last executing test programs:

2.599897745s ago: executing program 2 (id=9061):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x5, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000001800000003000000000000008e0100005daa1800000000007144f4fff0ffffff9500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7fff, 0x5a, &(0x7f0000000380)=""/90, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180), 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYRES32], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

1.110308362s ago: executing program 2 (id=9082):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f}}, 0x18}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000020c0)={0x64, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x884)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="445d8a93c5c9ceef4da42bc839919031cd47eb1991b337a3698d5fd5e41713a5", @ANYRES16=r6, @ANYBLOB="e22b2cbd7000ffdbdf254a0000000e00a80066697273746e616d650000009200a800471404d09cee41b28d46b8f61a4e4caa529540fcc57a43ce41588e140ad2ee74d697a99fd2c0976cfd8cff0de6263a9e4f50af5afd6a95fce0136583788d7281b374230e52208fd7f511f83914a67d100db7e9fdd121bc4efb4d6313c6bc4a8f86a0eedebc7a739110fcb38ac7adbc7948f6a248bd341040c60ae94585d2f811c96745dab17eb1127e3db8903f610000"], 0xb8}, 0x1, 0x0, 0x0, 0x40050}, 0x4004800)
socket$kcm(0xa, 0x3, 0x87)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=<r9=>0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000011)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r9], 0xfdef)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg(r10, &(0x7f0000009e40)=[{{&(0x7f0000000f40)=@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, 0x80, 0x0, 0x0, &(0x7f00000010c0)=[{0x10, 0x0, 0x6}, {0x10, 0x29, 0x4}], 0x20}}], 0x1, 0x20008004)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000020601000000000600000000000000010e00030062690005000400000000000900020073797a31000000001800078008000840000000110c7d1cb44320be0001800800014080ffffff05000500020000000500010006000000"], 0x60}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r11=>0x0})
r12 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r12, 0x0, 0x0)
getsockname$packet(r12, &(0x7f0000000000)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r13, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48}, 0x20000000)

1.020387631s ago: executing program 2 (id=9085):
pipe(0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50)
r1 = socket$inet6(0xa, 0x3, 0x3c)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r1], 0x18)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6544760e6dca2a00cb26462c9436a9445f7f9fae5fb9903daa9f1f73b5fbe40a14c88199bb40a91e15ae28665de0141a9ab3c9f623886d58270a8b115af028535378a6a81151b1c517e9396a457ece82177c11085b463133c070b38cbbdd2bfaf22e23e49c476b1285dc35a7335f3ab110e3cf0847027ee04f42", @ANYRES32=r3, @ANYRES64=r2, @ANYRES64, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0x4001af83, 0x0)

1.019670445s ago: executing program 2 (id=9087):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000540)={<r5=>0x0, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}}, [0x9, 0x6, 0x9, 0x7, 0x6, 0x5de2, 0xb62, 0x9, 0x8, 0x3, 0x82, 0x9, 0x2, 0xc52b, 0x7]}, &(0x7f00000001c0)=0x100)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000700)={r5, 0x1ff}, &(0x7f0000000740)=0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
listen(r6, 0xa1)
accept4$bt_l2cap(r6, 0x0, 0x0, 0x0)
shutdown(r6, 0x1)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080), 0x4)
sendto$inet(r4, &(0x7f0000000840)="7ad45b2779287377e1de5fc2ab0fa5ddd809ce6429d6ab649d6e6ebddcf733183d0e0e79e7cb0b2a17b171cf7854aba748ee1b7077293bb8fa53556d5eda7e952b83df819f75b998c58e76f0ce11e2461fe3613b19f7fd86369efc218fe847d0b4978e52336a98d1e2cc51348044c46b55d56491cace63fc5a4865cd8b3fe29a72bd35b7bf9113af4e8f2b8c42beff2f344b9ad06efbc037c0e62e549b3d2fdc9e6f5d46cfa58c106122ac5609aba28cdf8dfae87144d3a832190c66bd82eea9ce1717fadde25eabaf88", 0xca, 0x44000, &(0x7f0000000780)={0x2, 0x4e23, @remote}, 0x10)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r7, r3})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0xf5, 0x0, &(0x7f00000002c0)="78b5aa209a2eb7fd583c38ce10c1851a3ba1fb6761267cd4a0358ca59fb830a7c23d26eb069da5db3e18eab02026d299026b8cc856b69df59942b8931d188e07ece56ea6f9c682dd043650822920ac2d2e15c68f216132e7543b84d7aa0474f34306f085136e869f9d16c68e752d97a303332888a2e85d0883049d8c3525856b120a38e5e2c2a5590acac1a178f38a7373d5a1f2de8ed040b7238478cfdde94ecb761d6bb4f6cad65d2cfca3632a628aa4f85a9b1af66e69f6d439ac80beb0d7eacd4d26e293f9652eef38b84676fa3cfbe8dfd7b0e04cc04ece048d9a6a2fcbad7525140bcc993bc0eecf1513a711c253e9a3548d", &(0x7f0000000140), 0x7ff, 0x0, 0x26, 0xdd, &(0x7f0000000180)="aba6792b83dff0e47ececf75265a9300557c2b5b893bdb3eab69cab9a9f95be8379742c62df7", &(0x7f00000003c0)="020507ce0258f9a8a02d883d6fcede5c8adf4b1b3fb558f3018ddf1155875c7aea3e54a8a12b705381217d251e065480f1e7abdd1bc1aa43b6b6affd9ad4d41014331f2dac39a6699e5137f6ee054dc0b2355d594c72bd376915e7ba94e4c07682dc70099b5bd734867e7e9663f988737904d8612dcee1f1b16526267bae5b92d700c39c8032bf24b8c3506e38c8e6db5b38e32677a0339fd73f166f5ddac13575ea2071c6ff957e4614060b93a4ad1c6304a9a4c9396d87083d3aea608eed57a977c2587d78fe04c23270e19c2759c9fbaf1c0b868a85e5857f4b2fcf", 0x2, 0x0, 0x4}, 0x50)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffd}, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000213000118008000100636d7000240002801000038009000100357c8b80ae0000000800024039000001080001"], 0xb4}}, 0x0)
sendto$inet6(r1, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c)
close(r1)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000005a000d"], 0x18}], 0x1}, 0x0)

986.454378ms ago: executing program 0 (id=9088):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4570, 0x3c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040020}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x500, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x41, 0x3, "baad81155f96e99db3fd3d4c0d2a1926f29c3de89e4add9281a5c486227c8859438f7f44f35aef691e8f2f3dcc64edd04ffd37006454bba7684f6b2478"}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8885)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008881}, 0x4000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
gettid()
r5 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, <r8=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000a00)={@initdev, <r9=>0x0}, &(0x7f0000000a40)=0x14)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x2b, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x6, 0xffffffffffffffc0, 0xfffffffffffffff0}, @exit, @func, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xb, 0x4, 0x1, 0x2, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0xa, '\x00', r9, 0x18, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x4, 0x3, 0x8, 0x4}, 0x10, 0x1ea9d, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, r11], 0x0, 0x10, 0x100}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d00)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x27}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000e00)={'batadv0\x00', <r13=>0x0})
socket$kcm(0x29, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xc4, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c801}, 0x80)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x7f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x20008000)
r14 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r14, &(0x7f0000007f80)=[{{&(0x7f0000001140), 0x6e, &(0x7f0000003480)=[{&(0x7f00000011c0)=""/23, 0x17}, {&(0x7f0000001200)=""/3, 0x3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/141, 0x8d}, {&(0x7f0000003300)=""/250, 0xfa}, {&(0x7f0000003400)=""/81, 0x51}], 0x7, &(0x7f0000003500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000003680)=""/160, 0xa0}, {&(0x7f0000003740)=""/124, 0x7c}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/148, 0x94}, {&(0x7f0000004880)=""/46, 0x2e}, {&(0x7f00000048c0)=""/70, 0x46}, {&(0x7f0000004940)=""/13, 0xd}, {&(0x7f0000004980)=""/50, 0x32}, {&(0x7f00000049c0)=""/209, 0xd1}, {&(0x7f0000004ac0)=""/184, 0xb8}], 0xa, &(0x7f0000004c40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000006180)=[{&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/203, 0xcb}, {&(0x7f0000005ec0)=""/167, 0xa7}, {&(0x7f0000005f80)=""/231, 0xe7}, {&(0x7f0000006080)=""/236, 0xec}], 0x5, &(0x7f0000006200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000006300), 0x6e, &(0x7f00000076c0)=[{&(0x7f0000006380)=""/24, 0x18}, {&(0x7f00000063c0)=""/210, 0xd2}, {&(0x7f00000064c0)=""/119, 0x77}, {&(0x7f0000006540)=""/138, 0x8a}, {&(0x7f0000006600)=""/4096, 0x1000}, {&(0x7f0000007600)=""/159, 0x9f}], 0x6, &(0x7f0000007740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000007780)=@abs, 0x6e, &(0x7f0000007dc0)=[{&(0x7f0000007800)=""/65, 0x41}, {&(0x7f0000007880)=""/211, 0xd3}, {&(0x7f0000007980)=""/36, 0x24}, {&(0x7f00000079c0)=""/153, 0x99}, {&(0x7f0000007a80)=""/143, 0x8f}, {&(0x7f0000007b40)=""/180, 0xb4}, {&(0x7f0000007c00)=""/251, 0xfb}, {&(0x7f0000007d00)=""/155, 0x9b}], 0x8, &(0x7f0000007e40)=[@rights={{0x1c, 0x1, 0x1, [<r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000007e80)=""/169, 0xa9}], 0x1}}], 0x6, 0x60, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000008100)={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, r13}, 0xc)
ioctl$sock_SIOCGIFCONF(r15, 0x8912, &(0x7f0000008180)=@req={0x28, &(0x7f0000008140)={'bridge_slave_1\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @host}}})

929.743313ms ago: executing program 1 (id=9089):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0xffe4)

929.122037ms ago: executing program 0 (id=9090):
r0 = socket$packet(0x11, 0x2, 0x300)
connect$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @random="edb7fd4e1ca2"}, 0x14)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a000000000000611158000000000085000000ce00000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000d00)=0x205a, 0x4)
recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300fe8000000000000000000000000000bb140002000000000000000000ffff00000000"], 0x5c}}, 0x0)

928.98718ms ago: executing program 1 (id=9091):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x7)

928.584421ms ago: executing program 1 (id=9092):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="060097414f41617c7ce5a14cb7ac1c00004900010026bd7000fcffff"], 0x1c}}, 0x20048800)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3c0}], 0x1, 0x9)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000007c0)={{0x2, 0x4e23, @empty}, {0x306, @broadcast}, 0x14, {0x2, 0x4e24, @remote}, 'hsr0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000980)={'filter\x00', 0xf0, "8f3cf130f4b896fd805fa051afa760abd213eae5fd26b79d825a431b40e6cd55ffe27fcb15bb84fef6b2ca7d7d17b96e0ea92811ce1bfb117268a717f26131fa397b0b4c3e5c974004491de25e9f7f0c3fb85e745cd8302b370416271ac4f1d982ae2c84f4788a74dc757d9db85a27f031143a07f7023a38edc00b43097a2075f15132f87c597f953f92b2882299e1fbe40287d6440630978c694ad0f98d0f88dd64ee925858aa8a1e9e4d1545aba0a8f763d08b8dc91c661e7f14d297d89115aa0ad2b826752fda79623b7db55e6dca113ed257ce67dad472ab884737261dd832acd8330ac585acc30a762aa8ee4688"}, &(0x7f0000000840)=0x114)
bind$inet(r2, &(0x7f0000000780)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f000020"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000001900ff00000000001851000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

848.90108ms ago: executing program 1 (id=9093):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f0000005000)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x1e8c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

789.537586ms ago: executing program 1 (id=9094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x34, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xef}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

788.578568ms ago: executing program 1 (id=9095):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115d00000000008510000002000000850000000500000095000000000000009500a50500200000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x4e)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) (async)
r3 = epoll_create(0x401)
epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x5dc, &(0x7f00000000c0)={[0xc0]}, 0x8)

421.081522ms ago: executing program 0 (id=9096):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000090601030000000000000000020000000900020073797a310000000005000100070000000c0007800800094000007fff0f6b51d4f1df2563679dfb0318fb4637771974f01a732e5d501407c8da348b5a347840fd499d54b8f675ac76e2d000b272e3787dc83124b98b8e67"], 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

330.23812ms ago: executing program 0 (id=9097):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x20000000}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf251b00000008009a000210"], 0x20}}, 0x40090)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0)
close(r1)

157.3108ms ago: executing program 2 (id=9098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xffff, 0xfff6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0x4001af83, 0x0)

155.293238ms ago: executing program 0 (id=9099):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x17, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0, @ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20281, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'veth1_macvtap\x00', @remote})
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040), 0xc)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmsg(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001880)}, 0x2)
connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00'})
shutdown(r4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x4, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1fc, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x188, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffc}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfd}, @TCA_FLOW_ACT={0x14c, 0x9, 0x0, 0x1, [@m_ct={0xa4, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff5}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x9}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x4}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004004e00"/24], 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
read(r2, &(0x7f0000000000)=""/3, 0x3)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @broadcast}, &(0x7f00000000c0)=0xc)

655.082µs ago: executing program 2 (id=9100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xa1}, 0x2400c0c1)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', <r9=>0x0, 0x2f, 0x9, 0xf0, 0x2, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x40, 0x700, 0x55, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', <r10=>0x0, 0x1, 0x40, 0x6, 0x2, {{0xb, 0x4, 0x3, 0x2, 0x2c, 0x67, 0x0, 0x7, 0x27, 0x0, @dev, @multicast1, {[@rr={0x7, 0xf, 0x72, [@rand_addr=0x64010100, @empty, @remote]}, @generic={0x44, 0x9, "4a7e6c8779ef40"}]}}}}})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r12 = socket(0x10, 0x80003, 0x0)
r13 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xa, 0x89c8, 0x40401, r11, 0x7f, '\x00', r14, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2}, 0x50)
r15 = socket$netlink(0x10, 0x3, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r17=>0x0})
sendmsg$nl_route(r15, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r17, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r18=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip6_vti0\x00', <r19=>0x0, 0x4, 0x5, 0xce, 0x1fb, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x10, 0x61, 0x3bb4}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000000940)={0x8ec, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb3b}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d68}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x36bc6cc7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x158, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1b1a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r14}, {0x88, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x5, 0x4, 0x4a, 0x1}, {0xfff, 0x32, 0x40, 0x80000000}, {0x3, 0x5, 0xf, 0x5}, {0x2, 0x9, 0x0, 0x6}, {0x8b8, 0x3, 0x8, 0x9}, {0x1, 0x1, 0x2, 0x8}, {0x2, 0xee, 0x4, 0x8001}, {0xe, 0x2, 0x9, 0x6}, {0x0, 0x7, 0x5, 0x3}, {0x7f, 0x0, 0x2, 0x7}]}}}]}}, {{0x8, 0x1, r17}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0xa, 0x5, 0x3767}, {0x7, 0x6, 0xb, 0x4}, {0xf2c1, 0x2, 0x9, 0x3}, {0x4, 0x1, 0x9, 0x8}, {0xfff, 0xff, 0x2, 0x7f}, {0x8, 0x0, 0x0, 0xf1c}, {0x3, 0x34, 0x9, 0x80000000}, {0x8, 0x88, 0x5, 0xc}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x8ec}, 0x1, 0x0, 0x0, 0x408c0}, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010)

0s ago: executing program 0 (id=9101):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4e806396f1deac847f6928b3a11bc7e623da9af5864aec94d096e397e99c047b509ebd426a08ba97bbd749b5f58b0c144ca00f9dbaf2b"], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r2, 0x0, &(0x7f0000000200)) (async)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000280)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
epoll_create1(0x80000) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

ulting to 1000
[  175.817464][T16525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.840262][T16525] syzkaller0: entered promiscuous mode
[  175.842577][T16525] syzkaller0: entered allmulticast mode
[  175.891273][T16525] tipc: Resetting bearer <eth:syzkaller0>
[  175.895890][T16524] tipc: Resetting bearer <eth:syzkaller0>
[  175.903737][T16524] tipc: Disabling bearer <eth:syzkaller0>
[  176.253141][T16556] netlink: 'syz.2.4606': attribute type 1 has an invalid length.
[  176.524663][T16576] __nla_validate_parse: 9 callbacks suppressed
[  176.524678][T16576] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4613'.
[  176.740751][T16594] netlink: 'syz.0.4622': attribute type 3 has an invalid length.
[  176.841272][T16607] : renamed from pim6reg1
[  177.805829][T16626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.808696][T16626] syzkaller0: entered promiscuous mode
[  177.810902][T16626] syzkaller0: entered allmulticast mode
[  177.820203][T16626] tipc: Resetting bearer <eth:syzkaller0>
[  177.823036][T16623] tipc: Resetting bearer <eth:syzkaller0>
[  177.834246][T16623] tipc: Disabling bearer <eth:syzkaller0>
[  177.842816][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'.
[  177.846087][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4639'.
[  177.849121][T16630] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  178.097719][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4657'.
[  178.308936][T16700] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4671'.
[  178.312224][T16700] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  178.711390][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'.
[  178.897299][T16747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.900091][T16747] syzkaller0: entered promiscuous mode
[  178.901989][T16747] syzkaller0: entered allmulticast mode
[  178.910093][T16747] tipc: Resetting bearer <eth:syzkaller0>
[  178.912730][T16746] tipc: Resetting bearer <eth:syzkaller0>
[  178.917184][T16746] tipc: Disabling bearer <eth:syzkaller0>
[  178.924132][T16751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4695'.
[  179.086368][T16767] block nbd1: server does not support multiple connections per device.
[  179.089688][T16767] block nbd1: shutting down sockets
[  179.463726][T16822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4728'.
[  179.641049][T16833] hsr0 speed is unknown, defaulting to 1000
[  179.643512][T16833] lo speed is unknown, defaulting to 1000
[  179.867910][T16849] netlink: 'syz.1.4739': attribute type 21 has an invalid length.
[  179.876198][T16849] ipvlan2: entered promiscuous mode
[  179.879443][T16849] bridge0: port 1(ipvlan2) entered blocking state
[  179.882006][T16849] bridge0: port 1(ipvlan2) entered disabled state
[  179.884408][T16849] ipvlan2: entered allmulticast mode
[  179.886413][T16849] gretap0: entered allmulticast mode
[  179.888942][T16849] ipvlan2: left allmulticast mode
[  179.890733][T16849] gretap0: left allmulticast mode
[  179.983315][T16856] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  180.030144][T16862] netlink: 'syz.1.4745': attribute type 6 has an invalid length.
[  180.117187][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4749'.
[  180.230083][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'.
[  180.233402][T16888] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  180.437316][T16910] netlink: 'syz.1.4768': attribute type 2 has an invalid length.
[  180.557729][T16929] pim6reg1: entered promiscuous mode
[  180.559725][T16929] pim6reg1: entered allmulticast mode
[  180.830155][T16940] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  180.839061][T16940] Bluetooth: MGMT ver 1.23
[  181.395067][T16982] netlink: 'syz.2.4794': attribute type 10 has an invalid length.
[  181.403136][T16982] team0: Port device dummy0 added
[  181.409232][T16982] netlink: 'syz.2.4794': attribute type 10 has an invalid length.
[  181.414680][T16982] team0: Port device dummy0 removed
[  181.420791][T16982] : (slave dummy0): Enslaving as an active interface with an up link
[  181.479562][T16996] hsr0 speed is unknown, defaulting to 1000
[  181.481849][T16996] lo speed is unknown, defaulting to 1000
[  181.620898][T17003] syzkaller1: entered promiscuous mode
[  181.624074][T17003] syzkaller1: entered allmulticast mode
[  181.698038][T17007] netlink: 'syz.0.4808': attribute type 1 has an invalid length.
[  181.719386][T17007] 8021q: adding VLAN 0 to HW filter on device bond5
[  182.068233][T17043] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  182.185078][T17061] __nla_validate_parse: 6 callbacks suppressed
[  182.185089][T17061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4835'.
[  182.295287][T17081] sctp: [Deprecated]: syz.1.4845 (pid 17081) Use of int in max_burst socket option.
[  182.295287][T17081] Use struct sctp_assoc_value instead
[  182.427955][T17094] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4849'.
[  182.431016][T17094] batman_adv: batadv0: Interface deactivated: dummy0
[  182.435645][T17094] batman_adv: batadv0: Removing interface: dummy0
[  182.463799][T17109] bond2: entered promiscuous mode
[  182.466714][T17109] bond2: entered allmulticast mode
[  182.468985][T17109] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.865139][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  182.867721][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  182.914793][T17191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4894'.
[  182.927897][T17193] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4895'.
[  183.716945][T17238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4916'.
[  183.720594][T17238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4916'.
[  183.723663][T17238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4916'.
[  183.727637][T17238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4916'.
[  183.824910][T17240] block nbd1: server does not support multiple connections per device.
[  183.828669][T17240] block nbd1: shutting down sockets
[  183.872659][T17242] IPVS: Scheduler module ip_vs_sip not found
[  184.051472][T17275] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  184.057613][T17275] CPU: 0 UID: 0 PID: 17275 Comm: syz.2.4934 Not tainted syzkaller #0 PREEMPT(full) 
[  184.057630][T17275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.057639][T17275] Call Trace:
[  184.057645][T17275]  <TASK>
[  184.057650][T17275]  dump_stack_lvl+0x189/0x250
[  184.057672][T17275]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.057687][T17275]  ? __pfx__printk+0x10/0x10
[  184.057702][T17275]  ? kernfs_root+0x1c/0x230
[  184.057720][T17275]  ? kernfs_path_from_node+0x2f/0x290
[  184.057733][T17275]  ? kernfs_path_from_node+0x250/0x290
[  184.057746][T17275]  ? kernfs_path_from_node+0x2f/0x290
[  184.057760][T17275]  sysfs_warn_dup+0x8e/0xa0
[  184.057773][T17275]  sysfs_do_create_link_sd+0xc0/0x110
[  184.057786][T17275]  device_add_class_symlinks+0x1cf/0x240
[  184.057801][T17275]  device_add+0x475/0xb50
[  184.057813][T17275]  wiphy_register+0x1ba6/0x28d0
[  184.057837][T17275]  ? __pfx_wiphy_register+0x10/0x10
[  184.057854][T17275]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  184.057869][T17275]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  184.057882][T17275]  ieee80211_register_hw+0x3425/0x4080
[  184.057895][T17275]  ? ieee80211_register_hw+0x1471/0x4080
[  184.057907][T17275]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  184.057921][T17275]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.057938][T17275]  ? __hrtimer_setup+0x187/0x210
[  184.057949][T17275]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  184.057968][T17275]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  184.057989][T17275]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  184.058002][T17275]  ? trace_kmalloc+0x1f/0xd0
[  184.058015][T17275]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  184.058029][T17275]  ? kstrndup+0xbf/0x160
[  184.058042][T17275]  hwsim_new_radio_nl+0xea4/0x1b10
[  184.058057][T17275]  ? __pfx___nla_validate_parse+0x10/0x10
[  184.058078][T17275]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.058096][T17275]  ? __nla_parse+0x40/0x60
[  184.058114][T17275]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  184.058130][T17275]  genl_family_rcv_msg_doit+0x215/0x300
[  184.058142][T17275]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  184.058157][T17275]  ? bpf_lsm_capable+0x9/0x20
[  184.058173][T17275]  ? security_capable+0x7e/0x2e0
[  184.058190][T17275]  genl_rcv_msg+0x60e/0x790
[  184.058205][T17275]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.058216][T17275]  ? __kasan_slab_alloc+0x6c/0x80
[  184.058231][T17275]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  184.058246][T17275]  ? __netlink_lookup+0xbd/0x810
[  184.058256][T17275]  ? rcu_is_watching+0x15/0xb0
[  184.058271][T17275]  netlink_rcv_skb+0x208/0x470
[  184.058287][T17275]  ? __pfx_genl_rcv_msg+0x10/0x10
[  184.058300][T17275]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.058320][T17275]  ? lock_release+0x4b/0x3e0
[  184.058347][T17275]  ? down_read+0x1ad/0x2e0
[  184.058359][T17275]  genl_rcv+0x28/0x40
[  184.058372][T17275]  netlink_unicast+0x82f/0x9e0
[  184.058389][T17275]  ? __pfx_netlink_unicast+0x10/0x10
[  184.058404][T17275]  ? netlink_sendmsg+0x642/0xb30
[  184.058413][T17275]  ? skb_put+0x11b/0x210
[  184.058425][T17275]  netlink_sendmsg+0x805/0xb30
[  184.058437][T17275]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.058448][T17275]  ? futex_unqueue+0x22/0x240
[  184.058459][T17275]  ? aa_sock_msg_perm+0xf1/0x1d0
[  184.058471][T17275]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.058484][T17275]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.058495][T17275]  __sock_sendmsg+0x21c/0x270
[  184.058510][T17275]  ____sys_sendmsg+0x505/0x830
[  184.058523][T17275]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.058537][T17275]  ? import_iovec+0x74/0xa0
[  184.058552][T17275]  ___sys_sendmsg+0x21f/0x2a0
[  184.058590][T17275]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.058604][T17275]  ? futex_wait+0x285/0x360
[  184.058628][T17275]  ? __fget_files+0x2a/0x420
[  184.058637][T17275]  ? __fget_files+0x3a0/0x420
[  184.058651][T17275]  __x64_sys_sendmsg+0x19b/0x260
[  184.058666][T17275]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.058684][T17275]  ? rcu_is_watching+0x15/0xb0
[  184.058695][T17275]  do_syscall_64+0xfa/0x3b0
[  184.058706][T17275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.058717][T17275]  ? exc_page_fault+0x9f/0xf0
[  184.058736][T17275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.058749][T17275] RIP: 0033:0x7f841358ebe9
[  184.058760][T17275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.058772][T17275] RSP: 002b:00007f8414384038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.058786][T17275] RAX: ffffffffffffffda RBX: 00007f84137b5fa0 RCX: 00007f841358ebe9
[  184.058796][T17275] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  184.058805][T17275] RBP: 00007f8413611e19 R08: 0000000000000000 R09: 0000000000000000
[  184.058813][T17275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.058821][T17275] R13: 00007f84137b6038 R14: 00007f84137b5fa0 R15: 00007fff05955368
[  184.058834][T17275]  </TASK>
[  184.383918][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4950'.
[  184.387944][T17307] sctp: [Deprecated]: syz.1.4950 (pid 17307) Use of int in max_burst socket option deprecated.
[  184.387944][T17307] Use struct sctp_assoc_value instead
[  184.430437][T17315] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4954'.
[  184.720941][T17354] _Z`Ԁ@S!: entered promiscuous mode
[  184.903672][T17374] netlink: 'syz.2.4972': attribute type 1 has an invalid length.
[  184.912672][T17374] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.991664][T17381] netlink: 'syz.2.4974': attribute type 8 has an invalid length.
[  185.316775][T17402] veth0_vlan: left allmulticast mode
[  185.319376][T17402] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  185.323547][T17402] macsec1: left promiscuous mode
[  185.326000][T17402] macsec1: left allmulticast mode
[  185.328030][T17402] tipc: Resetting bearer <eth:syzkaller0>
[  185.331238][T17402] syzkaller0: left promiscuous mode
[  185.333405][T17402] syzkaller0: left allmulticast mode
[  185.338546][T17402] macvtap1: left promiscuous mode
[  185.340861][T17402] macvtap1: left allmulticast mode
[  185.343969][T17402] bond4: left promiscuous mode
[  185.346539][T17402] bond4: left allmulticast mode
[  185.350168][T17402] veth9: left promiscuous mode
[  185.354409][ T1268] lo speed is unknown, defaulting to 1000
[  185.357412][ T1268] syz0: Port: 1 Link DOWN
[  185.359324][ T1268] lo speed is unknown, defaulting to 1000
[  186.041480][T17446] hsr0 speed is unknown, defaulting to 1000
[  186.044136][T17446] lo speed is unknown, defaulting to 1000
[  186.086269][T17449] ip6tnl0: entered promiscuous mode
[  186.088536][T17449] ip6tnl0: entered allmulticast mode
[  186.520936][T17496] syzkaller1: entered promiscuous mode
[  186.522783][T17496] syzkaller1: entered allmulticast mode
[  186.674973][T17498] netlink: 'syz.0.5025': attribute type 1 has an invalid length.
[  186.678409][T17498] netlink: 'syz.0.5025': attribute type 1 has an invalid length.
[  186.681704][T17498] block nbd1: shutting down sockets
[  186.703800][T17500] netlink: 'syz.0.5026': attribute type 20 has an invalid length.
[  186.707403][T17500] netlink: 'syz.0.5026': attribute type 20 has an invalid length.
[  186.864841][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  186.988333][T17517] hsr0 speed is unknown, defaulting to 1000
[  186.991669][T17517] lo speed is unknown, defaulting to 1000
[  187.362280][T17533] veth1: left promiscuous mode
[  187.368366][T17533] vlan0: left promiscuous mode
[  187.370776][T17533] ipvlan0: left promiscuous mode
[  187.379217][T17533] veth3: left promiscuous mode
[  187.382140][T17533] geneve2: left promiscuous mode
[  187.387388][T17533] geneve3: left promiscuous mode
[  187.397717][T17533] veth5: left promiscuous mode
[  187.408598][T17532] __nla_validate_parse: 13 callbacks suppressed
[  187.408611][T17532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5037'.
[  187.443407][ T5903] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.453989][ T5903] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.463464][ T5903] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.468937][ T5903] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.472398][ T5903] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.486914][ T5903] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.497679][ T5903] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.505465][ T5903] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.509118][ T5903] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.520482][T17536] netlink: 'syz.2.5040': attribute type 3 has an invalid length.
[  187.523877][ T5903] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.535864][ T5903] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.549013][ T5903] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  187.825938][T17560] syz.2.5050 uses old SIOCAX25GETINFO
[  187.996400][T17588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5063'.
[  188.028039][T17593] netlink: 'syz.0.5066': attribute type 4 has an invalid length.
[  188.031688][T17593] netlink: 'syz.0.5066': attribute type 4 has an invalid length.
[  188.037714][ T5930] lo speed is unknown, defaulting to 1000
[  188.039749][ T5930] syz0: Port: 1 Link ACTIVE
[  188.041617][ T5930] lo speed is unknown, defaulting to 1000
[  188.122696][T17602] 8021q: adding VLAN 0 to HW filter on device bond7
[  188.164964][T17605] tun0: tun_chr_ioctl cmd 2147767520
[  188.638103][T17653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5090'.
[  188.798756][T17662] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  189.132941][T17666] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  189.291052][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5100'.
[  189.296619][T17676] dvmrp0: left allmulticast mode
[  189.494324][T17704] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  189.497319][T17704] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  189.582333][T17724] netlink: 'syz.1.5122': attribute type 1 has an invalid length.
[  189.880139][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5138'.
[  190.640218][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5159'.
[  190.663979][T17814] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.5161'.
[  190.702961][T17822] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5165'.
[  190.706748][T17822] validate_nla: 1 callbacks suppressed
[  190.706757][T17822] netlink: 'syz.2.5165': attribute type 1 has an invalid length.
[  190.748957][T17826] netlink: 'syz.2.5167': attribute type 4 has an invalid length.
[  190.752815][T17826] netlink: 'syz.2.5167': attribute type 4 has an invalid length.
[  190.838780][T17834] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5171'.
[  190.855619][T17835] syzkaller0: entered promiscuous mode
[  190.858400][T17835] syzkaller0: entered allmulticast mode
[  191.001489][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5178'.
[  191.094390][T17859] netlink: 'syz.1.5182': attribute type 1 has an invalid length.
[  191.139317][T17865] netlink: 'syz.1.5185': attribute type 7 has an invalid length.
[  191.757490][T17900] dvmrp8: entered allmulticast mode
[  191.762184][T17900] dvmrp8: left allmulticast mode
[  191.769801][T17902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.335351][T17954] netlink: 'syz.0.5224': attribute type 1 has an invalid length.
[  192.528221][T17976] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  192.555146][   T61] block nbd0: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 90 seconds
[  192.558781][   T61] block nbd0: Possible stuck request ffff888022008200: control (read@1024,1024B). Runtime 90 seconds
[  192.562647][   T61] block nbd0: Possible stuck request ffff888022008400: control (read@2048,1024B). Runtime 90 seconds
[  192.566534][   T61] block nbd0: Possible stuck request ffff888022008600: control (read@3072,1024B). Runtime 90 seconds
[  193.066754][T18021] hsr0 speed is unknown, defaulting to 1000
[  193.069695][T18021] lo speed is unknown, defaulting to 1000
[  193.218928][T18033] __nla_validate_parse: 5 callbacks suppressed
[  193.218942][T18033] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5259'.
[  193.229223][T18034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.232121][T18034] syzkaller0: entered promiscuous mode
[  193.234276][T18034] syzkaller0: entered allmulticast mode
[  193.240850][T18034] tipc: Resetting bearer <eth:syzkaller0>
[  193.244036][T18031] tipc: Resetting bearer <eth:syzkaller0>
[  193.256252][T18031] tipc: Disabling bearer <eth:syzkaller0>
[  193.681251][T18097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.691307][T18097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.826985][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.348415][T18157] netlink: 'syz.1.5317': attribute type 1 has an invalid length.
[  194.351208][T18157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5317'.
[  194.441680][T18172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5322'.
[  194.444805][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5323'.
[  194.450242][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5323'.
[  194.602424][T18189] hsr0 speed is unknown, defaulting to 1000
[  194.607910][T18189] lo speed is unknown, defaulting to 1000
[  194.734446][T18206] sit0: entered promiscuous mode
[  194.737017][T18206] netlink: 'syz.1.5338': attribute type 1 has an invalid length.
[  194.740218][T18206] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5338'.
[  194.836642][T18218] netlink: zone id is out of range
[  194.839261][T18218] netlink: zone id is out of range
[  194.841457][T18218] netlink: set zone limit has 4 unknown bytes
[  195.106869][T18258] netlink: 'syz.1.5358': attribute type 13 has an invalid length.
[  195.110626][T18258] netlink: 'syz.1.5358': attribute type 17 has an invalid length.
[  195.199947][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5366'.
[  195.378928][T18307] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  196.292164][T18337] 8021q: adding VLAN 0 to HW filter on device bond8
[  196.405035][T18366] validate_nla: 1 callbacks suppressed
[  196.405045][T18366] netlink: 'syz.2.5407': attribute type 4 has an invalid length.
[  196.459999][T18379] hsr0 speed is unknown, defaulting to 1000
[  196.462769][T18379] lo speed is unknown, defaulting to 1000
[  196.466074][T18381] netlink: 704 bytes leftover after parsing attributes in process `syz.2.5414'.
[  196.494674][T18385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.589976][T18399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5421'.
[  197.053983][T18481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5462'.
[  197.129242][T18492] sit0: entered promiscuous mode
[  197.131492][T18492] netlink: 'syz.2.5465': attribute type 1 has an invalid length.
[  197.285610][T18503] hsr0 speed is unknown, defaulting to 1000
[  197.288058][T18503] lo speed is unknown, defaulting to 1000
[  197.931864][T18534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.937043][T18534] syzkaller0: entered promiscuous mode
[  197.939194][T18534] syzkaller0: entered allmulticast mode
[  197.945338][T18534] tipc: Resetting bearer <eth:syzkaller0>
[  197.948068][T18532] tipc: Resetting bearer <eth:syzkaller0>
[  197.952572][T18532] tipc: Disabling bearer <eth:syzkaller0>
[  198.408197][T18583] __nla_validate_parse: 2 callbacks suppressed
[  198.408213][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5504'.
[  198.467927][T18587] dvmrp8: entered allmulticast mode
[  198.485697][T18587] hsr0 speed is unknown, defaulting to 1000
[  198.488997][T18587] lo speed is unknown, defaulting to 1000
[  198.529481][T18588] netlink: 'syz.1.5506': attribute type 23 has an invalid length.
[  198.580702][T18586] dvmrp8: left allmulticast mode
[  198.824578][T18605] netlink: 'syz.2.5513': attribute type 10 has an invalid length.
[  198.832839][T18605] veth0_macvtap: left promiscuous mode
[  198.839261][T18605] team0: Device veth0_macvtap failed to register rx_handler
[  198.911182][   T33] audit: type=1800 audit(1756382020.488:9): pid=18594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5508" name="cgroup.controllers" dev="tmpfs" ino=10697 res=0 errno=0
[  199.772851][T18618] hsr0 speed is unknown, defaulting to 1000
[  199.778888][T18618] lo speed is unknown, defaulting to 1000
[  199.808903][T18625] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5522'.
[  199.917088][T18644] veth0_to_bridge: entered promiscuous mode
[  199.919665][T18643] veth0_to_bridge: left promiscuous mode
[  200.022376][T18656] hsr0 speed is unknown, defaulting to 1000
[  200.025635][T18656] lo speed is unknown, defaulting to 1000
[  200.202306][T18669] hsr0 speed is unknown, defaulting to 1000
[  200.260161][T18669] lo speed is unknown, defaulting to 1000
[  200.479586][T18687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.482665][T18687] syzkaller0: entered promiscuous mode
[  200.484554][T18687] syzkaller0: entered allmulticast mode
[  200.491532][T18687] tipc: Resetting bearer <eth:syzkaller0>
[  200.495343][T18686] tipc: Resetting bearer <eth:syzkaller0>
[  200.498619][T18686] tipc: Disabling bearer <eth:syzkaller0>
[  201.013802][T18721] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.437835][T18780] tap0: tun_chr_ioctl cmd 1074025677
[  201.440059][T18780] tap0: linktype set to 805
[  201.632384][T18814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5602'.
[  201.733526][T18822] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5605'.
[  201.817483][T18828] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5608'.
[  202.070632][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5628'.
[  202.281395][T18919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5652'.
[  202.285011][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'.
[  202.387502][T18925] netlink: 'syz.0.5655': attribute type 7 has an invalid length.
[  203.331065][T18976] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5676'.
[  203.347714][T18978] tap0: tun_chr_ioctl cmd 1074025677
[  203.349662][T18978] tap0: linktype set to 825
[  203.496230][T19007] netlink: 'syz.0.5691': attribute type 1 has an invalid length.
[  203.499642][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5691'.
[  203.503471][T19007] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5691'.
[  203.540595][T19017] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  203.672841][T19038] hsr0 speed is unknown, defaulting to 1000
[  203.680759][T19038] lo speed is unknown, defaulting to 1000
[  203.933985][T19072] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  204.157887][T19095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5730'.
[  205.304216][T19152] netlink: 'syz.0.5756': attribute type 3 has an invalid length.
[  205.850002][T19205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5781'.
[  205.942469][T19217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  206.014058][T19229] Bluetooth: MGMT ver 1.23
[  206.080432][T19242] openvswitch: netlink: Missing key (keys=40, expected=80)
[  206.199718][T19262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5809'.
[  206.429740][T19307] hsr0 speed is unknown, defaulting to 1000
[  206.432035][T19307] lo speed is unknown, defaulting to 1000
[  206.767071][   T57] block nbd1: Receive control failed (result -32)
[  207.562948][T19399] hsr0 speed is unknown, defaulting to 1000
[  207.570400][T19399] lo speed is unknown, defaulting to 1000
[  207.652934][T19403] hsr0 speed is unknown, defaulting to 1000
[  207.657706][T19403] lo speed is unknown, defaulting to 1000
[  208.581581][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5877'.
[  208.612529][T19427] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5880'.
[  208.616913][T19427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5880'.
[  208.696426][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5884'.
[  208.711866][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5885'.
[  208.716475][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5885'.
[  209.011942][T19448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5890'.
[  209.253659][T19482] netlink: 'syz.2.5906': attribute type 21 has an invalid length.
[  209.257649][T19484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.274236][T19490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5908'.
[  209.388812][T19511] : renamed from bond_slave_0
[  209.487491][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5923'.
[  209.531870][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5927'.
[  209.536845][T19537] netlink: 'syz.0.5927': attribute type 21 has an invalid length.
[  209.560310][T19540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.733268][T19549] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.736685][T19549] 8021q: adding VLAN 0 to HW filter on device team0
[  209.740586][T19549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.336605][T19561] netlink: 'syz.2.5936': attribute type 10 has an invalid length.
[  210.836201][T19631] tipc: Can't bind to reserved service type 2
[  211.398846][T19650] netlink: 'syz.0.5974': attribute type 10 has an invalid length.
[  211.814109][T19705] netlink: 'syz.2.6000': attribute type 9 has an invalid length.
[  211.819739][T19705] macvlan3: entered promiscuous mode
[  211.821609][T19705] hsr0: entered promiscuous mode
[  211.823409][T19705] macvlan3: entered allmulticast mode
[  211.826333][T19705] hsr0: entered allmulticast mode
[  211.828107][T19705] hsr_slave_0: entered allmulticast mode
[  211.830184][T19705] hsr_slave_1: entered allmulticast mode
[  212.127942][T19755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.130937][T19755] syzkaller0: entered promiscuous mode
[  212.133237][T19755] syzkaller0: entered allmulticast mode
[  212.139838][T19755] tipc: Resetting bearer <eth:syzkaller0>
[  212.142800][T19752] tipc: Resetting bearer <eth:syzkaller0>
[  212.149387][T19752] tipc: Disabling bearer <eth:syzkaller0>
[  212.369029][T19779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.244206][   T33] audit: type=1800 audit(1756382034.818:10): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6041" name="memory.events" dev="tmpfs" ino=9808 res=0 errno=0
[  214.200085][T19838] __nla_validate_parse: 14 callbacks suppressed
[  214.200101][T19838] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6060'.
[  214.433971][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6073'.
[  214.461219][T19883] veth1_to_bond: entered promiscuous mode
[  214.621941][T19902] netlink: 'syz.0.6082': attribute type 1 has an invalid length.
[  214.649845][T19902] bond6: (slave gretap2): making interface the new active one
[  214.652755][T19902] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  214.663674][T19902] syz.0.6082 (19902) used greatest stack depth: 19632 bytes left
[  214.929105][T19927] hsr0 speed is unknown, defaulting to 1000
[  214.931765][T19927] lo speed is unknown, defaulting to 1000
[  215.191449][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6097'.
[  215.509226][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6120'.
[  215.512241][T19988] netlink: 'syz.2.6120': attribute type 2 has an invalid length.
[  215.711130][T20024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6138'.
[  215.719664][T20022] pim6reg1: entered promiscuous mode
[  215.721456][T20022] pim6reg1: entered allmulticast mode
[  215.724591][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6138'.
[  215.788170][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6141'.
[  216.521263][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6189'.
[  216.764377][T20162] hsr0 speed is unknown, defaulting to 1000
[  216.768216][T20162] lo speed is unknown, defaulting to 1000
[  217.639271][T20217] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6225'.
[  218.041989][T20277] syzkaller0: entered promiscuous mode
[  218.050419][T20277] syzkaller0: entered allmulticast mode
[  218.136666][T20291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6258'.
[  218.317793][T20324] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  218.337466][T20320] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  218.342361][T20320] netlink: 'syz.1.6272': attribute type 4 has an invalid length.
[  218.485553][T20336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.489158][T20336] syzkaller0: entered promiscuous mode
[  218.491520][T20336] syzkaller0: entered allmulticast mode
[  218.501597][T20336] tipc: Resetting bearer <eth:syzkaller0>
[  218.505386][T20335] tipc: Resetting bearer <eth:syzkaller0>
[  218.511766][T20335] tipc: Disabling bearer <eth:syzkaller0>
[  218.532164][T20340] netlink: 'syz.0.6279': attribute type 10 has an invalid length.
[  218.536904][T20340] bond0: (slave wlan1): Opening slave failed
[  218.681596][T20350] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  218.947268][T20368] netlink: 'syz.0.6292': attribute type 32 has an invalid length.
[  219.159165][   T33] audit: type=1800 audit(1756382040.738:11): pid=20381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6298" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9751 res=0 errno=0
[  219.478475][T20402] __nla_validate_parse: 6 callbacks suppressed
[  219.478491][T20402] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6308'.
[  219.684072][T20438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6324'.
[  219.689912][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6324'.
[  219.730915][T20448] netlink: 'syz.1.6330': attribute type 46 has an invalid length.
[  220.363498][T20519] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6363'.
[  220.781709][T20550] netlink: 'syz.0.6375': attribute type 29 has an invalid length.
[  220.785965][T20550] netlink: 'syz.0.6375': attribute type 29 has an invalid length.
[  220.836813][T20554] sctp: [Deprecated]: syz.0.6377 (pid 20554) Use of struct sctp_assoc_value in delayed_ack socket option.
[  220.836813][T20554] Use struct sctp_sack_info instead
[  221.113098][T20563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.150939][T20571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6384'.
[  221.154381][T20571] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  221.334628][T20604] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.366341][T20609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6404'.
[  221.386718][T20609] nbd: socks must be embedded in a SOCK_ITEM attr
[  221.389396][T13369] block nbd64: NBD_DISCONNECT
[  222.327582][T20635] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6411'.
[  222.397932][T20642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6414'.
[  222.414127][T20644] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  222.419580][T20644] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  222.563494][T20653] netlink: 'syz.0.6419': attribute type 1 has an invalid length.
[  222.574788][T20653] netlink: 'syz.0.6419': attribute type 3 has an invalid length.
[  222.585945][T20653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6419'.
[  222.644795][   T61] block nbd0: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 120 seconds
[  222.648824][   T61] block nbd0: Possible stuck request ffff888022008200: control (read@1024,1024B). Runtime 120 seconds
[  222.653107][   T61] block nbd0: Possible stuck request ffff888022008400: control (read@2048,1024B). Runtime 120 seconds
[  222.657409][   T61] block nbd0: Possible stuck request ffff888022008600: control (read@3072,1024B). Runtime 120 seconds
[  222.669411][T20660] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  222.691755][T20661] delete_channel: no stack
[  223.100724][T20701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6442'.
[  223.231829][T20724] netlink: 'syz.0.6453': attribute type 13 has an invalid length.
[  223.234575][T20724] netlink: 'syz.0.6453': attribute type 17 has an invalid length.
[  223.256244][T20724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  223.299218][T20734] netlink: 'syz.0.6458': attribute type 21 has an invalid length.
[  223.302381][T20734] netlink: 'syz.0.6458': attribute type 1 has an invalid length.
[  223.328326][T20736] sctp: [Deprecated]: syz.0.6459 (pid 20736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.328326][T20736] Use struct sctp_sack_info instead
[  223.419781][T20747] 8021q: adding VLAN 0 to HW filter on device bond7
[  223.832443][T20796] netlink: 'syz.2.6485': attribute type 10 has an invalid length.
[  223.838503][T20796] 8021q: adding VLAN 0 to HW filter on device team0
[  223.842537][T20796] : (slave team0): Enslaving as an active interface with a down link
[  224.233226][T20824] syzkaller0: entered promiscuous mode
[  224.236428][T20824] syzkaller0: entered allmulticast mode
[  224.321625][T20826] tc_dump_action: action bad kind
[  224.453042][T20836] hsr0 speed is unknown, defaulting to 1000
[  224.455908][T20836] lo speed is unknown, defaulting to 1000
[  224.544874][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  224.710032][T20864] __nla_validate_parse: 13 callbacks suppressed
[  224.710046][T20864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6512'.
[  224.734019][T20864] : renamed from bond0 (while UP)
[  225.108930][T20899] veth0_to_bond: left allmulticast mode
[  225.111537][T20899] veth0_to_bond: left promiscuous mode
[  225.114150][T20899] bridge2: port 2(veth0_to_bond) entered disabled state
[  225.122664][T20899] : (slave bond_slave_0): Releasing backup interface
[  225.129365][T20899] : (slave bond_slave_1): Releasing backup interface
[  225.134378][T20899] team0: Port device C removed
[  225.141669][T20899] team0: Port device team_slave_1 removed
[  225.144868][T20899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.148729][T20899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.152725][T20899] veth3: left allmulticast mode
[  225.155381][T20899] veth3: left promiscuous mode
[  225.158078][T20899] bridge2: port 1(veth3) entered disabled state
[  225.164189][T20899] vlan2: left allmulticast mode
[  225.166481][T20899] veth1: left allmulticast mode
[  225.168535][T20899] vlan2: left promiscuous mode
[  225.170537][T20899] veth1: left promiscuous mode
[  225.172879][T20899] bridge2: port 3(vlan2) entered disabled state
[  225.178955][T20899] bond2: (slave geneve2): Releasing active interface
[  225.183460][T20899] bond3: (slave bridge4): Releasing active interface
[  225.188552][T20899] bond6: (slave gretap2): Releasing active interface
[  225.226167][T20899] team0: Mode changed to "activebackup"
[  225.310473][T20916] hsr0 speed is unknown, defaulting to 1000
[  225.313908][T20916] lo speed is unknown, defaulting to 1000
[  225.507342][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'.
[  225.511055][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6536'.
[  225.598495][T20940] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6538'.
[  225.744209][T20953] validate_nla: 1 callbacks suppressed
[  225.744222][T20953] netlink: 'syz.0.6545': attribute type 322 has an invalid length.
[  225.801280][T20956] dvmrp0: entered allmulticast mode
[  225.985642][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6554'.
[  226.057956][T20982] netlink: 'syz.2.6558': attribute type 1 has an invalid length.
[  226.061174][T20982] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6558'.
[  226.065124][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6558'.
[  226.361095][T21001] vlan4: entered allmulticast mode
[  226.362999][T21001] veth1: entered allmulticast mode
[  226.366529][T21001] batman_adv: batadv0: Adding interface: vlan4
[  226.368641][T21001] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.380655][T21001] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[  226.384347][T21003] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  226.459974][T21010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.621386][T21025] netlink: 'syz.1.6579': attribute type 29 has an invalid length.
[  226.686340][T21031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6582'.
[  227.355958][T21099] hsr0 speed is unknown, defaulting to 1000
[  227.360720][T21099] lo speed is unknown, defaulting to 1000
[  227.616448][T21124] netlink: 'syz.1.6625': attribute type 8 has an invalid length.
[  227.799154][T21144] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  228.021942][T21188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.024442][T21188] IPv6: NLM_F_CREATE should be set when creating new route
[  228.026986][T21188] IPv6: NLM_F_CREATE should be set when creating new route
[  228.737288][T21231] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6671'.
[  228.906397][T21248] openvswitch: netlink: Flow actions attr not present in new flow.
[  229.104083][T21270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  229.158119][T21279] netlink: 'syz.2.6695': attribute type 5 has an invalid length.
[  229.170434][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6694'.
[  229.182476][T21284] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  229.185540][T21284] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  229.491541][T21323] syzkaller1: entered promiscuous mode
[  229.493615][T21323] syzkaller1: entered allmulticast mode
[  230.467985][T21350] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  230.560339][T21364] __nla_validate_parse: 2 callbacks suppressed
[  230.560353][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6735'.
[  230.787151][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6749'.
[  230.790002][T21397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6749'.
[  231.006939][T21426] netlink: 'syz.2.6762': attribute type 12 has an invalid length.
[  231.010084][T21426] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6762'.
[  231.132417][T21436] bridge0: entered allmulticast mode
[  231.153420][T21438] sctp: [Deprecated]: syz.2.6766 (pid 21438) Use of int in maxseg socket option.
[  231.153420][T21438] Use struct sctp_assoc_value instead
[  231.602051][T21468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.605831][T21468] syzkaller0: entered promiscuous mode
[  231.608150][T21468] syzkaller0: entered allmulticast mode
[  231.613102][T21468] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  231.620014][T21468] tipc: Resetting bearer <eth:syzkaller0>
[  231.622786][T21468] tipc: Resetting bearer <eth:syzkaller0>
[  231.626790][T21468] tipc: Disabling bearer <eth:syzkaller0>
[  232.891813][T21559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6823'.
[  232.898302][T21559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6823'.
[  232.922642][T21563] syzkaller1: entered promiscuous mode
[  232.924616][T21563] syzkaller1: entered allmulticast mode
[  232.987941][T21573] netlink: 'syz.2.6830': attribute type 1 has an invalid length.
[  232.990541][T21573] netlink: 'syz.2.6830': attribute type 10 has an invalid length.
[  232.993037][T21573] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6830'.
[  233.181235][T21613] netlink: 'syz.2.6850': attribute type 1 has an invalid length.
[  233.184211][T21613] netlink: 'syz.2.6850': attribute type 2 has an invalid length.
[  233.188082][T21613] netlink: 'syz.2.6850': attribute type 1 has an invalid length.
[  233.191363][T21613] netlink: 'syz.2.6850': attribute type 2 has an invalid length.
[  233.225735][   T12] syzkaller0: tun_net_xmit 76
[  233.226957][T21619] syzkaller0: create flow: hash 3214648315 index 1
[  233.228434][   T12] syzkaller0: tun_net_xmit 48
[  233.237262][T21618] syzkaller0: delete flow: hash 3214648315 index 1
[  233.684396][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6887'.
[  233.689108][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6887'.
[  233.834210][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6897'.
[  233.973154][T21740] netlink: 'syz.2.6909': attribute type 6 has an invalid length.
[  233.979763][T21740] netlink: 'syz.2.6909': attribute type 12 has an invalid length.
[  234.078004][T21757] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  234.087798][T21757] : (slave team0): Releasing backup interface
[  234.095883][T21757] : (slave dummy0): Releasing backup interface
[  234.103837][T21757] bond5: (slave ip6gretap1): Removing an active aggregator
[  234.107386][T21757] bond5: (slave ip6gretap1): Releasing backup interface
[  234.109983][T21757] bond5: (slave ip6gretap1): the permanent HWaddr of slave - be:61:20:59:7a:c9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  234.118355][T21757] bond5: (slave veth5): Releasing backup interface
[  234.125009][T21757] netlink: 'syz.2.6915': attribute type 10 has an invalid length.
[  234.128029][T21757] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  234.130835][T21757] wlan1: mtu less than device minimum
[  234.132780][T21757] : (slave wlan1): Error -22 calling dev_set_mtu
[  234.136694][T21757] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.140026][T21757] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  235.799679][T21830] __nla_validate_parse: 3 callbacks suppressed
[  235.799691][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6949'.
[  235.848896][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6952'.
[  236.047250][T21873] validate_nla: 1 callbacks suppressed
[  236.047261][T21873] netlink: 'syz.1.6971': attribute type 1 has an invalid length.
[  236.112193][T21881] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6974'.
[  236.263555][T21903] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  237.212762][T21932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.259519][T21939] hsr0 speed is unknown, defaulting to 1000
[  237.262584][T21939] lo speed is unknown, defaulting to 1000
[  237.666668][T21988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.669342][T21988] syzkaller0: entered promiscuous mode
[  237.671224][T21988] syzkaller0: entered allmulticast mode
[  237.676575][T21988] tipc: Resetting bearer <eth:syzkaller0>
[  237.679209][T21987] tipc: Resetting bearer <eth:syzkaller0>
[  237.682046][T21987] tipc: Disabling bearer <eth:syzkaller0>
[  237.874332][T22006] netlink: 'syz.1.7031': attribute type 3 has an invalid length.
[  238.327383][T22054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7053'.
[  238.459485][T22064] netlink: 'syz.1.7058': attribute type 1 has an invalid length.
[  238.872329][T22083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7067'.
[  238.876716][T22083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7067'.
[  239.298539][T22094] netlink: zone id is out of range
[  239.300497][T22094] netlink: zone id is out of range
[  239.302387][T22094] netlink: zone id is out of range
[  239.304263][T22094] netlink: zone id is out of range
[  239.306914][T22094] netlink: zone id is out of range
[  239.308961][T22094] netlink: zone id is out of range
[  239.310952][T22094] netlink: zone id is out of range
[  239.312849][T22094] netlink: zone id is out of range
[  239.315253][T22094] netlink: zone id is out of range
[  239.317525][T22094] netlink: zone id is out of range
[  239.550219][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'.
[  239.553610][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7083'.
[  239.561693][T22118] macvlan3: entered promiscuous mode
[  239.630705][T22126] hsr0 speed is unknown, defaulting to 1000
[  239.633513][T22126] lo speed is unknown, defaulting to 1000
[  239.779335][T22136] hsr0 speed is unknown, defaulting to 1000
[  239.781906][T22136] lo speed is unknown, defaulting to 1000
[  239.818278][T22147] netlink: 'syz.2.7094': attribute type 29 has an invalid length.
[  240.970179][T22233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7132'.
[  240.981578][T22233] tc_dump_action: action bad kind
[  241.028259][T22244] netlink: 'syz.0.7138': attribute type 10 has an invalid length.
[  241.035843][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7138'.
[  241.144896][T22247] nbd2: detected capacity change from 0 to 549764202496
[  241.159258][   T57] block nbd2: Receive control failed (result -32)
[  241.161932][T13369] block nbd2: Dead connection, failed to find a fallback
[  241.169055][T13369] block nbd2: shutting down sockets
[  241.170878][T13369] blk_print_req_error: 138 callbacks suppressed
[  241.170886][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.181354][T13369] buffer_io_error: 138 callbacks suppressed
[  241.181364][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.188008][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.191032][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.193657][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.196860][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.198528][T22270] netlink: 'syz.2.7151': attribute type 1 has an invalid length.
[  241.199512][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.206713][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.209515][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.212415][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.216202][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.219289][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.221890][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.225063][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.227668][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.230594][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.233408][T13369] ldm_validate_partition_table(): Disk read failed.
[  241.236318][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.239383][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.249043][T13369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  241.252081][T13369] Buffer I/O error on dev nbd2, logical block 0, async page read
[  241.255150][T13369] Dev nbd2: unable to read RDB block 0
[  241.257849][T13369]  nbd2: unable to read partition table
[  241.262161][T13369] ldm_validate_partition_table(): Disk read failed.
[  241.266857][T13369] Dev nbd2: unable to read RDB block 0
[  241.275411][T13369]  nbd2: unable to read partition table
[  241.296483][T22280] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7154'.
[  241.300850][T22280] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7154'.
[  241.954264][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7205'.
[  241.959520][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7205'.
[  242.073530][T22406] netlink: 'syz.0.7214': attribute type 5 has an invalid length.
[  242.100225][T22409] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7215'.
[  242.219932][T22419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7219'.
[  242.263290][T22423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7221'.
[  242.564357][T22457] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7237'.
[  242.629359][T22468] tap0: tun_chr_ioctl cmd 1074025677
[  242.631481][T22468] tap0: linktype set to 270
[  243.217664][T22542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.220427][T22542] syzkaller0: entered promiscuous mode
[  243.222475][T22542] syzkaller0: entered allmulticast mode
[  243.229082][T22542] tipc: Resetting bearer <eth:syzkaller0>
[  243.232078][T22541] tipc: Resetting bearer <eth:syzkaller0>
[  243.237782][T22541] tipc: Disabling bearer <eth:syzkaller0>
[  244.186800][T22576] (unnamed net_device) (uninitialized): option use_carrier: invalid value (255)
[  244.219473][T22581] netlink: 'syz.1.7296': attribute type 13 has an invalid length.
[  244.424492][T22613] hsr0 speed is unknown, defaulting to 1000
[  244.427992][T22613] lo speed is unknown, defaulting to 1000
[  244.495709][T22625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.655644][T22648] net_ratelimit: 15 callbacks suppressed
[  244.655655][T22648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.798395][T22666] hsr0 speed is unknown, defaulting to 1000
[  244.802965][T22666] lo speed is unknown, defaulting to 1000
[  245.438785][T22723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.463609][T22725] netlink: 'syz.1.7357': attribute type 1 has an invalid length.
[  245.484218][T22725] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.523325][T22725] 8021q: adding VLAN 0 to HW filter on device bond4
[  245.527612][T22725] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  245.532100][T22725] bond4: (slave vcan0): Error -95 calling set_mac_address
[  245.550797][T22729] gretap1: entered promiscuous mode
[  245.556443][T22729] bond4: (slave gretap1): making interface the new active one
[  245.562895][T22729] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  245.571969][T22729] macvlan4: entered promiscuous mode
[  245.574261][T22729] macvlan4: entered allmulticast mode
[  245.577536][T22729] bond4: entered promiscuous mode
[  245.580348][T22729] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  245.584306][T22729] bond4: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  245.596699][T22729] bond4: left promiscuous mode
[  245.978645][T22762] __nla_validate_parse: 15 callbacks suppressed
[  245.978668][T22762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7372'.
[  245.999776][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7373'.
[  246.003532][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7373'.
[  246.007307][T22764] netlink: 58 bytes leftover after parsing attributes in process `syz.0.7373'.
[  246.036794][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7376'.
[  246.070436][T22772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7377'.
[  246.183231][T22788] : renamed from pim6reg1
[  246.259599][T22801] vlan6: entered promiscuous mode
[  246.261824][T22801] vlan6: entered allmulticast mode
[  246.263950][T22801] hsr_slave_1: entered allmulticast mode
[  246.320034][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7391'.
[  246.419741][T22811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.423227][T22811] syzkaller0: entered promiscuous mode
[  246.425900][T22811] syzkaller0: entered allmulticast mode
[  247.203557][T22813] tipc: Resetting bearer <eth:syzkaller0>
[  247.209710][T22810] tipc: Resetting bearer <eth:syzkaller0>
[  247.219136][T22810] tipc: Disabling bearer <eth:syzkaller0>
[  247.316935][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7405'.
[  247.326135][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7405'.
[  247.353510][T22839] netlink: 576 bytes leftover after parsing attributes in process `syz.0.7407'.
[  247.497187][T22861] macsec0: entered promiscuous mode
[  247.499513][T22861] batadv0: entered promiscuous mode
[  247.502176][T22861] batadv0: left promiscuous mode
[  247.829148][T22911] hsr0 speed is unknown, defaulting to 1000
[  247.832035][T22911] lo speed is unknown, defaulting to 1000
[  247.879684][T22914] hsr0 speed is unknown, defaulting to 1000
[  247.884814][T22914] lo speed is unknown, defaulting to 1000
[  248.031260][T22927] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.221540][T22944] 8021q: adding VLAN 0 to HW filter on device bond8
[  248.230899][T22944] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  248.275915][T22951] dvmrp8: entered allmulticast mode
[  248.296852][T22951] hsr0 speed is unknown, defaulting to 1000
[  248.299763][T22951] lo speed is unknown, defaulting to 1000
[  248.325670][ T5903] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  248.423960][T22950] dvmrp8: left allmulticast mode
[  248.435112][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  249.551732][T23025] netlink: 'syz.1.7487': attribute type 1 has an invalid length.
[  249.554430][T23025] netlink: 'syz.1.7487': attribute type 1 has an invalid length.
[  249.615605][T23027] netlink: 'syz.0.7488': attribute type 1 has an invalid length.
[  249.628382][T23027] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  249.633193][T23027] gretap3: entered promiscuous mode
[  249.940755][T23083] netlink: 'syz.1.7514': attribute type 1 has an invalid length.
[  249.980432][T23087] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  249.983648][T23087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.173309][T23103] hsr0 speed is unknown, defaulting to 1000
[  250.177141][T23103] lo speed is unknown, defaulting to 1000
[  250.226621][T23105] geneve3: entered allmulticast mode
[  250.233884][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.236765][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.241310][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.244318][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.279411][T23178] netlink: 'syz.1.7554': attribute type 21 has an invalid length.
[  251.365408][T23192] __nla_validate_parse: 16 callbacks suppressed
[  251.365419][T23192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7561'.
[  251.433988][T23204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7568'.
[  251.434263][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7569'.
[  251.487948][T23218] netlink: 'syz.1.7573': attribute type 4 has an invalid length.
[  251.491897][T23218] netlink: 'syz.1.7573': attribute type 12 has an invalid length.
[  251.635360][T23238] sit0: left promiscuous mode
[  251.639852][T23213] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  251.753903][T23252] netlink: 'syz.1.7587': attribute type 5 has an invalid length.
[  251.824191][T23266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7594'.
[  251.892462][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7599'.
[  251.903297][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7599'.
[  252.016456][T23291] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.268506][T23321] netlink: 'syz.1.7621': attribute type 10 has an invalid length.
[  252.359669][T23338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7628'.
[  252.368269][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7628'.
[  252.472106][T23357] syzkaller1: entered promiscuous mode
[  252.473954][T23357] syzkaller1: entered allmulticast mode
[  252.528485][T23364] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7642'.
[  252.529380][T23366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7643'.
[  252.728244][   T61] block nbd0: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 150 seconds
[  252.732695][   T61] block nbd0: Possible stuck request ffff888022008200: control (read@1024,1024B). Runtime 150 seconds
[  252.737360][   T61] block nbd0: Possible stuck request ffff888022008400: control (read@2048,1024B). Runtime 150 seconds
[  252.742076][   T61] block nbd0: Possible stuck request ffff888022008600: control (read@3072,1024B). Runtime 150 seconds
[  252.945037][ T5851] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  253.262811][   T33] audit: type=1800 audit(1756382074.838:12): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7664" name="blkio.bfq.time_recursive" dev="tmpfs" ino=12308 res=0 errno=0
[  254.193631][T23447] macvtap2: entered promiscuous mode
[  254.200658][T23447] erspan0: entered promiscuous mode
[  254.203071][T23447] macvtap2: entered allmulticast mode
[  254.206210][T23447] erspan0: entered allmulticast mode
[  254.347880][T23475] netlink: 'syz.0.7684': attribute type 21 has an invalid length.
[  254.524911][T23491] block nbd3: server does not support multiple connections per device.
[  254.528616][T23491] block nbd3: shutting down sockets
[  254.552359][T23497] hsr0 speed is unknown, defaulting to 1000
[  254.554975][T23497] lo speed is unknown, defaulting to 1000
[  254.585641][T23502] validate_nla: 1 callbacks suppressed
[  254.585651][T23502] netlink: 'syz.2.7697': attribute type 1 has an invalid length.
[  254.715424][T23517] hsr0 speed is unknown, defaulting to 1000
[  254.741697][T23517] lo speed is unknown, defaulting to 1000
[  254.837064][T23526] hsr0 speed is unknown, defaulting to 1000
[  254.839767][T23526] lo speed is unknown, defaulting to 1000
[  254.908132][T23539] hsr0 speed is unknown, defaulting to 1000
[  254.911452][T23539] lo speed is unknown, defaulting to 1000
[  255.182910][T23576] netlink: 'syz.2.7721': attribute type 14 has an invalid length.
[  255.187431][T23576] netlink: 'syz.2.7721': attribute type 11 has an invalid length.
[  255.330540][T23600] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  255.333818][T23600] CPU: 0 UID: 0 PID: 23600 Comm: syz.0.7731 Not tainted syzkaller #0 PREEMPT(full) 
[  255.333836][T23600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.333845][T23600] Call Trace:
[  255.333851][T23600]  <TASK>
[  255.333857][T23600]  dump_stack_lvl+0x189/0x250
[  255.333882][T23600]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.333897][T23600]  ? __pfx__printk+0x10/0x10
[  255.333915][T23600]  ? kernfs_root+0x1c/0x230
[  255.333931][T23600]  ? kernfs_path_from_node+0x2f/0x290
[  255.333945][T23600]  ? kernfs_path_from_node+0x250/0x290
[  255.333958][T23600]  ? kernfs_path_from_node+0x2f/0x290
[  255.333972][T23600]  sysfs_warn_dup+0x8e/0xa0
[  255.333985][T23600]  sysfs_do_create_link_sd+0xc0/0x110
[  255.334027][T23600]  device_add_class_symlinks+0x1cf/0x240
[  255.334044][T23600]  device_add+0x475/0xb50
[  255.334059][T23600]  wiphy_register+0x1ba6/0x28d0
[  255.334085][T23600]  ? __pfx_wiphy_register+0x10/0x10
[  255.334102][T23600]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  255.334118][T23600]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  255.334135][T23600]  ieee80211_register_hw+0x3425/0x4080
[  255.334155][T23600]  ? ieee80211_register_hw+0x1471/0x4080
[  255.334171][T23600]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  255.334185][T23600]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.334204][T23600]  ? __hrtimer_setup+0x187/0x210
[  255.334215][T23600]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  255.334236][T23600]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  255.334259][T23600]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  255.334273][T23600]  ? trace_kmalloc+0x1f/0xd0
[  255.334287][T23600]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  255.334303][T23600]  ? kstrndup+0xbf/0x160
[  255.334318][T23600]  hwsim_new_radio_nl+0xea4/0x1b10
[  255.334334][T23600]  ? __pfx___nla_validate_parse+0x10/0x10
[  255.334355][T23600]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  255.334375][T23600]  ? __nla_parse+0x40/0x60
[  255.334401][T23600]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  255.334422][T23600]  genl_family_rcv_msg_doit+0x215/0x300
[  255.334438][T23600]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  255.334455][T23600]  ? bpf_lsm_capable+0x9/0x20
[  255.334471][T23600]  ? security_capable+0x7e/0x2e0
[  255.334489][T23600]  genl_rcv_msg+0x60e/0x790
[  255.334504][T23600]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.334516][T23600]  ? __kasan_slab_alloc+0x6c/0x80
[  255.334531][T23600]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  255.334546][T23600]  ? __netlink_lookup+0xbd/0x810
[  255.334556][T23600]  ? rcu_is_watching+0x15/0xb0
[  255.334570][T23600]  netlink_rcv_skb+0x208/0x470
[  255.334586][T23600]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.334597][T23600]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  255.334615][T23600]  ? lock_release+0x4b/0x3e0
[  255.334632][T23600]  ? down_read+0x1ad/0x2e0
[  255.334644][T23600]  genl_rcv+0x28/0x40
[  255.334656][T23600]  netlink_unicast+0x82f/0x9e0
[  255.334674][T23600]  ? __pfx_netlink_unicast+0x10/0x10
[  255.334690][T23600]  ? netlink_sendmsg+0x642/0xb30
[  255.334699][T23600]  ? skb_put+0x11b/0x210
[  255.334737][T23600]  netlink_sendmsg+0x805/0xb30
[  255.334752][T23600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.334762][T23600]  ? futex_unqueue+0x22/0x240
[  255.334775][T23600]  ? aa_sock_msg_perm+0xf1/0x1d0
[  255.334788][T23600]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.334802][T23600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.334813][T23600]  __sock_sendmsg+0x21c/0x270
[  255.334829][T23600]  ____sys_sendmsg+0x505/0x830
[  255.334841][T23600]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.334855][T23600]  ? import_iovec+0x74/0xa0
[  255.334869][T23600]  ___sys_sendmsg+0x21f/0x2a0
[  255.334882][T23600]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.334896][T23600]  ? futex_wait+0x285/0x360
[  255.334920][T23600]  ? __fget_files+0x2a/0x420
[  255.334930][T23600]  ? __fget_files+0x3a0/0x420
[  255.334943][T23600]  __x64_sys_sendmsg+0x19b/0x260
[  255.334956][T23600]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.334970][T23600]  ? rcu_is_watching+0x15/0xb0
[  255.334984][T23600]  ? rcu_is_watching+0x15/0xb0
[  255.335028][T23600]  do_syscall_64+0xfa/0x3b0
[  255.335042][T23600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.335055][T23600]  ? exc_page_fault+0x9f/0xf0
[  255.335073][T23600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.335085][T23600] RIP: 0033:0x7f401e78ebe9
[  255.335099][T23600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.335110][T23600] RSP: 002b:00007f401f634038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.335125][T23600] RAX: ffffffffffffffda RBX: 00007f401e9b5fa0 RCX: 00007f401e78ebe9
[  255.335135][T23600] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  255.335144][T23600] RBP: 00007f401e811e19 R08: 0000000000000000 R09: 0000000000000000
[  255.335152][T23600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.335159][T23600] R13: 00007f401e9b6038 R14: 00007f401e9b5fa0 R15: 00007fffe00e33e8
[  255.335173][T23600]  </TASK>
[  255.625060][T23611] netlink: 'syz.1.7737': attribute type 14 has an invalid length.
[  255.751416][T23627] netlink: 'syz.0.7743': attribute type 13 has an invalid length.
[  255.826798][T23627] tipc: Resetting bearer <eth:syzkaller0>
[  255.892418][   T47] lo speed is unknown, defaulting to 1000
[  255.894904][   T47] syz0: Port: 1 Link DOWN
[  255.896661][   T47] lo speed is unknown, defaulting to 1000
[  256.432278][T23715] netlink: 'syz.0.7783': attribute type 10 has an invalid length.
[  256.437699][T23715] __nla_validate_parse: 11 callbacks suppressed
[  256.437726][T23715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7783'.
[  256.479023][T23722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7787'.
[  256.482828][T23722] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7787'.
[  256.992377][T23746] netlink: 'syz.1.7798': attribute type 6 has an invalid length.
[  257.030195][T23750] hsr0 speed is unknown, defaulting to 1000
[  257.033238][T23750] lo speed is unknown, defaulting to 1000
[  257.175678][T23751] hsr0 speed is unknown, defaulting to 1000
[  257.178863][T23751] lo speed is unknown, defaulting to 1000
[  259.782217][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7811'.
[  259.844664][T23790] hsr0 speed is unknown, defaulting to 1000
[  259.848097][T23790] lo speed is unknown, defaulting to 1000
[  259.963839][T23802] netlink: 'syz.2.7821': attribute type 1 has an invalid length.
[  260.014348][T23810] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  260.203066][T23830] hsr0 speed is unknown, defaulting to 1000
[  260.208354][T23830] lo speed is unknown, defaulting to 1000
[  260.218487][T23833] hsr0 speed is unknown, defaulting to 1000
[  260.278384][T23833] lo speed is unknown, defaulting to 1000
[  260.435104][T23863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7847'.
[  260.493325][T23869] netlink: 'syz.2.7850': attribute type 4 has an invalid length.
[  260.498600][T23869] netlink: 'syz.2.7850': attribute type 4 has an invalid length.
[  260.698333][T23894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.769279][T23900] netlink: 'syz.1.7864': attribute type 12 has an invalid length.
[  261.203395][T23906] 8021q: adding VLAN 0 to HW filter on device bond9
[  261.228051][T23909] netlink: 'syz.0.7867': attribute type 99 has an invalid length.
[  261.464519][T23948] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  261.481973][T23951] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  261.485646][T23951] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  261.661373][T23974] netlink: 'syz.2.7895': attribute type 2 has an invalid length.
[  261.719236][T23984] gre2: entered allmulticast mode
[  261.938760][T24002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7905'.
[  262.213221][T24048] netlink: 'syz.1.7927': attribute type 39 has an invalid length.
[  262.348574][T24060] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  262.370622][T24062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7933'.
[  262.442028][T24071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7937'.
[  263.383823][T24119] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.410839][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7960'.
[  263.586900][T24139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7967'.
[  263.632011][T24100] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  263.634855][T24100] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  263.639581][T24100] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  263.642384][T24100] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  263.717101][T24147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7971'.
[  263.778959][T24157] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7976'.
[  264.876539][T24197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7993'.
[  264.947611][T24206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7997'.
[  265.108430][T24223] dvmrp8: entered allmulticast mode
[  265.111002][T24223] dvmrp8: left allmulticast mode
[  265.163988][T24225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8005'.
[  265.167990][T24225] netlink: 'syz.0.8005': attribute type 32 has an invalid length.
[  265.171234][T24225] bond0: option coupled_control: mode dependency failed, not supported in mode balance-alb(6)
[  265.546290][T24259] netlink: 'syz.0.8021': attribute type 21 has an invalid length.
[  265.792026][T24294] netlink: 'syz.0.8038': attribute type 10 has an invalid length.
[  265.802754][T24295] netlink: 'syz.2.8037': attribute type 8 has an invalid length.
[  265.941032][T24308] hsr0 speed is unknown, defaulting to 1000
[  265.955039][T24308] lo speed is unknown, defaulting to 1000
[  266.322359][T24328] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  266.537063][T24354] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  267.791961][T24392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.803420][T24392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.354261][T24410] __nla_validate_parse: 6 callbacks suppressed
[  268.354280][T24410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8085'.
[  268.361223][T24410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8085'.
[  268.390578][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8086'.
[  268.454549][T24414] hsr0 speed is unknown, defaulting to 1000
[  268.457855][T24414] lo speed is unknown, defaulting to 1000
[  269.129752][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8098'.
[  269.146370][T24455] vlan3: entered allmulticast mode
[  269.148648][T24455] bond10: entered allmulticast mode
[  270.106358][T24492] syzkaller1: entered promiscuous mode
[  270.108501][T24492] syzkaller1: entered allmulticast mode
[  270.283488][T24494] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8111'.
[  270.512012][T24522] netlink: 264 bytes leftover after parsing attributes in process `syz.1.8119'.
[  270.583166][T24534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8124'.
[  270.622682][T24547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8127'.
[  270.707518][T24562] netlink: 'syz.1.8131': attribute type 5 has an invalid length.
[  270.743534][T24566] netlink: 'syz.1.8132': attribute type 8 has an invalid length.
[  270.773026][T24571] hsr0 speed is unknown, defaulting to 1000
[  270.777731][T24571] lo speed is unknown, defaulting to 1000
[  271.513263][T24590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8139'.
[  271.556110][T24596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8141'.
[  271.560062][T24596] netlink: 'syz.0.8141': attribute type 7 has an invalid length.
[  271.563294][T24596] netlink: 'syz.0.8141': attribute type 8 has an invalid length.
[  272.403253][ T5846] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  272.460280][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  272.460304][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  272.460312][ T5846] Call Trace:
[  272.460318][ T5846]  <TASK>
[  272.460324][ T5846]  dump_stack_lvl+0x189/0x250
[  272.460345][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.460359][ T5846]  ? __pfx__printk+0x10/0x10
[  272.460377][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460391][ T5846]  dump_header+0xd3/0x480
[  272.460408][ T5846]  oom_kill_process+0x387/0x920
[  272.460422][ T5846]  out_of_memory+0xf09/0x12a0
[  272.460435][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460445][ T5846]  ? __pfx_out_of_memory+0x10/0x10
[  272.460455][ T5846]  ? percpu_ref_put+0x19/0x180
[  272.460472][ T5846]  ? lock_release+0x4b/0x3e0
[  272.460490][ T5846]  mem_cgroup_out_of_memory+0x145/0x240
[  272.460511][ T5846]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  272.460526][ T5846]  ? _raw_spin_unlock+0x28/0x50
[  272.460541][ T5846]  ? memcg1_oom_prepare+0x37f/0x450
[  272.460556][ T5846]  try_charge_memcg+0xdff/0x1290
[  272.460571][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460586][ T5846]  ? __pfx_try_charge_memcg+0x10/0x10
[  272.460600][ T5846]  ? rcu_needs_cpu+0xa1/0xb0
[  272.460610][ T5846]  ? xa_load+0x60/0x210
[  272.460622][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460633][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460643][ T5846]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  272.460660][ T5846]  charge_memcg+0x9f/0x180
[  272.460675][ T5846]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  272.460689][ T5846]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  272.460706][ T5846]  __read_swap_cache_async+0x28c/0x510
[  272.460723][ T5846]  swap_cluster_readahead+0x305/0x5f0
[  272.460737][ T5846]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  272.460751][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460761][ T5846]  ? filemap_get_entry+0xad/0x2f0
[  272.460773][ T5846]  ? get_vma_policy+0x27c/0x3c0
[  272.460789][ T5846]  swapin_readahead+0x17d/0xb50
[  272.460800][ T5846]  ? __pfx_filemap_get_entry+0x10/0x10
[  272.460813][ T5846]  ? get_swap_device_info+0x1c/0x2b0
[  272.460824][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.460835][ T5846]  ? __pfx_swapin_readahead+0x10/0x10
[  272.460848][ T5846]  ? __filemap_get_folio+0x9a6/0xaf0
[  272.460895][ T5846]  ? swap_cache_get_folio+0xae/0x3b0
[  272.460908][ T5846]  do_swap_page+0x525/0x5ac0
[  272.460922][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  272.460940][ T5846]  ? debug_object_activate+0x2e2/0x420
[  272.460957][ T5846]  ? ___pte_offset_map+0x29/0x250
[  272.460972][ T5846]  ? lock_acquire+0x5f/0x360
[  272.460987][ T5846]  ? do_swap_page+0x184/0x5ac0
[  272.460999][ T5846]  ? __pfx_do_swap_page+0x10/0x10
[  272.461012][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.461022][ T5846]  ? __pfx_default_wake_function+0x10/0x10
[  272.461039][ T5846]  ? ___pte_offset_map+0x45/0x250
[  272.461052][ T5846]  ? ___pte_offset_map+0x1cf/0x250
[  272.461066][ T5846]  ? pte_offset_map_rw_nolock+0xea/0x160
[  272.461081][ T5846]  __handle_mm_fault+0xe55/0x5440
[  272.461101][ T5846]  ? __pfx___handle_mm_fault+0x10/0x10
[  272.461115][ T5846]  ? lock_release+0x4b/0x3e0
[  272.461134][ T5846]  ? lock_vma_under_rcu+0xdf/0x3d0
[  272.461149][ T5846]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  272.461167][ T5846]  handle_mm_fault+0x40a/0x8e0
[  272.461184][ T5846]  do_user_addr_fault+0xa81/0x1390
[  272.461205][ T5846]  ? rcu_is_watching+0x15/0xb0
[  272.461216][ T5846]  ? trace_page_fault_user+0x84/0x1e0
[  272.461234][ T5846]  exc_page_fault+0x76/0xf0
[  272.461250][ T5846]  asm_exc_page_fault+0x26/0x30
[  272.461283][ T5846] RIP: 0033:0x7f401e7c14a8
[  272.461298][ T5846] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  272.461309][ T5846] RSP: 002b:00007fffe00e3700 EFLAGS: 00010293
[  272.461322][ T5846] RAX: 0000000000000000 RBX: 00000000000015b6 RCX: 00007f401e7c14a5
[  272.461331][ T5846] RDX: 00007fffe00e3740 RSI: 0000000000000000 RDI: 0000000000000000
[  272.461338][ T5846] RBP: 00007fffe00e37ac R08: 0000000000000000 R09: 0000000000000000
[  272.461345][ T5846] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  272.461353][ T5846] R13: 00000000000927c0 R14: 00000000000424e8 R15: 00007fffe00e3800
[  272.461366][ T5846]  </TASK>
[  272.461560][ T5846] memory: usage 305380kB, limit 307200kB, failcnt 388
[  272.664634][ T5846] memory+swap: usage 281524kB, limit 9007199254740988kB, failcnt 0
[  272.671252][ T5846] kmem: usage 280540kB, limit 9007199254740988kB, failcnt 0
[  272.674319][ T5846] Memory cgroup stats for /syz0:
[  272.674417][ T5846] cache 430080
[  272.685043][ T5846] rss 106496
[  272.686414][ T5846] rss_huge 0
[  272.687790][ T5846] shmem 0
[  272.719608][ T5846] mapped_file 8192
[  272.721295][ T5846] dirty 8192
[  272.722740][ T5846] writeback 0
[  272.724200][ T5846] workingset_refault_anon 8
[  272.737372][ T5846] workingset_refault_file 117
[  272.739411][ T5846] swap 73728
[  272.748406][ T5846] swapcached 40960
[  272.751986][ T5846] pgpgin 215712
[  272.753509][ T5846] pgpgout 215578
[  272.758549][ T5846] pgfault 530200
[  272.760071][ T5846] pgmajfault 13
[  272.761604][ T5846] inactive_anon 0
[  272.768683][ T5846] active_anon 118784
[  272.770386][ T5846] inactive_file 0
[  272.771577][ T5846] active_file 380928
[  272.772831][ T5846] unevictable 0
[  272.785763][ T5846] hierarchical_memory_limit 314572800
[  272.787691][ T5846] hierarchical_memsw_limit 9223372036854771712
[  272.790144][ T5846] total_cache 430080
[  272.791739][ T5846] total_rss 106496
[  272.793330][ T5846] total_rss_huge 0
[  272.817589][ T5846] total_shmem 0
[  272.819128][ T5846] total_mapped_file 8192
[  272.820884][ T5846] total_dirty 8192
[  272.822467][ T5846] total_writeback 0
[  272.824087][ T5846] total_workingset_refault_anon 8
[  272.829588][ T5846] total_workingset_refault_file 117
[  272.831627][ T5846] total_swap 73728
[  272.832953][ T5846] total_swapcached 40960
[  272.834393][ T5846] total_pgpgin 215712
[  272.844770][ T5846] total_pgpgout 215578
[  272.846141][ T5846] total_pgfault 530200
[  272.854994][ T5846] total_pgmajfault 13
[  272.856626][ T5846] total_inactive_anon 0
[  272.858483][ T5846] total_active_anon 118784
[  272.860340][ T5846] total_inactive_file 0
[  272.862095][ T5846] total_active_file 380928
[  272.863701][ T5846] total_unevictable 0
[  272.868614][ T5846] anon_cost 0
[  272.874935][ T5846] file_cost 0
[  272.876239][ T5846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8147,pid=24621,uid=0
[  272.904842][ T5846] Memory cgroup out of memory: Killed process 24622 (syz.0.8147) total-vm:103804kB, anon-rss:948kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  273.030844][T24654] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  273.033281][T24654] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  273.210108][T24665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.216447][T24665] syzkaller0: entered promiscuous mode
[  273.218661][T24665] syzkaller0: entered allmulticast mode
[  273.230549][T24665] tipc: Resetting bearer <eth:syzkaller0>
[  273.233047][T24664] tipc: Resetting bearer <eth:syzkaller0>
[  273.238660][T24664] tipc: Disabling bearer <eth:syzkaller0>
[  273.265132][T24676] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  273.269257][T24676] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  273.272835][T24676] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  273.292167][T24678] macvlan4: entered promiscuous mode
[  273.293878][T24678] macvlan4: entered allmulticast mode
[  273.296084][T24678] bond5: (slave macvlan4): Opening slave failed
[  273.319253][T24681] hsr0 speed is unknown, defaulting to 1000
[  273.321503][T24681] lo speed is unknown, defaulting to 1000
[  273.381679][T24690] __nla_validate_parse: 4 callbacks suppressed
[  273.381690][T24690] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8175'.
[  273.396066][T24692] netlink: 'syz.0.8176': attribute type 1 has an invalid length.
[  273.398614][T24692] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8176'.
[  273.407871][T24695] siw: device registration error -23
[  273.423058][T24695] netlink: 'syz.1.8177': attribute type 1 has an invalid length.
[  273.445531][T24695] 8021q: adding VLAN 0 to HW filter on device bond6
[  273.449873][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8180'.
[  273.459049][T24695] 8021q: adding VLAN 0 to HW filter on device bond6
[  273.465393][T24695] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  273.469210][T24695] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  273.482158][T24704] netlink: 212332 bytes leftover after parsing attributes in process `syz.0.8181'.
[  273.487527][T24704] syzkaller1: entered promiscuous mode
[  273.489305][T24704] syzkaller1: entered allmulticast mode
[  273.522297][T24706] veth11: entered promiscuous mode
[  273.525246][T24706] bond6: (slave veth11): Enslaving as an active interface with a down link
[  273.629526][   T33] audit: type=1107 audit(1756382095.208:13): pid=24727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='E(G5%la}pBִ6>aa'
[  273.654089][T24731] syzkaller0: left promiscuous mode
[  273.656830][T24731] syzkaller0: left allmulticast mode
[  273.721994][T24740] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8192'.
[  273.730221][T24740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8192'.
[  273.736884][T24742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.805967][T24742] tipc: Resetting bearer <eth:syzkaller0>
[  273.812726][T24741] tipc: Resetting bearer <eth:syzkaller0>
[  273.858039][T24741] tipc: Disabling bearer <eth:syzkaller0>
[  273.892568][T24752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8196'.
[  273.908439][T24753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8196'.
[  273.933235][T24756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8197'.
[  273.933592][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8197'.
[  274.252724][T24792] erspan0: left promiscuous mode
[  274.271833][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.276273][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.279614][T24792] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.282690][T24796] syzkaller0: entered promiscuous mode
[  274.285818][T24796] syzkaller0: entered allmulticast mode
[  274.288037][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.291500][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.551065][T24843] netlink: 'syz.0.8222': attribute type 1 has an invalid length.
[  275.063210][T24895] tap0: tun_chr_ioctl cmd 1074025675
[  275.066324][T24895] tap0: persist enabled
[  275.119692][T24894] netlink: 'syz.2.8240': attribute type 6 has an invalid length.
[  276.225506][T24969] syzkaller1: entered promiscuous mode
[  276.227816][T24969] syzkaller1: entered allmulticast mode
[  276.313438][T24975] netlink: 'syz.0.8268': attribute type 1 has an invalid length.
[  276.317345][T24975] netlink: 'syz.0.8268': attribute type 4 has an invalid length.
[  276.462562][T25004] bond11: entered promiscuous mode
[  276.464915][T25004] 8021q: adding VLAN 0 to HW filter on device bond11
[  276.472705][T25004] bond11 (unregistering): Released all slaves
[  276.498480][T25010] syzkaller0: entered promiscuous mode
[  276.500464][T25010] syzkaller0: entered allmulticast mode
[  276.543969][T25010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.548331][T25009] tipc: Resetting bearer <eth:syzkaller0>
[  276.554067][T25009] tipc: Disabling bearer <eth:syzkaller0>
[  276.652159][T25030] netlink: 'syz.1.8286': attribute type 29 has an invalid length.
[  276.655805][T25030] netlink: 'syz.1.8286': attribute type 29 has an invalid length.
[  276.667469][T25030] netlink: 'syz.1.8286': attribute type 29 has an invalid length.
[  276.729758][T25042] syzkaller1: entered promiscuous mode
[  276.731618][T25042] syzkaller1: entered allmulticast mode
[  277.625313][T25055] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  277.633100][T25063] netlink: 'syz.0.8296': attribute type 3 has an invalid length.
[  277.639691][T25064] netlink: 'syz.0.8296': attribute type 3 has an invalid length.
[  277.960039][T25094] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  277.971053][T25094] hsr0: left allmulticast mode
[  277.972673][T25094] hsr_slave_0: left allmulticast mode
[  277.974456][T25094] hsr_slave_1: left allmulticast mode
[  277.976338][T25094] hsr0: left promiscuous mode
[  277.978292][T25094] macvlan3: left promiscuous mode
[  277.979942][T25094] macvlan3: left allmulticast mode
[  277.988341][T25094] gre2: left allmulticast mode
[  278.000261][T25094] hsr_slave_0: left promiscuous mode
[  278.003188][T25094] hsr_slave_1: left promiscuous mode
[  278.589193][T25097] __nla_validate_parse: 37 callbacks suppressed
[  278.589210][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8308'.
[  278.599141][T25099] netlink: 'syz.0.8309': attribute type 1 has an invalid length.
[  278.599912][T25097] netlink: 'syz.1.8308': attribute type 4 has an invalid length.
[  278.608502][T25097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8308'.
[  278.618909][T25099] 8021q: adding VLAN 0 to HW filter on device bond10
[  278.624703][T25099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8309'.
[  278.682448][T25107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8312'.
[  278.761192][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8314'.
[  278.764702][T25112] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8314'.
[  278.770110][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8314'.
[  278.783751][T25123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8317'.
[  278.797257][T25123] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  278.802404][T25123] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  278.837977][T25123] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  278.843591][T25123] macvlan3: entered promiscuous mode
[  278.846158][T25123] macvlan3: entered allmulticast mode
[  278.848471][T25123] bond11: (slave macvlan3): Error -98 calling set_mac_address
[  278.994886][T25145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8324'.
[  278.998356][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'.
[  279.081703][T25155] xt_socket: unknown flags 0x50
[  279.163935][T25166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.320586][T25181] netlink: 'syz.1.8337': attribute type 1 has an invalid length.
[  279.327984][T25181] 8021q: adding VLAN 0 to HW filter on device bond7
[  279.330730][T25181] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  279.333852][T25181] bond7: (slave wlan0): Opening slave failed
[  279.442359][T25197] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  279.447619][T25197] : entered promiscuous mode
[  280.097373][T25229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.672973][T25282] netlink: 'syz.2.8373': attribute type 11 has an invalid length.
[  281.501567][T25309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.988436][T25379] validate_nla: 1 callbacks suppressed
[  281.988447][T25379] netlink: 'syz.1.8411': attribute type 7 has an invalid length.
[  282.011377][T25384] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.017217][T25384] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.023768][T25384] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.030563][T25384] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.036450][T25384] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.041814][T25384] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.047843][T25384] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.053439][T25384] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.059220][T25384] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.066711][T25384] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.071969][T25384] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.078003][T25384] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.084052][T25384] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.091048][T25384] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.100337][T25384] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.110349][T25384] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.121304][T25384] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.127980][T25384] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.133320][T25384] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.139496][T25384] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.146104][T25384] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.155906][T25384] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.162725][T25384] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.169953][T25384] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.174107][T25394] netlink: 'syz.2.8418': attribute type 1 has an invalid length.
[  282.179909][T25384] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.183463][T25394] netlink: 'syz.2.8418': attribute type 2 has an invalid length.
[  282.190167][T25384] bridge40: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.196346][T25384] bridge41: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.202934][T25384] bridge42: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.210723][T25384] bridge43: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.220827][T25384] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.228474][T25384] bridge45: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.239051][T25384] bridge46: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.245312][T25384] bridge47: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.428410][T25427] hsr0 speed is unknown, defaulting to 1000
[  282.430696][T25427] lo speed is unknown, defaulting to 1000
[  282.526461][T25441] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  282.659672][T25455] delete_channel: no stack
[  282.800523][   T61] block nbd0: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 180 seconds
[  282.804345][   T61] block nbd0: Possible stuck request ffff888022008200: control (read@1024,1024B). Runtime 180 seconds
[  282.808080][   T61] block nbd0: Possible stuck request ffff888022008400: control (read@2048,1024B). Runtime 180 seconds
[  282.811793][   T61] block nbd0: Possible stuck request ffff888022008600: control (read@3072,1024B). Runtime 180 seconds
[  283.030240][T25501] netlink: 'syz.0.8453': attribute type 13 has an invalid length.
[  283.329873][T25529] netlink: 'syz.0.8462': attribute type 4 has an invalid length.
[  283.340989][T25526] netlink: 'syz.0.8462': attribute type 4 has an invalid length.
[  283.348573][   T47] lo speed is unknown, defaulting to 1000
[  283.350945][   T47] syz0: Port: 1 Link ACTIVE
[  283.352855][   T47] lo speed is unknown, defaulting to 1000
[  283.472367][T25548] netlink: 'syz.0.8469': attribute type 12 has an invalid length.
[  283.482022][T25557] pim6reg1: entered allmulticast mode
[  283.571634][T25572] netlink: 'syz.0.8476': attribute type 12 has an invalid length.
[  283.585267][T25572] openvswitch: netlink: IPv4 tun info is not correct
[  283.613862][T25577] __nla_validate_parse: 65 callbacks suppressed
[  283.613872][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8478'.
[  283.643276][T25577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8478'.
[  283.784185][T25595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.789445][T25595] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8485'.
[  283.832176][T25597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8486'.
[  283.843075][T25593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8484'.
[  284.504699][T25613] netlink: 'syz.2.8491': attribute type 16 has an invalid length.
[  284.508349][T25613] netlink: 'syz.2.8491': attribute type 3 has an invalid length.
[  284.511633][T25613] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.8491'.
[  284.560997][T25617] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8492'.
[  284.565007][T25617] NCSI netlink: No device for ifindex 813332851
[  284.587159][T25622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8493'.
[  284.593194][T25622] tipc: Failed to remove unknown binding: 66,1,1/0:3891071294/3891071296
[  284.736695][T25631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8496'.
[  284.849264][T25633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8497'.
[  285.421079][T25707] IPVS: Scheduler module ip_vs_ not found
[  285.500598][T25726] netem: change failed
[  285.558653][T25730] hsr0 speed is unknown, defaulting to 1000
[  285.561508][T25730] lo speed is unknown, defaulting to 1000
[  286.058156][T25774] syzkaller0: entered promiscuous mode
[  286.060087][T25774] syzkaller0: entered allmulticast mode
[  286.062838][T25775] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  286.068822][T25774] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  286.093230][T25779] dvmrp1: entered allmulticast mode
[  286.103133][T25779] hsr0 speed is unknown, defaulting to 1000
[  286.107340][T25779] lo speed is unknown, defaulting to 1000
[  286.259372][T25790] hsr0 speed is unknown, defaulting to 1000
[  286.262603][T25790] lo speed is unknown, defaulting to 1000
[  286.387598][T25805] dvmrp0: entered allmulticast mode
[  289.700880][ T5291] udevd[5291]: worker [5844] /devices/virtual/block/nbd0 timeout; kill it
[  289.704919][ T5291] udevd[5291]: seq 13128 '/devices/virtual/block/nbd0' killed
[  289.834333][T25893] 8021q: VLANs not supported on syzkaller1
[  289.976354][T25916] __nla_validate_parse: 19 callbacks suppressed
[  289.976368][T25916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8584'.
[  290.002374][T25924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.021667][T25929] validate_nla: 10 callbacks suppressed
[  290.021677][T25929] netlink: 'syz.0.8589': attribute type 3 has an invalid length.
[  290.028660][T25929] netlink: 'syz.0.8589': attribute type 3 has an invalid length.
[  290.051391][T25929] bridge8: entered promiscuous mode
[  290.227872][T25947] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8594'.
[  290.231946][T25947] netlink: zone id is out of range
[  290.234177][T25947] netlink: zone id is out of range
[  290.237942][T25947] netlink: zone id is out of range
[  290.240198][T25947] netlink: zone id is out of range
[  290.242817][T25947] netlink: zone id is out of range
[  290.245848][T25947] netlink: zone id is out of range
[  290.247937][T25947] netlink: zone id is out of range
[  290.250027][T25947] netlink: zone id is out of range
[  290.252118][T25947] netlink: zone id is out of range
[  290.253993][T25947] netlink: zone id is out of range
[  290.275499][T25952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8595'.
[  290.520773][T25961] netlink: 'syz.1.8598': attribute type 10 has an invalid length.
[  290.628770][T25963] tap0: tun_chr_ioctl cmd 1074025677
[  290.630782][T25963] tap0: linktype set to 0
[  290.688679][T25966] syzkaller0: entered promiscuous mode
[  290.691068][T25966] syzkaller0: entered allmulticast mode
[  290.765856][T25969] sctp: [Deprecated]: syz.2.8601 (pid 25969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  290.765856][T25969] Use struct sctp_sack_info instead
[  290.842971][T25977] netlink: 'syz.2.8604': attribute type 1 has an invalid length.
[  290.845814][T25977] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8604'.
[  290.868625][T25979] bridge9: entered promiscuous mode
[  291.172976][T26020] netlink: 'syz.0.8616': attribute type 1 has an invalid length.
[  291.175918][T26020] netlink: 'syz.0.8616': attribute type 2 has an invalid length.
[  291.179400][T26020] netlink: 'syz.0.8616': attribute type 8 has an invalid length.
[  291.182615][T26020] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.8616'.
[  291.217019][T26023] netlink: 'syz.0.8617': attribute type 21 has an invalid length.
[  291.279171][T26028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8618'.
[  291.280529][T26031] netlink: 'syz.0.8619': attribute type 3 has an invalid length.
[  291.287969][T26031] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8619'.
[  291.293194][T26032] netlink: 'syz.0.8619': attribute type 3 has an invalid length.
[  291.301859][T26032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8619'.
[  291.348030][T26048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8623'.
[  291.359057][T26049] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.369231][T26049] bond0: (slave rose0): Enslaving as an active interface with an up link
[  291.372185][T26048] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  291.408785][T26032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.416325][T26065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.456864][T26070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8628'.
[  291.468001][T26073] team0: Port device dummy0 added
[  291.479695][T26073] team0: Port device dummy0 removed
[  291.486402][T26073] : (slave dummy0): Enslaving as an active interface with an up link
[  291.593042][T26088] IPv6: NLM_F_REPLACE set, but no existing node found!
[  291.794192][T26100] hsr0 speed is unknown, defaulting to 1000
[  291.797464][T26100] lo speed is unknown, defaulting to 1000
[  292.139805][T26108] block nbd3: server does not support multiple connections per device.
[  292.162035][T26108] block nbd3: shutting down sockets
[  292.358146][T26153] unknown channel width for channel at 909000KHz?
[  292.360323][T26153] unknown channel width for channel at 909000KHz?
[  292.362653][T26153] unknown channel width for channel at 909000KHz?
[  292.521954][T26172] 8021q: VLANs not supported on ip_vti0
[  292.524142][T26173] 8021q: VLANs not supported on ip_vti0
[  293.355561][T26255] 8021q: adding VLAN 0 to HW filter on device bond12
[  293.464550][T26268] : (slave dummy0): Releasing backup interface
[  293.987958][T26289] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.990910][T26290] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.996158][T26290] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.000229][T26290] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  294.003614][T26290] bond11: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  294.015876][T26289] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  294.020605][T26289] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  294.191369][T26315] pim6reg1: entered promiscuous mode
[  294.193486][T26315] pim6reg1: entered allmulticast mode
[  294.835772][T26439] pim6reg1: entered promiscuous mode
[  294.837956][T26439] pim6reg1: entered allmulticast mode
[  294.943216][T26447] 8021q: adding VLAN 0 to HW filter on device bond8
[  294.947540][T26447] team0: Port device bond8 added
[  295.198649][T26460] validate_nla: 5 callbacks suppressed
[  295.198660][T26460] netlink: 'syz.1.8747': attribute type 29 has an invalid length.
[  295.388454][T26470] __nla_validate_parse: 26 callbacks suppressed
[  295.388465][T26470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8751'.
[  295.393529][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8751'.
[  295.660544][T26473] netlink: 'syz.2.8752': attribute type 1 has an invalid length.
[  295.663579][T26473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8752'.
[  295.799877][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8759'.
[  295.837840][T26492] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0
[  295.865485][T26496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.869075][T26496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.207276][T26501] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  296.212203][T26501] batman_adv: batadv0: Removing interface: ip6gretap1
[  296.219036][T26501] batman_adv: batadv0: Removing interface: vlan4
[  296.222380][T26501] bond4: (slave gretap1): Releasing active interface
[  296.227998][T26501] bond6: (slave veth11): Releasing active interface
[  296.233813][T26501] team0: Port device bond8 removed
[  296.239904][T26501] netlink: 'syz.1.8762': attribute type 10 has an invalid length.
[  296.243060][T26501] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  296.717035][T26508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8763'.
[  296.739426][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8765'.
[  296.811140][T26516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.813734][T26516] syzkaller0: entered promiscuous mode
[  296.815796][T26516] syzkaller0: entered allmulticast mode
[  296.819819][T26516] tipc: Resetting bearer <eth:syzkaller0>
[  296.824186][T26515] tipc: Resetting bearer <eth:syzkaller0>
[  296.829104][T26515] tipc: Disabling bearer <eth:syzkaller0>
[  296.937224][T26544] netlink: 'syz.1.8775': attribute type 58 has an invalid length.
[  296.940142][T26544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8775'.
[  296.968384][T26551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8777'.
[  297.029127][T26557] net_ratelimit: 32 callbacks suppressed
[  297.029142][T26557] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  297.034438][T26557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.981828][T26579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8788'.
[  297.986225][T26579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8788'.
[  298.083341][T26587] netlink: 'syz.1.8790': attribute type 10 has an invalid length.
[  298.752101][T26598] syzkaller0: entered promiscuous mode
[  298.754482][T26598] syzkaller0: entered allmulticast mode
[  298.889969][T26621] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  298.943499][T26627] pim6reg1: entered promiscuous mode
[  298.946142][T26627] pim6reg1: entered allmulticast mode
[  299.128408][T26650] syzkaller1: entered promiscuous mode
[  299.130377][T26650] syzkaller1: entered allmulticast mode
[  299.379592][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  299.382769][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.389318][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.390880][T26662] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  299.392697][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.505600][T26671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.004449][T26736] syzkaller1: left promiscuous mode
[  300.008057][T26736] syzkaller1: left allmulticast mode
[  300.048606][T26738] netlink: 'syz.1.8844': attribute type 10 has an invalid length.
[  300.148344][T26738] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.157180][T26749] netlink: 'syz.0.8847': attribute type 29 has an invalid length.
[  300.669583][T26781] netlink: 'syz.2.8856': attribute type 1 has an invalid length.
[  300.673224][T26781] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  300.906040][T26833] hsr0 speed is unknown, defaulting to 1000
[  300.911388][T26833] lo speed is unknown, defaulting to 1000
[  301.097340][T26841] @: renamed from veth0_vlan
[  301.220532][T26853] tipc: Trying to set illegal importance in message
[  301.227562][T26849] __nla_validate_parse: 23 callbacks suppressed
[  301.227574][T26849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8865'.
[  301.237208][T26849] netlink: 'syz.1.8865': attribute type 29 has an invalid length.
[  301.279683][T26858] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8868'.
[  301.298249][T26860] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  301.301911][T26860] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  301.328826][T26864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.338044][T26864] D: renamed from syzkaller0 (while UP)
[  301.345078][T26864] tipc: Disabling bearer <eth:syzkaller0>
[  301.367751][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8871'.
[  301.465242][T26871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8873'.
[  301.633904][T26886] syzkaller0: entered promiscuous mode
[  301.636343][T26886] syzkaller0: entered allmulticast mode
[  301.745030][T26908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8883'.
[  301.793881][T26918] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8887'.
[  301.807192][T26923] tap0: tun_chr_ioctl cmd 1074025676
[  301.809438][T26923] tap0: owner set to 0
[  301.826958][T26927] sock: sock_timestamping_bind_phc: sock not bind to device
[  301.835203][T26927] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8890'.
[  301.850377][T26931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8892'.
[  301.870203][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8894'.
[  301.899384][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8891'.
[  301.908407][T26943] netlink: 'syz.1.8896': attribute type 21 has an invalid length.
[  301.911348][T26943] netlink: 'syz.1.8896': attribute type 22 has an invalid length.
[  301.914021][T26943] netlink: 'syz.1.8896': attribute type 23 has an invalid length.
[  301.917979][T26943] netlink: 'syz.1.8896': attribute type 25 has an invalid length.
[  301.920654][T26943] netlink: 'syz.1.8896': attribute type 26 has an invalid length.
[  301.926297][T26943] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  301.936158][T26943] syzkaller0: entered promiscuous mode
[  301.938748][T26943] syzkaller0: entered allmulticast mode
[  312.865022][   T61] block nbd0: Possible stuck request ffff888022008000: control (read@0,1024B). Runtime 210 seconds
[  312.868954][   T61] block nbd0: Possible stuck request ffff888022008200: control (read@1024,1024B). Runtime 210 seconds
[  312.872573][   T61] block nbd0: Possible stuck request ffff888022008400: control (read@2048,1024B). Runtime 210 seconds
[  312.876983][   T61] block nbd0: Possible stuck request ffff888022008600: control (read@3072,1024B). Runtime 210 seconds
[  321.479630][T26965] __nla_validate_parse: 2 callbacks suppressed
[  321.479647][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8902'.
[  321.486386][T26965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8902'.
[  321.497820][T26965] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  321.581260][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8908'.
[  321.604560][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8908'.
[  321.646803][T26978] 8021q: adding VLAN 0 to HW filter on device bond13
[  321.683488][T26992] macvlan3: entered promiscuous mode
[  321.687609][T26992] macvlan3: entered allmulticast mode
[  321.689867][T26992] bond13: entered promiscuous mode
[  321.691857][T26992] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  321.694644][T26992] bond13: left promiscuous mode
[  321.947937][T27027] netlink: 'syz.2.8916': attribute type 1 has an invalid length.
[  321.956648][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8916'.
[  321.968195][T27027] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8916'.
[  322.037385][T27037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8918'.
[  322.108976][T27043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8921'.
[  322.209644][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8924'.
[  322.212596][T27052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8924'.
[  322.216167][T27052] netlink: 'syz.2.8924': attribute type 15 has an invalid length.
[  322.638723][T27096] openvswitch: netlink: Missing valid actions attribute.
[  322.641762][T27096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.441327][T27170] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  323.498624][T27181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.501066][T27181] syzkaller0: entered promiscuous mode
[  323.502982][T27181] syzkaller0: entered allmulticast mode
[  323.518538][T27181] tipc: Resetting bearer <eth:syzkaller0>
[  323.521046][T27180] tipc: Resetting bearer <eth:syzkaller0>
[  323.525635][T27180] tipc: Disabling bearer <eth:syzkaller0>
[  323.589081][T27189] vti2: entered promiscuous mode
[  323.629194][T27195] pim6reg: entered allmulticast mode
[  323.632297][T27195] pim6reg: left allmulticast mode
[  323.668702][T27197] tun0: tun_chr_ioctl cmd 2148045848
[  323.671416][T27197] tun0: tun_chr_ioctl cmd 21731
[  323.673895][T27197] tun0: tun_chr_ioctl cmd 1074812118
[  323.930125][T27238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.933883][T27238] syzkaller0: entered promiscuous mode
[  323.937439][T27238] syzkaller0: entered allmulticast mode
[  323.947637][T27238] tipc: Resetting bearer <eth:syzkaller0>
[  323.955722][T27237] tipc: Resetting bearer <eth:syzkaller0>
[  323.959883][T27237] tipc: Disabling bearer <eth:syzkaller0>
[  324.084488][T27266] netlink: 'syz.0.8998': attribute type 39 has an invalid length.
[  324.840221][T27288] bond0: option arp_validate: invalid value (18446744073491447809)
[  324.869266][T27290] netlink: 'syz.1.9006': attribute type 1 has an invalid length.
[  324.888733][T27290] bond9: (slave veth13): Enslaving as an active interface with a down link
[  324.894029][T27290] 8021q: adding VLAN 0 to HW filter on device bond9
[  325.130972][T27323] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.166419][T27329] netlink: 'syz.1.9022': attribute type 1 has an invalid length.
[  325.173702][T27330] bridge0: Device is already in use.
[  325.446541][T27394] C: renamed from team_slave_0
[  325.449106][T27394] netlink: 'syz.1.9042': attribute type 4 has an invalid length.
[  325.451791][T27394] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  325.453629][T27397] netlink: 'syz.2.9043': attribute type 9 has an invalid length.
[  325.460464][T27397] netlink: 'syz.2.9043': attribute type 9 has an invalid length.
[  325.465675][T27397] netlink: 'syz.2.9043': attribute type 1 has an invalid length.
[  325.473643][T27397] 8021q: adding VLAN 0 to HW filter on device bond16
[  325.482168][T27397] 8021q: adding VLAN 0 to HW filter on device bond16
[  325.484559][T27397] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  325.488645][T27397] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  325.510646][T27405] netlink: 'syz.1.9045': attribute type 2 has an invalid length.
[  325.520265][T27397] bond16: (slave bridge11): Enslaving as an active interface with a down link
[  325.898585][T27448] pim6reg: entered allmulticast mode
[  326.681884][T27468] openvswitch: netlink: IPv6 tunnel dst address is zero
[  326.817207][T27484] 8021q: adding VLAN 0 to HW filter on device bond11
[  326.828557][T27484] 8021q: adding VLAN 0 to HW filter on device bond11
[  326.830913][T27484] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  326.834858][T27484] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  326.879616][T27486] veth15: entered promiscuous mode
[  326.883523][T27486] bond11: (slave veth15): Enslaving as an active interface with a down link
[  327.068373][T27500] __nla_validate_parse: 21 callbacks suppressed
[  327.068386][T27500] netlink: 5 bytes leftover after parsing attributes in process `syz.1.9072'.
[  327.316109][T27527] validate_nla: 2 callbacks suppressed
[  327.316119][T27527] netlink: 'syz.1.9081': attribute type 3 has an invalid length.
[  328.160028][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9082'.
[  328.168307][T27532] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9082'.
[  328.190143][T27536] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.372927][T27557] openvswitch: netlink: Flow actions attr not present in new flow.
[  328.378749][T27544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9087'.
[  328.424558][T27562] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  328.944471][T27572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9097'.
[  328.952169][T27572] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  328.957015][T27572] CPU: 0 UID: 0 PID: 27572 Comm: syz.0.9097 Not tainted syzkaller #0 PREEMPT(full) 
[  328.957027][T27572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.957032][T27572] Call Trace:
[  328.957035][T27572]  <TASK>
[  328.957039][T27572]  dump_stack_lvl+0x189/0x250
[  328.957053][T27572]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.957062][T27572]  ? __pfx__printk+0x10/0x10
[  328.957072][T27572]  ? kernfs_root+0x1c/0x230
[  328.957081][T27572]  ? kernfs_path_from_node+0x2f/0x290
[  328.957089][T27572]  ? kernfs_path_from_node+0x250/0x290
[  328.957099][T27572]  ? kernfs_path_from_node+0x2f/0x290
[  328.957112][T27572]  sysfs_warn_dup+0x8e/0xa0
[  328.957130][T27572]  sysfs_do_create_link_sd+0xc0/0x110
[  328.957143][T27572]  device_add_class_symlinks+0x1cf/0x240
[  328.957158][T27572]  device_add+0x475/0xb50
[  328.957171][T27572]  wiphy_register+0x1ba6/0x28d0
[  328.957192][T27572]  ? __pfx_wiphy_register+0x10/0x10
[  328.957210][T27572]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  328.957224][T27572]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  328.957239][T27572]  ieee80211_register_hw+0x3425/0x4080
[  328.957257][T27572]  ? ieee80211_register_hw+0x1471/0x4080
[  328.957273][T27572]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  328.957283][T27572]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  328.957295][T27572]  ? __hrtimer_setup+0x187/0x210
[  328.957302][T27572]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  328.957313][T27572]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  328.957327][T27572]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  328.957335][T27572]  ? trace_kmalloc+0x1f/0xd0
[  328.957344][T27572]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  328.957355][T27572]  ? kstrndup+0xbf/0x160
[  328.957365][T27572]  hwsim_new_radio_nl+0xea4/0x1b10
[  328.957376][T27572]  ? __pfx___nla_validate_parse+0x10/0x10
[  328.957389][T27572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.957399][T27572]  ? __nla_parse+0x40/0x60
[  328.957436][T27572]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  328.957447][T27572]  genl_family_rcv_msg_doit+0x215/0x300
[  328.957458][T27572]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  328.957468][T27572]  ? bpf_lsm_capable+0x9/0x20
[  328.957479][T27572]  ? security_capable+0x7e/0x2e0
[  328.957491][T27572]  genl_rcv_msg+0x60e/0x790
[  328.957500][T27572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.957508][T27572]  ? __kasan_slab_alloc+0x6c/0x80
[  328.957518][T27572]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  328.957527][T27572]  ? __netlink_lookup+0xbd/0x810
[  328.957532][T27572]  ? rcu_is_watching+0x15/0xb0
[  328.957541][T27572]  netlink_rcv_skb+0x208/0x470
[  328.957551][T27572]  ? __pfx_genl_rcv_msg+0x10/0x10
[  328.957559][T27572]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  328.957570][T27572]  ? lock_release+0x4b/0x3e0
[  328.957581][T27572]  ? down_read+0x1ad/0x2e0
[  328.957588][T27572]  genl_rcv+0x28/0x40
[  328.957594][T27572]  netlink_unicast+0x82f/0x9e0
[  328.957605][T27572]  ? __pfx_netlink_unicast+0x10/0x10
[  328.957614][T27572]  ? netlink_sendmsg+0x642/0xb30
[  328.957619][T27572]  ? skb_put+0x11b/0x210
[  328.957627][T27572]  netlink_sendmsg+0x805/0xb30
[  328.957634][T27572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.957641][T27572]  ? futex_unqueue+0x22/0x240
[  328.957648][T27572]  ? aa_sock_msg_perm+0xf1/0x1d0
[  328.957655][T27572]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  328.957663][T27572]  ? __pfx_netlink_sendmsg+0x10/0x10
[  328.957669][T27572]  __sock_sendmsg+0x21c/0x270
[  328.957678][T27572]  ____sys_sendmsg+0x505/0x830
[  328.957686][T27572]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.957695][T27572]  ? import_iovec+0x74/0xa0
[  328.957703][T27572]  ___sys_sendmsg+0x21f/0x2a0
[  328.957710][T27572]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.957718][T27572]  ? futex_wait+0x285/0x360
[  328.957732][T27572]  ? __fget_files+0x2a/0x420
[  328.957738][T27572]  ? __fget_files+0x3a0/0x420
[  328.957745][T27572]  __x64_sys_sendmsg+0x19b/0x260
[  328.957753][T27572]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  328.957762][T27572]  ? rcu_is_watching+0x15/0xb0
[  328.957769][T27572]  do_syscall_64+0xfa/0x3b0
[  328.957777][T27572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.957784][T27572]  ? exc_page_fault+0x9f/0xf0
[  328.957794][T27572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.957800][T27572] RIP: 0033:0x7f401e78ebe9
[  328.957808][T27572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.957814][T27572] RSP: 002b:00007f401f634038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  328.957824][T27572] RAX: ffffffffffffffda RBX: 00007f401e9b5fa0 RCX: 00007f401e78ebe9
[  328.957829][T27572] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  328.957834][T27572] RBP: 00007f401e811e19 R08: 0000000000000000 R09: 0000000000000000
[  328.957838][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.957842][T27572] R13: 00007f401e9b6038 R14: 00007f401e9b5fa0 R15: 00007fffe00e33e8
[  328.957850][T27572]  </TASK>
[  329.163189][T27576] xt_limit: Overflow, try lower: 271964/0
[  329.176457][T27576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.180006][T27576] syzkaller0: entered promiscuous mode
[  329.182382][T27576] syzkaller0: entered allmulticast mode
[  329.191819][T27576] tipc: Resetting bearer <eth:syzkaller0>
[  329.196371][T27574] tipc: Resetting bearer <eth:syzkaller0>
[  329.201351][T27574] tipc: Disabling bearer <eth:syzkaller0>
[  329.300373][T27584] hsr0 speed is unknown, defaulting to 1000
[  329.303233][T27584] lo speed is unknown, defaulting to 1000
Connection to localhost closed by remote host.
[  329.823599][   T13] dvmrp1 (unregistering): left allmulticast mode
[  329.834838][   T13] dvmrp0 (unregistering): left allmulticast mode
[  331.909514][   T13] smc: removing net device bond0 with user defined pnetid SYZ2
[  331.912819][   T13] bond0 (unregistering): Released all slaves
[  331.918666][   T13] bond1 (unregistering): Released all slaves
[  331.923871][   T13] bond2 (unregistering): Released all slaves
[  331.929811][   T13] bond3 (unregistering): Released all slaves
[  331.937448][   T13] bond4 (unregistering): Released all slaves
[  331.942204][   T13] bond5 (unregistering): Released all slaves
[  331.949742][   T13] bond6 (unregistering): Released all slaves
[  331.962232][   T13] bond7 (unregistering): Released all slaves
[  331.966266][   T13] bond8 (unregistering): Released all slaves
[  331.970858][   T13] bond9 (unregistering): (slave veth13): Releasing active interface
[  331.974045][   T13] bond9 (unregistering): Released all slaves
[  331.979491][   T13] bond10 (unregistering): Released all slaves
[  331.983720][   T13] bond11 (unregistering): (slave veth15): Releasing active interface
[  331.989859][   T13] bond11 (unregistering): Released all slaves
[  332.046478][   T13] : left promiscuous mode
[  332.078891][   T13] tipc: Left network mode
[  332.083116][   T13] IPVS: stopping backup sync thread 7131 ...
[  332.422821][   T13] hsr_slave_0: left promiscuous mode
[  332.425051][   T13] hsr_slave_1: left promiscuous mode
[  332.430321][   T13] pim6reg (unregistering): left allmulticast mode
[  332.879306][   T13] IPVS: stop unused estimator thread 0...
[  332.884485][   T13] ------------[ cut here ]------------
[  332.886514][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  332.889477][   T13] Modules linked in:
[  332.890751][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  332.894987][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.898405][   T13] Workqueue: netns cleanup_net
[  332.900033][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  332.902122][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b af 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 6f e1 f7 e8 44 43 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 43 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  332.909289][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  332.911612][   T13] RAX: ffffffff8a2267ec RBX: ffff88811340a440 RCX: ffff88801c688000
[  332.914232][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c688000
[  332.917615][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  332.920821][   T13] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f631480
[  332.924033][   T13] R13: 1ffff92000020f40 R14: ffff88811340b8c0 R15: dffffc0000000000
[  332.926989][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  332.929970][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  332.932219][   T13] CR2: 00007f84142e7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  332.935027][   T13] Call Trace:
[  332.936183][   T13]  <TASK>
[  332.937182][   T13]  xfrm_net_exit+0x2d/0x70
[  332.938764][   T13]  ops_undo_list+0x49a/0x990
[  332.940321][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  332.942045][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  332.944155][   T13]  cleanup_net+0x4c5/0x800
[  332.945855][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  332.947581][   T13]  ? rcu_is_watching+0x15/0xb0
[  332.949235][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  332.951211][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  332.953183][   T13]  process_scheduled_works+0xae1/0x17b0
[  332.955134][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  332.957335][   T13]  worker_thread+0x8a0/0xda0
[  332.958917][   T13]  kthread+0x711/0x8a0
[  332.960335][   T13]  ? __pfx_worker_thread+0x10/0x10
[  332.962117][   T13]  ? __pfx_kthread+0x10/0x10
[  332.963810][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.965822][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.967736][   T13]  ? __pfx_kthread+0x10/0x10
[  332.969455][   T13]  ret_from_fork+0x3fc/0x770
[  332.971192][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  332.973057][   T13]  ? __switch_to_asm+0x39/0x70
[  332.975011][   T13]  ? __switch_to_asm+0x33/0x70
[  332.976779][   T13]  ? __pfx_kthread+0x10/0x10
[  332.978481][   T13]  ret_from_fork_asm+0x1a/0x30
[  332.980218][   T13]  </TASK>
[  332.981394][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  332.984040][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  332.987429][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  332.991031][   T13] Workqueue: netns cleanup_net
[  332.992796][   T13] Call Trace:
[  332.994030][   T13]  <TASK>
[  332.995210][   T13]  dump_stack_lvl+0x99/0x250
[  332.996975][   T13]  ? __asan_memcpy+0x40/0x70
[  332.998742][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.000699][   T13]  ? __pfx__printk+0x10/0x10
[  333.002431][   T13]  vpanic+0x281/0x750
[  333.003934][   T13]  ? __pfx__printk+0x10/0x10
[  333.005457][   T13]  ? __pfx_vpanic+0x10/0x10
[  333.006846][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  333.008689][   T13]  panic+0xb9/0xc0
[  333.010116][   T13]  ? __pfx_panic+0x10/0x10
[  333.011662][   T13]  __warn+0x31b/0x4b0
[  333.012973][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  333.014628][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  333.016244][   T13]  report_bug+0x2be/0x4f0
[  333.017659][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  333.019265][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  333.020910][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  333.022533][   T13]  handle_bug+0x84/0x160
[  333.023906][   T13]  exc_invalid_op+0x1a/0x50
[  333.025423][   T13]  asm_exc_invalid_op+0x1a/0x20
[  333.027129][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  333.028902][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b af 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e9 6f e1 f7 e8 44 43 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 36 43 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  333.034955][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  333.036909][   T13] RAX: ffffffff8a2267ec RBX: ffff88811340a440 RCX: ffff88801c688000
[  333.039429][   T13] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c688000
[  333.041930][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa38437 R09: 1ffffffff1f47086
[  333.044548][   T13] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: ffffffff8f631480
[  333.047317][   T13] R13: 1ffff92000020f40 R14: ffff88811340b8c0 R15: dffffc0000000000
[  333.049858][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  333.051428][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  333.052998][   T13]  xfrm_net_exit+0x2d/0x70
[  333.054456][   T13]  ops_undo_list+0x49a/0x990
[  333.055958][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  333.057662][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  333.059309][   T13]  cleanup_net+0x4c5/0x800
[  333.060911][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  333.062565][   T13]  ? rcu_is_watching+0x15/0xb0
[  333.064186][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  333.066068][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  333.067907][   T13]  process_scheduled_works+0xae1/0x17b0
[  333.069700][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  333.071630][   T13]  worker_thread+0x8a0/0xda0
[  333.073098][   T13]  kthread+0x711/0x8a0
[  333.074463][   T13]  ? __pfx_worker_thread+0x10/0x10
[  333.076330][   T13]  ? __pfx_kthread+0x10/0x10
[  333.078004][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  333.079885][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.081746][   T13]  ? __pfx_kthread+0x10/0x10
[  333.083392][   T13]  ret_from_fork+0x3fc/0x770
[  333.084950][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  333.086796][   T13]  ? __switch_to_asm+0x39/0x70
[  333.088627][   T13]  ? __switch_to_asm+0x33/0x70
[  333.090277][   T13]  ? __pfx_kthread+0x10/0x10
[  333.091779][   T13]  ret_from_fork_asm+0x1a/0x30
[  333.093336][   T13]  </TASK>
[  333.095028][   T13] Kernel Offset: disabled
[  333.096473][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:55:54  Registers:
info registers vcpu 0

CPU#0
RAX=bf979ea4f1fcf600 RBX=ffffffff819683b8 RCX=bf979ea4f1fcf600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38430 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd8496e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff8881069b0237 R9 =1ffff11020d36046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb90c R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f84142e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000002d6d 000000312f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff0000000000 XMM09=2f74656e2f33336d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
