last executing test programs:

1.654597052s ago: executing program 0 (id=1801):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
close(r8) (async)
socket$unix(0x1, 0x2, 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) (async, rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x81}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r11 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0}) (rerun: 64)
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000)

1.555173282s ago: executing program 0 (id=1802):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
socket(0x8000000010, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000018741ca0000000400078008000100000000000c000200ff7f000000000000a3868e2eeef9aab41365d44ce4f580a7795525601a0c2585d52bfc77f5c7dc56242517045ee39138dde47b3d4e89450198741b10b366161a27fe75ee363e31f26482ac59e8c84feb49f2fe24a58d106ee4726c354d8bfe1cafce0ae17dd39dc2657423931fedc225471eb53fc2775c41bc2c18d951a47b1f603f75bd202788027cbf6f212fc5e2e57b0c32cde6bead1e0f723ad1810f5136835a5c95f411d93841d870467aa76bd33a466f6480cf19"], 0x2c}}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r8 = socket(0x400000000010, 0x3, 0x0)
unshare(0x22020400)
connect$unix(r8, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a31000000000800410072786500140033006d6163766c0000000000000900020073797a300000000008004100736977001400330076657468305f746f5f7465616d000000"], 0x60}}, 0x20000000)

1.548390258s ago: executing program 2 (id=1803):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010dcef7b5f643bc22f3060abca03d0170e5c102c185a6a33f0cb584cac9c208ff813bc5df950469a6222a2673b4dde39bf5c43668336530203f133fbbb418aaad28faac06acedb0befe30ad6d7ae55f370c512070fd32abd10fc8306c5d3c2680cde45e3a5e9c16a9bdd79b2902b33c6b03e55faacc0deb9b1111d957f1309cf88e9de584306f04483cf7dadfff8b06b97fc2512122db1c1ac87c00b6811cb9d25080139b621a3ae096ab19b9c5a712f0429ed718a47db9c33ee656da48370d7f5d8f1c226d4b6bdc60b0c7eb0cf9121d1b159fb4f8d2be2ff457aa95ac148bc31042a81539c778215467c2e07", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25120000000c009900000200001d0000001c008100050001000700000005000200950000000500020008000000"], 0x3c}}, 0x40800) (async)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000010dcef7b5f643bc22f3060abca03d0170e5c102c185a6a33f0cb584cac9c208ff813bc5df950469a6222a2673b4dde39bf5c43668336530203f133fbbb418aaad28faac06acedb0befe30ad6d7ae55f370c512070fd32abd10fc8306c5d3c2680cde45e3a5e9c16a9bdd79b2902b33c6b03e55faacc0deb9b1111d957f1309cf88e9de584306f04483cf7dadfff8b06b97fc2512122db1c1ac87c00b6811cb9d25080139b621a3ae096ab19b9c5a712f0429ed718a47db9c33ee656da48370d7f5d8f1c226d4b6bdc60b0c7eb0cf9121d1b159fb4f8d2be2ff457aa95ac148bc31042a81539c778215467c2e07", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25120000000c009900000200001d0000001c008100050001000700000005000200950000000500020008000000"], 0x3c}}, 0x40800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x44844)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
readv(r5, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13}, {&(0x7f0000000640)=""/262}, {&(0x7f0000000340)=""/43}], 0x20000000000003e5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8) (async)
listen(0xffffffffffffffff, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r9, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)

1.4692094s ago: executing program 0 (id=1804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x0, 0x5, 0x4000000, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x1c}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000940)={0x800, 0x5, 0x9e58, 0x0, 0x9, 0x0, 0x0, &(0x7f0000000840)})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000140)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @val={0x4, 0x6, {0x4, 0x6, 0x4d79, 0x6}}, @void, @void, @void, @void}, 0x37)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f00000007c0)={<r11=>r9, &(0x7f0000000640)='\x02\x02\x02\x02\x02\x02', 0x404000, &(0x7f00000006c0)={@align=0x9, {0x2cb, 0x5, 0x4, 0x3}}, 0x6, &(0x7f0000000740), &(0x7f0000000780)=0x9fb6})
sendto$l2tp(r11, &(0x7f00000003c0)="4bac7d839716ee657922a65880d35ae6549ac51c19e09989ac851dede39a8ccde9d38fd3c66bcb0d5f799d9c12305ef8e4b68cd7d27e4df5312fb13cb3dfda1e330f3d6aa0eced85b470e8f4c3e55cce771a", 0x52, 0xc014, &(0x7f0000000600)={0x2, 0x0, @multicast1, 0x3}, 0x10)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x830}}, 0x20}, 0x1, 0xba01}, 0x0)
r13 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1a}, 0x804)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

995.119061ms ago: executing program 2 (id=1806):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000340)=0x5b, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000fff0005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
close(0x3)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000080), &(0x7f0000000200)=r11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000180)=r12, 0x4)
sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="050006005a0000000500070002"], 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044)
socket$packet(0x11, 0x3, 0x300)

872.043776ms ago: executing program 2 (id=1808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20020000}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)

819.798679ms ago: executing program 0 (id=1809):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000, 0x80000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x400, 0x6}, 0x0)
socket$netlink(0x10, 0x3, 0x15)
readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x6, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180008000000000033ad9500"/29], 0x0, 0x1a, 0x0, 0x1, 0x3, 0x10000}, 0x28)
socket$pppl2tp(0x18, 0x1, 0x1)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

689.645689ms ago: executing program 2 (id=1810):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_mpls={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_TTL={0x5, 0x7, 0xe}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

689.016682ms ago: executing program 2 (id=1811):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002000010028bd7000fcdbdf250a8080000000000314004000080017004e214e2114000200fc00000000000000000000000000000008ccf200074d000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000100000000000000000100"/68], 0x5c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f00000007c0))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1f8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1c0, 0x2, {{0xf, [0x6, 0x4, 0x9, 0x5, 0x1, 0x2, 0xd, 0x8, 0xa, 0x4, 0xe, 0x7, 0xd, 0xd, 0x10, 0x3], 0x1, [0xec14, 0x4, 0x40, 0x6, 0x1, 0x2, 0x1, 0x87, 0x7ff, 0x5, 0x8, 0x3ff, 0x7ff, 0x0, 0xf8, 0x7], [0x7fff, 0x6, 0x3, 0x6, 0x3, 0x5, 0x6, 0x5, 0x5, 0x0, 0x401, 0xe, 0x9, 0x1, 0x3, 0x6]}, [@TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x4}, {0xc, 0x4, 0x101}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x200}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x1000000}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x100}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MIN_RATE64={0x94, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffffff55}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0xf31a}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xa}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x10, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffffb}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0x28, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x4}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x100000000}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x1f8}}, 0x4000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
socket(0x2, 0x3, 0xff) (async)
r6 = socket(0x2, 0x3, 0xff)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000003c0))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0xb48f, {0x4, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000, 0x82, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xde0, 0x2db, [0x800, 0x386a]}, @udp_ip4_spec={@remote, @empty, 0x4e20, 0x4e21, 0x14}, {0x0, @link_local, 0xa0d, 0x3, [0x6, 0x800]}, 0x3, 0xffff}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(r11, 0x1, 0x11, 0xfffffffffffffffe, &(0x7f0000000300)=0xc00) (async)
getsockopt$sock_cred(r11, 0x1, 0x11, 0xfffffffffffffffe, &(0x7f0000000300)=0xc00)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r10, 0x952de000) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r10, 0x952de000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x3d, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x3d, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r12, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async)
sendto$inet6(r12, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r12, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f00000002c0)=0x8)

638.82055ms ago: executing program 0 (id=1813):
socket(0xa, 0x5, 0x0) (async)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, 0x0, 0x20008000) (async)
sendmsg$inet_sctp(r0, 0x0, 0x20008000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x88}}, 0x0)
sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) (async)
sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r5, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x48000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
bind$can_j1939(r1, 0x0, 0x0) (async)
bind$can_j1939(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0})
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0xffffffffffffff86, 0x0, 0x0, 0x0, 0xfffffbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r12, @ANYRES16=r11, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00 \x00', @ANYRES16=r11, @ANYBLOB="040027bd7000fedbdf25100000000c0099000900000025000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r7, {0x6, 0xfff2}, {0x5, 0xfff3}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

580.303918ms ago: executing program 2 (id=1814):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{r0, &(0x7f0000000140)='\x00', 0x800, &(0x7f0000000180)={@align=0x8, {0x0, 0x2, 0x2, 0x7}}, 0xfffffff9, &(0x7f00000001c0), &(0x7f0000000240)=0xe685}, 0x4, &(0x7f00000006c0)=[{0x3, 0x9, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="b1e13bb1ee457aef9e9cf652a2e02d889509677a9652dece0b7310d1db219012229bb3c35f358efab54618dcd6f13ffef8648feb19076a21df7f176095ca628283b0985364cc4ad30fe029d83a81cd27e357af24096ec9c3f6ed83a896ead5192efd7d175d6ee529852b55704bba5730e26c1a2febe7fa0f00ff3d8b811b4667ec2914b3c67326a9f8b069dae7215e6399aab7b418ac8a5b00caaade46feda58c63d2a62bc9fa16ef9868bb9afed70e4ea67", 0xb2}, {0x3, 0x3, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="3d1ea7cf84cf293345d79d608bb7bb9a51f7e239b4ad75bae8dd7609009d9740e085645f9e080bbced844361e71e82a2e78d4c732daefad452497c7e7ff5228b6f04ae6933e0dbf546dcbf0ce8e1918a06186bdd3635f0213e2aa113705c", 0x5e, 0x8c8c14f0e41ba9a6}, {0x3, 0x7, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="feb9f121c9ed51d6d4199b3f331c2dca89e925f2cd5013fe57ca92d5305eda6e331cbeb1a57a283163bfe6c1433e90e2d0a97b9ffa8f5ebe1f79757e41f1a572", 0x40, 0x22}, {0x1, 0x100, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="9b861356f7fc489449c6d49507272f400a83f6710d05f0dedb69fd5ee47a6e23146bd3f6cf332fe92fee359f4e583b258313f0029426a3a15a252a8e9b672eeebd067d52cb9da44956dbd7f2902875c9ecd814887d0af0458a06a59903f09e5de87bba6246cf1317350ecbf6689a5e379564b8c98302731e789e4803168f6fc64707731e97485387a6209ee94decea8adbd91a0cf95f51eb60fe01e2da609864c3a2723ca02a379184cfd4422a1c5cc383e6a2742d0fc1ee4f13a1d50813e6d17e667de9602c474e37af9df0160e37b8fba756b58be5063c8c20145770", 0xdd, 0x10}]}) (async)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{<r1=>r0, &(0x7f0000000140)='\x00', 0x800, &(0x7f0000000180)={@align=0x8, {0x0, 0x2, 0x2, 0x7}}, 0xfffffff9, &(0x7f00000001c0), &(0x7f0000000240)=0xe685}, 0x4, &(0x7f00000006c0)=[{0x3, 0x9, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="b1e13bb1ee457aef9e9cf652a2e02d889509677a9652dece0b7310d1db219012229bb3c35f358efab54618dcd6f13ffef8648feb19076a21df7f176095ca628283b0985364cc4ad30fe029d83a81cd27e357af24096ec9c3f6ed83a896ead5192efd7d175d6ee529852b55704bba5730e26c1a2febe7fa0f00ff3d8b811b4667ec2914b3c67326a9f8b069dae7215e6399aab7b418ac8a5b00caaade46feda58c63d2a62bc9fa16ef9868bb9afed70e4ea67", 0xb2}, {0x3, 0x3, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="3d1ea7cf84cf293345d79d608bb7bb9a51f7e239b4ad75bae8dd7609009d9740e085645f9e080bbced844361e71e82a2e78d4c732daefad452497c7e7ff5228b6f04ae6933e0dbf546dcbf0ce8e1918a06186bdd3635f0213e2aa113705c", 0x5e, 0x8c8c14f0e41ba9a6}, {0x3, 0x7, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="feb9f121c9ed51d6d4199b3f331c2dca89e925f2cd5013fe57ca92d5305eda6e331cbeb1a57a283163bfe6c1433e90e2d0a97b9ffa8f5ebe1f79757e41f1a572", 0x40, 0x22}, {0x1, 0x100, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="9b861356f7fc489449c6d49507272f400a83f6710d05f0dedb69fd5ee47a6e23146bd3f6cf332fe92fee359f4e583b258313f0029426a3a15a252a8e9b672eeebd067d52cb9da44956dbd7f2902875c9ecd814887d0af0458a06a59903f09e5de87bba6246cf1317350ecbf6689a5e379564b8c98302731e789e4803168f6fc64707731e97485387a6209ee94decea8adbd91a0cf95f51eb60fe01e2da609864c3a2723ca02a379184cfd4422a1c5cc383e6a2742d0fc1ee4f13a1d50813e6d17e667de9602c474e37af9df0160e37b8fba756b58be5063c8c20145770", 0xdd, 0x10}]})
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7fc00, 0x7, 0x305, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xe}, 0x50)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8}, {r2, 0x2721}], 0x2, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100005ff00000000000000000000004a321e6ea6cf851529f2a1461ee5f91b3f57d94aea2d8e3e64faf6eca8b25519fe44a3d09a3b000d27c36518ecd7e019665561028198474b6a545055b57f91bd490f8711c09e6a2e3ccebe99c46d4078f774d10cdd8cefe710f2b48b0456f7bebd122e7f6ca8dd127c7a965c4d795c9c16f6b90b99c53ac3b90a68e178f5048951a33113dcd9102dd968e47182080d9ae9f2a43354e91d9ccf5b4b7caabcc78cfe73945309cefa6809ea54373253e59080c6602f0222521959784a44ffd709ff4eeaffb2f9bc2434cd44a8", @ANYRES32=0x0, @ANYBLOB="0000000040c900002400128009000100626f6e64000000001400028005000100060000000800140003000000"], 0x44}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

349.884679ms ago: executing program 1 (id=1817):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) (async)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58) (async)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x2c020400)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)={0x48, r5, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) (async)
syz_emit_ethernet(0x82, &(0x7f0000000480)=ANY=[], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) (async)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x9, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async)
close(0x3) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r10, @ANYBLOB="000226bd7000fbdbdf2509000000000001007063690000000200303030303a30303a31302e30000000002bff0300010000000800090042000000080001007063690011000200303030533a30303a31302e3000000000080003000200000008000900040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000800090003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x40)

270.654487ms ago: executing program 1 (id=1818):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x840)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x8000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000340)=0x9, 0x4)
getsockopt$inet_tcp_int(r6, 0x6, 0x7, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b113600000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

269.849445ms ago: executing program 1 (id=1819):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) (async)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0x4}, &(0x7f0000000100)=0xc) (rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}, @NL80211_ATTR_IE={0x95, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xf, @device_a, 0x8, @value=@broadcast, 0x81, 0x8, @device_a, 0x8}}, @mic={0x8c, 0x10, {0x65f, "e9b42de6ff8d", @short="01040f7f83e8c9b8"}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x4, 0x0, {0x8, 0x1, 0x0, 0xff, 0x0, 0x0, 0x1, 0x3}, 0x300, 0x5, 0x81}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0x5e, 0x2, @broadcast, 0x2, @void, 0x68fc, 0x3, @broadcast, 0x4e9}}, @mesh_chsw={0x76, 0x6, {0x6a, 0x8, 0x3}}, @gcr_ga={0xbd, 0x6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
sendto$inet6(r0, &(0x7f0000000340)="dd9efc0ea80b615e978330927ff53c447e27fac1ee3f4bf381bf956c9686d9e92608a92b570dd22a4bd923a9bacef2da1c1cec2be9fd30ae6dffbfd92f8032d05f7b444723195c6ab49cc47fd285e31ff1c0ea", 0x53, 0x80, &(0x7f00000003c0)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c) (async)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000440)={{0x2, 0x3}, {0xa9, 0x8}, 0x2})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000480)={@rand_addr=' \x01\x00', 0x7, 0x2, 0x3, 0x2, 0x4, 0x6}, &(0x7f00000004c0)=0x20) (async)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000500)={0x6, 0xa})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2ac, r2, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="292ae9b75ec94079e29ee2426ab3f0fe615f0b9746e201b6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7bfd4954ed36f1fffc52f4936d67a5748199a33816093040"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "661e2415600d5c27"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="54617bd24b3629c8e8400ff89ea94c11f390f20492c209f8465a601b59b64b30"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4b3cfb69953a4e6e17fe7d2dbdb2a4e3"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="afd2db1de123c2a0a7db0acc3d6c2b3858e6adc519441a63"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="052c93c8cc35b86d199e40d7c986d19bebe129fc1b56934d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b5b3021e8f5d3ca"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="38302d5094ce7d9f5dbacf787f8053ba"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="df61e994b52c77a53cb0631a9cd10dd8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d507018fdf7c94312a01e6fe5e420407"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff5b73}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "174bd1ccbf723663"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x100}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2052908dee0281376db2f1af8d5bbf6e"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a85ac89897b0a57e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ae0f8201d520692a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="848fda7786adfe69d5b90e8008330925"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2232b4941252bc535f7f6891fa49083520c45646875f7eca"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc9d139e72a5a9fb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="711bc31324d17dd3c23da12b07004c61"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3b61861a7d128a6f"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b4e8837d639c6764"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b88aad476f6f22ff49724fa2e208b390"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="488a22c6ce15145f6d5520818e8312e7df69df6a8fcbce6b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="14793751b2c4d7657e2e5751d89e433f9cbaa2a0f871e4a9a435702fb08ecf44"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x267db05b}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6b}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="854734f81af1e5f26793f2428a0186d1"}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000008c0)={0x8, 0x52, 0x401, 0xc068, 0xdcce, 0x7}) (async)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000900), &(0x7f0000000940)=0x4) (async, rerun: 64)
ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000980)) (async, rerun: 64)
r5 = openat$cgroup_ro(r0, &(0x7f0000000a00)='cgroup.events\x00', 0x0, 0x0)
ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000a40)={0x0, 0xa9, ""/169})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000b00)) (async)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r8, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="194bf2f21b70"}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000d40), 0x2040, 0x0) (async, rerun: 32)
listen(r6, 0x3ff) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000e80)={<r9=>r0, &(0x7f0000000d80)='](#[\x00', 0x432000, &(0x7f0000000dc0)={@_ha_fsid={[0x1, 0x7]}, {0x7, 0x1, 0x6, 0xffff}}, 0x9, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0xa})
sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x67}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10)

199.923289ms ago: executing program 1 (id=1820):
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x180, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x235f156c}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1013e5e4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5869126d}]}, @NFTA_CHAIN_USERDATA={0x5b, 0xc, "e1c3fde219726d538f511622c18cb5a743addd2299130e37ff609b915c84ddc60bcb9889d9b735ac9538102731f64af0a8682ad32ee986cee785aeb8c71eb97fe5498f1c982f8fa24a815c96262dae1af4dad786676f82"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5378e018}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa940}]}]}, @NFT_MSG_DELFLOWTABLE={0x7c, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x101, 0x7, 0x1, 0x0, "4f550a252b83eff02cbfe046312213e8ce818dfaf22f987b77547c9ed4c092c99ab5f3cfbee0bb64c23e1eb716fa2a5ec30ba041548fa219db542b9b8e81aaabaefd0c6e38c9000669ba094fb807704260085aeca53f6d86ec1a5705687cd7c8a9c62d6af9bb42e1ef658983c2c3d59dd11a6f0f881267f1f5e3f784c3dd11d69ee0f037d3d8d7a1a3355761636146d0456aa92be8a9e02cf21bb2a027aae13cf1711fe5757903e0e2dd182a413d9656616d7813e8f276aa843beb1e1686cc4002483839cd0ac185a2496fd9599b13b39611b43a8acee9c0c267a1a44ac09c2d97c63a9dab0369ec35ac5778866feef673eb81aa9d27763ebb8679c254"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3a8}, 0x1, 0x0, 0x0, 0x4040801}, 0x20040000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x8040000) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004010) (async)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x3, 0x2, 0x51eaf5287c9a1426, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004004) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x1, @broadcast, 0x3, @value=@device_b, 0x6, 0x10, @device_a, 0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22f0}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000084) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b80)={<r8=>r1})
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000bc0)={0x8, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, 0x10) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000d00)={<r9=>r8, &(0x7f0000000c00)='q##)\x00', 0x1, &(0x7f0000000c40)={@align=0x3, {0x4, 0x7, 0xfffffbff, 0x1}}, 0x9, &(0x7f0000000c80)={@_ha_fsid}, &(0x7f0000000cc0)=0x6c9})
sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x10) (async)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x88, r3, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6ee}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {0x9, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x41, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x2, 0xf, 0x43]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x15}, 0x80)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x160, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x144, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xde3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$sock_void(r10, 0x1, 0x1b, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000001240)="2b1e16068d9288b3c57a08c0c5e90bcb", 0x10)
close(r10) (async)
shutdown(r10, 0x1) (async)
sendfile(r1, r10, &(0x7f0000001280)=0x5, 0x8)
accept4$inet(r8, &(0x7f00000012c0), &(0x7f0000001300)=0x10, 0x800)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0xc52b30f8136c8766}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x4008808)

198.171931ms ago: executing program 1 (id=1821):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x10, 0x8, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x10, 0x8, @vifc_lcl_addr=@multicast2, @multicast1}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4)

149.476482ms ago: executing program 1 (id=1822):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000200)=[{0x15, 0x2, 0xfe, 0x80000024}, {0x6, 0x2, 0x9, 0xfffffff6}, {0x4, 0xd, 0x1, 0xfffffff7}, {0x6, 0xff, 0x2, 0x100005e}]}, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

0s ago: executing program 0 (id=1823):
socket$inet6(0xa, 0x1, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000e21f852cc240e4c172f363b8fdaba5a6e307000000cd9df617d3fd626544b72e498a43c37946b1d3611028360eb3d7e09f9dccf43ec3d300"/80, @ANYRES16=0x0, @ANYBLOB="020027bd7000fbdbdf250800000008000300050000000800040004000000140006800600010000000000060001000a000000050005000500000004000180080003000300000008000200040000000800030008000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write$tun(r1, 0x0, 0xfdef)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000300)=""/19, &(0x7f0000000340)=0x13)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff)
mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r5, r5, 0x0, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="580000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0xb4}}, 0x20084084)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4)
r7 = socket(0x15, 0x5, 0x0)
unshare(0x22020600)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmmsg$sock(r2, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000), 0x18}}], 0x2, 0x8854)

kernel console output (not intermixed with test programs):

 family 0 port 8472 - 0
[  100.453438][ T7958] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  100.456576][ T7958] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  100.459654][ T7958] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  100.506073][ T7958] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.509180][ T7958] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  100.512740][ T7958] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  100.515773][ T7958] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  100.546417][ T7958] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.549534][ T7958] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  100.552713][ T7958] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  100.555784][ T7958] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  100.605694][ T7958] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.608693][ T7958] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  100.612056][ T7958] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  100.615307][ T7958] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  100.676587][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.679882][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20003 - 0
[  100.684074][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  100.687606][   T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  100.697088][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.700509][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20003 - 0
[  100.705361][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  100.708615][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  100.718232][ T5867] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.720945][ T5867] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20003 - 0
[  100.723807][ T5867] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  100.726380][ T5867] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  100.734396][ T5867] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.736943][ T5867] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20003 - 0
[  100.739471][ T5867] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  100.742178][ T5867] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  101.003221][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'.
[  101.009226][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'.
[  101.088800][ T7987] lo speed is unknown, defaulting to 1000
[  101.094173][ T7987] lo speed is unknown, defaulting to 1000
[  101.098567][ T7987] lo speed is unknown, defaulting to 1000
[  101.318166][ T7996] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  101.365391][ T8001] validate_nla: 6 callbacks suppressed
[  101.365402][ T8001] netlink: 'syz.1.573': attribute type 3 has an invalid length.
[  101.387577][    T9] lo speed is unknown, defaulting to 1000
[  101.389485][ T7987] infiniband sqz0: set active
[  101.390997][ T7987] infiniband sqz0: added lo
[  101.397652][ T8001] nbd: nbd1 already in use
[  101.399780][ T8001] block nbd1: NBD_DISCONNECT
[  101.403098][ T8001] block nbd1: Send disconnect failed -32
[  101.405722][ T8001] block nbd1: Send disconnect failed -32
[  101.407556][ T8001] block nbd1: shutting down sockets
[  101.412283][ T8001] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.415766][ T8001] Buffer I/O error on dev nbd1, logical block 0, async page read
[  101.418836][ T8001] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.423527][ T8001] Buffer I/O error on dev nbd1, logical block 1, async page read
[  101.429649][ T8001] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.438590][ T8001] Buffer I/O error on dev nbd1, logical block 2, async page read
[  101.441540][ T8001] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.458033][ T7987] RDS/IB: sqz0: added
[  101.461115][ T7987] smc: adding ib device sqz0 with port count 1
[  101.463420][ T7987] smc:    ib device sqz0 port 1 has no pnetid
[  101.467406][    T9] lo speed is unknown, defaulting to 1000
[  101.469818][ T8001] Buffer I/O error on dev nbd1, logical block 3, async page read
[  101.472866][ T7987] lo speed is unknown, defaulting to 1000
[  101.478143][ T6755] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.482924][ T6755] Buffer I/O error on dev nbd1, logical block 0, async page read
[  101.485550][ T6755] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.488893][ T6755] Buffer I/O error on dev nbd1, logical block 1, async page read
[  101.491162][ T6755] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.494924][ T6755] Buffer I/O error on dev nbd1, logical block 2, async page read
[  101.497793][ T6755] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.501502][ T6755] Buffer I/O error on dev nbd1, logical block 3, async page read
[  101.504974][ T6755] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.508143][ T6755] Buffer I/O error on dev nbd1, logical block 0, async page read
[  101.510541][ T6755] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  101.513562][ T6755] Buffer I/O error on dev nbd1, logical block 1, async page read
[  101.516158][ T6755] ldm_validate_partition_table(): Disk read failed.
[  101.519092][ T6755] Dev nbd1: unable to read RDB block 0
[  101.521662][ T6755]  nbd1: unable to read partition table
[  101.532538][ T6755] ldm_validate_partition_table(): Disk read failed.
[  101.535608][ T6755] Dev nbd1: unable to read RDB block 0
[  101.538279][ T6755]  nbd1: unable to read partition table
[  101.593863][ T7987] lo speed is unknown, defaulting to 1000
[  101.680428][ T7987] lo speed is unknown, defaulting to 1000
[  101.774581][ T8007] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  101.786809][ T8007] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  101.819565][ T8012] netlink: 'syz.2.577': attribute type 1 has an invalid length.
[  101.822655][ T8013] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  101.844708][ T8012] bond8: entered promiscuous mode
[  101.849471][ T8012] 8021q: adding VLAN 0 to HW filter on device bond8
[  101.924184][ T8020] x_tables: ip_tables: ah match: only valid for protocol 51
[  101.975985][ T8029] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[  102.010252][ T8037] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  102.012779][ T8037] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  102.027939][ T8040] veth7: entered allmulticast mode
[  102.168980][ T8052] lo speed is unknown, defaulting to 1000
[  102.257607][ T8054] netlink: 'syz.1.585': attribute type 18 has an invalid length.
[  102.383723][ T8058] dvmrp0: left allmulticast mode
[  103.262384][ T8082] lo: entered allmulticast mode
[  103.265369][ T8082] lo: left allmulticast mode
[  103.414149][ T8099] tc action pedit 'at' offset 6 out of bounds
[  103.588470][ T8120] xt_nat: multiple ranges no longer supported
[  103.616815][ T8120] lo speed is unknown, defaulting to 1000
[  103.905525][ T8138] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  103.908435][ T8137] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  103.929507][ T8138] bond9: entered promiscuous mode
[  103.932243][ T8138] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.607743][ T8161] IPVS: ip_vs_edit_dest(): server weight less than zero
[  104.609900][ T8162] IPVS: ip_vs_edit_dest(): server weight less than zero
[  104.615122][ T8161] syzkaller1: entered promiscuous mode
[  104.616804][ T8161] syzkaller1: entered allmulticast mode
[  104.762746][ T8179] ipt_ECN: cannot use operation on non-tcp rule
[  104.839982][ T8180] __nla_validate_parse: 10 callbacks suppressed
[  104.839994][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'.
[  104.860190][ T8180] syzkaller0: entered promiscuous mode
[  104.862148][ T8180] syzkaller0: entered allmulticast mode
[  104.914256][ T8194] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  104.930753][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'.
[  104.934313][ T8194] 8021q: adding VLAN 0 to HW filter on device bond10
[  104.948256][ T8194] macvlan3: entered promiscuous mode
[  104.950155][ T8194] macvlan3: entered allmulticast mode
[  104.952710][ T8194] bond10: entered promiscuous mode
[  104.954627][ T8194] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  104.959580][ T8194] bond10: left promiscuous mode
[  105.034131][ T8200] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.618'.
[  105.089090][ T8203] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.094105][ T8203] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  105.216797][ T8217] syzkaller1: entered promiscuous mode
[  105.218600][ T8217] syzkaller1: entered allmulticast mode
[  105.258774][ T8222] netlink: 56 bytes leftover after parsing attributes in process `syz.2.625'.
[  105.290399][ T8224] netlink: 8748 bytes leftover after parsing attributes in process `syz.2.626'.
[  105.559481][ T8234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.564616][ T8234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.661656][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'.
[  105.688062][ T8242] veth9: entered allmulticast mode
[  105.693442][ T8242] bond11: (slave veth9): Enslaving as an active interface with an up link
[  105.699302][ T8242] bond11 (unregistering): (slave veth9): Releasing backup interface
[  105.705813][ T8242] bond11 (unregistering): Released all slaves
[  105.860119][ T8250] netlink: 'syz.2.634': attribute type 3 has an invalid length.
[  105.865478][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  105.907307][ T8255] netlink: 'syz.2.635': attribute type 1 has an invalid length.
[  105.935752][ T8255] 8021q: adding VLAN 0 to HW filter on device bond11
[  105.942837][ T8255] vlan5: entered allmulticast mode
[  105.944455][ T8255] bond11: entered allmulticast mode
[  105.956905][ T8255] bond11: (slave geneve2): making interface the new active one
[  105.962647][ T8255] geneve2: entered allmulticast mode
[  105.966057][ T8255] bond11: (slave geneve2): Enslaving as an active interface with an up link
[  105.974796][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.981179][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.992207][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.996706][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.997180][ T8255] syz.2.635 (8255) used greatest stack depth: 19360 bytes left
[  106.014415][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'.
[  106.105828][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'.
[  106.182609][ T8280] lo speed is unknown, defaulting to 1000
[  106.203648][ T8276] netlink: 'syz.1.641': attribute type 3 has an invalid length.
[  106.214167][ T8276] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.641'.
[  106.383117][   T34] audit: type=1800 audit(1778580446.477:3): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.645" name="memory.events" dev="tmpfs" ino=1062 res=0 errno=0
[  106.440698][ T8294] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[  106.506640][ T8299] openvswitch: netlink: Flow key attr not present in new flow.
[  106.509673][ T8294] 8021q: adding VLAN 0 to HW filter on device bond12
[  106.517621][ T8298] vlan2: entered promiscuous mode
[  106.522428][ T8298] bond12: entered promiscuous mode
[  106.527627][ T8298] vlan2: entered allmulticast mode
[  106.533999][ T8298] bond12: entered allmulticast mode
[  106.570143][ T8302] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.637540][ T8302] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.684431][ T8302] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.709167][ T8307] netlink: 'syz.1.650': attribute type 7 has an invalid length.
[  106.718378][ T8307] netlink: 'syz.1.650': attribute type 7 has an invalid length.
[  106.720754][ T5816] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.723821][ T5816] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.726403][ T5816] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.729471][ T5816] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.757515][ T8302] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.764334][ T8310] netlink: 'syz.1.651': attribute type 13 has an invalid length.
[  106.800864][ T8310] ip6gretap1: entered promiscuous mode
[  106.834226][ T5816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.847718][ T5816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.851087][ T5816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.859618][ T5816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.898480][ T8315] netlink: 'syz.1.652': attribute type 64 has an invalid length.
[  106.920855][ T8317] netlink: 'syz.1.653': attribute type 7 has an invalid length.
[  107.016123][ T8330] batadv_slave_1: entered promiscuous mode
[  107.037246][ T8330] batadv_slave_1: left promiscuous mode
[  107.183713][ T8351] netlink: 'syz.1.660': attribute type 4 has an invalid length.
[  107.294304][ T8362] batadv0: entered promiscuous mode
[  107.297082][ T8362] batadv0: left promiscuous mode
[  107.421432][ T8372] netlink: 'syz.0.663': attribute type 1 has an invalid length.
[  107.447834][ T8372] bond10: entered promiscuous mode
[  107.450505][ T8372] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.464214][ T8372] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.467185][ T8372] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address
[  107.471362][ T8372] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  107.478598][ T8372] bond10: (slave wireguard1): making interface the new active one
[  107.481814][ T8372] wireguard1: entered promiscuous mode
[  107.484494][ T8372] bond10: (slave wireguard1): Enslaving as an active interface with an up link
[  107.496045][ T8372] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address
[  107.505808][ T8372] bond10: (slave wireguard2): Enslaving as a backup interface with an up link
[  108.237435][   T24] lo speed is unknown, defaulting to 1000
[  108.239490][   T24] sqz0: Port: 1 Link DOWN
[  108.250660][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.259425][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.264169][ T8443] netlink: 'syz.0.672': attribute type 10 has an invalid length.
[  108.275778][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.282316][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.286791][ T8440] lo speed is unknown, defaulting to 1000
[  108.290024][ T8443] tap0: tun_chr_ioctl cmd 1074025677
[  108.297048][ T8443] tap0: linktype set to 773
[  108.310194][ T8443] : entered promiscuous mode
[  108.373548][ T8453] netlink: 'syz.0.675': attribute type 32 has an invalid length.
[  108.468564][ T8460] smc: net device lo applied user defined pnetid SYZ2
[  108.471485][ T8460] smc: net device lo erased user defined pnetid SYZ2
[  108.675508][ T8476] veth0_macvtap: entered allmulticast mode
[  108.678976][ T8476] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  108.739739][ T8485] 8021q: adding VLAN 0 to HW filter on device bond14
[  108.749439][ T8485] vlan3: entered promiscuous mode
[  108.751092][ T8485] bond14: entered promiscuous mode
[  108.753513][ T8485] vlan3: entered allmulticast mode
[  108.755112][ T8485] bond14: entered allmulticast mode
[  108.767035][ T8485] bond14: (slave bridge2): making interface the new active one
[  108.769420][ T8485] bridge2: entered promiscuous mode
[  108.772683][ T8485] bridge2: entered allmulticast mode
[  108.775626][ T8485] bond14: (slave bridge2): Enslaving as an active interface with an up link
[  108.838782][ T8488] ip6gretap0 (unregistering): left promiscuous mode
[  108.994522][ T8501] xt_hashlimit: size too large, truncated to 1048576
[  109.105665][ T8508] bridge_slave_1: left allmulticast mode
[  109.108181][ T8508] veth3: left allmulticast mode
[  109.110126][ T8508] vlan1: left promiscuous mode
[  109.111808][ T8508] bond4: left promiscuous mode
[  109.115218][ T8508] vlan1: left allmulticast mode
[  109.117956][ T8508] bond4: left allmulticast mode
[  109.120932][ T8508] bond8: left promiscuous mode
[  109.123215][ T8508] geneve2: left promiscuous mode
[  109.134345][ T8508] geneve2: left allmulticast mode
[  109.142832][ T8508] vlan2: left promiscuous mode
[  109.144363][ T8508] bond12: left promiscuous mode
[  109.146019][ T8508] vlan2: left allmulticast mode
[  109.147578][ T8508] bond12: left allmulticast mode
[  109.170123][ T8508] ip6gretap1: left promiscuous mode
[  109.181783][ T8508] vlan3: left promiscuous mode
[  109.186959][ T8508] bond14: left promiscuous mode
[  109.188876][ T8508] bridge2: left promiscuous mode
[  109.190821][ T8508] vlan3: left allmulticast mode
[  109.192913][ T8508] bond14: left allmulticast mode
[  109.194543][ T8508] bridge2: left allmulticast mode
[  109.213781][ T8501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.221057][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.232442][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.235667][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.238920][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.416391][ T8527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.474480][ T8533] syz_tun: left promiscuous mode
[  109.478778][ T8533] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  109.487994][ T8533] vlan2: left promiscuous mode
[  109.489672][ T8533] bond3: left promiscuous mode
[  109.491520][ T8533] bridge1: left promiscuous mode
[  109.495555][ T8533] vlan2: left allmulticast mode
[  109.497324][ T8533] bond3: left allmulticast mode
[  109.498985][ T8533] bridge1: left allmulticast mode
[  109.501300][ T8533] ip6erspan1: left promiscuous mode
[  109.503164][ T8533] ip6erspan1: left allmulticast mode
[  109.505328][ T8533] bridge3: left promiscuous mode
[  109.508274][ T8533] bond8: left promiscuous mode
[  109.510592][ T8533] bond9: left promiscuous mode
[  109.512682][ T8533] veth9: left allmulticast mode
[  109.514516][ T8533] vlan5: left allmulticast mode
[  109.516539][ T8533] bond11: left allmulticast mode
[  109.518272][ T8533] geneve2: left allmulticast mode
[  109.727822][ T8558] NCSI netlink: No device for ifindex 0
[  109.811202][ T8561] bond12: entered promiscuous mode
[  110.016633][ T8570] __nla_validate_parse: 28 callbacks suppressed
[  110.016646][ T8570] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.711'.
[  110.070037][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  110.105519][ T8573] bridge7: port 1(veth11) entered blocking state
[  110.107580][ T8573] bridge7: port 1(veth11) entered disabled state
[  110.109637][ T8573] veth11: entered allmulticast mode
[  110.113322][ T8573] veth11: entered promiscuous mode
[  110.307357][ T8584] lo speed is unknown, defaulting to 1000
[  110.345535][ T8593] 8021q: adding VLAN 0 to HW filter on device bond15
[  110.378365][ T8593] vlan4: entered allmulticast mode
[  110.380112][ T8593] bond15: entered allmulticast mode
[  110.392466][ T8593] bond15: (slave geneve3): making interface the new active one
[  110.395062][ T8593] geneve3: entered allmulticast mode
[  110.398100][ T8593] bond15: (slave geneve3): Enslaving as an active interface with an up link
[  110.400926][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.403719][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.410321][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.442614][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.448430][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  110.522112][ T8596] syzkaller0: entered promiscuous mode
[  110.524076][ T8596] syzkaller0: entered allmulticast mode
[  110.663784][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'.
[  110.695291][ T8610] syzkaller0: entered promiscuous mode
[  110.696825][ T8610] syzkaller0: entered allmulticast mode
[  110.778793][ T8617] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  110.788334][ T8617] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  110.831602][ T8617] ip6_vti0: mtu greater than device maximum
[  110.846295][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  110.892850][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'.
[  110.953966][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'.
[  111.039174][ T8630] bond13: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  111.044933][ T8630] bond13 (unregistering): Released all slaves
[  111.065017][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[  111.068492][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  111.077509][ T8628] geneve7: entered promiscuous mode
[  111.079555][ T8628] geneve7: entered allmulticast mode
[  111.084308][   T12] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 256 - 0
[  111.087510][   T12] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 256 - 0
[  111.090644][   T12] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 256 - 0
[  111.093694][   T12] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 256 - 0
[  111.158566][ T8633] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  111.171078][ T8633] netlink: 264 bytes leftover after parsing attributes in process `syz.2.732'.
[  111.265154][ T8639] bond0: (slave wlan1): Opening slave failed
[  111.267312][ T8637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.270981][ T8639] team0: Cannot enslave team device to itself
[  111.433339][ T8653] lo speed is unknown, defaulting to 1000
[  111.460066][ T8648] validate_nla: 17 callbacks suppressed
[  111.460077][ T8648] netlink: 'syz.2.738': attribute type 2 has an invalid length.
[  111.467530][ T8648] netlink: 'syz.2.738': attribute type 2 has an invalid length.
[  111.633938][ T8660] netlink: 'syz.1.741': attribute type 1 has an invalid length.
[  111.668077][ T8659] 8021q: adding VLAN 0 to HW filter on device bond17
[  111.672918][ T8659] bond16: (slave bond17): making interface the new active one
[  111.675601][ T8659] bond16: (slave bond17): Enslaving as an active interface with an up link
[  111.683897][ T8659] bond16: (slave gretap2): Enslaving as a backup interface with an up link
[  111.691385][ T8659] 8021q: adding VLAN 0 to HW filter on device bond16
[  111.801648][ T8671] netlink: 'syz.1.744': attribute type 1 has an invalid length.
[  111.816287][ T8671] bond18: entered promiscuous mode
[  111.818085][ T8671] 8021q: adding VLAN 0 to HW filter on device bond18
[  111.825487][ T8671] vlan5: entered allmulticast mode
[  111.827120][ T8671] bond18: entered allmulticast mode
[  111.835421][ T8671] bond18: (slave bridge3): making interface the new active one
[  111.837794][ T8671] bridge3: entered promiscuous mode
[  111.839564][ T8671] bridge3: entered allmulticast mode
[  111.842551][ T8671] bond18: (slave bridge3): Enslaving as an active interface with an up link
[  111.926281][ T8680] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[  111.946607][ T8680] 8021q: adding VLAN 0 to HW filter on device bond19
[  111.959946][ T8680] vlan6: entered promiscuous mode
[  111.961840][ T8680] bond19: entered promiscuous mode
[  111.964966][ T8680] vlan6: entered allmulticast mode
[  111.966744][ T8680] bond19: entered allmulticast mode
[  111.986034][ T8680] bond19: (slave bridge4): making interface the new active one
[  111.989170][ T8680] bridge4: entered promiscuous mode
[  111.991484][ T8680] bridge4: entered allmulticast mode
[  111.996414][ T8680] bond19: (slave bridge4): Enslaving as an active interface with an up link
[  112.206787][ T8708] IPv6: sit2: Disabled Multicast RS
[  112.765620][ T8756] syzkaller1: entered promiscuous mode
[  112.767371][ T8756] syzkaller1: entered allmulticast mode
[  112.843290][ T8769] netlink: 'syz.1.770': attribute type 5 has an invalid length.
[  112.888565][   T12] tipc: Subscription rejected, illegal request
[  112.892623][ T8775] netlink: 'syz.0.772': attribute type 14 has an invalid length.
[  112.895271][ T8775] netlink: 'syz.0.772': attribute type 11 has an invalid length.
[  113.026230][ T6766] block nbd1: Wrong magic (0xf0000000)
[  113.154561][ T8790] TCP: TCP_TX_DELAY enabled
[  113.283884][ T8807] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  113.286738][ T8807] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  113.568375][ T8821] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  113.572712][ T8821] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  113.600022][ T8820] macvlan2: entered promiscuous mode
[  113.603900][ T8820] macvlan2: entered allmulticast mode
[  113.606212][ T8820] bond11: (slave macvlan2): Error -98 calling set_mac_address
[  113.633777][ T8826] netlink: 'syz.1.781': attribute type 18 has an invalid length.
[  113.739449][ T8832] syzkaller1: entered promiscuous mode
[  113.743479][ T8832] syzkaller1: entered allmulticast mode
[  113.817599][ T8834] netlink: 'syz.1.784': attribute type 39 has an invalid length.
[  113.924128][ T8838] bond12: entered promiscuous mode
[  113.930238][ T8838] 8021q: adding VLAN 0 to HW filter on device bond12
[  113.955985][ T8843] xt_hashlimit: size too large, truncated to 1048576
[  113.971001][ T8839] 8021q: adding VLAN 0 to HW filter on device bond12
[  113.974119][ T8839] bond12: (slave wireguard3): The slave device specified does not support setting the MAC address
[  113.978276][ T8839] bond12: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  114.004967][ T8839] bond12: (slave wireguard3): making interface the new active one
[  114.012326][ T8839] wireguard3: entered promiscuous mode
[  114.015806][ T8839] bond12: (slave wireguard3): Enslaving as an active interface with an up link
[  114.024620][ T8838] bond12: (slave wireguard4): The slave device specified does not support setting the MAC address
[  114.030533][ T8838] bond12: (slave wireguard4): Enslaving as a backup interface with an up link
[  114.232466][ T8856] bond0: (slave v): Releasing backup interface
[  114.234914][ T8856] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  114.310246][ T8856] ip6gre2: entered allmulticast mode
[  114.404768][ T8869] 8021q: adding VLAN 0 to HW filter on device bond21
[  114.413552][ T8869] vlan7: entered allmulticast mode
[  114.415736][ T8869] bond21: entered allmulticast mode
[  114.456150][ T8874] lo: entered allmulticast mode
[  114.458367][ T8874] lo: left allmulticast mode
[  114.540993][ T8881] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  114.591220][ T8884] lo speed is unknown, defaulting to 1000
[  114.831482][ T8901] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  115.092737][ T8905] bond13: entered allmulticast mode
[  115.100566][ T8905] __nla_validate_parse: 92 callbacks suppressed
[  115.100580][ T8905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.799'.
[  115.107317][ T8907] macsec0: entered promiscuous mode
[  115.109489][ T8907] macsec0: entered allmulticast mode
[  115.589327][ T8921] netlink: 492 bytes leftover after parsing attributes in process `syz.1.803'.
[  115.742795][ T8929] veth7: left allmulticast mode
[  115.779719][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  115.783334][ T8931] netlink: 72 bytes leftover after parsing attributes in process `syz.1.808'.
[  115.789888][ T8931] vlan8: entered allmulticast mode
[  115.791602][ T8931] veth0_to_bond: entered allmulticast mode
[  115.826920][ T8934] ipip1: entered promiscuous mode
[  115.963354][ T8942] netlink: 228 bytes leftover after parsing attributes in process `syz.0.812'.
[  116.019643][ T8945] bond22: entered promiscuous mode
[  116.021539][ T8945] 8021q: adding VLAN 0 to HW filter on device bond22
[  116.128586][ T8954] bond23: (slave bond_slave_1): Device is not bonding slave
[  116.131518][ T8954] bond23: option active_slave: invalid value (bond_slave_1)
[  116.136552][ T8954] bond23 (unregistering): Released all slaves
[  116.158125][ T8961] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.814'.
[  116.170181][ T8959] bridge6: entered promiscuous mode
[  116.172247][ T8959] bridge6: entered allmulticast mode
[  116.183326][ T8959] team0: Port device bridge6 added
[  116.257214][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'.
[  116.262149][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'.
[  116.367776][ T8979] netlink: zone id is out of range
[  116.387719][ T8979] bond13: option mode: invalid value (254)
[  116.401455][ T8979] bond13 (unregistering): Released all slaves
[  116.445028][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'.
[  116.508478][ T8987] syzkaller1: entered promiscuous mode
[  116.510623][ T8987] syzkaller1: entered allmulticast mode
[  116.560947][ T8992] validate_nla: 10 callbacks suppressed
[  116.560957][ T8992] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[  116.561262][ T8991] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[  116.566317][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'.
[  116.605475][ T8991] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address
[  116.609719][ T8991] bond14: (slave vxcan3): Error -95 calling set_mac_address
[  116.644642][ T8998] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  116.659827][ T9002] netlink: 'syz.1.825': attribute type 8 has an invalid length.
[  116.673369][ T8991] bond14: (slave bridge8): Enslaving as an active interface with a down link
[  116.687001][ T8991] 8021q: adding VLAN 0 to HW filter on device bond14
[  116.714209][ T9005] openvswitch: netlink: Multiple metadata blocks provided
[  116.718826][ T8991] macvlan3: entered promiscuous mode
[  116.720523][ T8991] macvlan3: entered allmulticast mode
[  116.724598][ T8991] bond14: entered promiscuous mode
[  116.726646][ T8991] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  116.738403][ T8991] bond14: left promiscuous mode
[  116.894307][ T9020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.896818][ T9020] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  116.899143][ T9020] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  116.903728][ T9020] tipc: Resetting bearer <eth:syzkaller0>
[  116.950787][ T9024] bridge7: entered allmulticast mode
[  116.985180][ T9031] syzkaller1: entered promiscuous mode
[  116.986938][ T9031] syzkaller1: entered allmulticast mode
[  116.993587][ T9029] syzkaller1: entered promiscuous mode
[  116.995723][ T9029] syzkaller1: entered allmulticast mode
[  117.010003][ T9033] 8021q: adding VLAN 0 to HW filter on device team0
[  117.010688][ T9031] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  117.015326][ T9033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.065928][ T9031] bond15: (slave bridge9): making interface the new active one
[  117.075292][ T9031] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  117.095586][ T9036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.195553][ T9038] bond23 (unregistering): Released all slaves
[  117.212072][ T9041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.249353][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.274818][ T9043] IPVS: set_ctl: invalid protocol: 47 172.20.20.13:20002
[  117.414030][ T9068] netlink: 'syz.1.847': attribute type 3 has an invalid length.
[  117.513126][ T9083] netlink: 'syz.1.849': attribute type 39 has an invalid length.
[  117.522560][ T9083] netlink: 'syz.1.849': attribute type 39 has an invalid length.
[  117.525055][ T9083] netlink: 'syz.1.849': attribute type 39 has an invalid length.
[  117.529478][ T9083] netlink: 'syz.1.849': attribute type 39 has an invalid length.
[  117.894205][   T10] tipc: Node number set to 4251560371
[  118.065673][ T9115] openvswitch: netlink: Flow key attr not present in new flow.
[  118.070669][ T9115] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[  118.380388][ T9131] vlan7: entered promiscuous mode
[  118.451946][   T56] block nbd5: Receive control failed (result -32)
[  118.456327][ T6766] block nbd5: Receive control failed (result -32)
[  118.563252][ T9135] bond15: option fail_over_mac: invalid value (127)
[  118.566983][ T9135] bond15 (unregistering): Released all slaves
[  118.604064][ T9136] bond15: option fail_over_mac: invalid value (127)
[  118.608425][ T9136] bond15 (unregistering): Released all slaves
[  118.755008][ T9161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.916996][ T9174] IPv6: NLM_F_CREATE should be specified when creating new route
[  118.932230][ T9174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.935079][ T9174] IPv6: NLM_F_CREATE should be set when creating new route
[  118.937987][ T9174] IPv6: NLM_F_CREATE should be set when creating new route
[  118.940831][ T9174] IPv6: NLM_F_CREATE should be set when creating new route
[  119.020464][ T9185] team0: Port device dummy0 added
[  119.028905][ T9185] team0: Port device dummy0 removed
[  119.033929][ T9185] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  119.050819][ T9177] lo speed is unknown, defaulting to 1000
[  119.488531][ T9190] bond23: option miimon: invalid value (18446744073709551607)
[  119.491728][ T9190] bond23: option miimon: allowed values 0 - 2147483647
[  119.496227][ T9190] bond23 (unregistering): Released all slaves
[  119.560357][ T9164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.598297][ T9193] 8021q: adding VLAN 0 to HW filter on device bond23
[  119.617163][ T9194] team_slave_1: entered promiscuous mode
[  119.651495][ T9200] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  119.655702][ T9200] bond16 (unregistering): Released all slaves
[  120.415142][ T9256] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  120.593489][ T9274] xt_hashlimit: size too large, truncated to 1048576
[  120.704736][ T9294] __nla_validate_parse: 25 callbacks suppressed
[  120.704752][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.891'.
[  120.710281][ T9294] openvswitch: netlink: Flow actions attr not present in new flow.
[  120.751798][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'.
[  120.779909][ T9274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.785288][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.891'.
[  120.790603][ T9294] ip6tnl3: entered allmulticast mode
[  120.796861][ T5868] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  120.802583][ T9294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.882586][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.895'.
[  120.952740][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'.
[  120.955636][ T9312] netlink: 108 bytes leftover after parsing attributes in process `syz.2.898'.
[  120.958357][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'.
[  120.964287][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  121.021229][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  121.024384][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  121.377784][ T9349] bond24: entered promiscuous mode
[  121.380328][ T9349] 8021q: adding VLAN 0 to HW filter on device bond24
[  121.488386][ T9355] bond25: entered promiscuous mode
[  121.490969][ T9355] 8021q: adding VLAN 0 to HW filter on device bond25
[  121.498422][ T9355] bond25: entered allmulticast mode
[  121.512673][ T9355] bond25: (slave bridge6): making interface the new active one
[  121.515634][ T9355] bridge6: entered promiscuous mode
[  121.517918][ T9355] bridge6: entered allmulticast mode
[  121.521140][ T9355] bond25: (slave bridge6): Enslaving as an active interface with an up link
[  121.563683][ T9361] validate_nla: 38 callbacks suppressed
[  121.563694][ T9361] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  121.601771][ T9361] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address
[  121.606137][ T9361] bond26: (slave vxcan3): Error -95 calling set_mac_address
[  121.655263][ T9363] bond26: (slave bridge7): Enslaving as an active interface with a down link
[  121.778390][ T9372] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[  121.790993][ T9372] bond27: entered promiscuous mode
[  121.793185][ T9372] 8021q: adding VLAN 0 to HW filter on device bond27
[  121.852673][ T9377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.866938][ T9377] IPVS: Unknown mcast interface: .
[  122.061724][ T9390] netlink: 'syz.0.916': attribute type 4 has an invalid length.
[  122.078546][ T9390] netlink: 'syz.0.916': attribute type 4 has an invalid length.
[  122.106940][ T9390] virt_wifi0: left promiscuous mode
[  122.135241][ T5816] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.138891][ T5816] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20003 - 0
[  122.141582][ T5816] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  122.144763][ T5816] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  122.147431][ T5816] netdevsim netdevsim0 eth0: unset [1, 3] type 2 family 0 port 256 - 0
[  122.158110][ T5816] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.160757][ T5816] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20003 - 0
[  122.164220][ T5816] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  122.170538][ T5816] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  122.174832][ T5816] netdevsim netdevsim0 eth1: unset [1, 3] type 2 family 0 port 256 - 0
[  122.181316][ T5816] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.184199][ T5816] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20003 - 0
[  122.186933][ T5816] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  122.189660][ T5816] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  122.192802][ T5816] netdevsim netdevsim0 eth2: unset [1, 3] type 2 family 0 port 256 - 0
[  122.195551][ T5816] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.198561][ T5816] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20003 - 0
[  122.201169][ T5816] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  122.204286][ T5816] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  122.206885][ T5816] netdevsim netdevsim0 eth3: unset [1, 3] type 2 family 0 port 256 - 0
[  122.408672][ T9407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.448037][ T9409] netlink: 'syz.0.922': attribute type 10 has an invalid length.
[  122.891337][ T9436] syzkaller1: entered promiscuous mode
[  122.907193][ T9436] syzkaller1: entered allmulticast mode
[  123.044621][ T9447] netlink: 'syz.1.931': attribute type 1 has an invalid length.
[  123.072067][ T9447] bond28: entered promiscuous mode
[  123.074019][ T9447] 8021q: adding VLAN 0 to HW filter on device bond28
[  123.162794][ T9455] netlink: 'syz.1.932': attribute type 1 has an invalid length.
[  123.203045][ T9455] bond29: (slave geneve4): making interface the new active one
[  123.205642][ T9455] bond29: (slave geneve4): Enslaving as an active interface with an up link
[  123.250257][ T5868] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  123.253040][ T5868] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  123.255949][ T5868] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  123.259166][ T5868] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  123.279755][ T9469] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  123.293183][ T9469] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  123.316801][ T9471] lo speed is unknown, defaulting to 1000
[  123.712965][ T9506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  123.778898][ T9514] netlink: 'syz.0.943': attribute type 1 has an invalid length.
[  123.795040][ T9514] bond15: entered promiscuous mode
[  123.796907][ T9514] 8021q: adding VLAN 0 to HW filter on device bond15
[  124.298038][ T9558] lo speed is unknown, defaulting to 1000
[  124.477555][ T9580] netlink: 'syz.2.963': attribute type 4 has an invalid length.
[  124.480430][ T9581] syzkaller1: entered promiscuous mode
[  124.482454][ T9581] syzkaller1: entered allmulticast mode
[  124.486127][ T9581] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  124.520849][ T9583] netlink: 'syz.2.964': attribute type 12 has an invalid length.
[  124.682000][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  124.740185][ T9600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.044434][ T9631] bond31: (slave vxcan3): The slave device specified does not support setting the MAC address
[  125.047724][ T9631] bond31: (slave vxcan3): Error -95 calling set_mac_address
[  125.104826][ T9631] bond31: (slave bridge9): Enslaving as an active interface with a down link
[  125.124281][ T9631] macvlan0: entered promiscuous mode
[  125.129320][ T9631] macvlan0: entered allmulticast mode
[  125.132546][ T9631] bond31: entered promiscuous mode
[  125.135397][ T9631] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  125.141682][ T9631] bond31: left promiscuous mode
[  125.400602][ T9650] bond32: entered allmulticast mode
[  125.418041][ T9650] macvlan0: entered promiscuous mode
[  125.419870][ T9650] macvlan0: entered allmulticast mode
[  125.423089][ T9650] bond32: (slave macvlan0): Opening slave failed
[  125.502730][ T9657] lo: Caught tx_queue_len zero misconfig
[  125.520552][ T9658] Unsupported ieee802154 address type: 0
[  125.523698][ T9655] Unsupported ieee802154 address type: 0
[  125.794210][ T9675] __nla_validate_parse: 74 callbacks suppressed
[  125.794220][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'.
[  125.853201][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.990'.
[  126.074973][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'.
[  126.097313][ T9697] syz_tun (unregistering): left promiscuous mode
[  126.166973][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'.
[  126.169924][ T9707] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.169985][ T9707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.174972][ T9707] IPv6: NLM_F_CREATE should be set when creating new route
[  126.177231][ T9707] IPv6: NLM_F_CREATE should be set when creating new route
[  126.179400][ T9707] IPv6: NLM_F_CREATE should be set when creating new route
[  126.217481][ T9711] geneve5: entered promiscuous mode
[  126.219562][ T9711] geneve5: entered allmulticast mode
[  126.223843][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  126.230098][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  126.234714][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  126.237505][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  126.499566][ T9718] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1000'.
[  126.502739][ T9718] netlink: Unknown conntrack attr (0)
[  126.546301][ T9722] bond33: (slave vxcan3): The slave device specified does not support setting the MAC address
[  126.549886][ T9722] bond33: (slave vxcan3): Error -95 calling set_mac_address
[  126.640978][ T9728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1002'.
[  126.737818][ T9734] bond28: entered allmulticast mode
[  126.778730][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'.
[  126.853486][ T9740] pim6reg: entered allmulticast mode
[  126.940582][ T9745] gre1: entered promiscuous mode
[  127.057373][ T9752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1011'.
[  127.093350][ T9756] lo speed is unknown, defaulting to 1000
[  127.128655][ T9760] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1010'.
[  127.164439][ T1044] block nbd3: Connection timed out, retrying (0/2 alive)
[  127.168228][ T1044] block nbd3: Connection timed out, retrying (0/2 alive)
[  127.170890][ T1044] block nbd3: Connection timed out, retrying (0/2 alive)
[  127.174264][ T1044] block nbd3: Connection timed out, retrying (0/2 alive)
[  127.176620][ T1044] block nbd3: Dead connection, failed to find a fallback
[  127.178855][ T1044] block nbd3: shutting down sockets
[  127.180700][ T1044] blk_print_req_error: 138 callbacks suppressed
[  127.180707][ T1044] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.186330][ T1044] buffer_io_error: 138 callbacks suppressed
[  127.186337][ T1044] Buffer I/O error on dev nbd3, logical block 3, async page read
[  127.190992][ T1044] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.195285][ T1044] Buffer I/O error on dev nbd3, logical block 2, async page read
[  127.198626][ T1044] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.206877][ T1044] Buffer I/O error on dev nbd3, logical block 1, async page read
[  127.209920][ T1044] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.213977][ T1044] Buffer I/O error on dev nbd3, logical block 0, async page read
[  127.218104][ T7375] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.222704][ T7375] Buffer I/O error on dev nbd3, logical block 0, async page read
[  127.226488][ T7375] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.230375][ T7375] Buffer I/O error on dev nbd3, logical block 1, async page read
[  127.233773][ T7375] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.237784][ T7375] Buffer I/O error on dev nbd3, logical block 2, async page read
[  127.240950][ T7375] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.246439][ T7375] Buffer I/O error on dev nbd3, logical block 3, async page read
[  127.249925][ T7375] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.262139][ T7375] Buffer I/O error on dev nbd3, logical block 0, async page read
[  127.264828][ T7375] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  127.272064][ T7375] Buffer I/O error on dev nbd3, logical block 1, async page read
[  127.275258][ T7375] ldm_validate_partition_table(): Disk read failed.
[  127.278075][ T7375] Dev nbd3: unable to read RDB block 0
[  127.280592][ T7375]  nbd3: unable to read partition table
[  127.295553][ T7375] ldm_validate_partition_table(): Disk read failed.
[  127.298196][ T7375] Dev nbd3: unable to read RDB block 0
[  127.300135][ T7375]  nbd3: unable to read partition table
[  127.388329][ T9778] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.391492][ T9778] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  127.398617][ T9778] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  127.460460][ T9778] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.482382][ T9778] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  127.485676][ T9778] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  127.533942][ T9787] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1020'.
[  127.566483][ T9778] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.569757][ T9778] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  127.575850][ T9778] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  127.621320][ T9791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.638443][ T9778] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.652612][ T9778] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  127.656829][ T9778] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  127.705329][ T9799] validate_nla: 3 callbacks suppressed
[  127.705342][ T9799] netlink: 'syz.2.1024': attribute type 21 has an invalid length.
[  127.709910][ T9799] netlink: 'syz.2.1024': attribute type 4 has an invalid length.
[  127.716793][ T9799] netlink: 'syz.2.1024': attribute type 5 has an invalid length.
[  127.766014][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  127.769816][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  127.777006][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  127.795072][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  127.800057][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  127.806123][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  127.817562][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  127.820874][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  127.824615][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  127.838932][ T9804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.842720][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  127.845302][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  127.847812][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  127.855437][ T9804] tipc: Disabling bearer <eth:syzkaller0>
[  127.925533][ T9811] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  128.328370][ T9831] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  128.830627][ T9837] nbd: must specify at least one socket
[  128.924449][ T9843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.233182][ T9861] lo speed is unknown, defaulting to 1000
[  129.497368][ T9872] lo speed is unknown, defaulting to 1000
[  129.566074][ T9882] bridge0: entered allmulticast mode
[  129.568042][ T9882] pim6reg: left allmulticast mode
[  129.569764][ T9882] bridge0: left allmulticast mode
[  129.610647][ T9876] lo speed is unknown, defaulting to 1000
[  130.109623][ T9899] xt_connbytes: Forcing CT accounting to be enabled
[  130.237977][ T9916] netlink: 'syz.2.1054': attribute type 4 has an invalid length.
[  130.277713][ T9922] tun0: tun_chr_ioctl cmd 1074025672
[  130.279690][ T9922] tun0: ignored: set checksum disabled
[  130.316049][ T9923] netlink: 'syz.1.1056': attribute type 1 has an invalid length.
[  130.455363][ T9931] netlink: 'syz.2.1059': attribute type 1 has an invalid length.
[  132.922123][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  133.296357][ T9938] bond16: (slave bridge10): making interface the new active one
[  133.300478][ T9938] bond16: (slave bridge10): Enslaving as an active interface with an up link
[  133.314427][ T9931] bond16: (slave gretap2): Enslaving as an active interface with an up link
[  133.323850][ T9941] macvlan3: entered promiscuous mode
[  133.325894][ T9941] macvlan3: entered allmulticast mode
[  133.328025][ T9941] bond16: entered promiscuous mode
[  133.329729][ T9941] bridge10: entered promiscuous mode
[  133.331764][ T9941] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  133.335302][ T9941] bond16: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  133.341464][ T9941] bond16: left promiscuous mode
[  133.344124][ T9941] bridge10: left promiscuous mode
[  133.402303][ T9948] __nla_validate_parse: 17 callbacks suppressed
[  133.402319][ T9948] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1061'.
[  133.461428][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'.
[  133.464822][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'.
[  133.467755][ T9957] netlink: 'syz.2.1062': attribute type 12 has an invalid length.
[  133.470347][ T9957] netlink: 'syz.2.1062': attribute type 13 has an invalid length.
[  133.596092][ T9972] bond17: option fail_over_mac: invalid value (127)
[  133.604092][ T9972] bond17 (unregistering): Released all slaves
[  133.627757][ T9976] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1068'.
[  133.660141][ T9982] syzkaller1: entered promiscuous mode
[  133.663481][ T9982] syzkaller1: entered allmulticast mode
[  133.682713][ T9982] macsec1: entered promiscuous mode
[  133.684841][ T9982] v: entered promiscuous mode
[  133.689913][ T9982] macsec1: entered allmulticast mode
[  133.693628][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'.
[  133.699292][ T9982] v: entered allmulticast mode
[  133.703569][ T9982] v: left allmulticast mode
[  133.705835][ T9982] v: left promiscuous mode
[  133.746668][ T9985] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  133.783738][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1071'.
[  133.806543][ T9988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1071'.
[  133.831146][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  133.928640][ T9997] lo speed is unknown, defaulting to 1000
[  133.943754][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1074'.
[  133.943831][T10001] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1074'.
[  134.431531][T10010] bond17: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  134.456137][T10010] bond17 (unregistering): Released all slaves
[  134.877054][T10061] netlink: 'syz.1.1086': attribute type 1 has an invalid length.
[  134.903745][T10061] 8021q: adding VLAN 0 to HW filter on device bond35
[  134.917861][T10061] 8021q: adding VLAN 0 to HW filter on device batadv1
[  134.923185][T10061] bond35: (slave batadv1): making interface the new active one
[  134.926822][T10061] bond35: (slave batadv1): Enslaving as an active interface with an up link
[  134.994705][T10070] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  135.002472][T10070] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  135.050404][T10072] netlink: 'syz.1.1089': attribute type 1 has an invalid length.
[  135.074252][T10072] bond36: entered promiscuous mode
[  135.078213][T10072] 8021q: adding VLAN 0 to HW filter on device bond36
[  135.148239][T10078] bond36: (slave bridge10): making interface the new active one
[  135.151509][T10078] bridge10: entered promiscuous mode
[  135.157742][T10078] bond36: (slave bridge10): Enslaving as an active interface with an up link
[  135.549680][T10101] vti0: entered promiscuous mode
[  135.551500][T10101] vti0: entered allmulticast mode
[  135.875001][T10127] netlink: 'syz.0.1103': attribute type 1 has an invalid length.
[  135.899151][T10127] 8021q: adding VLAN 0 to HW filter on device bond16
[  135.904093][T10130] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  135.907714][T10130] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  135.911535][T10134] netlink: 'syz.1.1105': attribute type 13 has an invalid length.
[  135.918061][T10127] bond16 (unregistering): Released all slaves
[  136.046426][T10140] syzkaller0: entered promiscuous mode
[  136.048417][T10140] syzkaller0: entered allmulticast mode
[  136.084246][T10140] IPv6: sit1: Disabled Multicast RS
[  136.429316][T10182] netlink: 'syz.0.1115': attribute type 1 has an invalid length.
[  136.498348][T10187] xt_hashlimit: size too large, truncated to 1048576
[  136.600463][T10196] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  136.673556][T10199] batadv0: entered promiscuous mode
[  136.676305][T10199] batadv0: left promiscuous mode
[  136.966856][T10220] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  137.058345][T10236] netlink: 'syz.1.1125': attribute type 1 has an invalid length.
[  137.103432][T10236] bond37: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  137.126245][T10236] veth17: entered promiscuous mode
[  137.129532][T10236] bond37: (slave veth17): Enslaving as a backup interface with a down link
[  137.134280][ T5868] bond37: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  137.139988][T10236] 8021q: adding VLAN 0 to HW filter on device bond37
[  137.243447][T10251] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  137.252371][ T5868] bond37: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  137.399205][T10274] 8021q: adding VLAN 0 to HW filter on device bond38
[  137.433064][T10283] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  137.442667][T10283] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  137.565615][T10305] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  137.591152][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.595436][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.598621][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.601234][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.632492][T10313] vti0: entered promiscuous mode
[  137.635711][T10313] mac80211_hwsim hwsim6 wlan1: Master is either lo or non-ether device
[  137.669102][T10318] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  137.734433][T10323] gretap0: refused to change device tx_queue_len
[  137.740166][T10323] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  137.993801][T10349] bond39: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  138.006720][T10349] bond39: (slave lo): Enslaving as an active interface with an up link
[  138.013584][T10349] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  138.113766][T10354] bond17: entered promiscuous mode
[  138.116553][T10354] 8021q: adding VLAN 0 to HW filter on device bond17
[  138.141681][T10360] bond17: entered promiscuous mode
[  138.145950][T10360] 8021q: adding VLAN 0 to HW filter on device bond17
[  138.380418][T10386] bond18: entered promiscuous mode
[  138.383603][T10386] 8021q: adding VLAN 0 to HW filter on device bond18
[  138.528084][T10400] __nla_validate_parse: 68 callbacks suppressed
[  138.528102][T10400] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1163'.
[  138.528397][T10403] validate_nla: 11 callbacks suppressed
[  138.528408][T10403] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  138.549835][T10403] bond18: entered promiscuous mode
[  138.551617][T10403] bond18: entered allmulticast mode
[  138.553902][T10403] 8021q: adding VLAN 0 to HW filter on device bond18
[  138.560079][T10402] erspan2: entered allmulticast mode
[  138.564069][T10402] bond18: (slave erspan2): making interface the new active one
[  138.566399][T10402] erspan2: entered promiscuous mode
[  138.568566][T10402] bond18: (slave erspan2): Enslaving as an active interface with an up link
[  138.714080][T10424] syzkaller1: entered promiscuous mode
[  138.715804][T10424] syzkaller1: entered allmulticast mode
[  138.723308][T10424] netlink: 'syz.0.1169': attribute type 1 has an invalid length.
[  138.749701][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'.
[  138.754905][T10424] 8021q: adding VLAN 0 to HW filter on device bond19
[  138.760981][T10424] macvlan2: entered promiscuous mode
[  138.762836][T10424] macvlan2: entered allmulticast mode
[  138.764946][T10424] bond19: entered promiscuous mode
[  138.766756][T10424] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  138.771234][T10424] bond19: left promiscuous mode
[  138.778480][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1162'.
[  138.866054][T10430] bond19: option fail_over_mac: invalid value (127)
[  138.890938][T10434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1172'.
[  138.891122][T10430] bond19 (unregistering): Released all slaves
[  138.895491][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'.
[  138.930025][T10436] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[  139.137591][T10462] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.163508][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'.
[  139.170768][T10467] bond0: entered promiscuous mode
[  139.175502][T10467] dummy0: entered promiscuous mode
[  139.179537][T10467] bond0: left promiscuous mode
[  139.181237][T10467] dummy0: left promiscuous mode
[  139.296012][T10477] x_tables: unsorted underflow at hook 3
[  139.389694][T10482] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1185'.
[  139.402643][T10482] netlink: 'syz.1.1185': attribute type 1 has an invalid length.
[  139.407774][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'.
[  139.429775][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.452265][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.458965][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.462724][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.465997][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.469220][T10489] netlink: 'syz.0.1187': attribute type 1 has an invalid length.
[  139.570143][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  139.651543][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'.
[  140.709944][T10573] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.713915][T10573] 8021q: adding VLAN 0 to HW filter on device team0
[  140.796185][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.887735][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.901950][T10573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.962114][T10573] veth1_vlan: left promiscuous mode
[  140.967584][T10573] veth0_vlan: left promiscuous mode
[  140.972094][T10573] veth0_vlan: entered promiscuous mode
[  140.987475][T10573] veth1_vlan: entered promiscuous mode
[  141.003594][T10573] veth1_macvtap: left promiscuous mode
[  141.006836][T10573] veth0_macvtap: left promiscuous mode
[  141.008722][T10573] veth0_macvtap: left allmulticast mode
[  141.062503][T10573] veth1_macvtap: entered promiscuous mode
[  141.069743][T10573] veth1_macvtap: entered allmulticast mode
[  141.073160][T10573] macsec0: left promiscuous mode
[  141.076267][T10573] macsec0: left allmulticast mode
[  141.078686][T10573] veth1_macvtap: left allmulticast mode
[  141.112285][T10573] virt_wifi0: entered promiscuous mode
[  141.114808][T10573] macsec1: left promiscuous mode
[  141.127128][T10573] bond1: left promiscuous mode
[  141.129121][T10573] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.134707][T10573] geneve2: left promiscuous mode
[  141.136578][T10573] geneve2: left allmulticast mode
[  141.146029][T10573] geneve3: left promiscuous mode
[  141.147695][T10573] geneve3: left allmulticast mode
[  141.153644][T10573] vlan3: left promiscuous mode
[  141.158223][T10573] geneve4: left promiscuous mode
[  141.159955][T10573] geneve4: left allmulticast mode
[  141.161730][T10573] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check.
[  141.201217][  T795] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.203488][  T795] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.210814][  T795] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.213065][  T795] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.228379][ T5868] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.231509][ T5868] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.311515][ T5868] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  141.314305][ T5868] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.316873][ T5868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.319653][ T5868] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  141.323901][ T5868] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.326710][ T5868] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.329454][ T5868] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  141.337050][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  141.340020][ T5868] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.343732][ T5868] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.353666][ T5868] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  141.506506][T10590] pim6reg: entered allmulticast mode
[  141.551481][T10590] pim6reg: left allmulticast mode
[  141.698912][T10601] bond21: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  141.715359][T10601] bond21 (unregistering): Released all slaves
[  141.989838][T10619] syzkaller0: entered promiscuous mode
[  141.991616][T10619] syzkaller0: entered allmulticast mode
[  141.995197][T10619] 0: reclassify loop, rule prio 0, protocol 800
[  142.180661][T10638] syz.2.1220 uses old SIOCAX25GETINFO
[  142.400517][T10659] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.404828][T10659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.409063][T10659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.506479][T10659] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.510198][T10659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.514209][T10659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.565792][T10659] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.569831][T10659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.576748][T10659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.643813][T10659] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.647649][T10659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.651514][T10659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  142.686256][T10676] bond40: entered promiscuous mode
[  142.688936][T10676] 8021q: adding VLAN 0 to HW filter on device bond40
[  142.716611][T10676] bond40: entered allmulticast mode
[  142.736745][T10676] bond40: (slave bridge13): making interface the new active one
[  142.739995][T10676] bridge13: entered promiscuous mode
[  142.743096][T10676] bridge13: entered allmulticast mode
[  142.747468][T10676] bond40: (slave bridge13): Enslaving as an active interface with an up link
[  142.792222][ T8308] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.795429][ T8308] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  142.798739][ T8308] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  142.806645][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.809914][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  142.814046][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  142.852326][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.855539][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  142.858818][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  142.881376][ T5816] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.887649][ T5816] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  142.890953][ T5816] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  142.960598][T10691] can: request_module (can-proto-0) failed.
[  143.215448][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.218806][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.222588][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.235829][T10713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  143.261557][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.268328][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.275992][T10713] syzkaller0 speed is unknown, defaulting to 1000
[  143.313984][T10713] veth15: entered promiscuous mode
[  143.651511][T10730] __nla_validate_parse: 19 callbacks suppressed
[  143.651528][T10730] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1243'.
[  143.729519][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1245'.
[  143.733575][T10743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1245'.
[  143.864629][T10750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.866803][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  143.868964][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  143.871176][T10750] IPv6: NLM_F_CREATE should be set when creating new route
[  143.891683][T10750] validate_nla: 7 callbacks suppressed
[  143.891698][T10750] netlink: 'syz.2.1248': attribute type 10 has an invalid length.
[  143.905046][T10750] bond0: (slave dummy0): Releasing backup interface
[  143.914843][T10750] team0: Port device dummy0 added
[  143.919399][T10750] netlink: 'syz.2.1248': attribute type 10 has an invalid length.
[  143.938183][T10750] team0: Port device dummy0 removed
[  143.943841][T10750] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  144.003577][T10754] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  144.030998][T10754] 8021q: adding VLAN 0 to HW filter on device bond20
[  144.071769][T10766] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  144.116661][T10768] netlink: 'syz.1.1254': attribute type 30 has an invalid length.
[  144.232335][T10781] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[  144.259469][T10781] bond42: (slave bridge14): making interface the new active one
[  144.264004][T10781] bond42: (slave bridge14): Enslaving as an active interface with an up link
[  144.282635][T10784] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1258'.
[  144.292819][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'.
[  144.397742][T10790] netlink: 'syz.1.1261': attribute type 1 has an invalid length.
[  144.459038][T10798] tipc: Failed to remove unknown binding: 66,1,1/0:1884990268/1884990270
[  144.466246][T10798] tipc: Failed to remove unknown binding: 66,1,1/0:1884990268/1884990270
[  144.469974][T10798] tipc: Failed to remove unknown binding: 66,1,1/0:1884990268/1884990270
[  144.517823][T10805] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  144.523152][T10802] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  144.525573][T10802] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  144.531719][  T794] syzkaller0 speed is unknown, defaulting to 1000
[  144.546922][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'.
[  144.555773][   T31] hid-generic 0005:10CF:0A11.0002: item fetching failed at offset 0/1
[  144.559642][   T31] hid-generic 0005:10CF:0A11.0002: probe with driver hid-generic failed with error -22
[  144.791749][T10821] tipc: Started in network mode
[  144.793643][T10821] tipc: Node identity 080211000001, cluster identity 4711
[  144.797294][T10821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.799906][T10821] tipc: Resetting bearer <eth:syzkaller0>
[  144.806342][T10821] tipc: Resetting bearer <eth:syzkaller0>
[  144.890214][T10824] macsec1: entered promiscuous mode
[  145.003504][T10826] ip6tnl0: entered promiscuous mode
[  145.005394][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  145.066776][T10839] netlink: 'syz.2.1276': attribute type 1 has an invalid length.
[  145.093822][T10839] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address
[  145.097278][T10839] bond21: (slave vxcan3): Error -95 calling set_mac_address
[  145.114424][T10843] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.117382][T10843] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.120284][T10843] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  145.136674][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1276'.
[  145.149047][T10846] bond21: (slave bridge11): Enslaving as an active interface with a down link
[  145.155478][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1276'.
[  145.161620][T10839] 8021q: adding VLAN 0 to HW filter on device bond21
[  145.168634][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1276'.
[  145.186623][T10843] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.190117][T10843] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.197973][T10843] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  145.235189][T10843] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.238886][T10843] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.243351][T10843] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  145.265415][T10843] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.268489][T10843] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  145.278690][T10843] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  145.355977][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.359303][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  145.363139][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  145.373105][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.376063][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  145.379392][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  145.397002][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.403565][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  145.410452][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  145.421190][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.424958][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  145.427536][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  145.475188][T10865] netlink: 'syz.0.1282': attribute type 1 has an invalid length.
[  145.517517][T10865] 8021q: adding VLAN 0 to HW filter on device bond22
[  145.534822][T10865] xt_HMARK: proto mask must be zero with L3 mode
[  145.642656][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  145.755705][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.758811][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.770905][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.792307][   T31] tipc: Node number set to 134418688
[  145.864420][T10888] macvlan0: entered promiscuous mode
[  146.313143][T10906] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000
[  146.316105][T10906] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000
[  146.493954][T10918] "syz.1.1299" (10918) uses obsolete ecb(arc4) skcipher
[  147.376428][T10940] bond0: entered promiscuous mode
[  147.379612][T10940] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  147.384317][T10940] hsr1: entered promiscuous mode
[  147.821005][T10975] openvswitch: netlink: IP tunnel TTL not specified.
[  147.827890][T10975] netlink: 'syz.1.1316': attribute type 1 has an invalid length.
[  147.858217][T10975] bond43: (slave bridge15): making interface the new active one
[  147.860955][T10975] bond43: (slave bridge15): Enslaving as an active interface with an up link
[  147.869198][T10975] bond43: entered promiscuous mode
[  147.871259][T10975] bridge15: entered promiscuous mode
[  147.876465][T10975] bond43: entered allmulticast mode
[  147.878527][T10975] bridge15: entered allmulticast mode
[  147.882427][T10975] 8021q: adding VLAN 0 to HW filter on device bond43
[  147.920969][T10980] netlink: 'syz.2.1319': attribute type 2 has an invalid length.
[  147.957801][T10988] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  148.024553][T10998] bond22: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  148.028626][T10998] bond22 (unregistering): Released all slaves
[  148.077721][T11003] bridge0: port 3(veth1_virt_wifi) entered blocking state
[  148.080615][T11003] bridge0: port 3(veth1_virt_wifi) entered disabled state
[  148.085864][T11003] veth1_virt_wifi: entered allmulticast mode
[  148.088757][T11003] veth1_virt_wifi: left allmulticast mode
[  148.105034][T11006] bond0: (slave dummy0): Releasing backup interface
[  148.110631][T11006] team0: Port device dummy0 added
[  148.203252][T11023] 8021q: adding VLAN 0 to HW filter on device bond24
[  148.207143][T11023] bond23: (slave bond24): Enslaving as an active interface with an up link
[  148.214232][T11025] bond23: (slave gretap4): Enslaving as an active interface with an up link
[  148.227626][T11022] xt_hashlimit: size too large, truncated to 1048576
[  148.295949][T11033] bond25: (slave vxcan5): The slave device specified does not support setting the MAC address
[  148.299681][T11033] bond25: (slave vxcan5): Error -95 calling set_mac_address
[  148.349359][T11033] bond25: (slave bridge12): Enslaving as an active interface with a down link
[  148.361182][T11033] 8021q: adding VLAN 0 to HW filter on device bond25
[  148.690327][T11065] __nla_validate_parse: 20 callbacks suppressed
[  148.690337][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  148.696428][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  148.922076][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  148.948489][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[  149.065310][T11101] validate_nla: 3 callbacks suppressed
[  149.065323][T11101] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[  149.101153][T11101] bond26: entered promiscuous mode
[  149.104200][T11101] 8021q: adding VLAN 0 to HW filter on device bond26
[  149.114370][T11101] 8021q: adding VLAN 0 to HW filter on device bond26
[  149.117053][T11101] bond26: (slave wireguard5): The slave device specified does not support setting the MAC address
[  149.120393][T11101] bond26: (slave wireguard5): Setting fail_over_mac to active for active-backup mode
[  149.126457][T11101] bond26: (slave wireguard5): making interface the new active one
[  149.129005][T11101] wireguard5: entered promiscuous mode
[  149.131353][T11101] bond26: (slave wireguard5): Enslaving as an active interface with an up link
[  149.153192][T11101] bond26: (slave wireguard6): The slave device specified does not support setting the MAC address
[  149.164412][T11101] bond26: (slave wireguard6): Enslaving as a backup interface with an up link
[  149.188721][T11101] bond27: entered allmulticast mode
[  149.194443][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'.
[  149.214472][T11111] bond44: entered promiscuous mode
[  149.216182][T11111] 8021q: adding VLAN 0 to HW filter on device bond44
[  149.325145][T11126] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  149.342398][T11126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'.
[  149.420044][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'.
[  149.611199][T11152] netlink: 'syz.2.1358': attribute type 14 has an invalid length.
[  149.676226][T11158] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1360'.
[  149.686884][T11164] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  149.706613][T11164] bond22: entered promiscuous mode
[  149.711350][T11164] 8021q: adding VLAN 0 to HW filter on device bond22
[  149.801255][T11178] veth0_macvtap: Caught tx_queue_len zero misconfig
[  149.858985][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  149.859031][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'.
[  149.861689][T11192] netlink: 'syz.2.1371': attribute type 5 has an invalid length.
[  149.861700][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'.
[  149.865045][T11192] geneve3: entered promiscuous mode
[  149.874952][T11188] netlink: 'syz.0.1370': attribute type 1 has an invalid length.
[  149.879914][T11192] geneve3: entered allmulticast mode
[  149.886663][ T5868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  149.890601][T11193] netlink: 'syz.2.1371': attribute type 5 has an invalid length.
[  149.898179][ T5868] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  149.900918][ T5868] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  149.904004][ T5868] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  149.939568][T11201] netlink: 'syz.2.1373': attribute type 1 has an invalid length.
[  149.967073][T11206] netlink: 'syz.1.1374': attribute type 1 has an invalid length.
[  149.988094][T11201] bond23: (slave bridge12): making interface the new active one
[  149.993730][T11201] bond23: (slave bridge12): Enslaving as an active interface with an up link
[  150.024778][T11201] bond23: entered promiscuous mode
[  150.026960][T11201] bridge12: entered promiscuous mode
[  150.029224][T11201] bond23: entered allmulticast mode
[  150.031293][T11201] bridge12: entered allmulticast mode
[  150.051396][T11201] 8021q: adding VLAN 0 to HW filter on device bond23
[  150.085998][T11212] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  150.089092][T11212] netlink: 'syz.0.1376': attribute type 2 has an invalid length.
[  150.283678][T11232] bond28: peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms
[  150.473302][T11247] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.477513][T11247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.589349][T11277] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.603394][T11277] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.655824][T11277] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.659206][T11277] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.769941][T11277] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.774386][T11277] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.825649][T11277] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.832306][T11277] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  150.956638][ T5868] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.959274][ T5868] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  150.963862][ T5868] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.966755][ T5868] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  150.969360][ T5868] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.972853][ T5868] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  150.975317][ T5868] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.977803][ T5868] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  151.093604][T11321] lo speed is unknown, defaulting to 1000
[  151.181446][T11321] syzkaller0 speed is unknown, defaulting to 1000
[  151.274764][T11339] tipc: Can't bind to reserved service type 0
[  151.345887][T11348] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20005
[  151.425191][   T34] audit: type=1800 audit(1778580491.527:4): pid=11354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1411" name="memory.events" dev="tmpfs" ino=2484 res=0 errno=0
[  151.506297][T11363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.594419][T11369] bond0: (slave vlan0): Opening slave failed
[  151.839281][T11399] xt_nat: multiple ranges no longer supported
[  152.120707][T11419] bond45: (slave bridge16): making interface the new active one
[  152.124450][T11419] bond45: (slave bridge16): Enslaving as an active interface with an up link
[  152.155524][T11424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.159985][T11424] syzkaller0: entered promiscuous mode
[  152.162737][T11424] syzkaller0: entered allmulticast mode
[  152.186562][T11424] syzkaller0: mtu less than device minimum
[  152.191580][T11423] tipc: Resetting bearer <eth:syzkaller0>
[  152.204730][T11423] tipc: Disabling bearer <eth:syzkaller0>
[  152.367451][T11442] syzkaller0: entered promiscuous mode
[  152.369203][T11442] syzkaller0: entered allmulticast mode
[  152.731169][T11481] syzkaller1: entered promiscuous mode
[  152.733487][T11481] syzkaller1: entered allmulticast mode
[  152.738175][T11481] syzkaller1: left promiscuous mode
[  152.739968][T11481] syzkaller1: left allmulticast mode
[  152.764318][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  152.796030][T11476] bond31: entered promiscuous mode
[  152.798361][T11476] 8021q: adding VLAN 0 to HW filter on device bond31
[  152.813895][T11476] bond31: (slave bridge15): making interface the new active one
[  152.816848][T11476] bridge15: entered promiscuous mode
[  152.821101][T11476] bond31: (slave bridge15): Enslaving as an active interface with an up link
[  152.945330][T11498] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  153.067029][T11512] lo speed is unknown, defaulting to 1000
[  153.074343][T11507] ip6_vti0: entered promiscuous mode
[  153.188108][T11512] syzkaller0 speed is unknown, defaulting to 1000
[  153.256306][T11525] vxcan4: entered allmulticast mode
[  153.362062][T11529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.440130][T11529] lo speed is unknown, defaulting to 1000
[  153.537996][T11529] syzkaller0 speed is unknown, defaulting to 1000
[  153.604875][T11542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.616385][T11542] syzkaller0: entered promiscuous mode
[  153.618123][T11542] syzkaller0: entered allmulticast mode
[  153.649022][T11542] tipc: Resetting bearer <eth:syzkaller0>
[  153.652512][T11541] tipc: Resetting bearer <eth:syzkaller0>
[  153.671207][T11541] tipc: Disabling bearer <eth:syzkaller0>
[  153.845062][T11553] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  153.853935][T11562] __nla_validate_parse: 29 callbacks suppressed
[  153.853945][T11562] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1473'.
[  153.857075][T11555] 8021q: adding VLAN 0 to HW filter on device bond24
[  153.879958][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'.
[  153.886300][T11562] `: renamed from team0 (while UP)
[  153.912779][T11557] bond24: (slave geneve4): making interface the new active one
[  153.917190][T11557] bond24: (slave geneve4): Enslaving as an active interface with an up link
[  153.930732][ T5816] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  153.935436][ T5816] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  153.939453][ T5816] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  153.945683][ T5816] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  153.971001][T11568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1475'.
[  153.978201][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1473'.
[  154.042333][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  154.057879][T11575] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1476'.
[  154.064704][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'.
[  154.121478][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'.
[  154.153557][T11583] tipc: Resetting bearer <eth:syzkaller0>
[  154.158204][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'.
[  154.268427][T11592] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000
[  154.270708][T11591] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20000
[  154.335563][T11597] bond25: option fail_over_mac: invalid value (127)
[  154.338507][T11597] bond25 (unregistering): Released all slaves
[  154.578204][T11610] bond25: option miimon: invalid value (18446744073709551607)
[  154.581404][T11610] bond25: option miimon: allowed values 0 - 2147483647
[  154.586035][T11610] bond25 (unregistering): Released all slaves
[  154.677807][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'.
[  154.686639][T11613] vlan0: entered promiscuous mode
[  154.689001][T11613] bond0: entered promiscuous mode
[  154.928338][T11637] openvswitch: : Dropping previously announced user features
[  154.994529][T11637] openvswitch: : Dropping previously announced user features
[  155.025905][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1496'.
[  155.029161][T11642] validate_nla: 13 callbacks suppressed
[  155.029169][T11642] netlink: 'syz.1.1496': attribute type 21 has an invalid length.
[  155.159704][T11644] team0: Port device dummy0 removed
[  155.233511][T11656] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  155.311673][T11665] xt_hashlimit: max too large, truncated to 1048576
[  155.426369][T11673] geneve7: entered promiscuous mode
[  155.428164][T11673] geneve7: entered allmulticast mode
[  155.471189][T11676] netlink: 'syz.2.1508': attribute type 1 has an invalid length.
[  155.499754][T11676] 8021q: adding VLAN 0 to HW filter on device bond25
[  156.698867][T11716] sit0: entered promiscuous mode
[  156.780252][T11730] syzkaller1: entered promiscuous mode
[  156.783174][T11730] syzkaller1: entered allmulticast mode
[  156.859525][T11732] netlink: 'syz.2.1523': attribute type 11 has an invalid length.
[  157.185696][T11739] netlink: 'syz.2.1525': attribute type 1 has an invalid length.
[  157.342323][T11739] 8021q: adding VLAN 0 to HW filter on device bond26
[  157.362183][T11741] bond26: (slave veth19): Enslaving as an active interface with a down link
[  157.374641][T11739] bond26: (slave veth21): Enslaving as an active interface with a down link
[  157.388972][T11739] bond26: entered allmulticast mode
[  157.578387][T11745] tipc: Resetting bearer <eth:syzkaller0>
[  157.870171][T11757] netlink: 'syz.0.1527': attribute type 10 has an invalid length.
[  157.879500][T11757] bond0: (slave dummy0): Releasing backup interface
[  157.890614][T11757] `: Port device dummy0 added
[  158.413557][T11789] vlan0: entered promiscuous mode
[  158.415326][T11789] bridge0: entered promiscuous mode
[  158.683756][ T5816] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.689717][ T5816] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  158.695919][ T5816] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.701084][ T5816] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.704691][ T5816] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  158.708005][ T5816] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.730276][ T5816] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.733934][ T5816] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  158.737227][ T5816] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.741235][ T5816] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  158.746331][ T5816] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  158.749184][ T5816] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  158.891638][T11810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.899021][T11811] syzkaller0: entered promiscuous mode
[  158.901253][T11811] syzkaller0: entered allmulticast mode
[  158.919489][T11811] tipc: Resetting bearer <eth:syzkaller0>
[  158.938354][T11811] tipc: Disabling bearer <eth:syzkaller0>
[  159.194647][T11826] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.199492][T11826] 8021q: adding VLAN 0 to HW filter on device team0
[  159.206806][T11826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.215590][T11830] __nla_validate_parse: 18 callbacks suppressed
[  159.215599][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  159.220732][  T794] lo speed is unknown, defaulting to 1000
[  159.224257][  T794] sqz0: Port: 1 Link ACTIVE
[  159.265957][  T794] lo speed is unknown, defaulting to 1000
[  159.281370][T11837] netlink: 'syz.2.1545': attribute type 10 has an invalid length.
[  159.309809][T11837] team0: Port device dummy0 added
[  159.381728][T11842] netlink: 'syz.2.1545': attribute type 10 has an invalid length.
[  159.399015][T11842] team0: Port device dummy0 removed
[  159.413086][T11842] dummy0: entered promiscuous mode
[  159.416019][T11842] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  159.493082][T11845] bridge0: port 1(vlan9) entered blocking state
[  159.496090][T11845] bridge0: port 1(vlan9) entered disabled state
[  159.498968][T11845] vlan9: entered allmulticast mode
[  159.501040][T11845] bridge0: entered allmulticast mode
[  159.505176][T11845] vlan9: left allmulticast mode
[  159.507352][T11845] bridge0: left allmulticast mode
[  159.542411][T11837] nbd6: detected capacity change from 0 to 63
[  159.548396][T11847] block nbd6: Receive control failed (result -104)
[  159.548413][   T57] block nbd6: Receive control failed (result -32)
[  159.689030][T11869] xt_hashlimit: overflow, rate too high: 0
[  159.715051][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1555'.
[  159.791281][T11874] vxcan3: entered promiscuous mode
[  159.812892][T11885] bridge17: entered promiscuous mode
[  159.860116][T11887] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1559'.
[  159.978551][T11889] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.014131][T11891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1561'.
[  160.106203][T11898] netlink: 'syz.1.1563': attribute type 1 has an invalid length.
[  160.142095][T11898] bond46: (slave bridge17): making interface the new active one
[  160.146064][T11898] bond46: (slave bridge17): Enslaving as an active interface with an up link
[  160.200900][T11910] bridge0: port 1(erspan0) entered blocking state
[  160.204201][T11910] bridge0: port 1(erspan0) entered disabled state
[  160.206909][T11910] erspan0: entered allmulticast mode
[  160.214055][T11910] erspan0: entered promiscuous mode
[  160.218418][T11910] bridge0: port 1(erspan0) entered blocking state
[  160.221300][T11910] bridge0: port 1(erspan0) entered forwarding state
[  160.241614][T11910] erspan0: left allmulticast mode
[  160.245068][T11910] erspan0: left promiscuous mode
[  160.247258][T11910] bridge0: port 1(erspan0) entered disabled state
[  160.291423][T11914] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  160.297014][T11914] netlink: 'syz.2.1565': attribute type 1 has an invalid length.
[  160.358997][T11923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  160.362407][T11923] IPv6: NLM_F_CREATE should be set when creating new route
[  160.365314][T11923] IPv6: NLM_F_CREATE should be set when creating new route
[  160.368143][T11923] IPv6: NLM_F_CREATE should be set when creating new route
[  160.393171][T11923] netlink: 'syz.1.1569': attribute type 10 has an invalid length.
[  160.398981][T11923] netlink: 'syz.1.1569': attribute type 10 has an invalid length.
[  160.405034][T11923] v: entered promiscuous mode
[  160.608579][T11945] ip6gre2: entered promiscuous mode
[  160.610378][T11945] ip6gre2: entered allmulticast mode
[  160.777082][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'.
[  160.796243][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  160.799893][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'.
[  160.805493][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  160.809120][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'.
[  160.865841][T11972] ip6gre2: entered promiscuous mode
[  160.867969][T11972] ip6gre2: entered allmulticast mode
[  160.906007][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'.
[  160.952657][T11976] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  160.955807][T11976] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  160.958530][T11976] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  160.962323][T11976] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  160.965416][T11976] netlink: 'syz.1.1583': attribute type 29 has an invalid length.
[  160.981415][T11976] hsr0: entered promiscuous mode
[  160.984812][T11975] hsr0: left promiscuous mode
[  161.802417][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  163.948674][T11978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  164.033022][T12000] veth0: Caught tx_queue_len zero misconfig
[  164.222729][T12034] __nla_validate_parse: 66 callbacks suppressed
[  164.222741][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1594'.
[  164.263998][T12036] sctp: [Deprecated]: syz.2.1597 (pid 12036) Use of int in max_burst socket option deprecated.
[  164.263998][T12036] Use struct sctp_assoc_value instead
[  164.372859][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'.
[  164.593891][T12057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'.
[  164.597380][T12057] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  164.625783][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.671592][T12059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.078406][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  165.088761][ T5868] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  165.088813][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  165.096597][ T5868] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  165.099859][ T5868] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  165.108521][ T5868] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  165.122817][T12068] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  165.218719][T12074] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1607'.
[  165.223732][T12072] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1606'.
[  165.261679][T12077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'.
[  165.308946][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'.
[  165.367022][T12089] validate_nla: 53 callbacks suppressed
[  165.367034][T12089] netlink: 'syz.1.1612': attribute type 10 has an invalid length.
[  165.373479][T12089] netlink: 'syz.1.1612': attribute type 10 has an invalid length.
[  165.424085][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'.
[  165.427561][T12093] openvswitch: netlink: Flow actions attr not present in new flow.
[  165.699691][T12104] hmac(sha2: entered promiscuous mode
[  165.736224][T12106] pimreg: entered allmulticast mode
[  165.739030][T12106] pimreg: left allmulticast mode
[  166.394179][T12136] batman_adv: batadv0: Adding interface: veth19
[  166.397904][T12136] batman_adv: batadv0: The MTU of interface veth19 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.405818][T12136] batman_adv: batadv0: Interface activated: veth19
[  166.625490][T12151] netlink: 'syz.1.1630': attribute type 32 has an invalid length.
[  166.625500][T12150] netlink: 'syz.1.1630': attribute type 32 has an invalid length.
[  166.644057][T12150] bond47: option coupled_control: invalid value (16)
[  166.648109][T12150] bond47 (unregistering): Released all slaves
[  166.649376][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810a5bf400: rx timeout, send abort
[  166.654334][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a5bf400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  166.673496][T12151] bond47: option coupled_control: invalid value (16)
[  166.677948][T12151] bond47 (unregistering): Released all slaves
[  166.898135][T12168] lo speed is unknown, defaulting to 1000
[  166.937370][T12174] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  166.995588][T12168] syzkaller0 speed is unknown, defaulting to 1000
[  167.219927][T12194] xfrm2: entered promiscuous mode
[  167.223007][T12194] xfrm2: entered allmulticast mode
[  167.293453][T12201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.440739][T12209] bond47 (unregistering): Released all slaves
[  167.482742][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  167.590339][T12213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.622064][T12218] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.625127][T12218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.628336][T12218] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.678195][T12218] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.681565][T12218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.689987][T12218] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.729037][T12218] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.732231][T12218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.735067][T12218] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.783115][T12218] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.786164][T12218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  167.789214][T12218] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  167.854974][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.857946][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  167.860827][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  167.873901][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.876789][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  167.880061][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  167.890432][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.896123][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  167.899169][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  167.907416][ T5868] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.910515][ T5868] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  167.914051][ T5868] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  168.019983][   T34] audit: type=1800 audit(1778580508.117:5): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1647" name="memory.events" dev="tmpfs" ino=2954 res=0 errno=0
[  168.054374][T12224] tap0: tun_chr_ioctl cmd 1074025677
[  168.056214][T12224] tap0: linktype set to 778
[  168.061200][T12226] syzkaller1: entered promiscuous mode
[  168.063479][T12226] syzkaller1: entered allmulticast mode
[  168.306190][T12248] openvswitch: netlink: Message has 4112 unknown bytes.
[  169.285806][T12316] __nla_validate_parse: 34 callbacks suppressed
[  169.285816][T12316] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1672'.
[  169.291511][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1673'.
[  169.558403][T12333] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1678'.
[  169.564445][T12334] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1678'.
[  169.567654][T12333] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1678'.
[  169.571765][T12331] lo speed is unknown, defaulting to 1000
[  169.584984][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  169.766212][T12341] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  169.774771][   T31] lo speed is unknown, defaulting to 1000
[  169.775552][T12331] syzkaller0 speed is unknown, defaulting to 1000
[  169.776676][   T31] sqz0: Port: 1 Link DOWN
[  169.812798][ T5854] lo speed is unknown, defaulting to 1000
[  169.919773][T12354] netlink: 'syz.1.1683': attribute type 8 has an invalid length.
[  169.966117][T12357] netlink: 'syz.2.1682': attribute type 2 has an invalid length.
[  169.969312][T12357] netlink: 'syz.2.1682': attribute type 2 has an invalid length.
[  169.977343][T12360] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  169.997013][T12360] bond47: entered promiscuous mode
[  169.998810][T12360] 8021q: adding VLAN 0 to HW filter on device bond47
[  170.012625][T12359] macvtap1: entered allmulticast mode
[  170.029693][T12359] bond47: (slave bridge19): making interface the new active one
[  170.033389][T12359] bridge19: entered promiscuous mode
[  170.036944][T12359] bond47: (slave bridge19): Enslaving as an active interface with an up link
[  170.340402][T12384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1690'.
[  170.345267][T12383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1690'.
[  170.509943][T12391] syzkaller1: entered promiscuous mode
[  170.520112][T12391] syzkaller1: entered allmulticast mode
[  170.682368][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  170.789087][T12410] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1695'.
[  171.016982][T12426] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.027093][T12426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.033769][ T5869] lo speed is unknown, defaulting to 1000
[  171.035657][ T5869] sqz0: Port: 1 Link ACTIVE
[  171.037342][ T5869] lo speed is unknown, defaulting to 1000
[  171.384101][T12451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.392280][T12451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  171.445813][T12453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1704'.
[  171.517157][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.540936][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.552540][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.564072][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.575351][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.586239][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.596826][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.608512][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.619955][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  171.630532][T12460] netlink: 'syz.1.1706': attribute type 30 has an invalid length.
[  172.351283][ T6766] block nbd8: Receive control failed (result -32)
[  172.351310][T11847] block nbd7: Receive control failed (result -32)
[  172.354840][   T56] block nbd8: Receive control failed (result -32)
[  172.357423][   T57] block nbd7: Receive control failed (result -32)
[  172.499952][T12559] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.507413][T12559] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  172.517185][T12559] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  172.576329][T12559] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.586690][T12559] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  172.589809][T12559] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  172.667002][T12559] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.670174][T12559] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  172.674783][T12559] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  172.716283][T12559] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.719682][T12559] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  172.723386][T12559] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  172.795493][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.798680][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  172.801811][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  172.812345][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.816214][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  172.819398][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  172.829989][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.833708][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  172.842653][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  172.855585][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.858839][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  172.862597][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  173.277652][T12614] lo speed is unknown, defaulting to 1000
[  173.371494][T12614] syzkaller0 speed is unknown, defaulting to 1000
[  173.438468][T12620] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  173.478938][T12621] bond29: (slave bridge13): making interface the new active one
[  173.482237][T12621] bond29: (slave bridge13): Enslaving as an active interface with an up link
[  173.492886][T12624] openvswitch: netlink: Key type 42 is out of range max 32
[  173.547523][T12624] bond113: entered promiscuous mode
[  173.549401][T12624] 8021q: adding VLAN 0 to HW filter on device bond113
[  174.198669][T12653] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  174.336209][T12669] __nla_validate_parse: 7 callbacks suppressed
[  174.336220][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'.
[  174.411377][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'.
[  174.507299][T12677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  174.575227][T12683] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1747'.
[  174.660118][T12692] lo speed is unknown, defaulting to 1000
[  174.747023][T12692] syzkaller0 speed is unknown, defaulting to 1000
[  174.950334][T12713] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1754'.
[  174.960008][T12713] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  175.470094][T12731] xfrm0: entered promiscuous mode
[  175.473556][T12731] xfrm0: entered allmulticast mode
[  175.693339][T12740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.696539][T12740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  176.540091][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1763'.
[  176.551387][T12747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  176.647772][T12753] validate_nla: 60 callbacks suppressed
[  176.647784][T12753] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  176.786853][T12768] netlink: 'syz.2.1770': attribute type 1 has an invalid length.
[  177.421723][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1779'.
[  177.474077][T12802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1779'.
[  177.595147][T12814] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1782'.
[  177.673312][T12821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1783'.
[  177.673324][T12822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1783'.
[  177.866260][T12824] Bluetooth: MGMT ver 1.23
[  178.205346][T12835] netlink: 'syz.1.1786': attribute type 1 has an invalid length.
[  178.356123][T12844] netlink: 'syz.0.1790': attribute type 1 has an invalid length.
[  178.395844][T12847] netlink: 'syz.1.1788': attribute type 2 has an invalid length.
[  178.399229][T12847] netlink: 'syz.1.1788': attribute type 2 has an invalid length.
[  178.416157][T12841] macsec1: entered promiscuous mode
[  178.435351][T12848] lo speed is unknown, defaulting to 1000
[  178.525717][T12848] syzkaller0 speed is unknown, defaulting to 1000
[  178.796575][T12860] gretap3: entered allmulticast mode
[  178.822277][T12862] netlink: 'syz.1.1794': attribute type 13 has an invalid length.
[  178.825327][T12862] netlink: 'syz.1.1794': attribute type 17 has an invalid length.
[  178.846323][T12862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.938200][T12864] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  178.940562][T12864] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  179.053783][T12874] netlink: 'syz.0.1798': attribute type 10 has an invalid length.
[  179.068417][T12874] netlink: 'syz.0.1798': attribute type 10 has an invalid length.
[  179.081283][T12874] `: Port device dummy0 removed
[  179.085985][T12874] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  179.242668][T12890] nbd: must specify at least one socket
[  179.244594][T12890] block nbd0: NBD_DISCONNECT
[  179.246027][T12890] block nbd0: Send disconnect failed -32
[  179.247730][T12890] block nbd0: Send disconnect failed -32
[  179.250200][T12890] block nbd0: shutting down sockets
[  179.284867][T12892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.379855][T12896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.409719][T12895] __nla_validate_parse: 8 callbacks suppressed
[  179.409732][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'.
[  179.420593][T12892] netlink: set zone limit has 4 unknown bytes
[  179.641980][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  179.783014][T12899] block nbd0: server does not support multiple connections per device.
[  179.788552][T12899] block nbd0: shutting down sockets
[  179.898702][T12902] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1806'.
[  179.938690][T12908] 8021q: adding VLAN 0 to HW filter on device bond114
[  180.028160][T12908] bond114: (slave veth21): Enslaving as an active interface with a down link
[  180.058131][T12917] bond114: (slave veth23): Enslaving as an active interface with a down link
[  180.081579][T12918] bond32: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  180.087539][T12918] bond32 (unregistering): Released all slaves
[  180.103834][T12908] bond114: entered allmulticast mode
[  180.137908][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'.
[  180.140903][T12923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1811'.
[  180.155904][T12926] Cannot find del_set index 14804 as target
[  180.161688][T12926] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  180.170915][T12926] bridge20: entered promiscuous mode
[  180.173547][T12926] bridge20: entered allmulticast mode
[  180.272095][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'.
[  180.398260][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'.
[  180.447343][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1817'.
[  180.512446][T12953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'.
[  180.605091][T12965] bond28: left allmulticast mode
[  180.634645][T12968] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.637748][T12968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  180.641227][T12968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  180.646361][T12968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  180.705928][T12968] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.709195][T12968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  180.713587][T12968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  180.717001][T12968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  180.755922][T12968] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.759165][T12968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  180.762768][T12968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  180.766143][T12968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  180.804854][T12968] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.808424][T12968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  180.813232][T12968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  180.817415][T12968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  180.883535][T12495] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.886216][T12495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  180.888764][T12495] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  180.891269][T12495] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  180.900734][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1823'.
[  180.903751][T12495] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.906197][T12495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  180.908833][T12495] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  180.911649][T12495] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  180.917020][T12495] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.919831][T12495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  180.923625][T12495] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  180.926374][T12495] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  180.935523][T12495] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.938258][T12495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  180.941638][T12495] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  180.944708][T12495] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  180.948700][T12969] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.951670][T12969] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  180.955147][T12969] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  180.958282][T12969] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  180.966262][T12495] ==================================================================
[  180.969434][T12495] BUG: KASAN: slab-use-after-free in __mutex_lock+0x157/0x1300
[  180.972478][T12495] Read of size 8 at addr ffff8881098142b0 by task kworker/u8:6/12495
[  180.976409][T12495] 
[  180.977362][T12495] CPU: 0 UID: 0 PID: 12495 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  180.977379][T12495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.977388][T12495] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  180.977413][T12495] Call Trace:
[  180.977420][T12495]  <TASK>
[  180.977427][T12495]  dump_stack_lvl+0xe8/0x150
[  180.977444][T12495]  print_report+0xba/0x230
[  180.977486][T12495]  ? __mutex_lock+0x157/0x1300
[  180.977502][T12495]  kasan_report+0x117/0x150
[  180.977519][T12495]  ? __mutex_lock+0x157/0x1300
[  180.977537][T12495]  __mutex_lock+0x157/0x1300
[  180.977555][T12495]  ? __mutex_lock+0x5ac/0x1300
[  180.977572][T12495]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  180.977590][T12495]  ? __pfx___mutex_lock+0x10/0x10
[  180.977609][T12495]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  180.977625][T12495]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  180.977645][T12495]  ? process_scheduled_works+0xa8d/0x18c0
[  180.977661][T12495]  ? process_scheduled_works+0xa8d/0x18c0
[  180.977677][T12495]  process_scheduled_works+0xb6e/0x18c0
[  180.977701][T12495]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.977719][T12495]  ? assign_work+0x3d5/0x5e0
[  180.977736][T12495]  worker_thread+0xa53/0xfc0
[  180.977760][T12495]  kthread+0x388/0x470
[  180.977773][T12495]  ? __pfx_worker_thread+0x10/0x10
[  180.977788][T12495]  ? __pfx_kthread+0x10/0x10
[  180.977800][T12495]  ret_from_fork+0x51e/0xb90
[  180.977817][T12495]  ? __pfx_ret_from_fork+0x10/0x10
[  180.977832][T12495]  ? __switch_to+0xc7d/0x1450
[  180.977846][T12495]  ? __pfx_kthread+0x10/0x10
[  180.977858][T12495]  ret_from_fork_asm+0x1a/0x30
[  180.977880][T12495]  </TASK>
[  180.977885][T12495] 
[  181.041763][T12495] Allocated by task 12968:
[  181.043595][T12495]  kasan_save_track+0x3e/0x80
[  181.045427][T12495]  __kasan_kmalloc+0x93/0xb0
[  181.047260][T12495]  __kmalloc_noprof+0x35c/0x760
[  181.049207][T12495]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[  181.051667][T12495]  notifier_call_chain+0x1be/0x400
[  181.053725][T12495]  register_netdevice+0x173a/0x1cf0
[  181.055766][T12495]  nsim_create+0xb92/0x1100
[  181.057626][T12495]  __nsim_dev_port_add+0x72a/0xb50
[  181.059613][T12495]  nsim_dev_port_add_all+0x37/0xf0
[  181.061575][T12495]  nsim_dev_reload_up+0x45f/0x7c0
[  181.063548][T12495]  devlink_reload+0x505/0x8d0
[  181.065343][T12495]  devlink_nl_reload_doit+0xaaa/0xc80
[  181.067484][T12495]  genl_family_rcv_msg_doit+0x22a/0x330
[  181.069683][T12495]  genl_rcv_msg+0x61c/0x7a0
[  181.071533][T12495]  netlink_rcv_skb+0x232/0x4b0
[  181.073509][T12495]  genl_rcv+0x28/0x40
[  181.075055][T12495]  netlink_unicast+0x80f/0x9b0
[  181.076948][T12495]  netlink_sendmsg+0x813/0xb40
[  181.078899][T12495]  ____sys_sendmsg+0x972/0x9f0
[  181.080858][T12495]  ___sys_sendmsg+0x2a5/0x360
[  181.082744][T12495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  181.084682][T12495]  do_syscall_64+0x14d/0xf80
[  181.086560][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.088930][T12495] 
[  181.089914][T12495] Freed by task 12969:
[  181.091532][T12495]  kasan_save_track+0x3e/0x80
[  181.093390][T12495]  kasan_save_free_info+0x46/0x50
[  181.095271][T12495]  __kasan_slab_free+0x5c/0x80
[  181.097131][T12495]  kfree+0x1c1/0x630
[  181.098721][T12495]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[  181.101150][T12495]  notifier_call_chain+0x1be/0x400
[  181.103204][T12495]  unregister_netdevice_many_notify+0x186a/0x2370
[  181.106113][T12495]  unregister_netdevice_queue+0x31f/0x360
[  181.108273][T12495]  nsim_destroy+0x1e5/0x680
[  181.110092][T12495]  __nsim_dev_port_del+0x14d/0x1b0
[  181.112042][T12495]  nsim_dev_reload_destroy+0x288/0x490
[  181.114192][T12495]  nsim_dev_reload_down+0x8a/0xc0
[  181.116148][T12495]  devlink_reload+0x1d1/0x8d0
[  181.118028][T12495]  devlink_nl_reload_doit+0xaaa/0xc80
[  181.120226][T12495]  genl_family_rcv_msg_doit+0x22a/0x330
[  181.122488][T12495]  genl_rcv_msg+0x61c/0x7a0
[  181.124347][T12495]  netlink_rcv_skb+0x232/0x4b0
[  181.126322][T12495]  genl_rcv+0x28/0x40
[  181.127945][T12495]  netlink_unicast+0x80f/0x9b0
[  181.129931][T12495]  netlink_sendmsg+0x813/0xb40
[  181.131893][T12495]  ____sys_sendmsg+0x972/0x9f0
[  181.133798][T12495]  ___sys_sendmsg+0x2a5/0x360
[  181.135627][T12495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  181.137661][T12495]  do_syscall_64+0x14d/0xf80
[  181.139532][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.141742][T12495] 
[  181.142693][T12495] Last potentially related work creation:
[  181.144921][T12495]  kasan_save_stack+0x3e/0x60
[  181.146833][T12495]  kasan_record_aux_stack+0xbd/0xd0
[  181.148915][T12495]  insert_work+0x3d/0x330
[  181.150657][T12495]  __queue_work+0xbe1/0x1020
[  181.152423][T12495]  queue_work_on+0x106/0x1d0
[  181.154214][T12495]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  181.156529][T12495]  udp_tunnel_push_rx_port+0x186/0x210
[  181.158671][T12495]  geneve_offload_rx_ports+0xc7/0x150
[  181.160667][T12495]  geneve_netdevice_event+0x6a/0x80
[  181.162637][T12495]  notifier_call_chain+0x1be/0x400
[  181.164723][T12495]  call_netdevice_notifiers+0x90/0xd0
[  181.166904][T12495]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  181.169422][T12495]  notifier_call_chain+0x1be/0x400
[  181.171530][T12495]  register_netdevice+0x173a/0x1cf0
[  181.173682][T12495]  nsim_create+0xb92/0x1100
[  181.175554][T12495]  __nsim_dev_port_add+0x72a/0xb50
[  181.177642][T12495]  nsim_dev_port_add_all+0x37/0xf0
[  181.179678][T12495]  nsim_dev_reload_up+0x45f/0x7c0
[  181.181637][T12495]  devlink_reload+0x505/0x8d0
[  181.183584][T12495]  devlink_nl_reload_doit+0xaaa/0xc80
[  181.185652][T12495]  genl_family_rcv_msg_doit+0x22a/0x330
[  181.187847][T12495]  genl_rcv_msg+0x61c/0x7a0
[  181.189718][T12495]  netlink_rcv_skb+0x232/0x4b0
[  181.191646][T12495]  genl_rcv+0x28/0x40
[  181.193152][T12495]  netlink_unicast+0x80f/0x9b0
[  181.195158][T12495]  netlink_sendmsg+0x813/0xb40
[  181.197045][T12495]  ____sys_sendmsg+0x972/0x9f0
[  181.198990][T12495]  ___sys_sendmsg+0x2a5/0x360
[  181.200925][T12495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  181.202848][T12495]  do_syscall_64+0x14d/0xf80
[  181.204644][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.206970][T12495] 
[  181.207997][T12495] Second to last potentially related work creation:
[  181.210646][T12495]  kasan_save_stack+0x3e/0x60
[  181.212552][T12495]  kasan_record_aux_stack+0xbd/0xd0
[  181.214619][T12495]  insert_work+0x3d/0x330
[  181.216361][T12495]  __queue_work+0xd03/0x1020
[  181.218235][T12495]  queue_work_on+0x106/0x1d0
[  181.220242][T12495]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  181.222552][T12495]  udp_tunnel_push_rx_port+0x186/0x210
[  181.224779][T12495]  vxlan_offload_rx_ports+0x129/0x1f0
[  181.226969][T12495]  vxlan_netdevice_event+0x111/0x480
[  181.229038][T12495]  notifier_call_chain+0x1be/0x400
[  181.231013][T12495]  call_netdevice_notifiers+0x90/0xd0
[  181.233025][T12495]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  181.235391][T12495]  notifier_call_chain+0x1be/0x400
[  181.237402][T12495]  register_netdevice+0x173a/0x1cf0
[  181.239247][T12495]  nsim_create+0xb92/0x1100
[  181.241036][T12495]  __nsim_dev_port_add+0x72a/0xb50
[  181.243063][T12495]  nsim_dev_port_add_all+0x37/0xf0
[  181.245113][T12495]  nsim_dev_reload_up+0x45f/0x7c0
[  181.246950][T12495]  devlink_reload+0x505/0x8d0
[  181.248723][T12495]  devlink_nl_reload_doit+0xaaa/0xc80
[  181.250829][T12495]  genl_family_rcv_msg_doit+0x22a/0x330
[  181.252835][T12495]  genl_rcv_msg+0x61c/0x7a0
[  181.254269][T12495]  netlink_rcv_skb+0x232/0x4b0
[  181.255825][T12495]  genl_rcv+0x28/0x40
[  181.257141][T12495]  netlink_unicast+0x80f/0x9b0
[  181.259013][T12495]  netlink_sendmsg+0x813/0xb40
[  181.260988][T12495]  ____sys_sendmsg+0x972/0x9f0
[  181.262965][T12495]  ___sys_sendmsg+0x2a5/0x360
[  181.264883][T12495]  __x64_sys_sendmsg+0x1bd/0x2a0
[  181.266808][T12495]  do_syscall_64+0x14d/0xf80
[  181.268687][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.270975][T12495] 
[  181.271892][T12495] The buggy address belongs to the object at ffff888109814200
[  181.271892][T12495]  which belongs to the cache kmalloc-256 of size 256
[  181.276283][T12495] The buggy address is located 176 bytes inside of
[  181.276283][T12495]  freed 256-byte region [ffff888109814200, ffff888109814300)
[  181.280667][T12495] 
[  181.281555][T12495] The buggy address belongs to the physical page:
[  181.283832][T12495] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109814
[  181.286581][T12495] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  181.289224][T12495] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  181.291940][T12495] page_type: f5(slab)
[  181.293599][T12495] raw: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  181.296862][T12495] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  181.300050][T12495] head: 017ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  181.303482][T12495] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  181.306946][T12495] head: 017ff00000000001 ffffea0004260501 00000000ffffffff 00000000ffffffff
[  181.310313][T12495] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  181.313770][T12495] page dumped because: kasan: bad access detected
[  181.316355][T12495] page_owner tracks the page as allocated
[  181.318599][T12495] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 56544347352, free_ts 56525493616
[  181.326648][T12495]  post_alloc_hook+0x231/0x280
[  181.328613][T12495]  get_page_from_freelist+0x24dc/0x2580
[  181.330859][T12495]  __alloc_frozen_pages_noprof+0x18d/0x380
[  181.333148][T12495]  allocate_slab+0x77/0x660
[  181.335008][T12495]  refill_objects+0x331/0x3c0
[  181.336956][T12495]  __pcs_replace_empty_main+0x2e6/0x730
[  181.339110][T12495]  __kmalloc_noprof+0x474/0x760
[  181.341042][T12495]  fib_create_info+0x1723/0x31f0
[  181.343064][T12495]  fib_table_insert+0xc8/0x1b50
[  181.345015][T12495]  fib_magic+0x434/0x510
[  181.346760][T12495]  fib_add_ifaddr+0x38d/0x5f0
[  181.348701][T12495]  fib_netdev_event+0x382/0x490
[  181.350679][T12495]  notifier_call_chain+0x1be/0x400
[  181.352784][T12495]  __dev_notify_flags+0x1a9/0x310
[  181.354839][T12495]  netif_change_flags+0xe8/0x1a0
[  181.356862][T12495]  do_setlink+0xf82/0x4590
[  181.358687][T12495] page last free pid 5810 tgid 5810 stack trace:
[  181.361252][T12495]  __free_frozen_pages+0xc2b/0xdb0
[  181.363310][T12495]  __slab_free+0x263/0x2b0
[  181.365063][T12495]  qlist_free_all+0x97/0x100
[  181.366960][T12495]  kasan_quarantine_reduce+0x148/0x160
[  181.369121][T12495]  __kasan_slab_alloc+0x22/0x80
[  181.370732][T12495]  kmem_cache_alloc_node_noprof+0x384/0x690
[  181.372960][T12495]  __alloc_skb+0x1d0/0x7d0
[  181.374732][T12495]  netlink_sendmsg+0x5d4/0xb40
[  181.376671][T12495]  __sys_sendto+0x672/0x710
[  181.378534][T12495]  __x64_sys_sendto+0xde/0x100
[  181.380434][T12495]  do_syscall_64+0x14d/0xf80
[  181.382306][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.384724][T12495] 
[  181.385493][T12495] Memory state around the buggy address:
[  181.387219][T12495]  ffff888109814180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.389711][T12495]  ffff888109814200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.392374][T12495] >ffff888109814280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  181.395424][T12495]                                      ^
[  181.397615][T12495]  ffff888109814300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.400717][T12495]  ffff888109814380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  181.403865][T12495] ==================================================================
[  181.409888][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  181.414506][T12495] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  181.417408][T12495] CPU: 0 UID: 0 PID: 12495 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  181.421223][T12495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.425393][T12495] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  181.428301][T12495] Call Trace:
[  181.429678][T12495]  <TASK>
[  181.430902][T12495]  vpanic+0x56c/0xa60
[  181.432532][T12495]  ? __pfx_vpanic+0x10/0x10
[  181.434365][T12495]  panic+0xc5/0xd0
[  181.435882][T12495]  ? __pfx_panic+0x10/0x10
[  181.437629][T12495]  ? preempt_schedule_thunk+0x16/0x30
[  181.439474][T12495]  ? __mutex_lock+0x157/0x1300
[  181.440983][T12495]  ? preempt_schedule_thunk+0x16/0x30
[  181.442889][T12495]  ? __mutex_lock+0x157/0x1300
[  181.444407][T12495]  check_panic_on_warn+0x89/0xb0
[  181.446288][T12495]  ? __mutex_lock+0x157/0x1300
[  181.448075][T12495]  end_report+0x73/0x180
[  181.449725][T12495]  ? __mutex_lock+0x157/0x1300
[  181.451338][T12495]  kasan_report+0x128/0x150
[  181.452949][T12495]  ? __mutex_lock+0x157/0x1300
[  181.454539][T12495]  __mutex_lock+0x157/0x1300
[  181.456044][T12495]  ? __mutex_lock+0x5ac/0x1300
[  181.457759][T12495]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  181.459636][T12495]  ? __pfx___mutex_lock+0x10/0x10
[  181.461162][T12495]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  181.462765][T12495]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  181.464610][T12495]  ? process_scheduled_works+0xa8d/0x18c0
[  181.466311][T12495]  ? process_scheduled_works+0xa8d/0x18c0
[  181.468046][T12495]  process_scheduled_works+0xb6e/0x18c0
[  181.469841][T12495]  ? __pfx_process_scheduled_works+0x10/0x10
[  181.471692][T12495]  ? assign_work+0x3d5/0x5e0
[  181.473382][T12495]  worker_thread+0xa53/0xfc0
[  181.475108][T12495]  kthread+0x388/0x470
[  181.476613][T12495]  ? __pfx_worker_thread+0x10/0x10
[  181.478378][T12495]  ? __pfx_kthread+0x10/0x10
[  181.479814][T12495]  ret_from_fork+0x51e/0xb90
[  181.481430][T12495]  ? __pfx_ret_from_fork+0x10/0x10
[  181.483376][T12495]  ? __switch_to+0xc7d/0x1450
[  181.484973][T12495]  ? __pfx_kthread+0x10/0x10
[  181.486555][T12495]  ret_from_fork_asm+0x1a/0x30
[  181.488294][T12495]  </TASK>
[  181.490058][T12495] Kernel Offset: disabled
[  181.491428][T12495] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:08:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000aa8f270
R8 =ffff888104ab0237 R9 =1ffff11020956046 R10=dffffc0000000000 R11=ffffffff854181a0
R12=dffffc0000000000 R13=ffffffff9a2c2a81 R14=ffffffff9a5daec0 R15=0000000000000000
RIP=ffffffff8541821c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de54000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f82187c4ff8 CR3=0000000113570000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b9d6af RBX=ffffc900062fee28 RCX=ffff888022ad3a80 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900062feeb0 RSP=ffffc900062fedd8
R8 =ffffc900062fed27 R9 =1ffff92000c5fda4 R10=dffffc0000000000 R11=fffff52000c5fda5
R12=1ffff92000c5fdc5 R13=dffffc0000000000 R14=1ffff92000c5fdc0 R15=1ffff92000c5fdc0
RIP=ffffffff81c5d3d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f177a2026c0 ffffffff 00c00000
GS =0000 ffff8882a9454000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f82179ea4c0 CR3=0000000113570000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=72d248d847435782 a9237c4529400f50
XMM02=5291d9d697268e43 6bd7b590325c03e5 XMM03=dab43c721d11f79b 73c624fa882dd7dc
XMM04=0d914cb73fb50320 6b9aebf7a2bc726e XMM05=7548df6e2a8a8533 8dc2a318c72eb0cd
XMM06=034b131f43240d91 4cb73fb503206b9a XMM07=ebf7a2bc726edab4 3c721d11f79b73c6
XMM08=24fa882dd7dc5291 d9d697268e436bd7 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
