T8890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.737073][ T8890]  ? exc_page_fault+0x9f/0xf0
[  144.737080][ T8890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.737089][ T8890] RIP: 0033:0x7fe55258eba9
[  144.737096][ T8890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.737102][ T8890] RSP: 002b:00007fe5507f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  144.737111][ T8890] RAX: ffffffffffffffda RBX: 00007fe5527d5fa0 RCX: 00007fe55258eba9
[  144.737117][ T8890] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000005
[  144.737121][ T8890] RBP: 00007fe552611e19 R08: 0000000000000000 R09: 0000000000000000
[  144.737126][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.737130][ T8890] R13: 00007fe5527d6038 R14: 00007fe5527d5fa0 R15: 00007ffd0d6bf428
[  144.737138][ T8890]  </TASK>
[  144.738498][ T8890] Kernel Offset: disabled

VM DIAGNOSIS:
01:39:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000054a7b RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000054a7b RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000000 R9 =ffffffff81ae150e R10=0000000000000003 R11=ffffffff81704490
R12=000000001000375d R13=dffffc0000000000 R14=0000000000054a7b R15=0000000000000020
RIP=ffffffff81717179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7ce89bfba8 CR3=00000000230ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffff0000 0000000000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001558 RDI=0000000000001559 RBP=00000000000003f8 RSP=ffffc900069e6e10
R8 =ffff8881075b0237 R9 =1ffff11020eb6046 R10=dffffc0000000000 R11=ffffffff854f9640
R12=dffffc0000000000 R13=ffffffff99b0290a R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f96bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe5507f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002140 CR3=0000000037c48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe5527a7498 00007fe5527a7470 XMM03=00007fe5527a74a8 00007fe5527a74a0
XMM04=00007fe55330d100 00007fe5527a7460 XMM05=00007fe5527a7478 00007fe5527a74c0
XMM06=00007fe5527a74b8 00007fe5527a74b0 XMM07=00007fe5527a74a8 00007fe5527a74a0
XMM08=a908897fd0eccd80 2f98b1138e03c5c3 XMM09=0000000000000000 00007fe552612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
