last executing test programs:

21.01927416s ago: executing program 2 (id=4427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, r1}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'xfrm0\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0xf5, &(0x7f0000000540)=""/245, 0x40f00, 0x77, '\x00', 0x0, @fallback=0x21, r6, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x2, 0x3}, 0x10, 0x0, r1, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x4, 0x6, 0x8}, {0x3, 0x2, 0x0, 0x4}, {0x2, 0x1, 0x5, 0xa}, {0x4, 0x1, 0x10, 0x2}], 0x10, 0x3}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff})

20.091283852s ago: executing program 2 (id=4438):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c0779591813076fe8893e54bae6115825fd42b9c850ae09a0c9138676ef04e8706ec6057fc878302be3a1b9f7bf9805a3eac79cf2fcc0637e8b799b59439dae06bbca57a1254d8f17267776053f23801b92d20f12402acde62c60df22c4cf3bc5d7318e17650b88abedef3dcea88d3", 0x2a, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x80, 0x1, 0x7ff, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x10, 0x8000, 0xb7b6, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', r4, 0x7800, 0x40, 0x5, 0x7ff, {{0x7, 0x4, 0x0, 0x3d, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @local, {[@rr={0x7, 0x7, 0x1e, [@local]}]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2}, [@NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x30, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="3000000080020000200012800900010069706970000000001000028005000900040000000400131f39d5685dede7a45a975c11b835fd5ea0f3a6a952264bbef78c9b302584ea220113e89754a6dd916a0c6bb5df9c8fcbf2fc0a6ca93675276f4cfbacda12b2924f366196d0f131eb67a9e0dd60a88777610a498b14aeb58af84b9a1df50f6a74ab9e43"], 0x40}}, 0x0)

20.090044148s ago: executing program 2 (id=4439):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @mpls={[{0x8, 0x0, 0x1}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xfbc, 0x0, 0x11, 0x0, 0x21, 0x0, @dev, @broadcast}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd38791b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3fe0c9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfce)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000002000000000000828a0100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000006d000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b50300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x7, 0x4, 0x0, 0x28, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@end, @timestamp={0x44, 0x4, 0xb9, 0x0, 0x2}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x8, 0x0, 0x8, {[@mss={0x2, 0x4, 0x7}]}}, {"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"}}}}, 0xfce)
ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "0198c3dc773134ad11e6af299f8ddbfe"})

19.928810836s ago: executing program 2 (id=4442):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x1f, &(0x7f0000000800)=ANY=[@ANYBLOB="8520000002000000950000000000000018140000", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000085100000ffffffffb7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000a5000000181100"/28, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r3, 0x1ff}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000200110300000000000000000000000100000d000000000e00000001000000020000000000000c02000000000061", @ANYRES16], 0x0, 0x4c, 0x0, 0x0, 0x8}, 0x28)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

19.581151451s ago: executing program 0 (id=4452):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x9a482, 0x0) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001640)={0x8, 0x0, [{0x4000, 0xee, &(0x7f00000000c0)=""/238}, {0x11c000, 0x47, &(0x7f0000000240)=""/71}, {0x81a0000, 0xaf, &(0x7f00000002c0)=""/175}, {0xd000, 0xb4, &(0x7f0000000380)=""/180}, {0x4000, 0x1000, &(0x7f0000000440)=""/4096}, {0x0, 0x3b, &(0x7f0000001440)=""/59}, {0xffff1000, 0xbb, &(0x7f0000001480)=""/187}, {0x4, 0xfe, &(0x7f0000001540)=""/254}]}) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x30}], 0x400000000000172, 0x4001c00)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2e, 0x20004840) (async, rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (rerun: 32)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xc00})

19.580457969s ago: executing program 0 (id=4453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="4010000010c1af89895175", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000800050000000000"], 0x40}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x9d, '\x00', r7, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f00000001c0)={0x3}, 0x4)

19.521072889s ago: executing program 0 (id=4454):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000fffffff50000000001"], 0xfdef)

19.408310721s ago: executing program 0 (id=4455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x13, 0x4, 0x8, 0x8}, 0x50)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x0, 0x917, 0xa7, 0x1000000}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7182ce0ab6d0000", 0x32}], 0x1, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r4, @ANYRES8=r4, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES8=r4, @ANYBLOB="5c1ca5025779c68333cba11a1cadc25fac2dd195baf290ae5013fb794848ab462afcce121d06a4f20b14062760f66d2326c60be07ff6109f813fbd65406b470068a459af56f4853dc67b917109a9e36e0a43b68c0f9b4f58f6195a80242e7dc35d3295b36fe0f6dc886769c6795808f3bc562135ef33c8940657fc7e44d985acc91e5224c0bfffc77e6fa5d707276c0f19c74be110b1123ba4d9c086577a6c27725eedbc922e8d20e7abc5bec41a5dfcc588759154873d11ff0d1cc1d19ee2d721d915d49b55fbb1d42f6b19594de150ffc5a3ca80c1244db520e9888fa6af2afae99f01351fc32e558a05c6cb5f6bc799b13c715790c7"], 0x37a0}, 0x1, 0x0, 0x0, 0x2004480d}, 0x24004010)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r5=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xb5, 0x4d00e54c})
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000540)={'veth0\x00', @random="b5d6da754772"})
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, r0, 0x288, '\x00', r5, r7, 0x2, 0x0, 0x1}, 0x50)

19.300644265s ago: executing program 0 (id=4456):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c"], 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000008100000000000000033"], 0xfdef)

19.239615876s ago: executing program 0 (id=4457):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x5, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000080}, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
close(0x4)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000a0000008004ff0600000000"], 0x1c}}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

19.070759885s ago: executing program 2 (id=4458):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff57fb57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b185f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c760b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab7c3fa4d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926eb29bd482b1e0b6d61ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd800"], &(0x7f0000000100)='GPL\x00'}, 0x41)
syz_emit_ethernet(0x4c, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500003e006700000067907800000000ffffffff00009078c7ca80285a011eb3a440e3eb00"/76], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xa8}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

19.070563043s ago: executing program 2 (id=4459):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x7fff, 0x0, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r0, &(0x7f0000000080)={0x7fff, 0x0, 0x3, 0x3, 0xfd}, 0x8)

16.23810243s ago: executing program 1 (id=4485):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x51cf8d4f258ee1a4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x3, 0x1, 0x6, 0x40}, {0x99, 0x0, 0x2, 0x401, 0x1}, 0xd73, 0xb29, 0x400372}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

16.23749959s ago: executing program 1 (id=4486):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)

16.11098066s ago: executing program 1 (id=4487):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x54, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.11059218s ago: executing program 1 (id=4488):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00'})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, @vsock={0x28, 0x0, 0x2710, @hyper}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)='pim6reg0\x00', 0xe, 0x5, 0x9})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x800)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="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", 0xd62}], 0x1}}], 0x1, 0x8001)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f9, &(0x7f0000000a40)={'ip6gre0\x00', 0x0})
close(0x3)

15.891118767s ago: executing program 1 (id=4489):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000002a80)={0x2, 0x14, 0x0, 0x2, 0x26, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x19, 0x9, 0x5d0, 0x0, "a5616a375d02aeaf4dcba1d4eb6f22f004fb2b52bb707becd3a556d176023aa93544422b7d2a6bd7d29969652eca60c3a638514915566365daf13f9d4ab8900a95dae9091fc369328c4911bbcb91ed9174185dffe5a2296a5e0b36c24e11dd460ad04d7c35ab10fb6a9ca3800e4df92fb9658bedf681855c6e6fb448246853f5d05d6132eb34033167734098aab7d42c48110f995ffc2e0974c9544fab26a601fae6e34267342d687df84f0113e429d424385ed5bc00059788ed"}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1, @private2, 0x1}}]}, 0x130}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r4, &(0x7f0000000240)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1e)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000002c0), &(0x7f00000003c0)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b4391923"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{<r10=>0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f00000017c0)={0x0, r10, "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", "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"})
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'})

15.890297648s ago: executing program 1 (id=4490):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3.998486913s ago: executing program 32 (id=4457):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x5, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000080}, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
close(0x4)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000a0000008004ff0600000000"], 0x1c}}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.950075115s ago: executing program 33 (id=4459):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x7fff, 0x0, 0x3, 0x3, 0xfd}, 0x8) (async)
write$rfkill(r0, &(0x7f0000000080)={0x7fff, 0x0, 0x3, 0x3, 0xfd}, 0x8)

0s ago: executing program 34 (id=4490):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

T17720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.617126][T17719] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.703982][T17726] netlink: 'syz.1.3091': attribute type 4 has an invalid length.
[  250.712140][   T24] lo speed is unknown, defaulting to 1000
[  250.717838][   T24] syZ0: Port: 1 Link DOWN
[  250.728324][   T24] lo speed is unknown, defaulting to 1000
[  250.816721][T17741] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  250.819463][T17741] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  250.846596][T17748] tap0: tun_chr_ioctl cmd 1074025677
[  250.848782][T17748] tap0: linktype set to 780
[  250.993646][T17758] dvmrp0: entered allmulticast mode
[  251.066464][T17777] ip6tnl5: entered promiscuous mode
[  251.068097][T17777] ip6tnl5: entered allmulticast mode
[  251.195247][T17783] nbd0: detected capacity change from 0 to 63
[  251.199966][T17790] block nbd0: NBD_DISCONNECT
[  251.203718][T17790] block nbd0: Disconnected due to user request.
[  251.206768][T17787] netlink: 'syz.2.3110': attribute type 58 has an invalid length.
[  251.209985][T17790] block nbd0: shutting down sockets
[  251.218739][    C1] blk_print_req_error: 135 callbacks suppressed
[  251.218755][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.224460][    C1] buffer_io_error: 138 callbacks suppressed
[  251.224469][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  251.228863][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.231509][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  251.233922][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.237086][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  251.239818][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.242730][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  251.251660][ T6899] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.255140][ T6899] Buffer I/O error on dev nbd0, logical block 0, async page read
[  251.257920][ T6899] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.260597][ T6899] Buffer I/O error on dev nbd0, logical block 1, async page read
[  251.262867][ T6899] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.266004][ T6899] Buffer I/O error on dev nbd0, logical block 2, async page read
[  251.268550][ T6899] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.271235][ T6899] Buffer I/O error on dev nbd0, logical block 3, async page read
[  251.277789][ T6899] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.281437][ T6899] Buffer I/O error on dev nbd0, logical block 0, async page read
[  251.284738][ T6899] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  251.288194][ T6899] Buffer I/O error on dev nbd0, logical block 1, async page read
[  251.292267][ T6899] ldm_validate_partition_table(): Disk read failed.
[  251.295867][ T6899] Dev nbd0: unable to read RDB block 0
[  251.298685][ T6899]  nbd0: unable to read partition table
[  251.314737][ T6899] ldm_validate_partition_table(): Disk read failed.
[  251.319164][T17798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.324109][ T6899] Dev nbd0: unable to read RDB block 0
[  251.327709][ T6899]  nbd0: unable to read partition table
[  251.465523][T17815] netlink: 'syz.0.3117': attribute type 1 has an invalid length.
[  251.510218][T17815] 8021q: adding VLAN 0 to HW filter on device bond117
[  251.525948][T17815] veth19: entered promiscuous mode
[  251.529262][T17815] bond117: (slave veth19): Enslaving as a backup interface with a down link
[  251.867140][T17828] 8021q: adding VLAN 0 to HW filter on device bond50
[  251.875158][T17829] 8021q: adding VLAN 0 to HW filter on device bond50
[  251.878104][T17829] bond50: (slave vcan0): The slave device specified does not support setting the MAC address
[  251.882222][T17829] bond50: (slave vcan0): Error -95 calling set_mac_address
[  251.972463][T17834] batadv_slave_0: left promiscuous mode
[  251.976085][T17834] batadv_slave_0: left allmulticast mode
[  251.978373][T17834] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  251.980402][T17834] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  251.982486][T17834] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  251.998568][T17834] veth13: left promiscuous mode
[  252.005512][T17834] bridge0: left promiscuous mode
[  252.007075][T17834] bridge0: left allmulticast mode
[  252.293362][T17854] 8021q: adding VLAN 0 to HW filter on device bond53
[  252.355448][T17860] bond0: entered promiscuous mode
[  252.358913][T17860] bond0: left promiscuous mode
[  252.597364][T17888] bond114: (slave bridge27): Releasing backup interface
[  252.599710][T17888] bridge27: left promiscuous mode
[  252.607452][T17888] bond117: (slave veth19): Releasing backup interface
[  252.617387][T17891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  252.622536][T17891] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  252.674795][T17896] syzkaller0: Caught tx_queue_len zero misconfig
[  252.765650][T17906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.771970][T17906] macsec0: entered allmulticast mode
[  252.773946][T17906] ip6gretap0: entered allmulticast mode
[  252.777014][T17906] ip6gretap0: left allmulticast mode
[  252.795533][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 150 seconds
[  252.894404][T17909] pim6reg1: entered promiscuous mode
[  252.896323][T17909] pim6reg1: entered allmulticast mode
[  253.244990][T17918] __nla_validate_parse: 15 callbacks suppressed
[  253.245001][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'.
[  253.249890][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3146'.
[  253.559039][T17920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3147'.
[  253.567238][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3147'.
[  253.609750][T17922] 8021q: adding VLAN 0 to HW filter on device bond118
[  253.625832][T17922] 8021q: adding VLAN 0 to HW filter on device bond118
[  253.628811][T17922] bond118: (slave vxcan9): The slave device specified does not support setting the MAC address
[  253.634094][T17922] bond118: (slave vxcan9): Error -95 calling set_mac_address
[  253.669010][T17927] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.684202][T17930] veth21: entered promiscuous mode
[  253.688402][T17930] bond118: (slave veth21): Enslaving as an active interface with a down link
[  253.769497][T17939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.801595][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'.
[  253.809819][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'.
[  253.823293][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3155'.
[  253.870772][T17945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3156'.
[  253.877851][T17945] geneve0: entered promiscuous mode
[  253.880527][T17945] team0: Port device geneve0 added
[  253.888727][ T5713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.895306][ T5713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.898676][ T5713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.908087][ T5713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.007558][T17959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3158'.
[  254.067139][T17964] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  254.443794][T17987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3164'.
[  254.627843][T17989] bond52: (slave bridge22): Releasing active interface
[  254.793315][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.796821][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.915617][T18002] IPVS: Scheduler module ip_vs_sip not found
[  254.926455][   T33] audit: type=1800 audit(1756401973.106:7): pid=18002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3168" name="g" dev="tmpfs" ino=5476 res=0 errno=0
[  254.981599][T18013] team0: No ports can be present during mode change
[  254.998524][T18011] validate_nla: 13 callbacks suppressed
[  254.998540][T18011] netlink: 'syz.1.3170': attribute type 10 has an invalid length.
[  255.035888][T18020] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  255.038339][T18020] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  255.089309][T18024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.100147][T18024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.134401][T18027] tun0: tun_chr_ioctl cmd 2148045848
[  255.137772][T18027] tun0: tun_chr_ioctl cmd 21731
[  255.247225][T18039] erspan0: left promiscuous mode
[  255.260110][T18039] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  255.274861][ T5872] lo speed is unknown, defaulting to 1000
[  255.278624][ T5872] syZ0: Port: 1 Link ACTIVE
[  255.280696][ T5872] lo speed is unknown, defaulting to 1000
[  255.293290][T18047] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  255.962715][T18085] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.968100][T18086] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.971219][T18085] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  255.974625][T18085] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  256.256150][T18106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.369670][T18121] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  256.385843][T18121] veth23: entered promiscuous mode
[  256.426143][T18137] netlink: 'syz.2.3205': attribute type 1 has an invalid length.
[  256.438096][T18137] 8021q: adding VLAN 0 to HW filter on device bond54
[  256.459838][T18137] bond54: (slave veth35): Enslaving as an active interface with a down link
[  256.465015][T18134] netlink: 'syz.1.3206': attribute type 10 has an invalid length.
[  256.497993][T18144] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.558884][T18148] netlink: 'syz.0.3207': attribute type 10 has an invalid length.
[  256.567670][T18148] !: entered promiscuous mode
[  256.570039][T18148] team0: Port device 0! added
[  256.595474][T18148] netlink: 'syz.0.3207': attribute type 10 has an invalid length.
[  256.611022][T18148] !: left promiscuous mode
[  256.638223][T18154] netlink: 'syz.2.3210': attribute type 10 has an invalid length.
[  256.706858][T18148] team0: Port device 0! removed
[  256.711556][T18148] !: entered allmulticast mode
[  256.735388][T18153] netlink: 'syz.1.3211': attribute type 4 has an invalid length.
[  256.741419][T18153] netlink: 'syz.1.3211': attribute type 4 has an invalid length.
[  256.744094][   T24] lo speed is unknown, defaulting to 1000
[  256.745786][   T24] syZ0: Port: 1 Link DOWN
[  256.747076][   T24] lo speed is unknown, defaulting to 1000
[  256.757807][   T24] lo speed is unknown, defaulting to 1000
[  256.761245][   T24] syZ0: Port: 1 Link ACTIVE
[  256.765211][ T5872] lo speed is unknown, defaulting to 1000
[  257.142704][T18175] 8021q: adding VLAN 0 to HW filter on device bond55
[  257.162707][T18175] bond0: (slave bond55): Enslaving as an active interface with a down link
[  257.290784][T18187] netlink: 'syz.1.3217': attribute type 16 has an invalid length.
[  257.377832][   T24] lo speed is unknown, defaulting to 1000
[  257.380126][   T24] syZ0: Port: 1 Link DOWN
[  257.384135][   T24] lo speed is unknown, defaulting to 1000
[  257.440182][T18197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  257.447826][T13441] lo speed is unknown, defaulting to 1000
[  257.450162][T13441] syz1: Port: 1 Link ACTIVE
[  258.130434][T18205] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  258.158795][T18206] lo speed is unknown, defaulting to 1000
[  258.166789][T18206] lo speed is unknown, defaulting to 1000
[  258.278851][T18211] __nla_validate_parse: 25 callbacks suppressed
[  258.278862][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'.
[  258.340445][T18226] nbd: nbd1 already in use
[  258.346959][T18226] block nbd1: NBD_DISCONNECT
[  258.352230][T18226] block nbd1: Send disconnect failed -32
[  258.396250][T18221] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3230'.
[  258.450811][T18230] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.835566][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'.
[  258.971348][T18260] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  259.021671][T18263] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3240'.
[  259.082348][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'.
[  259.087848][T18268] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3242'.
[  259.090848][T18270] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3243'.
[  259.166757][T18275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.256248][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'.
[  259.296061][T18287] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3247'.
[  259.389687][T18294] lo speed is unknown, defaulting to 1000
[  259.392322][T18294] lo speed is unknown, defaulting to 1000
[  259.831161][T18320] lo speed is unknown, defaulting to 1000
[  259.833980][T18320] lo speed is unknown, defaulting to 1000
[  259.967953][T18325] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  259.971019][T18325] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  259.977647][T18325] vlan0: entered promiscuous mode
[  259.979452][T18325] vlan0: entered allmulticast mode
[  259.981018][T18325] veth0_vlan: entered allmulticast mode
[  259.991803][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'.
[  260.794793][T18347] pim6reg99999999: entered allmulticast mode
[  260.841149][T18349] validate_nla: 3 callbacks suppressed
[  260.841165][T18349] netlink: 'syz.2.3265': attribute type 1 has an invalid length.
[  260.868881][T18349] veth37: entered promiscuous mode
[  260.876098][T18349] bond56: (slave veth37): Enslaving as a backup interface with a down link
[  260.886743][T18350] veth39: entered promiscuous mode
[  260.889566][T18350] bond56: (slave veth39): Enslaving as a backup interface with a down link
[  260.896999][T18349] 8021q: adding VLAN 0 to HW filter on device bond56
[  260.947792][T18361] lo speed is unknown, defaulting to 1000
[  260.950890][T18361] lo speed is unknown, defaulting to 1000
[  261.105877][T18361] macsec0: entered promiscuous mode
[  261.107543][T18361] syzkaller0: entered promiscuous mode
[  261.110632][T18361] syzkaller0: left promiscuous mode
[  261.124262][T18371] pim6reg1: entered promiscuous mode
[  261.126425][T18371] pim6reg1: entered allmulticast mode
[  261.241427][T18384] netlink: 'syz.2.3278': attribute type 4 has an invalid length.
[  261.262444][T18386] bridge30: port 1(veth0_to_bond) entered blocking state
[  261.267265][T18386] bridge30: port 1(veth0_to_bond) entered disabled state
[  261.269771][T18386] veth0_to_bond: entered allmulticast mode
[  261.272713][T18386] veth0_to_bond: entered promiscuous mode
[  261.289357][T18386] vlan5: entered allmulticast mode
[  261.291426][T18386] veth1: entered allmulticast mode
[  261.342745][T18401] netlink: 'syz.2.3282': attribute type 4 has an invalid length.
[  261.388345][T18406] lo speed is unknown, defaulting to 1000
[  261.420121][T18406] lo speed is unknown, defaulting to 1000
[  261.474702][T18407] lo speed is unknown, defaulting to 1000
[  261.491271][T18407] lo speed is unknown, defaulting to 1000
[  261.548067][T18424] bridge0: port 1(erspan0) entered blocking state
[  261.553154][T18424] bridge0: port 1(erspan0) entered disabled state
[  261.555461][T18424] erspan0: entered allmulticast mode
[  261.558029][T18424] erspan0: left allmulticast mode
[  261.728489][T18438] 8021q: adding VLAN 0 to HW filter on device bond57
[  261.874510][T18445] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  261.889399][T18445] 8021q: adding VLAN 0 to HW filter on device bond51
[  261.897670][T18445] bond51: (slave geneve7): making interface the new active one
[  261.901108][T18445] bond51: (slave geneve7): Enslaving as an active interface with an up link
[  261.905165][ T5713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.907932][ T5713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.914696][ T5713] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.918063][ T5713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.177472][T18481] netlink: 'syz.2.3301': attribute type 9 has an invalid length.
[  262.217262][T18485] sit3: entered promiscuous mode
[  262.342311][T18495] netlink: 'syz.0.3306': attribute type 10 has an invalid length.
[  262.366060][T18499] vlan1: entered promiscuous mode
[  262.367946][T18499] bridge0: entered promiscuous mode
[  262.394563][T18495] syzkaller0: left promiscuous mode
[  262.396185][T18495] syzkaller0: left allmulticast mode
[  262.833662][T18547] netlink: 'syz.0.3318': attribute type 7 has an invalid length.
[  263.120487][T18562] 0X: renamed from caif0
[  263.127494][T18562] 0X: entered allmulticast mode
[  263.129619][T18562] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  263.327809][T18569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.329068][T18585] __nla_validate_parse: 20 callbacks suppressed
[  263.329080][T18585] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3330'.
[  263.338430][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3330'.
[  263.467420][T18600] batadv_slave_0: entered promiscuous mode
[  263.470898][T18599] batadv_slave_0: left promiscuous mode
[  263.867165][T18627] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  263.992034][T18634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.386652][T18655] tun0: tun_chr_ioctl cmd 2147767520
[  264.481488][T18662] 8021q: adding VLAN 0 to HW filter on device bond121
[  264.489901][T18662] bond0: (slave bond121): Enslaving as an active interface with a down link
[  264.493965][T18664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3355'.
[  264.495918][T18662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3355'.
[  264.506820][T18666] netlink: 'syz.2.3354': attribute type 10 has an invalid length.
[  264.532210][T18672] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3356'.
[  264.550824][T18672] bond0 (unregistering): (slave bond55): Releasing backup interface
[  264.557246][T18672] bond0 (unregistering): Released all slaves
[  264.575019][T18676] lo speed is unknown, defaulting to 1000
[  264.577359][T18676] lo speed is unknown, defaulting to 1000
[  264.659579][T18679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.662477][T18681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.757476][T18684] syzkaller1: entered promiscuous mode
[  264.759330][T18684] syzkaller1: entered allmulticast mode
[  265.019225][T18695] lo speed is unknown, defaulting to 1000
[  265.022259][T18695] lo speed is unknown, defaulting to 1000
[  265.120156][T18698] can: request_module (can-proto-0) failed.
[  265.139424][T18707] lo speed is unknown, defaulting to 1000
[  265.165324][T18707] lo speed is unknown, defaulting to 1000
[  265.232288][T18711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3367'.
[  265.404743][T18723] netlink: 'syz.1.3371': attribute type 1 has an invalid length.
[  265.549863][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.555164][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.558725][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.561864][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.646026][T18747] netlink: 'syz.0.3376': attribute type 142 has an invalid length.
[  265.699142][T18749] pim6reg1: entered promiscuous mode
[  265.705126][T18749] pim6reg1: entered allmulticast mode
[  265.997607][T18753] dvmrp8: entered allmulticast mode
[  266.007737][T18752] dvmrp8: left allmulticast mode
[  266.246376][T18765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'.
[  266.250481][T18765] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  266.331575][T18774] netlink: 'syz.0.3383': attribute type 4 has an invalid length.
[  266.349244][T18776] lo speed is unknown, defaulting to 1000
[  266.352029][T18775] lo speed is unknown, defaulting to 1000
[  266.352606][T18778] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  266.354370][T18776] lo speed is unknown, defaulting to 1000
[  266.410674][T18778] 8021q: adding VLAN 0 to HW filter on device bond58
[  266.416383][T18778] bond0: (slave bond58): making interface the new active one
[  266.419908][T18778] bond0: (slave bond58): Enslaving as an active interface with an up link
[  266.432518][T18778] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  266.439817][T18778] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  266.452087][T18775] lo speed is unknown, defaulting to 1000
[  266.573454][T18785] lo speed is unknown, defaulting to 1000
[  266.579442][T18785] lo speed is unknown, defaulting to 1000
[  266.798848][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  266.813052][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  266.852528][T18793] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.929486][T18802] syzkaller1: entered promiscuous mode
[  266.931625][T18802] syzkaller1: entered allmulticast mode
[  266.976771][T18808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.008921][T18802] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.104311][T18821] netlink: 'syz.2.3394': attribute type 39 has an invalid length.
[  267.209779][T18834] lo speed is unknown, defaulting to 1000
[  267.212090][T18834] lo speed is unknown, defaulting to 1000
[  267.388317][T18857] netlink: 'syz.1.3404': attribute type 1 has an invalid length.
[  267.421495][T18859] netlink: 'syz.0.3405': attribute type 1 has an invalid length.
[  267.444940][T18859] workqueue: Failed to create a rescuer kthread for wq "bond122": -EINTR
[  267.458849][T18864] lo speed is unknown, defaulting to 1000
[  267.481904][T18864] lo speed is unknown, defaulting to 1000
[  267.532913][T18869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  267.535789][T18869] IPv6: NLM_F_CREATE should be set when creating new route
[  267.538596][T18869] IPv6: NLM_F_CREATE should be set when creating new route
[  267.647940][T18875] bridge24: entered promiscuous mode
[  267.659111][T18875] bridge25: entered promiscuous mode
[  267.663872][T18875] bridge26: entered promiscuous mode
[  267.675249][T18875] bridge27: entered promiscuous mode
[  267.682136][T18875] bridge28: entered promiscuous mode
[  267.689845][T18875] bridge29: entered promiscuous mode
[  267.696327][T18875] bridge30: entered promiscuous mode
[  267.701019][T18875] bridge31: entered promiscuous mode
[  267.707012][T18875] bridge32: entered promiscuous mode
[  267.709116][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3409'.
[  267.715279][T18875] bridge33: entered promiscuous mode
[  267.730627][T18875] bridge34: entered promiscuous mode
[  267.754134][T18875] bridge35: entered promiscuous mode
[  267.762120][T18875] bridge36: entered promiscuous mode
[  267.771592][T18875] bridge37: entered promiscuous mode
[  267.777838][T18875] bridge38: entered promiscuous mode
[  267.790361][T18875] bridge39: entered promiscuous mode
[  267.798873][T18875] bridge40: entered promiscuous mode
[  267.803781][T18875] bridge41: entered promiscuous mode
[  267.808474][T18875] bridge42: entered promiscuous mode
[  267.812890][T18875] bridge43: entered promiscuous mode
[  267.817773][T18875] bridge44: entered promiscuous mode
[  267.822583][T18875] bridge45: entered promiscuous mode
[  267.827208][T18875] bridge46: entered promiscuous mode
[  267.831523][T18875] bridge47: entered promiscuous mode
[  267.836779][T18875] bridge48: entered promiscuous mode
[  267.840975][T18875] bridge49: entered promiscuous mode
[  267.849654][T18875] bridge50: entered promiscuous mode
[  267.854378][T18875] bridge51: entered promiscuous mode
[  267.859327][T18875] bridge52: entered promiscuous mode
[  267.864898][T18875] bridge53: entered promiscuous mode
[  267.876173][T18875] bridge54: entered promiscuous mode
[  267.881149][T18875] bridge55: entered promiscuous mode
[  267.885930][T18875] bridge56: entered promiscuous mode
[  267.891546][T18875] bridge57: entered promiscuous mode
[  267.897915][T18887] tipc: Resetting bearer <eth:syzkaller0>
[  267.917483][   T24] lo speed is unknown, defaulting to 1000
[  267.919248][   T24] syz1: Port: 1 Link DOWN
[  267.927634][T18875] bridge58: entered promiscuous mode
[  267.932370][T18875] bridge59: entered promiscuous mode
[  267.934795][ T9573] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.938281][ T9573] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.941665][ T9573] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.948687][ T9573] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.962298][T18875] bridge60: entered promiscuous mode
[  267.970548][T18889] netlink: 'syz.0.3412': attribute type 1 has an invalid length.
[  267.974280][T18875] bridge61: entered promiscuous mode
[  267.976407][ T9573] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  267.983230][ T9573] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.991053][T18875] bridge62: entered promiscuous mode
[  268.007351][T18875] bridge63: entered promiscuous mode
[  268.009204][ T9573] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  268.012114][ T9573] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.020491][T18875] bridge64: entered promiscuous mode
[  268.029482][T18875] bridge65: entered promiscuous mode
[  268.041182][T18875] bridge66: entered promiscuous mode
[  268.048504][T18875] bridge67: entered promiscuous mode
[  268.055979][T18875] bridge68: entered promiscuous mode
[  268.061666][T18875] bridge69: entered promiscuous mode
[  268.068210][T18875] bridge70: entered promiscuous mode
[  268.079154][T18875] bridge71: entered promiscuous mode
[  268.084513][T18875] bridge72: entered promiscuous mode
[  268.089012][T18875] bridge73: entered promiscuous mode
[  268.096099][T18875] bridge74: entered promiscuous mode
[  268.100748][T18875] bridge75: entered promiscuous mode
[  268.106661][T18875] bridge76: entered promiscuous mode
[  268.111404][T18875] bridge77: entered promiscuous mode
[  268.117296][T18875] bridge78: entered promiscuous mode
[  268.121814][T18875] bridge79: entered promiscuous mode
[  268.127519][T18875] bridge80: entered promiscuous mode
[  268.131971][T18875] bridge81: entered promiscuous mode
[  268.138505][T18875] bridge82: entered promiscuous mode
[  268.143408][T18875] bridge83: entered promiscuous mode
[  268.156259][T18875] bridge84: entered promiscuous mode
[  268.160782][T18875] bridge85: entered promiscuous mode
[  268.169148][T18875] bridge86: entered promiscuous mode
[  268.174187][T18875] bridge87: entered promiscuous mode
[  268.180129][T18875] bridge88: entered promiscuous mode
[  268.182163][T18905] chnl_net:caif_netlink_parms(): no params data found
[  268.202242][T18907] netlink: 'syz.2.3419': attribute type 10 has an invalid length.
[  268.247411][T18912] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  268.325599][T18921] netlink: 'syz.2.3425': attribute type 1 has an invalid length.
[  268.334688][T18921] 8021q: adding VLAN 0 to HW filter on device bond59
[  268.364363][T18929] __nla_validate_parse: 7 callbacks suppressed
[  268.364378][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'.
[  268.377767][T18929] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  268.414253][T18931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.449131][T18937] netlink: 'syz.2.3430': attribute type 1 has an invalid length.
[  268.499873][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3431'.
[  268.525528][T18940] netlink: 316 bytes leftover after parsing attributes in process `syz.0.3431'.
[  268.535275][T18937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3430'.
[  268.688975][T18958] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  268.693671][T18958] CPU: 0 UID: 0 PID: 18958 Comm: syz.2.3435 Not tainted syzkaller #0 PREEMPT(full) 
[  268.693689][T18958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.693699][T18958] Call Trace:
[  268.693704][T18958]  <TASK>
[  268.693711][T18958]  dump_stack_lvl+0x189/0x250
[  268.693740][T18958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.693756][T18958]  ? __pfx__printk+0x10/0x10
[  268.693773][T18958]  ? kernfs_root+0x1c/0x230
[  268.693789][T18958]  ? kernfs_path_from_node+0x2f/0x290
[  268.693802][T18958]  ? kernfs_path_from_node+0x250/0x290
[  268.693816][T18958]  ? kernfs_path_from_node+0x2f/0x290
[  268.693831][T18958]  sysfs_warn_dup+0x8e/0xa0
[  268.693844][T18958]  sysfs_do_create_link_sd+0xc0/0x110
[  268.693859][T18958]  device_add_class_symlinks+0x1cf/0x240
[  268.693875][T18958]  device_add+0x475/0xb50
[  268.693889][T18958]  wiphy_register+0x1ba6/0x28d0
[  268.693913][T18958]  ? __pfx_wiphy_register+0x10/0x10
[  268.693930][T18958]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  268.693947][T18958]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  268.693963][T18958]  ieee80211_register_hw+0x3425/0x4080
[  268.693985][T18958]  ? ieee80211_register_hw+0x14e1/0x4080
[  268.694000][T18958]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  268.694046][T18958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.694067][T18958]  ? __hrtimer_setup+0x187/0x210
[  268.694080][T18958]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  268.694100][T18958]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  268.694128][T18958]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  268.694145][T18958]  ? trace_kmalloc+0x1f/0xd0
[  268.694161][T18958]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  268.694180][T18958]  ? kstrndup+0xbf/0x160
[  268.694198][T18958]  hwsim_new_radio_nl+0xea4/0x1b10
[  268.694216][T18958]  ? __pfx___nla_validate_parse+0x10/0x10
[  268.694243][T18958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.694264][T18958]  ? __nla_parse+0x40/0x60
[  268.694285][T18958]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  268.694306][T18958]  genl_family_rcv_msg_doit+0x215/0x300
[  268.694325][T18958]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  268.694346][T18958]  ? bpf_lsm_capable+0x9/0x20
[  268.694365][T18958]  ? security_capable+0x7e/0x2e0
[  268.694387][T18958]  genl_rcv_msg+0x60e/0x790
[  268.694404][T18958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.694419][T18958]  ? __kasan_slab_alloc+0x6c/0x80
[  268.694436][T18958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.694453][T18958]  ? __netlink_lookup+0xbd/0x810
[  268.694465][T18958]  ? rcu_is_watching+0x15/0xb0
[  268.694481][T18958]  netlink_rcv_skb+0x208/0x470
[  268.694502][T18958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.694517][T18958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.694541][T18958]  ? lock_release+0x4b/0x3e0
[  268.694561][T18958]  ? down_read+0x1ad/0x2e0
[  268.694575][T18958]  genl_rcv+0x28/0x40
[  268.694589][T18958]  netlink_unicast+0x82f/0x9e0
[  268.694610][T18958]  ? __pfx_netlink_unicast+0x10/0x10
[  268.694628][T18958]  ? netlink_sendmsg+0x642/0xb30
[  268.694639][T18958]  ? skb_put+0x11b/0x210
[  268.694654][T18958]  netlink_sendmsg+0x805/0xb30
[  268.694669][T18958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.694682][T18958]  ? futex_unqueue+0x22/0x240
[  268.694695][T18958]  ? aa_sock_msg_perm+0xf1/0x1d0
[  268.694706][T18958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.694719][T18958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.694735][T18958]  __sock_sendmsg+0x21c/0x270
[  268.694754][T18958]  ____sys_sendmsg+0x505/0x830
[  268.694770][T18958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.694787][T18958]  ? import_iovec+0x74/0xa0
[  268.694804][T18958]  ___sys_sendmsg+0x21f/0x2a0
[  268.694819][T18958]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.694834][T18958]  ? futex_wait+0x285/0x360
[  268.694861][T18958]  ? __fget_files+0x2a/0x420
[  268.694873][T18958]  ? __fget_files+0x3a0/0x420
[  268.694888][T18958]  __x64_sys_sendmsg+0x19b/0x260
[  268.694903][T18958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.694924][T18958]  ? rcu_is_watching+0x15/0xb0
[  268.694939][T18958]  do_syscall_64+0xfa/0x3b0
[  268.694952][T18958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.694966][T18958]  ? exc_page_fault+0x9f/0xf0
[  268.694984][T18958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.694998][T18958] RIP: 0033:0x7f7492f8ebe9
[  268.695037][T18958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.695049][T18958] RSP: 002b:00007f7493d4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.695066][T18958] RAX: ffffffffffffffda RBX: 00007f74931b6090 RCX: 00007f7492f8ebe9
[  268.695076][T18958] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  268.695083][T18958] RBP: 00007f7493011e19 R08: 0000000000000000 R09: 0000000000000000
[  268.695092][T18958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.695101][T18958] R13: 00007f74931b6128 R14: 00007f74931b6090 R15: 00007ffcbac21818
[  268.695116][T18958]  </TASK>
[  268.875367][T18959] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  268.879885][T18959] CPU: 0 UID: 0 PID: 18959 Comm: syz.2.3435 Not tainted syzkaller #0 PREEMPT(full) 
[  268.879907][T18959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.879917][T18959] Call Trace:
[  268.879924][T18959]  <TASK>
[  268.879932][T18959]  dump_stack_lvl+0x189/0x250
[  268.879956][T18959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.879972][T18959]  ? __pfx__printk+0x10/0x10
[  268.880017][T18959]  ? kernfs_root+0x1c/0x230
[  268.880035][T18959]  ? kernfs_path_from_node+0x2f/0x290
[  268.880048][T18959]  ? kernfs_path_from_node+0x250/0x290
[  268.880062][T18959]  ? kernfs_path_from_node+0x2f/0x290
[  268.880077][T18959]  sysfs_warn_dup+0x8e/0xa0
[  268.880091][T18959]  sysfs_do_create_link_sd+0xc0/0x110
[  268.880107][T18959]  device_add_class_symlinks+0x1cf/0x240
[  268.880124][T18959]  device_add+0x475/0xb50
[  268.880138][T18959]  wiphy_register+0x1ba6/0x28d0
[  268.880162][T18959]  ? __pfx_wiphy_register+0x10/0x10
[  268.880178][T18959]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  268.880198][T18959]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  268.880212][T18959]  ieee80211_register_hw+0x3425/0x4080
[  268.880233][T18959]  ? ieee80211_register_hw+0x14e1/0x4080
[  268.880250][T18959]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  268.880263][T18959]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.880275][T18959]  ? __hrtimer_setup+0x187/0x210
[  268.880283][T18959]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  268.880295][T18959]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  268.880311][T18959]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  268.880320][T18959]  ? trace_kmalloc+0x1f/0xd0
[  268.880329][T18959]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  268.880339][T18959]  ? kstrndup+0xbf/0x160
[  268.880349][T18959]  hwsim_new_radio_nl+0xea4/0x1b10
[  268.880360][T18959]  ? __pfx___nla_validate_parse+0x10/0x10
[  268.880375][T18959]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.880387][T18959]  ? __nla_parse+0x40/0x60
[  268.880404][T18959]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  268.880416][T18959]  genl_family_rcv_msg_doit+0x215/0x300
[  268.880426][T18959]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  268.880438][T18959]  ? bpf_lsm_capable+0x9/0x20
[  268.880448][T18959]  ? security_capable+0x7e/0x2e0
[  268.880461][T18959]  genl_rcv_msg+0x60e/0x790
[  268.880470][T18959]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.880478][T18959]  ? __kasan_slab_alloc+0x6c/0x80
[  268.880488][T18959]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.880497][T18959]  ? __netlink_lookup+0xbd/0x810
[  268.880504][T18959]  ? rcu_is_watching+0x15/0xb0
[  268.880514][T18959]  netlink_rcv_skb+0x208/0x470
[  268.880526][T18959]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.880534][T18959]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.880547][T18959]  ? lock_release+0x4b/0x3e0
[  268.880559][T18959]  ? down_read+0x1ad/0x2e0
[  268.880566][T18959]  genl_rcv+0x28/0x40
[  268.880574][T18959]  netlink_unicast+0x82f/0x9e0
[  268.880585][T18959]  ? __pfx_netlink_unicast+0x10/0x10
[  268.880595][T18959]  ? netlink_sendmsg+0x642/0xb30
[  268.880601][T18959]  ? skb_put+0x11b/0x210
[  268.880609][T18959]  netlink_sendmsg+0x805/0xb30
[  268.880618][T18959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.880625][T18959]  ? futex_unqueue+0x22/0x240
[  268.880633][T18959]  ? aa_sock_msg_perm+0xf1/0x1d0
[  268.880641][T18959]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.880648][T18959]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.880655][T18959]  __sock_sendmsg+0x21c/0x270
[  268.880666][T18959]  ____sys_sendmsg+0x505/0x830
[  268.880675][T18959]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.880684][T18959]  ? import_iovec+0x74/0xa0
[  268.880694][T18959]  ___sys_sendmsg+0x21f/0x2a0
[  268.880702][T18959]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.880710][T18959]  ? futex_wait+0x285/0x360
[  268.880726][T18959]  ? __fget_files+0x2a/0x420
[  268.880733][T18959]  ? __fget_files+0x3a0/0x420
[  268.880742][T18959]  __x64_sys_sendmsg+0x19b/0x260
[  268.880750][T18959]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.880760][T18959]  ? rcu_is_watching+0x15/0xb0
[  268.880768][T18959]  ? rcu_is_watching+0x15/0xb0
[  268.880775][T18959]  do_syscall_64+0xfa/0x3b0
[  268.880784][T18959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.880791][T18959]  ? exc_page_fault+0x9f/0xf0
[  268.880802][T18959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.880810][T18959] RIP: 0033:0x7f7492f8ebe9
[  268.880819][T18959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.880826][T18959] RSP: 002b:00007f7493d2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.880836][T18959] RAX: ffffffffffffffda RBX: 00007f74931b6180 RCX: 00007f7492f8ebe9
[  268.880842][T18959] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  268.880847][T18959] RBP: 00007f7493011e19 R08: 0000000000000000 R09: 0000000000000000
[  268.880853][T18959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.880857][T18959] R13: 00007f74931b6218 R14: 00007f74931b6180 R15: 00007ffcbac21818
[  268.880866][T18959]  </TASK>
[  269.094191][T18962] netlink: 'syz.2.3436': attribute type 1 has an invalid length.
[  269.104481][T18962] 8021q: adding VLAN 0 to HW filter on device bond61
[  269.116910][T18963] veth41: entered promiscuous mode
[  269.119350][T18962] erspan0: entered allmulticast mode
[  269.223789][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'.
[  269.311333][T18982] vlan4: entered promiscuous mode
[  269.314050][T18982] bridge0: entered promiscuous mode
[  269.418047][T18992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'.
[  269.426001][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'.
[  269.430331][T18992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3446'.
[  269.436172][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'.
[  269.468506][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'.
[  269.531592][T19007] veth0_to_bond: left allmulticast mode
[  269.535223][T19007] veth0_to_bond: left promiscuous mode
[  269.537754][T19007] bridge30: port 1(veth0_to_bond) entered disabled state
[  269.546608][T19007] geneve0: left promiscuous mode
[  269.551656][T19007] team0: Port device geneve0 removed
[  269.555391][T19007] bond118: (slave veth21): Releasing active interface
[  269.559930][T19007] bond0: (slave bond121): Releasing active interface
[  269.568024][T19007] team0: Mode changed to "broadcast"
[  269.576694][T19007] vlan0: entered promiscuous mode
[  269.581311][T19007] team0: Port device vlan0 added
[  269.585083][T19007] tipc: Enabled bearer <eth:team0>, priority 0
[  269.662887][T19015] erspan0: left allmulticast mode
[  269.678093][T19015] 0X: left allmulticast mode
[  269.680271][T19015] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  269.835644][T19029] vlan0: left promiscuous mode
[  269.837380][T19029] vlan0: left allmulticast mode
[  269.839006][T19029] veth0_vlan: left allmulticast mode
[  269.850976][T19029] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  269.853473][T19029] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  269.861695][T19029] veth37: left promiscuous mode
[  269.865947][T19029] veth39: left promiscuous mode
[  269.868456][T19029] sit3: left promiscuous mode
[  269.872211][T19029] bridge24: left promiscuous mode
[  269.875128][T19029] bridge25: left promiscuous mode
[  269.877782][T19029] bridge26: left promiscuous mode
[  269.879973][T19029] bridge27: left promiscuous mode
[  269.882129][T19029] bridge28: left promiscuous mode
[  269.885729][T19029] bridge29: left promiscuous mode
[  269.888134][T19029] bridge30: left promiscuous mode
[  269.890657][T19029] bridge31: left promiscuous mode
[  269.892801][T19029] bridge32: left promiscuous mode
[  269.895311][T19029] bridge33: left promiscuous mode
[  269.897398][T19029] bridge34: left promiscuous mode
[  269.899428][T19029] bridge35: left promiscuous mode
[  269.901876][T19029] bridge36: left promiscuous mode
[  269.904558][T19029] bridge37: left promiscuous mode
[  269.907066][T19029] bridge38: left promiscuous mode
[  269.909424][T19029] bridge39: left promiscuous mode
[  269.911669][T19029] bridge40: left promiscuous mode
[  269.915023][T19029] bridge41: left promiscuous mode
[  269.917390][T19029] bridge42: left promiscuous mode
[  269.919640][T19029] bridge43: left promiscuous mode
[  269.922089][T19029] bridge44: left promiscuous mode
[  269.924695][T19029] bridge45: left promiscuous mode
[  269.926978][T19029] bridge46: left promiscuous mode
[  269.929078][T19029] bridge47: left promiscuous mode
[  269.931268][T19029] bridge48: left promiscuous mode
[  269.935169][T19029] bridge49: left promiscuous mode
[  269.937865][T19029] bridge50: left promiscuous mode
[  269.940667][T19029] bridge51: left promiscuous mode
[  269.946098][T19029] bridge52: left promiscuous mode
[  269.948741][T19029] bridge53: left promiscuous mode
[  269.951162][T19029] bridge54: left promiscuous mode
[  269.953770][T19029] bridge55: left promiscuous mode
[  269.956061][T19029] bridge56: left promiscuous mode
[  269.958435][T19029] bridge57: left promiscuous mode
[  269.961180][T19029] bridge58: left promiscuous mode
[  269.965101][T19029] bridge59: left promiscuous mode
[  269.967639][T19029] bridge60: left promiscuous mode
[  269.970273][T19029] bridge61: left promiscuous mode
[  269.972751][T19029] bridge62: left promiscuous mode
[  269.975815][T19029] bridge63: left promiscuous mode
[  269.978671][T19029] bridge64: left promiscuous mode
[  269.981454][T19029] bridge65: left promiscuous mode
[  269.985135][T19029] bridge66: left promiscuous mode
[  269.987650][T19029] bridge67: left promiscuous mode
[  269.990045][T19029] bridge68: left promiscuous mode
[  269.992666][T19029] bridge69: left promiscuous mode
[  269.996798][T19029] bridge70: left promiscuous mode
[  269.999138][T19029] bridge71: left promiscuous mode
[  270.001591][T19029] bridge72: left promiscuous mode
[  270.004874][T19029] bridge73: left promiscuous mode
[  270.007341][T19029] bridge74: left promiscuous mode
[  270.009826][T19029] bridge75: left promiscuous mode
[  270.012176][T19029] bridge76: left promiscuous mode
[  270.014994][T19029] bridge77: left promiscuous mode
[  270.017208][T19029] bridge78: left promiscuous mode
[  270.019526][T19029] bridge79: left promiscuous mode
[  270.022352][T19029] bridge80: left promiscuous mode
[  270.025630][T19029] bridge81: left promiscuous mode
[  270.028116][T19029] bridge82: left promiscuous mode
[  270.030688][T19029] bridge83: left promiscuous mode
[  270.034089][T19029] bridge84: left promiscuous mode
[  270.037048][T19029] bridge85: left promiscuous mode
[  270.039530][T19029] bridge86: left promiscuous mode
[  270.041850][T19029] bridge87: left promiscuous mode
[  270.045003][T19029] bridge88: left promiscuous mode
[  270.048630][T19029] veth41: left promiscuous mode
[  270.145290][T19047] lo speed is unknown, defaulting to 1000
[  270.147509][T19047] lo speed is unknown, defaulting to 1000
[  270.904559][T19114] batadv5: entered promiscuous mode
[  270.966247][T19117] tap0: tun_chr_ioctl cmd 1074025677
[  270.971534][T19117] tap0: linktype set to 776
[  271.102358][T19128] bridge89: entered promiscuous mode
[  271.106757][T19128] bridge89: entered allmulticast mode
[  271.159752][T19133] tipc: New replicast peer: 255.255.255.255
[  271.161891][T19133] tipc: Enabled bearer <udp:syz2>, priority 10
[  271.720333][T19178] validate_nla: 4 callbacks suppressed
[  271.720344][T19178] netlink: 'syz.0.3488': attribute type 1 has an invalid length.
[  271.724752][T19178] netlink: 'syz.0.3488': attribute type 2 has an invalid length.
[  272.301899][T19195] netlink: 'syz.2.3494': attribute type 2 has an invalid length.
[  272.402063][T19201] netlink: 'syz.1.3496': attribute type 1 has an invalid length.
[  272.584456][T19227] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.617855][T19224] delete_channel: no stack
[  272.722476][T19239] netlink: 'syz.2.3507': attribute type 1 has an invalid length.
[  272.735462][T19239] 8021q: adding VLAN 0 to HW filter on device bond62
[  272.744690][T19239] veth43: entered promiscuous mode
[  272.747884][T19239] bond62: (slave veth43): Enslaving as a backup interface with a down link
[  272.796375][T19243] pim6reg1: entered promiscuous mode
[  272.798218][T19243] pim6reg1: entered allmulticast mode
[  272.854096][T19259] vlan6: entered promiscuous mode
[  272.856165][T19259] bridge0: entered promiscuous mode
[  272.918350][T19261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.958672][T19263] netlink: 'syz.2.3513': attribute type 10 has an invalid length.
[  272.982466][T19265] netlink: 'syz.1.3514': attribute type 1 has an invalid length.
[  272.996180][T19265] 8021q: adding VLAN 0 to HW filter on device bond53
[  273.011546][T19265] veth19: entered promiscuous mode
[  273.013959][T19275] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.017900][T19265] erspan0: entered allmulticast mode
[  273.055937][T19275] syzkaller0: entered promiscuous mode
[  273.057840][T19275] syzkaller0: entered allmulticast mode
[  273.145043][T19279] lo speed is unknown, defaulting to 1000
[  273.147944][T19279] lo speed is unknown, defaulting to 1000
[  273.303978][T19298] pimreg: left allmulticast mode
[  273.420891][T19308] lo speed is unknown, defaulting to 1000
[  273.435967][T19308] lo speed is unknown, defaulting to 1000
[  273.711972][T19319] __nla_validate_parse: 27 callbacks suppressed
[  273.711989][T19319] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3531'.
[  273.930553][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'.
[  274.087464][T19363] geneve8: entered promiscuous mode
[  274.129722][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[  274.133856][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[  274.231024][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'.
[  274.296622][T19387] netlink: 'syz.2.3545': attribute type 10 has an invalid length.
[  274.303237][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3548'.
[  274.306360][T19386] lo speed is unknown, defaulting to 1000
[  274.308540][T19386] lo speed is unknown, defaulting to 1000
[  274.350383][T19394] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3549'.
[  274.521852][T19410] netlink: 'syz.0.3552': attribute type 11 has an invalid length.
[  274.551944][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'.
[  274.605823][T19421] netlink: 'syz.2.3553': attribute type 1 has an invalid length.
[  274.777376][T19448] bond54: entered promiscuous mode
[  274.779240][T19448] 8021q: adding VLAN 0 to HW filter on device bond54
[  274.785800][T19448] 8021q: adding VLAN 0 to HW filter on device bond54
[  274.788159][T19448] bond54: (slave wireguard0): The slave device specified does not support setting the MAC address
[  274.791514][T19448] bond54: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  274.799409][T19448] bond54: (slave wireguard0): making interface the new active one
[  274.801866][T19448] wireguard0: entered promiscuous mode
[  274.804429][T19448] bond54: (slave wireguard0): Enslaving as an active interface with an up link
[  274.832396][T19457] bridge0: port 1(veth0_to_team) entered blocking state
[  274.834874][T19457] bridge0: port 1(veth0_to_team) entered disabled state
[  274.837255][T19457] veth0_to_team: entered allmulticast mode
[  274.839817][T19457] veth0_to_team: entered promiscuous mode
[  274.847288][T19457] veth0_to_team: left allmulticast mode
[  274.849326][T19457] veth0_to_team: left promiscuous mode
[  274.851451][T19457] bridge0: port 1(veth0_to_team) entered disabled state
[  274.894839][T19461] lo speed is unknown, defaulting to 1000
[  274.897693][T19460] lo speed is unknown, defaulting to 1000
[  274.900084][T19460] lo speed is unknown, defaulting to 1000
[  274.990682][T19461] lo speed is unknown, defaulting to 1000
[  275.022685][T19469] dvmrp0: left allmulticast mode
[  275.076502][T19469] siw: device registration error -23
[  275.083443][T19469] erspan0: left allmulticast mode
[  275.092065][T19469] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  275.097797][    T9] lo speed is unknown, defaulting to 1000
[  275.100320][    T9] syZ0: Port: 1 Link ACTIVE
[  275.102266][    T9] lo speed is unknown, defaulting to 1000
[  275.125255][T19476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3567'.
[  275.193886][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'.
[  275.324632][T19489] gretap0: entered promiscuous mode
[  275.326728][T19489] macvlan6: entered allmulticast mode
[  275.328493][T19489] gretap0: entered allmulticast mode
[  275.331032][T19489] gretap0: left allmulticast mode
[  275.332704][T19489] gretap0: left promiscuous mode
[  275.494821][T19494] macvlan7: entered allmulticast mode
[  275.496949][T19494] veth1_vlan: entered allmulticast mode
[  275.501238][T19494] veth1_vlan: left allmulticast mode
[  275.789288][T19523] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.822445][T19525] team0: Port device vlan0 removed
[  275.831801][T19525] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  275.840307][   T47] lo speed is unknown, defaulting to 1000
[  275.842595][   T47] syz1: Port: 1 Link ACTIVE
[  275.880513][T19527] netem: change failed
[  275.885967][T19527] vlan1: entered allmulticast mode
[  275.887554][T19527] bridge0: entered allmulticast mode
[  275.893826][T19531] : entered promiscuous mode
[  275.915052][T19534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.927381][T19527] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  275.976645][T19536] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  275.980839][T19536] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  276.016829][T19540] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  276.147516][T19552] lo speed is unknown, defaulting to 1000
[  276.149947][T19552] lo speed is unknown, defaulting to 1000
[  276.195539][T19555] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  276.326963][T19572] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  276.346134][T19574] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  276.363650][T13441] lo speed is unknown, defaulting to 1000
[  276.365996][T13441] syZ0: Port: 1 Link DOWN
[  276.369288][T13441] lo speed is unknown, defaulting to 1000
[  276.375506][    T9] lo speed is unknown, defaulting to 1000
[  276.377363][    T9] syZ0: Port: 1 Link ACTIVE
[  276.378929][T13441] lo speed is unknown, defaulting to 1000
[  276.411017][T19583] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  276.863833][T19615] lo speed is unknown, defaulting to 1000
[  276.866253][T19615] lo speed is unknown, defaulting to 1000
[  277.010880][T19628] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.019154][T19628] netem: change failed
[  277.114954][T19632] validate_nla: 9 callbacks suppressed
[  277.114964][T19632] netlink: 'syz.2.3609': attribute type 3 has an invalid length.
[  277.133977][T19634] netlink: 'syz.1.3608': attribute type 9 has an invalid length.
[  277.137129][T19634] netlink: 'syz.1.3608': attribute type 6 has an invalid length.
[  277.214775][T19638] netlink: 'syz.2.3611': attribute type 1 has an invalid length.
[  277.222016][T19642] netlink: 'syz.0.3610': attribute type 7 has an invalid length.
[  277.225519][T19642] netlink: 'syz.0.3610': attribute type 8 has an invalid length.
[  277.231164][T19638] 8021q: adding VLAN 0 to HW filter on device bond64
[  277.235242][T19642] netlink: 'syz.0.3610': attribute type 30 has an invalid length.
[  277.247536][ T9573] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.250036][ T9573] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.259524][ T9573] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.261679][T19645] sctp: [Deprecated]: syz.2.3612 (pid 19645) Use of struct sctp_assoc_value in delayed_ack socket option.
[  277.261679][T19645] Use struct sctp_sack_info instead
[  277.262061][ T9573] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.527284][T19667] syzkaller1: entered allmulticast mode
[  277.550969][T19672] netlink: 'syz.0.3621': attribute type 1 has an invalid length.
[  277.566216][T19672] 8021q: adding VLAN 0 to HW filter on device bond123
[  277.587998][T19667] syzkaller0: mtu less than device minimum
[  277.622525][T19682] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.839307][T19699] netlink: 'syz.1.3627': attribute type 21 has an invalid length.
[  277.879493][T19706] netlink: 'syz.0.3629': attribute type 9 has an invalid length.
[  277.921225][T19712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.925018][T19711] IPVS: stopping backup sync thread 19712 ...
[  277.998920][T19720] 8021q: adding VLAN 0 to HW filter on device bond124
[  278.012912][T19720] bond124: (slave veth23): Enslaving as an active interface with a down link
[  278.023561][T19720] macvlan7: entered promiscuous mode
[  278.025967][T19720] macvlan7: entered allmulticast mode
[  278.028371][T19720] bond124: entered promiscuous mode
[  278.030289][T19720] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  278.032804][T19720] bond124: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  278.038848][T19720] bond124: left promiscuous mode
[  278.152906][   T24] lo speed is unknown, defaulting to 1000
[  278.155201][   T24] syz1: Port: 1 Link DOWN
[  278.158216][   T24] lo speed is unknown, defaulting to 1000
[  278.160028][   T24] syz1: Port: 1 Link ACTIVE
[  278.192631][T19738] tipc: Resetting bearer <eth:syzkaller0>
[  278.198442][   T47] lo speed is unknown, defaulting to 1000
[  278.198528][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.200714][   T47] syz1: Port: 1 Link DOWN
[  278.204066][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.208024][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.210712][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.231523][T19740] rdma_rxe: rxe_newlink: failed to add lo
[  278.328832][T19748] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  278.335007][    T9] lo speed is unknown, defaulting to 1000
[  278.336908][    T9] syz1: Port: 1 Link ACTIVE
[  278.385036][T19747] batadv_slave_0: entered promiscuous mode
[  278.592728][T19759] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode
[  278.601872][T19759] bond124: (slave veth23): Releasing active interface
[  278.609576][T19759] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  278.613421][T19759] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.833311][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  281.766466][T19790] __nla_validate_parse: 37 callbacks suppressed
[  281.766477][T19790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3656'.
[  281.789966][T19790] bond65: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  281.796783][T19790] bond65: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  281.801538][T19790] bond65: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  281.817854][T19779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3652'.
[  281.939600][T19816] netlink: 884 bytes leftover after parsing attributes in process `syz.1.3661'.
[  281.970502][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3663'.
[  281.972716][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3662'.
[  282.014353][T19827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3665'.
[  282.034631][T19830] vlan6: entered promiscuous mode
[  282.068153][T19837] tap0: tun_chr_ioctl cmd 1074025677
[  282.069855][T19837] tap0: linktype set to 805
[  282.128703][T19840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'.
[  282.133472][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'.
[  282.142752][T19842] lo speed is unknown, defaulting to 1000
[  282.146241][T19842] lo speed is unknown, defaulting to 1000
[  282.225928][T19849] validate_nla: 11 callbacks suppressed
[  282.225944][T19849] netlink: 'syz.1.3672': attribute type 13 has an invalid length.
[  282.231271][T19849] netlink: 'syz.1.3672': attribute type 17 has an invalid length.
[  282.257433][T19849] gretap0: refused to change device tx_queue_len
[  282.260132][T19849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  282.291411][T19854] netlink: 'syz.2.3673': attribute type 1 has an invalid length.
[  282.327962][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3670'.
[  282.339278][T19864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3675'.
[  282.345172][T19862] siw: device registration error -23
[  282.347055][T19864] netlink: 'syz.2.3675': attribute type 30 has an invalid length.
[  282.507212][T19883] vlan1: entered allmulticast mode
[  282.509491][T19883] bond0: entered allmulticast mode
[  282.576855][T19891] netlink: 'syz.1.3684': attribute type 1 has an invalid length.
[  282.591333][T19891] bond56: entered promiscuous mode
[  282.593327][T19891] 8021q: adding VLAN 0 to HW filter on device bond56
[  282.624595][T19891] 8021q: adding VLAN 0 to HW filter on device bond56
[  282.627094][T19891] bond56: (slave wireguard1): The slave device specified does not support setting the MAC address
[  282.630406][T19891] bond56: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  282.635606][T19891] bond56: (slave wireguard1): making interface the new active one
[  282.638383][T19891] wireguard1: entered promiscuous mode
[  282.640997][T19891] bond56: (slave wireguard1): Enslaving as an active interface with an up link
[  282.683861][T19900] netlink: 'syz.1.3685': attribute type 1 has an invalid length.
[  282.693850][T19900] 8021q: adding VLAN 0 to HW filter on device bond57
[  282.873236][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 180 seconds
[  282.906653][T19922] IPVS: Scheduler module ip_vs_ not found
[  282.909692][T19922] IPVS: length: 154 != 8
[  282.911742][T19922] netlink: 'syz.1.3689': attribute type 1 has an invalid length.
[  283.007406][T19929] netlink: 'syz.1.3691': attribute type 8 has an invalid length.
[  283.041587][T19931] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  283.119380][T19941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.321836][T19956] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.359161][T19962] netlink: 'syz.1.3702': attribute type 1 has an invalid length.
[  283.387965][T19962] 8021q: adding VLAN 0 to HW filter on device bond58
[  283.419270][T19962] veth23: entered promiscuous mode
[  283.429863][T19962] bond58: (slave veth23): Enslaving as a backup interface with a down link
[  283.465454][T19969] netlink: 'syz.2.3704': attribute type 10 has an invalid length.
[  283.499376][T19984] vlan4: entered promiscuous mode
[  283.802239][T20015] lo speed is unknown, defaulting to 1000
[  283.806838][T20015] lo speed is unknown, defaulting to 1000
[  283.879071][T20022] pim6reg: entered allmulticast mode
[  283.890410][T20023] pim6reg: left allmulticast mode
[  284.215771][T20034] tipc: Disabling bearer <eth:team0>
[  284.248488][T20039] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  284.250854][T20039] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  284.281703][T20041] pim6reg1: entered promiscuous mode
[  284.285247][T20041] pim6reg1: entered allmulticast mode
[  284.439298][T20050] sctp: [Deprecated]: syz.2.3726 (pid 20050) Use of int in max_burst socket option deprecated.
[  284.439298][T20050] Use struct sctp_assoc_value instead
[  284.453228][T20055] veth25: entered promiscuous mode
[  284.527730][T20061] bridge90: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  284.590984][T20061] batadv_slave_0: entered promiscuous mode
[  284.639505][T20071] 8021q: adding VLAN 0 to HW filter on device bond125
[  284.644840][T20069] lo speed is unknown, defaulting to 1000
[  284.647218][T20069] lo speed is unknown, defaulting to 1000
[  284.680861][T20076] 8021q: VLANs not supported on 
[  284.819396][T20069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  284.827691][T20069] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.892475][T20094] 8021q: adding VLAN 0 to HW filter on device bond66
[  284.901430][T20095] 8021q: adding VLAN 0 to HW filter on device bond66
[  284.904511][T20095] bond66: (slave vxcan1): The slave device specified does not support setting the MAC address
[  284.914603][T20095] bond66: (slave vxcan1): Error -95 calling set_mac_address
[  285.068438][T20106] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode
[  285.071207][T20106] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  285.148648][T20117] dvmrp0: entered allmulticast mode
[  285.338514][T20139] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  285.356514][T20145] erspan0: left allmulticast mode
[  285.360789][T20145] tipc: Resetting bearer <ib:ip6gre0>
[  285.362652][T20145] tipc: Resetting bearer <ib:ip6gre0>
[  285.372240][T20145] 8021q: adding VLAN 0 to HW filter on device 
[  285.377718][T20145] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  285.441064][T20139] bond51: (slave geneve7): Releasing active interface
[  285.449125][T20139] bond54: (slave wireguard0): Releasing backup interface
[  285.451510][T20139] wireguard0: left promiscuous mode
[  285.460254][T20139] bond56: (slave wireguard1): Releasing backup interface
[  285.462556][T20139] wireguard1: left promiscuous mode
[  285.473348][T20139] bond58: (slave veth23): Releasing backup interface
[  285.482608][T20149] tipc: Resetting bearer <ib:ip6gre0>
[  285.500309][T20149] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  285.570945][T20156] lo speed is unknown, defaulting to 1000
[  285.575270][T20156] lo speed is unknown, defaulting to 1000
[  285.977960][T20177] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  286.020731][T20182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.080340][    T9] lo speed is unknown, defaulting to 1000
[  286.082131][    T9] syZ0: Port: 1 Link DOWN
[  286.086725][    T9] lo speed is unknown, defaulting to 1000
[  286.104746][T20194] syzkaller0: Caught tx_queue_len zero misconfig
[  286.162152][T20205] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.199542][T20208] 8021q: adding VLAN 0 to HW filter on device bond59
[  286.209975][T20208] vlan3: entered promiscuous mode
[  286.211790][T20208] bond59: entered promiscuous mode
[  286.213950][T20208] vlan3: entered allmulticast mode
[  286.215932][T20208] bond59: entered allmulticast mode
[  286.744478][T20241] 8021q: adding VLAN 0 to HW filter on device bond60
[  286.747165][T20243] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  286.779998][T20248] __nla_validate_parse: 51 callbacks suppressed
[  286.780010][T20248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3772'.
[  286.790553][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'.
[  287.042400][T20258] lo speed is unknown, defaulting to 1000
[  287.054265][T20258] lo speed is unknown, defaulting to 1000
[  287.057702][T20256] lo speed is unknown, defaulting to 1000
[  287.125729][T20256] lo speed is unknown, defaulting to 1000
[  287.257165][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3776'.
[  287.260645][T20263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3776'.
[  287.362539][T20269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3777'.
[  287.383667][T20269] validate_nla: 17 callbacks suppressed
[  287.383686][T20269] netlink: 'syz.0.3777': attribute type 7 has an invalid length.
[  287.388943][T20269] netlink: 'syz.0.3777': attribute type 8 has an invalid length.
[  287.392162][T20269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'.
[  287.446509][T20198] Set syz1 is full, maxelem 65536 reached
[  287.515649][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3780'.
[  287.549301][T20276] bond126: entered promiscuous mode
[  287.551659][T20276] 8021q: adding VLAN 0 to HW filter on device bond126
[  287.557349][T20276] bond126 (unregistering): Released all slaves
[  287.690317][T20298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3785'.
[  287.694443][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3782'.
[  287.705895][T20298] bond0: (slave vlan6): Opening slave failed
[  287.727139][T20296] netlink: 'syz.1.3784': attribute type 1 has an invalid length.
[  287.746271][T20296] 8021q: adding VLAN 0 to HW filter on device bond61
[  287.806878][T20301] netlink: 'syz.2.3786': attribute type 11 has an invalid length.
[  287.811210][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'.
[  287.888659][T20313] siw: device registration error -23
[  287.902063][T20315] netlink: 'syz.2.3792': attribute type 1 has an invalid length.
[  287.921650][T20315] 8021q: adding VLAN 0 to HW filter on device bond67
[  287.935456][T20315] vlan4: entered promiscuous mode
[  287.937402][T20315] bond67: entered promiscuous mode
[  287.939733][T20315] vlan4: entered allmulticast mode
[  287.941608][T20315] bond67: entered allmulticast mode
[  288.028292][T20329] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  288.072449][T20332] netlink: 'syz.2.3797': attribute type 1 has an invalid length.
[  288.099996][T20332] 8021q: adding VLAN 0 to HW filter on device bond68
[  289.132710][T20354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.217738][T20369] netlink: 'syz.1.3807': attribute type 1 has an invalid length.
[  289.231563][T20373] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  289.239990][T20369] bond62 (unregistering): Released all slaves
[  289.398520][T20386] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  289.587771][T20397] netlink: 'syz.2.3815': attribute type 6 has an invalid length.
[  289.592116][T20397] netlink: 'syz.2.3815': attribute type 12 has an invalid length.
[  289.627031][T20400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.630540][T20400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.821560][T20415] 8021q: adding VLAN 0 to HW filter on device bond69
[  290.077245][T20423] tipc: Resetting bearer <ib:ip6gre0>
[  290.079537][T20423] tipc: Resetting bearer <ib:ip6gre0>
[  290.108020][T20425] pim6reg1: entered promiscuous mode
[  290.110262][T20425] pim6reg1: entered allmulticast mode
[  290.202565][T20427] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.278584][T20433] lo speed is unknown, defaulting to 1000
[  290.281585][T20433] lo speed is unknown, defaulting to 1000
[  290.380252][T20441] 8021q: adding VLAN 0 to HW filter on device bond126
[  290.578322][T20464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.726155][T20479] lo speed is unknown, defaulting to 1000
[  290.732769][T20479] lo speed is unknown, defaulting to 1000
[  290.900864][T20497] openvswitch: netlink: Flow key attr not present in new flow.
[  290.917299][T20497] 8021q: VLANs not supported on 60X
[  290.980535][T20505] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  291.255473][T20536] 8021q: adding VLAN 0 to HW filter on device bond62
[  291.266288][T20536] bond62: (slave bridge37): making interface the new active one
[  291.269827][T20536] bond62: (slave bridge37): Enslaving as an active interface with an up link
[  291.308940][T20533] siw: device registration error -23
[  291.407561][T20549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.409861][T20549] IPv6: NLM_F_CREATE should be set when creating new route
[  291.412328][T20549] IPv6: NLM_F_CREATE should be set when creating new route
[  291.414584][T20549] IPv6: NLM_F_CREATE should be set when creating new route
[  291.470696][T20553] veth27: entered allmulticast mode
[  291.495495][T20541] pim6reg1: entered allmulticast mode
[  291.570218][T20561] lo speed is unknown, defaulting to 1000
[  291.573710][T20561] lo speed is unknown, defaulting to 1000
[  291.582542][T20565] syzkaller1: entered promiscuous mode
[  291.588178][T20565] syzkaller1: entered allmulticast mode
[  291.598783][T20568] 8021q: adding VLAN 0 to HW filter on device bond70
[  291.616635][T20568] veth47: entered promiscuous mode
[  291.620115][T20568] bond70: (slave veth47): Enslaving as an active interface with a down link
[  291.659870][T20572] lo speed is unknown, defaulting to 1000
[  291.667834][T20572] lo speed is unknown, defaulting to 1000
[  291.761280][T20578] bridge34: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  291.809978][T20584] syzkaller1: entered promiscuous mode
[  291.812160][T20584] syzkaller1: entered allmulticast mode
[  291.817947][T20584] bridge0: port 1(erspan0) entered blocking state
[  291.820570][T20584] bridge0: port 1(erspan0) entered disabled state
[  291.823538][T20584] erspan0: entered allmulticast mode
[  291.828817][T20584] erspan0: left allmulticast mode
[  291.934238][T20572] __nla_validate_parse: 28 callbacks suppressed
[  291.934276][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'.
[  291.944178][T20572] macsec0: entered promiscuous mode
[  291.945740][T20572] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  291.948971][T20572] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  291.955437][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3869'.
[  291.991665][T20595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.004761][T20595] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3870'.
[  292.088515][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'.
[  292.267810][T20622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.272301][T20616] smc: net device bond0 applied user defined pnetid SYZ2
[  292.275541][T20616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3876'.
[  292.279044][T20622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3877'.
[  292.282785][T20622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3877'.
[  292.373043][T20648] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3879'.
[  292.630572][T20678] validate_nla: 9 callbacks suppressed
[  292.630607][T20678] netlink: 'syz.0.3890': attribute type 16 has an invalid length.
[  292.637174][T20678] netlink: 'syz.0.3890': attribute type 17 has an invalid length.
[  292.652361][T20678] tipc: Resetting bearer <ib:ip6gre0>
[  292.661330][T20678] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  292.680122][T20684] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3891'.
[  292.795517][T20702] netlink: 'syz.1.3897': attribute type 1 has an invalid length.
[  292.807547][T20702] 8021q: adding VLAN 0 to HW filter on device bond63
[  292.810882][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'.
[  292.829833][T20702] 8021q: adding VLAN 0 to HW filter on device bond63
[  292.836319][T20702] bond63: (slave vcan0): The slave device specified does not support setting the MAC address
[  292.842792][T20702] bond63: (slave vcan0): Error -95 calling set_mac_address
[  293.001768][T20726] netlink: 'syz.1.3902': attribute type 1 has an invalid length.
[  293.071965][T20736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.078819][T20736] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.081590][T20736] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  293.084756][T20736] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  293.129020][T20745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.138127][T20745] netlink: 'syz.1.3907': attribute type 1 has an invalid length.
[  293.202542][T20751] netlink: 'syz.1.3909': attribute type 10 has an invalid length.
[  293.203123][T20752] netlink: 'syz.1.3909': attribute type 10 has an invalid length.
[  293.394410][T20763] syzkaller1: entered promiscuous mode
[  293.396253][T20763] syzkaller1: entered allmulticast mode
[  293.580918][T20771] syzkaller1: entered promiscuous mode
[  293.583457][T20771] syzkaller1: entered allmulticast mode
[  293.617211][T20771] netlink: 'syz.0.3916': attribute type 1 has an invalid length.
[  293.631735][T20771] 8021q: adding VLAN 0 to HW filter on device bond127
[  293.665752][T20774] syzkaller1: entered promiscuous mode
[  293.668281][T20774] syzkaller1: entered allmulticast mode
[  293.786921][T20776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.829561][T20780] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  294.028277][T20795] 8021q: adding VLAN 0 to HW filter on device bond14
[  294.037201][T20795] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  294.041296][T20795] bond14: (slave macvlan7): Enslaving as a backup interface with a down link
[  294.052802][T20795] bond14: (slave macvlan7): Releasing backup interface
[  294.085313][T20801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.344798][T20840] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  294.520017][T20855] sctp: [Deprecated]: syz.2.3939 (pid 20855) Use of int in max_burst socket option deprecated.
[  294.520017][T20855] Use struct sctp_assoc_value instead
[  295.148281][T20880] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.386315][T20905] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  295.481479][T20923] tipc: Resetting bearer <ib:ip6gre0>
[  295.488728][T20923] tipc: Resetting bearer <eth:syzkaller0>
[  295.519863][ T5872] lo speed is unknown, defaulting to 1000
[  295.526021][ T5872] syz1: Port: 1 Link DOWN
[  295.886052][T20940] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  295.888552][T20940] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  296.118784][T20940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.212381][T20940] : renamed from pim6reg1
[  296.258450][T20947] netlink: 'syz.2.3966': attribute type 11 has an invalid length.
[  296.264653][T20947] bond54: (slave veth35): Releasing active interface
[  296.269025][T20947] bond56: (slave veth37): Releasing backup interface
[  296.271569][T20947] bond56: (slave veth37): the permanent HWaddr of slave - 9a:c6:3a:20:0b:09 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  296.285869][T20947] bond56: (slave veth39): Releasing backup interface
[  296.291456][T20947] bond0: (slave bond58): Releasing backup interface
[  296.296250][T20951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  296.296602][T20947] bond62: (slave veth43): Releasing backup interface
[  296.299353][T20951] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  296.306539][T20947] bond70: (slave veth47): Releasing active interface
[  296.321538][T20947] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  296.329078][T20952] lo speed is unknown, defaulting to 1000
[  296.331911][T20952] lo speed is unknown, defaulting to 1000
[  296.368687][T20958] lo speed is unknown, defaulting to 1000
[  296.415330][T20959] netlink: 'syz.2.3968': attribute type 1 has an invalid length.
[  296.419326][T20958] lo speed is unknown, defaulting to 1000
[  296.436772][T20959] 8021q: adding VLAN 0 to HW filter on device bond71
[  296.456043][T20959] vlan6: entered allmulticast mode
[  296.459187][T20959] bond71: (slave vlan6): Opening slave failed
[  296.499329][T20961] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  296.817764][T20982] bond0: entered promiscuous mode
[  296.820711][T20982] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  296.832509][T20982] hsr0: entered promiscuous mode
[  296.842596][T20985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.853300][T20986] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  296.856133][T20986] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  296.919559][T20995] lo speed is unknown, defaulting to 1000
[  296.922510][T20995] lo speed is unknown, defaulting to 1000
[  296.958330][T20999] __nla_validate_parse: 24 callbacks suppressed
[  296.958348][T20999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3978'.
[  297.059635][T21006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.182213][T21012] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3980'.
[  297.339127][T21021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3982'.
[  297.342632][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  297.424562][T21027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3984'.
[  297.428824][T21028] pim6reg1: entered promiscuous mode
[  297.430985][T21028] pim6reg1: entered allmulticast mode
[  297.436686][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'.
[  297.441967][T21027] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.560195][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3987'.
[  297.613894][T21038] bond64: (slave ip6gretap5): Enslaving as a backup interface with an up link
[  297.619426][ T5713] bond64: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  297.623586][T21038] 8021q: adding VLAN 0 to HW filter on device bond64
[  297.627417][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3988'.
[  297.630203][T21038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3988'.
[  297.639413][T21038] bond62: (slave bridge37): Releasing active interface
[  297.645644][T21038] bond64: (slave ip6gretap5): Removing an active aggregator
[  297.648928][T21038] bond64: (slave ip6gretap5): Releasing backup interface
[  297.678690][T21041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3989'.
[  297.721332][T21044] validate_nla: 4 callbacks suppressed
[  297.721344][T21044] netlink: 'syz.1.3990': attribute type 1 has an invalid length.
[  297.726009][T21044] netlink: 'syz.1.3990': attribute type 1 has an invalid length.
[  297.733960][T21044] vlan2: entered promiscuous mode
[  297.949095][T21059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.289025][T21092] netlink: 'syz.0.4004': attribute type 1 has an invalid length.
[  298.322813][T21092] 8021q: adding VLAN 0 to HW filter on device bond128
[  298.336860][T21092] veth29: entered promiscuous mode
[  298.348278][T21092] bond128: (slave veth29): Enslaving as a backup interface with a down link
[  298.379135][T21099] netlink: 'syz.2.4006': attribute type 10 has an invalid length.
[  298.412249][T21102] netlink: 'syz.0.4008': attribute type 4 has an invalid length.
[  298.431413][T21104] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.448381][T21104] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  298.498961][T21112] netlink: 'syz.2.4009': attribute type 13 has an invalid length.
[  298.501717][T21112] netlink: 'syz.2.4009': attribute type 17 has an invalid length.
[  298.524184][T21112] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  298.548265][T21112] lo speed is unknown, defaulting to 1000
[  298.551410][T21112] lo speed is unknown, defaulting to 1000
[  298.555404][T21114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.558176][T21114] IPv6: NLM_F_CREATE should be set when creating new route
[  298.560701][T21114] IPv6: NLM_F_CREATE should be set when creating new route
[  298.567396][T21114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.774886][T21119] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.916267][T21128] bpq0: entered promiscuous mode
[  298.959527][T21135] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.013175][T21132] lo speed is unknown, defaulting to 1000
[  299.016078][T21132] lo speed is unknown, defaulting to 1000
[  299.107020][T21143] netlink: 'syz.1.4020': attribute type 4 has an invalid length.
[  299.167475][T21143] batadv_slave_0: left promiscuous mode
[  299.170101][T21143] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  299.172387][T21143] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  299.187433][T21143] veth19: left promiscuous mode
[  299.189093][T21143] bond54: left promiscuous mode
[  299.190902][T21143] vlan1: left allmulticast mode
[  299.192362][T21143] bond0: left allmulticast mode
[  299.195529][T21143] bond56: left promiscuous mode
[  299.197365][T21143] veth23: left promiscuous mode
[  299.199496][T21143] vlan3: left promiscuous mode
[  299.201433][T21143] bond59: left promiscuous mode
[  299.203654][T21143] vlan3: left allmulticast mode
[  299.205359][T21143] bond59: left allmulticast mode
[  299.317681][T21152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.336096][T21152] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  299.338686][T21152] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  299.401242][T21158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.550419][T21173] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.638436][T21193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.674897][T21193] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  299.730157][T21200] pim6reg: entered allmulticast mode
[  299.750356][T21199] pim6reg: left allmulticast mode
[  299.867739][T21202] netlink: 'syz.0.4037': attribute type 5 has an invalid length.
[  299.887846][T21205] dvmrp1: tun_chr_ioctl cmd 1074025677
[  299.889814][T21205] dvmrp1: linktype set to 769
[  300.022263][T21214] macvtap0: entered promiscuous mode
[  300.027728][T21214] !: entered promiscuous mode
[  300.029728][T21214] macvtap0: entered allmulticast mode
[  300.170186][T21231] netlink: 'syz.0.4046': attribute type 1 has an invalid length.
[  300.223883][T21235] 8021q: adding VLAN 0 to HW filter on device bond129
[  300.229885][T21236] 8021q: adding VLAN 0 to HW filter on device bond129
[  300.232305][T21236] bond129: (slave vcan0): The slave device specified does not support setting the MAC address
[  300.236725][T21236] bond129: (slave vcan0): Error -95 calling set_mac_address
[  300.243596][T21240] bond129: (slave vcan0): The slave device specified does not support setting the MAC address
[  300.247110][T21240] bond129: (slave vcan0): Error -95 calling set_mac_address
[  300.560135][T21272] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  300.573552][T21274] bond130 (unregistering): Released all slaves
[  300.640561][T21285] dvmrp8: entered allmulticast mode
[  300.848292][T21310] lo speed is unknown, defaulting to 1000
[  300.851432][T21310] lo speed is unknown, defaulting to 1000
[  301.199203][T21347] 8021q: adding VLAN 0 to HW filter on device bond130
[  301.407837][T21361] 8021q: adding VLAN 0 to HW filter on device 
[  301.412438][T21361] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  301.429081][ T5906] lo speed is unknown, defaulting to 1000
[  301.431299][ T5906] syz1: Port: 1 Link ACTIVE
[  301.454490][T21366] openvswitch: netlink: Flow key attribute not present in set flow.
[  301.458609][T21366] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.705075][T21385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.707588][T21385] IPv6: NLM_F_CREATE should be set when creating new route
[  302.002051][T21399] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.005327][T21399] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.247030][T21404] 8021q: adding VLAN 0 to HW filter on device bond15
[  302.258520][T21405] bond15: (slave macvlan4): Enslaving as a backup interface with a down link
[  302.263806][T21405] bond15: (slave macvlan4): Releasing backup interface
[  302.376814][T21413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.382302][T21413] __nla_validate_parse: 32 callbacks suppressed
[  302.382311][T21413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4092'.
[  302.451292][T21417] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4093'.
[  302.680823][T21433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.727508][T21437] bond72 (unregistering): Released all slaves
[  302.822014][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4102'.
[  302.926898][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4103'.
[  303.145122][T21465] validate_nla: 8 callbacks suppressed
[  303.145136][T21465] netlink: 'syz.2.4106': attribute type 4 has an invalid length.
[  303.150137][T21465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4106'.
[  303.190456][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'.
[  303.205092][T21467] netlink: 'syz.0.4107': attribute type 30 has an invalid length.
[  303.209201][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'.
[  303.212590][T21467] netlink: 'syz.0.4107': attribute type 30 has an invalid length.
[  303.227353][T21473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4108'.
[  303.231382][T21473] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  303.267765][T21473] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4108'.
[  303.418474][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'.
[  303.425083][T21483] tipc: Disabling bearer <eth:macvtap0>
[  304.235609][T21510] netlink: 'syz.0.4118': attribute type 1 has an invalid length.
[  304.256625][T21510] 8021q: adding VLAN 0 to HW filter on device bond131
[  304.262006][T21513] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.268383][T21513] bpq0: left promiscuous mode
[  304.345498][T21524] netlink: 'syz.0.4122': attribute type 5 has an invalid length.
[  304.412044][T21532] netlink: 'syz.1.4124': attribute type 4 has an invalid length.
[  304.565236][T21545] netlink: 'syz.1.4127': attribute type 1 has an invalid length.
[  304.570666][T21552] netlink: 'syz.2.4130': attribute type 1 has an invalid length.
[  304.942734][T21578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.974251][T21580] dvmrp8: entered allmulticast mode
[  305.182129][T21590] netlink: 'syz.2.4139': attribute type 7 has an invalid length.
[  305.281894][T21594] netlink: 'syz.2.4140': attribute type 2 has an invalid length.
[  305.682202][T21612] IPVS: length: 88 != 24
[  305.742459][T21616] syzkaller1: entered promiscuous mode
[  305.755203][T21616] syzkaller1: entered allmulticast mode
[  305.790766][T21619] lo speed is unknown, defaulting to 1000
[  305.794073][T21619] lo speed is unknown, defaulting to 1000
[  305.969531][T21630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.153107][T21640] nbd0: detected capacity change from 0 to 127
[  306.162520][   T56] block nbd0: Receive control failed (result -104)
[  306.419422][T21662] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.552902][T21679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.600588][T21682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.838973][T21692] 8021q: adding VLAN 0 to HW filter on device bond65
[  307.022059][T21707] 8021q: adding VLAN 0 to HW filter on device bond132
[  307.234057][T21716] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  307.308554][T21726] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  307.384619][T21736] bond74 (unregistering): Released all slaves
[  307.389505][T21740] __nla_validate_parse: 33 callbacks suppressed
[  307.389518][T21740] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4181'.
[  307.631725][T21761] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4186'.
[  307.636963][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4186'.
[  307.640658][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4186'.
[  307.659652][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'.
[  307.679436][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'.
[  307.679778][T21768] bond74 (unregistering): Released all slaves
[  307.704132][T21772] vlan2: entered allmulticast mode
[  307.706389][T21772] bond67: entered allmulticast mode
[  307.741592][T21775] pim6reg: entered allmulticast mode
[  307.745886][T21775] pim6reg: left allmulticast mode
[  307.757434][T21772] syzkaller1: entered promiscuous mode
[  307.759762][T21772] syzkaller1: entered allmulticast mode
[  307.949522][T21799] bridge_slave_0: entered promiscuous mode
[  307.961273][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4195'.
[  308.069316][T21809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4199'.
[  308.131084][T21817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4203'.
[  308.134013][T21818] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  308.160180][T21820] validate_nla: 14 callbacks suppressed
[  308.160192][T21820] netlink: 'syz.1.4204': attribute type 22 has an invalid length.
[  308.166230][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'.
[  308.170126][T21820] netlink: 'syz.1.4204': attribute type 22 has an invalid length.
[  308.282632][T21832] 8021q: adding VLAN 0 to HW filter on device bond14
[  308.287535][T21833] bond14: option mode: unable to set because the bond device is up
[  308.306608][T21832] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  308.310831][T21832] bond14: (slave macvlan7): Enslaving as a backup interface with a down link
[  308.322887][T21832] bond14: (slave macvlan7): Releasing backup interface
[  308.469914][T21847] lo speed is unknown, defaulting to 1000
[  308.472416][T21847] lo speed is unknown, defaulting to 1000
[  308.485589][T21846] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  308.568638][T21849] veth31: entered promiscuous mode
[  308.646243][T21857] sit0: entered promiscuous mode
[  308.654063][T21857] netlink: 'syz.0.4214': attribute type 1 has an invalid length.
[  308.744750][T21865] netlink: 'syz.1.4215': attribute type 7 has an invalid length.
[  309.236621][T21880] netlink: 'syz.2.4220': attribute type 4 has an invalid length.
[  309.381127][T21888] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  309.383707][T21888] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  309.449475][T21897] mac80211_hwsim hwsim4 wlan1 (unregistering): left promiscuous mode
[  309.513896][ T1117] block nbd0: Connection timed out, retrying (0/1 alive)
[  309.516209][ T1117] block nbd0: Connection timed out, retrying (0/1 alive)
[  309.518434][ T1117] block nbd0: Connection timed out, retrying (0/1 alive)
[  309.521120][ T1117] block nbd0: Connection timed out, retrying (0/1 alive)
[  309.524015][ T1117] block nbd0: Dead connection, failed to find a fallback
[  309.526191][ T1117] block nbd0: shutting down sockets
[  309.527687][ T1117] blk_print_req_error: 138 callbacks suppressed
[  309.527696][ T1117] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.533248][ T1117] buffer_io_error: 138 callbacks suppressed
[  309.533260][ T1117] Buffer I/O error on dev nbd0, logical block 3, async page read
[  309.538329][ T1117] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.541083][ T1117] Buffer I/O error on dev nbd0, logical block 2, async page read
[  309.544029][ T1117] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.547017][ T1117] Buffer I/O error on dev nbd0, logical block 1, async page read
[  309.549751][ T1117] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.553321][ T1117] Buffer I/O error on dev nbd0, logical block 0, async page read
[  309.556618][ T6899] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.560032][ T6899] Buffer I/O error on dev nbd0, logical block 0, async page read
[  309.563194][ T6899] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.567121][ T6899] Buffer I/O error on dev nbd0, logical block 1, async page read
[  309.570115][ T6899] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.573675][ T6899] Buffer I/O error on dev nbd0, logical block 2, async page read
[  309.576703][ T6899] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.580145][ T6899] Buffer I/O error on dev nbd0, logical block 3, async page read
[  309.583406][ T6899] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.586732][ T6899] Buffer I/O error on dev nbd0, logical block 0, async page read
[  309.589561][ T6899] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  309.592595][ T6899] Buffer I/O error on dev nbd0, logical block 1, async page read
[  309.596392][ T6899] ldm_validate_partition_table(): Disk read failed.
[  309.599490][ T6899] Dev nbd0: unable to read RDB block 0
[  309.601889][ T6899]  nbd0: unable to read partition table
[  309.608284][ T6899] ldm_validate_partition_table(): Disk read failed.
[  309.610951][ T6899] Dev nbd0: unable to read RDB block 0
[  309.613729][ T6899]  nbd0: unable to read partition table
[  309.717233][T21905] bond133 (unregistering): Released all slaves
[  309.949181][T21923] netlink: 'syz.2.4235': attribute type 13 has an invalid length.
[  309.952354][T21923] netlink: 'syz.2.4235': attribute type 17 has an invalid length.
[  309.960438][T21923] gretap0: refused to change device tx_queue_len
[  309.962639][T21923] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  310.138612][T21941] bond68 (unregistering): Released all slaves
[  310.346803][T21961] netlink: 'syz.1.4241': attribute type 2 has an invalid length.
[  310.487301][T21966] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  310.491527][T21966] CPU: 0 UID: 0 PID: 21966 Comm: syz.1.4242 Not tainted syzkaller #0 PREEMPT(full) 
[  310.491555][T21966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.491562][T21966] Call Trace:
[  310.491566][T21966]  <TASK>
[  310.491572][T21966]  dump_stack_lvl+0x189/0x250
[  310.491588][T21966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.491598][T21966]  ? __pfx__printk+0x10/0x10
[  310.491609][T21966]  ? kernfs_root+0x1c/0x230
[  310.491621][T21966]  ? kernfs_path_from_node+0x2f/0x290
[  310.491630][T21966]  ? kernfs_path_from_node+0x250/0x290
[  310.491638][T21966]  ? kernfs_path_from_node+0x2f/0x290
[  310.491647][T21966]  sysfs_warn_dup+0x8e/0xa0
[  310.491656][T21966]  sysfs_do_create_link_sd+0xc0/0x110
[  310.491666][T21966]  device_add_class_symlinks+0x1cf/0x240
[  310.491676][T21966]  device_add+0x475/0xb50
[  310.491685][T21966]  wiphy_register+0x1ba6/0x28d0
[  310.491701][T21966]  ? __pfx_wiphy_register+0x10/0x10
[  310.491712][T21966]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  310.491723][T21966]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  310.491733][T21966]  ieee80211_register_hw+0x3425/0x4080
[  310.491747][T21966]  ? ieee80211_register_hw+0x14e1/0x4080
[  310.491758][T21966]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  310.491767][T21966]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  310.491780][T21966]  ? __hrtimer_setup+0x187/0x210
[  310.491788][T21966]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  310.491801][T21966]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  310.491817][T21966]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  310.491827][T21966]  ? trace_kmalloc+0x1f/0xd0
[  310.491838][T21966]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  310.491870][T21966]  ? kstrndup+0xbf/0x160
[  310.491883][T21966]  hwsim_new_radio_nl+0xea4/0x1b10
[  310.491894][T21966]  ? __pfx___nla_validate_parse+0x10/0x10
[  310.491910][T21966]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  310.491923][T21966]  ? __nla_parse+0x40/0x60
[  310.491935][T21966]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  310.491947][T21966]  genl_family_rcv_msg_doit+0x215/0x300
[  310.491958][T21966]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  310.491974][T21966]  ? bpf_lsm_capable+0x9/0x20
[  310.491992][T21966]  ? security_capable+0x7e/0x2e0
[  310.492011][T21966]  genl_rcv_msg+0x60e/0x790
[  310.492029][T21966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.492043][T21966]  ? __kasan_slab_alloc+0x6c/0x80
[  310.492062][T21966]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  310.492078][T21966]  ? __netlink_lookup+0xbd/0x810
[  310.492092][T21966]  ? rcu_is_watching+0x15/0xb0
[  310.492106][T21966]  netlink_rcv_skb+0x208/0x470
[  310.492119][T21966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.492129][T21966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  310.492143][T21966]  ? lock_release+0x4b/0x3e0
[  310.492155][T21966]  ? down_read+0x1ad/0x2e0
[  310.492164][T21966]  genl_rcv+0x28/0x40
[  310.492172][T21966]  netlink_unicast+0x82f/0x9e0
[  310.492184][T21966]  ? __pfx_netlink_unicast+0x10/0x10
[  310.492194][T21966]  ? netlink_sendmsg+0x642/0xb30
[  310.492202][T21966]  ? skb_put+0x11b/0x210
[  310.492210][T21966]  netlink_sendmsg+0x805/0xb30
[  310.492219][T21966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.492226][T21966]  ? futex_unqueue+0x22/0x240
[  310.492235][T21966]  ? aa_sock_msg_perm+0xf1/0x1d0
[  310.492249][T21966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  310.492258][T21966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.492265][T21966]  __sock_sendmsg+0x21c/0x270
[  310.492277][T21966]  ____sys_sendmsg+0x505/0x830
[  310.492287][T21966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  310.492298][T21966]  ? import_iovec+0x74/0xa0
[  310.492308][T21966]  ___sys_sendmsg+0x21f/0x2a0
[  310.492316][T21966]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.492325][T21966]  ? futex_wait+0x285/0x360
[  310.492341][T21966]  ? __fget_files+0x2a/0x420
[  310.492348][T21966]  ? __fget_files+0x3a0/0x420
[  310.492357][T21966]  __x64_sys_sendmsg+0x19b/0x260
[  310.492365][T21966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  310.492376][T21966]  ? rcu_is_watching+0x15/0xb0
[  310.492384][T21966]  ? rcu_is_watching+0x15/0xb0
[  310.492392][T21966]  do_syscall_64+0xfa/0x3b0
[  310.492400][T21966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.492407][T21966]  ? exc_page_fault+0x9f/0xf0
[  310.492418][T21966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.492426][T21966] RIP: 0033:0x7f960798ebe9
[  310.492435][T21966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.492443][T21966] RSP: 002b:00007f9608732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.492453][T21966] RAX: ffffffffffffffda RBX: 00007f9607bb5fa0 RCX: 00007f960798ebe9
[  310.492460][T21966] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e
[  310.492465][T21966] RBP: 00007f9607a11e19 R08: 0000000000000000 R09: 0000000000000000
[  310.492470][T21966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.492476][T21966] R13: 00007f9607bb6038 R14: 00007f9607bb5fa0 R15: 00007ffc99bfd798
[  310.492486][T21966]  </TASK>
[  310.939465][T22020] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  310.965149][T22017] netlink: 'syz.2.4247': attribute type 21 has an invalid length.
[  310.967854][T22017] netlink: 'syz.2.4247': attribute type 6 has an invalid length.
[  310.979991][T22023] syzkaller1: entered promiscuous mode
[  310.988326][T22023] syzkaller1: entered allmulticast mode
[  311.149274][T22033] lo speed is unknown, defaulting to 1000
[  311.152136][T22033] lo speed is unknown, defaulting to 1000
[  311.615830][T22053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  311.626392][T22053] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  311.628730][T22053] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  311.651526][T22056] pim6reg1: entered promiscuous mode
[  311.653980][T22056] pim6reg1: entered allmulticast mode
[  311.817233][T22062] pim6reg: entered allmulticast mode
[  311.819941][T22062] pim6reg: left allmulticast mode
[  312.161804][T22086] macvtap1: entered promiscuous mode
[  312.164292][T22086] macvtap1: entered allmulticast mode
[  312.301861][T22092] lo speed is unknown, defaulting to 1000
[  312.308199][T22092] lo speed is unknown, defaulting to 1000
[  312.615670][T22105] gretap0: refused to change device tx_queue_len
[  312.617865][T22105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  312.625777][ T5906] lo speed is unknown, defaulting to 1000
[  312.627631][ T5906] syZ0: Port: 1 Link ACTIVE
[  312.629212][ T5906] lo speed is unknown, defaulting to 1000
[  312.666328][T22107] block nbd1: Unsupported socket: shutdown callout must be supported.
[  312.807532][T22113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.851955][T22115] sctp: [Deprecated]: syz.1.4276 (pid 22115) Use of struct sctp_assoc_value in delayed_ack socket option.
[  312.851955][T22115] Use struct sctp_sack_info instead
[  312.926699][T22122] __nla_validate_parse: 22 callbacks suppressed
[  312.926711][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'.
[  312.937884][T22122] siw: device registration error -23
[  312.957554][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 210 seconds
[  312.974594][T22124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'.
[  313.069167][T22128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4280'.
[  313.117144][T22135] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.123831][T22137] dvmrp8: left allmulticast mode
[  313.200563][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'.
[  313.240083][T22148] pim6reg1: entered promiscuous mode
[  313.241917][T22148] pim6reg1: entered allmulticast mode
[  313.248704][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'.
[  313.285443][T22149] validate_nla: 3 callbacks suppressed
[  313.285456][T22149] netlink: 'syz.2.4288': attribute type 1 has an invalid length.
[  313.300724][T22149] bond74: (slave gretap6): making interface the new active one
[  313.305273][T22149] bond74: (slave gretap6): Enslaving as an active interface with an up link
[  313.340577][T22151] netlink: 75 bytes leftover after parsing attributes in process `syz.2.4288'.
[  313.340582][T22149] netlink: 75 bytes leftover after parsing attributes in process `syz.2.4288'.
[  313.370248][T22166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4291'.
[  313.421531][T22172] netlink: 'syz.1.4292': attribute type 1 has an invalid length.
[  313.424380][T22174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4293'.
[  313.450345][T22179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  313.472272][T22182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4295'.
[  313.473820][T22183] netlink: 'syz.1.4295': attribute type 1 has an invalid length.
[  313.508421][T22192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.535172][T22186] lo speed is unknown, defaulting to 1000
[  313.537843][T22186] lo speed is unknown, defaulting to 1000
[  313.624312][T22198] netlink: 'syz.1.4299': attribute type 64 has an invalid length.
[  313.662147][T22205] 8021q: adding VLAN 0 to HW filter on device bond133
[  313.722004][T22203] vlan0: entered promiscuous mode
[  313.730069][T22203] erspan0: entered promiscuous mode
[  313.741712][T22214] pim6reg1: entered promiscuous mode
[  313.743904][T22214] pim6reg1: entered allmulticast mode
[  313.746313][T22203] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  313.856655][T22232] netlink: 'syz.0.4307': attribute type 14 has an invalid length.
[  313.859801][T22232] netlink: 'syz.0.4307': attribute type 11 has an invalid length.
[  313.918209][T22235] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  313.921443][T22235] netlink: 'syz.0.4308': attribute type 12 has an invalid length.
[  314.028514][T22239] netlink: 'syz.1.4310': attribute type 10 has an invalid length.
[  314.057360][   T47] lo speed is unknown, defaulting to 1000
[  314.059733][   T47] syz1: Port: 1 Link DOWN
[  314.061535][T22248] netlink: 'syz.0.4312': attribute type 4 has an invalid length.
[  314.068424][   T47] lo speed is unknown, defaulting to 1000
[  314.080781][   T47] syz1: Port: 1 Link ACTIVE
[  314.132508][T22261] bond14: option mode: unable to set because the bond device is up
[  314.143658][T22262] bond14: option mode: unable to set because the bond device is up
[  314.163563][T22261] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  314.173238][T22261] bond14: (slave macvlan8): Enslaving as a backup interface with a down link
[  314.201150][T22268] netlink: 'syz.2.4319': attribute type 4 has an invalid length.
[  314.490250][T22297] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  314.528175][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.531416][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.542393][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.549461][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.811288][T22337] sit0: left promiscuous mode
[  314.814180][T22337] tipc: Resetting bearer <ib:ip6gre0>
[  314.819890][T22337] vlan0: left promiscuous mode
[  314.831343][T22337] geneve5: left promiscuous mode
[  314.834634][T22337] tipc: Resetting bearer <eth:syzkaller0>
[  314.837330][T22337] syzkaller0: left promiscuous mode
[  314.839149][T22337] syzkaller0: left allmulticast mode
[  314.841766][T22337] geneve6: left promiscuous mode
[  314.843491][T22337] geneve6: left allmulticast mode
[  314.846019][T22337] vlan4: left promiscuous mode
[  314.848215][T22337] bond0: left promiscuous mode
[  314.850141][T22337] vlan4: left allmulticast mode
[  314.851841][T22337] bond0: left allmulticast mode
[  314.853998][T22337] vti6: left promiscuous mode
[  314.856575][T22337] veth11: left promiscuous mode
[  314.858275][T22337] geneve7: left promiscuous mode
[  314.860662][T22337] mac80211_hwsim hwsim61 wlan0: left promiscuous mode
[  314.863182][T22337] bond114: left promiscuous mode
[  314.865582][T22337] ip6tnl5: left promiscuous mode
[  314.867631][T22337] ip6tnl5: left allmulticast mode
[  314.869479][T22337] veth19: left promiscuous mode
[  314.871278][T22337] veth21: left promiscuous mode
[  314.873304][T22337] vlan5: left allmulticast mode
[  314.875036][T22337] veth1: left allmulticast mode
[  314.877386][T22337] veth25: left promiscuous mode
[  314.879279][T22337] veth27: left allmulticast mode
[  314.883293][T22337] veth29: left promiscuous mode
[  314.886065][T22337] macvtap0: left promiscuous mode
[  314.887731][T22337] macvtap0: left allmulticast mode
[  314.895004][T22337] macvtap1: left promiscuous mode
[  314.896907][T22337] macvtap1: left allmulticast mode
[  314.900637][ T5872] lo speed is unknown, defaulting to 1000
[  314.902625][ T5872] syz1: Port: 1 Link DOWN
[  315.288672][ T5907] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.291847][ T5907] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.295533][ T5907] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.298134][ T5907] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  315.341228][T22351] xt_socket: unknown flags 0xfc
[  315.355252][T22351] bond69 (unregistering): Released all slaves
[  315.589102][T22361] lo speed is unknown, defaulting to 1000
[  315.593523][T22361] lo speed is unknown, defaulting to 1000
[  315.646577][T22365] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.691451][T22365] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.705707][T22378] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.710139][T22378] syzkaller0: entered promiscuous mode
[  315.711959][T22378] syzkaller0: entered allmulticast mode
[  315.768414][T22365] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.838760][T22365] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  315.950356][T22411] tipc: Resetting bearer <ib:ip6gre0>
[  315.956876][ T5907] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  315.966537][ T5907] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  315.969193][ T5907] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  315.980684][ T5874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.010776][T22419] bridge_slave_0: left promiscuous mode
[  316.012890][T22419] batadv_slave_0: left promiscuous mode
[  316.027559][T22419] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  316.029803][T22419] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  316.038603][T22419] bridge89: left promiscuous mode
[  316.040214][T22419] bridge89: left allmulticast mode
[  316.041975][T22419] veth43: left promiscuous mode
[  316.046205][T22419] vlan4: left promiscuous mode
[  316.047722][T22419] bond67: left promiscuous mode
[  316.049390][T22419] vlan4: left allmulticast mode
[  316.050937][T22419] bond67: left allmulticast mode
[  316.053760][T22419] veth47: left promiscuous mode
[  316.055736][T22419] hsr0: left promiscuous mode
[  316.061865][ T5874] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.067278][ T5874] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.071368][ T5874] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.074617][ T5874] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.092193][T22419] bond0: left promiscuous mode
[  316.110552][T22426] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  316.151968][T22428] 8021q: adding VLAN 0 to HW filter on device bond71
[  316.163703][T22428] bond70: (slave bond71): making interface the new active one
[  316.166526][T22428] bond70: (slave bond71): Enslaving as an active interface with an up link
[  316.308693][T22439] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  316.366943][T22452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  316.369330][T22452] IPv6: NLM_F_CREATE should be set when creating new route
[  316.873959][T22490] Set syz0 is full, maxelem 0 reached
[  316.980146][T22494] lo speed is unknown, defaulting to 1000
[  316.982461][T22494] lo speed is unknown, defaulting to 1000
[  317.305019][T22506] "syz.2.4384" (22506) uses obsolete ecb(arc4) skcipher
[  317.351250][T22511] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  317.354046][T22511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.440299][T22514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  317.497233][T22518] bridge37: port 1(veth31) entered blocking state
[  317.499301][T22518] bridge37: port 1(veth31) entered disabled state
[  317.501373][T22518] veth31: entered allmulticast mode
[  317.504739][T22518] veth31: entered promiscuous mode
[  317.509456][T22518] bridge37: port 2(veth0_to_bond) entered blocking state
[  317.511646][T22518] bridge37: port 2(veth0_to_bond) entered disabled state
[  317.514381][T22518] veth0_to_bond: entered allmulticast mode
[  317.516632][T22518] veth0_to_bond: entered promiscuous mode
[  317.725458][T22539] lo speed is unknown, defaulting to 1000
[  317.733983][T22539] lo speed is unknown, defaulting to 1000
[  317.735430][T22538] lo speed is unknown, defaulting to 1000
[  317.798389][T22538] lo speed is unknown, defaulting to 1000
[  318.268904][T22555] veth49: entered promiscuous mode
[  318.431702][T22580] tc_dump_action: action bad kind
[  318.442341][T22580] pimreg: entered allmulticast mode
[  318.447439][T22580] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  318.450888][T22580] __nla_validate_parse: 42 callbacks suppressed
[  318.450898][T22580] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4401'.
[  318.494479][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'.
[  318.502897][T22593] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4405'.
[  318.520958][T22590] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4404'.
[  318.551397][T22598] 8021q: adding VLAN 0 to HW filter on device bond75
[  318.557149][T22598] bridge0: port 1(bond75) entered blocking state
[  318.559212][T22598] bridge0: port 1(bond75) entered disabled state
[  318.561296][T22598] bond75: entered allmulticast mode
[  318.564853][T22598] bond75: entered promiscuous mode
[  318.569809][T22598] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4407'.
[  318.574153][T22595] validate_nla: 13 callbacks suppressed
[  318.574166][T22595] netlink: 'syz.1.4406': attribute type 4 has an invalid length.
[  318.579629][T22595] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  318.629866][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4411'.
[  318.694325][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'.
[  318.721197][T22624] lo speed is unknown, defaulting to 1000
[  318.726056][T22624] lo speed is unknown, defaulting to 1000
[  318.765704][T22631] netlink: 'syz.1.4415': attribute type 1 has an invalid length.
[  318.790710][T22631] 8021q: adding VLAN 0 to HW filter on device bond73
[  318.795832][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'.
[  318.800712][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'.
[  318.806297][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4415'.
[  318.877183][T22644] bond14: option mode: unable to set because the bond device has slaves
[  318.882652][T22644] bond14: (slave macvlan9): Error -98 calling set_mac_address
[  318.919653][T22644] bond14: (slave macvlan8): Releasing backup interface
[  318.925439][T22644] bond70: (slave bond71): Releasing backup interface
[  319.515942][T22664] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  319.565582][T22666] lo speed is unknown, defaulting to 1000
[  319.567876][T22666] lo speed is unknown, defaulting to 1000
[  320.247200][T22677] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  320.392799][T22681] netlink: 'syz.0.4428': attribute type 19 has an invalid length.
[  320.458945][T22686] netlink: 'syz.0.4430': attribute type 3 has an invalid length.
[  320.680756][T22701] netlink: ct family unspecified
[  320.682607][T22701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.883174][T22709] lo speed is unknown, defaulting to 1000
[  320.885388][T22709] lo speed is unknown, defaulting to 1000
[  321.038946][   T24] IPVS: starting estimator thread 0...
[  321.042283][T22712] ip6tnl7: entered promiscuous mode
[  321.046390][T22712] ip6tnl7: entered allmulticast mode
[  321.064298][T22715] siw: device registration error -23
[  321.091578][T22719] openvswitch: netlink: Multiple metadata blocks provided
[  321.123038][T22713] IPVS: using max 92 ests per chain, 220800 per kthread
[  321.126934][T22721] syzkaller1: entered promiscuous mode
[  321.129695][T22721] syzkaller1: entered allmulticast mode
[  321.513897][T22754] netlink: 'syz.1.4449': attribute type 10 has an invalid length.
[  321.550205][T22756] can: request_module (can-proto-0) failed.
[  321.584940][T22762] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  321.951895][T22784] netlink: 'syz.0.4457': attribute type 1 has an invalid length.
[  321.968350][T22784] bond134: entered promiscuous mode
[  321.970268][T22784] 8021q: adding VLAN 0 to HW filter on device bond134
[  321.978893][T22784] 8021q: adding VLAN 0 to HW filter on device bond134
[  321.981281][T22784] bond134: (slave wireguard2): The slave device specified does not support setting the MAC address
[  321.985686][T22784] bond134: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  321.990962][T22784] bond134: (slave wireguard2): making interface the new active one
[  321.994108][T22784] wireguard2: entered promiscuous mode
[  321.996464][T22784] bond134: (slave wireguard2): Enslaving as an active interface with an up link
[  322.091941][T22790] IPv6: NLM_F_CREATE should be specified when creating new route
[  322.095362][T22790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.098213][T22790] IPv6: NLM_F_CREATE should be set when creating new route
[  322.101101][T22790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.307713][T22797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.327267][T22799] netlink: 'syz.1.4461': attribute type 1 has an invalid length.
[  322.478531][T22807] netlink: 'syz.1.4463': attribute type 1 has an invalid length.
[  322.491159][T22807] 8021q: adding VLAN 0 to HW filter on device bond75
[  322.872361][T22832] netlink: 'syz.1.4468': attribute type 1 has an invalid length.
[  322.992318][T22838] bridge0: port 1(erspan0) entered blocking state
[  322.995495][T22838] bridge0: port 1(erspan0) entered disabled state
[  322.997602][T22838] erspan0: entered allmulticast mode
[  322.999650][T22838] erspan0: left allmulticast mode
[  323.117751][T22849] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.185165][T22857] Bluetooth: MGMT ver 1.23
[  323.187384][T22856] netlink: 'syz.1.4474': attribute type 2 has an invalid length.
[  323.290234][T22871] lo speed is unknown, defaulting to 1000
[  323.292416][T22871] lo speed is unknown, defaulting to 1000
[  323.435922][T22886] lo speed is unknown, defaulting to 1000
[  323.438274][T22886] lo speed is unknown, defaulting to 1000
[  323.547735][T22886] __nla_validate_parse: 11 callbacks suppressed
[  323.547747][T22886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'.
[  323.552542][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'.
[  323.601826][T22886] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4476'.
[  323.668627][T22886] macsec0: entered promiscuous mode
[  323.670303][T22886] syzkaller0: entered promiscuous mode
[  323.673176][T22886] syzkaller0: left promiscuous mode
[  324.051415][T22914] netlink: 'syz.1.4481': attribute type 8 has an invalid length.
[  324.938508][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'.
[  324.942548][T22922] bond0: default FDB implementation only supports local addresses
[  324.972903][T22924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.073328][T22929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'.
[  325.076121][T22929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4487'.
[  325.079421][T22929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'.
[  325.082495][T22929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4487'.
[  325.106604][T22931] lo speed is unknown, defaulting to 1000
[  325.108833][T22931] lo speed is unknown, defaulting to 1000
[  325.299999][T22939] netlink: 'syz.1.4489': attribute type 2 has an invalid length.
[  325.305476][T22939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  325.329793][T22941] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4490'.
[  329.958628][ T5293] udevd[5293]: worker [5844] /devices/virtual/block/nbd2 timeout; kill it
[  329.961544][ T5293] udevd[5293]: seq 15871 '/devices/virtual/block/nbd2' killed
[  343.043079][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 240 seconds
[  373.113430][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 270 seconds
[  403.223351][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 300 seconds
[  433.273251][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 330 seconds
[  463.373091][   T61] block nbd2: Possible stuck request ffff888022a58000: control (read@0,4096B). Runtime 360 seconds
[  471.033107][   T34] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  471.036095][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  471.043194][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  471.046630][   T34] task:kworker/0:0     state:D stack:22992 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
[  471.051059][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  471.053892][   T34] Call Trace:
[  471.055161][   T34]  <TASK>
[  471.056268][   T34]  __schedule+0x1798/0x4cc0
[  471.057999][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  471.060004][   T34]  ? __pfx___schedule+0x10/0x10
[  471.061829][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  471.064188][   T34]  ? lock_release+0x4b/0x3e0
[  471.065940][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.067810][   T34]  schedule+0x165/0x360
[  471.069395][   T34]  schedule_preempt_disabled+0x13/0x30
[  471.071451][   T34]  __mutex_lock+0x7e6/0x1350
[  471.073493][   T34]  ? __mutex_lock+0x5bb/0x1350
[  471.075276][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  471.077617][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  471.079484][   T34]  ? lock_acquire+0x5f/0x360
[  471.081194][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  471.083844][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  471.086149][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  471.088256][   T34]  process_scheduled_works+0xae1/0x17b0
[  471.090289][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  471.092512][   T34]  worker_thread+0x8a0/0xda0
[  471.094481][   T34]  kthread+0x711/0x8a0
[  471.096035][   T34]  ? __pfx_worker_thread+0x10/0x10
[  471.097960][   T34]  ? __pfx_kthread+0x10/0x10
[  471.099685][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.101623][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.103902][   T34]  ? __pfx_kthread+0x10/0x10
[  471.105624][   T34]  ret_from_fork+0x3fc/0x770
[  471.107355][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  471.109281][   T34]  ? __switch_to_asm+0x39/0x70
[  471.111069][   T34]  ? __switch_to_asm+0x33/0x70
[  471.112880][   T34]  ? __pfx_kthread+0x10/0x10
[  471.114672][   T34]  ret_from_fork_asm+0x1a/0x30
[  471.116451][   T34]  </TASK>
[  471.117844][   T34] INFO: task syz.0.4457:22783 blocked for more than 143 seconds.
[  471.120668][   T34]       Not tainted syzkaller #0
[  471.122516][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  471.125768][   T34] task:syz.0.4457      state:D stack:25224 pid:22783 tgid:22783 ppid:5841   task_flags:0x400040 flags:0x00004004
[  471.130117][   T34] Call Trace:
[  471.131409][   T34]  <TASK>
[  471.132684][   T34]  __schedule+0x1798/0x4cc0
[  471.134774][   T34]  ? __fput+0x44c/0xa70
[  471.136348][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.138121][   T34]  ? kernfs_should_drain_open_files+0x20/0x2d0
[  471.140446][   T34]  ? __pfx___schedule+0x10/0x10
[  471.142238][   T34]  ? schedule+0x91/0x360
[  471.161334][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.163642][   T34]  ? lock_release+0x4b/0x3e0
[  471.165484][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.167768][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.170156][   T34]  schedule+0x165/0x360
[  471.171871][   T34]  schedule_preempt_disabled+0x13/0x30
[  471.174431][   T34]  __mutex_lock+0x7e6/0x1350
[  471.176226][   T34]  ? __mutex_lock+0x5bb/0x1350
[  471.178042][   T34]  ? rfkill_unregister+0xc8/0x220
[  471.179969][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  471.181876][   T34]  ? __pfx_device_del+0x10/0x10
[  471.183819][   T34]  rfkill_unregister+0xc8/0x220
[  471.185654][   T34]  nfc_unregister_device+0x96/0x2a0
[  471.187610][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  471.189798][   T34]  virtual_ncidev_close+0x56/0x90
[  471.191743][   T34]  __fput+0x44c/0xa70
[  471.194105][   T34]  task_work_run+0x1d4/0x260
[  471.195884][   T34]  ? __pfx_task_work_run+0x10/0x10
[  471.197807][   T34]  ? __pfx___se_sys_close_range+0x10/0x10
[  471.199935][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.201709][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.203711][   T34]  exit_to_user_mode_loop+0xec/0x110
[  471.205767][   T34]  do_syscall_64+0x2bd/0x3b0
[  471.207478][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.209274][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.211522][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.213789][   T34] RIP: 0033:0x7f952718ebe9
[  471.215441][   T34] RSP: 002b:00007fff44fa96a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  471.218533][   T34] RAX: 0000000000000000 RBX: 00007f95273b7da0 RCX: 00007f952718ebe9
[  471.221548][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  471.224844][   T34] RBP: 00007f95273b7da0 R08: 00000000000001b8 R09: 0000001844fa999f
[  471.227813][   T34] R10: 00007f95273b7cb0 R11: 0000000000000246 R12: 000000000004ec6d
[  471.230805][   T34] R13: 00007f95273b6090 R14: ffffffffffffffff R15: 00007fff44fa97c0
[  471.233618][   T34]  </TASK>
[  471.234596][   T34] INFO: task syz.2.4459:22794 blocked for more than 143 seconds.
[  471.236883][   T34]       Not tainted syzkaller #0
[  471.238399][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  471.240936][   T34] task:syz.2.4459      state:D stack:28456 pid:22794 tgid:22793 ppid:5845   task_flags:0x400040 flags:0x00004004
[  471.244706][   T34] Call Trace:
[  471.245822][   T34]  <TASK>
[  471.247130][   T34]  __schedule+0x1798/0x4cc0
[  471.248648][   T34]  ? __pfx___schedule+0x10/0x10
[  471.250130][   T34]  ? schedule+0x91/0x360
[  471.251563][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.253365][   T34]  ? lock_release+0x4b/0x3e0
[  471.254771][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.256558][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.258459][   T34]  schedule+0x165/0x360
[  471.259740][   T34]  schedule_preempt_disabled+0x13/0x30
[  471.261362][   T34]  __mutex_lock+0x7e6/0x1350
[  471.262852][   T34]  ? __mutex_lock+0x5bb/0x1350
[  471.264332][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  471.265930][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  471.267452][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.269168][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.271053][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  471.272803][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  471.274788][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  471.276634][   T34]  rfkill_set_block+0x1d2/0x440
[  471.278116][   T34]  rfkill_fop_write+0x44b/0x570
[  471.279591][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  471.281211][   T34]  ? __pfx_security_file_permission+0x10/0x10
[  471.283340][   T34]  ? rw_verify_area+0x255/0x4d0
[  471.284790][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  471.286373][   T34]  vfs_write+0x27e/0xb30
[  471.287649][   T34]  ? __pfx_vfs_write+0x10/0x10
[  471.289080][   T34]  ? lock_release+0x4b/0x3e0
[  471.290483][   T34]  ? __fget_files+0x2a/0x420
[  471.291851][   T34]  ? __fget_files+0x3a0/0x420
[  471.293348][   T34]  ? __fget_files+0x2a/0x420
[  471.294732][   T34]  ksys_write+0x145/0x250
[  471.296023][   T34]  ? __pfx_ksys_write+0x10/0x10
[  471.297457][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.298869][   T34]  do_syscall_64+0xfa/0x3b0
[  471.300214][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.302015][   T34]  ? exc_page_fault+0x9f/0xf0
[  471.303580][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.305542][   T34] RIP: 0033:0x7f7492f8ebe9
[  471.307208][   T34] RSP: 002b:00007f7493d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  471.309802][   T34] RAX: ffffffffffffffda RBX: 00007f74931b5fa0 RCX: 00007f7492f8ebe9
[  471.312130][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  471.314824][   T34] RBP: 00007f7493011e19 R08: 0000000000000000 R09: 0000000000000000
[  471.317219][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.319541][   T34] R13: 00007f74931b6038 R14: 00007f74931b5fa0 R15: 00007ffcbac21818
[  471.321877][   T34]  </TASK>
[  471.322987][   T34] INFO: task syz.2.4459:22795 blocked for more than 143 seconds.
[  471.325292][   T34]       Not tainted syzkaller #0
[  471.327030][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  471.329785][   T34] task:syz.2.4459      state:D stack:29064 pid:22795 tgid:22793 ppid:5845   task_flags:0x400040 flags:0x00004004
[  471.333369][   T34] Call Trace:
[  471.334387][   T34]  <TASK>
[  471.335291][   T34]  __schedule+0x1798/0x4cc0
[  471.336734][   T34]  ? __pfx___schedule+0x10/0x10
[  471.338190][   T34]  ? schedule+0x91/0x360
[  471.339474][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.341002][   T34]  ? lock_release+0x4b/0x3e0
[  471.342441][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.344601][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.346779][   T34]  schedule+0x165/0x360
[  471.348164][   T34]  schedule_preempt_disabled+0x13/0x30
[  471.349796][   T34]  __mutex_lock+0x7e6/0x1350
[  471.351159][   T34]  ? __mutex_lock+0x5bb/0x1350
[  471.352750][   T34]  ? rfkill_fop_write+0x191/0x570
[  471.354604][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  471.356220][   T34]  ? lock_release+0x4b/0x3e0
[  471.357648][   T34]  ? __might_fault+0xb0/0x130
[  471.359130][   T34]  ? __might_fault+0xcc/0x130
[  471.360590][   T34]  rfkill_fop_write+0x191/0x570
[  471.362093][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  471.363948][   T34]  ? __pfx_security_file_permission+0x10/0x10
[  471.365749][   T34]  ? rw_verify_area+0x255/0x4d0
[  471.367318][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  471.369237][   T34]  vfs_write+0x27e/0xb30
[  471.370629][   T34]  ? __pfx_vfs_write+0x10/0x10
[  471.372173][   T34]  ? lock_release+0x4b/0x3e0
[  471.373820][   T34]  ? count_memcg_event_mm+0x21/0x260
[  471.375404][   T34]  ? lock_release+0x4b/0x3e0
[  471.376994][   T34]  ? __fget_files+0x2a/0x420
[  471.378643][   T34]  ? __fget_files+0x3a0/0x420
[  471.380295][   T34]  ? __fget_files+0x2a/0x420
[  471.381771][   T34]  ksys_write+0x145/0x250
[  471.383248][   T34]  ? __pfx_ksys_write+0x10/0x10
[  471.384729][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.386158][   T34]  do_syscall_64+0xfa/0x3b0
[  471.387532][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.389397][   T34]  ? exc_page_fault+0x9f/0xf0
[  471.390884][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.392811][   T34] RIP: 0033:0x7f7492f8ebe9
[  471.394231][   T34] RSP: 002b:00007f7493d4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  471.397078][   T34] RAX: ffffffffffffffda RBX: 00007f74931b6090 RCX: 00007f7492f8ebe9
[  471.399644][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  471.402297][   T34] RBP: 00007f7493011e19 R08: 0000000000000000 R09: 0000000000000000
[  471.404980][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.407475][   T34] R13: 00007f74931b6128 R14: 00007f74931b6090 R15: 00007ffcbac21818
[  471.409910][   T34]  </TASK>
[  471.410901][   T34] INFO: task syz.1.4490:22941 blocked for more than 143 seconds.
[  471.413378][   T34]       Not tainted syzkaller #0
[  471.415189][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  471.418447][   T34] task:syz.1.4490      state:D stack:24792 pid:22941 tgid:22940 ppid:5849   task_flags:0x400140 flags:0x00004004
[  471.422275][   T34] Call Trace:
[  471.423511][   T34]  <TASK>
[  471.424473][   T34]  __schedule+0x1798/0x4cc0
[  471.425918][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.427408][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.428926][   T34]  ? __pfx___schedule+0x10/0x10
[  471.430423][   T34]  ? schedule+0x91/0x360
[  471.431992][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.433838][   T34]  ? lock_release+0x4b/0x3e0
[  471.435289][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  471.437136][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.439192][   T34]  schedule+0x165/0x360
[  471.440509][   T34]  schedule_preempt_disabled+0x13/0x30
[  471.442292][   T34]  __mutex_lock+0x7e6/0x1350
[  471.443875][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.445452][   T34]  ? __mutex_lock+0x5bb/0x1350
[  471.447009][   T34]  ? rfkill_register+0x37/0x8e0
[  471.448524][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  471.450289][   T34]  ? netdev_run_todo+0xe1d/0xea0
[  471.452249][   T34]  ? __pfx_netdev_run_todo+0x10/0x10
[  471.454402][   T34]  ? __pfx_mod_delayed_work_on+0x10/0x10
[  471.456579][   T34]  rfkill_register+0x37/0x8e0
[  471.458444][   T34]  wiphy_register+0x214c/0x28d0
[  471.460395][   T34]  ? __pfx_wiphy_register+0x10/0x10
[  471.462459][   T34]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  471.464844][   T34]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  471.467285][   T34]  ieee80211_register_hw+0x3425/0x4080
[  471.469449][   T34]  ? ieee80211_register_hw+0x14e1/0x4080
[  471.471653][   T34]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  471.474040][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  471.476520][   T34]  ? __hrtimer_setup+0x187/0x210
[  471.478462][   T34]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  471.480805][   T34]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  471.485959][   T34]  ? __pfx__printk+0x10/0x10
[  471.487807][   T34]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  471.490132][   T34]  ? __nla_validate_parse+0x251c/0x2d40
[  471.492302][   T34]  ? __sock_sendmsg+0x21c/0x270
[  471.494479][   T34]  ? ____sys_sendmsg+0x505/0x830
[  471.496436][   T34]  hwsim_new_radio_nl+0xea4/0x1b10
[  471.498377][   T34]  ? __pfx___nla_validate_parse+0x10/0x10
[  471.500601][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  471.502729][   T34]  ? __nla_parse+0x40/0x60
[  471.504407][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  471.506807][   T34]  genl_family_rcv_msg_doit+0x215/0x300
[  471.508944][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  471.511275][   T34]  ? bpf_lsm_capable+0x9/0x20
[  471.513313][   T34]  ? security_capable+0x7e/0x2e0
[  471.515256][   T34]  genl_rcv_msg+0x60e/0x790
[  471.517072][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  471.518871][   T34]  ? __kasan_slab_alloc+0x6c/0x80
[  471.520656][   T34]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  471.522850][   T34]  ? __netlink_lookup+0xbd/0x810
[  471.525465][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.527313][   T34]  netlink_rcv_skb+0x208/0x470
[  471.529163][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  471.530918][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  471.532637][   T34]  ? lock_release+0x4b/0x3e0
[  471.534599][   T34]  ? down_read+0x1ad/0x2e0
[  471.536452][   T34]  genl_rcv+0x28/0x40
[  471.538104][   T34]  netlink_unicast+0x82f/0x9e0
[  471.540070][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  471.542032][   T34]  ? netlink_sendmsg+0x642/0xb30
[  471.543867][   T34]  ? skb_put+0x11b/0x210
[  471.545488][   T34]  netlink_sendmsg+0x805/0xb30
[  471.547396][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.549463][   T34]  ? futex_unqueue+0x22/0x240
[  471.551329][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  471.553555][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  471.555683][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.557414][   T34]  __sock_sendmsg+0x21c/0x270
[  471.558869][   T34]  ____sys_sendmsg+0x505/0x830
[  471.560624][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.562745][   T34]  ? import_iovec+0x74/0xa0
[  471.564874][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  471.566501][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.568550][   T34]  ? futex_wait+0x285/0x360
[  471.570283][   T34]  ? __fget_files+0x2a/0x420
[  471.571778][   T34]  ? __fget_files+0x3a0/0x420
[  471.573490][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  471.575024][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  471.577132][   T34]  ? rcu_is_watching+0x15/0xb0
[  471.579094][   T34]  do_syscall_64+0xfa/0x3b0
[  471.580986][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.583719][   T34]  ? exc_page_fault+0x9f/0xf0
[  471.585673][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.588066][   T34] RIP: 0033:0x7f960798ebe9
[  471.589882][   T34] RSP: 002b:00007f9608732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.593339][   T34] RAX: ffffffffffffffda RBX: 00007f9607bb5fa0 RCX: 00007f960798ebe9
[  471.596481][   T34] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  471.599719][   T34] RBP: 00007f9607a11e19 R08: 0000000000000000 R09: 0000000000000000
[  471.602879][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.606218][   T34] R13: 00007f9607bb6038 R14: 00007f9607bb5fa0 R15: 00007ffc99bfd798
[  471.609404][   T34]  </TASK>
[  471.610717][   T34] INFO: lockdep is turned off.
[  471.612650][   T34] NMI backtrace for cpu 0
[  471.612664][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  471.612679][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.612711][   T34] Call Trace:
[  471.612720][   T34]  <TASK>
[  471.612727][   T34]  dump_stack_lvl+0x189/0x250
[  471.612750][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.612767][   T34]  ? __pfx__printk+0x10/0x10
[  471.612788][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  471.612808][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  471.612825][   T34]  ? __pfx__printk+0x10/0x10
[  471.612845][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  471.612867][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  471.612882][   T34]  watchdog+0xf93/0xfe0
[  471.612903][   T34]  ? watchdog+0x1de/0xfe0
[  471.612919][   T34]  kthread+0x711/0x8a0
[  471.612958][   T34]  ? __pfx_watchdog+0x10/0x10
[  471.612975][   T34]  ? __pfx_kthread+0x10/0x10
[  471.612992][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.613010][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.613029][   T34]  ? __pfx_kthread+0x10/0x10
[  471.613045][   T34]  ret_from_fork+0x3fc/0x770
[  471.613060][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  471.613076][   T34]  ? __switch_to_asm+0x39/0x70
[  471.613099][   T34]  ? __switch_to_asm+0x33/0x70
[  471.613116][   T34]  ? __pfx_kthread+0x10/0x10
[  471.613133][   T34]  ret_from_fork_asm+0x1a/0x30
[  471.613157][   T34]  </TASK>
[  471.667862][   T34] Sending NMI from CPU 0 to CPUs 1:
[  471.669952][    C1] NMI backtrace for cpu 1
[  471.669965][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  471.669975][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.669981][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  471.669997][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  471.670005][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  471.670013][    C1] RAX: 25b80f3676340900 RBX: ffffffff819683b8 RCX: 25b80f3676340900
[  471.670019][    C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  471.670024][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  471.670030][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38330
[  471.670036][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  471.670041][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1a000(0000) knlGS:0000000000000000
[  471.670047][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  471.670052][    C1] CR2: 00007fbbe16454a0 CR3: 000000010f4de000 CR4: 00000000000006f0
[  471.670076][    C1] Call Trace:
[  471.670081][    C1]  <TASK>
[  471.670085][    C1]  default_idle+0x13/0x20
[  471.670094][    C1]  default_idle_call+0x74/0xb0
[  471.670108][    C1]  do_idle+0x1e8/0x510
[  471.670118][    C1]  ? __pfx_do_idle+0x10/0x10
[  471.670128][    C1]  cpu_startup_entry+0x44/0x60
[  471.670135][    C1]  start_secondary+0x101/0x110
[  471.670147][    C1]  common_startup_64+0x13e/0x147
[  471.670160][    C1]  </TASK>
[  471.671951][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  471.733319][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  471.736177][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.739372][   T34] Call Trace:
[  471.740577][   T34]  <TASK>
[  471.741624][   T34]  dump_stack_lvl+0x99/0x250
[  471.743074][   T34]  ? __asan_memcpy+0x40/0x70
[  471.744584][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.746239][   T34]  ? __pfx__printk+0x10/0x10
[  471.747701][   T34]  vpanic+0x281/0x750
[  471.748887][   T34]  ? __pfx_vpanic+0x10/0x10
[  471.750285][   T34]  ? preempt_schedule+0xae/0xc0
[  471.751810][   T34]  ? preempt_schedule_common+0x83/0xd0
[  471.753873][   T34]  panic+0xb9/0xc0
[  471.755323][   T34]  ? __pfx_panic+0x10/0x10
[  471.756821][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  471.758446][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  471.760425][   T34]  watchdog+0xfd2/0xfe0
[  471.762004][   T34]  ? watchdog+0x1de/0xfe0
[  471.763712][   T34]  kthread+0x711/0x8a0
[  471.765169][   T34]  ? __pfx_watchdog+0x10/0x10
[  471.766885][   T34]  ? __pfx_kthread+0x10/0x10
[  471.768757][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.770816][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.772898][   T34]  ? __pfx_kthread+0x10/0x10
[  471.774783][   T34]  ret_from_fork+0x3fc/0x770
[  471.776584][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  471.778631][   T34]  ? __switch_to_asm+0x39/0x70
[  471.780562][   T34]  ? __switch_to_asm+0x33/0x70
[  471.782422][   T34]  ? __pfx_kthread+0x10/0x10
[  471.784259][   T34]  ret_from_fork_asm+0x1a/0x30
[  471.786182][   T34]  </TASK>
[  471.788052][   T34] Kernel Offset: disabled
[  471.789736][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:29:49  Registers:
info registers vcpu 0

CPU#0
RAX=bee86bd4b046b600 RBX=ffffffff819683b8 RCX=bee86bd4b046b600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c65492e028 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000019efd69c 000000000000000b XMM01=7a79730000000000 0000000037f98cd5
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81747cb1 RBX=800000011e59b867 RCX=ffff8880238b3980 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffc90002fafab0 RBP=ffffc90002faf890 RSP=ffffc90002faf5e0
R8 =ffff888101dfc0bb R9 =1ffff110203bf817 R10=dffffc0000000000 R11=ffffed10203bf818
R12=0000000000000000 R13=000055558bae5000 R14=0000000000000000 R15=1ffff110211162e5
RIP=ffffffff820953c5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe4256e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe424b876c3 00007fe424b876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=8004010000000806 060168e000000007 XMM07=a808000500000000 0005d00300100005
XMM08=c00302100005b003 6810000200000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
