last executing test programs:

890.716741ms ago: executing program 2 (id=2792):
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x4ff72000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x2b, 0x5, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8)
syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000000000000000000e0008050600024000f800000500f9ffffffffffffff000000ff61be6e10c401aeb1e39fd8d88b2a6d443043f3daebdbb7404ae3d73c8b1fa540dab3fc264463ed9c7e37a95a34cd45baf5a13a487ed1"], 0x24}}, 0x20000000)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000028000b0000000000000000000500000008000180040011807d"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0)

820.271491ms ago: executing program 2 (id=2793):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2)
r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xc0800)
getsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000340), &(0x7f0000000380)=0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701f6ffffff00000000017c0000040042800c00018006000600800a0000200002801c0002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x32}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x20000000)

819.905651ms ago: executing program 2 (id=2794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4)
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000000c0)=0x6e)
sendto$unix(r2, &(0x7f0000000200), 0x0, 0x4018001, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="b19e3205edd5", @remote, @local, @private=0xa010100}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4) (async)
accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000000c0)=0x6e) (async)
sendto$unix(r2, &(0x7f0000000200), 0x0, 0x4018001, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async)
syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @random="b19e3205edd5", @remote, @local, @private=0xa010100}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async)

739.579568ms ago: executing program 2 (id=2796):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0)

669.07321ms ago: executing program 2 (id=2799):
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000400)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x7ffffffe}, 0x8}, 0x94)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000002000010000000000000000000200000000"], 0x24}}, 0x48850)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

668.533196ms ago: executing program 1 (id=2800):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)

600.546788ms ago: executing program 1 (id=2803):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

540.644526ms ago: executing program 1 (id=2804):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000001}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x881}, 0x800)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

471.127259ms ago: executing program 1 (id=2805):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x6, 0xfffffffffffffffc, &(0x7f0000000000)=0x5e)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000000101010200000000000000000400000710744971095c356bf427f2323df30004e980dad8cb3f8257a05a9aa769401f34f6dfd61af1386e633e46e0cbc30887c967f91283a22e2aff95fdcace71617bfafaf97b411e547e99e8fda3095420181210ab091e91fadec9872675043f387e37bf399d440fe6dbd9280ef3fd80a72b73191530a3e69b96bba406430f1b52a43ba630cf5e7a2dbfc7c88559ba552d3efede187100d5a7a4cd5e85a753ca4440ae3f09fb12d23f00e7b3fdbb2860e0fdb1bf66d704f247ee3b56b3a15cf71c7435af50799eeff39bf6d207e60382e5"], 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x2c, 0x5, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x10012, r3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x20108, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x8003, 0x0, 0x0, 0xc}, 0x50)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, 0xc94, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11bc, 0x1}, 0xe)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r6, 0x0, 0x0}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r10 = socket$kcm(0x2c, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20)
close(r9)
close(r10)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
accept4(r5, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80, 0x800)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x40000)
syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r11)

470.20187ms ago: executing program 2 (id=2806):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x4c, 0x0, 0x3, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c}, 0x40)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000051401002abd7000fcdbdf250800010000000000080007"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000010)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'batadv0\x00', 0x4}, 0x18)
sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000611000040000000062000200005e25d4b8c718b40000009500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0x4}, {0xfff2, 0x3}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc8, 0xc, 0xfffe, 0x3, 0x1, 0x3, 0x6fa6, 0x4}}, {0xc, 0x2, [0xffff, 0x200, 0x10, 0x7]}}, {{0x1c, 0x1, {0x9b, 0x24, 0x8, 0x7, 0x1, 0x7, 0xc, 0x3}}, {0xa, 0x2, [0xff, 0xf, 0x7f]}}, {{0x1c, 0x1, {0x9, 0x8, 0x5, 0xbdd, 0x1, 0x5, 0x749, 0xa}}, {0x18, 0x2, [0xfd, 0x81, 0x7f, 0xfffc, 0x6, 0xf2a3, 0x9, 0x6, 0x1, 0x6]}}, {{0x1c, 0x1, {0xce, 0x7, 0x4, 0x7f, 0x2, 0xb, 0x100389e, 0x4}}, {0xc, 0x2, [0x40, 0x8, 0x3, 0x8]}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default]}, 0x40)

400.144995ms ago: executing program 0 (id=2807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d000100"], 0x34}}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x4b4, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x7a, 0x3, "35d5b53bf07446c8b09fdcfd921179afc49d354f7a551743d622daae35269d31ece4a569f5b2953f331d97dd1643310e74dc5d05ffe3a90fd03d27fd8ea516f03495c32531b2e66eee6d6da4f5c181e8fd956fcc7a028f4af283738f34f98ece90a7d93ba470363a3877f8844bc0e7e3e95ddba57057"}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x71, 0x3, "16099b97fd42cd86e9477350e262e46eef62e857f13f3597a115c3d54de8fd1665f864128faf6d5006e335aacf8a8e0e34f68f48c0fc28d66d324dd7833a48e009e3308b31b0efdf05071afcc9e6617b4d16ffa261485767081174e3d9bdbfa906c027e7ebf035d8b40e693bf3"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "f93cd6b0d6211ca23b40f5da5f7413c19a9b772f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "4e6275aa9f9509f5cef5e2bdf88615f404e4b41cf5eaf72968"}}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "0e415d488019cb10980755df024a64f97f0311dc0f4af357b8203a24ba7a274aeda400"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "62e89e7f98beeca6fd858d2d7b03cbc6b855e55f1d520585d2598c16"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff74}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x68cf3767}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc3c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff, @remote, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x40000}, 0x41)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, 0x0, 0x4000)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x2000c080)
unshare(0x400)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r6, 0x104, 0x1, &(0x7f0000000000)=0x7, 0x4)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x0, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x10, 0x2, 0x9}})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x3}, 0x37})

399.223496ms ago: executing program 0 (id=2808):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @loopback, 0xfffffff8, 0x3d, 0xe}, {0x0, @broadcast, 0xe, 0x4, [0x7, 0x5723]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @multicast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

398.769598ms ago: executing program 0 (id=2809):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x94, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40a38}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x3bcf8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8e090}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9}]}}}]}, 0x94}}, 0x8000002)

330.194851ms ago: executing program 0 (id=2810):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8815)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r7 = socket$inet(0x2, 0x80000, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000000), 0x4)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

90.433102ms ago: executing program 1 (id=2811):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}})
ioctl(r4, 0x8b1b, &(0x7f0000000040))
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async)
sendto$inet6(r5, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, 0x0)
socket(0x2, 0x80805, 0x3)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) (async)
setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)
preadv(r7, &(0x7f0000001500)=[{0xfffffffffffffffe}], 0x1, 0x1, 0x2)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="2cc8126c69fd6d09a8dda3821bed34564d8cd427a6fbe72fb99ba1c9dcfb62c28416ac6ddcf3262695ea0a16a08bd9b9d2b3efb83d7b6897a14493fe87bf247d847c8b8574aaa29be75ddee80d5255da9fb814b2d82504a09b86e0019d137b65c10a3b7751396525bfbc7db5ef592a23a94804ac7da94b20ed264c8ee2ae23fca18663465627c978b8253c9a088938cb3fcfe50395d602b059cdb7b3f63a0aa0748661a0be9451f2c130c242adb95d8f5f8f495410154362c904ef496453cfdd1c50e174c90671f7003fa82a4035b6b2bc44478d"], 0x3)
recvmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000000340)=""/127, 0x7f}], 0x4, &(0x7f00000013c0)=""/4096, 0x1000}, 0x1) (async)
recvmsg$kcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000000340)=""/127, 0x7f}], 0x4, &(0x7f00000013c0)=""/4096, 0x1000}, 0x1)
r10 = socket(0x2b, 0x80801, 0x1)
read$alg(r10, &(0x7f0000000400)=""/8, 0x8)
r11 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x0)

75.006148ms ago: executing program 0 (id=2812):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0xa)
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109d000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x30, 0x60, 0xd3, 0xfffff020}, {0x6, 0x4, 0x2, 0x5}]}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0x8, 0x6}, {0x0, 0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"})

205.106µs ago: executing program 0 (id=2813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) (async)
preadv(r2, &(0x7f0000002a40)=[{&(0x7f0000000980)=""/72, 0x48}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/76, 0x4c}, {&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f0000000b80)=""/90, 0x5a}, {&(0x7f0000000c00)=""/92, 0x5c}, {&(0x7f0000000c80)=""/4, 0x4}, {&(0x7f0000002880)=""/199, 0xc7}, {&(0x7f0000002980)=""/135, 0x87}], 0x9, 0x695c, 0x8000) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r5, 0x10, 0xc0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r8=>0xffffffffffffffff}) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async)
r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x10, 0x80000)
preadv(r10, &(0x7f0000000900)=[{&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000000880)=""/81, 0x51}], 0x5, 0x0, 0x3)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) (async)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async)
getpeername$unix(r8, &(0x7f00000002c0), &(0x7f0000000340)=0x6e)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'wlan1\x00', 0x2000}) (async)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r14 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0)

0s ago: executing program 1 (id=2814):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newsa={0x16c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x6c}, @in=@local, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@lifetime_val={0x24, 0x9, {0x7, 0x7ff, 0x100000000, 0x9}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2a, 0x200}}]}, 0x16c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0xff07, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x40400, 0xa90}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x2c40}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

kernel console output (not intermixed with test programs):

d allmulticast mode
[  159.245606][T11707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.249316][T11707] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  159.252302][T11707] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  159.356471][T11729] xt_policy: neither incoming nor outgoing policy selected
[  159.382788][T11731] openvswitch: netlink: Message has 5 unknown bytes.
[  159.409881][T11731] veth7: entered promiscuous mode
[  159.464276][T11738] Set syz0 is full, maxelem 0 reached
[  159.470411][T11739] Set syz0 is full, maxelem 0 reached
[  159.538930][T11727] netlink: 'syz.0.1544': attribute type 1 has an invalid length.
[  159.541989][T11727] netlink: 'syz.0.1544': attribute type 1 has an invalid length.
[  159.560874][T11746] pim6reg: entered allmulticast mode
[  159.564021][T11746] pim6reg: left allmulticast mode
[  159.620495][T11751] veth11: left promiscuous mode
[  159.792005][T11765] syzkaller1: entered promiscuous mode
[  159.793789][T11765] syzkaller1: entered allmulticast mode
[  159.911900][T11773] nbd: must specify an index to disconnect
[  160.056653][T11791] tipc: New replicast peer: 255.255.253.255
[  160.058766][T11791] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.422222][T11803] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  160.435519][T11803] 8021q: adding VLAN 0 to HW filter on device bond23
[  160.444205][T11803] bond23: (slave bridge17): making interface the new active one
[  160.448761][T11803] bond23: (slave bridge17): Enslaving as an active interface with an up link
[  160.457720][T11803] bond23: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  160.525924][T11807] : renamed from wg2
[  160.547241][T11810] syzkaller1: entered promiscuous mode
[  160.549449][T11810] syzkaller1: entered allmulticast mode
[  160.746190][T11821] netlink: 'syz.1.1575': attribute type 1 has an invalid length.
[  160.763917][T11821] bond24: (slave bridge18): making interface the new active one
[  160.766978][T11821] bond24: (slave bridge18): Enslaving as an active interface with an up link
[  160.774259][T11825] netlink: 'syz.0.1576': attribute type 14 has an invalid length.
[  160.790854][T11827] netlink: 'syz.1.1577': attribute type 1 has an invalid length.
[  160.809386][T11832] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.816452][T11832] syzkaller0: mtu less than device minimum
[  160.844228][T11838] bridge19: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  160.899501][T11850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.937664][T11854] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.959115][T11857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.982318][T11856] tipc: Disabling bearer <eth:syzkaller0>
[  161.027434][T11865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.040194][T11865] tipc: Resetting bearer <eth:syzkaller0>
[  161.047374][T11864] tipc: Disabling bearer <eth:syzkaller0>
[  161.078818][T11879] syzkaller1: entered promiscuous mode
[  161.081174][T11879] syzkaller1: entered allmulticast mode
[  161.101110][T11881] netlink: 'syz.2.1594': attribute type 7 has an invalid length.
[  161.177108][T11885] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  161.184855][T11885] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  161.187093][T11885] macsec1: left promiscuous mode
[  161.194769][T11885] macsec1: left allmulticast mode
[  161.266270][T11897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.269302][T11897] syzkaller0: entered promiscuous mode
[  161.271526][T11897] syzkaller0: entered allmulticast mode
[  161.277089][T11897] __nla_validate_parse: 25 callbacks suppressed
[  161.277103][T11897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1600'.
[  161.283543][T11897] tipc: Resetting bearer <eth:syzkaller0>
[  161.288535][T11897] tipc: Disabling bearer <eth:syzkaller0>
[  161.310600][T11909] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.314715][T11910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  161.332769][T11909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1603'.
[  161.339164][T11912] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  161.386073][T11917] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  161.398084][T11917] bond8: (slave macvlan4): Enslaving as an active interface with a down link
[  161.410225][T11917] team0: Port device bond14 removed
[  161.416262][T11917] bond15: (slave wireguard0): Releasing backup interface
[  161.420217][T11917] bond17: (slave gretap3): Releasing active interface
[  161.424402][T11917] bond8: (slave bridge11): Releasing active interface
[  161.427770][T11917] bond8: (slave bridge11): the permanent HWaddr of slave - 52:e0:dc:08:ee:c9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  161.433785][T11917] bond8: (slave bridge12): Releasing active interface
[  161.438104][T11917] bond19: (slave gretap4): Releasing active interface
[  161.441215][T11917] bond8: (slave macvlan4): Releasing active interface
[  161.538219][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.540303][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'.
[  161.541100][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.550768][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.553636][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.556684][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.559562][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  161.569837][T11932] 8021q: adding VLAN 0 to HW filter on device bond23
[  161.577008][T11932] bond23: (slave ip6gretap3): making interface the new active one
[  161.580365][T11932] bond23: (slave ip6gretap3): Enslaving as an active interface with an up link
[  161.594447][T11932] erspan0: entered allmulticast mode
[  161.616956][T11946] bond23: (slave ip6gretap3): Releasing active interface
[  161.630373][T11940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.634125][T11940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.873203][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'.
[  161.903118][T11973] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  161.907405][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.0.1619 Not tainted syzkaller #0 PREEMPT(full) 
[  161.907417][T11973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.907423][T11973] Call Trace:
[  161.907427][T11973]  <TASK>
[  161.907430][T11973]  dump_stack_lvl+0x189/0x250
[  161.907446][T11973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.907456][T11973]  ? __pfx__printk+0x10/0x10
[  161.907467][T11973]  ? kernfs_root+0x1c/0x230
[  161.907477][T11973]  ? kernfs_path_from_node+0x2f/0x290
[  161.907485][T11973]  ? kernfs_path_from_node+0x250/0x290
[  161.907493][T11973]  ? kernfs_path_from_node+0x2f/0x290
[  161.907503][T11973]  sysfs_warn_dup+0x8e/0xa0
[  161.907510][T11973]  sysfs_do_create_link_sd+0xc0/0x110
[  161.907519][T11973]  device_add_class_symlinks+0x1cf/0x240
[  161.907528][T11973]  device_add+0x475/0xb50
[  161.907536][T11973]  wiphy_register+0x1ba6/0x28d0
[  161.907551][T11973]  ? __pfx_wiphy_register+0x10/0x10
[  161.907561][T11973]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  161.907571][T11973]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  161.907582][T11973]  ieee80211_register_hw+0x3425/0x4080
[  161.907594][T11973]  ? ieee80211_register_hw+0x14e1/0x4080
[  161.907605][T11973]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  161.907615][T11973]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.907627][T11973]  ? __hrtimer_setup+0x187/0x210
[  161.907634][T11973]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  161.907647][T11973]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  161.907662][T11973]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  161.907671][T11973]  ? trace_kmalloc+0x1f/0xd0
[  161.907681][T11973]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  161.907693][T11973]  ? kstrndup+0xbf/0x160
[  161.907703][T11973]  hwsim_new_radio_nl+0xea4/0x1b10
[  161.907713][T11973]  ? __pfx___nla_validate_parse+0x10/0x10
[  161.907727][T11973]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.907739][T11973]  ? __nla_parse+0x40/0x60
[  161.907750][T11973]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  161.907761][T11973]  genl_family_rcv_msg_doit+0x215/0x300
[  161.907771][T11973]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  161.907782][T11973]  ? bpf_lsm_capable+0x9/0x20
[  161.907800][T11973]  ? security_capable+0x7e/0x2e0
[  161.907814][T11973]  genl_rcv_msg+0x60e/0x790
[  161.907824][T11973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.907832][T11973]  ? __kasan_slab_alloc+0x6c/0x80
[  161.907843][T11973]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  161.907852][T11973]  ? __netlink_lookup+0xbd/0x810
[  161.907859][T11973]  ? rcu_is_watching+0x15/0xb0
[  161.907868][T11973]  netlink_rcv_skb+0x208/0x470
[  161.907879][T11973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  161.907888][T11973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.907900][T11973]  ? lock_release+0x4b/0x3e0
[  161.907912][T11973]  ? down_read+0x1ad/0x2e0
[  161.907919][T11973]  genl_rcv+0x28/0x40
[  161.907927][T11973]  netlink_unicast+0x82f/0x9e0
[  161.907938][T11973]  ? __pfx_netlink_unicast+0x10/0x10
[  161.907948][T11973]  ? netlink_sendmsg+0x642/0xb30
[  161.907954][T11973]  ? skb_put+0x11b/0x210
[  161.907962][T11973]  netlink_sendmsg+0x805/0xb30
[  161.907970][T11973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.907977][T11973]  ? futex_unqueue+0x22/0x240
[  161.907986][T11973]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.907993][T11973]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.908001][T11973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.908008][T11973]  __sock_sendmsg+0x21c/0x270
[  161.908018][T11973]  ____sys_sendmsg+0x505/0x830
[  161.908026][T11973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.908036][T11973]  ? import_iovec+0x74/0xa0
[  161.908045][T11973]  ___sys_sendmsg+0x21f/0x2a0
[  161.908053][T11973]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.908062][T11973]  ? futex_wait+0x285/0x360
[  161.908078][T11973]  ? __fget_files+0x2a/0x420
[  161.908084][T11973]  ? __fget_files+0x3a0/0x420
[  161.908093][T11973]  __x64_sys_sendmsg+0x19b/0x260
[  161.908101][T11973]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.908112][T11973]  ? rcu_is_watching+0x15/0xb0
[  161.908120][T11973]  do_syscall_64+0xfa/0x3b0
[  161.908127][T11973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.908135][T11973]  ? exc_page_fault+0x9f/0xf0
[  161.908146][T11973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.908153][T11973] RIP: 0033:0x7fa82318ebe9
[  161.908162][T11973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.908169][T11973] RSP: 002b:00007fa824057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.908178][T11973] RAX: ffffffffffffffda RBX: 00007fa8233b6090 RCX: 00007fa82318ebe9
[  161.908200][T11973] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  161.908207][T11973] RBP: 00007fa823211e19 R08: 0000000000000000 R09: 0000000000000000
[  161.908213][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.908219][T11973] R13: 00007fa8233b6128 R14: 00007fa8233b6090 R15: 00007ffd6ee9df78
[  161.908228][T11973]  </TASK>
[  162.082121][T11975] syzkaller1: entered promiscuous mode
[  162.083968][T11975] syzkaller1: entered allmulticast mode
[  162.406169][T11988] syzkaller0: entered promiscuous mode
[  162.407962][T11988] syzkaller0: entered allmulticast mode
[  162.502228][T11999] geneve3: entered promiscuous mode
[  162.504435][T11999] geneve3: entered allmulticast mode
[  162.507911][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56228 - 0
[  162.511138][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 35950 - 0
[  162.514398][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56228 - 0
[  162.524822][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 35950 - 0
[  162.527975][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56228 - 0
[  162.531060][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 35950 - 0
[  162.536238][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56228 - 0
[  162.539427][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 35950 - 0
[  162.591589][T12012] k*]: entered promiscuous mode
[  162.599429][T12012] veth0_to_team: entered promiscuous mode
[  162.601867][T12012] veth0_to_team: entered allmulticast mode
[  163.549109][T12022] lo speed is unknown, defaulting to 1000
[  163.592334][T12022] lo speed is unknown, defaulting to 1000
[  163.665316][T12029] validate_nla: 5 callbacks suppressed
[  163.665328][T12029] netlink: 'syz.1.1636': attribute type 4 has an invalid length.
[  163.670328][T12029] netlink: 'syz.1.1636': attribute type 4 has an invalid length.
[  163.871079][T12037] bridge0: port 1(vlan3) entered blocking state
[  163.873308][T12037] bridge0: port 1(vlan3) entered disabled state
[  163.876428][T12037] vlan3: entered allmulticast mode
[  163.878429][T12037] bridge0: entered allmulticast mode
[  163.881413][T12037] vlan3: left allmulticast mode
[  163.883329][T12037] bridge0: left allmulticast mode
[  163.947777][T12039] syzkaller1: entered promiscuous mode
[  163.950133][T12039] syzkaller1: entered allmulticast mode
[  164.308867][T12052] xfrm0: entered promiscuous mode
[  164.310590][T12052] xfrm0: entered allmulticast mode
[  164.333091][T12057] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.384906][T12058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.388237][T12058] syzkaller0: entered promiscuous mode
[  164.390462][T12058] syzkaller0: entered allmulticast mode
[  164.397869][T12058] tipc: Resetting bearer <eth:syzkaller0>
[  164.592406][T12065] syzkaller1: entered promiscuous mode
[  164.594313][T12065] syzkaller1: entered allmulticast mode
[  165.163787][T12056] tipc: Resetting bearer <eth:syzkaller0>
[  165.167690][T12056] tipc: Disabling bearer <eth:syzkaller0>
[  165.575669][T12096] 8021q: adding VLAN 0 to HW filter on device bond22
[  165.580337][T12096] bond22: entered promiscuous mode
[  165.582168][T12096] bond22: entered allmulticast mode
[  165.584124][T12096] bond0: (slave bond22): Enslaving as an active interface with an up link
[  165.615558][T12100] syzkaller0: entered promiscuous mode
[  165.617854][T12100] syzkaller0: entered allmulticast mode
[  165.721919][T12106] netlink: 'syz.2.1662': attribute type 1 has an invalid length.
[  165.751346][T12106] bond23: (slave gretap3): making interface the new active one
[  165.755256][T12106] bond23: (slave gretap3): Enslaving as an active interface with an up link
[  165.827400][T12109] bond23: (slave gretap4): Enslaving as an active interface with an up link
[  166.534379][T12111] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  166.567199][T12113] netlink: 'syz.1.1664': attribute type 1 has an invalid length.
[  166.580060][T12113] 8021q: adding VLAN 0 to HW filter on device bond26
[  166.584288][T12113] __nla_validate_parse: 16 callbacks suppressed
[  166.584299][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1664'.
[  166.611289][T12116] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1665'.
[  166.667544][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'.
[  166.679429][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1668'.
[  166.683539][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'.
[  166.693347][T12123] netlink: 'syz.1.1667': attribute type 1 has an invalid length.
[  166.707202][T12123] bond27: (slave geneve4): making interface the new active one
[  166.709850][T12123] bond27: (slave geneve4): Enslaving as an active interface with an up link
[  166.714566][ T5858] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  166.717506][ T5858] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  166.728612][ T5858] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  166.731988][ T5858] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  166.776906][T12138] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1670'.
[  166.825773][T12149] netlink: 'syz.2.1673': attribute type 101 has an invalid length.
[  166.828495][T12149] netlink: 'syz.2.1673': attribute type 7 has an invalid length.
[  166.839702][T12149] netlink: 'syz.2.1673': attribute type 7 has an invalid length.
[  166.842838][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'.
[  166.880438][T12152] netlink: 'syz.1.1674': attribute type 2 has an invalid length.
[  166.883726][T12152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.951881][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1676'.
[  166.962323][T12158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1676'.
[  166.975419][T12160] netlink: 'syz.1.1677': attribute type 1 has an invalid length.
[  166.998743][T12160] bond28: (slave gretap4): making interface the new active one
[  167.001571][T12160] bond28: (slave gretap4): Enslaving as an active interface with an up link
[  167.077594][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1678'.
[  167.274253][T12190] 8021q: adding VLAN 0 to HW filter on device bond25
[  167.303267][T12193] batadv_slave_0: entered promiscuous mode
[  167.313385][T12194] batadv_slave_0: left promiscuous mode
[  167.334003][T12198] sctp: [Deprecated]: syz.2.1685 (pid 12198) Use of int in maxseg socket option.
[  167.334003][T12198] Use struct sctp_assoc_value instead
[  167.616844][T12217] sctp: [Deprecated]: syz.2.1689 (pid 12217) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.616844][T12217] Use struct sctp_sack_info instead
[  168.516764][T12245] xfrm0: left promiscuous mode
[  168.518482][T12245] xfrm0: left allmulticast mode
[  169.338504][T12252] validate_nla: 2 callbacks suppressed
[  169.338519][T12252] netlink: 'syz.2.1701': attribute type 10 has an invalid length.
[  169.365073][T12254] netlink: 'syz.2.1702': attribute type 15 has an invalid length.
[  169.438646][T12261] pim6reg: entered allmulticast mode
[  169.509549][T12266] netlink: 'syz.2.1706': attribute type 1 has an invalid length.
[  169.523736][T12266] 8021q: adding VLAN 0 to HW filter on device bond26
[  169.533417][T12266] bond26: (slave ip6gretap4): making interface the new active one
[  169.536964][T12266] bond26: (slave ip6gretap4): Enslaving as an active interface with an up link
[  169.626547][T12268] veth13: entered promiscuous mode
[  169.629293][T12268] erspan0: entered allmulticast mode
[  170.547687][T12295] netlink: 'syz.2.1713': attribute type 2 has an invalid length.
[  170.554157][T12295] k*]: entered promiscuous mode
[  170.569813][T12295] erspan0: left allmulticast mode
[  170.588969][T12295] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.593178][T12295] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  170.611687][T12298] lo speed is unknown, defaulting to 1000
[  170.687034][T12298] lo speed is unknown, defaulting to 1000
[  170.687200][T12297] lo speed is unknown, defaulting to 1000
[  170.780336][T12297] lo speed is unknown, defaulting to 1000
[  171.147600][ T5877] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 56228 - 0
[  171.153477][ T5877] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 35950 - 0
[  171.157425][ T5877] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  171.161553][ T5877] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 56228 - 0
[  171.164272][ T5877] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 35950 - 0
[  171.168166][ T5877] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  171.172938][ T5877] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 56228 - 0
[  171.179806][ T5877] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 35950 - 0
[  171.184836][ T5877] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  171.189161][ T5877] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 56228 - 0
[  171.194237][ T5877] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 35950 - 0
[  171.200195][ T5877] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  171.217221][T12315] netlink: 'syz.0.1719': attribute type 2 has an invalid length.
[  171.389927][T12342] pimreg: left allmulticast mode
[  171.489007][T12358] vti1: entered promiscuous mode
[  171.491049][T12358] vti1: entered allmulticast mode
[  171.661480][T12373] geneve5: entered promiscuous mode
[  171.679905][T12376] __nla_validate_parse: 21 callbacks suppressed
[  171.679917][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1735'.
[  171.698366][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1735'.
[  171.745625][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  171.749166][T12378] netlink: 'syz.0.1736': attribute type 30 has an invalid length.
[  171.757307][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'.
[  171.757378][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.762590][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.762678][T12378] netlink: 'syz.0.1736': attribute type 30 has an invalid length.
[  171.765198][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.765216][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.857270][T12395] netlink: 'syz.1.1740': attribute type 4 has an invalid length.
[  172.017896][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1742'.
[  172.021669][T12401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1742'.
[  172.067640][T12406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1743'.
[  172.092031][T12406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1743'.
[  172.110333][T12406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1743'.
[  172.130787][T12406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1743'.
[  172.577557][T12456] : renamed from wg2
[  172.672021][T12460] netlink: 'syz.0.1749': attribute type 10 has an invalid length.
[  172.677034][T12460] !: entered promiscuous mode
[  172.679048][T12460] !: entered allmulticast mode
[  172.681444][T12460] bond0: (slave 0!): Enslaving as an active interface with an up link
[  173.331385][T12484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  173.378852][T12486] vlan3: entered promiscuous mode
[  173.380994][T12486] bridge0: entered promiscuous mode
[  173.449254][T12488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.601101][T10041] lo speed is unknown, defaulting to 1000
[  173.633333][T12530] netlink: 'syz.1.1768': attribute type 1 has an invalid length.
[  173.644320][T12530] 8021q: adding VLAN 0 to HW filter on device bond29
[  173.655748][T12533] 8021q: adding VLAN 0 to HW filter on device bond27
[  173.665214][T12533] 8021q: adding VLAN 0 to HW filter on device bond27
[  173.667601][T12533] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address
[  173.684426][T12533] bond27: (slave vxcan3): Error -95 calling set_mac_address
[  173.705581][T12537] 8021q: adding VLAN 0 to HW filter on device bond30
[  173.715839][T12539] bond27: (slave bridge13): Enslaving as an active interface with a down link
[  202.660717][T12551] lo speed is unknown, defaulting to 1000
[  202.663709][T12552] bond0: (slave 0!): Releasing backup interface
[  202.669096][T12552] !: left promiscuous mode
[  202.671001][T12552] !: left allmulticast mode
[  202.677720][T12551] lo speed is unknown, defaulting to 1000
[  202.680327][T12551] lo speed is unknown, defaulting to 1000
[  202.690223][T12551] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  202.705866][T12551] lo speed is unknown, defaulting to 1000
[  202.708816][T12551] lo speed is unknown, defaulting to 1000
[  202.720188][T12551] lo speed is unknown, defaulting to 1000
[  202.745941][T12569] __nla_validate_parse: 33 callbacks suppressed
[  202.745953][T12569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1778'.
[  202.751456][T12569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1778'.
[  202.896594][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1780'.
[  202.970326][T12584] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  202.994058][T12588] validate_nla: 2 callbacks suppressed
[  202.994068][T12588] netlink: 'syz.1.1783': attribute type 12 has an invalid length.
[  203.030408][T12591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1784'.
[  203.541867][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'.
[  203.546439][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1786'.
[  203.562417][T12597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.566972][T12597] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  203.570092][T12597] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  203.846231][T12615] netlink: 'syz.2.1791': attribute type 5 has an invalid length.
[  203.854420][T12615] bond0: (slave bond22): Releasing backup interface
[  203.857918][T12615] bond22: left promiscuous mode
[  203.859791][T12615] bond22: left allmulticast mode
[  203.862119][T12615] bond23: (slave gretap3): Releasing active interface
[  203.864801][T12615] bond23: (slave gretap3): the permanent HWaddr of slave - 96:96:bc:05:b9:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  203.870156][T12615] bond23: (slave gretap4): making interface the new active one
[  203.874158][T12615] bond23: (slave gretap4): Releasing active interface
[  203.878451][T12615] bond26: (slave ip6gretap4): Releasing active interface
[  203.883793][T12615] bond27: (slave bridge13): Releasing active interface
[  203.903945][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  204.188283][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1796'.
[  204.546287][T12646] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.552945][T12646] tipc: Resetting bearer <eth:syzkaller0>
[  204.644441][T12651] bridge_slave_0: entered promiscuous mode
[  204.647698][T12651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  204.656773][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'.
[  204.769314][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1806'.
[  205.415716][T12694] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.610156][T12726] netlink: 'syz.0.1826': attribute type 3 has an invalid length.
[  205.968469][T12771] netlink: 'syz.0.1833': attribute type 12 has an invalid length.
[  206.026322][T12774] bond31: entered promiscuous mode
[  206.120620][T12785] sit5: entered promiscuous mode
[  206.148090][T12791] gretap0: entered promiscuous mode
[  206.151907][T12791] gretap0: left promiscuous mode
[  206.268813][T12796] netlink: 'syz.0.1838': attribute type 7 has an invalid length.
[  206.461816][T12826] netlink: 'syz.1.1844': attribute type 8 has an invalid length.
[  206.464379][T12817] lo speed is unknown, defaulting to 1000
[  206.537521][T12817] lo speed is unknown, defaulting to 1000
[  206.540774][T12817] lo speed is unknown, defaulting to 1000
[  206.553604][T12833] C: renamed from team_slave_0
[  206.565771][T12833] netlink: 'syz.2.1847': attribute type 4 has an invalid length.
[  206.568597][T12833] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  206.686230][T12848] syzkaller0: entered promiscuous mode
[  206.688312][T12848] syzkaller0: entered allmulticast mode
[  206.759274][T12855] netlink: 'syz.1.1853': attribute type 3 has an invalid length.
[  206.771866][T12855] siw: device registration error -23
[  206.790423][T12855] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.793946][T12855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.799818][   T47] lo speed is unknown, defaulting to 1000
[  206.804110][   T47] syz2: Port: 1 Link ACTIVE
[  206.830178][T12859] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.836928][T12859] sch_tbf: burst 12 is lower than device syzkaller0 mtu (313) !
[  206.929484][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  206.937931][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  206.946969][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  206.958151][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  206.967278][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  206.979099][T12869] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  207.000430][T12874] netlink: 'syz.0.1856': attribute type 27 has an invalid length.
[  207.007699][T12874] erspan0: left allmulticast mode
[  207.016609][T12874] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.020392][T12874] 8021q: adding VLAN 0 to HW filter on device team0
[  207.034428][   T10] lo speed is unknown, defaulting to 1000
[  207.036790][   T10] syz1: Port: 1 Link ACTIVE
[  207.547352][T12902] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  207.601044][T12906] netlink: 'syz.2.1863': attribute type 1 has an invalid length.
[  207.611706][T12906] 8021q: adding VLAN 0 to HW filter on device bond28
[  207.800512][T12923] vlan0: entered allmulticast mode
[  207.821156][T12928] pim6reg1: entered promiscuous mode
[  207.823234][T12928] pim6reg1: entered allmulticast mode
[  207.875699][T12928] __nla_validate_parse: 30 callbacks suppressed
[  207.875711][T12928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1870'.
[  207.883147][T12928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1870'.
[  207.890667][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'.
[  207.957774][T12941] 8021q: adding VLAN 0 to HW filter on device bond32
[  208.013017][T12948] 8021q: adding VLAN 0 to HW filter on device bond25
[  208.017129][T12948] bond24: (slave bond25): making interface the new active one
[  208.020994][T12948] bond24: (slave bond25): Enslaving as an active interface with an up link
[  208.036186][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1877'.
[  208.040341][T12948] 8021q: adding VLAN 0 to HW filter on device bond24
[  208.067478][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'.
[  208.120011][T12975] validate_nla: 2 callbacks suppressed
[  208.120027][T12975] netlink: 'syz.1.1883': attribute type 2 has an invalid length.
[  208.128229][T12978] netlink: 'syz.0.1884': attribute type 2 has an invalid length.
[  208.135118][T12975] net_ratelimit: 61 callbacks suppressed
[  208.135130][T12975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.144102][T12978] netlink: 'syz.0.1884': attribute type 10 has an invalid length.
[  208.147726][T12978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.151410][T12978] batadv0: entered promiscuous mode
[  208.153325][T12978] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  208.160179][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1883'.
[  208.163756][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'.
[  208.172873][T12980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.207812][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'.
[  208.213349][T12985] macvlan3: entered promiscuous mode
[  208.216255][T12985] bond0: entered promiscuous mode
[  208.223358][T12985] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  208.292919][T13002] gtp1: entered promiscuous mode
[  208.307296][T13003] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1891'.
[  208.352636][T13008] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1893'.
[  208.358936][ T5858] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.361907][ T5858] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.366053][ T5858] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.368600][ T5858] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.414310][T13009] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  208.425856][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.500231][T13021] netlink: 'syz.1.1896': attribute type 1 has an invalid length.
[  208.509934][T13021] 8021q: adding VLAN 0 to HW filter on device bond33
[  208.519252][T13021] tap0: tun_chr_ioctl cmd 1074025677
[  208.521096][T13021] tap0: linktype set to 0
[  208.699557][T13024] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.801381][T13033] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  208.922366][T13044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.987024][T13050] netlink: 'syz.1.1903': attribute type 1 has an invalid length.
[  209.143593][T13068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.147763][T13068] syzkaller0: entered promiscuous mode
[  209.149433][T13068] syzkaller0: entered allmulticast mode
[  209.155738][T13067] tipc: Resetting bearer <eth:syzkaller0>
[  209.160642][T13067] tipc: Disabling bearer <eth:syzkaller0>
[  209.279064][T13084] netlink: 'syz.2.1910': attribute type 10 has an invalid length.
[  209.368089][T13073] netlink: 'syz.0.1908': attribute type 1 has an invalid length.
[  209.500079][T13104] xfrm1: entered promiscuous mode
[  209.502363][T13104] xfrm1: entered allmulticast mode
[  209.571931][T13112] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  209.586255][T13112] 8021q: adding VLAN 0 to HW filter on device bond29
[  209.600062][   T10] lo speed is unknown, defaulting to 1000
[  209.603170][   T10] syz1: Port: 1 Link DOWN
[  209.613388][T13112] 8021q: adding VLAN 0 to HW filter on device bond29
[  209.618158][T13112] bond29: (slave vxcan3): The slave device specified does not support setting the MAC address
[  209.623604][T13112] bond29: (slave vxcan3): Error -95 calling set_mac_address
[  209.660462][T13123] netlink: 'syz.0.1919': attribute type 10 has an invalid length.
[  209.841927][T13145] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.926323][T13151] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  210.602404][T13154] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  210.607476][T13154] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  210.621015][T13156] netlink: 'syz.2.1926': attribute type 1 has an invalid length.
[  210.641767][T13156] 8021q: adding VLAN 0 to HW filter on device bond30
[  210.665494][T13161] lo speed is unknown, defaulting to 1000
[  210.681055][T13156] vlan3: entered promiscuous mode
[  210.683116][T13156] bond30: entered promiscuous mode
[  210.685842][T13156] vlan3: entered allmulticast mode
[  210.687902][T13156] bond30: entered allmulticast mode
[  210.739281][T13161] lo speed is unknown, defaulting to 1000
[  210.742208][T13161] lo speed is unknown, defaulting to 1000
[  210.790519][T13163] lo speed is unknown, defaulting to 1000
[  210.794089][T13165] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  210.907152][T13163] lo speed is unknown, defaulting to 1000
[  210.911542][T13163] lo speed is unknown, defaulting to 1000
[  211.080531][T13189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.140281][T13199] smc: removing ib device syz0
[  211.235088][T13204] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.443831][T13210] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  211.448229][T13210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  211.564213][T13228] netem: unknown loss type 12
[  211.603884][T13230] 8021q: adding VLAN 0 to HW filter on device bond34
[  211.619478][T13234] veth13: entered allmulticast mode
[  211.653265][T13237] netdevsim0: tun_chr_ioctl cmd 1074025673
[  211.656473][T13236] netdevsim0: tun_chr_ioctl cmd 1074025677
[  211.658916][T13236] netdevsim0: linktype set to 6
[  211.742798][T13242] lo speed is unknown, defaulting to 1000
[  211.746258][T13242] lo speed is unknown, defaulting to 1000
[  211.870974][T13250] 8021q: adding VLAN 0 to HW filter on device bond26
[  211.893726][T13254] xfrm0: entered promiscuous mode
[  211.896127][T13254] xfrm0: entered allmulticast mode
[  211.942806][T13262] lo speed is unknown, defaulting to 1000
[  211.949924][T13262] lo speed is unknown, defaulting to 1000
[  212.096223][T13276] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.203210][T13271] sit5: left promiscuous mode
[  212.211506][T13271] xfrm1: left promiscuous mode
[  212.213431][T13271] xfrm1: left allmulticast mode
[  212.215336][T13271] veth13: left allmulticast mode
[  212.230887][T13252] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.234324][T13252] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.237769][T13252] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.248858][T13252] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.270463][T13282] syzkaller1: entered promiscuous mode
[  212.272778][T13282] syzkaller1: entered allmulticast mode
[  212.556665][T13306] syzkaller1: entered promiscuous mode
[  212.558942][T13306] syzkaller1: entered allmulticast mode
[  212.646542][T13314] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  212.711514][T13325] veth0_to_batadv: entered promiscuous mode
[  212.714081][T13325] veth0_to_batadv: entered allmulticast mode
[  212.750605][T13327] wg1 speed is unknown, defaulting to 1000
[  212.753030][T13327] wg1 speed is unknown, defaulting to 1000
[  212.762184][T13327] wg1 speed is unknown, defaulting to 1000
[  212.768257][T13327] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  212.781313][T13327] wg1 speed is unknown, defaulting to 1000
[  212.781893][T13329] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  212.783870][T13327] wg1 speed is unknown, defaulting to 1000
[  212.790273][T13327] wg1 speed is unknown, defaulting to 1000
[  213.008406][T13338] __nla_validate_parse: 43 callbacks suppressed
[  213.008423][T13338] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1971'.
[  213.042617][T13357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.051643][T13359] bond23: (slave bridge17): Releasing active interface
[  213.055352][T13359] bond24: (slave bridge18): Releasing active interface
[  213.058375][T13359] bond27: (slave geneve4): Releasing active interface
[  213.061772][T13359] bond28: (slave gretap4): Releasing active interface
[  213.067109][T13357] macvlan0: entered promiscuous mode
[  213.069265][T13357] macvlan0: entered allmulticast mode
[  213.072823][T13357] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  213.119293][T13356] tipc: Disabling bearer <eth:syzkaller0>
[  213.139750][T13369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.158010][T13369] tun0: tun_chr_ioctl cmd 2147767520
[  213.271130][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'.
[  213.483314][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  213.487844][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'.
[  213.493573][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.496265][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  213.497884][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.500643][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'.
[  213.502110][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.508180][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.125130][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1988'.
[  214.221185][T13417] validate_nla: 34 callbacks suppressed
[  214.221197][T13417] netlink: 'syz.0.1992': attribute type 1 has an invalid length.
[  214.245699][T13417] bond27: entered promiscuous mode
[  214.252768][T13417] 8021q: adding VLAN 0 to HW filter on device bond27
[  214.266556][T13417] 8021q: adding VLAN 0 to HW filter on device bond27
[  214.269895][T13417] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  214.273389][T13417] bond27: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  214.283259][T13417] bond27: (slave vxcan1): making interface the new active one
[  214.286852][T13417] vxcan1: entered promiscuous mode
[  214.289462][T13417] bond27: (slave vxcan1): Enslaving as an active interface with an up link
[  214.292999][T13430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1994'.
[  214.324213][T13432] lo speed is unknown, defaulting to 1000
[  214.327721][T13432] lo speed is unknown, defaulting to 1000
[  214.335064][T13432] wg1 speed is unknown, defaulting to 1000
[  214.364095][T13434] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1996'.
[  214.432323][T13432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1995'.
[  214.489831][T13446] pim6reg1: entered promiscuous mode
[  214.491908][T13446] pim6reg1: entered allmulticast mode
[  214.522940][T13450] vlan4: entered promiscuous mode
[  214.609078][T13453] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  214.738234][T13461] netlink: 'syz.1.2003': attribute type 3 has an invalid length.
[  214.746383][T13463] bond27: (slave vxcan1): Releasing backup interface
[  214.749081][T13463] vxcan1 (unregistering): left promiscuous mode
[  214.752958][T13463] bond27: Destroying bond
[  214.759047][T13463] bond27 (unregistering): Released all slaves
[  214.823890][T13467] netlink: 'syz.1.2005': attribute type 3 has an invalid length.
[  214.846800][T13476] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  214.857094][T13475] netlink: 'syz.0.2007': attribute type 1 has an invalid length.
[  215.058670][T13509] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  215.156824][T13521] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  215.200182][T13536] netlink: 'syz.0.2020': attribute type 1 has an invalid length.
[  215.220715][T13536] 8021q: adding VLAN 0 to HW filter on device bond28
[  215.242145][T13541] netlink: 'syz.0.2021': attribute type 20 has an invalid length.
[  215.245412][T13541] netlink: 'syz.0.2021': attribute type 20 has an invalid length.
[  215.338691][T13545] lo speed is unknown, defaulting to 1000
[  215.341723][T13545] lo speed is unknown, defaulting to 1000
[  215.345150][T13545] wg1 speed is unknown, defaulting to 1000
[  215.417772][T13547] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.467254][T13554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.580757][T13561] netlink: 'syz.2.2026': attribute type 10 has an invalid length.
[  215.707175][T13570] 8021q: adding VLAN 0 to HW filter on device bond31
[  215.741858][T13573] netlink: 'syz.2.2030': attribute type 10 has an invalid length.
[  216.039114][T13592] netlink: 'syz.1.2034': attribute type 1 has an invalid length.
[  216.059978][T13592] 8021q: adding VLAN 0 to HW filter on device bond35
[  216.099595][T13591] bond35: (slave bridge25): making interface the new active one
[  216.103745][T13591] bond35: (slave bridge25): Enslaving as an active interface with an up link
[  216.140190][T13600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.187983][T13603] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.242063][T13609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.502858][T13627] nbd: nbd1 already in use
[  216.505574][T13627] block nbd1: NBD_DISCONNECT
[  216.507565][T13627] block nbd1: Send disconnect failed -32
[  216.509911][T13627] block nbd1: Send disconnect failed -32
[  216.586120][T13629] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  216.653220][T13635] vlan1: entered allmulticast mode
[  216.657417][T13635] gretap0: entered allmulticast mode
[  216.739029][T13646] lo speed is unknown, defaulting to 1000
[  216.742002][T13646] lo speed is unknown, defaulting to 1000
[  216.747851][T13646] wg1 speed is unknown, defaulting to 1000
[  217.298622][T13693] bond35: (slave bridge25): Releasing active interface
[  217.327003][T13693] lo speed is unknown, defaulting to 1000
[  217.330045][T13693] lo speed is unknown, defaulting to 1000
[  217.332802][T13693] wg1 speed is unknown, defaulting to 1000
[  217.452266][T13701] vlan3: entered promiscuous mode
[  217.454468][T13701] bridge0: entered promiscuous mode
[  217.551732][T13706] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  217.555747][T13706] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  217.559493][T13706] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  217.639709][T13708] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.696462][T13709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  218.001745][T13724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.048347][T13726] __nla_validate_parse: 59 callbacks suppressed
[  218.048361][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2071'.
[  218.094949][T13724] nbd2: detected capacity change from 0 to 63
[  218.195530][ T9083] block nbd2: Receive control failed (result -104)
[  218.223236][T13730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2072'.
[  218.503296][T13739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.512018][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.516468][T13739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.520312][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.523652][T13739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.527381][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.530555][T13739] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.533509][T13739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'.
[  218.559716][T13745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.411452][T13761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.557687][T13774] dvmrp8: entered allmulticast mode
[  221.570625][T13777] dvmrp8: left allmulticast mode
[  221.701423][T13789] validate_nla: 133 callbacks suppressed
[  221.701441][T13789] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  221.722595][T13789] 8021q: adding VLAN 0 to HW filter on device bond32
[  221.761783][T13798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.766278][T13797] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.791734][T13789] bond32: (slave geneve2): making interface the new active one
[  221.797397][T13789] bond32: (slave geneve2): Enslaving as an active interface with an up link
[  221.800406][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.803727][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.811950][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.816784][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.883300][T13807] netlink: 'syz.2.2091': attribute type 21 has an invalid length.
[  221.933027][T13809] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  222.257606][T13836] netlink: 'syz.0.2100': attribute type 4 has an invalid length.
[  222.262614][   T47] lo speed is unknown, defaulting to 1000
[  222.265577][   T47] syz1: Port: 1 Link ACTIVE
[  222.315203][T13848] netlink: 'syz.1.2102': attribute type 2 has an invalid length.
[  222.427092][T13860] netlink: 'syz.1.2105': attribute type 1 has an invalid length.
[  222.433195][T13860] netlink: 'syz.1.2105': attribute type 2 has an invalid length.
[  223.149120][T13867] __nla_validate_parse: 128 callbacks suppressed
[  223.149131][T13867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'.
[  223.168067][T13869] netlink: 'syz.0.2108': attribute type 1 has an invalid length.
[  223.187851][T13869] 8021q: adding VLAN 0 to HW filter on device bond29
[  223.216535][T13869] bond29: (slave veth15): Enslaving as an active interface with a down link
[  223.220423][T13874] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2110'.
[  223.253690][T13869] macvlan6: entered promiscuous mode
[  223.256273][T13869] macvlan6: entered allmulticast mode
[  223.259064][T13869] bond29: entered promiscuous mode
[  223.262796][T13869] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  223.266419][T13869] bond29: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.273059][T13869] bond29: left promiscuous mode
[  223.286885][T13879] netlink: 'syz.2.2111': attribute type 1 has an invalid length.
[  223.290366][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'.
[  223.445211][T13901] netlink: 'syz.2.2116': attribute type 1 has an invalid length.
[  223.449883][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'.
[  223.476659][T13903] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.491154][T13905] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.553426][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  223.556794][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  223.559899][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  223.608570][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2123'.
[  223.632064][T13923] netlink: 'syz.1.2124': attribute type 2 has an invalid length.
[  223.636192][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2124'.
[  223.663768][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2125'.
[  223.730776][T13930] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  223.772567][T13938] 8021q: adding VLAN 0 to HW filter on device bond34
[  223.785065][T13938] bond34: (slave bridge0): making interface the new active one
[  223.788534][T13938] bond34: (slave bridge0): Enslaving as an active interface with an up link
[  223.807662][T13938] bond34: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  223.912514][T13953] tipc: Resetting bearer <ib:ip6gre0>
[  223.922615][T13953] veth0_to_team: left promiscuous mode
[  223.924957][T13953] veth0_to_team: left allmulticast mode
[  223.927072][T13953] veth0_to_batadv: left promiscuous mode
[  223.928968][T13953] veth0_to_batadv: left allmulticast mode
[  223.933686][T13953] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  223.936326][T13953] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  223.941869][T13953] veth7: left promiscuous mode
[  223.943821][T13953] geneve3: left promiscuous mode
[  223.945891][T13953] geneve3: left allmulticast mode
[  223.948178][T13953] vti1: left promiscuous mode
[  223.949658][T13953] vti1: left allmulticast mode
[  223.952633][T13953] bond31: left promiscuous mode
[  223.959804][T13953] bond0: left promiscuous mode
[  223.961510][T13953] macvlan3: left promiscuous mode
[  223.964198][T13953] gtp1: left promiscuous mode
[  223.984012][T13953] vlan1: left allmulticast mode
[  223.988298][T13953] gretap0: left allmulticast mode
[  223.990805][   T47] lo speed is unknown, defaulting to 1000
[  223.992712][   T47] syz2: Port: 1 Link DOWN
[  223.996854][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.999553][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.002194][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.007529][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  224.024252][T13968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.045929][T13965] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  224.142847][T13980] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  224.146034][T13980] batadv0: left promiscuous mode
[  224.148213][T13980] bond0 (unregistering): Released all slaves
[  224.221632][T13988] 8021q: adding VLAN 0 to HW filter on device bond37
[  224.269057][T13994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.275128][    T9] lo speed is unknown, defaulting to 1000
[  224.277425][    T9] syz2: Port: 1 Link ACTIVE
[  224.289542][T13989] pimreg3: entered allmulticast mode
[  224.446690][T14009] vlan1: entered promiscuous mode
[  224.448637][T14009] vlan1: entered allmulticast mode
[  224.450794][T14009] hsr_slave_1: entered allmulticast mode
[  224.577117][T14029] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.665616][T14034] veth17: entered promiscuous mode
[  224.670303][T14034] bond30: (slave veth17): Enslaving as a backup interface with a down link
[  224.675963][T14034] 8021q: adding VLAN 0 to HW filter on device bond30
[  224.808659][T14042] IPVS: Scheduler module ip_vs_sip not found
[  225.082748][T14068] syz.0.2164 uses old SIOCAX25GETINFO
[  225.476479][T14074] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  225.480068][T14074] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  225.482931][T14074] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  225.488542][T14074] netem: change failed
[  225.865743][T14103] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.869263][T14103] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  225.968889][T14114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.042725][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.056146][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.059460][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.061920][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.066309][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.069056][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.072039][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.077089][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.085262][T14119] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.089356][T14119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  226.191307][T14139] 8021q: adding VLAN 0 to HW filter on device bond31
[  226.202287][T14139] bond31: (slave gretap5): making interface the new active one
[  226.206164][T14139] bond31: (slave gretap5): Enslaving as an active interface with an up link
[  226.216855][T14142] lo speed is unknown, defaulting to 1000
[  226.219204][T14142] lo speed is unknown, defaulting to 1000
[  226.222860][T14142] wg1 speed is unknown, defaulting to 1000
[  226.236516][T14139] macsec0: entered promiscuous mode
[  226.238456][T14139] bond0: entered promiscuous mode
[  226.241636][T14139] bond0: left promiscuous mode
[  226.303258][T14154] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  226.364297][T14161] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  226.452234][T14170] batadv_slave_0: entered promiscuous mode
[  226.552490][T14176] pim6reg: entered allmulticast mode
[  226.657051][T14183] netlink: get zone limit has 8 unknown bytes
[  226.668679][T14183] sctp: [Deprecated]: syz.2.2201 (pid 14183) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.668679][T14183] Use struct sctp_sack_info instead
[  226.950780][T14213] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.031952][T14215] tipc: Resetting bearer <ib:ip6gre0>
[  227.062866][ T5885] lo speed is unknown, defaulting to 1000
[  227.069816][ T5885] syz2: Port: 1 Link DOWN
[  227.158326][   T33] audit: type=1107 audit(1756404241.860:3): pid=14230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  227.409549][T14252] validate_nla: 7 callbacks suppressed
[  227.409560][T14252] netlink: 'syz.2.2219': attribute type 3 has an invalid length.
[  227.443657][T14252] syz_tun: entered allmulticast mode
[  227.446771][T14252] siw: device registration error -23
[  227.466974][T14252] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.470309][T14252] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  227.479580][T14251] syz_tun: left allmulticast mode
[  227.560002][T14261] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  227.878879][T14293] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  227.896459][T14295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  227.899716][T14295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.902771][T14295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  228.033028][T14310] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.039583][T14310] mac80211_hwsim hwsim3 D: renamed from syzkaller0
[  228.043052][T14310] tipc: Disabling bearer <eth:syzkaller0>
[  228.768091][T14338] lo speed is unknown, defaulting to 1000
[  228.771007][T14338] lo speed is unknown, defaulting to 1000
[  228.774035][T14338] wg1 speed is unknown, defaulting to 1000
[  228.927463][T14349] __nla_validate_parse: 48 callbacks suppressed
[  228.927520][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'.
[  229.036157][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'.
[  229.421806][T14381] netlink: 'syz.1.2257': attribute type 58 has an invalid length.
[  229.424277][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2257'.
[  229.611249][T14390] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.635903][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'.
[  229.641294][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2260'.
[  229.648799][T14395] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2261'.
[  229.661069][T14397] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2262'.
[  229.723714][T14402] bond32: (slave geneve2): Releasing active interface
[  229.747327][T14402] bond34: (slave bridge0): Releasing active interface
[  229.764500][T14402] vlan0: entered promiscuous mode
[  229.871193][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'.
[  229.941597][T14429] wireguard0: entered promiscuous mode
[  229.943808][T14429] wireguard0: entered allmulticast mode
[  229.960104][T14432] wireguard0: entered promiscuous mode
[  229.965578][T14432] wireguard0: entered allmulticast mode
[  230.092556][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'.
[  230.128563][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'.
[  230.173347][T14469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.177045][T14469] syzkaller0: entered promiscuous mode
[  230.179302][T14469] syzkaller0: entered allmulticast mode
[  230.186645][T14469] tipc: Resetting bearer <eth:syzkaller0>
[  230.189913][T14468] tipc: Resetting bearer <eth:syzkaller0>
[  230.197444][T14468] tipc: Disabling bearer <eth:syzkaller0>
[  230.357066][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.380344][T14492] netlink: 'syz.2.2288': attribute type 4 has an invalid length.
[  230.380677][T14493] netlink: 'syz.1.2287': attribute type 2 has an invalid length.
[  230.417788][T14495] openvswitch: netlink: Message has 8 unknown bytes.
[  230.417903][T14498] netlink: 'syz.0.2286': attribute type 9 has an invalid length.
[  230.457368][T14495] pim6reg1: entered promiscuous mode
[  230.459542][T14495] pim6reg1: entered allmulticast mode
[  230.609345][T14504] 8021q: adding VLAN 0 to HW filter on device bond35
[  230.613461][T14504] bond35: entered promiscuous mode
[  230.616138][T14504] bond35: entered allmulticast mode
[  230.618662][T14504] bond0: (slave bond35): Enslaving as an active interface with an up link
[  230.698604][T14513] pim6reg1: entered promiscuous mode
[  230.700946][T14513] pim6reg1: entered allmulticast mode
[  230.729887][T14521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.735630][T14521] syzkaller0: entered promiscuous mode
[  230.737908][T14521] syzkaller0: entered allmulticast mode
[  230.746683][T14513] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  230.755579][T14513] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  230.772256][T14513] bond36 (unregistering): Released all slaves
[  230.794201][T14522] syzkaller0: left promiscuous mode
[  230.796199][T14522] syzkaller0: left allmulticast mode
[  230.799762][T14522] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.911866][T14537] syzkaller1: entered allmulticast mode
[  231.001007][ T5885] IPVS: starting estimator thread 0...
[  231.085217][T14540] IPVS: using max 53 ests per chain, 127200 per kthread
[  231.212588][T14547] bond24: (slave bond25): Releasing backup interface
[  231.218414][T14547] bond29: (slave veth15): Releasing active interface
[  231.226343][T14547] bond30: (slave veth17): Releasing backup interface
[  231.233180][T14547] bond31: (slave gretap5): Releasing active interface
[  231.242364][T14547] vlan0: entered promiscuous mode
[  231.244329][T14547] team0: entered promiscuous mode
[  231.247476][T14547] team0: Device vlan0 is already an upper device of the team interface
[  231.384888][T14554] block nbd1: server does not support multiple connections per device.
[  231.388295][T14554] block nbd1: shutting down sockets
[  231.820202][T14564] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  231.823469][T14564] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  231.829526][T14564] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  232.019740][T14584] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  232.023540][T14584] CPU: 1 UID: 0 PID: 14584 Comm: syz.1.2314 Not tainted syzkaller #0 PREEMPT(full) 
[  232.023558][T14584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.023564][T14584] Call Trace:
[  232.023569][T14584]  <TASK>
[  232.023574][T14584]  dump_stack_lvl+0x189/0x250
[  232.023590][T14584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.023600][T14584]  ? __pfx__printk+0x10/0x10
[  232.023610][T14584]  ? kernfs_root+0x1c/0x230
[  232.023620][T14584]  ? kernfs_path_from_node+0x2f/0x290
[  232.023629][T14584]  ? kernfs_path_from_node+0x250/0x290
[  232.023637][T14584]  ? kernfs_path_from_node+0x2f/0x290
[  232.023646][T14584]  sysfs_warn_dup+0x8e/0xa0
[  232.023654][T14584]  sysfs_do_create_link_sd+0xc0/0x110
[  232.023663][T14584]  device_add_class_symlinks+0x1cf/0x240
[  232.023672][T14584]  device_add+0x475/0xb50
[  232.023680][T14584]  wiphy_register+0x1ba6/0x28d0
[  232.023696][T14584]  ? __pfx_wiphy_register+0x10/0x10
[  232.023706][T14584]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  232.023717][T14584]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  232.023727][T14584]  ieee80211_register_hw+0x3425/0x4080
[  232.023739][T14584]  ? ieee80211_register_hw+0x14e1/0x4080
[  232.023749][T14584]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  232.023759][T14584]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.023771][T14584]  ? __hrtimer_setup+0x187/0x210
[  232.023778][T14584]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  232.023791][T14584]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  232.023809][T14584]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  232.023818][T14584]  ? trace_kmalloc+0x1f/0xd0
[  232.023829][T14584]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  232.023846][T14584]  ? kstrndup+0xbf/0x160
[  232.023861][T14584]  hwsim_new_radio_nl+0xea4/0x1b10
[  232.023878][T14584]  ? __pfx___nla_validate_parse+0x10/0x10
[  232.023903][T14584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.023924][T14584]  ? __nla_parse+0x40/0x60
[  232.023944][T14584]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  232.023957][T14584]  genl_family_rcv_msg_doit+0x215/0x300
[  232.023968][T14584]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  232.023981][T14584]  ? bpf_lsm_capable+0x9/0x20
[  232.023992][T14584]  ? security_capable+0x7e/0x2e0
[  232.024004][T14584]  genl_rcv_msg+0x60e/0x790
[  232.024014][T14584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.024022][T14584]  ? __kasan_slab_alloc+0x6c/0x80
[  232.024032][T14584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  232.024042][T14584]  ? __netlink_lookup+0xbd/0x810
[  232.024049][T14584]  ? rcu_is_watching+0x15/0xb0
[  232.024058][T14584]  netlink_rcv_skb+0x208/0x470
[  232.024069][T14584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  232.024078][T14584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  232.024117][T14584]  ? lock_release+0x4b/0x3e0
[  232.024129][T14584]  ? down_read+0x1ad/0x2e0
[  232.024138][T14584]  genl_rcv+0x28/0x40
[  232.024146][T14584]  netlink_unicast+0x82f/0x9e0
[  232.024158][T14584]  ? __pfx_netlink_unicast+0x10/0x10
[  232.024168][T14584]  ? netlink_sendmsg+0x642/0xb30
[  232.024174][T14584]  ? skb_put+0x11b/0x210
[  232.024183][T14584]  netlink_sendmsg+0x805/0xb30
[  232.024191][T14584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.024198][T14584]  ? futex_unqueue+0x22/0x240
[  232.024206][T14584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  232.024214][T14584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  232.024221][T14584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  232.024228][T14584]  __sock_sendmsg+0x21c/0x270
[  232.024239][T14584]  ____sys_sendmsg+0x505/0x830
[  232.024248][T14584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  232.024257][T14584]  ? import_iovec+0x74/0xa0
[  232.024266][T14584]  ___sys_sendmsg+0x21f/0x2a0
[  232.024279][T14584]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.024293][T14584]  ? futex_wait+0x285/0x360
[  232.024320][T14584]  ? __fget_files+0x2a/0x420
[  232.024332][T14584]  ? __fget_files+0x3a0/0x420
[  232.024348][T14584]  __x64_sys_sendmsg+0x19b/0x260
[  232.024365][T14584]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.024383][T14584]  ? rcu_is_watching+0x15/0xb0
[  232.024398][T14584]  ? rcu_is_watching+0x15/0xb0
[  232.024409][T14584]  do_syscall_64+0xfa/0x3b0
[  232.024417][T14584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.024426][T14584]  ? exc_page_fault+0x9f/0xf0
[  232.024437][T14584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.024445][T14584] RIP: 0033:0x7f122c38ebe9
[  232.024454][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.024463][T14584] RSP: 002b:00007f122d204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.024472][T14584] RAX: ffffffffffffffda RBX: 00007f122c5b5fa0 RCX: 00007f122c38ebe9
[  232.024479][T14584] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  232.024485][T14584] RBP: 00007f122c411e19 R08: 0000000000000000 R09: 0000000000000000
[  232.024490][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.024495][T14584] R13: 00007f122c5b6038 R14: 00007f122c5b5fa0 R15: 00007fff62192a08
[  232.024520][T14584]  </TASK>
[  232.209099][T14588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.211333][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.214053][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.217926][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.220852][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.223544][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.233312][T14589] syzkaller0: entered promiscuous mode
[  232.236621][T14589] syzkaller0: entered allmulticast mode
[  232.239708][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.246046][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.249706][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.252351][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.257714][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.260266][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.262838][T14588] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.273229][T14593] tipc: Resetting bearer <eth:syzkaller0>
[  232.292086][T14593] tipc: Resetting bearer <eth:syzkaller0>
[  232.296089][T14593] tipc: Disabling bearer <eth:syzkaller0>
[  232.301054][T14606] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.304059][T14606] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.427835][T14620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.430667][T14620] syzkaller0: entered promiscuous mode
[  232.432439][T14620] syzkaller0: entered allmulticast mode
[  232.439647][T14620] tipc: Resetting bearer <eth:syzkaller0>
[  232.443223][T14619] tipc: Resetting bearer <eth:syzkaller0>
[  232.448480][T14619] tipc: Disabling bearer <eth:syzkaller0>
[  232.513830][T14623] netlink: 'syz.0.2323': attribute type 10 has an invalid length.
[  232.737310][T14638] batadv_slave_0: left promiscuous mode
[  232.751654][T14638] vlan0: left promiscuous mode
[  232.753642][T14638] team0: left promiscuous mode
[  232.763256][T14638] veth17: left promiscuous mode
[  232.770360][ T5885] lo speed is unknown, defaulting to 1000
[  232.772461][ T5885] syz1: Port: 1 Link DOWN
[  232.808197][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.811446][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.816955][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.820166][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.970673][T14657] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  233.038308][T14659] netlink: 'syz.0.2333': attribute type 1 has an invalid length.
[  233.106640][T14669] lo speed is unknown, defaulting to 1000
[  233.108810][T14669] lo speed is unknown, defaulting to 1000
[  233.111198][T14669] wg1 speed is unknown, defaulting to 1000
[  233.193580][T14673] xfrm0: left promiscuous mode
[  233.195752][T14673] xfrm0: left allmulticast mode
[  233.197545][T14673] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  233.285752][T14679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.289389][T14679] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  233.292569][T14679] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  233.374010][T14685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.377648][T14689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.386391][T14691] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.394139][T14691] netlink: 'syz.2.2340': attribute type 10 has an invalid length.
[  233.483831][T14698] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  233.544500][T14704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.547877][T14704] syzkaller0: entered promiscuous mode
[  233.549639][T14704] syzkaller0: entered allmulticast mode
[  233.553618][T14705] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  233.557319][T14704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  233.561667][T14704] tipc: Resetting bearer <eth:syzkaller0>
[  233.564440][T14703] tipc: Resetting bearer <eth:syzkaller0>
[  233.569054][T14703] tipc: Disabling bearer <eth:syzkaller0>
[  233.605494][T14707] netlink: 'syz.0.2344': attribute type 4 has an invalid length.
[  233.609884][T14707] netlink: 'syz.0.2344': attribute type 4 has an invalid length.
[  233.613715][ T5885] lo speed is unknown, defaulting to 1000
[  233.615680][ T5885] syz1: Port: 1 Link ACTIVE
[  233.708686][T14723] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  233.711809][T14723] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  233.867169][T14727] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.898044][T14727] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.927938][T14728] 8021q: adding VLAN 0 to HW filter on device team0
[  233.932835][T14728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  233.949029][T14727] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  233.988492][T14727] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.079901][T14730] nbd: couldn't find device at index 536870912
[  234.179353][T14734] __nla_validate_parse: 19 callbacks suppressed
[  234.179369][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'.
[  234.234496][T14736] tipc: Resetting bearer <eth:syzkaller0>
[  234.302066][ T5858] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.310893][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.318207][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.324146][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.437378][T14746] netlink: 'syz.0.2355': attribute type 1 has an invalid length.
[  234.451983][T14746] 8021q: adding VLAN 0 to HW filter on device bond32
[  234.457734][T14744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2356'.
[  234.470731][T14741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2355'.
[  234.548827][T14761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2359'.
[  234.578692][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'.
[  234.713529][T14777] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.776760][T14777] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.788740][T14782] lo speed is unknown, defaulting to 1000
[  234.791536][T14782] lo speed is unknown, defaulting to 1000
[  234.794329][T14782] wg1 speed is unknown, defaulting to 1000
[  234.820117][T14777] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.877114][T14777] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.182071][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'.
[  235.372593][T14794] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.376274][T14795] syzkaller0: entered promiscuous mode
[  235.378108][T14795] syzkaller0: entered allmulticast mode
[  235.383082][T14793] tipc: Resetting bearer <eth:syzkaller0>
[  235.453911][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  235.482952][T14799] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  235.498315][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.508340][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.522220][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.526127][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.671973][T14817] netlink: 'syz.0.2372': attribute type 1 has an invalid length.
[  235.691873][T14817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2372'.
[  235.725264][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'.
[  235.802297][T14828] bond0: (slave bond35): Releasing backup interface
[  235.806112][T14828] bond35: left promiscuous mode
[  235.808694][T14828] bond35: left allmulticast mode
[  235.814053][T14828] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2374'.
[  235.927730][T14845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.976061][T14849] sctp: [Deprecated]: syz.1.2380 (pid 14849) Use of int in maxseg socket option.
[  235.976061][T14849] Use struct sctp_assoc_value instead
[  236.017299][T14851] 8021q: VLANs not supported on caif0
[  236.578869][T14860] netlink: 'syz.2.2384': attribute type 7 has an invalid length.
[  236.643684][T14871] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  236.647393][T14871] tipc: Bearer <ib:lo>: trying with adjusted priority
[  236.650081][T14871] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  236.656106][T14871] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  236.714196][T14879] netlink: 'syz.1.2391': attribute type 10 has an invalid length.
[  236.770897][T14887] lo speed is unknown, defaulting to 1000
[  236.773143][T14887] lo speed is unknown, defaulting to 1000
[  236.782762][T14887] wg1 speed is unknown, defaulting to 1000
[  236.912454][T14898] lo speed is unknown, defaulting to 1000
[  236.921269][T14898] lo speed is unknown, defaulting to 1000
[  236.924329][T14898] wg1 speed is unknown, defaulting to 1000
[  236.947758][T14905] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  237.393247][T14945] nbd: must specify at least one socket
[  237.490191][T14960] veth17: entered allmulticast mode
[  237.518955][T14962] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.560429][T14969] netlink: 'syz.2.2414': attribute type 21 has an invalid length.
[  237.564477][T14969] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.592755][T14971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.621587][T14976] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.718068][T14981] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  237.801298][T14987] lo speed is unknown, defaulting to 1000
[  237.803609][T14987] lo speed is unknown, defaulting to 1000
[  237.806193][T14987] wg1 speed is unknown, defaulting to 1000
[  237.888397][T14990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.891213][T14990] syzkaller0: entered promiscuous mode
[  237.893333][T14990] syzkaller0: entered allmulticast mode
[  237.901350][T14990] tipc: Resetting bearer <eth:syzkaller0>
[  237.911026][T14989] tipc: Resetting bearer <eth:syzkaller0>
[  237.914109][T14989] tipc: Disabling bearer <eth:syzkaller0>
[  237.919720][T14987] macsec0: entered promiscuous mode
[  237.921497][T14987] syzkaller0: entered promiscuous mode
[  237.924340][T14987] syzkaller0: left promiscuous mode
[  238.021225][T15003] netlink: 'syz.1.2424': attribute type 16 has an invalid length.
[  238.023753][T15003] netlink: 'syz.1.2424': attribute type 17 has an invalid length.
[  238.032962][T15003] tipc: Resetting bearer <eth:syzkaller0>
[  238.136982][T15011] mac80211_hwsim hwsim3 D: left promiscuous mode
[  238.139002][T15011] mac80211_hwsim hwsim3 D: left allmulticast mode
[  238.145263][T15011] syzkaller0: left promiscuous mode
[  238.147084][T15011] syzkaller0: left allmulticast mode
[  238.163265][T13252] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.166569][T13252] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.177940][T13252] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.185285][T13252] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.200951][T15008] netlink: 'syz.2.2425': attribute type 1 has an invalid length.
[  238.321096][T15020] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.408543][T15034] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  238.437054][T15034] bridge29: entered promiscuous mode
[  238.439324][T15034] bridge29: entered allmulticast mode
[  238.483138][T15040] netlink: 'syz.2.2434': attribute type 2 has an invalid length.
[  238.513632][T15040] : entered promiscuous mode
[  238.606798][T15059] 8021q: VLANs not supported on nlmon0
[  238.648879][T15068] _Z`Ԁ@S!: entered promiscuous mode
[  238.796508][T15071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.799136][T15071] syzkaller0: entered promiscuous mode
[  238.800875][T15071] syzkaller0: entered allmulticast mode
[  238.859254][T15070] tipc: Resetting bearer <eth:syzkaller0>
[  238.870777][T15070] tipc: Disabling bearer <eth:syzkaller0>
[  238.883615][T15084] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.982735][T15099] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.041395][T15099] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.083243][T15118] netlink: 'syz.2.2455': attribute type 4 has an invalid length.
[  239.105328][T15116] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  239.111448][ T5872] lo speed is unknown, defaulting to 1000
[  239.118910][ T5872] syz2: Port: 1 Link ACTIVE
[  239.122064][T15099] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.160208][T15124] netlink: 'syz.1.2456': attribute type 10 has an invalid length.
[  239.182488][T15099] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.182997][T15126] netlink: 'syz.1.2457': attribute type 1 has an invalid length.
[  239.198099][T15126] 8021q: adding VLAN 0 to HW filter on device bond39
[  239.265809][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.274239][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.286736][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.289213][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  239.293153][T15139] tap0: tun_chr_ioctl cmd 1074025677
[  239.304836][T15139] tap0: linktype set to 804
[  239.343478][T15145] __nla_validate_parse: 27 callbacks suppressed
[  239.343489][T15145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'.
[  239.343691][T15144] netlink: 'syz.0.2463': attribute type 10 has an invalid length.
[  239.388488][T15157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.416273][T15159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2467'.
[  239.417003][T15161] netlink: 'syz.2.2468': attribute type 35 has an invalid length.
[  239.419023][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2467'.
[  239.421628][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2468'.
[  239.424369][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'.
[  239.431411][T15161] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  239.455177][T15165] netlink: 'syz.2.2469': attribute type 11 has an invalid length.
[  239.476218][T15168] bond0: option all_slaves_active: invalid value (20)
[  239.478549][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2470'.
[  239.485805][T15168] vlan0: entered promiscuous mode
[  239.487434][T15168] gretap0: entered promiscuous mode
[  239.524497][T15177] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  239.549352][T15179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2473'.
[  239.553987][T15179] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2473'.
[  239.664241][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'.
[  239.730991][T15214] 8021q: adding VLAN 0 to HW filter on device bond37
[  239.753282][T15217] 8021q: adding VLAN 0 to HW filter on device bond34
[  239.765706][T15217] veth19: entered promiscuous mode
[  239.769070][T15217] bond34: (slave veth19): Enslaving as a backup interface with a down link
[  239.772195][T15220] tipc: Enabled bearer <eth:gre0>, priority 10
[  239.838635][T15223] ip6gre2: entered allmulticast mode
[  239.931830][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'.
[  240.074669][T15240] workqueue: Failed to create a rescuer kthread for wq "bond35": -EINTR
[  240.586176][T15285] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  240.592284][T15285] team0: Device macvtap0 is already an upper device of the team interface
[  240.826667][T15303] dvmrp1: tun_chr_ioctl cmd 1074025677
[  240.828614][T15303] dvmrp1: linktype set to 773
[  240.920258][T15304] veth19: left promiscuous mode
[  240.925244][ T5872] lo speed is unknown, defaulting to 1000
[  240.926338][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  240.927702][ T5872] syz1: Port: 1 Link DOWN
[  240.930150][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  240.943484][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  240.953786][T15304] hsr_slave_0: left promiscuous mode
[  240.961696][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.150017][T15321] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.217728][T15321] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.276714][T15321] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.328313][T15321] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.393979][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.402296][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.409820][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.417029][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.566494][T15326] lo speed is unknown, defaulting to 1000
[  241.569159][T15326] lo speed is unknown, defaulting to 1000
[  241.572325][T15326] wg1 speed is unknown, defaulting to 1000
[  241.687172][T15332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.697869][T15332] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode
[  241.709307][T15332] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  241.937297][T15350] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  241.941396][T15350] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.944277][T15350] syzkaller0: entered promiscuous mode
[  241.946586][T15350] syzkaller0: entered allmulticast mode
[  242.047393][T15361] bond0: entered promiscuous mode
[  242.050706][T15361] batadv0: entered promiscuous mode
[  242.053791][T15361] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  242.057912][T15361] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  242.062079][T15361] 8021q: adding VLAN 0 to HW filter on device hsr0
[  242.073821][T15358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  242.273034][T15373] syzkaller1: entered promiscuous mode
[  242.275489][T15373] syzkaller1: entered allmulticast mode
[  242.375737][T15380] vlan3: entered promiscuous mode
[  242.424380][T15385] vlan3: entered allmulticast mode
[  242.427713][T15385] bond40: entered allmulticast mode
[  242.571357][T15389] syzkaller1: entered promiscuous mode
[  242.573616][T15389] syzkaller1: entered allmulticast mode
[  242.909369][T15398] validate_nla: 7 callbacks suppressed
[  242.909382][T15398] netlink: 'syz.2.2531': attribute type 10 has an invalid length.
[  243.128085][T15410] bond34: (slave veth19): Releasing backup interface
[  243.132535][T15410] IPv6: Can't replace route, no match found
[  243.255543][T15419] lo speed is unknown, defaulting to 1000
[  243.258842][T15419] lo speed is unknown, defaulting to 1000
[  243.261842][T15419] wg1 speed is unknown, defaulting to 1000
[  243.297897][T15419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  243.511771][T15426] lo speed is unknown, defaulting to 1000
[  243.514487][T15426] lo speed is unknown, defaulting to 1000
[  243.517783][T15426] wg1 speed is unknown, defaulting to 1000
[  243.684328][T15435] lo speed is unknown, defaulting to 1000
[  243.688711][T15435] lo speed is unknown, defaulting to 1000
[  243.691611][T15435] wg1 speed is unknown, defaulting to 1000
[  243.723861][T15437] netlink: 'syz.1.2542': attribute type 14 has an invalid length.
[  243.729488][T15437] netlink: 'syz.1.2542': attribute type 14 has an invalid length.
[  243.734026][T15435] tipc: Started in network mode
[  243.736445][T15435] tipc: Node identity , cluster identity 4711
[  243.739063][T15435] tipc: Failed to obtain node identity
[  243.741318][T15435] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.745544][T15435] syzkaller0: entered promiscuous mode
[  243.747390][T15435] syzkaller0: entered allmulticast mode
[  243.772690][T15442] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.798660][T15444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.880594][T15448] tipc: Resetting bearer <ib:ip6gre0>
[  243.911120][T15448] tipc: Resetting bearer <eth:syzkaller0>
[  243.913458][T15448] syzkaller0: left promiscuous mode
[  243.916400][T15448] syzkaller0: left allmulticast mode
[  243.921065][   T47] lo speed is unknown, defaulting to 1000
[  243.923596][   T47] syz2: Port: 1 Link DOWN
[  244.002824][T15461] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  244.049884][T15468] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  244.190289][T15490] Set syz0 is full, maxelem 0 reached
[  244.229792][T15497] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  244.230884][T15501] netlink: 'syz.1.2560': attribute type 1 has an invalid length.
[  244.249911][T15501] 8021q: adding VLAN 0 to HW filter on device bond41
[  244.322739][T15513] syzkaller1: entered promiscuous mode
[  244.326114][T15513] syzkaller1: entered allmulticast mode
[  244.765009][T15522] netlink: 'syz.0.2565': attribute type 4 has an invalid length.
[  245.067398][T15531] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.079300][T15531] tipc: Resetting bearer <eth:syzkaller0>
[  245.117454][T15533] __nla_validate_parse: 27 callbacks suppressed
[  245.117470][T15533] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2568'.
[  245.238073][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2571'.
[  245.287473][T15548] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode
[  245.313632][T15548] netlink: 'syz.0.2572': attribute type 10 has an invalid length.
[  245.396041][T15558] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.417218][T15558] syzkaller0: entered promiscuous mode
[  245.425458][T15558] syzkaller0: entered allmulticast mode
[  245.450388][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'.
[  245.458189][T15564] team0: Mode changed to "loadbalance"
[  245.460019][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'.
[  245.469235][T15566] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.496682][T15568] netlink: 'syz.2.2579': attribute type 1 has an invalid length.
[  245.505872][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2578'.
[  245.514967][T15568] 8021q: adding VLAN 0 to HW filter on device bond38
[  245.686506][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'.
[  245.690200][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'.
[  245.719664][T15590] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2583'.
[  245.760709][T15592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2584'.
[  246.049886][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'.
[  246.110126][T15612] netlink: 'syz.2.2589': attribute type 1 has an invalid length.
[  246.123495][T15612] 8021q: adding VLAN 0 to HW filter on device bond39
[  246.312788][T15622] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  246.343110][T15626] netlink: 'syz.2.2593': attribute type 1 has an invalid length.
[  246.354289][T15626] 8021q: adding VLAN 0 to HW filter on device bond40
[  246.401978][T15630] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.424307][T15632] netlink: 'syz.2.2596': attribute type 1 has an invalid length.
[  246.428544][T15632] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR
[  246.566418][T15652] tipc: Resetting bearer <eth:syzkaller0>
[  246.581440][T15659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.593189][T15659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.636230][T15665] bond42: entered promiscuous mode
[  246.638520][T15665] 8021q: adding VLAN 0 to HW filter on device bond42
[  246.652883][T15666] 8021q: adding VLAN 0 to HW filter on device bond42
[  246.658419][T15666] bond42: (slave vxcan1): The slave device specified does not support setting the MAC address
[  246.662505][T15666] bond42: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  246.668500][T15666] bond42: (slave vxcan1): making interface the new active one
[  246.671272][T15666] vxcan1: entered promiscuous mode
[  246.673857][T15666] bond42: (slave vxcan1): Enslaving as an active interface with an up link
[  246.806598][T15674] smc: removing net device bond0 with user defined pnetid SYZ2
[  246.809738][T15674] bond0 (unregistering): Released all slaves
[  246.904106][T15713] sctp: [Deprecated]: syz.1.2606 (pid 15713) Use of int in maxseg socket option.
[  246.904106][T15713] Use struct sctp_assoc_value instead
[  246.962676][T15721] 8021q: adding VLAN 0 to HW filter on device bond43
[  247.908297][T15756] bond42: (slave vxcan1): Releasing backup interface
[  247.911029][T15756] vxcan1 (unregistering): left promiscuous mode
[  247.914378][T15756] bond42: Destroying bond
[  247.919139][T15756] bond42 (unregistering): Released all slaves
[  247.957634][T15755] validate_nla: 3 callbacks suppressed
[  247.957650][T15755] netlink: 'syz.1.2617': attribute type 1 has an invalid length.
[  247.996019][T15768] netlink: 'syz.2.2620': attribute type 5 has an invalid length.
[  247.999002][T15768] netlink: 'syz.2.2620': attribute type 7 has an invalid length.
[  248.364017][T10450] block nbd2: Possible stuck request ffff888021518000: control (read@0,1024B). Runtime 30 seconds
[  248.370203][T10450] block nbd2: Possible stuck request ffff888021518200: control (read@1024,1024B). Runtime 30 seconds
[  248.374482][T10450] block nbd2: Possible stuck request ffff888021518400: control (read@2048,1024B). Runtime 30 seconds
[  248.379234][T10450] block nbd2: Possible stuck request ffff888021518600: control (read@3072,1024B). Runtime 30 seconds
[  248.741438][T15812] netlink: 'syz.0.2623': attribute type 2 has an invalid length.
[  248.810273][T15814] lo speed is unknown, defaulting to 1000
[  248.813451][T15814] lo speed is unknown, defaulting to 1000
[  248.817322][T15814] wg1 speed is unknown, defaulting to 1000
[  248.873874][T15816] 8021q: adding VLAN 0 to HW filter on device team0
[  248.888285][T15816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.904664][  T791] lo speed is unknown, defaulting to 1000
[  248.906922][  T791] syz1: Port: 1 Link ACTIVE
[  248.985577][T15819] bridge29: port 1(veth9) entered blocking state
[  248.988215][T15819] bridge29: port 1(veth9) entered disabled state
[  248.990954][T15819] veth9: entered allmulticast mode
[  248.993926][T15819] veth9: entered promiscuous mode
[  249.013641][T15829] netlink: 'syz.0.2629': attribute type 2 has an invalid length.
[  249.020409][T15819] bridge29: port 2(veth0_to_bond) entered blocking state
[  249.023312][T15819] bridge29: port 2(veth0_to_bond) entered disabled state
[  249.027645][T15819] veth0_to_bond: entered allmulticast mode
[  249.030891][T15819] veth0_to_bond: entered promiscuous mode
[  249.089338][T15835] siw: device registration error -23
[  249.140171][T15839] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  249.150149][T15839] 8021q: adding VLAN 0 to HW filter on device bond42
[  249.181075][T15839] 8021q: adding VLAN 0 to HW filter on device bond42
[  249.183785][T15839] bond42: (slave vcan0): The slave device specified does not support setting the MAC address
[  249.190913][T15839] bond42: (slave vcan0): Error -95 calling set_mac_address
[  249.213610][T15841] macvlan4: entered promiscuous mode
[  249.219234][T15841] macvlan4: entered allmulticast mode
[  249.313425][T15853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  249.377358][T15863] smc: adding net device bond0 with user defined pnetid SYZ2
[  249.385372][T15863] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.412207][T15869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.489948][T15874] lo speed is unknown, defaulting to 1000
[  249.492841][T15874] lo speed is unknown, defaulting to 1000
[  249.531861][T15874] wg1 speed is unknown, defaulting to 1000
[  249.622218][T15874] lo speed is unknown, defaulting to 1000
[  249.636451][T15874] lo speed is unknown, defaulting to 1000
[  249.639435][T15874] wg1 speed is unknown, defaulting to 1000
[  249.677234][T15890] netlink: 'syz.1.2644': attribute type 11 has an invalid length.
[  249.693485][T15893] netlink: 'syz.1.2644': attribute type 11 has an invalid length.
[  249.758097][T15900] netlink: 'syz.1.2646': attribute type 1 has an invalid length.
[  249.774041][T15900] 8021q: adding VLAN 0 to HW filter on device bond44
[  249.788232][T15900] bond44: (slave bridge30): making interface the new active one
[  249.796094][T15900] bond44: (slave bridge30): Enslaving as an active interface with an up link
[  249.818648][T15907] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  250.027466][T15923] lo speed is unknown, defaulting to 1000
[  250.039997][T15923] lo speed is unknown, defaulting to 1000
[  250.048563][T15923] wg1 speed is unknown, defaulting to 1000
[  250.180589][T15933] macsec0: entered allmulticast mode
[  250.183253][T15933] netlink: 'syz.2.2653': attribute type 1 has an invalid length.
[  250.199180][T15933] 8021q: adding VLAN 0 to HW filter on device bond41
[  250.209096][T15933] __nla_validate_parse: 25 callbacks suppressed
[  250.209112][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  250.215420][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  250.282646][T15941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.354350][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'.
[  250.359628][T15951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2658'.
[  250.455811][T15964] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  250.491984][T15966] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2660'.
[  250.499719][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2660'.
[  250.683252][T15973] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  250.692763][T15973] CPU: 0 UID: 0 PID: 15973 Comm: syz.0.2663 Not tainted syzkaller #0 PREEMPT(full) 
[  250.692786][T15973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.692795][T15973] Call Trace:
[  250.692800][T15973]  <TASK>
[  250.692807][T15973]  dump_stack_lvl+0x189/0x250
[  250.692828][T15973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.692842][T15973]  ? __pfx__printk+0x10/0x10
[  250.692858][T15973]  ? kernfs_root+0x1c/0x230
[  250.692873][T15973]  ? kernfs_path_from_node+0x2f/0x290
[  250.692885][T15973]  ? kernfs_path_from_node+0x250/0x290
[  250.692898][T15973]  ? kernfs_path_from_node+0x2f/0x290
[  250.692910][T15973]  sysfs_warn_dup+0x8e/0xa0
[  250.692922][T15973]  sysfs_do_create_link_sd+0xc0/0x110
[  250.692936][T15973]  device_add_class_symlinks+0x1cf/0x240
[  250.692950][T15973]  device_add+0x475/0xb50
[  250.692962][T15973]  wiphy_register+0x1ba6/0x28d0
[  250.692985][T15973]  ? __pfx_wiphy_register+0x10/0x10
[  250.693001][T15973]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  250.693017][T15973]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  250.693030][T15973]  ieee80211_register_hw+0x3425/0x4080
[  250.693047][T15973]  ? ieee80211_register_hw+0x14e1/0x4080
[  250.693062][T15973]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  250.693076][T15973]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  250.693095][T15973]  ? __hrtimer_setup+0x187/0x210
[  250.693106][T15973]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  250.693127][T15973]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  250.693150][T15973]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  250.693165][T15973]  ? trace_kmalloc+0x1f/0xd0
[  250.693180][T15973]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  250.693195][T15973]  ? kstrndup+0xbf/0x160
[  250.693208][T15973]  hwsim_new_radio_nl+0xea4/0x1b10
[  250.693224][T15973]  ? __pfx___nla_validate_parse+0x10/0x10
[  250.693247][T15973]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.693263][T15973]  ? __nla_parse+0x40/0x60
[  250.693280][T15973]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  250.693298][T15973]  genl_family_rcv_msg_doit+0x215/0x300
[  250.693314][T15973]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  250.693332][T15973]  ? bpf_lsm_capable+0x9/0x20
[  250.693347][T15973]  ? security_capable+0x7e/0x2e0
[  250.693364][T15973]  genl_rcv_msg+0x60e/0x790
[  250.693387][T15973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.693399][T15973]  ? __kasan_slab_alloc+0x6c/0x80
[  250.693414][T15973]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  250.693427][T15973]  ? __netlink_lookup+0xbd/0x810
[  250.693437][T15973]  ? rcu_is_watching+0x15/0xb0
[  250.693450][T15973]  netlink_rcv_skb+0x208/0x470
[  250.693467][T15973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  250.693480][T15973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  250.693498][T15973]  ? lock_release+0x4b/0x3e0
[  250.693515][T15973]  ? down_read+0x1ad/0x2e0
[  250.693526][T15973]  genl_rcv+0x28/0x40
[  250.693537][T15973]  netlink_unicast+0x82f/0x9e0
[  250.693554][T15973]  ? __pfx_netlink_unicast+0x10/0x10
[  250.693570][T15973]  ? netlink_sendmsg+0x642/0xb30
[  250.693579][T15973]  ? skb_put+0x11b/0x210
[  250.693593][T15973]  netlink_sendmsg+0x805/0xb30
[  250.693605][T15973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.693618][T15973]  ? aa_sock_msg_perm+0xf1/0x1d0
[  250.693628][T15973]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.693642][T15973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.693652][T15973]  __sock_sendmsg+0x21c/0x270
[  250.693667][T15973]  ____sys_sendmsg+0x505/0x830
[  250.693713][T15973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.693728][T15973]  ? import_iovec+0x74/0xa0
[  250.693746][T15973]  ___sys_sendmsg+0x21f/0x2a0
[  250.693760][T15973]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.693773][T15973]  ? futex_wake+0x4b2/0x560
[  250.693797][T15973]  ? __fget_files+0x2a/0x420
[  250.693806][T15973]  ? __fget_files+0x3a0/0x420
[  250.693818][T15973]  __x64_sys_sendmsg+0x19b/0x260
[  250.693831][T15973]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  250.693846][T15973]  ? rcu_is_watching+0x15/0xb0
[  250.693858][T15973]  ? rcu_is_watching+0x15/0xb0
[  250.693871][T15973]  do_syscall_64+0xfa/0x3b0
[  250.693883][T15973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.693895][T15973]  ? exc_page_fault+0x9f/0xf0
[  250.693913][T15973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.693924][T15973] RIP: 0033:0x7fa82318ebe9
[  250.693936][T15973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.693948][T15973] RSP: 002b:00007fa824078038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.693961][T15973] RAX: ffffffffffffffda RBX: 00007fa8233b5fa0 RCX: 00007fa82318ebe9
[  250.693971][T15973] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[  250.693980][T15973] RBP: 00007fa823211e19 R08: 0000000000000000 R09: 0000000000000000
[  250.693988][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.693995][T15973] R13: 00007fa8233b6038 R14: 00007fa8233b5fa0 R15: 00007ffd6ee9df78
[  250.694009][T15973]  </TASK>
[  250.698671][T15978] lo speed is unknown, defaulting to 1000
[  250.893519][T15978] lo speed is unknown, defaulting to 1000
[  250.898240][T15978] wg1 speed is unknown, defaulting to 1000
[  251.053927][T15998] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.059179][T15998] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  251.106574][T16003] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.210467][T16023] netlink: 'syz.1.2676': attribute type 1 has an invalid length.
[  251.220690][T16023] 8021q: adding VLAN 0 to HW filter on device bond45
[  251.227006][T16023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2676'.
[  251.232471][T16025] netlink: 'syz.0.2674': attribute type 12 has an invalid length.
[  251.295822][T13252] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.300033][T13252] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.302672][T16034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2679'.
[  251.315714][T16034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2679'.
[  251.321677][T16038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2680'.
[  251.338177][T13252] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.340858][T13252] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  251.384000][T16049] xt_time: invalid argument - start or stop time greater than 23:59:59
[  251.406177][T16054] lo speed is unknown, defaulting to 1000
[  251.408568][T16054] lo speed is unknown, defaulting to 1000
[  251.411046][T16054] wg1 speed is unknown, defaulting to 1000
[  251.518821][T16064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.537898][T16054] IPv6: sit1: Disabled Multicast RS
[  251.595644][T16071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.597924][T16071] IPv6: NLM_F_CREATE should be set when creating new route
[  251.879093][T16083] lo speed is unknown, defaulting to 1000
[  251.881482][T16083] lo speed is unknown, defaulting to 1000
[  251.883673][T16083] wg1 speed is unknown, defaulting to 1000
[  252.116000][T16089] block nbd1: server does not support multiple connections per device.
[  252.120468][T16089] block nbd1: shutting down sockets
[  252.400355][T16104] 8021q: adding VLAN 0 to HW filter on device bond36
[  252.412038][T16104] 8021q: adding VLAN 0 to HW filter on device bond36
[  252.415716][T16104] bond36: (slave vcan1): The slave device specified does not support setting the MAC address
[  252.420696][T16104] bond36: (slave vcan1): Error -95 calling set_mac_address
[  252.433452][T16106] bond36: (slave vcan1): The slave device specified does not support setting the MAC address
[  252.438956][T16106] bond36: (slave vcan1): Error -95 calling set_mac_address
[  252.517144][T16104] macvlan0: entered promiscuous mode
[  252.519296][T16104] macvlan0: entered allmulticast mode
[  252.546717][T16115] IPVS: length: 149 != 8
[  252.616151][T16125] lo speed is unknown, defaulting to 1000
[  252.619834][T16125] lo speed is unknown, defaulting to 1000
[  252.622873][T16125] wg1 speed is unknown, defaulting to 1000
[  252.749196][T16125] bond0: entered promiscuous mode
[  252.898370][   T13] bond0 (unregistering): Released all slaves
[  252.960138][T16140] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.063811][T16146] validate_nla: 9 callbacks suppressed
[  253.063822][T16146] netlink: 'syz.1.2706': attribute type 10 has an invalid length.
[  253.081616][T16148] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  253.094018][T16148] bond43: entered promiscuous mode
[  253.096247][T16148] bond43: entered allmulticast mode
[  253.098347][T16148] 8021q: adding VLAN 0 to HW filter on device bond43
[  253.437272][T16169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.519117][T16176] lo speed is unknown, defaulting to 1000
[  253.522036][T16176] lo speed is unknown, defaulting to 1000
[  253.525920][T16176] wg1 speed is unknown, defaulting to 1000
[  253.766158][T16182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.792987][T16186] netlink: 'syz.2.2719': attribute type 7 has an invalid length.
[  253.817886][T16192] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  253.868545][T16194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.023568][T16216] syzkaller1: entered allmulticast mode
[  254.028514][T16216] syzkaller1: left allmulticast mode
[  254.057758][T16219] netlink: 'syz.0.2727': attribute type 30 has an invalid length.
[  254.067474][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.070615][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.073271][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.076582][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.204872][T16227] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  254.208886][T16227] CPU: 0 UID: 0 PID: 16227 Comm: syz.2.2730 Not tainted syzkaller #0 PREEMPT(full) 
[  254.208907][T16227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.208934][T16227] Call Trace:
[  254.208939][T16227]  <TASK>
[  254.208946][T16227]  dump_stack_lvl+0x189/0x250
[  254.208970][T16227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.208988][T16227]  ? __pfx__printk+0x10/0x10
[  254.209023][T16227]  ? kernfs_root+0x1c/0x230
[  254.209048][T16227]  ? kernfs_path_from_node+0x2f/0x290
[  254.209063][T16227]  ? kernfs_path_from_node+0x250/0x290
[  254.209078][T16227]  ? kernfs_path_from_node+0x2f/0x290
[  254.209095][T16227]  sysfs_warn_dup+0x8e/0xa0
[  254.209110][T16227]  sysfs_do_create_link_sd+0xc0/0x110
[  254.209126][T16227]  device_add_class_symlinks+0x1cf/0x240
[  254.209143][T16227]  device_add+0x475/0xb50
[  254.209158][T16227]  wiphy_register+0x1ba6/0x28d0
[  254.209185][T16227]  ? __pfx_wiphy_register+0x10/0x10
[  254.209205][T16227]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  254.209223][T16227]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  254.209240][T16227]  ieee80211_register_hw+0x3425/0x4080
[  254.209263][T16227]  ? ieee80211_register_hw+0x14e1/0x4080
[  254.209282][T16227]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  254.209299][T16227]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.209321][T16227]  ? __hrtimer_setup+0x187/0x210
[  254.209335][T16227]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  254.209356][T16227]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  254.209384][T16227]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  254.209401][T16227]  ? trace_kmalloc+0x1f/0xd0
[  254.209446][T16227]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  254.209467][T16227]  ? kstrndup+0xbf/0x160
[  254.209485][T16227]  hwsim_new_radio_nl+0xea4/0x1b10
[  254.209505][T16227]  ? __pfx___nla_validate_parse+0x10/0x10
[  254.209531][T16227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.209553][T16227]  ? __nla_parse+0x40/0x60
[  254.209573][T16227]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  254.209594][T16227]  genl_family_rcv_msg_doit+0x215/0x300
[  254.209613][T16227]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  254.209634][T16227]  ? bpf_lsm_capable+0x9/0x20
[  254.209653][T16227]  ? security_capable+0x7e/0x2e0
[  254.209675][T16227]  genl_rcv_msg+0x60e/0x790
[  254.209693][T16227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.209708][T16227]  ? __kasan_slab_alloc+0x6c/0x80
[  254.209726][T16227]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  254.209744][T16227]  ? __netlink_lookup+0xbd/0x810
[  254.209755][T16227]  ? rcu_is_watching+0x15/0xb0
[  254.209773][T16227]  netlink_rcv_skb+0x208/0x470
[  254.209793][T16227]  ? __pfx_genl_rcv_msg+0x10/0x10
[  254.209810][T16227]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  254.209834][T16227]  ? lock_release+0x4b/0x3e0
[  254.209855][T16227]  ? down_read+0x1ad/0x2e0
[  254.209869][T16227]  genl_rcv+0x28/0x40
[  254.209883][T16227]  netlink_unicast+0x82f/0x9e0
[  254.209904][T16227]  ? __pfx_netlink_unicast+0x10/0x10
[  254.209923][T16227]  ? netlink_sendmsg+0x642/0xb30
[  254.209934][T16227]  ? skb_put+0x11b/0x210
[  254.209949][T16227]  netlink_sendmsg+0x805/0xb30
[  254.209965][T16227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.209978][T16227]  ? futex_unqueue+0x22/0x240
[  254.209993][T16227]  ? aa_sock_msg_perm+0xf1/0x1d0
[  254.210006][T16227]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.210021][T16227]  ? __pfx_netlink_sendmsg+0x10/0x10
[  254.210039][T16227]  __sock_sendmsg+0x21c/0x270
[  254.210060][T16227]  ____sys_sendmsg+0x505/0x830
[  254.210077][T16227]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.210095][T16227]  ? import_iovec+0x74/0xa0
[  254.210112][T16227]  ___sys_sendmsg+0x21f/0x2a0
[  254.210127][T16227]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.210144][T16227]  ? futex_wait+0x285/0x360
[  254.210173][T16227]  ? __fget_files+0x2a/0x420
[  254.210185][T16227]  ? __fget_files+0x3a0/0x420
[  254.210200][T16227]  __x64_sys_sendmsg+0x19b/0x260
[  254.210216][T16227]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.210235][T16227]  ? rcu_is_watching+0x15/0xb0
[  254.210250][T16227]  ? rcu_is_watching+0x15/0xb0
[  254.210265][T16227]  do_syscall_64+0xfa/0x3b0
[  254.210278][T16227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.210292][T16227]  ? exc_page_fault+0x9f/0xf0
[  254.210312][T16227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.210327][T16227] RIP: 0033:0x7fb2b718ebe9
[  254.210341][T16227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.210355][T16227] RSP: 002b:00007fb2b80ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.210372][T16227] RAX: ffffffffffffffda RBX: 00007fb2b73b5fa0 RCX: 00007fb2b718ebe9
[  254.210383][T16227] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d
[  254.210393][T16227] RBP: 00007fb2b7211e19 R08: 0000000000000000 R09: 0000000000000000
[  254.210401][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.210438][T16227] R13: 00007fb2b73b6038 R14: 00007fb2b73b5fa0 R15: 00007fff23ae8898
[  254.210456][T16227]  </TASK>
[  254.410847][T16231] mac80211_hwsim hwsim22 syzkaller0: left promiscuous mode
[  254.413740][T16231] mac80211_hwsim hwsim22 syzkaller0: left allmulticast mode
[  254.468001][T16241] netlink: 'syz.0.2733': attribute type 12 has an invalid length.
[  254.652899][T16258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.660817][T16258] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode
[  254.663893][T16258] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode
[  254.667588][T16256] lo speed is unknown, defaulting to 1000
[  254.669746][T16256] lo speed is unknown, defaulting to 1000
[  254.671992][T16256] wg1 speed is unknown, defaulting to 1000
[  254.717801][T16256] lo speed is unknown, defaulting to 1000
[  254.720896][T16256] lo speed is unknown, defaulting to 1000
[  254.726643][T16256] wg1 speed is unknown, defaulting to 1000
[  254.735662][T16263] siw: device registration error -23
[  254.851084][T16274] vxcan1: entered allmulticast mode
[  254.887753][T16276] macsec0: entered promiscuous mode
[  254.889440][T16276] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  254.892468][T16276] macsec0: entered allmulticast mode
[  254.896438][T16276] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  254.958546][T16286] sch_fq: defrate 0 ignored.
[  254.968418][T16287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  255.255191][T16328] lo speed is unknown, defaulting to 1000
[  255.258087][T16328] lo speed is unknown, defaulting to 1000
[  255.260938][T16328] wg1 speed is unknown, defaulting to 1000
[  255.367256][T16338] __nla_validate_parse: 24 callbacks suppressed
[  255.367267][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'.
[  255.387479][T16337] netlink: 'syz.0.2762': attribute type 12 has an invalid length.
[  255.390577][T16337] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2762'.
[  255.427375][T16338] netlink: 'syz.0.2762': attribute type 12 has an invalid length.
[  255.434650][T16338] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2762'.
[  255.495365][T16344] netlink: 'syz.0.2764': attribute type 1 has an invalid length.
[  255.507306][T16344] 8021q: adding VLAN 0 to HW filter on device bond37
[  255.518557][T16344] 8021q: adding VLAN 0 to HW filter on device bond37
[  255.521181][T16344] bond37: (slave vxcan1): The slave device specified does not support setting the MAC address
[  255.527216][T16344] bond37: (slave vxcan1): Error -95 calling set_mac_address
[  255.551414][T16347] 8021q: adding VLAN 0 to HW filter on device bond46
[  255.577898][T16349] bond37: (slave bridge50): Enslaving as an active interface with a down link
[  255.631196][T16353] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  255.646717][T16353] 8021q: adding VLAN 0 to HW filter on device bond47
[  255.650431][T16353] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2767'.
[  255.692226][T16360] lo speed is unknown, defaulting to 1000
[  255.701172][T16360] lo speed is unknown, defaulting to 1000
[  255.706037][T16360] wg1 speed is unknown, defaulting to 1000
[  255.788539][T16369] veth0_to_bond: left allmulticast mode
[  255.791164][T16369] veth0_to_bond: left promiscuous mode
[  255.793898][T16369] bridge29: port 2(veth0_to_bond) entered disabled state
[  255.800692][T16369] veth9: left allmulticast mode
[  255.802593][T16369] veth9: left promiscuous mode
[  255.817335][T16369] bridge29: port 1(veth9) entered disabled state
[  255.822027][T16369] bond44: (slave bridge30): Releasing active interface
[  255.999735][T16378] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  256.072214][T16378] batadv_slave_0: entered promiscuous mode
[  256.078924][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'.
[  256.084071][T16378] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2774'.
[  256.087803][T16378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2774'.
[  256.141024][T16384] sit7: entered promiscuous mode
[  256.192323][T16390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2779'.
[  256.370917][T16409] vlan2: entered allmulticast mode
[  256.373075][T16409] veth1: entered allmulticast mode
[  256.455589][T16413] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  256.458756][T16413] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  256.490159][T16417] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  256.545982][T16420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'.
[  256.550647][T16420] IPv6: sit5: Disabled Multicast RS
[  256.552678][T16420] sit5: entered allmulticast mode
[  256.611366][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2786'.
[  256.679980][T16430] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  256.682829][T16430] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.833761][T16446] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  256.892999][T16451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.943106][T16454] netlink: 'syz.2.2794': attribute type 14 has an invalid length.
[  256.984131][T16462] can: request_module (can-proto-0) failed.
[  257.057833][T16476] veth12: entered allmulticast mode
[  257.070390][T16478] lo speed is unknown, defaulting to 1000
[  257.072781][T16478] lo speed is unknown, defaulting to 1000
[  257.077398][T16478] wg1 speed is unknown, defaulting to 1000
[  257.218124][T16478] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  257.323029][T16507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.461696][T16512] lo speed is unknown, defaulting to 1000
[  257.464347][T16512] lo speed is unknown, defaulting to 1000
[  257.469956][T16512] wg1 speed is unknown, defaulting to 1000
[  257.713473][T16520] tipc: Trying to set illegal importance in message
[  257.717079][T16519] tipc: Trying to set illegal importance in message
[  257.753341][T16540] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  257.757096][T16540] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  257.760350][T16540] CPU: 0 UID: 0 PID: 16540 Comm: syz.1.2814 Not tainted syzkaller #0 PREEMPT(full) 
[  257.764443][T16540] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.767957][T16540] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  257.770028][T16540] Code: 18 00 74 08 4c 89 ef e8 2d c4 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 2a c3 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 01 c4 01 f8 4d 89 2e 41 80 3c 1f 00
[  257.776108][T16540] RSP: 0018:ffffc90002d6f0e8 EFLAGS: 00010246
[  257.778239][T16540] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  257.781001][T16540] RDX: ffffc90003eab000 RSI: 00000000000003c0 RDI: 00000000000003c1
[  257.783642][T16540] RBP: ffff888039d62d30 R08: ffff88810dbb8000 R09: 0000000000000002
[  257.786077][T16540] R10: 000000000000000a R11: 0000000000000002 R12: ffff888039d62428
[  257.788376][T16540] R13: ffff888039d62d28 R14: 0000000000000000 R15: 1ffff110073ac486
[  257.791008][T16540] FS:  00007f122d2046c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  257.794164][T16540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.796162][T16540] CR2: 00007ffd6ee9cfa8 CR3: 0000000123c2e000 CR4: 00000000000006f0
[  257.798609][T16540] Call Trace:
[  257.799906][T16540]  <TASK>
[  257.800965][T16540]  ? xfrm_state_insert+0x44/0x60
[  257.802752][T16540]  xfrm_state_insert+0x54/0x60
[  257.804321][T16540]  ipcomp4_init_state+0x673/0xb20
[  257.806169][T16540]  __xfrm_init_state+0xa76/0x13f0
[  257.807731][T16540]  ? __xfrm_init_state+0x7ef/0x13f0
[  257.809503][T16540]  xfrm_add_sa+0x2f5b/0x4070
[  257.811281][T16540]  ? __pfx_xfrm_add_sa+0x10/0x10
[  257.813004][T16540]  ? apparmor_capable+0x137/0x1b0
[  257.814929][T16540]  ? __nla_parse+0x40/0x60
[  257.816691][T16540]  xfrm_user_rcv_msg+0x7a3/0xab0
[  257.818586][T16540]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  257.820475][T16540]  ? __pfx___mutex_trylock_common+0x10/0x10
[  257.822292][T16540]  ? kasan_save_track+0x4f/0x80
[  257.823857][T16540]  ? rcu_is_watching+0x15/0xb0
[  257.825324][T16540]  ? trace_contention_end+0x39/0x120
[  257.826883][T16540]  ? __mutex_lock+0x335/0x1350
[  257.828440][T16540]  netlink_rcv_skb+0x208/0x470
[  257.829942][T16540]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  257.831874][T16540]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  257.833750][T16540]  ? lock_release+0x4b/0x3e0
[  257.835469][T16540]  ? net_generic+0x1e/0x240
[  257.836912][T16540]  ? net_generic+0x1e/0x240
[  257.838517][T16540]  ? netlink_deliver_tap+0x2e/0x1b0
[  257.840246][T16540]  xfrm_netlink_rcv+0x79/0x90
[  257.841744][T16540]  netlink_unicast+0x82f/0x9e0
[  257.843482][T16540]  ? __pfx_netlink_unicast+0x10/0x10
[  257.845291][T16540]  ? netlink_sendmsg+0x642/0xb30
[  257.847090][T16540]  ? skb_put+0x11b/0x210
[  257.848435][T16540]  netlink_sendmsg+0x805/0xb30
[  257.849886][T16540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.851442][T16540]  ? futex_unqueue+0x22/0x240
[  257.853029][T16540]  ? aa_sock_msg_perm+0xf1/0x1d0
[  257.854620][T16540]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  257.856262][T16540]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.857819][T16540]  __sock_sendmsg+0x21c/0x270
[  257.859381][T16540]  ____sys_sendmsg+0x505/0x830
[  257.860853][T16540]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.862520][T16540]  ? import_iovec+0x74/0xa0
[  257.864119][T16540]  ___sys_sendmsg+0x21f/0x2a0
[  257.865716][T16540]  ? __pfx____sys_sendmsg+0x10/0x10
[  257.867428][T16540]  ? futex_wait+0x285/0x360
[  257.868832][T16540]  ? __fget_files+0x2a/0x420
[  257.870281][T16540]  ? __fget_files+0x3a0/0x420
[  257.871778][T16540]  __x64_sys_sendmsg+0x19b/0x260
[  257.873333][T16540]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  257.874985][T16540]  ? rcu_is_watching+0x15/0xb0
[  257.876739][T16540]  ? rcu_is_watching+0x15/0xb0
[  257.878469][T16540]  do_syscall_64+0xfa/0x3b0
[  257.880042][T16540]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.882079][T16540]  ? exc_page_fault+0x9f/0xf0
[  257.883607][T16540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.885588][T16540] RIP: 0033:0x7f122c38ebe9
[  257.887172][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.893550][T16540] RSP: 002b:00007f122d204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.896274][T16540] RAX: ffffffffffffffda RBX: 00007f122c5b5fa0 RCX: 00007f122c38ebe9
[  257.898962][T16540] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  257.901764][T16540] RBP: 00007f122c411e19 R08: 0000000000000000 R09: 0000000000000000
[  257.904797][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.907841][T16540] R13: 00007f122c5b6038 R14: 00007f122c5b5fa0 R15: 00007fff62192a08
[  257.910864][T16540]  </TASK>
[  257.912058][T16540] Modules linked in:
[  257.913778][T16540] ---[ end trace 0000000000000000 ]---
[  257.915964][T16540] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  257.918304][T16540] Code: 18 00 74 08 4c 89 ef e8 2d c4 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 2a c3 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 01 c4 01 f8 4d 89 2e 41 80 3c 1f 00
[  257.925855][T16540] RSP: 0018:ffffc90002d6f0e8 EFLAGS: 00010246
[  257.928273][T16540] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  257.931318][T16540] RDX: ffffc90003eab000 RSI: 00000000000003c0 RDI: 00000000000003c1
[  257.934395][T16540] RBP: ffff888039d62d30 R08: ffff88810dbb8000 R09: 0000000000000002
[  257.937596][T16540] R10: 000000000000000a R11: 0000000000000002 R12: ffff888039d62428
[  257.940624][T16540] R13: ffff888039d62d28 R14: 0000000000000000 R15: 1ffff110073ac486
[  257.943617][T16540] FS:  00007f122d2046c0(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  257.947091][T16540] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  257.949473][T16540] CR2: 00007ffd6ee9cfa8 CR3: 0000000123c2e000 CR4: 00000000000006f0
[  257.952512][T16540] Kernel panic - not syncing: Fatal exception in interrupt
[  257.955948][T16540] Kernel Offset: disabled
[  257.957656][T16540] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:04:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001525 RDI=0000000000001526 RBP=00000000000003f8 RSP=ffffc90002d6e870
R8 =ffff8881078e8237 R9 =1ffff11020f1d046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8cd R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f122d2046c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd6ee9cfa8 CR3=0000000123c2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f122c587498 00007f122c587470 XMM03=00007f122c5874a8 00007f122c5874a0
XMM04=00007f122d0ed100 00007f122c587460 XMM05=00007f122c587478 00007f122c5874c0
XMM06=00007f122c5874b8 00007f122c5874b0 XMM07=00007f122c5874a8 00007f122c5874a0
XMM08=0000000000000000 00007f122c412ee7 XMM09=0000000000000000 00007f122c412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1cf59e24fd99f500 RBX=8400000112c93805 RCX=1cf59e24fd99f500 RDX=0000000000000000
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffff8881018dee40 RSP=ffffc90004717380
R8 =ffff8881018dee3b R9 =1ffff1102031bdc7 R10=dffffc0000000000 R11=ffffed102031bdc8
R12=00007fa823372000 R13=ffff88811d670910 R14=0000000000112c93 R15=0000000000000001
RIP=ffffffff822e5346 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555913b3500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa823ee56c0 CR3=0000000023688000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb2b7212e53
XMM06=0000000000000000 00007fb2b7212e4d XMM07=0000000000000000 00007fb2b7212e61
XMM08=0000000000000000 00007fb2b7212ee7 XMM09=0000000000000000 00007fb2b7212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
