last executing test programs:

1.448515838s ago: executing program 2 (id=1950):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x240080c0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000000010000000000000000000"], 0x10}}, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000240)={r7, 0x2}, 0x8)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000)={0x400, 0x8, 0x1, 0x2}, 0x8)

1.337816477s ago: executing program 1 (id=1952):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff0200000000000000000000002001e00000020004000000000000008000005f2000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200740000000000000014000e00fe8000000000000000000000000000bb2400090000000000010000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001b00000000000000000000ffff0a010102ffff0000000000000000000002000000a0669d5aa64a44deff7590dd8fdb4750a1da74220abe811ceff87cf4ae919318151f4b1fc28863726c8ba5f69484cb8b1854c3643a5f48066897c52ae6fde74f", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b40000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000100000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x4cc00)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$alg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvmmsg$unix(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/85, 0x55}], 0x1}}], 0x2, 0x12040, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x9, 0x9fdc, 0x2})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000000c0)='skcipher\x00', 0x9)

1.336929878s ago: executing program 0 (id=1953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
splice(r1, 0x0, r2, &(0x7f00000002c0), 0x6, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x2, 0x3}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff03000005"], 0x1c0}, 0x1, 0xba01}, 0x20048050)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000005c0)=ANY=[@ANYBLOB="870b00000000000005020001c204000000090738000000030c0606000900000000000000020000000000000001000000ffffffff0100000000000000e1000000000000000500000000000000040109c20400000003c910fe8000000000000000000000000000aa005e8840d106ada95235eef7ad4a212d6a427db6"], 0x68)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='/'], 0x20)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000))
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xb9}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x4e22, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0xa}}]}, 0xcc}}, 0x2400e040)

1.335382509s ago: executing program 1 (id=1954):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f00000009c0)) (async)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2d, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb000000000000000000000000fc00000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0)

1.259720278s ago: executing program 0 (id=1955):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x1f, r2}) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r2}, 0x14) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x40, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x2e, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64)

1.200250875s ago: executing program 1 (id=1956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x264, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x234, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x3, 0x7, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_LIMIT={0x8, 0x5, 0x81}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x264, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x234, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "10f1d4210f3f5cb877b201537cb6d5ee591e9ebbb1cec6239239e727d4a9e9ce1ad787ac2b158fac3af0275d869798e803f7b06d8256fa6a53e621d4c6470e588415c6756f1be3646761a8592b6ec67afe53cad9425d79973be2d1d219de7ff86b43315d93544d383871ec9ae5df85d1238d2871bc7813e40b869c0f2785470b2003d59a1fa6c95707a6bfcc84f6bbaa449aa1c20d5726f7de4671053028a1d66b5fb6b18f4790fdedec0801e6c29e6dbefb9d5622704e8f6e94361c0279705ba6dc7565631378ef5b2536a13c65e711c07f7faaecfa6a5deed43d4324055ac1fd8a2109b7f6a2344af8bc34bc3ebd54da6a32fa83924a39357869f3b2afb22a"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x3, 0x7, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_LIMIT={0x8, 0x5, 0x81}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x7, 0xb}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff3, 0x7, 0x6, 0x7a5, 0x3}, 0x4, 0x1, 0x1, 0x4, 0x7, 0xc, 0x16, 0x0, 0x4, 0x4, {0x0, 0xa1, 0x0, 0x8001, 0x2, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x4, 0xb, 0x1, 0x6, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl0\x00', <r2=>0x0, 0x4, 0xb, 0x1, 0x6, 0x24, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x0, 0x1}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), &(0x7f00000000c0), 0x0, 0x71, &(0x7f00000009c0)=[{}], 0x8, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000001100)=ANY=[@ANYBLOB="640100006098edf05e3fc8c082028cc828412e86dd855edb1a1cb638d5b8ccaebf8c41e5fc5700", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf25170000007000018008", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e3000000000000000000000000800030000000000080003000200000014000200636169663000000000000000000000005000018008000100", @ANYRES32, @ANYBLOB="1400020076657468315f766972745f776966690008000300000000001400020076657468305f6d616376746170000000140002007663616e3000000000000000000000006800018008000300000000000800030003000000140002006970766c616e3000000000000000000008000100", @ANYRESHEX, @ANYBLOB="080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f766c616e0000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r4 = socket(0x400000010, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000040000000000280000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000ec000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000009800000040"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x804)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001}, 0x10)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async)
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
write(r7, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0)
epoll_create1(0x0) (async)
epoll_create1(0x0)
socket(0x11, 0x3, 0x2) (async)
r9 = socket(0x11, 0x3, 0x2)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', <r11=>0x0})
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r11, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000) (async)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xa0}}, 0x80000)
socket$unix(0x1, 0x1, 0x0) (async)
r13 = socket$unix(0x1, 0x1, 0x0)
close(r13)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r14, 0x0)

1.130021356s ago: executing program 1 (id=1957):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) (async)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000800)='bic\x00', 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) (async)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b4b644f942f14ef09f53da27fcd5434db0400c1d2f5b6cf9367cbdcdfc215bc25298ec69a78e80f0fb30a7ad66acf6e9770405a2636d133bf0bfab5283967bb18d8f08c064b36e4b00d82cba682326758b69964d0a535fcc720b9fd7e646522af71c12adb68f2f0", 0x110}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}}) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r9, @ANYRES32=0x0, @ANYRES64=r9], 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx  \x00'}, 0x20)

1.129793284s ago: executing program 0 (id=1958):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xffffffffffffffce, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x26}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fcdbdf25010000002800010001000000082903a86ced57907c7e28b239000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000200012800b0001006d61637365630000100002800c0004000400000100c2800008000500", @ANYRES32=r6, @ANYBLOB="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"/369], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

1.070057737s ago: executing program 0 (id=1959):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd1383000)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/uts\x00')
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, r3, 0x0, 0x13, &(0x7f0000000040)='cgroup.controllers\x00'}, 0x30)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da0000000000"], 0xfc}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x0, 0xb69, 0xc1, 0x0, 0x1, 0x8, 0x4, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x401, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x7, 0x11000, 0x8, 0x5, 0x0, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd9, 0x7, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x8c, 0x5, 0x5, 0xf7, 0x5, 0x1, 0x6, 0x7, 0x4, 0x7, 0x4009, 0x800010, 0x204, 0x1, 0x8, 0x8000, 0x400000, 0x3, 0x0, 0x10001, 0x4e7b3717, 0xffffffff, 0x6, 0x1, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x5, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x8, 0x2, 0x5, 0x8, 0x0, 0x7, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x266cd, 0x8, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r8, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0)
setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
socket$inet6(0xa, 0x2, 0x0)

1.017800835s ago: executing program 0 (id=1960):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000400)={0x94, {{0xa, 0x4e24, 0x8001, @mcast2, 0x25}}, {{0xa, 0x4e22, 0xfffffff7, @empty, 0xb8000000}}}, 0x108) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c01000010000100000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/318], 0x16c}}, 0x0) (async)
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x3dc, r3, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x67}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x3bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x86, 0x2, "8cc3e261805118a681b4fb1505df6dcc926efd2e2396a9117b1bf16b60b5b30c6308d6bf9a3b01c22ced6ba8af0e2469c18bb51c8820247ed42987781b0c43393b6369f59caf013889170e55422ff66287e1437c73b1a549266237c9191f11366bda8ea9352bf12bbf1f59908f904319ff32ba4d8d7212e3671b5b1a607871959101"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x2a, 0x2, "1d1ef3bb2ba08ea5858e3b72525c23816336168947106fff98389207e52fbc1d4e837afc1621"}, @NL80211_FTM_RESP_ATTR_LCI={0x5a, 0x2, "50a401be4dafdd34042992d44f5fa5899cde99088b9c6413ff0d29a9fdedd12bb65620ad15d2d0dfccb59dbb1851ad28a60a01f95c90e3e0270b9d890bd378b2b769f431868932e8155ddb1ab23ba10d44e4314ddea7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x82, 0x3, "27d4622ddb61f1eb91dac038a94d402aade61bcf1382a17afa090371df16f2b91f288e6c314f969823129bc3a20a8835621b924cad6c71af4e15504215128db611428da6c3b6bc6bd92913074a3ddc938f293c03d534f149f7116d2129e3819a7c9eef4c7e0d779fdb1788b924e3b3bbace9250ce3bf37bb6121fd74194a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf3, 0x3, "da322ac7da48a50289bbca3a11a45b473e176fa6a81cff9d8264018b45a9032f82c2f80e08530ba0d91d759cf5d0ba72e7b63ea969910960dc3ab5e30ea9509a927d52738020e7dc5fca15459be53f8fff334539e08f92f4b1ed8c3ae16e5fd6f904f4caf4720fa35c0852a25d6942e73171f804801f38a434b17ddea21fddad84a59b59de64aa5aa1983a318e85905d11fc8edaaf53218465b88a42dc1239e791e7545f4cdea943fa407c25b9381fc30aa1e0c2ba083bc5b9f2ea2ab8efdf74ae2ebd8955d0ca4b571af1fb83a3b08ad4e74d667c54450572aaf3909ff23113c36f6ff20c23ffd8c9d8f2a6033d29"}, @NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "af400f3140f0f6f4e74d8e02806f38f4eb380bc95c7ae2c14421246c4de4"}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8000}, 0x60000000)
accept$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10)

1.016648799s ago: executing program 2 (id=1961):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300) (async)
socket$packet(0x11, 0xa, 0x300)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50)
socket(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008086)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030420000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000001200000a0001000000000000000000140035006d616373656330000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000900000000000000020000001811000053336589f5a5a6e02fd7893cfa6d70f6c50ab5e405c1ca15c041a55bf73fb0fe90fdf6eb5778be8f62b1332a763be2661a3848b651cadaab25d9e6a373d0015f56f42e68d87398fa72d97d0263fd95ef46454c115e13c004a0e6d70b95", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b0000060000000000000002000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0xfffffffffffffffc, 0x1, 0xfd, &(0x7f00000006c0)=""/253, 0x40e00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x8, 0x5, 0x8}, 0x10, 0x1d1f7, r2, 0x5, &(0x7f0000000c40)=[0xffffffffffffffff], &(0x7f0000000c80)=[{0x1, 0x4, 0x80005, 0xa}, {0x2, 0x2, 0xf, 0x4}, {0x4, 0x1, 0x3, 0x7}, {0x7, 0x3, 0x4, 0x1}, {0x3, 0x3, 0xf, 0xb}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
close(0x4) (async)
close(0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000180)={@multicast2, @local, 0xffffffffffffffff, "e0d169e366dc2032a1beca0f621eaaf96389d7612f6346eb9fa929ac17cb2038", 0xc28, 0x6, 0x7fff, 0x200}, 0x3c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)

399.965952ms ago: executing program 2 (id=1962):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x1f, 0x2, 0xfffffffe) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {0xf, 0xffe0}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x44040) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d0000000000"], 0x1c}}, 0x800)
socket$packet(0x11, 0x3, 0x300)
unshare(0x20000400) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x11, 0x0, 0x0) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000049125828aa9c69899e851000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x50}}, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r11) (async)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0) (async)
r13 = socket$alg(0x26, 0x5, 0x0)
unshare(0x600) (async)
bind$alg(r13, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x700, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)

399.534132ms ago: executing program 2 (id=1963):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0008000200000000000700"/20], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)

320.234738ms ago: executing program 2 (id=1964):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000300000000000000000000000947a25000100ffffffff9500000000000000"], 0x0, 0xf}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xe7878000)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r4 = socket$inet6(0xa, 0x5, 0x0)
listen(r4, 0x10000) (async)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab0"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
socket$inet6(0xa, 0x5, 0x0)

318.502083ms ago: executing program 2 (id=1965):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @empty}, &(0x7f0000000880)=0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000008c0)={0x2, 'dummy0\x00'}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000b03000000000000000000000902"], 0x0, 0x56, 0x0, 0x3}, 0x20)
unshare(0x26020480)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080))
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r5=>r1})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50)
unshare(0x26020480)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r7, 0x0, 0x0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r9=>0x0, 0x2b, 0x4, 0x8, 0x9, 0x21, @mcast1, @local, 0x8, 0x1, 0x63, 0x7f}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'ip_vti0\x00', <r10=>0x0, 0x1, 0x10, 0x2, 0x401, {{0x23, 0x4, 0x2, 0x3, 0x8c, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @local, {[@lsrr={0x83, 0x23, 0x3f, [@empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x3, 0x0}, @empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @remote]}, @lsrr={0x83, 0x7, 0xa6, [@broadcast]}, @timestamp_prespec={0x44, 0x4c, 0xee, 0x3, 0xe, [{@multicast2, 0xf}, {@broadcast, 0x8d}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@rand_addr=0x64010100, 0x7fffffff}, {@remote, 0x9}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r11=>0x0, 0x29, 0x5, 0x2, 0x2, 0x2, @local, @dev={0xfe, 0x80, '\x00', 0x19}, 0x700, 0x7800, 0x9981, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000800)={&(0x7f0000000100), 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xc0, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8040}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000900)=0x57, 0x4)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}, {0x0, 0x400000000}, 0x203, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@local, 0x1, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x1}}, 0xe4)

138.21315ms ago: executing program 1 (id=1966):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@empty, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x16, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x40040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}]}, 0x10)
sendmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000004c0), 0x0)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="a728796bd862f34f00375c2c98ac4a3049ee000000000000005bb8a260c053cfcd2aa7e5c656d6126557a1bdc48de076f9ad5106016ba3aaabc8a44812dd6969dd9a1154d106d630375a0e115362261479f6b6d6525fc45535e4b85a885c3c0ce3ab2035ce3e586bbcb03b7e1a09b21cacbba23031870ad998e46bca866e0db9a7985c7b9f935a2275f90b91b3a64626a66f2cdd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

60.309741ms ago: executing program 1 (id=1967):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000200)=0xc)
bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00000021000100fcffffff00009571673db9c7b337b400000a010101000000000000000000ef86734534af000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c0000000000000002000200ac1414bb000000000000000000000000ff0100000000000000000000000000010a0101020000000000000000000000007f00000100000000000000000000000033040000063500000a000800"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 0 (id=1968):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe0b85334efa1736d}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe0b85334efa1736d}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r3, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16630' (ED25519) to the list of known hosts.
syzkaller login: [   56.436411][ T5832] cgroup: Unknown subsys name 'net'
[   56.610026][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.616553][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.647395][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.003789][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.007319][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.010178][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.013178][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.017378][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.100363][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.104082][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.107496][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.110781][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.113988][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.133104][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.136819][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.140497][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.144144][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.147505][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.279745][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.410145][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.413733][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.417137][ T5846] bridge_slave_0: entered allmulticast mode
[   63.421354][ T5846] bridge_slave_0: entered promiscuous mode
[   63.430989][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.433963][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.437374][ T5846] bridge_slave_1: entered allmulticast mode
[   63.441741][ T5846] bridge_slave_1: entered promiscuous mode
[   63.503898][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.526285][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.580561][ T5846] team0: Port device team_slave_0 added
[   63.605670][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   63.612761][ T5846] team0: Port device team_slave_1 added
[   63.677711][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   63.692561][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.695498][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.706011][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.746244][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.749101][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.759302][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.811192][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.813863][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.816726][ T5854] bridge_slave_0: entered allmulticast mode
[   63.820555][ T5854] bridge_slave_0: entered promiscuous mode
[   63.873237][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.876482][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.879390][ T5854] bridge_slave_1: entered allmulticast mode
[   63.884104][ T5854] bridge_slave_1: entered promiscuous mode
[   63.892809][ T5846] hsr_slave_0: entered promiscuous mode
[   63.896743][ T5846] hsr_slave_1: entered promiscuous mode
[   63.900688][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.903499][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.907136][ T5852] bridge_slave_0: entered allmulticast mode
[   63.910360][ T5852] bridge_slave_0: entered promiscuous mode
[   63.913673][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.916206][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.918891][ T5852] bridge_slave_1: entered allmulticast mode
[   63.922489][ T5852] bridge_slave_1: entered promiscuous mode
[   63.981070][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.987801][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.007891][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.046213][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.051645][ T5854] team0: Port device team_slave_0 added
[   64.077704][ T5854] team0: Port device team_slave_1 added
[   64.110907][ T5852] team0: Port device team_slave_0 added
[   64.119044][ T5852] team0: Port device team_slave_1 added
[   64.151063][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.153286][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.161981][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.183191][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.186502][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.194746][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.199132][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.201957][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.212748][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.217577][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.220064][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.228123][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.331583][ T5854] hsr_slave_0: entered promiscuous mode
[   64.335070][ T5854] hsr_slave_1: entered promiscuous mode
[   64.337966][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.340355][ T5854] Cannot create hsr debugfs directory
[   64.359528][ T5852] hsr_slave_0: entered promiscuous mode
[   64.361898][ T5852] hsr_slave_1: entered promiscuous mode
[   64.364459][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   64.366786][ T5852] Cannot create hsr debugfs directory
[   64.499678][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.536266][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.543684][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.559278][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.702074][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.710427][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.718494][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.726901][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.812113][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.823924][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.834503][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.848654][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.900566][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.940546][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   64.961329][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.964496][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.985235][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.988060][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.016261][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.049685][ T5235] Bluetooth: hci0: command tx timeout
[   65.069698][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   65.096643][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.099472][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.121840][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.124751][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.139970][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.191358][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   65.209443][ T5235] Bluetooth: hci2: command tx timeout
[   65.211672][ T5235] Bluetooth: hci1: command tx timeout
[   65.220250][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.222779][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.227294][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.230020][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.281917][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.350152][ T5846] veth0_vlan: entered promiscuous mode
[   65.368594][ T5846] veth1_vlan: entered promiscuous mode
[   65.409022][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.426606][ T5846] veth0_macvtap: entered promiscuous mode
[   65.439968][ T5846] veth1_macvtap: entered promiscuous mode
[   65.459338][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.471655][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.480125][ T5854] veth0_vlan: entered promiscuous mode
[   65.487343][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.494594][ T5738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.501643][ T5738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.509786][ T5738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.512736][ T5738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.518543][ T5854] veth1_vlan: entered promiscuous mode
[   65.558775][ T5854] veth0_macvtap: entered promiscuous mode
[   65.561425][ T5852] veth0_vlan: entered promiscuous mode
[   65.589104][ T5854] veth1_macvtap: entered promiscuous mode
[   65.603550][ T5852] veth1_vlan: entered promiscuous mode
[   65.635519][ T2189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.637846][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.638609][ T2189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.647666][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.670676][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.683585][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.689906][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.693208][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.715732][ T2189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.719190][ T2189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.739320][ T5852] veth0_macvtap: entered promiscuous mode
[   65.768800][ T5852] veth1_macvtap: entered promiscuous mode
[   65.806769][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.808621][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.809272][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.823177][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.833653][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.863237][ T5738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.866594][ T5738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.869330][ T5738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.885325][ T5738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.888692][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   65.893434][ T2189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.898931][ T5912] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4'.
[   65.900797][ T2189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.999836][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.000488][ T5916] raw_sendmsg: syz.2.5 forgot to set AF_INET. Fix it!
[   66.002260][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.031826][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.035287][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.131809][ T5925] vlan2: entered promiscuous mode
[   66.133411][ T5925] macvtap0: entered promiscuous mode
[   66.183646][ T5929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.192149][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'.
[   66.198669][ T5930] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   66.307688][ T5944] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.10'.
[   66.319769][ T5944] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.10'.
[   66.323475][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   66.403518][    C1] Illegal XDP return value 16128 on prog  (id 5) dev lo, expect packet loss!
[   66.453616][ T5947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.472493][ T5956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.523374][ T5963] netlink: 'syz.0.16': attribute type 29 has an invalid length.
[   66.528306][ T5966] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.533993][ T5963] netlink: 'syz.0.16': attribute type 29 has an invalid length.
[   66.534111][ T5965] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15'.
[   66.538811][ T5963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.546395][ T5963] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   66.572401][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'.
[   66.574925][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   66.597022][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.615048][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   66.630021][ T5966] delete_channel: no stack
[   66.767453][ T5977] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   66.792327][ T5977] dummy0: entered promiscuous mode
[   66.799847][ T5977] batadv_slave_0: entered promiscuous mode
[   66.802399][ T5977] batadv_slave_0: left promiscuous mode
[   66.818763][ T5977] dummy0: left promiscuous mode
[   67.125152][   T55] Bluetooth: hci0: command tx timeout
[   67.173664][ T6016] gretap0: entered promiscuous mode
[   67.180898][ T6016] gretap0: left promiscuous mode
[   67.284962][   T55] Bluetooth: hci1: command tx timeout
[   67.286826][   T55] Bluetooth: hci2: command tx timeout
[   67.386155][ T6030] Bluetooth: MGMT ver 1.23
[   67.492136][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.588581][ T6055] netlink: 'syz.2.43': attribute type 1 has an invalid length.
[   67.591948][ T6055] tipc: Started in network mode
[   67.593692][ T6055] tipc: Node identity 1ac668d5801f, cluster identity 4711
[   67.596408][ T6055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.601483][ T6055] syzkaller0: entered promiscuous mode
[   67.603451][ T6055] syzkaller0: entered allmulticast mode
[   67.608100][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   67.623885][ T6057] tipc: Resetting bearer <eth:syzkaller0>
[   67.633627][ T6057] tipc: Disabling bearer <eth:syzkaller0>
[   67.682435][ T6063] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20002
[   67.797668][ T6072] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   68.324250][ T6112] Zero length message leads to an empty skb
[   68.779231][ T6145] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET)
[   69.131230][ T6162] openvswitch: netlink: Message has 4 unknown bytes.
[   69.133414][ T6162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.154235][ T6167] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   69.175338][ T6167] netlink: 'syz.2.65': attribute type 2 has an invalid length.
[   69.205950][   T55] Bluetooth: hci0: command tx timeout
[   69.369476][   T55] Bluetooth: hci2: command tx timeout
[   69.369497][ T5235] Bluetooth: hci1: command tx timeout
[   69.547923][ T6191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.635617][ T6191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.729799][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.734079][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.813784][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.823659][ T6195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.844991][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   69.951551][ T6191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.958676][ T5874] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[   69.961686][ T5874] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.970085][ T5874] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.973291][ T5874] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.991723][ T6206] unsupported nla_type 52263
[   70.020114][ T6191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.105324][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.113143][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.132654][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.141123][ T6213] vlan2: entered promiscuous mode
[   70.142860][ T6213] macvtap0: entered promiscuous mode
[   70.159018][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.235978][ T6218] netlink: 'syz.0.78': attribute type 29 has an invalid length.
[   70.336148][ T6230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.449931][ T6239] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.580302][ T6251] netlink: 'syz.0.85': attribute type 5 has an invalid length.
[   70.585961][ T6251] netlink: 'syz.0.85': attribute type 10 has an invalid length.
[   70.592201][ T6251] 8021q: adding VLAN 0 to HW filter on device team0
[   70.596234][ T6251] bond0: (slave team0): Enslaving as an active interface with an up link
[   70.630175][ T6253] netlink: 'syz.0.86': attribute type 6 has an invalid length.
[   70.693110][ T6258] vlan2: entered promiscuous mode
[   70.777024][ T6261] netlink: 'syz.0.89': attribute type 5 has an invalid length.
[   70.950651][ T6273] __nla_validate_parse: 14 callbacks suppressed
[   70.950662][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   70.968362][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'.
[   70.968990][ T5738] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.975670][ T5738] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.978900][ T5738] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.986177][ T5738] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.012660][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.95'.
[   71.090884][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   71.095279][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'.
[   71.113038][ T6288] bond1 (unregistering): Released all slaves
[   71.132019][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.134248][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.137696][ T6290] netlink: 172 bytes leftover after parsing attributes in process `syz.0.97'.
[   71.140612][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'.
[   71.287222][ T5235] Bluetooth: hci0: command tx timeout
[   71.325388][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'.
[   71.339816][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.104'.
[   71.373958][ T6319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.445393][ T5235] Bluetooth: hci1: command tx timeout
[   71.447316][   T55] Bluetooth: hci2: command tx timeout
[   71.788895][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'.
[   71.959050][ T6351] validate_nla: 6 callbacks suppressed
[   71.959073][ T6351] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[   73.056137][ T6427] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   73.066937][ T6427] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   73.111729][ T6427] netlink: 'syz.2.123': attribute type 1 has an invalid length.
[   73.189409][ T6455] netlink: 'syz.1.124': attribute type 1 has an invalid length.
[   73.216565][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.279096][ T6462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   73.281551][ T6462] IPv6: NLM_F_CREATE should be set when creating new route
[   73.283842][ T6462] IPv6: NLM_F_CREATE should be set when creating new route
[   73.318786][ T6465] tipc: Started in network mode
[   73.320349][ T6465] tipc: Node identity 4, cluster identity 4711
[   73.322407][ T6465] tipc: Node number set to 4
[   73.397393][ T6475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.402650][ T6473] syzkaller0: entered promiscuous mode
[   73.404377][ T6473] syzkaller0: entered allmulticast mode
[   73.442394][ T6472] tipc: Resetting bearer <eth:syzkaller0>
[   73.460438][ T6472] tipc: Disabling bearer <eth:syzkaller0>
[   73.598443][ T6499] netlink: 'syz.2.134': attribute type 23 has an invalid length.
[   73.631426][ T6500] bridge_slave_1: left allmulticast mode
[   73.633227][ T6500] bridge_slave_1: left promiscuous mode
[   73.636241][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.641068][ T6500] bridge_slave_0: left allmulticast mode
[   73.642868][ T6500] bridge_slave_0: left promiscuous mode
[   73.645788][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.386349][ T6517] Set syz0 is full, maxelem 0 reached
[   74.450011][ T6529] netlink: 'syz.0.145': attribute type 21 has an invalid length.
[   74.567648][ T6536] netlink: 'syz.0.147': attribute type 3 has an invalid length.
[   74.770109][ T6555] netlink: 'syz.0.153': attribute type 12 has an invalid length.
[   75.320973][ T6560] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[   75.604740][ T5235] Bluetooth: hci2: command tx timeout
[   75.996919][ T6590] syz_tun: entered allmulticast mode
[   75.999514][ T6590] __nla_validate_parse: 24 callbacks suppressed
[   75.999522][ T6590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.160'.
[   76.005558][ T6590] unsupported nlmsg_type 40
[   76.043405][ T6594] vlan3: entered promiscuous mode
[   76.091847][ T6595] netlink: 104 bytes leftover after parsing attributes in process `syz.0.161'.
[   76.271290][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[   76.376249][ T6614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.167'.
[   76.510596][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'.
[   76.529397][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.532788][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'.
[   76.587358][ T6636] netlink: 104 bytes leftover after parsing attributes in process `syz.1.174'.
[   76.999747][ T6667] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.184'.
[   77.100930][ T6673] netlink: 'syz.1.185': attribute type 13 has an invalid length.
[   77.107803][ T6673] netlink: 'syz.1.185': attribute type 17 has an invalid length.
[   77.170782][ T6673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.274978][ T6686] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   77.350201][ T6688] netlink: 232 bytes leftover after parsing attributes in process `syz.2.189'.
[   77.353058][ T6688] netlink: 232 bytes leftover after parsing attributes in process `syz.2.189'.
[   77.395831][ T6692] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.403013][ T6692] syzkaller1: entered promiscuous mode
[   77.406365][ T6692] syzkaller1: entered allmulticast mode
[   78.057401][   T24] IPVS: starting estimator thread 0...
[   78.060454][ T6707] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.101761][ T6710] netlink: 'syz.0.197': attribute type 21 has an invalid length.
[   78.106924][ T6710] netlink: 'syz.0.197': attribute type 21 has an invalid length.
[   78.145420][ T6708] IPVS: using max 63 ests per chain, 151200 per kthread
[   78.159110][ T6712] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   78.163295][ T6712] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.437336][ T6744] netlink: 'syz.1.207': attribute type 12 has an invalid length.
[   78.572384][ T6762] netlink: 'syz.1.211': attribute type 83 has an invalid length.
[   78.869438][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   78.872475][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   78.879440][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   79.096168][ T6814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.317437][ T6824] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   79.399334][ T6836] netlink: 'syz.0.229': attribute type 13 has an invalid length.
[   79.419828][ T6844] netlink: 'syz.2.230': attribute type 3 has an invalid length.
[   79.616042][ T6847] netlink: 'syz.2.232': attribute type 1 has an invalid length.
[   79.743713][ T6870] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.748050][ T6870] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.793102][ T6870] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.796908][ T6870] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.848538][ T6870] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.851598][ T6870] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.891109][ T6870] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.915440][ T6870] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.016454][ T6890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.025102][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.027888][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.039689][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.042571][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.052434][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.055178][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.066203][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.069014][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.232834][ T6938] __nla_validate_parse: 17 callbacks suppressed
[   81.232944][ T6938] netlink: 140 bytes leftover after parsing attributes in process `syz.1.254'.
[   81.249219][ T6938] 8021q: adding VLAN 0 to HW filter on device team0
[   81.261058][ T6938] bond0: (slave team0): Enslaving as an active interface with an up link
[   81.274228][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'.
[   81.540249][ T6955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.258'.
[   81.551072][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.258'.
[   81.660367][ T6962] netlink: 140 bytes leftover after parsing attributes in process `syz.1.260'.
[   81.922101][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'.
[   82.333974][ T6984] tipc: Can't bind to reserved service type 1
[   82.337915][ T6984] validate_nla: 8 callbacks suppressed
[   82.337926][ T6984] netlink: 'syz.0.268': attribute type 39 has an invalid length.
[   82.389877][ T6985] netlink: 44 bytes leftover after parsing attributes in process `syz.0.268'.
[   82.393674][ T6985] netlink: 43 bytes leftover after parsing attributes in process `syz.0.268'.
[   82.397218][ T6985] netlink: 'syz.0.268': attribute type 5 has an invalid length.
[   82.400332][ T6985] netlink: 43 bytes leftover after parsing attributes in process `syz.0.268'.
[   82.612831][ T6989] hsr0: entered promiscuous mode
[   82.614525][ T6989] hsr0: entered allmulticast mode
[   82.616781][ T6989] hsr_slave_0: entered allmulticast mode
[   82.618599][ T6989] hsr_slave_1: entered allmulticast mode
[   82.622812][ T6989] netlink: 277 bytes leftover after parsing attributes in process `syz.1.270'.
[   82.895625][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.905831][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.932819][ T6999] hsr0: left promiscuous mode
[   82.936120][ T6999] hsr0: left allmulticast mode
[   82.938882][ T6999] hsr_slave_0: left allmulticast mode
[   82.941013][ T6999] hsr_slave_1: left allmulticast mode
[   83.068918][ T7002] hsr_slave_0: left promiscuous mode
[   83.076705][ T7002] hsr_slave_1: left promiscuous mode
[   83.096421][ T5874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.100461][ T5874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.104070][ T5874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.108094][ T5874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.898451][ T7022] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   83.992019][ T7024] vlan3: entered promiscuous mode
[   84.083424][ T7033] netlink: 'syz.0.283': attribute type 12 has an invalid length.
[   84.529396][ T7048] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[   84.532496][ T7048] netlink: 'syz.1.288': attribute type 8 has an invalid length.
[   84.683145][ T7052] netlink: 'syz.1.290': attribute type 11 has an invalid length.
[   84.974417][ T7061] netlink: 'syz.1.292': attribute type 1 has an invalid length.
[   85.022375][ T7061] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.059843][ T7068] bond2: (slave geneve2): making interface the new active one
[   85.066371][ T7068] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   85.069954][ T5738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.077693][ T5738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.095782][ T5738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.101110][ T5738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.444845][ T7108] vlan2: entered promiscuous mode
[   85.471901][ T7111] vlan3: entered promiscuous mode
[   85.874276][ T7160] Set syz0 is full, maxelem 0 reached
[   86.303688][ T7195] __nla_validate_parse: 87 callbacks suppressed
[   86.303700][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.312058][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.316186][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.319808][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.325044][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.328469][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.331385][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.335099][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.338554][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.341617][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[   86.497786][ T1800] cfg80211: failed to load regulatory.db
[   86.971664][ T7224] netlink: 'syz.2.324': attribute type 10 has an invalid length.
[   86.979605][ T7224] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   86.983126][ T7224] bridge_slave_1: left allmulticast mode
[   86.986241][ T7224] bridge_slave_1: left promiscuous mode
[   86.988385][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.992684][ T7224] bridge_slave_0: left allmulticast mode
[   86.994887][ T7224] bridge_slave_0: left promiscuous mode
[   86.996807][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.009348][ T7224] bond0: (slave bridge0): Releasing backup interface
[   87.139561][ T7230] netlink: 'syz.2.325': attribute type 29 has an invalid length.
[   87.340124][ T7240] bond2: entered promiscuous mode
[   87.342365][ T7240] bond2: entered allmulticast mode
[   87.346529][ T7240] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.399156][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.403780][ T7238] 8021q: adding VLAN 0 to HW filter on device team0
[   87.408292][ T7238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   87.416891][ T7241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.757066][ T7260] vlan3: entered promiscuous mode
[   88.079442][ T7281] vlan2: entered promiscuous mode
[   88.321183][ T7296] validate_nla: 3 callbacks suppressed
[   88.321199][ T7296] netlink: 'syz.0.345': attribute type 24 has an invalid length.
[   88.552363][ T7313] sctp: [Deprecated]: syz.0.351 (pid 7313) Use of int in max_burst socket option deprecated.
[   88.552363][ T7313] Use struct sctp_assoc_value instead
[   88.594353][ T7318] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   88.791946][ T7333] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[   88.802134][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.805567][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.814815][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.817504][ T7333] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.821059][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.823640][ T7333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.829571][ T7333] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   88.834854][ T7333] bridge_slave_1: left allmulticast mode
[   88.837404][ T7333] bridge_slave_1: left promiscuous mode
[   88.840744][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.847328][ T7333] bridge_slave_0: left allmulticast mode
[   88.849420][ T7333] bridge_slave_0: left promiscuous mode
[   88.851348][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.874480][ T7333] bond0: (slave bridge0): Releasing backup interface
[   89.655008][ T7388] netlink: 'syz.1.363': attribute type 2 has an invalid length.
[   91.439373][ T7495] __nla_validate_parse: 115 callbacks suppressed
[   91.439384][ T7495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.390'.
[   91.548717][ T7502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.717461][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.392'.
[   91.954116][ T7517] netlink: 496 bytes leftover after parsing attributes in process `syz.2.395'.
[   92.154500][ T7537] netlink: 'syz.2.399': attribute type 1 has an invalid length.
[   92.180522][ T7537] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.195759][ T7537] bond3: (slave geneve3): making interface the new active one
[   92.199791][ T7537] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   92.202943][ T5738] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0
[   92.206665][ T5738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.210879][ T5738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.231863][ T5738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.506777][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'.
[   92.563802][ T7567] sctp: [Deprecated]: syz.2.408 (pid 7567) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.563802][ T7567] Use struct sctp_sack_info instead
[   92.653218][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'.
[   92.737685][ T7586] netlink: 'syz.2.415': attribute type 12 has an invalid length.
[   92.755981][ T7587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.567719][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.417'.
[   93.573105][ T7596] netlink: 60 bytes leftover after parsing attributes in process `syz.1.417'.
[   93.623063][ T7602] netlink: 'syz.2.419': attribute type 12 has an invalid length.
[   93.819195][ T7615] syzkaller1: entered promiscuous mode
[   93.820896][ T7615] syzkaller1: entered allmulticast mode
[   93.921497][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'.
[   93.969297][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.425'.
[   94.011146][ T7630] syz.1.425 uses old SIOCAX25GETINFO
[   94.047787][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'.
[   94.113885][ T7641] netlink: 'syz.2.429': attribute type 5 has an invalid length.
[   94.119088][ T7641] netlink: 'syz.2.429': attribute type 10 has an invalid length.
[   94.228234][ T7651] netlink: 'syz.2.433': attribute type 5 has an invalid length.
[   94.237798][ T7655] netlink: 'syz.2.433': attribute type 10 has an invalid length.
[   94.315078][ T7666] syz_tun: entered allmulticast mode
[   94.321314][ T7666] dvmrp8: entered allmulticast mode
[   94.348540][ T7666] syz_tun: left allmulticast mode
[   94.350547][ T7666] dvmrp8: left allmulticast mode
[   94.379382][ T7669] batman_adv: batadv0: Adding interface: dummy0
[   94.382157][ T7669] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.392676][ T7669] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   94.446925][ T7678] !: renamed from dummy0
[   95.435914][ T7775] macvtap0: mtu less than device minimum
[   95.569622][ T7790] netlink: 'syz.2.459': attribute type 6 has an invalid length.
[   95.572636][ T7790] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[   95.586776][ T7790] sctp: [Deprecated]: syz.2.459 (pid 7790) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.586776][ T7790] Use struct sctp_sack_info instead
[   96.553894][ T7861] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   96.563748][ T7863] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   96.587477][ T7857] xfrm0: entered promiscuous mode
[   96.589763][ T7857] xfrm0: entered allmulticast mode
[   96.669036][ T7874] __nla_validate_parse: 7 callbacks suppressed
[   96.669052][ T7874] netlink: 88 bytes leftover after parsing attributes in process `syz.0.473'.
[   96.768938][ T7882] netlink: 277 bytes leftover after parsing attributes in process `syz.2.475'.
[   96.977160][ T7892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.985810][ T7892] ip6tnl1: entered promiscuous mode
[   97.002482][ T7892] ip6tnl1: entered allmulticast mode
[   97.007377][ T7892] team0: Device ip6tnl1 is of different type
[   97.035991][ T7905] netlink: 104 bytes leftover after parsing attributes in process `syz.0.480'.
[   97.128339][ T7914] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[   97.131270][ T7914] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   97.163330][ T7916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.484'.
[   97.169722][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'.
[   98.609743][ T7969] netlink: 'syz.0.498': attribute type 178 has an invalid length.
[   98.689968][ T7971] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.838036][ T7999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.504'.
[   98.923306][ T8002] netlink: 'syz.2.505': attribute type 10 has an invalid length.
[   98.997193][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'.
[   99.000730][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   99.013338][ T8011] netlink: 'syz.0.509': attribute type 6 has an invalid length.
[   99.018073][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'.
[   99.021551][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   99.028228][ T8011] netlink: 'syz.0.509': attribute type 6 has an invalid length.
[   99.343806][ T8043] netlink: 'syz.2.518': attribute type 1 has an invalid length.
[   99.347445][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.482107][ T8059] !: renamed from dummy0
[   99.579694][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.591461][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.606391][ T8063] netlink: 'syz.0.526': attribute type 5 has an invalid length.
[   99.609727][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.614490][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.621431][ T8063] netlink: 'syz.0.526': attribute type 10 has an invalid length.
[   99.731932][ T8076] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[   99.785351][ T8076] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.824299][ T8082] bond2: (slave geneve2): making interface the new active one
[   99.847555][ T8082] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   99.861971][ T8082] syz.0.527 (8082) used greatest stack depth: 17368 bytes left
[  100.212379][ T8099] Set syz0 is full, maxelem 0 reached
[  100.223391][ T8097] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  100.237146][ T8097] batadv1: entered promiscuous mode
[  100.239403][ T8097] batadv1: entered allmulticast mode
[  100.294488][ T8103] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[  100.617277][ T8133] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.290785][ T8165] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  101.539030][ T8186] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  101.562969][ T8186] bond0: entered promiscuous mode
[  101.568550][ T8186] bond_slave_0: entered promiscuous mode
[  101.570831][ T8186] bond_slave_1: entered promiscuous mode
[  101.572846][ T8186] team0: entered promiscuous mode
[  101.576116][ T8186] team_slave_0: entered promiscuous mode
[  101.581773][ T8186] team_slave_1: entered promiscuous mode
[  101.586220][ T8186] bond0: left promiscuous mode
[  101.589491][ T8186] bond_slave_0: left promiscuous mode
[  101.595390][ T8186] bond_slave_1: left promiscuous mode
[  101.606301][ T8186] team0: left promiscuous mode
[  101.608521][ T8186] team_slave_0: left promiscuous mode
[  101.610954][ T8186] team_slave_1: left promiscuous mode
[  101.727546][ T8202] netlink: 'syz.0.552': attribute type 74 has an invalid length.
[  101.803163][ T8207] __nla_validate_parse: 17 callbacks suppressed
[  101.803175][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'.
[  101.808799][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.553'.
[  102.536006][ T8260] netlink: 256 bytes leftover after parsing attributes in process `syz.0.561'.
[  102.539130][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.561'.
[  102.542370][ T8260] syz_tun: left allmulticast mode
[  102.552946][ T8260] lo speed is unknown, defaulting to 1000
[  102.561729][ T8260] lo speed is unknown, defaulting to 1000
[  102.568959][ T8260] lo speed is unknown, defaulting to 1000
[  102.620651][ T8261] 8021q: adding VLAN 0 to HW filter on device team0
[  102.638173][ T8261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.893064][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'.
[  102.896917][ T8282] openvswitch: netlink: EtherType 0 is less than min 600
[  102.907180][ T5881] lo speed is unknown, defaulting to 1000
[  102.909746][ T8260] infiniband syz0: set active
[  102.911729][ T8260] infiniband syz0: added lo
[  102.918115][ T8260] syz0: rxe_create_cq: returned err = -12
[  102.921373][ T8260] infiniband syz0: Couldn't create ib_mad CQ
[  102.925259][ T8260] infiniband syz0: Couldn't open port 1
[  102.951842][ T8260] RDS/IB: syz0: added
[  102.954019][ T8260] smc: adding ib device syz0 with port count 1
[  102.957538][ T8260] smc:    ib device syz0 port 1 has no pnetid
[  102.967799][ T5881] lo speed is unknown, defaulting to 1000
[  102.976981][ T8260] lo speed is unknown, defaulting to 1000
[  102.992228][ T8287] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  102.995229][ T8287] netlink: 224 bytes leftover after parsing attributes in process `syz.1.568'.
[  103.150495][ T8260] lo speed is unknown, defaulting to 1000
[  103.283398][ T8260] lo speed is unknown, defaulting to 1000
[  103.324325][ T8303] netlink: 104 bytes leftover after parsing attributes in process `syz.2.572'.
[  103.345503][ T8289] nbd: error processing sock list
[  103.350891][ T8289] block nbd0: shutting down sockets
[  103.776535][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'.
[  103.912410][ T8335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.580'.
[  103.990476][ T8340] lo speed is unknown, defaulting to 1000
[  104.013285][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.584'.
[  104.062810][ T8347] validate_nla: 2 callbacks suppressed
[  104.062825][ T8347] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  104.109075][ T8346] bond4: (slave geneve3): making interface the new active one
[  104.113987][ T8346] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  104.118786][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  104.123718][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  104.129027][ T8347] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.133591][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  104.139779][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  104.164295][ T8347] geneve4: entered promiscuous mode
[  104.167437][ T8347] geneve4: entered allmulticast mode
[  104.221310][ T8353] netlink: 'syz.0.586': attribute type 12 has an invalid length.
[  104.316021][ T8360] netlink: 'syz.0.587': attribute type 4 has an invalid length.
[  104.327863][ T5881] lo speed is unknown, defaulting to 1000
[  104.330959][ T8360] netlink: 'syz.0.587': attribute type 4 has an invalid length.
[  104.338299][ T5881] lo speed is unknown, defaulting to 1000
[  104.341515][  T792] lo speed is unknown, defaulting to 1000
[  104.705770][ T8377] 8021q: adding VLAN 0 to HW filter on device bond5
[  104.710604][ T8377] bond0: (slave bond5): Enslaving as an active interface with an up link
[  104.920807][ T8387] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[  105.322564][ T8396] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  105.324521][ T8397] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  106.618270][ T8458] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  106.664727][ T8459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.688609][ T8462] team0: No ports can be present during mode change
[  106.869188][   T12] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[  106.872671][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.877833][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.881300][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.917407][ T8481] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  106.942458][ T8481] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.044342][ T8486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.288320][ T8491] __nla_validate_parse: 10 callbacks suppressed
[  107.288334][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  107.491208][ T8496] bond5: entered promiscuous mode
[  107.493682][ T8496] 8021q: adding VLAN 0 to HW filter on device bond5
[  107.562079][ T8508] netlink: 'syz.0.626': attribute type 29 has an invalid length.
[  107.570460][ T8508] netlink: 'syz.0.626': attribute type 29 has an invalid length.
[  107.574065][ T8508] netlink: 596 bytes leftover after parsing attributes in process `syz.0.626'.
[  107.614974][ T5235] Bluetooth: hci1: command tx timeout
[  107.650937][ T8513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.629'.
[  107.693591][ T8519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.696706][ T8519] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  107.699540][ T8519] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  107.714350][ T8519] tipc: Resetting bearer <eth:syzkaller0>
[  107.813316][ T8527] netlink: 'syz.0.633': attribute type 1 has an invalid length.
[  107.851604][ T8527] 8021q: adding VLAN 0 to HW filter on device bond6
[  107.860307][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.634'.
[  107.864404][ T8530] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  107.901232][ T8532] tun0: tun_chr_ioctl cmd 1074025673
[  107.950827][ T8539] netlink: 'syz.0.637': attribute type 12 has an invalid length.
[  107.957068][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.638'.
[  107.992761][ T8543] netlink: 64 bytes leftover after parsing attributes in process `syz.0.639'.
[  108.029506][ T8546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.164375][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'.
[  108.267875][ T8561] vlan0: entered promiscuous mode
[  108.313776][ T8562] netlink: 104 bytes leftover after parsing attributes in process `syz.0.645'.
[  108.435752][ T8567] netlink: 140 bytes leftover after parsing attributes in process `syz.0.647'.
[  108.519413][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.649'.
[  108.632452][ T8582] lo speed is unknown, defaulting to 1000
[  108.838755][ T8592] bond0: (slave bond_slave_0): Releasing backup interface
[  108.842748][ T8592] bond0: (slave bond_slave_1): Releasing backup interface
[  108.849141][ T8592] team0: Port device team_slave_0 removed
[  108.852080][ T8592] team0: Port device team_slave_1 removed
[  108.854339][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.872693][ T8592] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.889002][ T8592] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  109.119557][ T8616] lo speed is unknown, defaulting to 1000
[  109.825117][ T8674] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  109.828193][ T8674] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  109.840053][ T8676] validate_nla: 3 callbacks suppressed
[  109.840066][ T8676] netlink: 'syz.1.672': attribute type 5 has an invalid length.
[  109.866376][ T8676] netlink: 'syz.1.672': attribute type 10 has an invalid length.
[  109.968911][ T8686] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  109.970051][ T8687] netlink: 'syz.1.677': attribute type 10 has an invalid length.
[  109.972351][ T8686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.986551][ T8688] siw: device registration error -23
[  109.988063][ T8686] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  110.011979][ T8688] lo speed is unknown, defaulting to 1000
[  110.028016][ T8689] netlink: 'syz.0.678': attribute type 39 has an invalid length.
[  110.039804][ T8689] veth0_macvtap: left promiscuous mode
[  110.823872][ T8719] openvswitch: netlink: nsh attr 16129 is out of range max 3
[  110.829230][ T8719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.025877][ T8768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.309008][ T8811] bond0: (slave team0): Releasing backup interface
[  112.309804][ T8815] __nla_validate_parse: 16 callbacks suppressed
[  112.309818][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'.
[  112.321765][ T8811] bond0: (slave bond_slave_0): Releasing backup interface
[  112.330482][ T8811] bond0: (slave bond_slave_1): Releasing backup interface
[  112.339758][ T8811] team0: Port device team_slave_0 removed
[  112.348605][ T8811] team0: Port device team_slave_1 removed
[  112.350791][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.353792][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.358266][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.361131][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.367678][ T8811] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  112.388139][ T8813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  112.438936][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'.
[  112.481978][ T8823] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  112.487735][ T8823] netlink: 'syz.0.714': attribute type 3 has an invalid length.
[  112.490926][ T8823] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  112.494104][ T8823] netlink: 204 bytes leftover after parsing attributes in process `syz.0.714'.
[  112.499626][ T8823] NCSI netlink: No device for ifindex 0
[  112.578730][ T8832] netlink: 308 bytes leftover after parsing attributes in process `syz.2.718'.
[  112.584087][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  112.643015][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'.
[  112.686396][ T8842] netlink: 'syz.0.722': attribute type 9 has an invalid length.
[  112.689573][ T8842] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.722'.
[  112.692956][ T8842] openvswitch: netlink: Message has 5 unknown bytes.
[  112.890956][ T8860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.727'.
[  112.900737][ T8862] netlink: 'syz.0.728': attribute type 8 has an invalid length.
[  113.061791][ T8882] Set syz0 is full, maxelem 0 reached
[  113.127799][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'.
[  114.014393][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'.
[  114.169045][ T8925] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  114.172161][ T8925] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  114.286792][ T8937] syz_tun: entered allmulticast mode
[  114.300955][ T8937] dvmrp8: entered allmulticast mode
[  114.335917][ T8937] lo speed is unknown, defaulting to 1000
[  114.494154][ T8952] : entered promiscuous mode
[  114.645882][ T8936] syz_tun: left allmulticast mode
[  114.648145][ T8936] dvmrp8: left allmulticast mode
[  116.017604][ T9039] validate_nla: 4 callbacks suppressed
[  116.017618][ T9039] netlink: 'syz.0.771': attribute type 5 has an invalid length.
[  116.129014][ T9048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.245021][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.258605][ T9051] bond0: (slave team0): Releasing backup interface
[  116.262395][ T9051] batman_adv: batadv0: Removing interface: 0!
[  116.268651][ T9051] bond0: (slave bond_slave_0): Releasing backup interface
[  116.274057][ T9051] bond0: (slave bond_slave_1): Releasing backup interface
[  116.279229][ T9051] team0: Port device team_slave_0 removed
[  116.282967][ T9051] team0: Port device team_slave_1 removed
[  116.286699][ T9051] bond0: (slave batadv_slave_0): Releasing backup interface
[  116.290483][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.294289][ T9051] bond2: (slave geneve2): Releasing active interface
[  116.324843][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.416874][ T9063] delete_channel: no stack
[  116.509743][ T9066] macsec1: entered allmulticast mode
[  116.511912][ T9066] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  116.706030][ T9075] netlink: 'syz.2.783': attribute type 5 has an invalid length.
[  116.710188][ T9075] netlink: 'syz.2.783': attribute type 6 has an invalid length.
[  116.805230][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.259167][ T9127] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  117.365345][ T9126] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  117.369568][ T9126] __nla_validate_parse: 87 callbacks suppressed
[  117.369581][ T9126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.796'.
[  117.423435][ T9140] vlan2: entered promiscuous mode
[  117.470406][ T9140] netlink: 104 bytes leftover after parsing attributes in process `syz.1.800'.
[  117.654394][ T9158] syzkaller1: entered promiscuous mode
[  117.657154][ T9158] syzkaller1: entered allmulticast mode
[  118.747468][ T9205] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  118.771797][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.813'.
[  118.823390][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'.
[  118.828046][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'.
[  118.849691][ T9211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.816'.
[  118.876805][ T9215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.818'.
[  118.918862][ T9217] lo speed is unknown, defaulting to 1000
[  119.022837][ T9230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  119.063387][ T9225] lo speed is unknown, defaulting to 1000
[  119.197638][ T9245] sctp: [Deprecated]: syz.1.822 (pid 9245) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.197638][ T9245] Use struct sctp_sack_info instead
[  119.379175][ T9262] netlink: 64 bytes leftover after parsing attributes in process `syz.0.825'.
[  119.716071][ T9283] netlink: 68 bytes leftover after parsing attributes in process `syz.0.828'.
[  119.898466][ T9297] netlink: 'syz.0.830': attribute type 5 has an invalid length.
[  119.963302][ T9301] geneve5: entered promiscuous mode
[  120.026916][ T9306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.834'.
[  120.072289][ T9310] netlink: 'syz.1.836': attribute type 1 has an invalid length.
[  120.093850][ T9310] 8021q: adding VLAN 0 to HW filter on device bond6
[  120.540885][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  120.543857][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  120.584253][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  120.758963][ T9380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.948396][ T9392] delete_channel: no stack
[  121.391525][ T9426] netlink: 'syz.2.865': attribute type 5 has an invalid length.
[  121.397360][ T9426] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  121.403228][ T9426] netlink: 'syz.2.865': attribute type 10 has an invalid length.
[  121.462467][ T9428] bond0: entered promiscuous mode
[  121.468862][ T9428] bond0: left promiscuous mode
[  123.224504][ T9481] __nla_validate_parse: 14 callbacks suppressed
[  123.224520][ T9481] netlink: 9 bytes leftover after parsing attributes in process `syz.0.884'.
[  123.230815][ T9481] ..0: renamed from hsr0 (while UP)
[  123.239087][ T9481] ..0: entered allmulticast mode
[  123.241111][ T9481] hsr_slave_0: entered allmulticast mode
[  123.243354][ T9481] hsr_slave_1: entered allmulticast mode
[  123.248673][ T9481] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  123.679971][ T9520] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[  123.697059][ T9520] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.745928][ T9525] netlink: 84 bytes leftover after parsing attributes in process `syz.2.891'.
[  123.748789][ T9525] netem: invalid attributes len -16
[  123.750640][ T9525] netem: change failed
[  123.896784][ T9543] Bluetooth: MGMT ver 1.23
[  124.025801][ T9552] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  124.159063][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  124.173371][ T9568] netlink: 92 bytes leftover after parsing attributes in process `syz.0.899'.
[  124.244766][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  124.259061][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'.
[  124.398738][ T9581] netlink: 1 bytes leftover after parsing attributes in process `syz.0.905'.
[  124.483954][ T9585] "syz.1.907" (9585) uses obsolete ecb(arc4) skcipher
[  124.857016][ T9603] dvmrp0: entered allmulticast mode
[  124.899781][ T9628] netlink: 148 bytes leftover after parsing attributes in process `syz.0.912'.
[  124.930876][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'.
[  124.987395][ T9642] netlink: 'syz.2.916': attribute type 4 has an invalid length.
[  125.066586][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'.
[  125.161887][ T9661] netlink: 104 bytes leftover after parsing attributes in process `syz.0.923'.
[  125.332109][ T9671] netlink: 'syz.2.927': attribute type 10 has an invalid length.
[  125.528704][ T9676] netlink: 'syz.2.929': attribute type 5 has an invalid length.
[  125.734430][ T9696] netlink: 'syz.1.934': attribute type 30 has an invalid length.
[  125.891077][ T9699] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  125.893499][ T9699] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  125.928514][ T9701] IPVS: Error connecting to the multicast addr
[  126.136928][ T9709] lo speed is unknown, defaulting to 1000
[  126.176780][ T9715] dvmrp0: left allmulticast mode
[  126.305879][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.365045][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.719898][ T9743] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  126.722278][ T9743] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  126.898958][ T9754] 8021q: adding VLAN 0 to HW filter on device team0
[  126.902900][ T9754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.112641][ T9766] netlink: 'syz.2.957': attribute type 3 has an invalid length.
[  127.117156][ T9766] netlink: 'syz.2.957': attribute type 2 has an invalid length.
[  127.119882][ T9766] netlink: 'syz.2.957': attribute type 2 has an invalid length.
[  127.127152][ T9766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.140225][ T9766] tipc: Resetting bearer <eth:syzkaller0>
[  127.142900][ T9766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.146546][ T9766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.227762][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.274910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.278385][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.368709][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.415661][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.554796][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.558219][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.694876][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.789071][ T9789] netlink: 'syz.0.963': attribute type 10 has an invalid length.
[  128.087193][ T9821] syz_tun: entered allmulticast mode
[  128.257479][   T24] tipc: Node number set to 2597939413
[  128.464191][ T9849] syzkaller0: entered promiscuous mode
[  128.466845][ T9849] syzkaller0: entered allmulticast mode
[  128.576728][ T9852] __nla_validate_parse: 56 callbacks suppressed
[  128.576746][ T9852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.981'.
[  128.583461][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.981'.
[  128.587237][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.981'.
[  129.147414][ T9863] netlink: 64 bytes leftover after parsing attributes in process `syz.2.986'.
[  129.186106][ T9865] netlink: 'syz.2.987': attribute type 1 has an invalid length.
[  129.203385][ T9867] netlink: 256 bytes leftover after parsing attributes in process `syz.1.988'.
[  129.399988][   T10] IPVS: starting estimator thread 0...
[  129.494810][ T9875] IPVS: using max 63 ests per chain, 151200 per kthread
[  129.556174][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  129.624908][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  129.643019][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[  130.089708][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  130.093501][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  130.323634][ T9913] xfrm0: left promiscuous mode
[  130.326478][ T9913] xfrm0: left allmulticast mode
[  130.350511][ T9913] ..0: left allmulticast mode
[  130.352318][ T9913] hsr_slave_0: left allmulticast mode
[  130.354177][ T9913] hsr_slave_1: left allmulticast mode
[  130.452202][ T9913] geneve4: left promiscuous mode
[  130.453942][ T9913] geneve4: left allmulticast mode
[  130.501365][ T9913] geneve5: left promiscuous mode
[  130.517386][  T792] lo speed is unknown, defaulting to 1000
[  130.530226][  T792] syz0: Port: 1 Link DOWN
[  130.531103][ T5874] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.538235][ T5874] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.541886][ T5874] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.546454][ T5874] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.551823][ T5874] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.559775][ T5874] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.564715][ T5874] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.571053][ T5874] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.582597][ T5874] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.587875][  T792] lo speed is unknown, defaulting to 1000
[  130.587919][ T5874] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  130.593672][ T5874] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.598139][ T5874] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  131.083174][ T9948] netlink: 'syz.1.1008': attribute type 1 has an invalid length.
[  131.615192][ T9964] tipc: Started in network mode
[  131.617167][ T9964] tipc: Node identity fa974c8228ad, cluster identity 4711
[  131.620008][ T9964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.623266][ T9964] syzkaller0: entered promiscuous mode
[  131.625990][ T9964] syzkaller0: entered allmulticast mode
[  131.641137][ T9964] tipc: Resetting bearer <eth:syzkaller0>
[  131.645593][ T9963] tipc: Resetting bearer <eth:syzkaller0>
[  131.654998][ T9963] tipc: Disabling bearer <eth:syzkaller0>
[  131.678098][ T9969] tap0: tun_chr_ioctl cmd 1074025677
[  131.680328][ T9969] tap0: linktype set to 0
[  131.913134][ T9978] net_ratelimit: 16 callbacks suppressed
[  131.913164][ T9978] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  131.918301][ T9978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.334735][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.338308][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.370376][T10006] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  132.376038][T10006] netlink: 'syz.2.1025': attribute type 10 has an invalid length.
[  132.379902][T10006] !: entered promiscuous mode
[  132.385041][T10006] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  132.665092][T10031] netlink: 'syz.1.1032': attribute type 5 has an invalid length.
[  132.667928][T10032] lo speed is unknown, defaulting to 1000
[  132.671831][T10033] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002
[  132.686396][T10031] netlink: 'syz.1.1032': attribute type 10 has an invalid length.
[  132.691486][T10031] 8021q: adding VLAN 0 to HW filter on device team0
[  132.696020][T10031] bond0: (slave team0): Enslaving as an active interface with an up link
[  132.763674][T10035] 8021q: adding VLAN 0 to HW filter on device bond8
[  133.029410][T10054] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  133.364762][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.491043][T10084] netlink: 'syz.2.1048': attribute type 5 has an invalid length.
[  133.498238][T10084] netlink: 'syz.2.1048': attribute type 10 has an invalid length.
[  133.623160][T10097] lo speed is unknown, defaulting to 1000
[  133.770009][T10111] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.773447][T10111] 8021q: adding VLAN 0 to HW filter on device team0
[  133.777889][T10111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.799132][T10107] lo speed is unknown, defaulting to 1000
[  134.012569][T10115] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  134.224236][T10129] __nla_validate_parse: 17 callbacks suppressed
[  134.224247][T10129] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1060'.
[  134.230205][T10130] netlink: 'syz.0.1060': attribute type 5 has an invalid length.
[  134.232831][T10129] netlink: 'syz.0.1060': attribute type 5 has an invalid length.
[  134.239057][T10129] netlink: 'syz.0.1060': attribute type 10 has an invalid length.
[  134.243326][T10129] 8021q: adding VLAN 0 to HW filter on device team0
[  134.246782][T10129] bond0: (slave team0): Enslaving as an active interface with an up link
[  134.272229][T10133] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.398773][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'.
[  134.418721][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.456519][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'.
[  134.471895][T10149] sctp: [Deprecated]: syz.1.1067 (pid 10149) Use of int in max_burst socket option.
[  134.471895][T10149] Use struct sctp_assoc_value instead
[  134.479210][T10150] sctp: [Deprecated]: syz.1.1067 (pid 10150) Use of int in max_burst socket option.
[  134.479210][T10150] Use struct sctp_assoc_value instead
[  134.651583][T10166] netlink: 'syz.0.1070': attribute type 12 has an invalid length.
[  134.694964][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  134.709800][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  135.107886][T10224] lo speed is unknown, defaulting to 1000
[  135.153449][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'.
[  135.343806][T10237] tipc: Resetting bearer <eth:syzkaller0>
[  135.521664][T10243] vlan2: entered promiscuous mode
[  135.618751][T10248] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1084'.
[  135.898297][T10270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.906342][T10270] syzkaller0: entered promiscuous mode
[  135.911223][T10270] syzkaller0: entered allmulticast mode
[  135.952421][T10270] tipc: Resetting bearer <eth:syzkaller0>
[  135.957832][T10273] netlink: 'syz.1.1092': attribute type 1 has an invalid length.
[  135.963244][T10268] tipc: Resetting bearer <eth:syzkaller0>
[  135.964081][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'.
[  135.985637][T10268] tipc: Disabling bearer <eth:syzkaller0>
[  135.991144][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  136.001150][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'.
[  136.197514][T10286] ip6tnl2: entered promiscuous mode
[  136.199344][T10286] ip6tnl2: entered allmulticast mode
[  136.212503][T10286] team0: Refused to change device type
[  136.688729][T10306] dvmrp0: entered allmulticast mode
[  136.879741][T10316] vlan3: entered promiscuous mode
[  136.881630][T10316] macvtap0: entered promiscuous mode
[  137.387394][T10367] 8021q: adding VLAN 0 to HW filter on device bond7
[  137.397157][T10367] ipvlan0: entered allmulticast mode
[  137.398894][T10367] bond7: entered allmulticast mode
[  137.400889][T10364] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  137.417902][T10367] bond7: (slave gretap1): making interface the new active one
[  137.421168][T10367] gretap1: entered allmulticast mode
[  137.425501][T10367] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  137.502996][T10385] xt_time: invalid argument - start or stop time greater than 23:59:59
[  137.534691][    C1] net_ratelimit: 38 callbacks suppressed
[  137.534702][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.539091][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.591805][T10391] veth13: entered promiscuous mode
[  137.657057][T10400] bond8: entered promiscuous mode
[  137.658707][T10400] bond8: entered allmulticast mode
[  137.660729][T10400] 8021q: adding VLAN 0 to HW filter on device bond8
[  138.574778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.747073][T10448] !: left promiscuous mode
[  138.764281][T10448] tipc: Resetting bearer <eth:syzkaller0>
[  138.772728][T10448] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  138.775416][T10448] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  138.779152][T10448] bond2: left promiscuous mode
[  138.780663][T10448] bond2: left allmulticast mode
[  138.784881][T10448] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  138.787031][T10448] macsec1: left allmulticast mode
[  138.794974][T10448] veth13: left promiscuous mode
[  138.892131][T10451] sctp: [Deprecated]: syz.1.1127 (pid 10451) Use of int in max_burst socket option deprecated.
[  138.892131][T10451] Use struct sctp_assoc_value instead
[  138.958550][T10453] lo speed is unknown, defaulting to 1000
[  139.005190][   T10] IPVS: starting estimator thread 0...
[  139.094724][T10458] IPVS: using max 49 ests per chain, 117600 per kthread
[  139.617963][T10488] __nla_validate_parse: 20 callbacks suppressed
[  139.617979][T10488] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1138'.
[  139.630197][T10488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1138'.
[  139.781940][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'.
[  139.823675][T10459] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  139.944212][T10517] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1146'.
[  139.946852][T10519] bond0: entered promiscuous mode
[  139.949423][T10519] team0: entered promiscuous mode
[  139.952011][T10519] batadv0: entered promiscuous mode
[  139.954541][T10519] debugfs: 'hsr0' already exists in 'hsr'
[  139.956288][T10517] Set syz0 is full, maxelem 0 reached
[  139.960317][T10519] Cannot create hsr debugfs directory
[  139.962552][T10519] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  139.966023][T10519] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  139.970276][T10519] 8021q: adding VLAN 0 to HW filter on device hsr0
[  139.978505][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.990841][T10521] validate_nla: 4 callbacks suppressed
[  139.990850][T10521] netlink: 'syz.0.1148': attribute type 2 has an invalid length.
[  140.027432][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  140.030850][T10526] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1150'.
[  140.042553][T10528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1151'.
[  140.070886][T10532] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1153'.
[  140.180030][T10544] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1157'.
[  140.187219][T10544] Set syz0 is full, maxelem 0 reached
[  140.251236][T10549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.304087][T10551] !: renamed from dummy0
[  140.347309][T10556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'.
[  140.352674][T10556] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  140.582397][T10569] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.803803][T10592] netlink: 'syz.0.1173': attribute type 1 has an invalid length.
[  140.854080][T10592] veth9: entered promiscuous mode
[  140.860146][T10592] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  140.867477][T10598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.875741][T10591] bond0: (slave team0): Releasing backup interface
[  140.881832][T10591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.897683][T10598] netlink: 'syz.2.1175': attribute type 10 has an invalid length.
[  140.905665][T10598] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.909069][T10598] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.071603][T10606] lo speed is unknown, defaulting to 1000
[  141.125003][ T5235] Bluetooth: hci0: command 0x0c20 tx timeout
[  141.127190][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.131771][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.136370][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.139646][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.631991][T10626] netlink: 'syz.1.1184': attribute type 5 has an invalid length.
[  141.636478][T10628] netlink: 'syz.1.1184': attribute type 10 has an invalid length.
[  141.868625][T10642] veth9: left promiscuous mode
[  141.872003][T10642] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  142.634165][T10639] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  142.662370][T10667] netlink: 'syz.2.1196': attribute type 13 has an invalid length.
[  142.668677][T10667] netlink: 'syz.2.1196': attribute type 11 has an invalid length.
[  142.937343][T10693] netlink: 'syz.2.1203': attribute type 12 has an invalid length.
[  143.033136][T10702] netlink: 'syz.2.1206': attribute type 1 has an invalid length.
[  143.057242][T10702] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.061273][T10701] bridge_slave_0: entered allmulticast mode
[  144.917877][T10747] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.922274][T10747] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  144.926910][T10747] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  144.931050][T10747] tipc: Resetting bearer <eth:syzkaller0>
[  144.936366][T10747] __nla_validate_parse: 22 callbacks suppressed
[  144.936375][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1218'.
[  145.116534][T10761] netlink: 'syz.0.1221': attribute type 27 has an invalid length.
[  145.120003][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'.
[  145.124212][T10761] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  145.350908][T10778] netlink: 'syz.1.1223': attribute type 29 has an invalid length.
[  145.355083][T10778] netlink: 'syz.1.1223': attribute type 29 has an invalid length.
[  145.387350][T10782] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  146.075334][T10790] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1226'.
[  146.079336][T10788] Set syz0 is full, maxelem 0 reached
[  146.116443][T10793] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1227'.
[  146.119788][T10792] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1227'.
[  146.361278][T10798] netlink: 'syz.0.1229': attribute type 23 has an invalid length.
[  146.380523][T10801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1230'.
[  146.459808][T10814] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  146.573391][T10821] netlink: 'syz.0.1235': attribute type 1 has an invalid length.
[  146.603557][T10821] 8021q: adding VLAN 0 to HW filter on device bond10
[  146.617146][T10821] vlan0: entered promiscuous mode
[  146.620355][T10821] bond10: entered promiscuous mode
[  146.623463][T10821] vlan0: entered allmulticast mode
[  146.628123][T10821] bond10: entered allmulticast mode
[  146.640440][T10821] bond10: (slave gretap2): making interface the new active one
[  146.643467][T10821] gretap2: entered promiscuous mode
[  146.647588][T10821] gretap2: entered allmulticast mode
[  146.650200][T10821] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  146.685764][T10831] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1238'.
[  147.038764][T10864] netlink: 'syz.1.1244': attribute type 10 has an invalid length.
[  147.050867][T10864] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  147.053606][T10864] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  147.066985][T10864] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  147.127282][T10868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'.
[  147.142026][T10868] lo speed is unknown, defaulting to 1000
[  147.228699][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[  147.275956][T10884] vlan0: entered promiscuous mode
[  147.330390][T10884] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1249'.
[  147.470101][T10900] openvswitch: netlink: Key type 29 is not supported
[  147.491307][T10900] netlink: 'syz.1.1251': attribute type 1 has an invalid length.
[  147.583367][T10900] 8021q: adding VLAN 0 to HW filter on device bond9
[  147.684184][T10911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.689834][T10911] syzkaller0: MTU too low for tipc bearer
[  147.692166][T10911] tipc: Disabling bearer <eth:syzkaller0>
[  147.921131][T10927] netlink: 'syz.2.1257': attribute type 10 has an invalid length.
[  147.927768][T10927] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  148.080629][T10933] 8021q: adding VLAN 0 to HW filter on device bond11
[  148.100978][T10933] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  148.217824][T10948] netlink: 'syz.1.1266': attribute type 6 has an invalid length.
[  148.455663][T10971] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  148.832425][T10990] trusted_key: syz.2.1279 sent an empty control message without MSG_MORE.
[  149.733283][T11007] Bluetooth: MGMT ver 1.23
[  149.864848][T11018] syzkaller0: entered allmulticast mode
[  149.945223][T11006] syzkaller0: left allmulticast mode
[  150.040298][T11035] lo speed is unknown, defaulting to 1000
[  150.081743][T11037] __nla_validate_parse: 18 callbacks suppressed
[  150.081756][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'.
[  150.090996][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'.
[  150.091010][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'.
[  150.098939][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'.
[  150.109568][T11038] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1295'.
[  150.875869][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1308'.
[  150.882407][T11086] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1308'.
[  150.890154][T11086] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1308'.
[  150.893902][T11085] lo speed is unknown, defaulting to 1000
[  151.073358][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'.
[  151.078043][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'.
[  151.116642][T11107] validate_nla: 4 callbacks suppressed
[  151.116657][T11107] netlink: 'syz.0.1314': attribute type 3 has an invalid length.
[  151.510830][T11134] IPv6: Can't replace route, no match found
[  151.646421][T11143] netlink: 'syz.0.1325': attribute type 5 has an invalid length.
[  151.650315][T11143] netlink: 'syz.0.1325': attribute type 10 has an invalid length.
[  151.653971][T11143] 8021q: adding VLAN 0 to HW filter on device team0
[  151.657852][T11143] bond0: (slave team0): Enslaving as an active interface with an up link
[  152.253404][T11177] netlink: 'syz.1.1333': attribute type 5 has an invalid length.
[  152.261324][T11177] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  152.266875][T11177] batman_adv: batadv0: Adding interface: gretap3
[  152.268886][T11177] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.282979][T11177] batman_adv: batadv0: Interface activated: gretap3
[  152.900439][T11236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.409280][T11273] bond0: entered promiscuous mode
[  153.416647][T11273] batadv0: entered promiscuous mode
[  153.419844][T11273] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  153.423195][T11273] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  153.427626][T11273] 8021q: adding VLAN 0 to HW filter on device hsr1
[  153.432602][T11273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.449367][T11277] batadv1: entered promiscuous mode
[  153.451175][T11277] batadv1: entered allmulticast mode
[  153.610258][T11296] netlink: 'syz.2.1362': attribute type 4 has an invalid length.
[  153.649674][T11303] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  153.649672][T11302] netlink: 'syz.0.1364': attribute type 1 has an invalid length.
[  153.665249][T11303] 8021q: adding VLAN 0 to HW filter on device bond12
[  153.687052][T11303] bond12: (slave veth11): Enslaving as an active interface with a down link
[  153.703440][T11305] bond12: (slave veth13): Enslaving as an active interface with a down link
[  153.713428][T11303] gretap3: entered promiscuous mode
[  153.717561][T11303] bond12: (slave gretap3): making interface the new active one
[  153.720897][T11303] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  153.980983][T11318] netlink: 'syz.1.1369': attribute type 21 has an invalid length.
[  153.984457][T11318] netlink: 'syz.1.1369': attribute type 4 has an invalid length.
[  153.987554][T11318] netlink: 'syz.1.1369': attribute type 3 has an invalid length.
[  154.023224][T11320] vlan1: entered promiscuous mode
[  154.027281][T11320] vlan1: entered allmulticast mode
[  154.029697][T11320] bond0: entered allmulticast mode
[  154.032082][T11320] team0: entered allmulticast mode
[  154.667803][T11346] lo speed is unknown, defaulting to 1000
[  154.945641][T11368] xt_HMARK: spi-set and port-set can't be combined
[  155.114756][T11381] __nla_validate_parse: 20 callbacks suppressed
[  155.114771][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'.
[  155.192292][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1382'.
[  155.233036][T11385] sit1: entered promiscuous mode
[  155.291703][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'.
[  155.295797][T11393] openvswitch: netlink: Unknown nsh attribute 0
[  155.298673][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.422584][T11405] IPv6: sit2: Disabled Multicast RS
[  155.666374][T11427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1391'.
[  155.811903][T11446] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  156.039900][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1404'.
[  156.221338][T11486] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1409'.
[  156.332416][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1412'.
[  156.340270][T11501] netlink: 'syz.2.1412': attribute type 10 has an invalid length.
[  156.343516][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1412'.
[  156.376381][T11506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1413'.
[  156.456447][T11516] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1416'.
[  156.463874][T11516] netlink: 'syz.2.1416': attribute type 6 has an invalid length.
[  156.591880][T11529] batadv1: entered promiscuous mode
[  156.594066][T11529] batadv1: entered allmulticast mode
[  156.841488][T11555] 8021q: adding VLAN 0 to HW filter on device bond10
[  156.933714][T11567] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.937277][T11567] bond7: entered promiscuous mode
[  156.939347][T11567] bond0: (slave bond7): Enslaving as an active interface with a down link
[  157.091963][T11578] vlan3: entered promiscuous mode
[  157.164530][T11585] netlink: 'syz.0.1431': attribute type 5 has an invalid length.
[  157.171420][T11585] netlink: 'syz.0.1431': attribute type 10 has an invalid length.
[  157.319311][T11597] netlink: 'syz.0.1434': attribute type 28 has an invalid length.
[  157.367285][T11595] lo speed is unknown, defaulting to 1000
[  157.885256][T11628] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  157.888173][T11628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.923770][T11633] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  157.927920][T11633] netlink: 'syz.1.1443': attribute type 5 has an invalid length.
[  157.977873][T11633] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  158.183756][T11643] netlink: 'syz.2.1446': attribute type 7 has an invalid length.
[  158.189660][T11643] netlink: 'syz.2.1446': attribute type 8 has an invalid length.
[  158.196649][T11643] team0: entered promiscuous mode
[  158.199240][T11643] team0: left promiscuous mode
[  158.910670][T11698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.913903][T11698] syzkaller0: entered promiscuous mode
[  158.916275][T11698] syzkaller0: entered allmulticast mode
[  158.957971][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  159.106096][T11720] syz_tun (unregistering): left allmulticast mode
[  159.118669][T11723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.130080][T11723] syzkaller0: mtu less than device minimum
[  159.186424][T11730] team0: Refused to change device type
[  159.274999][T11742] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  159.286231][T11739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  159.964840][ T5881] tipc: Node number set to 3527036034
[  160.212530][T11776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.218271][T11776] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  160.221751][T11776] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  160.226074][T11776] tipc: Resetting bearer <eth:syzkaller0>
[  160.231230][T11776] __nla_validate_parse: 34 callbacks suppressed
[  160.231241][T11776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'.
[  160.238885][T11776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.252416][T11779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.309872][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'.
[  160.404805][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.407915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.459138][T11796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1488'.
[  161.320569][T11825] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1495'.
[  161.416712][T11839] validate_nla: 6 callbacks suppressed
[  161.416727][T11839] netlink: 'syz.1.1498': attribute type 4 has an invalid length.
[  161.423118][T11839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'.
[  161.455510][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.458603][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.504307][T11848] batadv_slave_1: entered promiscuous mode
[  161.507747][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  161.525683][T11848] batadv_slave_1 (unregistering): left promiscuous mode
[  161.701838][T11861] lo speed is unknown, defaulting to 1000
[  161.830653][T11872] tipc: Resetting bearer <eth:syzkaller0>
[  162.044807][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1514'.
[  162.152119][T11902] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1515'.
[  162.494838][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.587731][T11936] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1519'.
[  162.603831][T11936] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1519'.
[  162.688136][T11952] sctp: [Deprecated]: syz.2.1522 (pid 11952) Use of int in maxseg socket option.
[  162.688136][T11952] Use struct sctp_assoc_value instead
[  162.815965][T11961] tipc: Enabled bearer <eth:team0>, priority 0
[  163.327405][T12011] tipc: Resetting bearer <eth:syzkaller0>
[  163.365568][T12011] batman_adv: batadv0: Interface deactivated: gretap3
[  163.373876][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.381336][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.395180][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.398307][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.464419][T12024] lo: entered allmulticast mode
[  163.477582][T12024] siw: device registration error -23
[  163.487324][T12022] lo: left allmulticast mode
[  163.532140][T12032] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  163.546123][T12032] batadv_slave_0: entered promiscuous mode
[  163.710817][T12048] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  163.861942][T12058] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  163.873183][T12064] syzkaller1: entered allmulticast mode
[  163.930720][T12068] vlan2: entered promiscuous mode
[  164.670408][T12105] syzkaller1: entered promiscuous mode
[  164.672820][T12105] syzkaller1: entered allmulticast mode
[  164.698762][T12110] Set syz0 is full, maxelem 0 reached
[  164.700460][T12107] Set syz0 is full, maxelem 0 reached
[  164.708341][T12109] lo speed is unknown, defaulting to 1000
[  164.929546][T12131] dvmrp8: entered allmulticast mode
[  165.010837][T12130] dvmrp8: left allmulticast mode
[  165.012463][T12143] netlink: 'syz.2.1572': attribute type 23 has an invalid length.
[  165.269073][T12159] __nla_validate_parse: 24 callbacks suppressed
[  165.269086][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'.
[  165.283303][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1578'.
[  165.713533][T12191] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1584'.
[  165.778640][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'.
[  165.791615][T12199] netlink: 'syz.1.1587': attribute type 3 has an invalid length.
[  165.956388][T12212] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1591'.
[  166.016868][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'.
[  166.347928][T12240] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  166.364425][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'.
[  166.496620][T12243] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1595'.
[  166.533766][T12245] netlink: 'syz.0.1596': attribute type 1 has an invalid length.
[  166.564911][T12245] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  166.569898][T12245] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  166.606587][T12247] netlink: 'syz.0.1596': attribute type 14 has an invalid length.
[  166.619533][T12247] macvlan0: entered promiscuous mode
[  166.621504][T12247] macvlan0: entered allmulticast mode
[  166.623853][T12247] bond13: entered promiscuous mode
[  166.626397][T12247] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  166.631892][T12247] bond13: left promiscuous mode
[  166.698702][T12249] netlink: 'syz.1.1597': attribute type 1 has an invalid length.
[  166.762552][T12253] lo speed is unknown, defaulting to 1000
[  166.930820][T12268] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1603'.
[  166.933752][T12268] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1603'.
[  167.177632][T12282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.182597][T12276] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  167.751867][T12304] netlink: 'syz.2.1612': attribute type 13 has an invalid length.
[  167.755700][T12304] netlink: 'syz.2.1612': attribute type 17 has an invalid length.
[  167.796026][T12304] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.799653][T12304] 8021q: adding VLAN 0 to HW filter on device team0
[  167.807030][T12304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.833732][T12304] lo speed is unknown, defaulting to 1000
[  167.880595][T12307] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  167.886497][T12305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.915878][T12307] 8021q: adding VLAN 0 to HW filter on device bond11
[  168.005552][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  168.106794][T12315] netlink: 'syz.1.1616': attribute type 1 has an invalid length.
[  168.127750][T12315] 8021q: adding VLAN 0 to HW filter on device bond12
[  168.177163][T12320] netlink: 'syz.0.1618': attribute type 10 has an invalid length.
[  168.222782][T12321] vlan2: entered promiscuous mode
[  168.495022][T12344] netlink: 'syz.1.1623': attribute type 1 has an invalid length.
[  169.453158][T12389] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20002
[  169.505382][T12397] netlink: 'syz.1.1634': attribute type 3 has an invalid length.
[  169.748185][T12412] vlan2: entered promiscuous mode
[  169.750359][T12412] hsr_slave_1: entered promiscuous mode
[  169.752763][T12412] vlan2: entered allmulticast mode
[  169.757564][T12412] hsr_slave_1: entered allmulticast mode
[  169.928550][T12415] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.045027][T12422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  170.118920][T12433] sctp: [Deprecated]: syz.0.1644 (pid 12433) Use of int in max_burst socket option.
[  170.118920][T12433] Use struct sctp_assoc_value instead
[  170.270719][T12450] bond14: entered promiscuous mode
[  170.273201][T12450] 8021q: adding VLAN 0 to HW filter on device bond14
[  170.291071][T12450] 8021q: adding VLAN 0 to HW filter on device bond14
[  170.294282][T12450] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address
[  170.298502][T12450] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  170.308068][T12450] bond14: (slave wireguard0): making interface the new active one
[  170.311101][T12450] wireguard0: entered promiscuous mode
[  170.314182][T12450] bond14: (slave wireguard0): Enslaving as an active interface with an up link
[  170.320255][T12450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.322956][T12450] IPv6: NLM_F_CREATE should be set when creating new route
[  170.325801][T12450] IPv6: NLM_F_CREATE should be set when creating new route
[  170.330634][T12450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.343197][T12450] bond14: (slave wireguard1): The slave device specified does not support setting the MAC address
[  170.349102][T12450] bond14: (slave wireguard1): Enslaving as a backup interface with an up link
[  170.513990][T12459] __nla_validate_parse: 12 callbacks suppressed
[  170.514008][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'.
[  170.520305][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'.
[  170.525098][T12460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1651'.
[  170.555069][T12458] nbd1: detected capacity change from 0 to 127
[  170.563530][   T56] block nbd1: Receive control failed (result -104)
[  170.693512][T12468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1653'.
[  170.697664][T12468] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1653'.
[  170.702856][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  170.791029][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'.
[  170.836221][T12474] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001
[  170.886929][   T33] audit: type=1800 audit(1758535546.245:2): pid=12477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1656" name="memory.events" dev="tmpfs" ino=3108 res=0 errno=0
[  170.930949][T12480] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1657'.
[  171.900096][T12511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1665'.
[  172.009562][T12522] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1668'.
[  172.147339][T12537] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  172.306888][T12554] pimreg3: entered allmulticast mode
[  172.714780][T12599] validate_nla: 2 callbacks suppressed
[  172.714794][T12599] netlink: 'syz.1.1684': attribute type 5 has an invalid length.
[  172.721675][T12599] netlink: 'syz.1.1684': attribute type 10 has an invalid length.
[  172.813588][T12604] delete_channel: no stack
[  172.936430][   T55] Bluetooth: hci2: link tx timeout
[  172.938716][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.943452][   T55] Bluetooth: hci2: link tx timeout
[  172.945965][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  173.321171][T12641] netlink: 'syz.1.1697': attribute type 9 has an invalid length.
[  173.727210][T12651] netlink: 'syz.0.1699': attribute type 29 has an invalid length.
[  173.731278][T12651] netlink: 'syz.0.1699': attribute type 29 has an invalid length.
[  173.945814][T12663] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  173.948378][T12663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.963115][T12663] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  174.008762][T12676] netlink: 'syz.0.1702': attribute type 1 has an invalid length.
[  174.008783][T12677] netlink: 'syz.0.1702': attribute type 1 has an invalid length.
[  174.049821][T12675] bond15: (slave vti1): The slave device specified does not support setting the MAC address
[  174.053953][T12675] bond15: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  174.061090][T12675] bond15: (slave vti1): making interface the new active one
[  174.068047][T12675] bond15: (slave vti1): Enslaving as an active interface with an up link
[  174.964988][T12615] Bluetooth: hci2: command 0x0405 tx timeout
[  175.652534][T12786] vlan2: entered promiscuous mode
[  175.701488][T12786] __nla_validate_parse: 15 callbacks suppressed
[  175.701507][T12786] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1731'.
[  175.742690][T12792] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  175.790464][T12796] tipc: Resetting bearer <eth:syzkaller0>
[  175.808228][T12796] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  175.812295][T12796] bond5: left promiscuous mode
[  175.815732][T12796] bond8: left promiscuous mode
[  175.817795][T12796] vlan1: left promiscuous mode
[  175.830806][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1735'.
[  176.048692][T12815] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1741'.
[  176.090253][T12813] netlink: 'syz.1.1740': attribute type 16 has an invalid length.
[  176.097946][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  176.158298][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'.
[  176.164043][T12825] syzkaller0: left promiscuous mode
[  176.168891][T12825] syzkaller0: left allmulticast mode
[  176.208036][T12826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.234464][T12828] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1746'.
[  176.302032][T12833] lo speed is unknown, defaulting to 1000
[  176.660063][T12850] lo speed is unknown, defaulting to 1000
[  177.089765][T12865] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1753'.
[  177.158011][T12873] netlink: 'syz.0.1755': attribute type 29 has an invalid length.
[  177.552642][T12884] lo speed is unknown, defaulting to 1000
[  178.117141][T12901] IPv6: sit3: Disabled Multicast RS
[  178.329390][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1766'.
[  178.346705][T12929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1768'.
[  178.350858][T12928] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1768'.
[  178.354738][T12930] Set syz0 is full, maxelem 0 reached
[  178.361072][T12929] Set syz0 is full, maxelem 0 reached
[  178.442581][T12941] netlink: 'syz.2.1771': attribute type 10 has an invalid length.
[  178.449741][T12941] !: entered promiscuous mode
[  178.453981][T12941] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  178.648463][T12968] netlink: 'syz.2.1778': attribute type 13 has an invalid length.
[  178.648645][T12969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.651463][T12968] netlink: 'syz.2.1778': attribute type 17 has an invalid length.
[  178.661803][  T792] lo speed is unknown, defaulting to 1000
[  178.664011][  T792] syz0: Port: 1 Link ACTIVE
[  178.669559][T12968] !: left promiscuous mode
[  178.673177][T12968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.679811][  T792] lo speed is unknown, defaulting to 1000
[  178.864922][T12993] netlink: 'syz.1.1784': attribute type 2 has an invalid length.
[  178.901632][T12994] netlink: 'syz.2.1783': attribute type 5 has an invalid length.
[  178.979205][T12998] netlink: 'syz.1.1785': attribute type 1 has an invalid length.
[  180.043669][T13073] netlink: 'syz.0.1806': attribute type 10 has an invalid length.
[  180.053892][T13073] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  180.319106][T13084] netlink: 'syz.2.1810': attribute type 1 has an invalid length.
[  180.494011][ T5874] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  180.799537][T13121] netlink: 'syz.2.1821': attribute type 29 has an invalid length.
[  180.809847][T13121] netlink: 'syz.2.1821': attribute type 29 has an invalid length.
[  180.813774][T13121] __nla_validate_parse: 56 callbacks suppressed
[  180.813786][T13121] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1821'.
[  180.990865][T13134] team0: Port device 0! added
[  181.071945][T13138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1827'.
[  181.730934][T13156] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1831'.
[  181.951829][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1835'.
[  181.958765][T13171] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1835'.
[  181.964351][T13170] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1835'.
[  182.012726][T13181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1838'.
[  182.187161][T13199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'.
[  182.190432][T13199] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  182.303329][T13208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'.
[  182.307719][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'.
[  182.471667][T13221] bond13: entered promiscuous mode
[  182.475700][T13221] 8021q: adding VLAN 0 to HW filter on device bond13
[  182.493316][T13221] 8021q: adding VLAN 0 to HW filter on device bond13
[  182.496732][T13221] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address
[  182.500934][T13221] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  182.508480][T13221] bond13: (slave wireguard0): making interface the new active one
[  182.511653][T13221] wireguard0: entered promiscuous mode
[  182.515553][T13221] bond13: (slave wireguard0): Enslaving as an active interface with an up link
[  182.886686][T13260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.030949][T13268] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.036540][T13268] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  183.226412][T13279] veth0: entered promiscuous mode
[  183.262500][T13279] veth0 (unregistering): left promiscuous mode
[  183.318232][T13282] geneve4: entered promiscuous mode
[  183.323306][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.329456][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.333924][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.337854][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.660336][T13303] 8021q: VLANs not supported on ipvlan1
[  183.845010][T13312] lo speed is unknown, defaulting to 1000
[  183.902262][T13317] 8021q: VLANs not supported on ip_vti0
[  183.935120][T13316] IPVS: Scheduler module ip_vs_sip not found
[  184.830221][T13356] Unsupported ieee802154 address type: 0
[  185.119550][T13379] lo speed is unknown, defaulting to 1000
[  185.846783][T12615] Bluetooth: hci1: command 0x0406 tx timeout
[  186.123588][T13431] __nla_validate_parse: 18 callbacks suppressed
[  186.123602][T13431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1901'.
[  186.365518][T13460] validate_nla: 10 callbacks suppressed
[  186.365529][T13460] netlink: 'syz.2.1906': attribute type 12 has an invalid length.
[  186.394329][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1907'.
[  186.412916][T13466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1908'.
[  186.422764][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'.
[  186.433613][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1909'.
[  186.440677][T13466] netlink: 'syz.1.1908': attribute type 10 has an invalid length.
[  186.444090][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1908'.
[  186.482534][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1910'.
[  187.133300][T13544] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1925'.
[  187.230767][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[  187.235462][T13546] netlink: 'syz.1.1926': attribute type 8 has an invalid length.
[  187.238212][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[  187.287357][T13551] netlink: 'syz.1.1926': attribute type 8 has an invalid length.
[  187.363983][T13569] netlink: 'syz.2.1930': attribute type 1 has an invalid length.
[  187.379646][T13567] netlink: 'syz.1.1929': attribute type 1 has an invalid length.
[  187.580775][T13597] netlink: 'syz.2.1938': attribute type 1 has an invalid length.
[  187.758300][T13624] sctp: [Deprecated]: syz.1.1947 (pid 13624) Use of int in max_burst socket option.
[  187.758300][T13624] Use struct sctp_assoc_value instead
[  187.902115][T13641] netem: change failed
[  188.051629][T13657] netlink: 'syz.1.1956': attribute type 5 has an invalid length.
[  188.055037][T13656] netlink: 'syz.1.1956': attribute type 5 has an invalid length.
[  188.069320][T13656] netlink: 'syz.1.1956': attribute type 10 has an invalid length.
[  188.151362][T13663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.158833][T13664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
Connection to localhost closed by remote host.
[  190.214727][T11746] ==================================================================
[  190.217256][T11746] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  190.219588][T11746] Read of size 8 at addr ffff888027ed00a0 by task khidpd_16bf5505/11746
[  190.222704][T11746] 
[  190.223906][T11746] CPU: 1 UID: 0 PID: 11746 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  190.223918][T11746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.223924][T11746] Call Trace:
[  190.223929][T11746]  <TASK>
[  190.223933][T11746]  dump_stack_lvl+0x189/0x250
[  190.223954][T11746]  ? __kasan_check_byte+0x12/0x40
[  190.223967][T11746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.223975][T11746]  ? lock_release+0x4b/0x3e0
[  190.223987][T11746]  ? __virt_addr_valid+0x4a5/0x5c0
[  190.223998][T11746]  print_report+0xca/0x240
[  190.224006][T11746]  ? __mutex_lock+0x801/0x1350
[  190.224014][T11746]  kasan_report+0x118/0x150
[  190.224026][T11746]  ? __mutex_lock+0x801/0x1350
[  190.224035][T11746]  __mutex_lock+0x801/0x1350
[  190.224044][T11746]  ? __mutex_lock+0x5bb/0x1350
[  190.224052][T11746]  ? l2cap_unregister_user+0x6a/0x1b0
[  190.224062][T11746]  ? __pfx___mutex_lock+0x10/0x10
[  190.224070][T11746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.224080][T11746]  l2cap_unregister_user+0x6a/0x1b0
[  190.224089][T11746]  hidp_session_thread+0x3c9/0x410
[  190.224100][T11746]  ? __pfx_hidp_session_thread+0x10/0x10
[  190.224107][T11746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.224114][T11746]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  190.224124][T11746]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  190.224132][T11746]  ? __kthread_parkme+0x7b/0x200
[  190.224140][T11746]  ? __kthread_parkme+0x1a1/0x200
[  190.224149][T11746]  kthread+0x711/0x8a0
[  190.224158][T11746]  ? __pfx_hidp_session_thread+0x10/0x10
[  190.224166][T11746]  ? __pfx_kthread+0x10/0x10
[  190.224175][T11746]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.224182][T11746]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.224189][T11746]  ? __pfx_kthread+0x10/0x10
[  190.224198][T11746]  ret_from_fork+0x439/0x7d0
[  190.224206][T11746]  ? __pfx_ret_from_fork+0x10/0x10
[  190.224214][T11746]  ? __switch_to_asm+0x39/0x70
[  190.224224][T11746]  ? __switch_to_asm+0x33/0x70
[  190.224233][T11746]  ? __pfx_kthread+0x10/0x10
[  190.224242][T11746]  ret_from_fork_asm+0x1a/0x30
[  190.224255][T11746]  </TASK>
[  190.224258][T11746] 
[  190.292768][T11746] Allocated by task 5854:
[  190.294452][T11746]  kasan_save_track+0x3e/0x80
[  190.296064][T11746]  __kasan_kmalloc+0x93/0xb0
[  190.297515][T11746]  __kmalloc_noprof+0x27a/0x4f0
[  190.299046][T11746]  hci_alloc_dev_priv+0x28/0x2060
[  190.300641][T11746]  vhci_create_device+0x120/0x650
[  190.302187][T11746]  vhci_write+0x3ce/0x4a0
[  190.303636][T11746]  vfs_write+0x5c9/0xb30
[  190.305107][T11746]  ksys_write+0x145/0x250
[  190.306478][T11746]  do_syscall_64+0xfa/0x3b0
[  190.307920][T11746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.309733][T11746] 
[  190.310470][T11746] Freed by task 13732:
[  190.311739][T11746]  kasan_save_track+0x3e/0x80
[  190.313223][T11746]  kasan_save_free_info+0x46/0x50
[  190.315052][T11746]  __kasan_slab_free+0x5b/0x80
[  190.316727][T11746]  kfree+0x18e/0x440
[  190.317937][T11746]  bt_host_release+0x82/0x90
[  190.319568][T11746]  device_release+0x9c/0x1c0
[  190.321346][T11746]  kobject_put+0x22b/0x480
[  190.322985][T11746]  vhci_release+0x15a/0x1a0
[  190.324751][T11746]  __fput+0x44c/0xa70
[  190.326255][T11746]  task_work_run+0x1d4/0x260
[  190.328021][T11746]  do_exit+0x6b5/0x2300
[  190.329451][T11746]  do_group_exit+0x21c/0x2d0
[  190.330920][T11746]  get_signal+0x1286/0x1340
[  190.332343][T11746]  arch_do_signal_or_restart+0x9a/0x750
[  190.334189][T11746]  exit_to_user_mode_loop+0x75/0x110
[  190.336108][T11746]  do_syscall_64+0x2bd/0x3b0
[  190.337760][T11746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.339582][T11746] 
[  190.340320][T11746] Last potentially related work creation:
[  190.342159][T11746]  kasan_save_stack+0x3e/0x60
[  190.343803][T11746]  kasan_record_aux_stack+0xbd/0xd0
[  190.345615][T11746]  insert_work+0x3d/0x330
[  190.346973][T11746]  __queue_work+0xbaf/0xfb0
[  190.348447][T11746]  queue_work_on+0x181/0x270
[  190.349971][T11746]  process_scheduled_works+0xae1/0x17b0
[  190.351839][T11746]  worker_thread+0x8a0/0xda0
[  190.353420][T11746]  kthread+0x711/0x8a0
[  190.354859][T11746]  ret_from_fork+0x439/0x7d0
[  190.356271][T11746]  ret_from_fork_asm+0x1a/0x30
[  190.357801][T11746] 
[  190.358608][T11746] Second to last potentially related work creation:
[  190.360888][T11746]  kasan_save_stack+0x3e/0x60
[  190.362486][T11746]  kasan_record_aux_stack+0xbd/0xd0
[  190.364299][T11746]  insert_work+0x3d/0x330
[  190.365980][T11746]  __queue_work+0xcd2/0xfb0
[  190.367525][T11746]  call_timer_fn+0x17e/0x5f0
[  190.369337][T11746]  __run_timer_base+0x646/0x860
[  190.371144][T11746]  run_timer_softirq+0xb7/0x180
[  190.372886][T11746]  handle_softirqs+0x286/0x870
[  190.374769][T11746]  run_ksoftirqd+0x9b/0x100
[  190.376615][T11746]  smpboot_thread_fn+0x542/0xa60
[  190.378384][T11746]  kthread+0x711/0x8a0
[  190.379868][T11746]  ret_from_fork+0x439/0x7d0
[  190.381607][T11746]  ret_from_fork_asm+0x1a/0x30
[  190.383674][T11746] 
[  190.384587][T11746] The buggy address belongs to the object at ffff888027ed0000
[  190.384587][T11746]  which belongs to the cache kmalloc-8k of size 8192
[  190.390149][T11746] The buggy address is located 160 bytes inside of
[  190.390149][T11746]  freed 8192-byte region [ffff888027ed0000, ffff888027ed2000)
[  190.395882][T11746] 
[  190.396948][T11746] The buggy address belongs to the physical page:
[  190.399221][T11746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27ed0
[  190.402099][T11746] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  190.404874][T11746] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  190.407372][T11746] page_type: f5(slab)
[  190.408735][T11746] raw: 00fff00000000040 ffff88801a442280 ffffea0000a79400 0000000000000006
[  190.411474][T11746] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  190.414237][T11746] head: 00fff00000000040 ffff88801a442280 ffffea0000a79400 0000000000000006
[  190.417596][T11746] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  190.421210][T11746] head: 00fff00000000003 ffffea00009fb401 00000000ffffffff 00000000ffffffff
[  190.424308][T11746] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  190.427554][T11746] page dumped because: kasan: bad access detected
[  190.429790][T11746] page_owner tracks the page as allocated
[  190.431959][T11746] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5592, tgid 5592 (dhcpcd), ts 38929835870, free_ts 36794009017
[  190.438719][T11746]  post_alloc_hook+0x240/0x2a0
[  190.440364][T11746]  get_page_from_freelist+0x21e4/0x22c0
[  190.442265][T11746]  __alloc_frozen_pages_noprof+0x181/0x370
[  190.444414][T11746]  alloc_pages_mpol+0x232/0x4a0
[  190.446088][T11746]  allocate_slab+0x8a/0x370
[  190.447643][T11746]  ___slab_alloc+0xbeb/0x1420
[  190.449261][T11746]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  190.451465][T11746]  kmalloc_reserve+0x136/0x290
[  190.453087][T11746]  __alloc_skb+0x142/0x2d0
[  190.454736][T11746]  netlink_dump+0x167/0xe90
[  190.456279][T11746]  netlink_recvmsg+0x676/0xa30
[  190.457933][T11746]  sock_recvmsg+0x22c/0x270
[  190.459625][T11746]  ____sys_recvmsg+0x1c9/0x460
[  190.461590][T11746]  ___sys_recvmsg+0x1b5/0x510
[  190.463495][T11746]  __x64_sys_recvmsg+0x198/0x260
[  190.465457][T11746]  do_syscall_64+0xfa/0x3b0
[  190.467187][T11746] page last free pid 5592 tgid 5592 stack trace:
[  190.469729][T11746]  __free_frozen_pages+0xbc4/0xd30
[  190.471754][T11746]  __put_partials+0x156/0x1a0
[  190.473574][T11746]  put_cpu_partial+0x17c/0x250
[  190.475489][T11746]  __slab_free+0x2d5/0x3c0
[  190.477187][T11746]  qlist_free_all+0x97/0x140
[  190.478888][T11746]  kasan_quarantine_reduce+0x148/0x160
[  190.481018][T11746]  __kasan_slab_alloc+0x22/0x80
[  190.482931][T11746]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  190.485169][T11746]  getname_flags+0xb8/0x540
[  190.487038][T11746]  do_readlinkat+0xbc/0x500
[  190.488940][T11746]  __x64_sys_readlink+0x7f/0x90
[  190.490944][T11746]  do_syscall_64+0xfa/0x3b0
[  190.492810][T11746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.495224][T11746] 
[  190.496211][T11746] Memory state around the buggy address:
[  190.498505][T11746]  ffff888027ecff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  190.501795][T11746]  ffff888027ed0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.504701][T11746] >ffff888027ed0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.507676][T11746]                                ^
[  190.509311][T11746]  ffff888027ed0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.511988][T11746]  ffff888027ed0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  190.515004][T11746] ==================================================================
[  190.518508][T11746] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  190.521163][T11746] CPU: 1 UID: 0 PID: 11746 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  190.524889][T11746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.528321][T11746] Call Trace:
[  190.529465][T11746]  <TASK>
[  190.530618][T11746]  dump_stack_lvl+0x99/0x250
[  190.532361][T11746]  ? __asan_memcpy+0x40/0x70
[  190.534178][T11746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.536175][T11746]  ? __pfx__printk+0x10/0x10
[  190.537873][T11746]  vpanic+0x281/0x750
[  190.539561][T11746]  ? __pfx_vpanic+0x10/0x10
[  190.541488][T11746]  ? irqentry_exit+0x74/0x90
[  190.543460][T11746]  panic+0xb9/0xc0
[  190.545087][T11746]  ? __pfx_panic+0x10/0x10
[  190.546975][T11746]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  190.549430][T11746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.551913][T11746]  ? __mutex_lock+0x801/0x1350
[  190.553973][T11746]  check_panic_on_warn+0x89/0xb0
[  190.556070][T11746]  ? __mutex_lock+0x801/0x1350
[  190.558114][T11746]  end_report+0x78/0x160
[  190.559960][T11746]  kasan_report+0x129/0x150
[  190.561890][T11746]  ? __mutex_lock+0x801/0x1350
[  190.563948][T11746]  __mutex_lock+0x801/0x1350
[  190.565963][T11746]  ? __mutex_lock+0x5bb/0x1350
[  190.568032][T11746]  ? l2cap_unregister_user+0x6a/0x1b0
[  190.570382][T11746]  ? __pfx___mutex_lock+0x10/0x10
[  190.572617][T11746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.575181][T11746]  l2cap_unregister_user+0x6a/0x1b0
[  190.577438][T11746]  hidp_session_thread+0x3c9/0x410
[  190.579681][T11746]  ? __pfx_hidp_session_thread+0x10/0x10
[  190.582069][T11746]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  190.584504][T11746]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  190.587078][T11746]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  190.589722][T11746]  ? __kthread_parkme+0x7b/0x200
[  190.591812][T11746]  ? __kthread_parkme+0x1a1/0x200
[  190.593941][T11746]  kthread+0x711/0x8a0
[  190.595667][T11746]  ? __pfx_hidp_session_thread+0x10/0x10
[  190.598030][T11746]  ? __pfx_kthread+0x10/0x10
[  190.600012][T11746]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.602150][T11746]  ? lockdep_hardirqs_on+0x9c/0x150
[  190.604356][T11746]  ? __pfx_kthread+0x10/0x10
[  190.606288][T11746]  ret_from_fork+0x439/0x7d0
[  190.608270][T11746]  ? __pfx_ret_from_fork+0x10/0x10
[  190.610444][T11746]  ? __switch_to_asm+0x39/0x70
[  190.612470][T11746]  ? __switch_to_asm+0x33/0x70
[  190.614531][T11746]  ? __pfx_kthread+0x10/0x10
[  190.616483][T11746]  ret_from_fork_asm+0x1a/0x30
[  190.618537][T11746]  </TASK>
[  190.620589][T11746] Kernel Offset: disabled
[  190.622448][T11746] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:06:05  Registers:
info registers vcpu 0

CPU#0
RAX=a8ecfaa30459de00 RBX=ffffffff819683f8 RCX=a8ecfaa30459de00 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38f30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f85af707d60 CR3=00000000233be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=000055dc37430068 746f6f7465756c62 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000076 000000000034141e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=00000000000000b1 0000000000347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000659f370
R8 =ffff8880201f8237 R9 =1ffff1100403f046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b028cc R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa982d07d60 CR3=000000010d724000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000055dc3743b780 000055dc374484f0
XMM06=000055dc374519b0 000055dc3744a560 XMM07=000055dc3744df10 000055dc374513e0
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
