last executing test programs:

1m45.381731167s ago: executing program 1 (id=25):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x80, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x900}}, 0x1c}}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00'})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1, 0x0, 0x40}, 0x10)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="80003ee9620ca1ce", 0x8, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, 0x0, 0x0}, 0x62)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="ade372822fea35d8b056b6af820fae9d6dcd3292ea54c7beef915d816cf10c088f8d68aed72073a1b8fc195233b2cff4c345cc591c064eb94cbd6c8530004cb7e955e0acbd043fff3f8d4bf2e1c65d8a6e06e3846ac15dc122f895702fabad5960f3f0b5c06c6ecf3fe8f42499116d18204fc64febc9569a89c151b48848d7a04c68a67241bc37b206e3bfcd1d7eedbe3da7fbaae0735d60e9d334e88a4964c481a83e30c3dfe2f3afaaa40857c101a9c5b3dbe9", 0xb4)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x24, 0x91, 0xffffffffffffffff, 0x400003, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240)="29b0", 0x2000cc0, r6}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r6}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)

1m45.240985829s ago: executing program 1 (id=26):
socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xb71, 0x2, 0x0, 0x5, 0x11, 0xfffc}, 0x20) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x3, &(0x7f0000000240)=0x2000000, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000400), &(0x7f0000000000)=0x8) (rerun: 32)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x27)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r4], 0x9) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x2, 0x0, 0x0, "25af22"}}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000039040000000000000000711222000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="0287e1a118a0c8ef2f00aaaa15c3d7626004"], 0x12) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000000)=""/24, &(0x7f0000000080)=0x18) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, &(0x7f0000000240))
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r7, 0x8b34, &(0x7f0000000000)) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffeeb)
ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000d00)={{r8}, "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"})
syz_init_net_socket$rose(0xb, 0x5, 0x0)

1m45.149476423s ago: executing program 1 (id=27):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in6={0xa, 0x4e22, 0x3, @private0, 0xabda}, @in={0x2, 0x0, @multicast1}], 0x4c)
sendto$inet(r0, &(0x7f0000000080)="d301a5305d2c228e0971beb36946c576fa379f", 0x13, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r1, 0x0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(0x0, r2) (async)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xb, 0x3, @vifc_lcl_addr=@rand_addr=0x64010100, @private=0xa010101}, 0xfffffffffffffeda)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r4}, 0x10) (async, rerun: 64)
unshare(0x400) (rerun: 64)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
readv(r6, 0x0, 0x0) (async)
r7 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) (async)
setsockopt$inet6_buf(r7, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x405, 0x691522eb, 0x800000, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 32)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) (async, rerun: 32)
r10 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0xfffffc3e) (async)
sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x40014}, 0x0) (async)
recvmsg$can_bcm(r5, &(0x7f0000000b00)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0}, 0x2200) (async)
socket$kcm(0x10, 0x2, 0x0)

1m43.965592976s ago: executing program 1 (id=37):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m43.861435254s ago: executing program 1 (id=38):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@deltaction={0x178, 0x31, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3e}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd907}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x178}}, 0x20004001)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000ff37df73da000a140000001000010000000000000000000084000a"], 0x28}}, 0x20050800)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b80)='n', 0x1}, {&(0x7f00000007c0)="83df8a48c9625f246294cbecd6f0754f0ff9450be5d4206a13c370a8b1ee90ebab5f9930687242cc7b6f83005f04dfac99f8f69cff6cf80e87f0df7beeb881a7d2e2144ffbc4d878da3075c62eccd77e467a124e687537d48562d6b2bb3549cfabd5389af60fc899736a74b9ffc0e13caa0174a794c144ba0e42b2590f3188be3d7b8a6668ab955f71ef6bf463b75e01582e0c012a8c15f806e608e730984e117ba37834345515a39e54c00e2205d6682426ed65448faa1acffee50bdc0f389c246a49cc2d05e41bad39010d7c879b3a0370fbddf8cc432bf269b6e519132794fc87f4c036cba4c4bee57ac93430aec0113d7e", 0xf3}], 0x2}, 0x4040)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000ff777f6900850000001100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000240)={r7})

1m43.69154129s ago: executing program 1 (id=39):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
unshare(0x6020400)
r3 = socket$inet(0x2, 0x80002, 0x1)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x0, {0x2, 0xff}, {0x1, 0x0, 0x4}, 0x2, 0xff}, {0x2, 0x2, {0x1, 0xff, 0x2}, {0x2, 0x1}, 0x2, 0xfd}, {0xb, 0x1, {0x0, 0x0, 0x1}, {0x2, 0xf0, 0x2}, 0xfc, 0xfe}, {0x3, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0xf0, 0x1}, {}, 0xfd, 0xfd}, {0x3, 0x3, {0x1, 0x1}, {0x1, 0xf0, 0x1}}, {0x1, 0x2, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x1, {0x1, 0xf0}, {0x0, 0xff, 0x2}, 0xfd, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x1}, {0x2, 0x1}, 0x2}, {0x2, 0x0, {0x2, 0xff}, {0x1, 0x0, 0x3}, 0x1, 0x1}], 0x140)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

1m28.686462923s ago: executing program 32 (id=39):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
unshare(0x6020400)
r3 = socket$inet(0x2, 0x80002, 0x1)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x0, {0x2, 0xff}, {0x1, 0x0, 0x4}, 0x2, 0xff}, {0x2, 0x2, {0x1, 0xff, 0x2}, {0x2, 0x1}, 0x2, 0xfd}, {0xb, 0x1, {0x0, 0x0, 0x1}, {0x2, 0xf0, 0x2}, 0xfc, 0xfe}, {0x3, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x0, 0x4}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0xf0, 0x1}, {}, 0xfd, 0xfd}, {0x3, 0x3, {0x1, 0x1}, {0x1, 0xf0, 0x1}}, {0x1, 0x2, {0x0, 0xf0, 0x3}, {0x1, 0xff, 0x3}, 0x0, 0x1}, {0x3, 0x1, {0x1, 0xf0}, {0x0, 0xff, 0x2}, 0xfd, 0xfe}, {0x2, 0x3, {0x1, 0xff, 0x1}, {0x2, 0x1}, 0x2}, {0x2, 0x0, {0x2, 0xff}, {0x1, 0x0, 0x3}, 0x1, 0x1}], 0x140)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

3.53113703s ago: executing program 2 (id=1053):
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40090)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r0, 0x8b1a, &(0x7f0000000040))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000073117800000000008510000002000000850000000500000095000000000000009500a50500000000e104ece7bbeb5ac5c0ec792b001048c3d652a0f7c86e5b01d46b073a75ed5713eac39c17c71624cb706027d1bc1f601accfad7b9b9f4"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.429422201s ago: executing program 2 (id=1055):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) (async)
write(r1, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1}, 0x38)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x24000040)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd27, 0x25dddbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}]}, 0x30}}, 0x24040890)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="300000000203010100000000000000000100000108000340000000060963020000000800010001000010000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800) (async)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="300000000203010100000000000000000100000108000340000000060963020000000800010001000010000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
close(r6) (async)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x11, r2, 0x9e8b2000)

3.427509452s ago: executing program 2 (id=1057):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001700000044000680"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x21}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@deltclass={0x6c, 0x29, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0x4}, {0x6, 0xffe0}, {0x1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x81, 0x1, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x8000, 0x8}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000d000000fbdbde251b0000000700210061f6"], 0x24}}, 0x4000890) (async)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r4, 0x8b32, &(0x7f0000000040))

3.260966901s ago: executing program 2 (id=1058):
syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000cd0403183afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000001f0aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004002218fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87bb8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) (async)
syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x8040)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000001001000090000000500000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002976575127238ab03dff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x10000})
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000000c0)={0x80})
ioctl(r0, 0x8b22, &(0x7f0000000040))

1.046931695s ago: executing program 2 (id=1075):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@private=0x100}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x19}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x4, 0x9}}]}, 0x17c}}, 0x0)

948.499328ms ago: executing program 0 (id=1077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000972100000000000a84000000060a0b04fff50005000004000200000058000480540001800a0001006d617463680000004400028008000740000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

890.426784ms ago: executing program 0 (id=1079):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x13, 0xa, 0x503, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'})
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}]}}}}}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="00042abd7000fedbdf252500000005002a"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x1)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x80}}, 0x2004c0dc)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x487de000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00660000", @ANYRES16=r5, @ANYBLOB="000226bd7000ffdbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x20004810)

813.784079ms ago: executing program 0 (id=1081):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', <r0=>0x0, 0x50, 0x80, 0x6, 0x4, {{0x10, 0x4, 0x0, 0x37, 0x40, 0x64, 0x0, 0xf, 0x0, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xe2, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010102, 0xf}, {@multicast1, 0x4}, {@loopback, 0x4}]}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x64, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="090000001800000008000000400000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000000, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r2, 0x0, &(0x7f00000000c0)=""/99}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000016f001b95680852bc13a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})

811.448152ms ago: executing program 2 (id=1082):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000440)=""/214, &(0x7f0000000040)=0xd6)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff0000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x40010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080)
r6 = socket(0x10, 0x4, 0x33ec)
listen(r3, 0x5)
r7 = accept4(r3, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r9=>0x0})
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x1000}, 0x4)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r11)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, [@generic={0x20, 0xd, 0x9, 0x0, 0x5}, @generic={0xff, 0x3, 0x0, 0x9, 0x47a}, @ldst={0x1, 0x3, 0x2, 0xb, 0x8, 0x8, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0xfffffffa, 0x4b, &(0x7f00000005c0)=""/75, 0x41100, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xe, 0x2, 0xe}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000680)=[{0x0, 0x2, 0x10, 0x5}, {0x0, 0x1, 0x5, 0xc}, {0x0, 0x1, 0x5, 0x1}], 0x10, 0x4}, 0x94)
pipe(&(0x7f0000000780))
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@dellinkprop={0x130, 0x6d, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x4501c, 0x4002}, [@IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_CARRIER={0x5}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r10}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r11}, @IFLA_XDP_FD={0x8, 0x1, r12}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_AF_SPEC={0x9c, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x65}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x1a}, {0x8, 0x7, 0x0, 0x0, 0x8}, {0x8, 0x5, 0x0, 0x0, 0x9}, {0x8, 0xa, 0x0, 0x0, 0x8}, {0x8, 0x8, 0x0, 0x0, 0x6}]}}, @AF_BRIDGE={0x4}, @AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_PHYS_SWITCH_ID={0x16, 0x24, "25465da91a6f99f74e8e8c00fabc05aa7627"}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_IFALIASn={0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffd}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, 0x130}, 0x1, 0xba01}, 0x810)

700.622399ms ago: executing program 0 (id=1083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x800) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x800)

700.310472ms ago: executing program 0 (id=1084):
r0 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0)
r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb181e7d37bcf9e433c29", 0x28}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})

580.596225ms ago: executing program 0 (id=1087):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x1, 0x0, 0x0, 0x40, 0x4, {0x11, 0x4, 0x2, 0x1, 0x4, 0x63, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@local, 0xb0e9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xf}, {@broadcast, 0xfffffffa}]}]}}}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x2, 0x84)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
mmap(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000)
socket$inet_sctp(0x2, 0x5, 0x84)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x11, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="686c842f186d7f57675a261ecdeaebb400000000000000611428000000000005000000000000009500000080000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, &(0x7f00000001c0)="65cf0aff", 0x0, 0x4, 0x0, 0x400}, 0x50)

141.484155ms ago: executing program 3 (id=1092):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b23, &(0x7f0000000040))

140.867765ms ago: executing program 3 (id=1093):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20000}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))
socket$inet6_mptcp(0xa, 0x1, 0x106)

81.222012ms ago: executing program 3 (id=1094):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0)
close(r2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
close(0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@ipv6_getroute={0x3c, 0x1a, 0x200, 0x70bd27, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x3, 0xfe, 0x3, 0xc8, 0x9, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x10, 0xf9, r11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000800)
r12 = socket(0x10, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0xf01, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r13}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x100, 0x0, 0x4}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)={0x1c, r14, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0)

79.412713ms ago: executing program 3 (id=1095):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x20000006}]}, 0x54}}, 0x0)

1.296349ms ago: executing program 3 (id=1096):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
pread64(r2, 0x0, 0x300, 0x1)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x78, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xfb, 0x50, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8}, 0x50)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x4, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @printk={@ld}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, &(0x7f00000002c0), 0x41000, 0x50, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x0, 0x100, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r3, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, r7, r8, r9, r10], &(0x7f0000000680)=[{0x0, 0x4, 0xd, 0xa}, {0x4, 0x4, 0x6, 0x5}], 0x10, 0x8}, 0x94)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0)

0s ago: executing program 3 (id=1097):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000b3381aa97a65798300000000000039000000a32bba56", @ANYBLOB="1c005a8018000080140005007f00a50fc4030000ff0f030002"], 0x38}}, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1ec, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a33000000003dab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19ed6b6f2429ae2d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="56737e126934561c448f79dd29df4c979ebd7e64bb4c107cb71ecf924d5d2c7e"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8090}, 0x805) (async)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x1ec, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a3a5554218ba8ac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3ec95e9cab3afa8d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fea3484cafc85a906415aebedc9ade3dadb65a8c26766412"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28ede5886353ddf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="440c7962f7167718648f067ef35590a9"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a33000000003dab"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2ade00}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c9aa7a761be4c245"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8018a26f10b5b27eefd0b64c2100077f7a555a931c1bc5f8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="40b1debb515011cb417b8f55e8f35815"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f342150078cac9f09ee8c0c18c912f44389715fda8087ded"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="03803299d6ed3c0d1576e150c2f21d3e470ebd8dd2a806aca32f2b9d1d8238b5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac644c12fc2ce6e7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="be02efeebcad44c11c3da4a04a99cb08"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "19ed6b6f2429ae2d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="56737e126934561c448f79dd29df4c979ebd7e64bb4c107cb71ecf924d5d2c7e"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97758f19d8babe86"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a47989d41aa21119"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="05af990413b6cc5e18e517f0aa73307ba4396d3f725840dd"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x8090}, 0x805)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20, '\x00', r8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20, '\x00', r8}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c00000010000104000002000000000000000000", @ANYRESHEX, @ANYBLOB="03800000000000002c0012800b00010067726574617000001c0002800800040009000000080001009d00669afee68ce762023d4fe1a2ac045f95"], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54950' (ED25519) to the list of known hosts.
syzkaller login: [   40.822056][ T5770] cgroup: Unknown subsys name 'net'
[   40.934789][ T5770] cgroup: Unknown subsys name 'cpuset'
[   40.940748][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.870850][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.102562][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.102709][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.105533][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.110841][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.111207][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.115937][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.116240][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.121796][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.124523][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.128835][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.133307][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.139398][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.142897][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.149861][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.153789][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.363870][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   47.461036][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   47.477766][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   47.545449][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.548961][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.551700][ T5843] bridge_slave_0: entered allmulticast mode
[   47.554966][ T5843] bridge_slave_0: entered promiscuous mode
[   47.594198][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.597339][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.600762][ T5843] bridge_slave_1: entered allmulticast mode
[   47.604537][ T5843] bridge_slave_1: entered promiscuous mode
[   47.626503][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.629103][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.631556][ T5842] bridge_slave_0: entered allmulticast mode
[   47.634624][ T5842] bridge_slave_0: entered promiscuous mode
[   47.642672][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.645051][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.647517][ T5842] bridge_slave_1: entered allmulticast mode
[   47.650611][ T5842] bridge_slave_1: entered promiscuous mode
[   47.656081][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.661474][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.724106][ T5843] team0: Port device team_slave_0 added
[   47.726773][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.731071][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.733956][ T5844] bridge_slave_0: entered allmulticast mode
[   47.737436][ T5844] bridge_slave_0: entered promiscuous mode
[   47.743569][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.746678][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.750111][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.753039][ T5844] bridge_slave_1: entered allmulticast mode
[   47.756598][ T5844] bridge_slave_1: entered promiscuous mode
[   47.761207][ T5843] team0: Port device team_slave_1 added
[   47.775709][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.819198][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.821555][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.830809][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.837293][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.851289][ T5842] team0: Port device team_slave_0 added
[   47.853698][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.855924][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.865188][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.872518][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.877237][ T5842] team0: Port device team_slave_1 added
[   47.946379][ T5844] team0: Port device team_slave_0 added
[   47.951030][ T5844] team0: Port device team_slave_1 added
[   47.965570][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.969490][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.979895][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.989578][ T5843] hsr_slave_0: entered promiscuous mode
[   47.992576][ T5843] hsr_slave_1: entered promiscuous mode
[   48.004270][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.006948][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.017040][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.036719][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.039520][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.049788][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.054920][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.057189][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.067733][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.134696][ T5842] hsr_slave_0: entered promiscuous mode
[   48.137704][ T5842] hsr_slave_1: entered promiscuous mode
[   48.141660][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   48.143985][ T5842] Cannot create hsr debugfs directory
[   48.166898][ T5844] hsr_slave_0: entered promiscuous mode
[   48.172867][ T5844] hsr_slave_1: entered promiscuous mode
[   48.175545][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   48.178083][ T5844] Cannot create hsr debugfs directory
[   48.408959][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.417818][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.425019][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.439039][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.482001][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.495649][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.501322][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.507614][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.553160][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.566733][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.571459][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.583791][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.637559][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.669838][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   48.679063][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.681634][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.687365][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.696802][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.699300][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.732532][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   48.737025][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.755014][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.758203][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.772357][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   48.784458][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.787600][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.795811][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.799033][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.817231][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.820484][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.863796][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.867311][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.030063][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.034230][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.096373][ T5844] veth0_vlan: entered promiscuous mode
[   49.099338][ T5843] veth0_vlan: entered promiscuous mode
[   49.115013][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.121240][ T5844] veth1_vlan: entered promiscuous mode
[   49.125784][ T5843] veth1_vlan: entered promiscuous mode
[   49.149222][   T54] Bluetooth: hci0: command tx timeout
[   49.165851][ T5843] veth0_macvtap: entered promiscuous mode
[   49.171763][ T5843] veth1_macvtap: entered promiscuous mode
[   49.183647][ T5844] veth0_macvtap: entered promiscuous mode
[   49.197015][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.206085][ T5844] veth1_macvtap: entered promiscuous mode
[   49.210756][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.225857][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.228304][   T54] Bluetooth: hci2: command tx timeout
[   49.231762][   T54] Bluetooth: hci1: command tx timeout
[   49.247033][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.252627][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.256323][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.269485][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.272452][ T5842] veth0_vlan: entered promiscuous mode
[   49.288435][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.300266][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.321481][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.326682][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.341118][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.349050][ T5842] veth1_vlan: entered promiscuous mode
[   49.389997][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.400672][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.427445][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.431988][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.453762][ T5842] veth0_macvtap: entered promiscuous mode
[   49.470253][ T5842] veth1_macvtap: entered promiscuous mode
[   49.476720][ T4624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.482025][ T4624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.488569][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.492225][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.512064][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.519230][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.531861][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.546171][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.557651][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.558733][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.566079][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.611912][ T4624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.614579][ T4624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.659329][  T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.662534][ T5916] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.666813][  T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.786026][ T5928] bridge0: port 3(erspan0) entered blocking state
[   49.789753][ T5928] bridge0: port 3(erspan0) entered disabled state
[   49.792743][ T5928] erspan0: entered allmulticast mode
[   49.796304][ T5928] erspan0: entered promiscuous mode
[   49.798887][ T5928] bridge0: port 3(erspan0) entered blocking state
[   49.801311][ T5928] bridge0: port 3(erspan0) entered forwarding state
[   49.814453][ T5928] erspan0: left allmulticast mode
[   49.816689][ T5928] erspan0: left promiscuous mode
[   49.827002][ T5928] bridge0: port 3(erspan0) entered disabled state
[   50.200772][ T5956] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   50.222389][ T5956] team0: Port device dummy0 added
[   50.226297][ T5956] netlink: 'syz.1.10': attribute type 10 has an invalid length.
[   50.243603][ T5956] team0: Port device dummy0 removed
[   50.252323][ T5956] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   50.274784][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[   50.291799][ T5968] netlink: 'syz.2.14': attribute type 6 has an invalid length.
[   50.321949][ T5972] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   50.326199][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'.
[   50.332033][ T5968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.359806][ T5974] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET)
[   50.415928][ T5968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.535214][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'.
[   50.731049][ T5993] sctp: [Deprecated]: syz.1.22 (pid 5993) Use of struct sctp_assoc_value in delayed_ack socket option.
[   50.731049][ T5993] Use struct sctp_sack_info instead
[   50.904514][ T6007] Zero length message leads to an empty skb
[   50.911888][ T6007] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.083933][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   51.195267][ T6000] openvswitch: netlink: IPv4 tun info is not correct
[   51.228344][ T5845] Bluetooth: hci0: command tx timeout
[   51.273034][ T5968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.303643][ T6021] netlink: 'syz.0.28': attribute type 29 has an invalid length.
[   51.308298][   T54] Bluetooth: hci2: command tx timeout
[   51.311606][ T6021] netlink: 'syz.0.28': attribute type 29 has an invalid length.
[   51.311711][ T5845] Bluetooth: hci1: command tx timeout
[   51.366130][ T6026] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   51.383738][ T6026] bridge_slave_0: left allmulticast mode
[   51.386157][ T6026] bridge_slave_0: left promiscuous mode
[   51.390984][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.399579][ T6026] bridge_slave_1: left allmulticast mode
[   51.402257][ T6026] bridge_slave_1: left promiscuous mode
[   51.404782][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.419583][ T6026] bond0: (slave bond_slave_0): Releasing backup interface
[   51.425888][ T6026] bond0: (slave bond_slave_1): Releasing backup interface
[   51.439439][ T6026] team0: Port device team_slave_0 removed
[   51.446153][ T6026] team0: Port device team_slave_1 removed
[   51.450867][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.454028][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.460646][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.463864][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.484889][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'.
[   51.852190][ T6054] netlink: 124 bytes leftover after parsing attributes in process `syz.0.36'.
[   51.856257][ T6054] netlink: 'syz.0.36': attribute type 10 has an invalid length.
[   51.859954][ T6054] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   51.864793][ T6054] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.871857][ T6054] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   52.254966][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   52.258981][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   52.267534][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[   52.273202][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37'.
[   52.277167][ T6058] netlink: 'syz.1.37': attribute type 12 has an invalid length.
[   52.290203][ T5714] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   52.293771][ T5714] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   52.293908][ T6058] netlink: 'syz.1.37': attribute type 12 has an invalid length.
[   52.297270][ T5714] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   52.304132][ T5714] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   52.357531][ T6060] netlink: 'syz.1.38': attribute type 5 has an invalid length.
[   52.369302][ T6060] geneve2: entered promiscuous mode
[   52.372034][ T6060] geneve2: entered allmulticast mode
[   52.375903][ T6028] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   52.381642][ T6028] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   52.384858][ T6028] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   52.389412][ T6028] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   52.454090][ T5968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.562464][ T6028] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.569189][ T1272] cfg80211: failed to load regulatory.db
[   52.579301][ T5714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.606492][ T5714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.623767][ T6028] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.632221][ T6071] pim6reg1: entered promiscuous mode
[   52.634416][ T6071] pim6reg1: entered allmulticast mode
[   52.665512][ T6073] Bluetooth: MGMT ver 1.23
[   52.717757][ T6075] bridge0: port 3(erspan0) entered blocking state
[   52.720942][ T6075] bridge0: port 3(erspan0) entered disabled state
[   52.724040][ T6075] erspan0: entered allmulticast mode
[   52.727760][ T6075] erspan0: entered promiscuous mode
[   52.731546][ T6075] bridge0: port 3(erspan0) entered blocking state
[   52.734450][ T6075] bridge0: port 3(erspan0) entered forwarding state
[   52.742071][ T6075] erspan0: left allmulticast mode
[   52.744345][ T6075] erspan0: left promiscuous mode
[   52.746683][ T6075] bridge0: port 3(erspan0) entered disabled state
[   53.308806][ T5845] Bluetooth: hci0: command tx timeout
[   53.388442][ T5845] Bluetooth: hci1: command tx timeout
[   53.390484][ T5845] Bluetooth: hci2: command tx timeout
[   54.306633][ T6145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.528986][ T6164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   54.784558][ T6181] ip6gre1: entered allmulticast mode
[   54.845794][ T6184] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   54.853960][ T6184] dvmrp0: entered allmulticast mode
[   55.388663][   T54] Bluetooth: hci0: command tx timeout
[   55.467994][ T5845] Bluetooth: hci1: command tx timeout
[   55.469654][   T54] Bluetooth: hci2: command tx timeout
[   56.523340][ T6195] __nla_validate_parse: 7 callbacks suppressed
[   56.523383][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'.
[   56.643831][ T6206] netlink: 'syz.0.73': attribute type 1 has an invalid length.
[   56.647659][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'.
[   56.672208][ T6204] bridge0: port 3(erspan0) entered blocking state
[   56.674385][ T6204] bridge0: port 3(erspan0) entered disabled state
[   56.676512][ T6204] erspan0: entered allmulticast mode
[   56.684998][ T6204] erspan0: entered promiscuous mode
[   56.686992][ T6204] bridge0: port 3(erspan0) entered blocking state
[   56.689233][ T6204] bridge0: port 3(erspan0) entered forwarding state
[   56.692339][ T6204] erspan0: left allmulticast mode
[   56.694008][ T6204] erspan0: left promiscuous mode
[   56.695726][ T6204] bridge0: port 3(erspan0) entered disabled state
[   56.794323][ T6221] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   56.804274][ T6221] netlink: 'syz.2.79': attribute type 4 has an invalid length.
[   56.864850][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'.
[   56.884555][ T5846] IPVS: starting estimator thread 0...
[   56.979967][ T6232] IPVS: using max 79 ests per chain, 189600 per kthread
[   57.089804][ T6243] netlink: 208 bytes leftover after parsing attributes in process `syz.0.84'.
[   57.728947][ T6253] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   57.780782][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.783766][ T6253] batadv_slave_0: entered promiscuous mode
[   57.791662][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   57.921478][ T6255] netlink: 248 bytes leftover after parsing attributes in process `syz.2.87'.
[   58.006532][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'.
[   58.086710][ T6270] bridge0: port 3(erspan0) entered blocking state
[   58.097801][ T6270] bridge0: port 3(erspan0) entered disabled state
[   58.100958][ T6270] erspan0: entered allmulticast mode
[   58.103502][ T6270] erspan0: entered promiscuous mode
[   58.105513][ T6270] bridge0: port 3(erspan0) entered blocking state
[   58.107697][ T6270] bridge0: port 3(erspan0) entered forwarding state
[   58.123878][ T6271] erspan0: left allmulticast mode
[   58.125687][ T6271] erspan0: left promiscuous mode
[   58.127531][ T6271] bridge0: port 3(erspan0) entered disabled state
[   58.294378][ T6291] batman_adv: batadv0: Adding interface: gretap1
[   58.296479][ T6291] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.317482][ T6291] batman_adv: batadv0: Interface activated: gretap1
[   58.697129][ T6314] tipc: Started in network mode
[   58.699746][ T6314] tipc: Node identity 421b9b2109bd, cluster identity 4711
[   58.702701][ T6314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.709979][ T6314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.730513][ T6311] tipc: Disabling bearer <eth:syzkaller0>
[   58.846580][ T6329] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.883575][ T6334] sctp: [Deprecated]: syz.2.103 (pid 6334) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.883575][ T6334] Use struct sctp_sack_info instead
[   59.032284][ T6347] netlink: 6 bytes leftover after parsing attributes in process `syz.0.104'.
[   59.044631][ T6347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.342164][ T6378] netlink: 676 bytes leftover after parsing attributes in process `syz.0.109'.
[   59.345817][ T6378] netlink: 676 bytes leftover after parsing attributes in process `syz.0.109'.
[   61.047396][ T6429] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   61.061358][ T6429] geneve2: entered promiscuous mode
[   61.066005][ T6429] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   61.120110][ T6436] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   61.311659][ T6450] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   61.332879][ T6450] bond3: (slave geneve3): making interface the new active one
[   61.336083][ T6450] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   61.340530][ T5877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   61.344485][ T5877] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   61.349724][ T6450] 8021q: adding VLAN 0 to HW filter on device bond3
[   61.352794][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   61.355722][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   61.626639][ T6472] can: request_module (can-proto-0) failed.
[   61.710757][ T6480] tipc: Started in network mode
[   61.712486][ T6480] tipc: Node identity f2e4f6b9ee13, cluster identity 4711
[   61.715448][ T6480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.719402][ T6480] syzkaller0: entered promiscuous mode
[   61.721364][ T6480] syzkaller0: entered allmulticast mode
[   61.733550][ T6480] tipc: Resetting bearer <eth:syzkaller0>
[   61.736881][ T6479] tipc: Resetting bearer <eth:syzkaller0>
[   61.746450][ T6479] tipc: Disabling bearer <eth:syzkaller0>
[   61.830340][ T6482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.834413][ T6482] syzkaller0: entered promiscuous mode
[   61.836398][ T6482] syzkaller0: entered allmulticast mode
[   61.846609][ T6482] sch_fq: defrate 257 ignored.
[   61.852812][ T6482] tipc: Resetting bearer <eth:syzkaller0>
[   61.857433][ T6481] tipc: Resetting bearer <eth:syzkaller0>
[   61.868935][ T6481] tipc: Disabling bearer <eth:syzkaller0>
[   62.800010][ T6491] __nla_validate_parse: 7 callbacks suppressed
[   62.800019][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   62.806219][ T6491] netlink: 'syz.2.140': attribute type 30 has an invalid length.
[   62.814676][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.814783][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   62.820590][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.821435][ T6491] netlink: 'syz.2.140': attribute type 30 has an invalid length.
[   62.824917][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.834914][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.201915][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.256292][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.312087][ T6523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.347668][ T6534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.350556][ T6534] syzkaller0: entered promiscuous mode
[   63.352570][ T6534] syzkaller0: entered allmulticast mode
[   63.366724][ T6534] tipc: Resetting bearer <eth:syzkaller0>
[   63.370542][ T6533] tipc: Resetting bearer <eth:syzkaller0>
[   63.380781][ T6533] tipc: Disabling bearer <eth:syzkaller0>
[   63.521436][ T6543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.154'.
[   63.521784][ T6544] netlink: 48 bytes leftover after parsing attributes in process `syz.0.154'.
[   63.529401][ T6543] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[   63.532201][ T6544] netlink: 'syz.0.154': attribute type 2 has an invalid length.
[   63.632970][ T6554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.116829][ T6581] bridge0: port 3(erspan0) entered blocking state
[   64.119396][ T6581] bridge0: port 3(erspan0) entered disabled state
[   64.121639][ T6581] erspan0: entered allmulticast mode
[   64.124331][ T6581] erspan0: entered promiscuous mode
[   64.126337][ T6581] bridge0: port 3(erspan0) entered blocking state
[   64.128605][ T6581] bridge0: port 3(erspan0) entered forwarding state
[   64.132500][ T6582] erspan0: left allmulticast mode
[   64.134272][ T6582] erspan0: left promiscuous mode
[   64.136228][ T6582] bridge0: port 3(erspan0) entered disabled state
[   64.189259][ T6589] netlink: 'syz.0.166': attribute type 1 has an invalid length.
[   64.221453][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'.
[   64.233549][ T6589] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   64.262642][ T6589] veth3: entered promiscuous mode
[   64.267574][ T6589] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   64.278626][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'.
[   64.283433][ T5877] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.284283][ T6589] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.408847][ T5877] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.447166][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[   64.451532][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.170'.
[   64.461060][ T6603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.463784][ T6603] syzkaller0: entered promiscuous mode
[   64.465700][ T6603] syzkaller0: entered allmulticast mode
[   64.474158][ T6603] sch_fq: defrate 257 ignored.
[   64.478789][ T6603] tipc: Resetting bearer <eth:syzkaller0>
[   64.482598][ T6602] tipc: Resetting bearer <eth:syzkaller0>
[   64.490353][ T6602] tipc: Disabling bearer <eth:syzkaller0>
[   64.516092][ T6606] batman_adv: batadv0: Adding interface: dummy0
[   64.519752][ T6606] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.530516][ T6606] batman_adv: batadv0: Interface activated: dummy0
[   64.548353][ T6606] batadv0: mtu less than device minimum
[   64.550742][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.555142][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.559229][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.563054][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.567404][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.571304][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.576384][ T6606] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   64.764005][ T6616] @: renamed from bond_slave_0 (while UP)
[   64.768108][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'.
[   64.799762][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   64.824468][ T6622] ip6_vti0: entered promiscuous mode
[   64.859600][ T6622] raw_sendmsg: syz.2.177 forgot to set AF_INET. Fix it!
[   64.862966][ T6621] ip6_vti0: left promiscuous mode
[   64.998859][ T6636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.485356][ T6664] netlink: 'syz.0.186': attribute type 5 has an invalid length.
[   65.490944][ T6664] geneve2: entered promiscuous mode
[   65.492689][ T6664] geneve2: entered allmulticast mode
[   65.497003][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   65.500868][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   65.503895][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   65.506771][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   66.009205][ T6697] batadv_slave_0: entered promiscuous mode
[   66.332553][ T6699] delete_channel: no stack
[   66.429033][  T775] wlan0: Trigger new scan to find an IBSS to join
[   66.623909][ T6724] veth1_macvtap: left promiscuous mode
[   66.626454][ T6724] macsec0: entered promiscuous mode
[   66.639820][ T6724] veth1_macvtap: entered promiscuous mode
[   66.642950][ T6724] macsec0: left promiscuous mode
[   66.842367][ T6696] batadv_slave_0: left promiscuous mode
[   66.913907][ T6735] bridge0: port 1(erspan0) entered blocking state
[   66.916984][ T6735] bridge0: port 1(erspan0) entered disabled state
[   66.921260][ T6735] erspan0: entered allmulticast mode
[   66.923862][ T6735] erspan0: entered promiscuous mode
[   66.926702][ T6735] bridge0: port 1(erspan0) entered blocking state
[   66.929024][ T6735] bridge0: port 1(erspan0) entered forwarding state
[   66.932877][ T6735] erspan0: left allmulticast mode
[   66.934670][ T6735] erspan0: left promiscuous mode
[   66.936415][ T6735] bridge0: port 1(erspan0) entered disabled state
[   67.004832][ T6739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.007651][ T6739] syzkaller0: entered promiscuous mode
[   67.010725][ T6739] syzkaller0: entered allmulticast mode
[   67.023475][ T6739] tipc: Resetting bearer <eth:syzkaller0>
[   67.030074][ T6738] tipc: Resetting bearer <eth:syzkaller0>
[   67.038858][ T6738] tipc: Disabling bearer <eth:syzkaller0>
[   67.264060][   T33] audit: type=1804 audit(1754584288.346:2): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.210" name="/newroot/92/cgroup.controllers" dev="tmpfs" ino=494 res=1 errno=0
[   67.271493][   T33] audit: type=1800 audit(1754584288.346:3): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.210" name="cgroup.controllers" dev="tmpfs" ino=494 res=0 errno=0
[   67.490100][ T6760] syzkaller0: entered promiscuous mode
[   67.491934][ T6760] syzkaller0: entered allmulticast mode
[   67.679009][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.682920][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.686565][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.691246][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.693922][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.795477][ T6768] chnl_net:caif_netlink_parms(): no params data found
[   67.841369][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.843772][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.846192][ T6768] bridge_slave_0: entered allmulticast mode
[   67.848993][ T6768] bridge_slave_0: entered promiscuous mode
[   67.852902][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.855566][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.858073][ T6768] bridge_slave_1: entered allmulticast mode
[   67.860958][ T6768] bridge_slave_1: entered promiscuous mode
[   67.882142][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.888613][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.914302][ T6768] team0: Port device team_slave_0 added
[   67.919484][ T6768] team0: Port device team_slave_1 added
[   67.935429][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.938154][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.946656][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.951700][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.953937][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.962336][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.986484][ T6768] hsr_slave_0: entered promiscuous mode
[   67.989424][ T6768] hsr_slave_1: entered promiscuous mode
[   67.991692][ T6768] debugfs: 'hsr0' already exists in 'hsr'
[   67.993587][ T6768] Cannot create hsr debugfs directory
[   68.082280][ T6768] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.086690][ T6768] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.091001][ T6768] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.095587][ T6768] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.113623][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.116057][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.118642][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.120975][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.153812][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.164046][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.167595][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.177414][ T6768] 8021q: adding VLAN 0 to HW filter on device team0
[   68.183792][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.186247][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.193688][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.195987][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.020492][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.037214][ T6768] veth0_vlan: entered promiscuous mode
[   69.047644][ T6768] veth1_vlan: entered promiscuous mode
[   69.080464][ T6799] netlink: 'syz.2.219': attribute type 2 has an invalid length.
[   69.093692][ T6799] : entered promiscuous mode
[   69.105327][ T6768] veth0_macvtap: entered promiscuous mode
[   69.126472][ T6768] veth1_macvtap: entered promiscuous mode
[   69.138223][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.143910][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.159298][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.171877][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.184771][ T6806] __nla_validate_parse: 15 callbacks suppressed
[   69.184780][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'.
[   69.191119][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.196060][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.279356][ T6812] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   69.283750][ T6812] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   69.284113][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.286368][ T6812] netlink: 216 bytes leftover after parsing attributes in process `syz.2.222'.
[   69.292522][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.346240][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.356181][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.388809][ T1089] wlan0: Trigger new scan to find an IBSS to join
[   69.566446][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[   69.664194][ T6824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.676797][ T6824] syzkaller0: entered promiscuous mode
[   69.683382][ T6824] syzkaller0: entered allmulticast mode
[   69.703856][ T6824] tipc: Resetting bearer <eth:syzkaller0>
[   69.708695][ T5845] Bluetooth: hci3: command tx timeout
[   69.740040][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[   69.761730][ T6823] tipc: Disabling bearer <eth:syzkaller0>
[   69.975789][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.978422][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.992623][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'.
[   70.003444][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'.
[   70.060987][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.070043][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.187352][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.197463][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.201313][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.205026][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.210742][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.217105][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.229681][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.248277][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.269018][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'.
[   70.324604][ T6857] DL<Y: renamed from lo
[   70.381731][ T6865] netlink: 'syz.0.239': attribute type 21 has an invalid length.
[   70.384312][ T6865] netlink: 128 bytes leftover after parsing attributes in process `syz.0.239'.
[   70.387401][ T6865] netlink: 'syz.0.239': attribute type 4 has an invalid length.
[   70.392723][ T6865] netlink: 'syz.0.239': attribute type 5 has an invalid length.
[   70.395236][ T6865] netlink: 3 bytes leftover after parsing attributes in process `syz.0.239'.
[   70.401494][ T6865] syzkaller1: entered promiscuous mode
[   70.403304][ T6865] syzkaller1: entered allmulticast mode
[   70.411430][ T6865] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.421707][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.240'.
[   70.428535][ T6870] netlink: 'syz.2.240': attribute type 1 has an invalid length.
[   70.431009][ T6870] netlink: 224 bytes leftover after parsing attributes in process `syz.2.240'.
[   70.574161][ T6888] bridge0: port 3(erspan0) entered blocking state
[   70.576444][ T6888] bridge0: port 3(erspan0) entered disabled state
[   70.579211][ T6888] erspan0: entered allmulticast mode
[   70.581862][ T6888] erspan0: entered promiscuous mode
[   70.583842][ T6888] bridge0: port 3(erspan0) entered blocking state
[   70.585973][ T6888] bridge0: port 3(erspan0) entered forwarding state
[   70.591516][ T6888] erspan0: left allmulticast mode
[   70.593204][ T6888] erspan0: left promiscuous mode
[   70.594916][ T6888] bridge0: port 3(erspan0) entered disabled state
[   70.683940][ T6898] netlink: 'syz.2.247': attribute type 5 has an invalid length.
[   70.691571][ T6898] geneve5: entered promiscuous mode
[   70.693437][ T6898] geneve5: entered allmulticast mode
[   70.698559][   T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0
[   70.703655][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0
[   70.706214][   T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0
[   70.714153][   T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0
[   70.757134][ T6906] ieee802154 phy0 wpan0: encryption failed: -22
[   70.764638][ T6906] ieee802154 phy0 wpan0: encryption failed: -22
[   70.911740][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.913824][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   70.939901][ T6927] vlan2: entered promiscuous mode
[   70.941729][ T6927] batadv0: entered promiscuous mode
[   71.159815][ T6942] syzkaller0: entered promiscuous mode
[   71.162082][ T6942] syzkaller0: entered allmulticast mode
[   71.165221][ T6940] tipc: Started in network mode
[   71.167108][ T6940] tipc: Node identity 16903b5f3b4c, cluster identity 4711
[   71.174515][ T6940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.198564][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   71.206306][ T6940] tipc: Disabling bearer <eth:syzkaller0>
[   71.788049][ T5845] Bluetooth: hci3: command tx timeout
[   72.052077][ T6965] netlink: 'syz.3.264': attribute type 5 has an invalid length.
[   72.058628][ T6965] geneve2: entered promiscuous mode
[   72.060502][ T6965] geneve2: entered allmulticast mode
[   72.063454][ T5877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   72.066569][ T5877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   72.070481][ T5877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   72.074006][ T5877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   72.274883][ T6973] netlink: 'syz.0.267': attribute type 5 has an invalid length.
[   72.336321][ T6979] @: renamed from bond_slave_0
[   72.354808][   T27] wlan0: Trigger new scan to find an IBSS to join
[   72.569175][ T6981] batman_adv: batadv0: Interface deactivated: dummy0
[   72.795086][ T6981] ip6gre1: left allmulticast mode
[   72.805985][ T6981] veth3: left promiscuous mode
[   72.810059][ T6981] geneve2: left promiscuous mode
[   72.811774][ T6981] geneve2: left allmulticast mode
[   72.821750][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.827370][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   72.832541][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.835666][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   72.840551][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.845779][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   72.850718][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.853789][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   72.915291][ T6995] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.020984][ T7006] : entered promiscuous mode
[   73.152742][ T7018] batadv0: entered promiscuous mode
[   73.195882][ T7020] syzkaller0: entered promiscuous mode
[   73.197767][ T7020] syzkaller0: entered allmulticast mode
[   73.243285][ T7024] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.322362][ T7029] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.325953][ T7029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.331480][ T7029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   73.334860][ T7029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   73.411537][ T7029] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.414903][ T7029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.419016][ T7029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   73.422425][ T7029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   73.473156][ T7029] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.476989][ T7029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.482586][ T7029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   73.485892][ T7029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   73.546572][ T7029] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.551335][ T7029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.554574][ T7029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   73.557815][ T7029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[   73.639733][ T5877] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.642665][ T5877] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   73.645578][ T5877] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   73.649957][ T5877] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[   73.663341][ T5714] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.667373][ T5714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   73.672162][ T5714] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   73.674863][ T5714] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[   73.702627][ T5877] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.705360][ T5877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   73.710145][ T5877] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   73.712810][ T5877] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[   73.715619][ T5877] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.719871][ T5877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   73.723670][ T5877] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   73.727072][ T5877] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[   73.807655][ T7053] bridge_slave_0: left allmulticast mode
[   73.811040][ T7053] bridge_slave_0: left promiscuous mode
[   73.813447][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.818866][ T7053] bridge_slave_1: left allmulticast mode
[   73.820803][ T7053] bridge_slave_1: left promiscuous mode
[   73.822816][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.829419][ T7053] bond0: (slave bond_slave_0): Releasing backup interface
[   73.839349][ T7053] bond0: (slave bond_slave_1): Releasing backup interface
[   73.844928][ T7053] team0: Port device team_slave_0 removed
[   73.847741][ T7053] team0: Port device team_slave_1 removed
[   73.855095][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.858581][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.868107][ T5845] Bluetooth: hci3: command tx timeout
[   73.935204][ T7061] 8021q: adding VLAN 0 to HW filter on device bond4
[   73.944842][ T7042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   73.949594][ T7042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   74.202394][ T7088] __nla_validate_parse: 19 callbacks suppressed
[   74.202407][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.294'.
[   74.313353][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[   74.316650][ T7094] validate_nla: 3 callbacks suppressed
[   74.316657][ T7094] netlink: 'syz.0.296': attribute type 5 has an invalid length.
[   74.321013][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'.
[   74.407069][ T7101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.429525][ T7101] syzkaller0: entered promiscuous mode
[   74.432161][ T7101] syzkaller0: entered allmulticast mode
[   74.438820][ T7101] tipc: Resetting bearer <eth:syzkaller0>
[   74.442554][ T7100] tipc: Resetting bearer <eth:syzkaller0>
[   75.129560][ T7100] tipc: Disabling bearer <eth:syzkaller0>
[   75.301803][ T7122] netlink: 260 bytes leftover after parsing attributes in process `syz.2.304'.
[   75.333986][ T7124] netlink: 248 bytes leftover after parsing attributes in process `syz.2.305'.
[   75.440794][ T7139] macsec2: entered promiscuous mode
[   75.443071][ T7139] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   75.462598][ T7139] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[   75.549684][ T7156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.313'.
[   75.616236][ T7167] bridge0: port 1(erspan0) entered blocking state
[   75.619401][ T7167] bridge0: port 1(erspan0) entered disabled state
[   75.621850][ T7167] erspan0: entered allmulticast mode
[   75.626255][ T7167] erspan0: entered promiscuous mode
[   75.948630][ T5845] Bluetooth: hci3: command tx timeout
[   76.006436][ T7204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.012196][ T7206] syzkaller0: entered promiscuous mode
[   76.014323][ T7206] syzkaller0: entered allmulticast mode
[   76.023395][ T7204] tipc: Resetting bearer <eth:syzkaller0>
[   76.026742][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[   76.035962][ T7203] tipc: Disabling bearer <eth:syzkaller0>
[   76.112444][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'.
[   76.257099][ T7213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.326'.
[   76.283864][ T7216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'.
[   76.283885][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'.
[   76.414811][ T7225] bridge0: port 1(erspan0) entered blocking state
[   76.417604][ T7225] bridge0: port 1(erspan0) entered disabled state
[   76.420817][ T7225] erspan0: entered allmulticast mode
[   76.425950][ T7225] erspan0: left allmulticast mode
[   76.429489][ T7226] bridge0: port 1(erspan0) entered blocking state
[   76.432449][ T7226] bridge0: port 1(erspan0) entered disabled state
[   76.435454][ T7226] erspan0: entered allmulticast mode
[   76.440810][ T7226] erspan0: left allmulticast mode
[   76.783515][ T7251] net_ratelimit: 13 callbacks suppressed
[   76.783527][ T7251] openvswitch: netlink: IP tunnel dst address not specified
[   76.824982][ T7255] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[   76.914034][ T7258] netlink: 'syz.3.338': attribute type 10 has an invalid length.
[   76.917139][ T7259] netlink: 'syz.3.338': attribute type 10 has an invalid length.
[   76.953488][ T7258] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   76.956659][ T7258] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   77.114145][ T7273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.117445][ T7273] syzkaller0: entered promiscuous mode
[   77.119560][ T7273] syzkaller0: entered allmulticast mode
[   77.132380][ T7273] tipc: Resetting bearer <eth:syzkaller0>
[   77.135457][ T7272] tipc: Resetting bearer <eth:syzkaller0>
[   77.142721][ T7272] tipc: Disabling bearer <eth:syzkaller0>
[   77.256438][ T7282] netlink: 'syz.3.344': attribute type 2 has an invalid length.
[   77.262421][ T7282] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[   77.369340][ T7292] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   77.431180][ T7292] erspan0: left allmulticast mode
[   77.433376][ T7292] erspan0: left promiscuous mode
[   77.435647][ T7292] bridge0: port 1(erspan0) entered disabled state
[   77.441498][ T7292] batman_adv: batadv0: Removing interface: dummy0
[   77.446220][ T7292] bond0: (slave wlan1): Releasing backup interface
[   77.454635][ T7292] bond1: (slave ip6gretap2): Removing an active aggregator
[   77.458773][ T7292] bond1: (slave ip6gretap2): Releasing backup interface
[   77.461628][ T7292] bond1: (slave ip6gretap2): the permanent HWaddr of slave - ea:da:dc:30:55:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   77.476614][ T7292] bond1: (slave veth3): Releasing backup interface
[   77.484316][ T7292] netlink: 'syz.0.347': attribute type 10 has an invalid length.
[   77.487637][ T7292] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   77.494772][ T7292] bond0: (slave wlan1): Opening slave failed
[   77.502974][ T7292] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   77.507301][ T7292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   77.855693][ T7313] netlink: 'syz.3.351': attribute type 13 has an invalid length.
[   77.890485][ T7317] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.193857][ T7342] bridge0: port 3(erspan0) entered blocking state
[   78.196268][ T7342] bridge0: port 3(erspan0) entered disabled state
[   78.200516][ T7342] erspan0: entered allmulticast mode
[   78.208787][ T7342] erspan0: entered promiscuous mode
[   78.217795][ T7342] bridge0: port 3(erspan0) entered blocking state
[   78.220237][ T7342] bridge0: port 3(erspan0) entered forwarding state
[   78.224376][ T7342] erspan0: left allmulticast mode
[   78.226945][ T7342] erspan0: left promiscuous mode
[   78.229484][ T7342] bridge0: port 3(erspan0) entered disabled state
[   78.425713][ T7351] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[   78.505166][ T7351] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   78.515232][ T5714] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.523402][ T7351] 8021q: adding VLAN 0 to HW filter on device bond5
[   78.552280][ T7351] veth3: entered promiscuous mode
[   78.559580][ T7351] bond5: (slave veth3): Enslaving as a backup interface with a down link
[   78.579168][ T7351] bridge_slave_0: left promiscuous mode
[   78.584547][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.600842][ T7351] bridge_slave_1: left allmulticast mode
[   78.602728][ T7351] bridge_slave_1: left promiscuous mode
[   78.612253][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.620512][ T7351] bond0: (slave 1@): Releasing backup interface
[   78.624703][ T7351] bond0: (slave bond_slave_1): Releasing backup interface
[   78.634845][ T7351] team0: Port device team_slave_0 removed
[   78.638645][ T6028] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.644753][ T7351] team0: Port device team_slave_1 removed
[   78.647272][ T7351] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.651500][ T7351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.654235][ T7351] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.661006][ T7351] batman_adv: batadv0: Interface deactivated: gretap1
[   78.663378][ T7351] batman_adv: batadv0: Removing interface: gretap1
[   78.666775][ T7351] bond3: (slave geneve3): Releasing active interface
[   78.682854][ T7351] bond5: (slave ip6gretap1): Removing an active aggregator
[   78.685765][ T7351] bond5: (slave ip6gretap1): Releasing backup interface
[   78.691128][ T7351] bond5: (slave ip6gretap1): the permanent HWaddr of slave - e2:ec:01:de:18:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   78.702592][ T7351] bond5: (slave veth3): Releasing backup interface
[   78.727905][ T5714] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.745420][ T6028] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.758079][ T6028] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   78.761197][ T6028] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.040771][ T7394] netlink: 'syz.0.372': attribute type 10 has an invalid length.
[   79.046815][ T7394] bond0: (slave wlan1): Opening slave failed
[   79.288003][ T7411] __nla_validate_parse: 9 callbacks suppressed
[   79.288052][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'.
[   79.486567][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[   79.628912][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'.
[   79.647158][ T7424] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.966108][ T7431] bridge0: port 1(erspan0) entered blocking state
[   79.970161][ T7431] bridge0: port 1(erspan0) entered disabled state
[   79.972570][ T7431] erspan0: entered allmulticast mode
[   79.975084][ T7431] erspan0: entered promiscuous mode
[   79.977501][ T7431] bridge0: port 1(erspan0) entered blocking state
[   79.979936][ T7431] bridge0: port 1(erspan0) entered forwarding state
[   80.020696][ T7431] erspan0: left allmulticast mode
[   80.022476][ T7431] erspan0: left promiscuous mode
[   80.024297][ T7431] bridge0: port 1(erspan0) entered disabled state
[   80.032927][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'.
[   80.044316][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'.
[   80.081218][ T7436] netlink: 'syz.0.383': attribute type 12 has an invalid length.
[   80.112123][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'.
[   80.125678][ T7439] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.139547][ T7440] macvlan3: entered promiscuous mode
[   80.141444][ T7440] macvlan3: entered allmulticast mode
[   80.143986][ T7440] bond1: (slave macvlan3): Opening slave failed
[   80.261731][ T7452] @: renamed from bond_slave_0
[   80.266094][ T7452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'.
[   80.344276][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'.
[   80.347474][ T7457] netlink: 'syz.3.390': attribute type 5 has an invalid length.
[   80.350837][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.390'.
[   80.473335][ T7464] IPv6: sit1: Disabled Multicast RS
[   80.475715][ T7464] sit1: entered allmulticast mode
[   80.879692][ T7482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.396'.
[   81.226644][ T7505] netlink: 'syz.2.400': attribute type 6 has an invalid length.
[   81.267260][ T7505] netlink: 'syz.2.400': attribute type 10 has an invalid length.
[   81.284446][ T7505] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   81.356644][ T7519] team0: Mode changed to "broadcast"
[   81.362693][ T7519] tipc: Enabled bearer <eth:team0>, priority 0
[   81.574316][ T7537] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[   81.579068][ T7537] bond3: (slave vcan1): Error -95 calling set_mac_address
[   81.944601][ T7559] netlink: 'syz.0.412': attribute type 4 has an invalid length.
[   81.947976][ T7558] netlink: 'syz.0.412': attribute type 4 has an invalid length.
[   81.949822][ T7559] netlink: 'syz.0.412': attribute type 4 has an invalid length.
[   82.358813][ T5846] tipc: Node number set to 1269209889
[   82.462823][ T7611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.466325][ T7611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   82.544415][ T7611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.549882][ T7611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   82.626583][ T7611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.642709][ T7611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   82.708916][ T7611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.713041][ T7611] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   82.831080][ T5877] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.834771][ T5877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   82.843008][ T5877] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.845811][ T5877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   82.862040][ T5877] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.864993][ T5877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   82.872425][ T7641] tipc: Trying to set illegal importance in message
[   82.875412][ T5877] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.882670][ T5877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   82.889059][ T7641] syzkaller0: entered promiscuous mode
[   82.893564][ T7641] syzkaller0: entered allmulticast mode
[   83.200548][ T7656] syzkaller1: entered promiscuous mode
[   83.202931][ T7656] syzkaller1: entered allmulticast mode
[   83.664547][ T7680] netlink: 'syz.0.444': attribute type 10 has an invalid length.
[   83.671447][ T7680] veth0_vlan: left promiscuous mode
[   83.674626][ T7680] veth0_vlan: entered promiscuous mode
[   83.679743][ T7680] team0: Device veth0_vlan failed to register rx_handler
[   83.916221][ T7695] netlink: 'syz.2.445': attribute type 10 has an invalid length.
[   83.928674][ T7695] team0: Port device dummy0 added
[   83.934454][ T7695] netlink: 'syz.2.445': attribute type 10 has an invalid length.
[   83.943435][ T7695] team0: Port device dummy0 removed
[   83.958755][ T7695] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   84.356507][ T7734] __nla_validate_parse: 18 callbacks suppressed
[   84.356522][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.458'.
[   84.368851][ T7734] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   84.470508][ T7738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.559584][ T7745] veth0: entered promiscuous mode
[   84.561949][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[   84.939970][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   84.944048][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'.
[   84.960989][ T6028] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.965009][ T6028] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.974331][ T6028] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.979830][ T6028] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.003804][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[   85.016732][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'.
[   85.120839][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[   85.124300][ T7788] validate_nla: 2 callbacks suppressed
[   85.124307][ T7788] netlink: 'syz.2.472': attribute type 15 has an invalid length.
[   85.212187][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[   85.215994][ T7788] netlink: 'syz.2.472': attribute type 15 has an invalid length.
[   85.312334][ T7801] netlink: 'syz.2.476': attribute type 9 has an invalid length.
[   86.285872][ T7830] netlink: 248 bytes leftover after parsing attributes in process `syz.3.484'.
[   86.327165][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.483'.
[   86.417269][ T7844] batadv1: entered promiscuous mode
[   86.419928][ T7844] batadv1: entered allmulticast mode
[   86.886459][ T7881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.945114][ T7885] netlink: 'syz.0.497': attribute type 10 has an invalid length.
[   86.969322][ T7885] netlink: 'syz.0.497': attribute type 10 has an invalid length.
[   86.974003][ T7885] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.981471][ T7885] team0: Port device bond0 added
[   87.265370][ T7917] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   87.273957][ T7917] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   87.543849][ T7940] netlink: 'syz.2.510': attribute type 2 has an invalid length.
[   87.760983][ T7960] netlink: 'syz.2.515': attribute type 1 has an invalid length.
[   88.505441][ T7965] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.683407][ T7989] pimreg: entered allmulticast mode
[   88.686919][ T7989] dvmrp0: left allmulticast mode
[   88.689352][ T7989] pimreg: left allmulticast mode
[   89.085877][ T8016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.089546][ T8016] syzkaller0: entered promiscuous mode
[   89.091857][ T8016] syzkaller0: entered allmulticast mode
[   89.107153][ T8016] tipc: Resetting bearer <eth:syzkaller0>
[   89.111975][ T8015] tipc: Resetting bearer <eth:syzkaller0>
[   89.127461][ T8015] tipc: Disabling bearer <eth:syzkaller0>
[   89.205011][ T8019] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.209519][ T8019] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[   89.213895][ T8019] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[   89.264970][ T8023] netlink: 'syz.2.529': attribute type 1 has an invalid length.
[   89.289197][ T8023] 8021q: adding VLAN 0 to HW filter on device bond8
[   89.305073][ T8024] bond8: (slave bridge4): making interface the new active one
[   89.311414][ T8024] bond8: (slave bridge4): Enslaving as an active interface with an up link
[   89.328603][ T8023] bond8: (slave bridge5): Enslaving as an active interface with a down link
[   89.349454][ T8024] gretap2: entered promiscuous mode
[   89.365024][ T8024] macvlan3: entered promiscuous mode
[   89.367525][ T8024] macvlan3: entered allmulticast mode
[   89.370885][ T8024] bond8: entered promiscuous mode
[   89.373082][ T8024] bridge4: entered promiscuous mode
[   89.375983][ T8024] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   89.379664][ T8024] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.389441][ T8024] bond8: left promiscuous mode
[   89.391507][ T8024] bridge4: left promiscuous mode
[   89.412058][ T8023] macvlan3: entered promiscuous mode
[   89.414472][ T8023] macvlan3: entered allmulticast mode
[   89.417413][ T8023] bond8: entered promiscuous mode
[   89.420043][ T8023] bridge4: entered promiscuous mode
[   89.424332][ T8023] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   89.438628][ T8023] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.446465][ T8023] bond8: left promiscuous mode
[   89.451059][ T8023] bridge4: left promiscuous mode
[   89.479153][ T8032] netlink: 'syz.3.531': attribute type 1 has an invalid length.
[   89.484054][ T8032] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   89.576588][ T8046] __nla_validate_parse: 10 callbacks suppressed
[   89.576598][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'.
[   89.672891][ T8048] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   89.683054][ T8048] bond0: (slave bridge0): Releasing backup interface
[   89.685639][ T8048] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   89.709526][ T8048] bond0: (slave dummy0): Releasing backup interface
[   89.736283][ T8048] bond8: (slave bridge4): Releasing active interface
[   89.741726][ T8048] bond8: (slave bridge4): the permanent HWaddr of slave - c2:d2:c4:46:be:29 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   89.751725][ T8048] bond8: (slave bridge5): Releasing active interface
[   89.765662][ T8048] netlink: 'syz.2.536': attribute type 10 has an invalid length.
[   89.768294][ T8048] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   89.777606][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.788035][ T8048] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   89.793783][ T8048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.797308][ T8048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.105794][ T8092] syz.0.545 (8092) used greatest stack depth: 19512 bytes left
[   90.124585][ T8089] dummy0: entered allmulticast mode
[   90.292478][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'.
[   90.300432][ T8114] bond0: entered promiscuous mode
[   90.303633][ T8114] bond0: left promiscuous mode
[   90.343548][ T8118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'.
[   90.360200][ T8118] bond0: entered promiscuous mode
[   90.362604][ T8118] bond0: left promiscuous mode
[   90.441609][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[   90.521027][ T8123] netlink: 84 bytes leftover after parsing attributes in process `syz.3.552'.
[   90.601442][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'.
[   90.605282][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'.
[   90.616973][ T8137] bond0: entered promiscuous mode
[   90.655506][ T8147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'.
[   90.806742][ T8160] net veth1_virt_wifi : renamed from virt_wifi0
[   90.866472][ T8165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.562'.
[   90.870603][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'.
[   90.904642][ T8168] validate_nla: 1 callbacks suppressed
[   90.904651][ T8168] netlink: 'syz.2.563': attribute type 11 has an invalid length.
[   91.172049][ T8182] IPv6: Can't replace route, no match found
[   91.197032][ T8190] netlink: 'syz.3.569': attribute type 7 has an invalid length.
[   91.200580][ T8190] netlink: 'syz.3.569': attribute type 8 has an invalid length.
[   91.210764][ T8190] ip6gretap0: entered promiscuous mode
[   91.216634][ T8190] syz_tun: entered promiscuous mode
[   91.220867][ T8190] ip6gretap0: left promiscuous mode
[   91.223834][ T8190] syz_tun: left promiscuous mode
[   91.469662][ T8214] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   91.516772][ T8211] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.520872][ T8211] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   91.564337][ T8211] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.569783][ T8211] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   91.641022][ T8211] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.644971][ T8211] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   91.705457][ T8211] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.710525][ T8211] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   91.781022][ T5877] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.784279][ T5877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   91.795911][ T5877] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.804674][ T5877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   91.817752][ T5877] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.823170][ T5877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   91.835651][ T5877] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.839437][ T5877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   91.940903][ T8236] bridge0: port 1(erspan0) entered blocking state
[   91.943255][ T8236] bridge0: port 1(erspan0) entered disabled state
[   91.945515][ T8236] erspan0: entered allmulticast mode
[   91.950209][ T8236] erspan0: entered promiscuous mode
[   91.954415][ T8236] erspan0: left allmulticast mode
[   91.956354][ T8236] erspan0: left promiscuous mode
[   91.958252][ T8236] bridge0: port 1(erspan0) entered disabled state
[   92.058814][ T8241] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.062932][ T8241] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   92.112654][ T8249] bridge0: port 1(erspan0) entered blocking state
[   92.115241][ T8249] bridge0: port 1(erspan0) entered disabled state
[   92.117575][ T8249] erspan0: entered allmulticast mode
[   92.121864][ T8249] erspan0: entered promiscuous mode
[   92.128780][ T8241] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.131999][ T8241] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   92.138604][ T8249] erspan0: left allmulticast mode
[   92.140614][ T8249] erspan0: left promiscuous mode
[   92.142561][ T8249] bridge0: port 1(erspan0) entered disabled state
[   92.180369][ T8253] pimreg: entered allmulticast mode
[   92.223678][ T8263] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   92.235050][ T8241] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.242923][ T8241] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   92.329860][ T8241] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.333439][ T8241] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   92.563150][ T8291] netlink: 'syz.2.597': attribute type 12 has an invalid length.
[   92.799777][ T8304] bridge0: port 1(erspan0) entered blocking state
[   92.802539][ T8304] bridge0: port 1(erspan0) entered disabled state
[   92.804943][ T8304] erspan0: entered allmulticast mode
[   92.807752][ T8304] erspan0: entered promiscuous mode
[   92.813109][ T8304] erspan0: left allmulticast mode
[   92.815021][ T8304] erspan0: left promiscuous mode
[   92.817011][ T8304] bridge0: port 1(erspan0) entered disabled state
[   93.424826][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.431860][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   93.443393][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.447969][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   93.460680][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.466783][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   93.470450][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.473533][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   93.513734][ T8339] netlink: 'syz.0.610': attribute type 1 has an invalid length.
[   93.707506][ T8356] netlink: 'syz.3.614': attribute type 5 has an invalid length.
[   94.024060][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.027394][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   94.030408][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.033165][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   94.036152][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.041600][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   94.044862][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.047777][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   94.262726][ T8386] bond10: (slave vcan1): The slave device specified does not support setting the MAC address
[   94.266858][ T8386] bond10: (slave vcan1): Error -95 calling set_mac_address
[   94.312256][ T8387] netlink: 'syz.2.623': attribute type 4 has an invalid length.
[   94.315039][ T8389] netlink: 'syz.2.623': attribute type 4 has an invalid length.
[   94.917547][ T8407] vlan2: entered promiscuous mode
[   94.919476][ T8407] vlan2: entered allmulticast mode
[   94.921392][ T8407] hsr_slave_1: entered allmulticast mode
[   94.979938][ T8407] __nla_validate_parse: 26 callbacks suppressed
[   94.979950][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[   95.100349][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'.
[   95.113922][ T8415] xfrm1: entered promiscuous mode
[   95.116114][ T8415] xfrm1: entered allmulticast mode
[   95.262496][ T8425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.266340][ T8425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.275112][ T8429] pim6reg1: entered promiscuous mode
[   95.277331][ T8429] pim6reg1: entered allmulticast mode
[   95.296721][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'.
[   95.313980][ T8433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.633'.
[   95.517256][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[   95.524927][ T8444] netlink: 'syz.2.638': attribute type 12 has an invalid length.
[   95.581982][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[   95.583034][ T8447] netlink: 208 bytes leftover after parsing attributes in process `syz.3.640'.
[   95.585245][ T8444] netlink: 'syz.2.638': attribute type 12 has an invalid length.
[   96.234922][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'.
[   96.255969][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'.
[   96.412544][ T8504] netlink: 11 bytes leftover after parsing attributes in process `syz.3.653'.
[   96.813273][ T8532] veth3: entered promiscuous mode
[   97.105351][ T8559] validate_nla: 1 callbacks suppressed
[   97.105365][ T8559] netlink: 'syz.3.666': attribute type 1 has an invalid length.
[   97.247464][ T8569] IPVS: Error connecting to the multicast addr
[   98.224479][ T8620] netlink: 'syz.3.680': attribute type 1 has an invalid length.
[   98.372759][ T8630] veth5: entered promiscuous mode
[   98.397732][ T8632] batadv1: entered promiscuous mode
[   98.400331][ T8632] batadv1: entered allmulticast mode
[   99.102126][ T8680] ip6gre1: entered allmulticast mode
[   99.193635][ T8693] netlink: 'syz.2.699': attribute type 7 has an invalid length.
[   99.275516][ T8698] !: renamed from dummy0
[   99.341607][ T8707] netlink: 'syz.3.702': attribute type 1 has an invalid length.
[   99.344731][ T8707] netlink: 'syz.3.702': attribute type 2 has an invalid length.
[   99.349705][ T8707] netlink: 'syz.3.702': attribute type 8 has an invalid length.
[   99.613358][ T8732] netlink: 'syz.3.703': attribute type 10 has an invalid length.
[   99.625462][ T8732] syz_tun: entered promiscuous mode
[   99.650057][ T8732] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   99.672268][ T8732] netlink: 'syz.3.703': attribute type 10 has an invalid length.
[   99.675369][ T8732] bond0: left promiscuous mode
[   99.701561][ T8735] netlink: 'syz.3.703': attribute type 10 has an invalid length.
[   99.714607][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.734240][ T8732] team0: Port device bond0 added
[  100.710227][ T8843] : renamed from vlan1
[  100.753010][ T8843] netlink: 'syz.0.709': attribute type 83 has an invalid length.
[  100.909805][ T8858] bridge0: port 1(erspan0) entered blocking state
[  100.912646][ T8858] bridge0: port 1(erspan0) entered disabled state
[  100.921377][ T8858] erspan0: entered allmulticast mode
[  100.925269][ T8858] erspan0: entered promiscuous mode
[  100.931188][ T8858] erspan0: left allmulticast mode
[  100.933274][ T8858] erspan0: left promiscuous mode
[  100.936462][ T8858] bridge0: port 1(erspan0) entered disabled state
[  100.978709][ T8860] __nla_validate_parse: 14 callbacks suppressed
[  100.978723][ T8860] netlink: 272 bytes leftover after parsing attributes in process `syz.3.714'.
[  101.013265][ T8860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.714'.
[  101.079884][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'.
[  101.087639][ T8873] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  101.225815][ T8886] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  101.248613][ T8886] bond0: (slave wlan1): Releasing backup interface
[  101.263228][ T8886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'.
[  101.273116][ T8886] netlink: 14 bytes leftover after parsing attributes in process `syz.2.721'.
[  101.723587][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'.
[  102.595418][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'.
[  102.598548][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'.
[  105.773112][ T9001] vxcan1: entered allmulticast mode
[  105.876602][ T9011] bridge0: port 1(erspan0) entered blocking state
[  105.880108][ T9011] bridge0: port 1(erspan0) entered disabled state
[  105.883645][ T9011] erspan0: entered allmulticast mode
[  105.887449][ T9011] erspan0: entered promiscuous mode
[  105.893894][ T9012] bond0: (slave syz_tun): Releasing backup interface
[  105.902691][ T9012] team0: Port device bond0 removed
[  105.906643][ T9011] erspan0: left allmulticast mode
[  105.911397][ T9011] erspan0: left promiscuous mode
[  105.914381][ T9011] bridge0: port 1(erspan0) entered disabled state
[  105.995165][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'.
[  106.026570][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  106.227467][ T9041] bridge0: port 1(erspan0) entered blocking state
[  106.243709][ T9041] bridge0: port 1(erspan0) entered disabled state
[  106.246638][ T9041] erspan0: entered allmulticast mode
[  106.253356][ T9041] erspan0: entered promiscuous mode
[  106.261397][ T9041] erspan0: left allmulticast mode
[  106.263678][ T9041] erspan0: left promiscuous mode
[  106.266108][ T9041] bridge0: port 1(erspan0) entered disabled state
[  106.357582][ T9045] batadv0: left promiscuous mode
[  106.364863][ T9045] vxcan1: left allmulticast mode
[  106.391326][ T9045] bridge_slave_0: left allmulticast mode
[  106.483827][ T9045] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  106.492891][ T9045] geneve2: left promiscuous mode
[  106.505210][ T9045] geneve5: left promiscuous mode
[  106.506849][ T9045] geneve5: left allmulticast mode
[  106.515278][ T9045] veth3: left promiscuous mode
[  106.519811][ T9045] gretap2: left promiscuous mode
[  106.523265][ T9046] @: renamed from veth0_vlan
[  106.528744][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.532276][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  106.535866][   T13] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  106.540256][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.543814][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  106.547136][   T13] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  106.551622][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.555759][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  106.558727][   T13] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  106.561813][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.565094][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  106.567822][   T13] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  106.757549][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[  107.061706][ T9094] netlink: 'syz.3.774': attribute type 10 has an invalid length.
[  107.108206][ T9094] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.111475][ T9094] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.904177][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'.
[  107.907176][ T9113] netlink: 'syz.3.778': attribute type 5 has an invalid length.
[  107.911020][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'.
[  107.952353][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'.
[  108.109675][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  108.114591][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'.
[  108.396748][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'.
[  108.403807][ T9160] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  108.497592][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[  108.502370][ T9173] netlink: 'syz.0.792': attribute type 5 has an invalid length.
[  108.530349][ T9175] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  108.534888][ T9175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.571586][ T9179] netlink: 'syz.0.794': attribute type 4 has an invalid length.
[  108.866115][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  108.870704][ T9206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.574562][ T9240] netlink: 'syz.3.807': attribute type 1 has an invalid length.
[  109.596694][ T9240] bond2: entered promiscuous mode
[  109.599149][ T9240] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.638534][ T9240] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.641660][ T9240] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  109.646365][ T9240] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  109.654814][ T9240] bond2: (slave wireguard0): making interface the new active one
[  109.657810][ T9240] wireguard0: entered promiscuous mode
[  109.661302][ T9240] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  109.668676][ T9240] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  109.677000][ T9240] netlink: 'syz.3.807': attribute type 1 has an invalid length.
[  109.684193][ T9246] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[  109.690718][ T9246] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[  109.721014][ T9251] syzkaller1: entered promiscuous mode
[  109.722920][ T9251] syzkaller1: entered allmulticast mode
[  109.731471][ T9252] pimreg: entered allmulticast mode
[  110.268147][ T9273] netlink: 'syz.3.814': attribute type 1 has an invalid length.
[  110.326873][ T9276] veth5: entered promiscuous mode
[  110.329755][ T9273] bond2: (slave wireguard0): Releasing backup interface
[  110.332172][ T9273] wireguard0: left promiscuous mode
[  110.333967][ T9273] bond2: (slave wireguard1): making interface the new active one
[  110.336510][ T9273] wireguard1: entered promiscuous mode
[  110.343490][ T9273] bond2: (slave wireguard1): Releasing backup interface
[  110.346270][ T9273] wireguard1: left promiscuous mode
[  110.573173][ T9305] netlink: 'syz.2.824': attribute type 1 has an invalid length.
[  110.595167][ T9305] 8021q: adding VLAN 0 to HW filter on device bond11
[  110.598477][ T9306] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  110.612666][ T9305] bond11: (slave gretap3): making interface the new active one
[  110.616271][ T9305] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  110.675389][ T9311] nbd: couldn't find device at index 536870912
[  110.702400][ T9311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.704974][ T9311] IPv6: NLM_F_CREATE should be set when creating new route
[  110.707360][ T9311] IPv6: NLM_F_CREATE should be set when creating new route
[  110.709845][ T9311] IPv6: NLM_F_CREATE should be set when creating new route
[  110.768556][ T9311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.902235][ T9320] vlan3: entered promiscuous mode
[  110.904625][ T9320] vlan3: entered allmulticast mode
[  110.906812][ T9320] hsr_slave_1: entered allmulticast mode
[  111.101149][ T9326] syzkaller0: entered promiscuous mode
[  111.103416][ T9326] syzkaller0: entered allmulticast mode
[  111.738081][ T1272] tipc: Node number set to 769407839
[  112.103301][ T9345] openvswitch: netlink: Duplicate or invalid key (type 0).
[  112.106368][ T9345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.151696][ T9345] team0: Port device bond0 removed
[  112.161967][ T9345] team0: Mode changed to "activebackup"
[  112.165229][ T9345] vlan0: entered promiscuous mode
[  112.169004][ T9345] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  112.185240][ T9351] __nla_validate_parse: 11 callbacks suppressed
[  112.185254][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.834'.
[  112.192107][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.834'.
[  112.513814][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'.
[  112.562637][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.567103][ T9387] 8021q: adding VLAN 0 to HW filter on device team0
[  112.580386][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.588500][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  112.622237][ T9387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.632178][ T9387] veth1_vlan: left promiscuous mode
[  112.635225][ T9387] @: left promiscuous mode
[  112.639353][ T9387] @: entered promiscuous mode
[  112.646209][ T9387] veth1_vlan: entered promiscuous mode
[  112.652002][ T9387] veth1_macvtap: left promiscuous mode
[  112.654396][ T9387] veth0_macvtap: left promiscuous mode
[  112.657581][ T9387] veth0_macvtap: entered promiscuous mode
[  112.662015][ T9387] veth1_macvtap: entered promiscuous mode
[  112.670335][ T9387] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.675660][ T9387] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.680063][ T9387] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.703355][ T9387] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.706357][ T9387] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.714749][ T9387] 8021q: adding VLAN 0 to HW filter on device bond6
[  112.717545][ T9387] 8021q: adding VLAN 0 to HW filter on device bond7
[  112.721259][ T9387] 8021q: adding VLAN 0 to HW filter on device bond8
[  112.731160][ T9387] 8021q: adding VLAN 0 to HW filter on device bond9
[  112.735243][ T9387] 8021q: adding VLAN 0 to HW filter on device bond10
[  112.761454][ T9395] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  112.766596][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.770543][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.773196][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  112.773436][ T9410] netlink: 76 bytes leftover after parsing attributes in process `syz.0.847'.
[  112.775810][   T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  112.775852][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.775863][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.775872][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  112.790891][   T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  112.803003][ T9387] syz.2.842 (9387) used greatest stack depth: 19384 bytes left
[  112.808684][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.816331][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.825084][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  112.836274][   T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  112.845110][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.847719][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.853880][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  112.857774][   T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  112.871159][ T6028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.873786][ T6028] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.876799][ T6028] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.880948][ T6028] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.898886][ T5848] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  112.920598][ T5848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.984610][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'.
[  112.992105][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'.
[  113.019733][ T9430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.048518][ T9428] tipc: Disabling bearer <eth:syzkaller0>
[  113.073719][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  113.076876][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  113.086360][ T9438] netlink: 264 bytes leftover after parsing attributes in process `syz.3.854'.
[  113.089389][ T9438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.854'.
[  113.090892][ T5848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.145800][ T9441] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  113.176909][ T9446] bridge0: port 1(erspan0) entered blocking state
[  113.180449][ T9446] bridge0: port 1(erspan0) entered disabled state
[  113.183312][ T9446] erspan0: entered allmulticast mode
[  113.187468][ T9446] erspan0: left allmulticast mode
[  113.338168][ T5848] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  113.368516][ T5848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.379230][ T9452] syzkaller0: entered promiscuous mode
[  113.381165][ T9452] syzkaller0: entered allmulticast mode
[  113.519611][ T5848] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  113.869867][ T9468] netlink: 'syz.0.860': attribute type 5 has an invalid length.
[  114.332591][ T9482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.343530][ T9482] syzkaller0: entered promiscuous mode
[  114.345878][ T9482] syzkaller0: entered allmulticast mode
[  114.382542][ T9480] tipc: Resetting bearer <eth:syzkaller0>
[  114.403417][ T9479] tipc: Resetting bearer <eth:syzkaller0>
[  114.423136][ T9479] tipc: Disabling bearer <eth:syzkaller0>
[  114.748895][ T9501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.751866][ T9502] syzkaller0: entered promiscuous mode
[  114.753681][ T9502] syzkaller0: entered allmulticast mode
[  114.756385][ T9501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.760676][ T9501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.768812][ T9501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.792133][ T9505] syzkaller1: entered promiscuous mode
[  114.794083][ T9505] syzkaller1: entered allmulticast mode
[  114.797188][ T9504] tipc: Resetting bearer <eth:syzkaller0>
[  114.808523][ T9504] tipc: Disabling bearer <eth:syzkaller0>
[  114.909540][ T9511] syz.3.870 uses old SIOCAX25GETINFO
[  115.427729][ T9539] netlink: 'syz.2.875': attribute type 3 has an invalid length.
[  115.819880][ T9470] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.823521][ T9470] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.830054][ T9470] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.833624][ T9470] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.895626][ T9553] netlink: 'syz.3.879': attribute type 2 has an invalid length.
[  117.136678][ T9627] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  117.139567][ T9628] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  117.158687][ T9628] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.204135][ T9628] __nla_validate_parse: 77 callbacks suppressed
[  117.204145][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  117.267707][ T9633] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.272214][ T9633] 8021q: adding VLAN 0 to HW filter on device team0
[  117.274632][ T9633] tipc: Resetting bearer <eth:team0>
[  117.277464][ T9633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.323027][ T9636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.500479][ T9661] netlink: 'syz.3.905': attribute type 1 has an invalid length.
[  117.522019][ T9651] syzkaller1: entered promiscuous mode
[  117.538475][ T9651] syzkaller1: entered allmulticast mode
[  117.593736][ T9660] gretap1: entered promiscuous mode
[  117.681845][ T9682] netlink: 'syz.0.910': attribute type 6 has an invalid length.
[  117.684594][ T9682] netlink: 176 bytes leftover after parsing attributes in process `syz.0.910'.
[  117.724474][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.910'.
[  118.668115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  119.148581][ T5845] Bluetooth: hci0: command tx timeout
[  124.678264][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  124.678279][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  125.308626][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.238090][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.028548][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  141.948399][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.898050][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  142.928967][ T9706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.934032][ T9706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  142.980924][ T9715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.914'.
[  143.054207][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[  143.064014][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  143.584928][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'.
[  143.588758][ T9747] netlink: 'syz.3.922': attribute type 5 has an invalid length.
[  143.592143][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.922'.
[  143.718287][ T5846] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.793995][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'.
[  143.801947][ T9758] netlink: 'syz.3.924': attribute type 5 has an invalid length.
[  143.804477][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.3.924'.
[  143.844452][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'.
[  143.865298][ T9765] 8021q: adding VLAN 0 to HW filter on device bond5
[  143.878049][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.910890][ T9772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'.
[  143.914170][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'.
[  144.118277][ T9800] openvswitch: netlink: IPv4 tun info is not correct
[  144.347998][ T9828] netlink: 'syz.3.941': attribute type 1 has an invalid length.
[  144.603052][ T9847] netlink: 'syz.3.946': attribute type 5 has an invalid length.
[  144.727405][ T9858] 8021q: VLANs not supported on vxcan1
[  145.202325][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803406a800: rx timeout, send abort
[  145.428306][ T9932] netlink: 'syz.0.967': attribute type 5 has an invalid length.
[  145.706533][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803406a800: abort rx timeout. Force session deactivation
[  145.742870][ T9959] netlink: 'syz.3.973': attribute type 5 has an invalid length.
[  145.914093][ T9968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  145.918172][ T9968] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  146.577442][ T9980] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  146.733097][T10000] netlink: 'syz.0.984': attribute type 1 has an invalid length.
[  146.749732][T10000] 8021q: adding VLAN 0 to HW filter on device bond6
[  146.761235][T10000] 8021q: adding VLAN 0 to HW filter on device bond6
[  146.763504][T10000] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  146.767438][T10000] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  146.813701][T10008] bond6: (slave bridge2): Enslaving as an active interface with a down link
[  148.267589][T10051] __nla_validate_parse: 20 callbacks suppressed
[  148.267599][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'.
[  149.403072][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1008'.
[  149.427280][T10097] bond7: (slave vcan2): The slave device specified does not support setting the MAC address
[  149.433021][T10097] bond7: (slave vcan2): Error -95 calling set_mac_address
[  149.635723][T10126] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1014'.
[  149.644795][T10126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1014'.
[  149.778356][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'.
[  149.818421][ T5897] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  149.830979][T10138] tipc: Resetting bearer <eth:team0>
[  149.841381][T10138] bond6: (slave bridge2): Releasing active interface
[  149.854819][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'.
[  149.871465][T10150] syzkaller0: entered promiscuous mode
[  149.873872][T10150] syzkaller0: entered allmulticast mode
[  149.894121][T10151] syzkaller0: left promiscuous mode
[  149.896335][T10151] syzkaller0: left allmulticast mode
[  149.910528][T10149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.949768][T10149] tipc: Resetting bearer <eth:syzkaller0>
[  149.973043][T10149] tipc: Disabling bearer <eth:syzkaller0>
[  150.029756][T10163] vlan2: entered promiscuous mode
[  150.031750][T10163] bond0: entered promiscuous mode
[  150.177354][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  150.200273][T10174] team0: Mode changed to "activebackup"
[  150.208175][T10174] tipc: Enabled bearer <eth:team0>, priority 0
[  150.339096][ T5897] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  150.388323][ T5877] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  150.584929][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'.
[  150.598779][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1029'.
[  150.645428][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  150.728957][T10211] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.732942][T10211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.736869][T10211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.744071][T10211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  150.797467][T10211] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.804244][T10211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.821268][T10211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.839501][T10211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  150.917557][T10211] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.927122][T10211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.932679][T10211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.936829][T10211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  151.029025][T10211] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.032506][T10211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.037807][T10211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  151.044544][T10211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  151.143580][ T5714] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.146478][ T5714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  151.150388][ T5714] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  151.153444][ T5714] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  151.188210][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.191334][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  151.194363][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  151.197189][   T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  151.206290][ T5714] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.209333][ T5714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  151.212270][ T5714] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  151.215399][ T5714] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  151.226869][ T5714] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.230801][ T5714] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  151.234302][ T5714] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  151.237782][ T5714] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  151.468079][T10263] netlink: 'syz.2.1044': attribute type 15 has an invalid length.
[  151.468274][   T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  151.473719][   T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  151.519023][T10263] netlink: 'syz.2.1044': attribute type 15 has an invalid length.
[  151.998056][ T5897] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  152.951273][T10330] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  153.186516][T10347] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.190581][T10347] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.717543][T10369] __nla_validate_parse: 8 callbacks suppressed
[  153.717553][T10369] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1066'.
[  153.725608][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'.
[  155.352165][T10425] netlink: 'syz.0.1079': attribute type 42 has an invalid length.
[  155.407690][T10428] vxcan1 speed is unknown, defaulting to 1000
[  155.418566][T10428] vxcan1 speed is unknown, defaulting to 1000
[  155.423171][T10428] vxcan1 speed is unknown, defaulting to 1000
[  155.459360][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'.
[  155.548006][    C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  155.593362][T10449] bridge0: port 1(erspan0) entered blocking state
[  155.595648][T10449] bridge0: port 1(erspan0) entered disabled state
[  155.600554][T10449] erspan0: entered allmulticast mode
[  155.604146][T10449] erspan0: left allmulticast mode
[  155.637790][T10428] infiniband syz2: set active
[  155.640539][ T1272] vxcan1 speed is unknown, defaulting to 1000
[  155.640635][T10428] infiniband syz2: added vxcan1
[  155.690541][T10428] RDS/IB: syz2: added
[  155.695013][T10428] smc: adding ib device syz2 with port count 1
[  155.697351][T10428] smc:    ib device syz2 port 1 has pnetid 
[  155.704582][ T1272] vxcan1 speed is unknown, defaulting to 1000
[  155.717641][T10428] vxcan1 speed is unknown, defaulting to 1000
[  155.915985][T10428] vxcan1 speed is unknown, defaulting to 1000
[  156.058690][ T5845] Bluetooth: hci3: link tx timeout
[  156.061425][ T5845] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  156.064817][ T5845] Bluetooth: hci3: link tx timeout
[  156.066445][ T5845] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  156.096278][T10428] vxcan1 speed is unknown, defaulting to 1000
[  156.127752][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1094'.
[  156.159509][T10491] tipc: New replicast peer: 255.255.255.255
[  156.163015][T10491] tipc: Enabled bearer <udp:syz2>, priority 10
[  156.169638][T10491] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  156.199133][T10428] vxcan1 speed is unknown, defaulting to 1000
[  156.305248][ T9709] ==================================================================
[  156.308029][ T9709] BUG: KASAN: slab-use-after-free in string+0x231/0x2b0
[  156.310436][ T9709] Read of size 1 at addr ffff888027c881a0 by task udevd/9709
[  156.313761][ T9709] 
[  156.314620][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: udevd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  156.314631][ T9709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.314635][ T9709] Call Trace:
[  156.314639][ T9709]  <TASK>
[  156.314642][ T9709]  dump_stack_lvl+0x189/0x250
[  156.314654][ T9709]  ? __kasan_check_byte+0x12/0x40
[  156.314665][ T9709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.314674][ T9709]  ? lock_release+0x4b/0x3e0
[  156.314685][ T9709]  ? __virt_addr_valid+0x4a5/0x5c0
[  156.314695][ T9709]  print_report+0xca/0x240
[  156.314703][ T9709]  ? string+0x231/0x2b0
[  156.314709][ T9709]  kasan_report+0x118/0x150
[  156.314721][ T9709]  ? string+0x231/0x2b0
[  156.314727][ T9709]  string+0x231/0x2b0
[  156.314734][ T9709]  vsnprintf+0x739/0xf00
[  156.314747][ T9709]  add_uevent_var+0x1cc/0x450
[  156.314757][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.314765][ T9709]  ? __pfx_add_uevent_var+0x10/0x10
[  156.314777][ T9709]  ib_device_uevent+0x79/0xa0
[  156.314786][ T9709]  dev_uevent+0x48f/0x7a0
[  156.314796][ T9709]  ? __pfx_dev_uevent+0x10/0x10
[  156.314804][ T9709]  ? __kasan_kmalloc+0x93/0xb0
[  156.314812][ T9709]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  156.314823][ T9709]  ? uevent_show+0x15a/0x310
[  156.314830][ T9709]  uevent_show+0x19f/0x310
[  156.314838][ T9709]  dev_attr_show+0x58/0xc0
[  156.314845][ T9709]  ? __pfx_dev_attr_show+0x10/0x10
[  156.314853][ T9709]  sysfs_kf_seq_show+0x310/0x490
[  156.314861][ T9709]  seq_read_iter+0x4ea/0xe10
[  156.314874][ T9709]  vfs_read+0x4d0/0x980
[  156.314885][ T9709]  ? __pfx_vfs_read+0x10/0x10
[  156.314896][ T9709]  ksys_read+0x145/0x250
[  156.314905][ T9709]  ? __pfx_ksys_read+0x10/0x10
[  156.314913][ T9709]  ? rcu_is_watching+0x15/0xb0
[  156.314921][ T9709]  ? do_syscall_64+0xbe/0x3b0
[  156.314930][ T9709]  do_syscall_64+0xfa/0x3b0
[  156.314939][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.314946][ T9709]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.314954][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.314961][ T9709] RIP: 0033:0x7fef9eb16b6a
[  156.314969][ T9709] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  156.314975][ T9709] RSP: 002b:00007fffdfb02818 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  156.314985][ T9709] RAX: ffffffffffffffda RBX: 0000556c07092870 RCX: 00007fef9eb16b6a
[  156.314990][ T9709] RDX: 0000000000001000 RSI: 0000556c07055690 RDI: 0000000000000008
[  156.314995][ T9709] RBP: 0000556c07092870 R08: 0000000000000008 R09: 0000000000000010
[  156.314999][ T9709] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
[  156.315004][ T9709] R13: 0000000000003fff R14: 00007fffdfb02cf8 R15: 000000000000000a
[  156.315011][ T9709]  </TASK>
[  156.315014][ T9709] 
[  156.412749][ T9709] Allocated by task 10428:
[  156.414261][ T9709]  kasan_save_track+0x3e/0x80
[  156.415772][ T9709]  __kasan_kmalloc+0x93/0xb0
[  156.417225][ T9709]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  156.419237][ T9709]  kstrdup+0x42/0x100
[  156.420516][ T9709]  kobject_set_name_vargs+0x61/0x110
[  156.422176][ T9709]  dev_set_name+0xd4/0x120
[  156.423618][ T9709]  ib_register_device+0x12c/0x1380
[  156.425280][ T9709]  rxe_register_device+0x1ef/0x310
[  156.426970][ T9709]  rxe_net_add+0x81/0x110
[  156.428411][ T9709]  rxe_newlink+0xdd/0x190
[  156.429831][ T9709]  nldev_newlink+0x4a5/0x5a0
[  156.431368][ T9709]  rdma_nl_rcv+0x6ae/0x980
[  156.433201][ T9709]  netlink_unicast+0x82f/0x9e0
[  156.434756][ T9709]  netlink_sendmsg+0x805/0xb30
[  156.436289][ T9709]  __sock_sendmsg+0x21c/0x270
[  156.437827][ T9709]  ____sys_sendmsg+0x505/0x830
[  156.439331][ T9709]  ___sys_sendmsg+0x21f/0x2a0
[  156.440870][ T9709]  __x64_sys_sendmsg+0x19b/0x260
[  156.442626][ T9709]  do_syscall_64+0xfa/0x3b0
[  156.444348][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.446275][ T9709] 
[  156.447073][ T9709] Freed by task 10496:
[  156.448401][ T9709]  kasan_save_track+0x3e/0x80
[  156.449926][ T9709]  kasan_save_free_info+0x46/0x50
[  156.451573][ T9709]  __kasan_slab_free+0x5b/0x80
[  156.453411][ T9709]  kfree+0x18e/0x440
[  156.454786][ T9709]  kobject_rename+0x38f/0x420
[  156.456626][ T9709]  device_rename+0x15d/0x1f0
[  156.458628][ T9709]  ib_device_rename+0x23d/0x660
[  156.460741][ T9709]  nldev_set_doit+0x29f/0x480
[  156.462785][ T9709]  rdma_nl_rcv+0x6ae/0x980
[  156.464711][ T9709]  netlink_unicast+0x82f/0x9e0
[  156.466736][ T9709]  netlink_sendmsg+0x805/0xb30
[  156.468752][ T9709]  __sock_sendmsg+0x21c/0x270
[  156.470784][ T9709]  ____sys_sendmsg+0x505/0x830
[  156.472708][ T9709]  ___sys_sendmsg+0x21f/0x2a0
[  156.474674][ T9709]  __x64_sys_sendmsg+0x19b/0x260
[  156.476745][ T9709]  do_syscall_64+0xfa/0x3b0
[  156.478685][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.481117][ T9709] 
[  156.482161][ T9709] The buggy address belongs to the object at ffff888027c881a0
[  156.482161][ T9709]  which belongs to the cache kmalloc-8 of size 8
[  156.487753][ T9709] The buggy address is located 0 bytes inside of
[  156.487753][ T9709]  freed 8-byte region [ffff888027c881a0, ffff888027c881a8)
[  156.492706][ T9709] 
[  156.493722][ T9709] The buggy address belongs to the physical page:
[  156.496400][ T9709] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027c88520 pfn:0x27c88
[  156.500186][ T9709] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  156.502687][ T9709] page_type: f5(slab)
[  156.504034][ T9709] raw: 00fff00000000000 ffff88801a441500 0000000000000000 dead000000000001
[  156.506895][ T9709] raw: ffff888027c88520 000000000080007e 00000000f5000000 0000000000000000
[  156.509761][ T9709] page dumped because: kasan: bad access detected
[  156.511908][ T9709] page_owner tracks the page as allocated
[  156.513813][ T9709] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10021, tgid 10019 (syz.2.990), ts 147063871938, free_ts 110468434184
[  156.520071][ T9709]  post_alloc_hook+0x240/0x2a0
[  156.521621][ T9709]  get_page_from_freelist+0x21e4/0x22c0
[  156.523463][ T9709]  __alloc_frozen_pages_noprof+0x181/0x370
[  156.525401][ T9709]  alloc_pages_mpol+0x232/0x4a0
[  156.527042][ T9709]  allocate_slab+0x8a/0x370
[  156.528559][ T9709]  ___slab_alloc+0xbeb/0x1410
[  156.530160][ T9709]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  156.532287][ T9709]  kvasprintf+0xdc/0x190
[  156.533651][ T9709]  kobject_set_name_vargs+0x61/0x110
[  156.535333][ T9709]  kobject_init_and_add+0xdd/0x190
[  156.537018][ T9709]  net_rx_queue_update_kobjects+0x221/0x740
[  156.538991][ T9709]  netdev_register_kobject+0x21f/0x310
[  156.540838][ T9709]  register_netdevice+0x126c/0x1ae0
[  156.542560][ T9709]  __ip_tunnel_create+0x3e7/0x560
[  156.544257][ T9709]  ip_tunnel_init_net+0x2ba/0x800
[  156.545947][ T9709]  ops_init+0x35c/0x5c0
[  156.547272][ T9709] page last free pid 9290 tgid 9290 stack trace:
[  156.549320][ T9709]  __free_frozen_pages+0xbc4/0xd30
[  156.550998][ T9709]  __tlb_remove_table+0x2d2/0x3b0
[  156.552657][ T9709]  tlb_remove_table_rcu+0x85/0x100
[  156.554340][ T9709]  rcu_core+0xcab/0x1770
[  156.555681][ T9709]  handle_softirqs+0x286/0x870
[  156.557217][ T9709]  __irq_exit_rcu+0xca/0x1f0
[  156.558782][ T9709]  irq_exit_rcu+0x9/0x30
[  156.560164][ T9709]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  156.561987][ T9709]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.563895][ T9709] 
[  156.564678][ T9709] Memory state around the buggy address:
[  156.566438][ T9709]  ffff888027c88080: 05 fc fc fc 02 fc fc fc 06 fc fc fc 03 fc fc fc
[  156.569053][ T9709]  ffff888027c88100: 05 fc fc fc 03 fc fc fc 05 fc fc fc 05 fc fc fc
[  156.571558][ T9709] >ffff888027c88180: 00 fc fc fc fa fc fc fc 03 fc fc fc 04 fc fc fc
[  156.574129][ T9709]                                ^
[  156.575763][ T9709]  ffff888027c88200: 03 fc fc fc 04 fc fc fc 05 fc fc fc 04 fc fc fc
[  156.578326][ T9709]  ffff888027c88280: 03 fc fc fc fa fc fc fc 03 fc fc fc fa fc fc fc
[  156.580902][ T9709] ==================================================================
[  156.601938][ T9709] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  156.604314][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: udevd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  156.608079][ T9709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.611273][ T9709] Call Trace:
[  156.612364][ T9709]  <TASK>
[  156.613348][ T9709]  dump_stack_lvl+0x99/0x250
[  156.614892][ T9709]  ? __asan_memcpy+0x40/0x70
[  156.616486][ T9709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.618207][ T9709]  ? __pfx__printk+0x10/0x10
[  156.619745][ T9709]  vpanic+0x281/0x750
[  156.621086][ T9709]  ? preempt_schedule+0xae/0xc0
[  156.622687][ T9709]  ? __pfx_vpanic+0x10/0x10
[  156.624194][ T9709]  ? preempt_schedule_common+0x83/0xd0
[  156.626009][ T9709]  ? preempt_schedule+0xae/0xc0
[  156.627621][ T9709]  ? __pfx_preempt_schedule+0x10/0x10
[  156.629327][ T9709]  panic+0xb9/0xc0
[  156.630538][ T9709]  ? __pfx_panic+0x10/0x10
[  156.631989][ T9709]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  156.633908][ T9709]  ? string+0x231/0x2b0
[  156.635257][ T9709]  check_panic_on_warn+0x89/0xb0
[  156.636882][ T9709]  ? string+0x231/0x2b0
[  156.638239][ T9709]  end_report+0x78/0x160
[  156.639660][ T9709]  kasan_report+0x129/0x150
[  156.641139][ T9709]  ? string+0x231/0x2b0
[  156.642510][ T9709]  string+0x231/0x2b0
[  156.643865][ T9709]  vsnprintf+0x739/0xf00
[  156.645295][ T9709]  add_uevent_var+0x1cc/0x450
[  156.646835][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.648829][ T9709]  ? __pfx_add_uevent_var+0x10/0x10
[  156.650500][ T9709]  ib_device_uevent+0x79/0xa0
[  156.652007][ T9709]  dev_uevent+0x48f/0x7a0
[  156.653393][ T9709]  ? __pfx_dev_uevent+0x10/0x10
[  156.654967][ T9709]  ? __kasan_kmalloc+0x93/0xb0
[  156.656504][ T9709]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  156.658335][ T9709]  ? uevent_show+0x15a/0x310
[  156.659832][ T9709]  uevent_show+0x19f/0x310
[  156.661247][ T9709]  dev_attr_show+0x58/0xc0
[  156.662670][ T9709]  ? __pfx_dev_attr_show+0x10/0x10
[  156.664296][ T9709]  sysfs_kf_seq_show+0x310/0x490
[  156.665891][ T9709]  seq_read_iter+0x4ea/0xe10
[  156.667431][ T9709]  vfs_read+0x4d0/0x980
[  156.668822][ T9709]  ? __pfx_vfs_read+0x10/0x10
[  156.670412][ T9709]  ksys_read+0x145/0x250
[  156.671828][ T9709]  ? __pfx_ksys_read+0x10/0x10
[  156.673419][ T9709]  ? rcu_is_watching+0x15/0xb0
[  156.675023][ T9709]  ? do_syscall_64+0xbe/0x3b0
[  156.676585][ T9709]  do_syscall_64+0xfa/0x3b0
[  156.678112][ T9709]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.680164][ T9709]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  156.682169][ T9709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.684069][ T9709] RIP: 0033:0x7fef9eb16b6a
[  156.685554][ T9709] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83
[  156.691899][ T9709] RSP: 002b:00007fffdfb02818 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  156.695178][ T9709] RAX: ffffffffffffffda RBX: 0000556c07092870 RCX: 00007fef9eb16b6a
[  156.698402][ T9709] RDX: 0000000000001000 RSI: 0000556c07055690 RDI: 0000000000000008
[  156.701748][ T9709] RBP: 0000556c07092870 R08: 0000000000000008 R09: 0000000000000010
[  156.705146][ T9709] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000
[  156.708364][ T9709] R13: 0000000000003fff R14: 00007fffdfb02cf8 R15: 000000000000000a
[  156.711481][ T9709]  </TASK>
[  156.713218][ T9709] Kernel Offset: disabled
[  156.714776][ T9709] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:32:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90007137090
R8 =ffff8881069c8237 R9 =1ffff11020d39046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1905 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef9efafc80 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000111e4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ff00 XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 000000000000ff00 XMM05=2a5d2f2d305b6566 5f64003062626e65
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000ff0000000000 XMM09=76752f7362726576 5f646e6162696e69
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82330a1f RBX=0000000000000000 RCX=ffff8881087b5640 RDX=0000000000000000
RSI=0000000004000000 RDI=0000000002000000 RBP=0000000000000000 RSP=ffffc90004e6f938
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88802a7f3d60 R13=0000000000000000 R14=ffff88810fafac80 R15=ffff8880282ac668
RIP=ffffffff81bfabe1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fef9efafc80 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdbb6d5e68 CR3=0000000023a36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffff0000 ffffffffffffffff XMM03=0000000000000000 ffffff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000041 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
