last executing test programs:

1.710238048s ago: executing program 0 (id=2719):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x14, '\x00', r0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r2, 0x2, 0x0, 0x7ff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0]}, 0x40) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}}, 0x20}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, 0x0) (async, rerun: 32)
close(0x4) (async, rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106)

1.70578053s ago: executing program 0 (id=2720):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000c061a030000000000000000056305033027179b159f4055639d00000405000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x44000)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@mcast1, 0x62, r1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8)
recvmmsg(r4, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x2, 0x22, 0x0)
r5 = accept$alg(r3, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r6, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48151}, 0x20004884)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newsa={0x1d8, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e24, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @sec_ctx={0x70, 0x8, {0x6c, 0x8, 0x1, 0x1, 0x64, "b9d862ace452a9fd888bbfa0a1bbafe2f44a0708a401c3e885d78ddf6a376ccde4de84f1730439f5f531276cca3e83d1960620ea58509e5d40a341660e0b259bd8449289e2d599fc01ad2756e6c009ca8e6a4840864883e1ad5fa0b30e29c8708a129732"}}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x1d8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.639900324s ago: executing program 0 (id=2721):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x9, 0x2, 0x7ffb, 0x9, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000000000000008001b000000000017e8a8f673621b8863c9c12520d6218779d260115511b1bff2c0f6e3febae7b3ed44bc0b7b39b8ccff4099bd436bd29adf87d7a4fa7b2d787024e43066e5d2a4b9b57552fb9d1ccf42c202c3590b92e1c78ed7aba707725a22725d03ec80fe69b6621631e1"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x9, 0x2000000000000217, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000380), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000beeccef36f012372a9f84c5d8ab7d3009d29a893faaa68787dd74b949974d6afe83dac653366584b0180790cc252e67a64ef1942b2b3bffeaacad5024bf7330861c9c320cc3b96415ce84245b1315749b52aaae3e79a2e722b19e92aceb1a34735bf5fec6b27b8495f3c3b2a6f2fe5397b982ef8977270533026fc4558a5e3d00752d6f52b080504aa5898bb55d4163f95f469ebf93ba4de450d767636144823561e2075f4645b81bd5e13de9c8039bd9592642d62fdac836d026a3690033f1c21a2b7770b6137bd0cc80e"], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x2)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

750.54467ms ago: executing program 0 (id=2729):
r0 = socket(0x0, 0x803, 0x2)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x24)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b120500000033da945186d9914b01006272696483650000140002800500190005002bb83c3584476ca6000067054edbade77a70e8d5dd131a6a61ff57400c88bcf2eb0061e7158fa0553d1117517e3a95c4a9153fbb"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
socket$unix(0x1, 0x1, 0x0)

526.28951ms ago: executing program 0 (id=2731):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x101, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000c6105daaf67aed610000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000000000400048028000380d8fd010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r4, @ANYBLOB="08000500", @ANYRES32=r4], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830007000000000038873bd5eb000100677265a5ec98798002000600ac1414bb0500fbff01000000060010004e2100000500000e0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendfile(r2, r1, &(0x7f0000000080)=0x1ff, 0x7)

525.304173ms ago: executing program 0 (id=2732):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000013c0)=@newtaction={0x1090, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x107c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x1048, 0x17, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xaf3ae}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x1090}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x7400}, 0x48000)
writev(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)="cffeb572da472672fb91691e7cf556edc6aa98a5cfc262857f23e5d67d9c1269ecba1a2d86903fdcfbe6b6759b59e2f28a995813d8dc86cfd01b41f542b559e0061a53e6cfa8d95a3d62c34bae7ef3b300b0861b", 0x54}, {&(0x7f0000000200)="ff786e2fd60b077388600a93fe253667d4bff17aee905ad2285c754e5130ef31c63629a9db296841667d4059307d88df31a2d72bf74d0963ea629e1b1b23e1b2acffae4f1391098d51f6f1cc1667a1c3bb2659d6a88f8e4ad87c13b1d29c4d684523d541b988cfc04821971355b0b2d78ee1105b32040acb3f47c2513c8466db0e1bee3b4f418f3549081f14e1f6b04e58cf77a6e460afed1bbd79aaab273fb088880ee3db9ecfde5153e9010208808b02198b3e4fb1d8c4bb38d20f51f7d6fbf86c8f6c4a9498afca8086d9986b999f88400fb219738d", 0xd7}, {&(0x7f0000000140)="b4db1fbe306dde20ad72651f5c1d6c082c8d5b088c70fb221db36506fa745674df34f6889bc463f674ebfbf093d7fc4340333a462ec148f5d68967ee30c5815238d3ec06bcf286ec5e01c88843e82fb18df02a08ca0c8d70bfc970133440f0ab", 0x60}, {&(0x7f0000000300)="2a044b2974108457c10b7a8114e4cd0e57fad5f571294f505ecdf165aa1fe7367ae6c48b710b5aa10ee1746fbed8ca71717572ca776566c9fa6679b9c0e7f190fa759c1ff82008cae65325a166b42765123c25c4a37fa86cd88b4162a3fbb6cf1da96be4d1", 0x65}, {&(0x7f0000000380)="e9ec56bd077b22236c7fd8dc1be551590aba6b726d3e0922f32480f814062d7033bff811fa578787d169bc65a6da637b3b0467772b", 0x35}, {&(0x7f0000000400)}, {&(0x7f0000000440)="d4994ff850b3ce3008013704227f5dcc054c7db830b9f5614ac9162558e9a73c3fe931e3e02a0e4f445429520f3eae0dc0f4609267f147809ea6dbe603fca9b3416cdbad0604009ab23c6d665a7d46", 0x4f}, {&(0x7f00000004c0)="a2d39c216a3573c80aa0c8068f99dda9b2b40b256d15470aff6e400e045f888b385c32d5b5be7b319b00853e2ffa4d64a0005a57d15652703e1d0c6ce1bb847cebfaeafbe009d1e40d2afb61a33ba8f420408f323cccf7f91a176e19daa63ff7231755d34a3e873f82cf4a46c4", 0x6d}, {&(0x7f0000000540)="f393397666dd38546f121d71e164923ea7b6e6c333c5d3d0b94dbe71d5c5fbb25d9eda28cb038c098094b9d4cbb262087039327afefe40d44c930beeac78d853e22aa50a704e6f97405e8ac104381f4c403358ffa0eaee82ace22c622fe655132f5857009746b533ca192ed974aa55ca288194", 0x73}], 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000004c534f8462d3b7e7ff624e0b33b13aca17d47b96ed476aa4521aaf07a8f984684b7fb670a99ea8299ff0ffd62c9e3e3f39dec1935a6fc8386558c432839c36c35a045c50e809ffa977a578fb3c32c8fe0812376f8eb24a2426463f6f1033c8e23d29f35c2ffb32c357bcea349a58ac90544802bf3c6daf6c43a70ebe67ae36bd3e266bfa765171ce5e5d6305ce776e7f8880d47bea5232d3de4ef2f651886172ad61d166f0a26700d1522f624da0eec82745bc6a6e6977f28c45dfb138f1d6bc8ffa8055f358f02e5aee6dbc65f84ef642fe47e06", @ANYRES32, @ANYBLOB="7c6c037200"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000010000000100"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0xfffffffffffffe5e)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000440)={r10, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90)
setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001180)={r10, 0x3, 0x1, 0x8}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x2}, 0x8)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018240000", @ANYRES32=r5, @ANYBLOB="0000000002000000180000000000000000000000020000000c1440000800000037310001fcffffffbf91000000000000b7020000010002008500000084000000b700000000000000950000000000000086590d8b7fc86bb03536cee776124b38aca783fe242f0eca2436d713ca150b2993078dacfd77f491b397d64e75fc7f087dde3a10a3b12434a0623758ba2be15d87b995742def97edc8ea7d3bc77f74ae199aaeb6f891388129f276b7955ac165bb2996b1f48d61f073a87571a9c3bba4a052916c05a683d2aae10e80d97bac7669a2f306f1fa60b8c4eda2775df41b1980429a5332ca4e4465dba282c6a428e388af71745e6883402ccdff6100"], &(0x7f0000000b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x16d79, 0xffffffffffffffff, 0x4, &(0x7f0000000c00), &(0x7f0000000c40)=[{0x0, 0x1, 0x10, 0xa}, {0x4, 0x1, 0xd, 0x3}, {0x1, 0x1, 0x5, 0xa}, {0x23, 0x1, 0xd, 0xb}]}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020002eafffffff9ffffffed000000"], 0x50)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x18)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000001000000030000000600000008000000", @ANYRES32=r3, @ANYBLOB="0c7e73eaf9767d090000e7ff00"/25, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0300000003000000050000000100"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f80)={{r3, <r14=>0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)='%pB    \x00'}, 0x20)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB="03000000030000000300"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x13, 0x32, &(0x7f0000002640)=ANY=[@ANYBLOB="18000000acf7ffff00000000fa8a000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a0000100000000000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000ad5889fc31dfc082650e3933329bba2c8940604cc7cb5ce89fe2367253621a594985a7c2dc6b4d191954246de973c9e5bca76d3f628af4df6f43d97d40e008accf8684bfad1c993772699fec00b972e0f6861e02d0db594a773a447d5588b8dfd6948e8a976296", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000085100000010000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x3, 0x4c, &(0x7f0000000e80)=""/76, 0x41100, 0x0, '\x00', r4, @fallback=0x26, r7, 0x8, &(0x7f00000009c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0xa, 0x7, 0xdf}, 0x10, 0xffffffffffffffff, r11, 0x1, &(0x7f0000001040)=[0xffffffffffffffff, r13, r12, r13, r14, r15], &(0x7f0000001080)=[{0x3, 0x3, 0xf, 0xa}]}, 0x94)

379.671983ms ago: executing program 2 (id=2734):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x80800)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000380)={0x6, {{0xa, 0x4e22, 0x6, @mcast1, 0xc589}}, {{0xa, 0x4e22, 0x10, @local, 0x4}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

321.264996ms ago: executing program 2 (id=2735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001feb0f973fcd136cb711ccaaddd0e641e57c1233f45bdeef822b0114f4c6f5d4c667f266ab753c553175de1b19625a73a301e204c3a7fd6ad861b8bd99d1b6f2e552d5036209e253c7f42a1d", @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="10005e80080002000000000104000100"], 0x2c}}, 0x0)

319.826642ms ago: executing program 2 (id=2736):
socket(0x10, 0x80002, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x18, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000820804001c0012800b00010062726964676500000c000280eb1dd5862b6bfbf7061c31ff04000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000820804001c0012800b00010062726964676500000c000280eb1dd5862b6bfbf7061c31ff04000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x94)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={<r3=>0x0, @in6={{0xa, 0x4e24, 0x550, @private0, 0x10001}}, [0x8, 0x4, 0x2, 0x90, 0x6078, 0x2, 0xffffffffffffff80, 0x4, 0x2, 0x1, 0x2, 0x100000001, 0x6, 0x8e1, 0x7]}, &(0x7f0000000140)=0x100)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="05000300a51006000a00"], 0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x48, 0x5a, 0x301, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

250.186798ms ago: executing program 2 (id=2737):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0}) (async, rerun: 32)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50) (async)
unshare(0x22020600) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x0, 0x0, @void, @value=r6}, 0x20)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r7, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r8}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async, rerun: 32)
r11 = socket(0x10, 0x803, 0x0) (rerun: 32)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8) (async)
sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)

249.790365ms ago: executing program 2 (id=2738):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000430001002bbd7100fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x3, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket(0x21, 0x80000, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003904fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="2032030000000000280012800e0001006970366772657461207000000014000280050008003600000005000b00080000"], 0x48}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r10}, 0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r11}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x3, {0x1, 0x0, 0x4}, 0xfe}, 0x18)
socket$kcm(0x29, 0x5, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14)

179.490751ms ago: executing program 1 (id=2739):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', <r5=>0x0, 0x8000, 0x10, 0x2, 0xfff, {{0xd, 0x4, 0x1, 0x37, 0x34, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @multicast2, {[@ssrr={0x89, 0x1f, 0x57, [@multicast2, @multicast1, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}]}}}}})
sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="72385144f31378a363569380766aeab92f019c194b7a883dcf80ae21f4c07299de7f8be3d31c5772e1715837fd4e49311c7809b371f90ff52a1d8a6d2381870122fd8bcb4f30c3e86413965fe1d2370b75c9f492828f6bf894351b4506cb7fe6a518424af112126e927ec23745550135f7e1b21427d40acab5e4da7588b580e24c1607d1571ff26a0bd016b57025a5203d1e2f944f22973c69490df49ac4f0059554ee6e9b6a3ad305819e23b8f4383eb279724f66dcd3b62a09e1de168faf3aee1c49b06f71ea3c6f99f9dfb2454fe98248183d5ec59fdc13d7f90a469444fd922a2968cb7a7e79c5119624d960db38afae201d54213e4036d4c954a7", 0xfd}, {&(0x7f0000000300)="9bab86764286cd16c8ca189efe29e71bd04c9ccd55c28cdc1bbc8f6765966483600a1ff84e557cf0ea007ea0534798b70c26adaf7c353e3dfb35cb3ecce63cacb8f98a986eed2865839a320db7ee97e8d7a8ca56032a21523ba09103582699091f02cf5f231b60f5c311a167424417ae", 0x70}, {&(0x7f0000000380)="869f299f36ec472c92c33f4e4d7a12d97b9ed4c1c6ff03f335cf3229a7792dafcb2c4ed3d73455ae5dbc350931613c3780221e2354e2bc464985212fa7e6a207e3397cd81b667384d18809f09c2e588163cf", 0x52}, {&(0x7f0000000240)="b52ddab96336e5d2a35836d208e779fff814761235d01237c1aa2d914480979369adb5437755", 0x26}, {&(0x7f00000004c0)="ac16986bebf244d99e64ad9929c3096f74beab32aa8f9cb9304918ec1c3b0ee0dc3578bd58cf062ede6f9c8916a80e0b8830", 0x32}, {&(0x7f0000000500)="14a893ec57ee5fb259b5e58b46086ddef60ae0fc417fa45fdcc58eb477f511cbdfc6614d76c8a8ff5f9250bdf6bd4f7d", 0x30}, {&(0x7f00000005c0)="823cff527bec092028edbd697bce85a8cf20086e43dfc90abc1c1ad9ab59307671339527b4ddf62d199326a2f69b81a7457f2ae10d706ac684c64a75aec9ece48a7116b757344ca504f8fefbf03738eacab48f30f3407efb55cfb90f8d16b78afe014d150507d5c028edf9", 0x6b}], 0x7, &(0x7f00000007c0)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x16}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x10}}], 0xa8}, 0x8010)
close(r4)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x9, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x10000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

177.463249ms ago: executing program 1 (id=2740):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xffffffffffffff88, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000040)={0x66, "d94e74af30d8e7a7d76742af780fe58c1c11ca4f00adfa103dda0d57e8e3c3e95708d7a3ebfda5700be6561bf525d6ff8c02a568a55ee83425c3aa76a996e91d4ee9d9b5f80fda9932c861fbdb7c322db2e27ab8762000fdd673c66b4f38ba238116d02b39110e486ad6725a8187a855805a6d2eb7bacf6e9c5a2189e09c0752"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x70000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)

120.98817ms ago: executing program 1 (id=2741):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
getpeername$qrtr(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x74f0523acc367a96, 0x0)
ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0))
ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000100))
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)="5e1942afdc12961dc7b61b4fd13319f2179f2a7e31f79633dd56a18a10cb185dfffd700569a575186e1bc5c35189359a1ab87650f08d39b0a2db7e4e1abc82a924bea8112804cb6eeeb7f2e8448271ac21133e1bd7763354803b449042c91f3fd857b38f1756e82c8fe941b81d551cc598d580d3d7008baee678e28d044018672a1dac6879fb2fe6b8c6c1e3551e631663f7c3d1ef766d89", 0x98}, {&(0x7f0000000200)="64abc56bd39da9bf", 0x8}, {&(0x7f0000000240)="89106597f9d88b1ed0d6cd5c8a9920a2274d45aa274f0fb2e2ab8fe24f253f76465c61779012afbabf10960d0b336eb93d36b1fed70c32847f210fbd4d2fc1b0678937798da4612a2ad7533c86370e3f0d0b9c6cae3bf9d7d4207b214e3816bc5650b6eee2779e930422599071556ba88da176558abd3c95e76527cca8e3974542860096657763ba91356c3194857f4fe01fd6b2688552995a95f5062a20f100a537809725", 0xa5}, {&(0x7f0000000300)="972a18a1408d53242a7ff5c14350eb6bef3e042db0dd3cc3865d3a2ae6584715d9ec4e5c1cd9d60f9c5c5cb8b6ae12e49a18140f3434e9be015374586f3a1fb1036564b12fca2f3f0f5adbaf15fc98304de5224e13c53622c59ee3998f9ec21d8605c908b0808f495ee9ac392abfa6e4c9c461a2e606ba5472f9349f450326bb17a1da8f3d1055c5733e155d6cec7f46f7f8abfb884b2558f2d799eda01bb2807775df408014da9328239969278ed87034944cd525cfd8b2b7b04456a58ae2259d0a105e1c1f5330b329cf0f3de9d532d4ac4cf082d8e4861f745a548d5f4cc3181655a325e88df05b", 0xe9}, {&(0x7f0000000400)="d3a464c2ac917af16cc4e94e6eb9d43cd910a22377bdf77dca5ca10fbd2510100b50bee682f5445b511da0ea41f13510111583045e06dd", 0x37}, {&(0x7f0000000440)="d4d2f664b3dbb5f6245f72d8e9be62867f4c280b77227c0838477eb4d18a5f24c2226ea32ef3a689f7a25b28230dc258cffbadfd11ce975a7f09dc6ef96069eb3c697645da272ad168e15c5f5d7d98c7d67775edd2edf24815c2a96199e275bd0645035972162d49443e2342be87f8b60c85ab2c05d740c10be35d5bef6fcd78c192e1ada4a2524ce11e53141f9e68eeb963a48dbb9342b3ada84701f1d76f457100fffd5b6ca6b43cc5d12dec60845b969a8c15a15f22eca394426ab95723f19221bcd1733161c0e4cce528d3a2d3e699f5799290cddc35cf8f99ffcd00287a04", 0xe1}], 0x6)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f00000005c0)="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", 0x1000)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x60, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x10, 0x1, '%/^\x96)&@{*]\\\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x14, 0x1, '@[-$&:.\']^*\xad/-@\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4801}, 0x20048441)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001700))
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x100010, r2, 0x3b672000)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f0000001780))
socket$nl_route(0x10, 0x3, 0x0)
write$tcp_mem(r1, &(0x7f00000017c0)={0x4, 0x20, 0xc3cf, 0x20, 0xa}, 0x48)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001840)=[@in6={0xa, 0x4e23, 0x3a5c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, @in6={0xa, 0x4e23, 0x1, @local, 0x1}, @in6={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @multicast2}}, @in6={0xa, 0x4e23, 0x8, @private1, 0x9}, @in6={0xa, 0x4e21, 0x24fb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e23, 0x2, @empty, 0xfffffffb}, @in={0x2, 0x4e24, @multicast1}], 0xf4)
r5 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001940))
setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000001980)=0x7, 0x4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0xb008004}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10)
r8 = accept4$x25(0xffffffffffffffff, &(0x7f0000001b40), &(0x7f0000001b80)=0x12, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000001bc0)={0x4, 0x101, 0x7, 0x9e, 0xe, 0xb, 0x8, "18bf9451a78aaa6fbd64c97ad8da84b1c68cbd56", "de773f2a71e89a39559a3848217583db46e0d208"})
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001c00))
getsockname$l2tp6(r2, &(0x7f0000001c40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001c80)=0x20)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x6)
ioctl$sock_ax25_SIOCDELRT(r9, 0x890c, &(0x7f0000001cc0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002f40)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002f80)={&(0x7f0000001d40)="b16508e5f6ed10386e1ddfb0f9ff85c22c71b98d98e2c035c5a88d6d4727824bb9e77dcf70e72ac67fdbd2e72de5ceb7a287327d83e1015f6a40b4ce4cfccf4626b97528151b3304b7fd9e99db37e37920761ac88010acf17e8263bec009946e191368bc8b7e208f531c31f63399a911a4ddfcb217d6610d4683106b3afdecd1d9c4a2a86fbda763dde956399b9800598b6f2167e6cec7fc9ec1cd823783e807f1197b83bf9a41ab453c3ae73dbd637357ab3fe5d37c778142fb4fd9f34769e12906a61d41ded848c11c8115a853b3e8b0e1bc92089fd685ed3f2563d320c8681a8693d16e0bcaa53bfb7b4cf16a7e9b391888c0a2db69bbbb9abedb5e2a2c7bd46f39ac6604935393af3aad29a34cb88aa24756c2e17329deacd5f386d45fad489a514b3c6331192270ad05313385ff8e8c079372f633d6dd932a1c29c850407297cc590283a292a1d31317b59c82387d61885b7dcc62fc23bc094d6dbf3dbe362cb86b461879b9adbec01d50794fa7d7f7ed47d87bff7ef1f6c24991ab8739905254471478262d1d7da8f9cce0e7af32b02b2355807489c983de156f9a402453750efbae99711e463618cbd2c9faa6d403400ea0f6640d6383e702dd662aa21e5b2a15b91e11e49cd37980ab5bda88e716715275cddd4e08720a99d53da45a735b507af7d119af6072f0ebef9077a0f58f650a11997db340745016843a8bf41e145e6992aa8452ad593a62d18811b4495478685d6c8c1eaa06a10915b3191181dbd3741eae48a2a66d17eb41b4cd11be3b8b334e5671cbadd974f641d6eb5c5f566379ff3287cc52af456484be360948e37f40e83d9dc7de24d8380023bb339d85477f488e05d01a036c024df2816930efb9504d064e3e613b2c0845d3c5098e55c65e2f03427f59c4ddef2f60632ac0c3cfd72815d8916dd14bf5f69c260e68a8d8413f89852c86681dba4c5313619a6e3d8e0b5b8bf0a0aaf5d9d5663713ba3cbfcb8dc185b82a947a1a9b8677ce7f1a0e42ec1b2b5868ac3eb47e972db44c89bee0101d30ba375eaca531d69730ca95c23748beceb8712df4286fd89768b9711324a45345c2ef7b5b8dd4e7ade39f5efa32e50a2cc64efd332daa3b6a3abaef72ba4736b44e3a2c1c4a5dc89bcaf23d6ddb13f53336e2ccd0ea0c091de798520dfa3e19fcacc628256660c0712574e717065468ed4266108aa48eb0390a79818fe6457b91307618d201dc4cdb45d5e5dc0a60bcb8e37deff6f3d6aca0c904823bf5b37e2071ae0e405e3bcad2539695e8395562da201283e007b87fa0d6c18d1cd15acba8796581e8019178d4a370f103560da185a8e88fb58a798a124a8d52da83a7841438af61c84553240e0f0aa78498478c4077aeecdd0bc623c00720d46222ba124848d511a60b946646606478ad146184a7fa3e16741c4072faeaa5d89071d0badc14ee89f8c6f1697f6b6bf97fb41a0961a846d67d39f3fe8acb3fca74b350f7efc89ac87dde8884c351502c42e8872485bdc145c6f18801230e2543b765ac2da493a8d3b8c07a83a91377fd5c1e94bccc3c20163eaaa0ecb4903ad350aab0d8bb9a9ca0735c2c9f65835ff1eaec53d19a3c371822e7b5f65d5d21a959fab8a95f5e5194db38a7a4be5e0490b5894c244acd4a23058234272731aaf90fe76bdc2e2cd058e865c5ee89e8b941ce040ff792879d3dbae9244dab7129b8714be412729fac5591037dfaf3433a46a3278af6c37674db690d19182e9c64d106b39b8a0b993c8cdc0d6b2a4d81caefab8a3893a3b61a21069ca7ba74af083cb9ec9de6b02d635bd0c07053d39559e3679bcd5bab7dbfe363cd2d297d39a82bc50c76a0c28b3cc0f119c06bcd09e64d0c60cf7b4f5775d97cfb76b63810db0f0d5206b7dfbd1b6debf8c81f32eda3e77a00237ae515c19cfb279912eb63848a210171d97fbcb77ca413924ed053ef340536b4dd9f0997cfcd1d9797d91f73d1ab31230720d56853637fb050c0509b8f846defecdf412a217fe741c58c56b0128af4a348d111f670896642a54c9c19c2ff6450581e953d5bfc7616fff9026948281380a028099f703f96350093815705c2d1089cf6ef8fa34868af1dc4f8c5763b56a6ab687284b43aa5d8eb6cc4324d0a5b1676ab1d1d1d93948d0c000f0ee7c10655e00c0837032298157b5ee5a10b93c68d238f99bd18e54a4b829e60e833670f20e2945adf8729b6f23b3888e12cc40d99b61870771acbb73c8173eddd4870c77217c425691ce41061bc169d8888236ed7adb21dd390892b6ac20ad8c634594bbb008fd49fb963ed90187d575c033f3c0ad281c59235b698111c1a0f1e63e8552da4a539d214ae56a25be92a4cb6b93256a8c5e11a2f45eb81d35fe59453f4309b94808714e2e2fa6aebd803530d301fb16f85f228351b2953f636866f6a6cb03c0cf3bb35b1b828167b8358f453357be51add5f21c257f48c935eb42ab1007b7b67fb47846adbef0c6e7bc9887bff887bf178b2958a376eccff1d17be4135753745a27b750582598316f4b951ddecd0fde767aa46f1ec47e5c1ed879d125777d9ffc23bee4f1c62453ec5d9a78b5bf105e4580936489443cf21d89d59e7df6097a45054fd532737e189023edd89d3a85a16cdde466fb98bcbd66c1eda4275c15488db1578a451f97f3e5863bb2dd026a6667d4eb8038790160d5226822110b5ddcc5dbe85844e7603de26005c2bc3b7d07dfc1b124e10240cdb6bc4395908c0ea3665e04e06270d0bb3c003cd0f5317ab81aa412410097b0c564f5c8e750ea1f8302b3d6ecc48ad78234a25bb75a1218ddc168a8a03cf4fbff09af62a9f85588305ef46b3844108454ce4f943af1ef0675aa8256903521db598c42cdb1370a3d04c026e231ef07914199c37d9bea685ce56dae0d6727c98587d185e0279f06d7126f0071a868822487843458c60e45f14cfee52de36b8cb7f09378b4fe3e2029c6d56ddbd70ee6d2e3be50bea6443f6d642c26d7191e8b444e29911259f8f2889671f04e26908ce072abb0d296d0902e4e321982e5eee9c7c1e9e4097223cf0093bc05cd5e2b97acc4f963352462fa96bf53dd5d8513c8af876cc0449cdf336cf95a26538f75f71e02378f44d5dc8df6d9d533971d83291d0158b8637265a0e183b5549fb87fd9a948aaeab60cdb219747af5be72256459c992326988a4cacfc53315e89f395a71aba91ae7ace4d2dc0148e70a75f870c3dba531784c37e0ba84e8e1bd084bfdbd098e9c18390b322112563e2aa33e48436f4aa00ba1456ee392c11110918e9a9213dbd50db238f4d5874e8612c9727b14b5a62d6ef68ddb5fc60f1772bdb926c43afbd2bf074f6b5ef31520eb67f4deba6c4c52a44d1fd97a3b78be3873f3ea6bcb389beaee116f8d10f11265f6cfb1ed90f5b1591f80e5e202a71f10e84ac033db42f746cbf21442d46144f7a56a25889ba4ecef1b32a7c74ebb4a3b2800891e14fbb4aa8d1c764d4c9c74e9d5f1822b484c415236c21f1d6848b3ccddc2d2b2d0287947b4074d017496890d4c821814a8e6b030cd70838fe6d1387b43c19b6838ef928f944c5c9b4cc14f2837b05d674d176d5440b5a4bd12662935119c057b769ca9fe87a04f8b3b2e2905cd12c70a1358ea2a8d48ad2a513e94adf7ebebc066ba6f5b814366fcbfa84c9c1360de5a83aed200ad389078db779439970b7ac1619aa0701d157d43b96f3580760fd7dc5dfe27aed277f23caaf584440a576ef3d409842b62f3a5a8d1165994aaef8c43e8e4979e64df7ee1b301f92cec7ef1f966d33a3eb903e0f9b2f0fafd47a016403d12ce4629adf5b1af2a3e026793d754c481b0d6535e287d0a1029bbcc11b4cd00ad0cda491d44ffb56ca15652ddc08a55035a6bc040c5040089e1e22bcc5e4fd06f68116af0f8563c35f25fef06fce4633e1a0377fc19ef8524a611cd7f4b93df05f4db5c87822b30ee27871f96213e8ac50bbbb20995125b669f9a0e442ed5910223e025e1af67c69078248dcbac5b94c1034af8406121a547fd07d25c45b5529923f8004b122c2fd590ecd66dd28a039e957ee4801492c0c2820a3108ce56669212eca8fdcf012b9b2c3dcc74cce06afa1661b904990492e9202882539bde3d74152671d1d6376ae326eb234582a01fbef149d659b5062f3913c29f6793a7a0944130cb9463a609c963b7b76e65503b0fd1d595940be8c7d016a5f7464e44a01725fdf62dd964f6c8489cafb77d80069c98fbecb9aa55f1c7d1972603ca507f065c79eca522c7ab1f9ac92cecff3991c8b533037e33cdb8812c98ca158f97894f2e36351ec467abd05fcf11569d608f94af81f8d2d5cfc7a4d7fc79a2c16a8bcb18427ed126fd5a0e337d5ce1f6fefd0b4ad8e872e324fd509ec5a7a5df544245f2d1bb7bd048f3dec340c86ec47ea5e528b7445ce75eee7ffec79c33d51fa171f3d634893d27f8e9f894a6368445f30f919a8df7890a3055a1fa4f937ee0385524a4a9672feb43279717146e140298add09669d8cd95e0b680394c02a0054ef1bf9e8167d1917ec473abce1a28f44140055f4648d81c163e49d9c78e4ac24f63bea44d88d0b6de4b1520fd6539224d244388f09cd6ab7a4f5df38b3cfa66649d3afcdb6b9a5e56eaf4be1617fd3124ba45167dcc9fd4b8a61de16a432c3d4b5f0edee1f830e2f7f684942ca1695318392681955e9bce78d48c2be0c6249d0d9b6ef99f3cd28a3b69fb2ad9392d176de537d88243d627873cf15f49ba30c66d651cb4c8e1c91f59f0b08ecca48a42935c486aced46a566c99ef90bf1302a48399c1843fc787184d15061e5ebe715fe5ad2da5dfc99b998e988407d8d50c154816f0b77c3c5f509ba97a2ec6fcef13a23c9f1de50b89d432402e69745a24679bbba5d0e17b04fd6b70a356a71e8ca4a4e470a41e96f9915301cea4b39c708f87542dad5d154a03b8427c164d936eb5bc66c578a8e68d63a0fe73977399437697634ab459c6d3408ea03a80380edc192555e710559072ca986aad9425a9bf9dc566eb10aae073a89e1b5dd44fcf94684c1d35a473ede1f7b30e9c7bdb7ae6096b3e361caf6ec29296c1713be35e462a3aa6975bb24a92c3520d01212ea48aad1eca5f237da50b824721061e4b49f4c28e23992033fbae81a186887aa35b3c1392c1927d89923c1626cb6901e75d739138331bb95714964fbd25117fc02028fc2bfdefab7706c6f6a8c216e0e9ced3092192eed92a5f605ca1396f22d3a5513158940e5a98b5537cb2f581f6d838d8ca4cc373ea2cc9d9f27c69383f897d3e2d1697baa42d5cbdf17b4c9575db37e2639e19efbaa5e7207a59593dcca9cc74a70ae10b6fdfd7d2d08b37168806889bdc2467f9b48c265cb3f70eda8683d8132a0ae4f369772721f08e0b157bae4e9d01ddcac5315982fd89e7e8f524639a91e4cc0bc1822c44a4bf43c82e9ae1149d342eaec627b8851a3de1f4b4fd78ddc4aac874a373c64ca8e9ad47cb17392bd6ae6763e0dcf01c7ac3286402706178863f229d017b1963dea678251bb51c0caf554db84328db2560b4eab2f74ac80bfb812da72cbaf6299fd1b8b84febb9ee3796e262d672ef4d2d4d339921609b1995416f3d46b7baf37fb94d51c83bc65de8e48ea1ffdc2f030bbf16a286400adadd5c630e48b2b1b3e12608838796fefbdc24da433c9a6dc9f54c8a00546e4ae74d2a7a8fd06bf60437bb24d38703c899df16e4a9fef07a68ac0411b9a18ae22bef3698c937db", &(0x7f0000002d40)=""/36, &(0x7f0000002d80)="6582a50f7cb70e7b8811ff70b975f25dafc9181fdd24550b782346a386b5cc63fe43b8d14f4e4a91836a69baa844beb760a233258b359779621fed8cc5a8de1c75ed0b54f6e900b085f903381640545bdbf1c1f9c99b1452748bbd63c518df8539523ff6e0d35c57427568fa5b92b415a1f63003161a9384d5f2979eb7f7755ceedaa80f363528c502de0489ecf2deb9da7d8f439b5560418653", &(0x7f0000002e40)="756e39b76ca98fdc2364095d79b369752040d6cc6c9602717ba5211e886f6b19328b7fa36d9d7e6c168f7fc79fc747039e4b1a0348b626f80821caefb4a034bf9d0ea0e03d3c1df06ebc6968facb5661d9f593f65ba919ca37abf20497a6cee45ffa92b07ac3baf53bfa0bb464a40983a1305ddaeeffe43c924fc91fb56ebd6234c288d28b00fa837c3d45c51d0a671edf0f092fa8102d795930560062423b8a337cd43f672acf01af9d902def464a40bdb7b9a3f8c61f7f01cdf419fc202529a54c69d78a3f5efaa766da84ce0eba", 0xbda7, r10}, 0x38)

119.67855ms ago: executing program 2 (id=2742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="68c2a18312000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x2400c814)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83b23dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c11160fb20b1c581e7b0915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab3aa32f948c06b59b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2abd18cae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e26d0a5752813bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a7237841cef384b22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c74f0e2a9bf62ffec6459db40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84680900000000000000d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d2782a70cf44ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894edff8249dc1e3428d2129369ee1b85af1eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038deb359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f77abb21338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e155f455010b0cb578af7dc7d5e87d4cd376444e2de02f47c61e8e84ff828de453f3489460fd83210e95307e676e1fb4d5865c0ca177a4c7fbb4e62b4450900576b2b5cc7f819abd0f885cc4806f47ffbff01000054f5a2d3875e46000000000000e734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329a18cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481ed51a6359cade91fd645c6d924f36a86bf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a6225c3e2f0932223bfbf69ff861f4394836ddf128d6d19079e64336e09000000c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661fdcfa68f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b98a8bf6c747d9a1cc500bb892c3a16ff10feea20bdac89afb758cfa10000000000000000000000000200000000000000ed713df0c59e38928511a64845f1b21ed03369719fa905909d8ce35b42761c46d040e53a0a227e9cecd4d414231baa4894a13763ea5de7a52e61a588babaf5da9a28f477e032400938116cb294447898039724881de3ba3dd5e5e115b58d438b17ad11bf1b1f1ed057d89ec46b2b9bb434e9187a728d1136333958469b22d2126664b5299cc3167ac9a4d501638b978e1c692da5261dae5c9d13065b8ed8b358e7273dfa1e9a8dc1d16aa1edd0c274dedb7cd7e4753c152b4e0e3d124e561420587b9b00ab68c32d6b397c5e7cc4e803e6b6e8ed547e2875372023d111e64cd9ee3635888ecbc7352fd60f348456d74e9e7c09ee202dd09524ecfd3d8c836c0a13a9a45a7e2cec88fa2710ee35c9ed1b824fe4fe68849eee41b5e335aeec0f27053b3a07a001ffe29c5cc3a0ccdcc74330c2a995378d225495c5a543519d952c96da9257f47acc29c48d48b22b1f502b9d743d352de56efbb1b15158c4f0107ba5b3394d4cad4f0a1d31f694d0f559e7f82682775ec7569eeb7ef643dbcbafc4c1c5cbb0ad02dd2a69c5f2b5350049a817b546cf734a746a1cc147a6050bd16598e8e3a5c3515d0edc23e66bbdc6c117559357f49c59208af1162ba1d6667e3ab6bb1696c32dc3bcb2c8ab30d28265ff55c8a80c8e3ce29b2f576ea686d351a8cdb808739ed1a7022fb6e4e834593279c791085e49d1b8124adaf0010790e72ef2035e3da7ebb117c1a032a7378d5c62bb1a4e212618113bbd688091273028a44abfe09067e22fda361d6769d1f44bb06ca0cb9a14a54a8ba0dcb5445c4b368bd1dcce7500"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0x1f, 0xa, 0x4)
getpeername$packet(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='jbd2_shrink_scan_exit\x00', r6}, 0x18)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x5, 0x4a}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffbfe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x25}}}}})

61.208079ms ago: executing program 1 (id=2743):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

965.245µs ago: executing program 1 (id=2744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="8d59c52e272b6eeb7dbefa5bf48e", @ANYBLOB="60bc010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040011}, 0x48080)

0s ago: executing program 1 (id=2745):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={<r2=>0x0, 0x24, "6027eb3eae27be0bdce8f904ae42566b62d13a7e87c8064a8141a587853abf0d8c850f42"}, &(0x7f0000000080)=0x2c)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r2, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24000004)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4491}, 0x8000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={<r8=>0x0, @remote, @remote}, &(0x7f0000000480)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x5}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffff007b}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x845}, 0x840)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000600)={0x2, 0x0, 0x21})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000640)="b673ede115a83d88aa49c60fda8d27a236ea6ff96fadb38a6d58106de22b50a3c1b420875b54da3a003197b16ed328a8b1c83fd0bc62ebe02c5434642ece9dd4cfce32e323", &(0x7f00000006c0)=""/165}, 0x20)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000007c0)={<r9=>r2}, &(0x7f0000000800)=0x8)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x130, r3, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a39445e075ac1116"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ef4650dcfbb02ca9f0a23fd8f2fc9686"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e4a14cac4aa2ab5ecd7ff42fa665dff44b112b239dd8ff1c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cbb568299ca525f06fc7bcc4ede581d0"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1425c1049f033bf37e484116d75f2a84"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a21a3d9741fa9ec2"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "89483018e2b77d79"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "81acacea37dfc1e2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "06abaf62269c0c72"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8372ea69824c53515c0ff8ed98b7ce0e9a99dd05614dd323"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d69d8a9e8bbea3696612ce36139ebcf8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="23dc37d9d9021f504351370db50c3750"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8ccc60a5a8d33b0fe3c99ce0b13ba726"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f066115612187300"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d4117aec2d24ca0"}]}]}, 0x130}}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000a40)={0x0, 0x400c, 0x1, 0x40, r9}, 0x10)
sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa2b, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "6b2c23b2a95208b53d3d3c4d21fde59d"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x408c0}, 0x800)
syz_init_net_socket$ax25(0x3, 0x3, 0x6)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r1)
sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c40)={0x308, r11, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffc306}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x10001, @empty, 0xfffffffa}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xa8, @empty, 0xa}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xa1}}}}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb068}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9f1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x80}, 0x8080)
r12 = syz_genetlink_get_family_id$team(&(0x7f0000001040), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000001080)={'team0\x00', <r13=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001140)={'syztnl0\x00', &(0x7f00000010c0)={'gre0\x00', <r14=>0x0, 0x700, 0x10, 0x6, 0xa6, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x65, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @loopback, {[@noop, @cipso={0x86, 0x2f, 0x2, [{0x6, 0x12, "570752b9ca1ef4dcfffe01a4e5cca4d7"}, {0x0, 0x4, "38b6"}, {0x6, 0xc, "ab3550365a65285c8732"}, {0x7, 0x3, "97"}, {0x0, 0x4, "451e"}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x9, [0xa53]}]}}}}})
getpeername$packet(r0, &(0x7f0000001180)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000011c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001200)={'netdevsim0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001940)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f0000001240)={0x6a4, r12, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2b}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xf77c, 0xfd, 0x8, 0x18000000}, {0x3, 0x4, 0x2, 0x5}, {0x2, 0x9, 0x6, 0x8f3}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x704b}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc00}}}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x100040c1}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000804}, 0x40c1)

kernel console output (not intermixed with test programs):

ipc: Disabling bearer <eth:syzkaller0>
[  221.129285][T13386] vlan1: entered allmulticast mode
[  221.131546][T13386] erspan0: entered allmulticast mode
[  221.160850][T13374] lo speed is unknown, defaulting to 1000
[  221.296630][T13398] netlink: 'syz.2.1687': attribute type 13 has an invalid length.
[  221.486926][T13407] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  221.496087][T13407] CPU: 1 UID: 0 PID: 13407 Comm: syz.0.1689 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  221.496111][T13407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.496120][T13407] Call Trace:
[  221.496127][T13407]  <TASK>
[  221.496133][T13407]  dump_stack_lvl+0x189/0x250
[  221.496158][T13407]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.496174][T13407]  ? __pfx__printk+0x10/0x10
[  221.496197][T13407]  ? kernfs_path_from_node+0x2f/0x290
[  221.496210][T13407]  ? kernfs_path_from_node+0x250/0x290
[  221.496222][T13407]  ? kernfs_path_from_node+0x2f/0x290
[  221.496238][T13407]  sysfs_warn_dup+0x8e/0xa0
[  221.496251][T13407]  sysfs_do_create_link_sd+0xc0/0x110
[  221.496265][T13407]  device_add_class_symlinks+0x1cf/0x240
[  221.496281][T13407]  device_add+0x475/0xb50
[  221.496298][T13407]  wiphy_register+0x1ba6/0x28d0
[  221.496337][T13407]  ? __pfx_wiphy_register+0x10/0x10
[  221.496355][T13407]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  221.496443][T13407]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  221.496470][T13407]  ieee80211_register_hw+0x3425/0x4080
[  221.496500][T13407]  ? ieee80211_register_hw+0x1411/0x4080
[  221.496522][T13407]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  221.496541][T13407]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  221.496566][T13407]  ? __hrtimer_setup+0x187/0x210
[  221.496578][T13407]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  221.496601][T13407]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  221.496638][T13407]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  221.496650][T13407]  ? trace_kmalloc+0x1f/0xd0
[  221.496662][T13407]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  221.496675][T13407]  ? kstrndup+0xbf/0x160
[  221.496694][T13407]  hwsim_new_radio_nl+0xea4/0x1b10
[  221.496710][T13407]  ? __pfx___nla_validate_parse+0x10/0x10
[  221.496733][T13407]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.496756][T13407]  ? __nla_parse+0x40/0x60
[  221.496777][T13407]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  221.496798][T13407]  genl_family_rcv_msg_doit+0x215/0x300
[  221.496817][T13407]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  221.496841][T13407]  ? bpf_lsm_capable+0x9/0x20
[  221.496857][T13407]  ? security_capable+0x7e/0x2e0
[  221.496881][T13407]  genl_rcv_msg+0x60e/0x790
[  221.496901][T13407]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.496914][T13407]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  221.496941][T13407]  netlink_rcv_skb+0x208/0x470
[  221.496957][T13407]  ? __lock_acquire+0xab9/0xd20
[  221.496975][T13407]  ? __pfx_genl_rcv_msg+0x10/0x10
[  221.496991][T13407]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  221.497024][T13407]  ? down_read+0x1ad/0x2e0
[  221.497038][T13407]  genl_rcv+0x28/0x40
[  221.497050][T13407]  netlink_unicast+0x82f/0x9e0
[  221.497074][T13407]  ? __pfx_netlink_unicast+0x10/0x10
[  221.497092][T13407]  ? netlink_sendmsg+0x642/0xb30
[  221.497107][T13407]  ? skb_put+0x11b/0x210
[  221.497122][T13407]  netlink_sendmsg+0x805/0xb30
[  221.497148][T13407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.497168][T13407]  ? aa_sock_msg_perm+0xf1/0x1d0
[  221.497189][T13407]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  221.497202][T13407]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.497221][T13407]  __sock_sendmsg+0x21c/0x270
[  221.497240][T13407]  ____sys_sendmsg+0x505/0x830
[  221.497258][T13407]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.497279][T13407]  ? import_iovec+0x74/0xa0
[  221.497297][T13407]  ___sys_sendmsg+0x21f/0x2a0
[  221.497312][T13407]  ? __pfx____sys_sendmsg+0x10/0x10
[  221.497363][T13407]  ? __fget_files+0x2a/0x420
[  221.497404][T13407]  ? __fget_files+0x3a0/0x420
[  221.497423][T13407]  __x64_sys_sendmsg+0x19b/0x260
[  221.497439][T13407]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  221.497461][T13407]  ? rcu_is_watching+0x15/0xb0
[  221.497480][T13407]  ? do_syscall_64+0xbe/0x3b0
[  221.497503][T13407]  do_syscall_64+0xfa/0x3b0
[  221.497519][T13407]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.497536][T13407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.497549][T13407]  ? exc_page_fault+0x9f/0xf0
[  221.497567][T13407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.497577][T13407] RIP: 0033:0x7fbf1b38ebe9
[  221.497590][T13407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.497601][T13407] RSP: 002b:00007fbf1c1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.497615][T13407] RAX: ffffffffffffffda RBX: 00007fbf1b5b5fa0 RCX: 00007fbf1b38ebe9
[  221.497624][T13407] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  221.497632][T13407] RBP: 00007fbf1b411e19 R08: 0000000000000000 R09: 0000000000000000
[  221.497639][T13407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.497647][T13407] R13: 00007fbf1b5b6038 R14: 00007fbf1b5b5fa0 R15: 00007fffe5f45838
[  221.497670][T13407]  </TASK>
[  221.838072][T13413] vlan0: entered allmulticast mode
[  221.839928][T13413] macvtap0: entered allmulticast mode
[  221.966648][T13426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.971836][ T5904] lo speed is unknown, defaulting to 1000
[  221.973902][ T5904] sz1: Port: 1 Link DOWN
[  221.975485][ T5904] lo speed is unknown, defaulting to 1000
[  222.156548][T13441] netlink: 'syz.0.1702': attribute type 2 has an invalid length.
[  222.162764][T13441] k*]: entered promiscuous mode
[  222.471903][T13466] veth0_to_bond: left allmulticast mode
[  222.474178][T13466] veth0_to_bond: left promiscuous mode
[  222.476291][T13466] bridge8: port 1(veth0_to_bond) entered disabled state
[  222.481617][T13466] bond10: (slave veth1): Releasing backup interface
[  222.904108][T13503] netlink: 'syz.1.1706': attribute type 4 has an invalid length.
[  222.983827][T13510] netlink: 'syz.1.1706': attribute type 4 has an invalid length.
[  223.099618][T13522] syzkaller0: entered promiscuous mode
[  223.101614][T13522] syzkaller0: entered allmulticast mode
[  223.202158][T13527] lo speed is unknown, defaulting to 1000
[  223.340068][T13527] lo speed is unknown, defaulting to 1000
[  223.378329][T13540] __nla_validate_parse: 27 callbacks suppressed
[  223.378378][T13540] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1711'.
[  223.519831][T13549] netlink: 'syz.2.1713': attribute type 1 has an invalid length.
[  223.591190][T13554] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  223.648448][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'.
[  223.652554][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'.
[  224.548274][T13586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.584446][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'.
[  224.623386][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'.
[  224.628211][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'.
[  224.634541][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'.
[  224.638155][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'.
[  224.641006][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'.
[  224.737049][T13590] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1719'.
[  225.011817][T13619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.221080][T13650] syz0: rxe_newlink: already configured on lo
[  225.270602][T13650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.318274][T13652] lo speed is unknown, defaulting to 1000
[  225.517509][T13652] lo speed is unknown, defaulting to 1000
[  225.627140][T13668] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  225.646719][T13667] netlink: 'syz.0.1738': attribute type 1 has an invalid length.
[  225.810699][T13674] netlink: 'syz.0.1741': attribute type 4 has an invalid length.
[  225.821713][ T5975] lo speed is unknown, defaulting to 1000
[  225.823062][T13674] netlink: 'syz.0.1741': attribute type 4 has an invalid length.
[  225.825140][ T5975] syz0: Port: 1 Link DOWN
[  225.837281][ T5975] lo speed is unknown, defaulting to 1000
[  225.840497][T13676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.861703][T13676] syzkaller0: entered promiscuous mode
[  225.865534][T13676] syzkaller0: entered allmulticast mode
[  225.881105][ T5314] lo speed is unknown, defaulting to 1000
[  225.884864][ T5314] syz0: Port: 1 Link ACTIVE
[  225.897701][T13676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  225.926039][T13676] syzkaller0: mtu less than device minimum
[  225.931748][T13675] tipc: Resetting bearer <eth:syzkaller0>
[  225.970435][T13675] tipc: Disabling bearer <eth:syzkaller0>
[  226.049050][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.052358][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.137903][T13687] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  226.378743][T13705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.501576][T13712] netlink: 'syz.1.1752': attribute type 3 has an invalid length.
[  226.504576][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  226.644914][T13725] netlink: 'syz.1.1756': attribute type 4 has an invalid length.
[  226.718336][T13727] pim6reg1: entered allmulticast mode
[  226.933805][T13738] netlink: 'syz.1.1760': attribute type 1 has an invalid length.
[  226.937957][T13738] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  227.041671][T13744] lo speed is unknown, defaulting to 1000
[  227.257079][T13744] lo speed is unknown, defaulting to 1000
[  227.287536][T13748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.318984][T13747] tipc: Disabling bearer <eth:syzkaller0>
[  227.541643][T13763] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  227.610073][T13765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.629048][T13763] 8021q: adding VLAN 0 to HW filter on device bond13
[  228.024127][ T5709] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.032513][ T5709] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.044969][ T5709] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.053402][ T5709] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.075030][T13794] 1{X: entered promiscuous mode
[  228.099095][T13794] 0{X: renamed from 31{X
[  228.107656][T13794] 0{X: left promiscuous mode
[  228.109460][T13794] 0{X: entered allmulticast mode
[  228.119220][T13794] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  228.150521][T13798] lo speed is unknown, defaulting to 1000
[  228.222782][T13809] ip6gretap2: entered promiscuous mode
[  228.244547][T13805] validate_nla: 1 callbacks suppressed
[  228.244560][T13805] netlink: 'syz.0.1775': attribute type 10 has an invalid length.
[  228.370724][T13798] lo speed is unknown, defaulting to 1000
[  228.370724][T13803] lo speed is unknown, defaulting to 1000
[  228.538388][T13829] netlink: 'syz.2.1781': attribute type 10 has an invalid length.
[  228.546159][T13829] __nla_validate_parse: 91 callbacks suppressed
[  228.546176][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1781'.
[  228.564125][T13803] lo speed is unknown, defaulting to 1000
[  228.574049][T13829] team0: Port device geneve0 added
[  228.594133][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.598696][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.613032][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.616569][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.849327][T13845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1784'.
[  228.930577][T13844] lo speed is unknown, defaulting to 1000
[  229.107695][T13848] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1785'.
[  229.359995][T13844] lo speed is unknown, defaulting to 1000
[  229.692066][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'.
[  229.902067][T13862] team0: entered promiscuous mode
[  229.910861][T13862] geneve0: entered promiscuous mode
[  229.979717][T13869] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.984439][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.989849][T13869] trusted_key: syz.2.1792 sent an empty control message without MSG_MORE.
[  230.011818][T13869] unsupported nlmsg_type 40
[  230.119291][T13872] syzkaller0: entered promiscuous mode
[  230.121370][T13872] syzkaller0: entered allmulticast mode
[  230.128389][T13874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.136092][T13874] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode
[  230.139336][T13874] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode
[  230.144466][T13874] tipc: Resetting bearer <eth:syzkaller0>
[  230.232476][T13883] veth0: entered promiscuous mode
[  230.232679][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'.
[  230.253145][T13884] veth0 (unregistering): left promiscuous mode
[  231.446837][ T1089] tipc: Resetting bearer <eth:syzkaller0>
[  231.465956][T13892] macsec0: entered allmulticast mode
[  231.468128][T13893] veth1_macvtap: entered allmulticast mode
[  231.470125][T13893] macsec0: left allmulticast mode
[  231.471808][T13893] veth1_macvtap: left allmulticast mode
[  231.511115][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'.
[  231.595340][T13902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'.
[  231.709702][T13916] syzkaller1: entered promiscuous mode
[  231.712168][T13916] syzkaller1: entered allmulticast mode
[  231.730414][T13918] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.750654][T13918] tipc: Resetting bearer <eth:syzkaller0>
[  231.808433][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1807'.
[  231.924953][T13925] delete_channel: no stack
[  231.984078][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'.
[  232.077746][T13940] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.134490][T13947] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1815'.
[  232.199466][T13955] lo speed is unknown, defaulting to 1000
[  232.210676][T13957] sctp: [Deprecated]: syz.2.1817 (pid 13957) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.210676][T13957] Use struct sctp_sack_info instead
[  232.368839][T13955] lo speed is unknown, defaulting to 1000
[  232.370351][T13952] lo speed is unknown, defaulting to 1000
[  232.656338][T13952] lo speed is unknown, defaulting to 1000
[  233.394278][T13984] pim6reg1: entered allmulticast mode
[  233.484320][T13984] mac80211_hwsim hwsim80 syzkaller0: left promiscuous mode
[  233.487249][T13984] mac80211_hwsim hwsim80 syzkaller0: left allmulticast mode
[  233.490146][T13984] tipc: Resetting bearer <eth:syzkaller0>
[  233.602990][T13984] 8021q: adding VLAN 0 to HW filter on device bond14
[  233.607365][T13984] bond14: entered promiscuous mode
[  233.610424][T13984] team0: Port device bond14 added
[  233.670159][T13989] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode
[  233.674719][T13989] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode
[  233.678845][T13989] tipc: Resetting bearer <eth:syzkaller0>
[  233.883725][T14005] __nla_validate_parse: 4 callbacks suppressed
[  233.883736][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  233.888892][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  233.895089][T14006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  233.898902][T14006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1830'.
[  233.949012][T14009] sctp: [Deprecated]: syz.2.1831 (pid 14009) Use of int in max_burst socket option deprecated.
[  233.949012][T14009] Use struct sctp_assoc_value instead
[  234.006276][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  234.203938][T14019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.209636][   T10] lo speed is unknown, defaulting to 1000
[  234.211853][   T10] syz0: Port: 1 Link DOWN
[  234.216233][   T10] lo speed is unknown, defaulting to 1000
[  234.219817][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  234.688428][T14026] netlink: 'syz.1.1834': attribute type 13 has an invalid length.
[  234.691304][T14026] netlink: 'syz.1.1834': attribute type 17 has an invalid length.
[  234.708856][T14026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.733071][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  234.738577][T14026] lo speed is unknown, defaulting to 1000
[  234.828289][T14026] lo speed is unknown, defaulting to 1000
[  234.840242][T14029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  234.905503][T14030] netlink: 'syz.2.1835': attribute type 16 has an invalid length.
[  234.908855][T14030] netlink: 'syz.2.1835': attribute type 17 has an invalid length.
[  235.016202][T14030] tipc: Resetting bearer <eth:syzkaller0>
[  235.053366][ T5709] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.057972][ T5709] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.074366][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.077333][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.080255][ T5709] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.087738][ T5709] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.267616][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.300356][T14041] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1838'.
[  235.304628][T14041] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1838'.
[  235.308702][T14041] netlink: 'syz.0.1838': attribute type 5 has an invalid length.
[  235.312162][T14041] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1838'.
[  235.445044][T14048] IPVS: Error connecting to the multicast addr
[  235.500324][T14054] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1840'.
[  235.736127][T14070] bond0: default FDB implementation only supports local addresses
[  235.739752][T14070] netlink: 'syz.0.1842': attribute type 9 has an invalid length.
[  235.793619][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  235.807307][T14076] dvmrp1: entered allmulticast mode
[  235.828573][T14080] netlink: 'syz.0.1845': attribute type 8 has an invalid length.
[  235.937045][T14088] pim6reg1: entered promiscuous mode
[  235.939517][T14088] pim6reg1: entered allmulticast mode
[  236.021956][T14094] lo speed is unknown, defaulting to 1000
[  236.137127][T14100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  236.156973][T14100] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  236.205695][T14094] lo speed is unknown, defaulting to 1000
[  236.400283][T14115] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  236.405440][T14115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.499663][T14123] syzkaller1: entered promiscuous mode
[  236.501602][T14123] syzkaller1: entered allmulticast mode
[  236.962719][T14158] syzkaller1: entered promiscuous mode
[  236.965768][T14158] syzkaller1: entered allmulticast mode
[  237.214674][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  237.349973][T14203] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.536305][T14233] geneve0: left promiscuous mode
[  237.545174][T14233] team0: Port device geneve0 removed
[  237.547736][T14233] tipc: Resetting bearer <eth:syzkaller0>
[  237.552051][T14233] bond14: left promiscuous mode
[  237.558445][T14233] team0: Port device bond14 removed
[  237.586853][T14230] lo speed is unknown, defaulting to 1000
[  237.603362][T14239] bond0: entered promiscuous mode
[  237.605516][T14239] bond0: entered allmulticast mode
[  237.608007][T14239] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.647343][T14244] geneve3: entered promiscuous mode
[  237.650080][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.656767][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.660721][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.679991][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.791010][T14261] ip6tnl4: entered promiscuous mode
[  237.794924][T14261] ip6tnl4: entered allmulticast mode
[  237.813412][T14261] team0: Refused to change device type
[  237.870160][T14230] lo speed is unknown, defaulting to 1000
[  238.016803][T14275] netlink: 'syz.2.1897': attribute type 10 has an invalid length.
[  238.023345][T14275] 8021q: adding VLAN 0 to HW filter on device team0
[  238.047482][T14275] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.110958][T14286] tipc: Resetting bearer <eth:syzkaller0>
[  238.154465][ T5883] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.167308][ T5883] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.170975][ T5883] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.174154][ T5883] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.188158][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.965571][T14334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.971891][T14334] tipc: Resetting bearer <eth:syzkaller0>
[  239.019478][T14338] __nla_validate_parse: 37 callbacks suppressed
[  239.019492][T14338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1910'.
[  239.060811][T14340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.065357][T14340] syzkaller0: entered promiscuous mode
[  239.067639][T14340] syzkaller0: entered allmulticast mode
[  239.074426][T14341] netlink: 'syz.2.1909': attribute type 13 has an invalid length.
[  239.077298][T14341] netlink: 'syz.2.1909': attribute type 17 has an invalid length.
[  239.086144][T14341] 0{X: left allmulticast mode
[  239.101721][T14341] team0: left promiscuous mode
[  239.104381][T14341] 8021q: adding VLAN 0 to HW filter on device team0
[  239.108161][T14341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.115230][ T5904] lo speed is unknown, defaulting to 1000
[  239.117577][ T5904] sz1: Port: 1 Link ACTIVE
[  239.119706][ T5904] lo speed is unknown, defaulting to 1000
[  239.140977][T14340] tipc: Resetting bearer <eth:syzkaller0>
[  239.146245][T14339] tipc: Resetting bearer <eth:syzkaller0>
[  239.158866][T14339] tipc: Disabling bearer <eth:syzkaller0>
[  239.169287][T14337] lo speed is unknown, defaulting to 1000
[  239.260001][T14337] lo speed is unknown, defaulting to 1000
[  239.566442][T14359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1915'.
[  239.569512][T14359] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  239.636601][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1917'.
[  239.854675][T14382] ip6gre2: entered allmulticast mode
[  239.880361][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1922'.
[  239.990097][T14412] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.034217][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'.
[  240.041590][T14418] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1928'.
[  240.046471][T14418] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1928'.
[  240.062137][T14418] dvmrp1: left allmulticast mode
[  240.131154][T14418] sz1: rxe_newlink: already configured on lo
[  240.143372][T14429] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1929'.
[  240.152178][T14418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.311162][T14447] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.380889][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'.
[  240.446169][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'.
[  240.466731][T14462] validate_nla: 1 callbacks suppressed
[  240.466749][T14462] netlink: 'syz.2.1938': attribute type 1 has an invalid length.
[  240.489290][T14460] tipc: Resetting bearer <eth:syzkaller0>
[  240.594458][T14470] lo speed is unknown, defaulting to 1000
[  240.609875][T14473] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  240.638392][T14473] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  240.668758][T14473] netlink: 'syz.0.1942': attribute type 3 has an invalid length.
[  240.760166][T14477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.774330][T14477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.861831][T14478]  (unregistering): Released all slaves
[  240.877319][T14470] lo speed is unknown, defaulting to 1000
[  240.996735][T14482] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  241.054323][T14483] netlink: 'syz.1.1945': attribute type 5 has an invalid length.
[  241.381217][T14485] netlink: 'syz.1.1946': attribute type 10 has an invalid length.
[  241.536314][T14503] netlink: 'syz.2.1951': attribute type 10 has an invalid length.
[  241.536837][T14504] netlink: 'syz.2.1951': attribute type 10 has an invalid length.
[  241.543706][T14503] netlink: 'syz.2.1951': attribute type 10 has an invalid length.
[  241.546689][T14503] batadv0: entered promiscuous mode
[  241.548544][T14503] batadv0: entered allmulticast mode
[  241.550572][T14503] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  241.645563][T14514] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.659530][T14514] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  241.706626][T14521] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.819149][T14528] batadv0: left promiscuous mode
[  241.820865][T14528] batadv0: left allmulticast mode
[  241.833684][T14528] bond0: left promiscuous mode
[  241.835285][T14528] bond0: left allmulticast mode
[  241.840239][T14528] vlan1: left allmulticast mode
[  241.841874][T14528] erspan0: left allmulticast mode
[  241.846652][T14528] ip6gretap2: left promiscuous mode
[  241.852429][T14528] tipc: Resetting bearer <eth:syzkaller0>
[  241.874394][T14528] mac80211_hwsim hwsim80 syzkaller0: left promiscuous mode
[  241.876731][T14528] mac80211_hwsim hwsim80 syzkaller0: left allmulticast mode
[  241.881506][T14528] geneve3: left promiscuous mode
[  241.883718][ T5975] lo speed is unknown, defaulting to 1000
[  241.889175][ T5975] sz1: Port: 1 Link DOWN
[  241.902647][ T5975] lo speed is unknown, defaulting to 1000
[  242.068864][T14554] sctp: [Deprecated]: syz.2.1964 (pid 14554) Use of struct sctp_assoc_value in delayed_ack socket option.
[  242.068864][T14554] Use struct sctp_sack_info instead
[  242.080347][T14554] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  242.089152][T14554] CPU: 1 UID: 0 PID: 14554 Comm: syz.2.1964 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  242.089166][T14554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.089171][T14554] Call Trace:
[  242.089176][T14554]  <TASK>
[  242.089180][T14554]  dump_stack_lvl+0x189/0x250
[  242.089199][T14554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.089209][T14554]  ? __pfx__printk+0x10/0x10
[  242.089222][T14554]  ? kernfs_path_from_node+0x2f/0x290
[  242.089232][T14554]  ? kernfs_path_from_node+0x250/0x290
[  242.089240][T14554]  ? kernfs_path_from_node+0x2f/0x290
[  242.089250][T14554]  sysfs_warn_dup+0x8e/0xa0
[  242.089260][T14554]  sysfs_do_create_link_sd+0xc0/0x110
[  242.089269][T14554]  device_add_class_symlinks+0x1cf/0x240
[  242.089280][T14554]  device_add+0x475/0xb50
[  242.089289][T14554]  wiphy_register+0x1ba6/0x28d0
[  242.089306][T14554]  ? __pfx_wiphy_register+0x10/0x10
[  242.089314][T14554]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  242.089327][T14554]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  242.089342][T14554]  ieee80211_register_hw+0x3425/0x4080
[  242.089359][T14554]  ? ieee80211_register_hw+0x1411/0x4080
[  242.089370][T14554]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  242.089380][T14554]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.089395][T14554]  ? __hrtimer_setup+0x187/0x210
[  242.089401][T14554]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  242.089412][T14554]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  242.089433][T14554]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  242.089441][T14554]  ? trace_kmalloc+0x1f/0xd0
[  242.089450][T14554]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  242.089459][T14554]  ? kstrndup+0xbf/0x160
[  242.089472][T14554]  hwsim_new_radio_nl+0xea4/0x1b10
[  242.089482][T14554]  ? __pfx___nla_validate_parse+0x10/0x10
[  242.089501][T14554]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.089514][T14554]  ? __nla_parse+0x40/0x60
[  242.089525][T14554]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  242.089538][T14554]  genl_family_rcv_msg_doit+0x215/0x300
[  242.089548][T14554]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  242.089561][T14554]  ? bpf_lsm_capable+0x9/0x20
[  242.089572][T14554]  ? security_capable+0x7e/0x2e0
[  242.089585][T14554]  genl_rcv_msg+0x60e/0x790
[  242.089596][T14554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.089602][T14554]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.089617][T14554]  netlink_rcv_skb+0x208/0x470
[  242.089625][T14554]  ? __lock_acquire+0xab9/0xd20
[  242.089634][T14554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.089642][T14554]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.089659][T14554]  ? down_read+0x1ad/0x2e0
[  242.089667][T14554]  genl_rcv+0x28/0x40
[  242.089674][T14554]  netlink_unicast+0x82f/0x9e0
[  242.089686][T14554]  ? __pfx_netlink_unicast+0x10/0x10
[  242.089695][T14554]  ? netlink_sendmsg+0x642/0xb30
[  242.089703][T14554]  ? skb_put+0x11b/0x210
[  242.089712][T14554]  netlink_sendmsg+0x805/0xb30
[  242.089725][T14554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.089735][T14554]  ? aa_sock_msg_perm+0xf1/0x1d0
[  242.089746][T14554]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.089753][T14554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.089762][T14554]  __sock_sendmsg+0x21c/0x270
[  242.089772][T14554]  ____sys_sendmsg+0x505/0x830
[  242.089782][T14554]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.089793][T14554]  ? import_iovec+0x74/0xa0
[  242.089802][T14554]  ___sys_sendmsg+0x21f/0x2a0
[  242.089810][T14554]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.089832][T14554]  ? __fget_files+0x2a/0x420
[  242.089839][T14554]  ? __fget_files+0x3a0/0x420
[  242.089849][T14554]  __x64_sys_sendmsg+0x19b/0x260
[  242.089857][T14554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.089869][T14554]  ? rcu_is_watching+0x15/0xb0
[  242.089878][T14554]  ? do_syscall_64+0xbe/0x3b0
[  242.089890][T14554]  do_syscall_64+0xfa/0x3b0
[  242.089898][T14554]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.089907][T14554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.089914][T14554]  ? exc_page_fault+0x9f/0xf0
[  242.089924][T14554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.089930][T14554] RIP: 0033:0x7f9c1758ebe9
[  242.089939][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.089945][T14554] RSP: 002b:00007f9c1835f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.089955][T14554] RAX: ffffffffffffffda RBX: 00007f9c177b5fa0 RCX: 00007f9c1758ebe9
[  242.089959][T14554] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  242.089964][T14554] RBP: 00007f9c17611e19 R08: 0000000000000000 R09: 0000000000000000
[  242.089968][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.089972][T14554] R13: 00007f9c177b6038 R14: 00007f9c177b5fa0 R15: 00007ffe6420e838
[  242.089984][T14554]  </TASK>
[  242.398631][T14560] tipc: Resetting bearer <eth:syzkaller0>
[  242.541639][T14560] tipc: Resetting bearer <eth:syzkaller0>
[  242.742603][T14584] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  242.757950][T14584] CPU: 0 UID: 0 PID: 14584 Comm: syz.1.1973 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  242.757965][T14584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.757971][T14584] Call Trace:
[  242.757975][T14584]  <TASK>
[  242.757979][T14584]  dump_stack_lvl+0x189/0x250
[  242.758001][T14584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.758010][T14584]  ? __pfx__printk+0x10/0x10
[  242.758025][T14584]  ? kernfs_path_from_node+0x2f/0x290
[  242.758036][T14584]  ? kernfs_path_from_node+0x250/0x290
[  242.758043][T14584]  ? kernfs_path_from_node+0x2f/0x290
[  242.758053][T14584]  sysfs_warn_dup+0x8e/0xa0
[  242.758085][T14584]  sysfs_do_create_link_sd+0xc0/0x110
[  242.758097][T14584]  device_add_class_symlinks+0x1cf/0x240
[  242.758109][T14584]  device_add+0x475/0xb50
[  242.758119][T14584]  wiphy_register+0x1ba6/0x28d0
[  242.758148][T14584]  ? __pfx_wiphy_register+0x10/0x10
[  242.758163][T14584]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  242.758178][T14584]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  242.758200][T14584]  ieee80211_register_hw+0x3425/0x4080
[  242.758222][T14584]  ? ieee80211_register_hw+0x1411/0x4080
[  242.758246][T14584]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  242.758263][T14584]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  242.758281][T14584]  ? __hrtimer_setup+0x187/0x210
[  242.758289][T14584]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  242.758305][T14584]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  242.758328][T14584]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  242.758336][T14584]  ? trace_kmalloc+0x1f/0xd0
[  242.758347][T14584]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  242.758356][T14584]  ? kstrndup+0xbf/0x160
[  242.758368][T14584]  hwsim_new_radio_nl+0xea4/0x1b10
[  242.758378][T14584]  ? __pfx___nla_validate_parse+0x10/0x10
[  242.758394][T14584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.758408][T14584]  ? __nla_parse+0x40/0x60
[  242.758418][T14584]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  242.758431][T14584]  genl_family_rcv_msg_doit+0x215/0x300
[  242.758441][T14584]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  242.758456][T14584]  ? bpf_lsm_capable+0x9/0x20
[  242.758466][T14584]  ? security_capable+0x7e/0x2e0
[  242.758479][T14584]  genl_rcv_msg+0x60e/0x790
[  242.758490][T14584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.758497][T14584]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  242.758511][T14584]  netlink_rcv_skb+0x208/0x470
[  242.758520][T14584]  ? __lock_acquire+0xab9/0xd20
[  242.758532][T14584]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.758542][T14584]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.758562][T14584]  ? down_read+0x1ad/0x2e0
[  242.758570][T14584]  genl_rcv+0x28/0x40
[  242.758577][T14584]  netlink_unicast+0x82f/0x9e0
[  242.758590][T14584]  ? __pfx_netlink_unicast+0x10/0x10
[  242.758599][T14584]  ? netlink_sendmsg+0x642/0xb30
[  242.758607][T14584]  ? skb_put+0x11b/0x210
[  242.758616][T14584]  netlink_sendmsg+0x805/0xb30
[  242.758630][T14584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.758639][T14584]  ? aa_sock_msg_perm+0xf1/0x1d0
[  242.758651][T14584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.758658][T14584]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.758667][T14584]  __sock_sendmsg+0x21c/0x270
[  242.758678][T14584]  ____sys_sendmsg+0x505/0x830
[  242.758687][T14584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.758698][T14584]  ? import_iovec+0x74/0xa0
[  242.758708][T14584]  ___sys_sendmsg+0x21f/0x2a0
[  242.758716][T14584]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.758738][T14584]  ? __fget_files+0x2a/0x420
[  242.758744][T14584]  ? __fget_files+0x3a0/0x420
[  242.758755][T14584]  __x64_sys_sendmsg+0x19b/0x260
[  242.758763][T14584]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.758775][T14584]  ? rcu_is_watching+0x15/0xb0
[  242.758784][T14584]  ? do_syscall_64+0xbe/0x3b0
[  242.758796][T14584]  do_syscall_64+0xfa/0x3b0
[  242.758805][T14584]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.758813][T14584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.758820][T14584]  ? exc_page_fault+0x9f/0xf0
[  242.758829][T14584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.758836][T14584] RIP: 0033:0x7f68cd78ebe9
[  242.758844][T14584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.758851][T14584] RSP: 002b:00007f68ce68c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.758860][T14584] RAX: ffffffffffffffda RBX: 00007f68cd9b6090 RCX: 00007f68cd78ebe9
[  242.758865][T14584] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  242.758870][T14584] RBP: 00007f68cd811e19 R08: 0000000000000000 R09: 0000000000000000
[  242.758874][T14584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.758878][T14584] R13: 00007f68cd9b6128 R14: 00007f68cd9b6090 R15: 00007fff5cbc2b18
[  242.758890][T14584]  </TASK>
[  242.923409][T14586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.982230][T14589] netlink: 'syz.0.1975': attribute type 10 has an invalid length.
[  243.119612][T14592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.319578][T14598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.324822][T14602] syzkaller0: entered promiscuous mode
[  243.327437][T14602] syzkaller0: entered allmulticast mode
[  243.344636][T14602] tipc: Resetting bearer <eth:syzkaller0>
[  243.362141][T14602] tipc: Disabling bearer <eth:syzkaller0>
[  243.535425][T14619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  243.540093][T14619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  243.557720][T14621] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  243.560491][T14621] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  243.567799][T14621] veth1: left promiscuous mode
[  243.570105][T14621] ip6gre2: left allmulticast mode
[  243.633630][T14625] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.637583][T14625] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  243.640142][T14625] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  243.643893][T14625] syzkaller0: mtu less than device minimum
[  243.668252][T14627] netlink: 'syz.0.1988': attribute type 13 has an invalid length.
[  243.749252][T14632] lo speed is unknown, defaulting to 1000
[  243.833146][T14635] netlink: 'syz.0.1990': attribute type 4 has an invalid length.
[  243.884158][T14632] lo speed is unknown, defaulting to 1000
[  243.896398][T14639] lo speed is unknown, defaulting to 1000
[  244.079716][T14639] lo speed is unknown, defaulting to 1000
[  244.297026][T14646] __nla_validate_parse: 31 callbacks suppressed
[  244.297070][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'.
[  244.310266][T14646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1992'.
[  244.517698][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1995'.
[  244.539549][T14657] 8021q: VLANs not supported on ip6gre0
[  244.594776][T14658] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1996'.
[  244.598935][T14658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  244.668490][T14652] lo speed is unknown, defaulting to 1000
[  244.786647][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'.
[  244.795752][T14665] ieee802154 phy0 wpan0: encryption failed: -126
[  244.953294][T14652] lo speed is unknown, defaulting to 1000
[  245.031155][T14671] nbd: must specify a device to reconfigure
[  245.601782][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'.
[  245.727351][T14678] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  245.755062][T14675] team0: Unable to change to the same mode the team is in
[  245.799837][T14684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.811440][T14684] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  245.821084][T14684] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  245.870131][T14685] validate_nla: 1 callbacks suppressed
[  245.870149][T14685] netlink: 'syz.2.2003': attribute type 13 has an invalid length.
[  245.875790][T14685] netlink: 'syz.2.2003': attribute type 17 has an invalid length.
[  245.954234][T14685] 8021q: adding VLAN 0 to HW filter on device team0
[  245.959540][T14685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.967187][   T10] lo speed is unknown, defaulting to 1000
[  245.974036][   T10] sz1: Port: 1 Link ACTIVE
[  245.979518][   T10] lo speed is unknown, defaulting to 1000
[  246.012718][T14689] lo speed is unknown, defaulting to 1000
[  246.106911][T14700] sctp: [Deprecated]: syz.1.2009 (pid 14700) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.106911][T14700] Use struct sctp_sack_info instead
[  246.203102][T14689] lo speed is unknown, defaulting to 1000
[  246.231287][T14710] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2013'.
[  246.235203][T14710] 1{X: renamed from 30{X
[  246.238889][T14710] 1{X: entered allmulticast mode
[  246.243188][T14710] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  246.300883][T14716] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2015'.
[  246.307882][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2012'.
[  246.537704][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'.
[  246.996312][T14750] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20004
[  247.001942][T14750] 0{X: entered promiscuous mode
[  247.009121][T14750] 0{X: left promiscuous mode
[  247.986934][T14762] pim6reg1: entered promiscuous mode
[  247.988811][T14762] pim6reg1: entered allmulticast mode
[  248.078499][T14771] sz1: rxe_newlink: already configured on lo
[  248.088511][T14771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.387413][T14797] openvswitch: netlink: Flow key attr not present in new flow.
[  248.399704][T14793] IPv6: Can't replace route, no match found
[  248.521219][T14813] mac80211_hwsim hwsim80 syzkaller0: entered promiscuous mode
[  248.530323][T14813] mac80211_hwsim hwsim80 syzkaller0: entered allmulticast mode
[  248.586754][T14818] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  248.607846][T14819] 8021q: VLANs not supported on wg2
[  248.617915][T14818] bond15: entered promiscuous mode
[  248.621251][T14818] bond15: entered allmulticast mode
[  248.624097][T14818] 8021q: adding VLAN 0 to HW filter on device bond15
[  248.644080][T14818] bridge8: entered promiscuous mode
[  248.646537][T14818] bridge8: entered allmulticast mode
[  248.649285][T14818] bond15: (slave bridge8): Enslaving as a backup interface with an up link
[  248.732557][   T13] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  248.797585][ T5314] lo speed is unknown, defaulting to 1000
[  248.804157][ T5314] sz1: Port: 1 Link DOWN
[  248.805962][ T5314] lo speed is unknown, defaulting to 1000
[  248.945701][T14856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.991273][T14862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.142019][T14879] sctp: [Deprecated]: syz.1.2053 (pid 14879) Use of struct sctp_assoc_value in delayed_ack socket option.
[  249.142019][T14879] Use struct sctp_sack_info instead
[  249.165226][T14875] syzkaller1: entered allmulticast mode
[  249.171599][T14876] syzkaller1: left allmulticast mode
[  249.724935][T14884] syzkaller1: entered promiscuous mode
[  249.727450][T14884] syzkaller1: entered allmulticast mode
[  249.775501][T14886] lo speed is unknown, defaulting to 1000
[  249.865956][T14890] tipc: Resetting bearer <ib:caif0>
[  249.875312][T14890] tipc: Resetting bearer <ib:xfrm0>
[  249.930830][T14886] lo speed is unknown, defaulting to 1000
[  249.933427][T14888] lo speed is unknown, defaulting to 1000
[  250.291431][T14909] __nla_validate_parse: 16 callbacks suppressed
[  250.291450][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  250.350845][T14888] lo speed is unknown, defaulting to 1000
[  250.560359][T14920] netlink: 'syz.2.2062': attribute type 1 has an invalid length.
[  250.615072][T14920] 8021q: adding VLAN 0 to HW filter on device bond16
[  250.710835][T14922] bond16: (slave bridge9): making interface the new active one
[  250.725118][T14922] bond16: (slave bridge9): Enslaving as an active interface with an up link
[  251.226432][T14924] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2063'.
[  251.287454][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'.
[  251.401281][T14927] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  251.409506][T14927] netlink: 'syz.2.2064': attribute type 10 has an invalid length.
[  251.547545][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  251.607852][T14938] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2068'.
[  251.615558][T14942] lo speed is unknown, defaulting to 1000
[  251.786314][T14949] lo speed is unknown, defaulting to 1000
[  251.788752][T14942] lo speed is unknown, defaulting to 1000
[  252.045060][T14949] lo speed is unknown, defaulting to 1000
[  252.571049][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2073'.
[  252.684208][T14965] 1{X: left allmulticast mode
[  252.760008][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'.
[  252.863430][T14974] syzkaller1: entered promiscuous mode
[  252.865234][T14974] syzkaller1: entered allmulticast mode
[  252.990713][T14979] netlink: 'syz.2.2078': attribute type 1 has an invalid length.
[  252.994444][T14979] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2078'.
[  253.043420][T14987] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2081'.
[  253.056052][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2079'.
[  253.058972][T14981] netlink: 'syz.0.2079': attribute type 5 has an invalid length.
[  253.067511][T14981] geneve8: entered promiscuous mode
[  253.069633][T14981] geneve8: entered allmulticast mode
[  253.074369][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  253.077549][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  253.080421][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  253.095799][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  253.178877][T14990] macvlan0: entered promiscuous mode
[  253.180823][T14990] bond0: entered promiscuous mode
[  253.224483][T14990] netlink: 'syz.0.2082': attribute type 83 has an invalid length.
[  253.300800][T14996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.436250][T15006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.510509][T15014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.581198][T15018] 1{X: renamed from 30{X
[  253.586810][T15018] 1{X: entered allmulticast mode
[  253.590564][T15018] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  253.600002][T15019] 0{X: renamed from 31{X (while UP)
[  253.605182][T15019] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  253.648201][T15022] IPVS: Unknown mcast interface: rose0
[  253.691887][T15024] syzkaller1: entered promiscuous mode
[  253.693984][T15024] syzkaller1: entered allmulticast mode
[  254.157483][T15046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.170680][T15046] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  254.269554][T15048] lo speed is unknown, defaulting to 1000
[  254.413027][T15048] lo speed is unknown, defaulting to 1000
[  254.807873][T15060] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.859640][T15062] netlink: 'syz.0.2104': attribute type 2 has an invalid length.
[  254.893587][T15066] netlink: 'syz.2.2105': attribute type 5 has an invalid length.
[  254.907864][T15066] geneve4: entered promiscuous mode
[  254.910055][T15066] geneve4: entered allmulticast mode
[  254.916318][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  254.920320][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  254.924404][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  254.949440][T15064] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  254.990452][T15064] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  255.017384][T15074] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  255.049508][T15064] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  255.096467][T15077] lo speed is unknown, defaulting to 1000
[  255.114746][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  255.128139][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  255.141477][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  255.158775][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  255.197500][T15077] lo speed is unknown, defaulting to 1000
[  255.287988][T15097] syzkaller1: entered promiscuous mode
[  255.289960][T15097] syzkaller1: entered allmulticast mode
[  255.306474][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.678923][T15099] __nla_validate_parse: 15 callbacks suppressed
[  255.678936][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'.
[  255.686926][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2112'.
[  255.726502][T15101] ip6gretap5: entered promiscuous mode
[  255.828142][T15104] dvmrp8: entered allmulticast mode
[  255.831189][T15103] dvmrp8: left allmulticast mode
[  255.877263][T15112] : renamed from wg2
[  255.997546][T15119] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2118'.
[  256.161525][T15150] syzkaller1: entered promiscuous mode
[  256.163399][T15150] syzkaller1: entered allmulticast mode
[  256.358926][T15170] netlink: 'syz.2.2130': attribute type 4 has an invalid length.
[  256.372614][T15170] netlink: 'syz.2.2130': attribute type 4 has an invalid length.
[  256.436744][T15175] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.447178][T15177] netlink: 'syz.1.2133': attribute type 5 has an invalid length.
[  256.460622][T15181] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.464492][T15182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.477795][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  256.481194][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2136'.
[  256.485935][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  256.489786][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2136'.
[  256.508794][T15188] syzkaller1: entered promiscuous mode
[  256.510702][T15188] syzkaller1: entered allmulticast mode
[  256.633094][T15192] netlink: 410 bytes leftover after parsing attributes in process `syz.0.2139'.
[  256.678259][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'.
[  256.682067][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'.
[  257.210729][T15203] netlink: 'syz.2.2141': attribute type 5 has an invalid length.
[  257.296688][T15214] IPv6: sit4: Disabled Multicast RS
[  257.344038][T15216] netlink: 'syz.1.2146': attribute type 1 has an invalid length.
[  257.363739][T15216] bond0: entered promiscuous mode
[  257.366198][T15216] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.369554][T15218] syzkaller1: entered promiscuous mode
[  257.371956][T15218] syzkaller1: entered allmulticast mode
[  257.387309][T15216] bond0: (slave bridge9): making interface the new active one
[  257.390560][T15216] bridge9: entered promiscuous mode
[  257.393914][T15216] bond0: (slave bridge9): Enslaving as an active interface with an up link
[  257.415543][T15216] syzkaller1: entered promiscuous mode
[  257.417822][T15216] syzkaller1: entered allmulticast mode
[  257.484450][T15221] lo speed is unknown, defaulting to 1000
[  257.503774][T15223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.679487][T15228] lo speed is unknown, defaulting to 1000
[  257.679983][T15221] lo speed is unknown, defaulting to 1000
[  257.824445][T15228] lo speed is unknown, defaulting to 1000
[  257.999521][T15237] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.061324][T15237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  258.066040][T15238] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  258.117189][T15241] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.198905][T15248] netlink: 'syz.0.2155': attribute type 5 has an invalid length.
[  258.205319][T15248] netlink: 'syz.0.2155': attribute type 9 has an invalid length.
[  258.300604][T15249] netlink: 'syz.0.2155': attribute type 9 has an invalid length.
[  258.393313][T15251] netlink: 'syz.0.2156': attribute type 1 has an invalid length.
[  258.396093][T15251] netlink: 'syz.0.2156': attribute type 3 has an invalid length.
[  258.484108][T15261] IPVS: Scheduler module ip_vs_sip not found
[  258.555103][T15266] syzkaller1: entered promiscuous mode
[  258.557282][T15266] syzkaller1: entered allmulticast mode
[  258.628401][T15275] netlink: 'syz.1.2163': attribute type 9 has an invalid length.
[  258.761378][T15289] netlink: 'syz.0.2167': attribute type 13 has an invalid length.
[  258.795023][T15289] lo speed is unknown, defaulting to 1000
[  258.927535][ T5904] lo speed is unknown, defaulting to 1000
[  258.930810][ T5904] lo speed is unknown, defaulting to 1000
[  258.935069][ T1272] lo speed is unknown, defaulting to 1000
[  258.967698][T15289] lo speed is unknown, defaulting to 1000
[  259.368542][T15330] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.377869][T15330] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  259.439208][T15335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.483480][T15333] wireguard0: entered promiscuous mode
[  259.485546][T15333] wireguard0: entered allmulticast mode
[  259.727994][T15361] dvmrp1: entered allmulticast mode
[  259.736271][T15361] dvmrp1: left allmulticast mode
[  259.866520][T15356] lo speed is unknown, defaulting to 1000
[  260.104547][T15374] lo speed is unknown, defaulting to 1000
[  260.115760][T15356] lo speed is unknown, defaulting to 1000
[  260.287970][T15374] lo speed is unknown, defaulting to 1000
[  260.446724][T15385] bridge10: port 1(batadv0) entered blocking state
[  260.448987][T15385] bridge10: port 1(batadv0) entered disabled state
[  260.451220][T15385] batadv0: entered allmulticast mode
[  260.459485][T15385] batadv0: entered promiscuous mode
[  260.475549][T15387] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  260.483438][T15385] bridge10: port 1(batadv0) entered disabled state
[  260.515597][T15385] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  260.639365][T15389] sctp: [Deprecated]: syz.0.2193 (pid 15389) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.639365][T15389] Use struct sctp_sack_info instead
[  260.731263][T15397] lo speed is unknown, defaulting to 1000
[  260.908397][T15406] sctp: [Deprecated]: syz.2.2196 (pid 15406) Use of int in max_burst socket option deprecated.
[  260.908397][T15406] Use struct sctp_assoc_value instead
[  261.015655][T15397] lo speed is unknown, defaulting to 1000
[  261.056476][T15424] __nla_validate_parse: 19 callbacks suppressed
[  261.056490][T15424] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2200'.
[  261.115192][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'.
[  261.308792][T15430] lo speed is unknown, defaulting to 1000
[  261.448342][T15441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2206'.
[  261.454947][T15441] validate_nla: 11 callbacks suppressed
[  261.454955][T15441] netlink: 'syz.1.2206': attribute type 2 has an invalid length.
[  261.475612][T15441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  261.512553][T15430] lo speed is unknown, defaulting to 1000
[  261.519009][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  261.594509][T15447] netlink: 'syz.1.2207': attribute type 4 has an invalid length.
[  261.880217][ T2191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.883425][ T2191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.941977][T15472] rdma_rxe: rxe_newlink: failed to add lo
[  261.958945][T15474] syzkaller1: entered promiscuous mode
[  261.973644][T15474] syzkaller1: entered allmulticast mode
[  262.069232][T15481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.184664][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  262.196466][T15492] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  262.422855][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.428933][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.933684][T15503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2221'.
[  262.938800][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'.
[  262.976106][T15510] lo speed is unknown, defaulting to 1000
[  263.069455][T15510] lo speed is unknown, defaulting to 1000
[  263.069761][T15507] lo speed is unknown, defaulting to 1000
[  263.275810][T15514] lo speed is unknown, defaulting to 1000
[  263.300756][T15507] lo speed is unknown, defaulting to 1000
[  263.462878][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  263.465738][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  263.535493][T15514] lo speed is unknown, defaulting to 1000
[  263.732810][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  263.838271][T15525] vlan0: entered allmulticast mode
[  264.111498][T15534] 0{X: left allmulticast mode
[  264.200177][T15534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.206180][ T5975] lo speed is unknown, defaulting to 1000
[  264.208543][ T5975] syz0: Port: 1 Link ACTIVE
[  264.210696][ T5975] lo speed is unknown, defaulting to 1000
[  264.263827][T15542] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2228'.
[  264.292588][T15542] 1{X: entered promiscuous mode
[  264.328485][T15544] lo speed is unknown, defaulting to 1000
[  264.478182][T15547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.481095][T15547] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  264.483868][T15547] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  264.486586][T15547] tipc: Resetting bearer <eth:syzkaller0>
[  264.495884][T15547] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  264.515276][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  264.523181][T15547] tipc: Resetting bearer <eth:syzkaller0>
[  264.571795][T15559] netlink: 'syz.2.2233': attribute type 13 has an invalid length.
[  264.581168][T15563] netlink: 'syz.2.2233': attribute type 13 has an invalid length.
[  264.586530][T15559] netlink: 'syz.2.2233': attribute type 17 has an invalid length.
[  264.607990][T15563] netlink: 'syz.2.2233': attribute type 17 has an invalid length.
[  264.687507][T15559] 8021q: adding VLAN 0 to HW filter on device team0
[  264.759709][T15559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.787344][T15563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.803867][ T1272] lo speed is unknown, defaulting to 1000
[  264.806241][ T1272] sz1: Port: 1 Link ACTIVE
[  264.818486][ T1272] lo speed is unknown, defaulting to 1000
[  264.819891][T15544] lo speed is unknown, defaulting to 1000
[  264.855831][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'.
[  264.869623][T15584] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2237'.
[  264.879842][T15584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2237'.
[  264.957364][T15591] netlink: 'syz.2.2238': attribute type 11 has an invalid length.
[  265.076516][T15596] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.091031][T15596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2240'.
[  265.137956][T15602] netlink: 'syz.1.2241': attribute type 13 has an invalid length.
[  265.143292][T15602] netlink: 'syz.1.2241': attribute type 17 has an invalid length.
[  265.175977][T15602] 1{X: left promiscuous mode
[  265.189271][T15602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.216222][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  265.319618][T15609] syzkaller1: entered promiscuous mode
[  265.321877][T15609] syzkaller1: entered allmulticast mode
[  265.334417][T15544] tipc: can't start tipc receive workqueue
[  265.379466][T15612] netlink: 'syz.1.2242': attribute type 11 has an invalid length.
[  265.522948][T15619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.529184][T15619] sch_fq: defrate 257 ignored.
[  265.564353][T15621] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.626061][T15626] netlink: 'syz.1.2247': attribute type 12 has an invalid length.
[  265.629960][T15626] netlink: 'syz.1.2247': attribute type 12 has an invalid length.
[  265.814393][T15637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.818233][T15638] syzkaller1: entered promiscuous mode
[  265.820399][T15638] syzkaller1: entered allmulticast mode
[  265.916089][T15645] netlink: 'syz.0.2252': attribute type 11 has an invalid length.
[  265.991962][T15654] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.046423][T15657] delete_channel: no stack
[  266.052122][T15657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.103064][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.119830][T15667] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.147617][T15669] lo speed is unknown, defaulting to 1000
[  266.183042][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.188970][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.197170][T15674] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  266.317443][T15682] __nla_validate_parse: 8 callbacks suppressed
[  266.317453][T15682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2264'.
[  266.361320][T15669] lo speed is unknown, defaulting to 1000
[  266.371642][T15688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2265'.
[  266.372037][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2265'.
[  266.831485][T15703] IPVS: Scheduler module ip_vs_sip not found
[  266.939921][T15710] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  266.948520][T15710] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  267.001400][T15712] syzkaller1: entered promiscuous mode
[  267.006401][T15712] syzkaller1: entered allmulticast mode
[  267.068020][T15717] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2273'.
[  267.087302][T15723] validate_nla: 2 callbacks suppressed
[  267.087311][T15723] netlink: 'syz.1.2274': attribute type 3 has an invalid length.
[  267.091987][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  267.097328][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'.
[  267.101008][T15723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2274'.
[  267.142560][ T5975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  267.160096][T15728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2276'.
[  267.163150][T15728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2276'.
[  267.166093][T15728] netlink: 'syz.1.2276': attribute type 5 has an invalid length.
[  267.168689][T15728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2276'.
[  267.228696][T15730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.318133][T15734] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.325790][T15734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  267.421024][T15744] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.426615][T15744] geneve0: entered allmulticast mode
[  267.726929][T15755] tipc: Resetting bearer <eth:syzkaller0>
[  267.730316][T15755] bond15: (slave bridge8): Removing an active aggregator
[  267.737440][T15755] bond15: (slave bridge8): Releasing backup interface
[  267.745006][T15755] bridge8: left promiscuous mode
[  267.747453][T15755] bridge8: left allmulticast mode
[  267.751524][T15755] bond16: (slave bridge9): Releasing active interface
[  267.758600][T15757] netlink: 'syz.1.2286': attribute type 13 has an invalid length.
[  267.762024][T15757] netlink: 'syz.1.2286': attribute type 17 has an invalid length.
[  267.775131][T15757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.802676][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  267.810464][T15757] lo speed is unknown, defaulting to 1000
[  267.951177][T15757] lo speed is unknown, defaulting to 1000
[  268.171301][T15778] pim6reg1: entered promiscuous mode
[  268.180774][T15778] pim6reg1: entered allmulticast mode
[  268.193304][T15781] netlink: 'syz.1.2291': attribute type 4 has an invalid length.
[  268.213388][T15781] netlink: 'syz.1.2291': attribute type 4 has an invalid length.
[  268.297559][T15783] netlink: 'syz.1.2292': attribute type 1 has an invalid length.
[  268.304462][T15783] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.348778][T15785] lo speed is unknown, defaulting to 1000
[  268.398952][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.588719][T15800] tipc: Resetting bearer <eth:syzkaller0>
[  268.602592][T15800] syzkaller1: entered promiscuous mode
[  268.604531][T15800] syzkaller1: entered allmulticast mode
[  268.625502][T15785] lo speed is unknown, defaulting to 1000
[  268.673515][T15803] netlink: 'syz.2.2298': attribute type 13 has an invalid length.
[  268.708596][T15802] lo speed is unknown, defaulting to 1000
[  268.713930][T15805] IPv6: sit6: Disabled Multicast RS
[  268.936023][T15812] bridge0: entered allmulticast mode
[  269.052056][T15802] lo speed is unknown, defaulting to 1000
[  269.400584][T15834] syzkaller1: entered promiscuous mode
[  269.407206][T15834] syzkaller1: entered allmulticast mode
[  269.799663][T15854] netlink: ct family unspecified
[  269.801752][T15854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.098525][T15863] netlink: 'syz.2.2313': attribute type 4 has an invalid length.
[  270.169764][T15875] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  270.272408][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  270.557107][T15896] 0{X: entered promiscuous mode
[  270.562634][T15898] 1{X: renamed from 30{X
[  270.569578][T15898] 1{X: left promiscuous mode
[  270.571359][T15898] 1{X: entered allmulticast mode
[  270.577326][T15898] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  270.665467][T15904] lo speed is unknown, defaulting to 1000
[  270.808116][T15910] bond17: (slave bridge0): making interface the new active one
[  270.811215][T15910] bond17: (slave bridge0): Enslaving as an active interface with an up link
[  270.822474][T15904] lo speed is unknown, defaulting to 1000
[  270.830739][T15910] tipc: Resetting bearer <eth:syzkaller0>
[  270.894716][T15919] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.099706][T15929] syzkaller1: entered promiscuous mode
[  271.102050][T15929] syzkaller1: entered allmulticast mode
[  271.202934][T15934] lo speed is unknown, defaulting to 1000
[  271.256507][T15942] pim6reg1: entered allmulticast mode
[  271.387575][T15951] __nla_validate_parse: 28 callbacks suppressed
[  271.387590][T15951] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2336'.
[  271.426000][T15953] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  271.433071][T15954] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  271.513557][T15954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'.
[  271.593807][T15934] lo speed is unknown, defaulting to 1000
[  271.641842][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'.
[  271.646779][T15961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2338'.
[  271.768023][T15968] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2340'.
[  271.999395][T15974] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  272.076471][T15974] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  272.137455][T15974] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  272.151964][T15982] pim6reg1: entered promiscuous mode
[  272.155140][T15982] pim6reg1: entered allmulticast mode
[  272.194555][T15974] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  272.245833][T15982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2343'.
[  272.254009][T15982] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  272.256384][T15982] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  272.259487][T15982] tipc: Resetting bearer <eth:syzkaller0>
[  272.306383][T15982] bond13 (unregistering): Released all slaves
[  272.336904][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'.
[  272.409717][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  272.431277][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  272.449131][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  272.480048][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  272.538348][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'.
[  272.544067][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2347'.
[  272.588830][T16006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'.
[  272.600409][T16007] validate_nla: 5 callbacks suppressed
[  272.600421][T16007] netlink: 'syz.0.2346': attribute type 13 has an invalid length.
[  272.610229][T16007] netlink: 'syz.0.2346': attribute type 17 has an invalid length.
[  272.628868][T16007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.668678][T16007] lo speed is unknown, defaulting to 1000
[  272.818209][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.821659][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.859069][T16007] lo speed is unknown, defaulting to 1000
[  273.025423][T16024] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.077173][T16024] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.118416][T16027] tipc: Resetting bearer <eth:syzkaller0>
[  273.125825][T16027] bond0: (slave bridge9): Releasing backup interface
[  273.128374][T16027] bridge9: left promiscuous mode
[  273.146557][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  273.152819][T16024] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.209299][T16024] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.293246][ T5709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  273.300009][ T5709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  273.314046][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  273.321712][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  273.355426][T16032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.418436][T16032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.464859][ T5861] Bluetooth: hci0: command tx timeout
[  273.477148][T16032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.537232][T16032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.022750][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  274.581179][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  274.590801][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  274.602741][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  274.614366][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  274.798741][T16067] netlink: 'syz.0.2365': attribute type 13 has an invalid length.
[  274.801571][T16067] netlink: 'syz.0.2365': attribute type 17 has an invalid length.
[  274.807993][T16067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.846254][T16067] lo speed is unknown, defaulting to 1000
[  274.852220][T16069] netlink: 'syz.1.2366': attribute type 11 has an invalid length.
[  274.963289][T16077] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20002
[  275.024958][T16067] lo speed is unknown, defaulting to 1000
[  276.060172][T16093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.192702][T16095] macvlan1: entered promiscuous mode
[  276.208650][T16095] macvlan1: entered allmulticast mode
[  276.229203][T16095] bond18: (slave macvlan1): Opening slave failed
[  276.260301][T16106] vlan0: entered promiscuous mode
[  276.264364][T16106] team_slave_1: entered promiscuous mode
[  276.288827][T16101] sctp: [Deprecated]: syz.1.2375 (pid 16101) Use of struct sctp_assoc_value in delayed_ack socket option.
[  276.288827][T16101] Use struct sctp_sack_info instead
[  276.368947][T16114] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  276.454206][T16114] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  276.493726][T16119] __nla_validate_parse: 9 callbacks suppressed
[  276.493740][T16119] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2378'.
[  276.500465][T16119] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2378'.
[  276.521891][T16114] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  276.588062][T16114] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  276.604852][T16132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.608863][T16132] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  276.612041][T16132] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  276.615959][T16132] tipc: Resetting bearer <eth:syzkaller0>
[  276.718184][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  276.730692][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  276.739384][ T5883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  276.757511][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  276.765409][T16140] netlink: 'syz.1.2385': attribute type 16 has an invalid length.
[  276.768194][T16140] netlink: 'syz.1.2385': attribute type 17 has an invalid length.
[  276.810332][T16140] tipc: Resetting bearer <eth:syzkaller0>
[  276.901490][T16153] lo speed is unknown, defaulting to 1000
[  276.948627][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'.
[  276.998344][T16153] lo speed is unknown, defaulting to 1000
[  277.177939][T16171] netlink: 'syz.2.2393': attribute type 4 has an invalid length.
[  277.188454][ T7374] lo speed is unknown, defaulting to 1000
[  277.190469][ T7374] sz1: Port: 1 Link DOWN
[  277.192005][ T7374] lo speed is unknown, defaulting to 1000
[  277.201716][T16171] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2393'.
[  277.205658][T16171] nbd: couldn't find a device at index 0
[  277.249826][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'.
[  277.370499][T16181] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.434269][T16189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  277.538699][T16196] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2399'.
[  277.567128][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'.
[  277.707798][T16203] netlink: 'syz.0.2401': attribute type 13 has an invalid length.
[  277.711095][T16203] netlink: 'syz.0.2401': attribute type 17 has an invalid length.
[  277.742804][T16203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.791367][T16206] netlink: 'syz.1.2402': attribute type 13 has an invalid length.
[  277.791736][T16200] lo speed is unknown, defaulting to 1000
[  277.800177][T16206] netlink: 'syz.1.2402': attribute type 17 has an invalid length.
[  277.859678][T16206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  277.871990][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.880680][ T5883] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.883515][ T5975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  277.885937][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2401'.
[  277.967111][T16200] lo speed is unknown, defaulting to 1000
[  277.973775][ T5975] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  278.014551][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'.
[  278.106728][T16206] lo speed is unknown, defaulting to 1000
[  278.467233][T16206] lo speed is unknown, defaulting to 1000
[  278.662694][ T7374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  278.885686][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2408'.
[  278.975996][T16239] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.013057][T16244] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  279.218705][T16252] macsec1: entered promiscuous mode
[  279.220466][T16252] mac80211_hwsim hwsim105 wlan0: entered promiscuous mode
[  279.222985][T16252] macsec1: entered allmulticast mode
[  279.224922][T16252] mac80211_hwsim hwsim105 wlan0: entered allmulticast mode
[  279.305577][T16255] netlink: 'syz.2.2413': attribute type 12 has an invalid length.
[  279.391116][T16258] IPVS: Scheduler module ip_vs_sip not found
[  279.738463][T16279] IPv6: Can't replace route, no match found
[  279.826285][ T5709] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  279.830168][ T5709] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  279.834103][ T5709] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  279.837871][ T5709] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.850168][T16288] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.008238][T16302] 8021q: VLANs not supported on ip6gre0
[  280.032035][T16310] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.079281][T16322] tipc: Resetting bearer <eth:syzkaller0>
[  280.082884][T16318] pim6reg1: entered promiscuous mode
[  280.084702][T16318] pim6reg1: entered allmulticast mode
[  280.114253][ T5314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.128360][T16320] lo speed is unknown, defaulting to 1000
[  280.217145][T16320] lo speed is unknown, defaulting to 1000
[  280.272884][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.556319][T16344] netlink: 'syz.0.2438': attribute type 1 has an invalid length.
[  280.608953][T16344] 8021q: adding VLAN 0 to HW filter on device bond11
[  280.628714][T16339] vlan0: entered allmulticast mode
[  280.630876][T16339] veth1: entered allmulticast mode
[  280.634267][T16339] bond11: (slave vlan0): Opening slave failed
[  280.645947][T16347] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.716780][T16349] netlink: 'syz.2.2441': attribute type 10 has an invalid length.
[  280.720897][T16349] mac80211_hwsim hwsim110 wlan1: entered allmulticast mode
[  280.817746][T16361] macvlan1: entered promiscuous mode
[  280.819930][T16361] bond0: entered promiscuous mode
[  280.830909][T16361] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  280.844645][T16361] netlink: 'syz.2.2444': attribute type 4 has an invalid length.
[  280.900157][T16375] netlink: 'syz.2.2447': attribute type 1 has an invalid length.
[  280.923062][T16375] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  280.962164][T16387] netlink: 'syz.2.2450': attribute type 10 has an invalid length.
[  280.991187][T16387] batadv0: entered promiscuous mode
[  281.005564][T16387] batadv0: entered allmulticast mode
[  281.013424][T16387] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  281.198680][T16407] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.228979][T16411] lo speed is unknown, defaulting to 1000
[  281.325649][T16411] lo speed is unknown, defaulting to 1000
[  281.475336][T16428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.619428][T16432] tipc: Resetting bearer <eth:syzkaller0>
[  281.629205][T16432] mac80211_hwsim hwsim105 wlan0: left allmulticast mode
[  281.633373][ T5883] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.636534][ T5883] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.643995][ T5883] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.651495][ T5883] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  281.790468][T16376] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  282.616267][T16440] __nla_validate_parse: 18 callbacks suppressed
[  282.616278][T16440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'.
[  282.771404][T16440] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  282.818023][T16440] CPU: 1 UID: 0 PID: 16440 Comm: syz.0.2463 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  282.818043][T16440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.818051][T16440] Call Trace:
[  282.818056][T16440]  <TASK>
[  282.818062][T16440]  dump_stack_lvl+0x189/0x250
[  282.818085][T16440]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.818098][T16440]  ? __pfx__printk+0x10/0x10
[  282.818117][T16440]  ? kernfs_path_from_node+0x2f/0x290
[  282.818130][T16440]  ? kernfs_path_from_node+0x250/0x290
[  282.818140][T16440]  ? kernfs_path_from_node+0x2f/0x290
[  282.818155][T16440]  sysfs_warn_dup+0x8e/0xa0
[  282.818167][T16440]  sysfs_do_create_link_sd+0xc0/0x110
[  282.818179][T16440]  device_add_class_symlinks+0x1cf/0x240
[  282.818188][T16440]  device_add+0x475/0xb50
[  282.818197][T16440]  wiphy_register+0x1ba6/0x28d0
[  282.818215][T16440]  ? __pfx_wiphy_register+0x10/0x10
[  282.818224][T16440]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  282.818235][T16440]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  282.818247][T16440]  ieee80211_register_hw+0x3425/0x4080
[  282.818263][T16440]  ? ieee80211_register_hw+0x1411/0x4080
[  282.818273][T16440]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  282.818287][T16440]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  282.818305][T16440]  ? __hrtimer_setup+0x187/0x210
[  282.818315][T16440]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  282.818333][T16440]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  282.818369][T16440]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  282.818383][T16440]  ? trace_kmalloc+0x1f/0xd0
[  282.818397][T16440]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  282.818412][T16440]  ? kstrndup+0xbf/0x160
[  282.818427][T16440]  hwsim_new_radio_nl+0xea4/0x1b10
[  282.818439][T16440]  ? __pfx___nla_validate_parse+0x10/0x10
[  282.818462][T16440]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.818482][T16440]  ? __nla_parse+0x40/0x60
[  282.818532][T16440]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  282.818551][T16440]  genl_family_rcv_msg_doit+0x215/0x300
[  282.818571][T16440]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  282.818594][T16440]  ? bpf_lsm_capable+0x9/0x20
[  282.818608][T16440]  ? security_capable+0x7e/0x2e0
[  282.818626][T16440]  genl_rcv_msg+0x60e/0x790
[  282.818636][T16440]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.818643][T16440]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  282.818656][T16440]  netlink_rcv_skb+0x208/0x470
[  282.818665][T16440]  ? __lock_acquire+0xab9/0xd20
[  282.818674][T16440]  ? __pfx_genl_rcv_msg+0x10/0x10
[  282.818682][T16440]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  282.818698][T16440]  ? down_read+0x1ad/0x2e0
[  282.818706][T16440]  genl_rcv+0x28/0x40
[  282.818712][T16440]  netlink_unicast+0x82f/0x9e0
[  282.818724][T16440]  ? __pfx_netlink_unicast+0x10/0x10
[  282.818733][T16440]  ? netlink_sendmsg+0x642/0xb30
[  282.818740][T16440]  ? skb_put+0x11b/0x210
[  282.818749][T16440]  netlink_sendmsg+0x805/0xb30
[  282.818762][T16440]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.818776][T16440]  ? aa_sock_msg_perm+0xf1/0x1d0
[  282.818786][T16440]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  282.818793][T16440]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.818802][T16440]  __sock_sendmsg+0x21c/0x270
[  282.818813][T16440]  ____sys_sendmsg+0x505/0x830
[  282.818822][T16440]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.818834][T16440]  ? import_iovec+0x74/0xa0
[  282.818843][T16440]  ___sys_sendmsg+0x21f/0x2a0
[  282.818851][T16440]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.818872][T16440]  ? __fget_files+0x2a/0x420
[  282.818878][T16440]  ? __fget_files+0x3a0/0x420
[  282.818888][T16440]  __x64_sys_sendmsg+0x19b/0x260
[  282.818896][T16440]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  282.818907][T16440]  ? rcu_is_watching+0x15/0xb0
[  282.818916][T16440]  ? do_syscall_64+0xbe/0x3b0
[  282.818927][T16440]  do_syscall_64+0xfa/0x3b0
[  282.818935][T16440]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.818944][T16440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.818951][T16440]  ? exc_page_fault+0x9f/0xf0
[  282.818960][T16440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.818967][T16440] RIP: 0033:0x7fbf1b38ebe9
[  282.818974][T16440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.818980][T16440] RSP: 002b:00007fbf1c1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.818989][T16440] RAX: ffffffffffffffda RBX: 00007fbf1b5b5fa0 RCX: 00007fbf1b38ebe9
[  282.818994][T16440] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  282.818998][T16440] RBP: 00007fbf1b411e19 R08: 0000000000000000 R09: 0000000000000000
[  282.819002][T16440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  282.819006][T16440] R13: 00007fbf1b5b6038 R14: 00007fbf1b5b5fa0 R15: 00007fffe5f45838
[  282.819017][T16440]  </TASK>
[  283.016387][ T5861] Bluetooth: hci2: command 0x0405 tx timeout
[  283.190235][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2464'.
[  283.276910][T16449] validate_nla: 3 callbacks suppressed
[  283.276920][T16449] netlink: 'syz.0.2465': attribute type 4 has an invalid length.
[  283.305337][ T7374] lo speed is unknown, defaulting to 1000
[  283.307229][ T7374] syz0: Port: 1 Link DOWN
[  283.308652][ T7374] lo speed is unknown, defaulting to 1000
[  283.311455][T16451] openvswitch: netlink: Message has 16 unknown bytes.
[  283.365276][T16449] netlink: 'syz.0.2465': attribute type 4 has an invalid length.
[  283.369666][ T7374] lo speed is unknown, defaulting to 1000
[  283.371602][ T7374] syz0: Port: 1 Link ACTIVE
[  283.373465][ T5975] lo speed is unknown, defaulting to 1000
[  283.486990][T16460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2468'.
[  283.537253][T16464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.576052][T16468] tipc: Enabling of bearer <etY:syzkaller0> rejected, media not registered
[  283.758141][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  283.778395][T16485] tipc: Resetting bearer <eth:syzkaller0>
[  283.874718][T16493] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  283.877776][T16493] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  283.958676][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2482'.
[  283.999988][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'.
[  284.004115][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'.
[  284.006412][T16515] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.021284][T16517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.086989][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'.
[  284.155724][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2488'.
[  284.198462][T16533] netlink: 'syz.2.2489': attribute type 13 has an invalid length.
[  284.203644][T16533] netlink: 'syz.2.2489': attribute type 17 has an invalid length.
[  284.210936][T16533] 1{X: left allmulticast mode
[  284.217634][T16533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.223332][ T7374] lo speed is unknown, defaulting to 1000
[  284.225691][ T7374] sz1: Port: 1 Link ACTIVE
[  284.227267][ T7374] lo speed is unknown, defaulting to 1000
[  284.244714][T16533] lo speed is unknown, defaulting to 1000
[  284.330621][T16543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2491'.
[  284.370828][T16533] lo speed is unknown, defaulting to 1000
[  284.477875][T16553] netlink: 'syz.0.2492': attribute type 13 has an invalid length.
[  284.480660][T16553] netlink: 'syz.0.2492': attribute type 17 has an invalid length.
[  284.491576][T16553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.514185][T16547] lo speed is unknown, defaulting to 1000
[  284.549421][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'.
[  284.601715][T16558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.647982][T16547] lo speed is unknown, defaulting to 1000
[  284.665670][T16570] netlink: 'syz.1.2498': attribute type 13 has an invalid length.
[  284.668272][T16570] netlink: 'syz.1.2498': attribute type 17 has an invalid length.
[  284.681771][T16570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  284.691392][ T5709] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.703034][ T5709] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.705838][ T5709] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  284.766568][T16578] netlink: 'syz.2.2500': attribute type 10 has an invalid length.
[  284.786152][T16570] lo speed is unknown, defaulting to 1000
[  284.813025][ T1272] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.021218][T16570] lo speed is unknown, defaulting to 1000
[  285.127337][T16600] netlink: 'syz.2.2505': attribute type 4 has an invalid length.
[  285.131733][ T1272] lo speed is unknown, defaulting to 1000
[  285.140174][ T1272] sz1: Port: 1 Link DOWN
[  285.146308][ T1272] lo speed is unknown, defaulting to 1000
[  285.172651][ T7374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  285.194118][T16609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.342096][T16626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.346517][T16626] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.853387][T16650] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.120496][T16656] ip6tnl4: entered promiscuous mode
[  286.123241][T16656] ip6tnl4: entered allmulticast mode
[  286.132889][T16656] team0: Refused to change device type
[  286.134592][T16655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  286.260131][T16661] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  286.288873][T16661] CPU: 0 UID: 0 PID: 16661 Comm: syz.2.2520 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  286.288891][T16661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  286.288897][T16661] Call Trace:
[  286.288902][T16661]  <TASK>
[  286.288907][T16661]  dump_stack_lvl+0x189/0x250
[  286.288929][T16661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.288941][T16661]  ? __pfx__printk+0x10/0x10
[  286.288962][T16661]  ? kernfs_path_from_node+0x2f/0x290
[  286.288975][T16661]  ? kernfs_path_from_node+0x250/0x290
[  286.288985][T16661]  ? kernfs_path_from_node+0x2f/0x290
[  286.289002][T16661]  sysfs_warn_dup+0x8e/0xa0
[  286.289014][T16661]  sysfs_do_create_link_sd+0xc0/0x110
[  286.289027][T16661]  device_add_class_symlinks+0x1cf/0x240
[  286.289044][T16661]  device_add+0x475/0xb50
[  286.289058][T16661]  wiphy_register+0x1ba6/0x28d0
[  286.289084][T16661]  ? __pfx_wiphy_register+0x10/0x10
[  286.289097][T16661]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  286.289113][T16661]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  286.289133][T16661]  ieee80211_register_hw+0x3425/0x4080
[  286.289155][T16661]  ? ieee80211_register_hw+0x1411/0x4080
[  286.289171][T16661]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  286.289184][T16661]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.289203][T16661]  ? __hrtimer_setup+0x187/0x210
[  286.289211][T16661]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  286.289229][T16661]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  286.289262][T16661]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  286.289273][T16661]  ? trace_kmalloc+0x1f/0xd0
[  286.289284][T16661]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  286.289297][T16661]  ? kstrndup+0xbf/0x160
[  286.289315][T16661]  hwsim_new_radio_nl+0xea4/0x1b10
[  286.289330][T16661]  ? __pfx___nla_validate_parse+0x10/0x10
[  286.289355][T16661]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.289377][T16661]  ? __nla_parse+0x40/0x60
[  286.289395][T16661]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  286.289413][T16661]  genl_family_rcv_msg_doit+0x215/0x300
[  286.289429][T16661]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  286.289483][T16661]  ? bpf_lsm_capable+0x9/0x20
[  286.289498][T16661]  ? security_capable+0x7e/0x2e0
[  286.289518][T16661]  genl_rcv_msg+0x60e/0x790
[  286.289536][T16661]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.289549][T16661]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  286.289574][T16661]  netlink_rcv_skb+0x208/0x470
[  286.289588][T16661]  ? __lock_acquire+0xab9/0xd20
[  286.289604][T16661]  ? __pfx_genl_rcv_msg+0x10/0x10
[  286.289616][T16661]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  286.289643][T16661]  ? down_read+0x1ad/0x2e0
[  286.289655][T16661]  genl_rcv+0x28/0x40
[  286.289665][T16661]  netlink_unicast+0x82f/0x9e0
[  286.289684][T16661]  ? __pfx_netlink_unicast+0x10/0x10
[  286.289698][T16661]  ? netlink_sendmsg+0x642/0xb30
[  286.289711][T16661]  ? skb_put+0x11b/0x210
[  286.289723][T16661]  netlink_sendmsg+0x805/0xb30
[  286.289744][T16661]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.289760][T16661]  ? aa_sock_msg_perm+0xf1/0x1d0
[  286.289777][T16661]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.289788][T16661]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.289803][T16661]  __sock_sendmsg+0x21c/0x270
[  286.289819][T16661]  ____sys_sendmsg+0x505/0x830
[  286.289833][T16661]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.289850][T16661]  ? import_iovec+0x74/0xa0
[  286.289865][T16661]  ___sys_sendmsg+0x21f/0x2a0
[  286.289877][T16661]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.289906][T16661]  ? __fget_files+0x2a/0x420
[  286.289915][T16661]  ? __fget_files+0x3a0/0x420
[  286.289932][T16661]  __x64_sys_sendmsg+0x19b/0x260
[  286.289946][T16661]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.289966][T16661]  ? rcu_is_watching+0x15/0xb0
[  286.289982][T16661]  ? do_syscall_64+0xbe/0x3b0
[  286.290001][T16661]  do_syscall_64+0xfa/0x3b0
[  286.290015][T16661]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.290030][T16661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.290041][T16661]  ? exc_page_fault+0x9f/0xf0
[  286.290055][T16661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.290064][T16661] RIP: 0033:0x7f9c1758ebe9
[  286.290074][T16661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.290083][T16661] RSP: 002b:00007f9c1835f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.290096][T16661] RAX: ffffffffffffffda RBX: 00007f9c177b5fa0 RCX: 00007f9c1758ebe9
[  286.290105][T16661] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  286.290111][T16661] RBP: 00007f9c17611e19 R08: 0000000000000000 R09: 0000000000000000
[  286.290118][T16661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.290124][T16661] R13: 00007f9c177b6038 R14: 00007f9c177b5fa0 R15: 00007ffe6420e838
[  286.290146][T16661]  </TASK>
[  286.789610][T16695] 8021q: adding VLAN 0 to HW filter on device team0
[  286.799051][T16695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.808231][ T5975] lo speed is unknown, defaulting to 1000
[  286.812590][ T5975] sz1: Port: 1 Link ACTIVE
[  286.817374][ T5975] lo speed is unknown, defaulting to 1000
[  286.845652][T16695] lo speed is unknown, defaulting to 1000
[  286.956279][T16695] lo speed is unknown, defaulting to 1000
[  287.432873][T16729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.490667][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.495139][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.501112][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.511673][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.695840][T16746] __nla_validate_parse: 21 callbacks suppressed
[  287.695852][T16746] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2542'.
[  287.702591][T16747] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2542'.
[  287.794211][ T1272] lo speed is unknown, defaulting to 1000
[  287.798561][ T5314] lo speed is unknown, defaulting to 1000
[  287.804011][ T1272] lo speed is unknown, defaulting to 1000
[  287.838673][T16757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2546'.
[  287.893919][T16760] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.936206][T16765] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.940106][T16764] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  287.961881][T16764] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2548'.
[  287.999269][T16771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2549'.
[  288.031253][T16765] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2548'.
[  288.087706][T16776] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.092993][T16777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.136117][T16782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2553'.
[  288.155812][T16782] team0: Port device geneve0 added
[  288.158199][ T5883] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  288.183910][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2552'.
[  288.191984][ T5883] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  288.197387][ T5883] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  288.200530][ T5883] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  288.228456][T16789] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2555'.
[  288.312677][T16796] 1{X: entered promiscuous mode
[  288.315595][T16796] batman_adv: batadv0: Adding interface: macvlan2
[  288.318113][T16796] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.329537][T16796] batman_adv: batadv0: Interface activated: macvlan2
[  288.369125][T16807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  288.513317][T16824] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2566'.
[  288.609793][T16830] validate_nla: 14 callbacks suppressed
[  288.609802][T16830] netlink: 'syz.2.2568': attribute type 29 has an invalid length.
[  288.705921][T16838] openvswitch: netlink: Flow key attr not present in new flow.
[  288.711369][T16842] syzkaller1: entered promiscuous mode
[  288.713224][T16838] IPv6: Can't replace route, no match found
[  288.714629][T16842] syzkaller1: entered allmulticast mode
[  288.716569][T16838] netlink: 'syz.2.2570': attribute type 11 has an invalid length.
[  288.759625][   T33] audit: type=1107 audit(1755529459.774:2): pid=16843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='TQ9'
[  288.765145][T16844] lo speed is unknown, defaulting to 1000
[  288.767930][T16844] lo speed is unknown, defaulting to 1000
[  288.770510][T16844] lo speed is unknown, defaulting to 1000
[  288.777975][T16844] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  288.785712][T16844] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  288.807548][T16844] lo speed is unknown, defaulting to 1000
[  288.810624][T16844] lo speed is unknown, defaulting to 1000
[  288.814740][T16844] lo speed is unknown, defaulting to 1000
[  289.024920][T16867] syz0: rxe_newlink: already configured on lo
[  289.027183][T16868] syz0: rxe_newlink: already configured on lo
[  289.035794][T16870] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  289.054342][T16871] bond20 (unregistering): Released all slaves
[  289.123652][T16870] bond20: (slave gretap2): making interface the new active one
[  289.126968][T16870] bond20: (slave gretap2): Enslaving as an active interface with an up link
[  289.194691][T16888] syz0: rxe_newlink: already configured on lo
[  289.211532][T16888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.335868][T16912] sctp: [Deprecated]: syz.0.2590 (pid 16912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  289.335868][T16912] Use struct sctp_sack_info instead
[  289.350896][T16915] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.359291][T16915] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  289.362181][T16915] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  289.396879][T16912] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  289.404069][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.0.2590 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  289.404093][T16912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  289.404100][T16912] Call Trace:
[  289.404108][T16912]  <TASK>
[  289.404114][T16912]  dump_stack_lvl+0x189/0x250
[  289.404140][T16912]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.404177][T16912]  ? __pfx__printk+0x10/0x10
[  289.404201][T16912]  ? kernfs_path_from_node+0x2f/0x290
[  289.404217][T16912]  ? kernfs_path_from_node+0x250/0x290
[  289.404230][T16912]  ? kernfs_path_from_node+0x2f/0x290
[  289.404245][T16912]  sysfs_warn_dup+0x8e/0xa0
[  289.404259][T16912]  sysfs_do_create_link_sd+0xc0/0x110
[  289.404275][T16912]  device_add_class_symlinks+0x1cf/0x240
[  289.404293][T16912]  device_add+0x475/0xb50
[  289.404308][T16912]  wiphy_register+0x1ba6/0x28d0
[  289.404338][T16912]  ? __pfx_wiphy_register+0x10/0x10
[  289.404351][T16912]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  289.404372][T16912]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  289.404425][T16912]  ieee80211_register_hw+0x3425/0x4080
[  289.404455][T16912]  ? ieee80211_register_hw+0x1411/0x4080
[  289.404475][T16912]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  289.404491][T16912]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  289.404513][T16912]  ? __hrtimer_setup+0x187/0x210
[  289.404524][T16912]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  289.404545][T16912]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  289.404591][T16912]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  289.404605][T16912]  ? trace_kmalloc+0x1f/0xd0
[  289.404619][T16912]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  289.404634][T16912]  ? kstrndup+0xbf/0x160
[  289.404650][T16912]  hwsim_new_radio_nl+0xea4/0x1b10
[  289.404668][T16912]  ? __pfx___nla_validate_parse+0x10/0x10
[  289.404691][T16912]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  289.404713][T16912]  ? __nla_parse+0x40/0x60
[  289.404734][T16912]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  289.404758][T16912]  genl_family_rcv_msg_doit+0x215/0x300
[  289.404779][T16912]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  289.404802][T16912]  ? bpf_lsm_capable+0x9/0x20
[  289.404817][T16912]  ? security_capable+0x7e/0x2e0
[  289.404837][T16912]  genl_rcv_msg+0x60e/0x790
[  289.404854][T16912]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.404864][T16912]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  289.404886][T16912]  netlink_rcv_skb+0x208/0x470
[  289.404901][T16912]  ? __lock_acquire+0xab9/0xd20
[  289.404918][T16912]  ? __pfx_genl_rcv_msg+0x10/0x10
[  289.404933][T16912]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  289.404964][T16912]  ? down_read+0x1ad/0x2e0
[  289.404978][T16912]  genl_rcv+0x28/0x40
[  289.404990][T16912]  netlink_unicast+0x82f/0x9e0
[  289.405010][T16912]  ? __pfx_netlink_unicast+0x10/0x10
[  289.405028][T16912]  ? netlink_sendmsg+0x642/0xb30
[  289.405042][T16912]  ? skb_put+0x11b/0x210
[  289.405057][T16912]  netlink_sendmsg+0x805/0xb30
[  289.405076][T16912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.405114][T16912]  ? aa_sock_msg_perm+0xf1/0x1d0
[  289.405140][T16912]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  289.405156][T16912]  ? __pfx_netlink_sendmsg+0x10/0x10
[  289.405174][T16912]  __sock_sendmsg+0x21c/0x270
[  289.405189][T16912]  ____sys_sendmsg+0x505/0x830
[  289.405207][T16912]  ? __pfx_____sys_sendmsg+0x10/0x10
[  289.405225][T16912]  ? import_iovec+0x74/0xa0
[  289.405242][T16912]  ___sys_sendmsg+0x21f/0x2a0
[  289.405255][T16912]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.405293][T16912]  ? __fget_files+0x2a/0x420
[  289.405306][T16912]  ? __fget_files+0x3a0/0x420
[  289.405324][T16912]  __x64_sys_sendmsg+0x19b/0x260
[  289.405337][T16912]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.405364][T16912]  ? do_syscall_64+0xbe/0x3b0
[  289.405385][T16912]  do_syscall_64+0xfa/0x3b0
[  289.405425][T16912]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.405441][T16912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.405456][T16912]  ? exc_page_fault+0x9f/0xf0
[  289.405473][T16912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.405486][T16912] RIP: 0033:0x7fbf1b38ebe9
[  289.405499][T16912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.405508][T16912] RSP: 002b:00007fbf1c1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.405523][T16912] RAX: ffffffffffffffda RBX: 00007fbf1b5b5fa0 RCX: 00007fbf1b38ebe9
[  289.405530][T16912] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  289.405537][T16912] RBP: 00007fbf1b411e19 R08: 0000000000000000 R09: 0000000000000000
[  289.405543][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  289.405562][T16912] R13: 00007fbf1b5b6038 R14: 00007fbf1b5b5fa0 R15: 00007fffe5f45838
[  289.405582][T16912]  </TASK>
[  289.598859][T16919] netlink: 'syz.1.2592': attribute type 10 has an invalid length.
[  289.620878][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.895068][T16937] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  289.903832][T16937] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.173897][T16945] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.246193][T16950] netem: change failed
[  290.359832][T16965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  290.433702][T16970] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.442677][T16970] team0: Device gtp1 is of different type
[  290.685348][T16982] netlink: 'syz.1.2608': attribute type 4 has an invalid length.
[  290.688658][T16982] netlink: 'syz.1.2608': attribute type 4 has an invalid length.
[  291.347336][T16997] lo speed is unknown, defaulting to 1000
[  291.466544][T16997] lo speed is unknown, defaulting to 1000
[  291.561183][T16997] lo speed is unknown, defaulting to 1000
[  291.739597][T16997] netlink: 'syz.2.2612': attribute type 6 has an invalid length.
[  291.988400][T17017] netlink: 'syz.1.2615': attribute type 10 has an invalid length.
[  292.044904][T17019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.469273][T17041] syzkaller1: entered allmulticast mode
[  292.534236][T17048] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  292.545588][T17048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.568264][   T10] lo speed is unknown, defaulting to 1000
[  292.620819][T17050] lo speed is unknown, defaulting to 1000
[  292.749641][T17054] __nla_validate_parse: 30 callbacks suppressed
[  292.749662][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'.
[  292.791184][T17063] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2627'.
[  292.795098][T17063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2627'.
[  292.803718][T17063] syz0: rxe_newlink: already configured on lo
[  292.808610][T17063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  292.815756][T17050] lo speed is unknown, defaulting to 1000
[  292.899808][T17065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2628'.
[  292.907435][T17050] lo speed is unknown, defaulting to 1000
[  292.958819][T17070] lo speed is unknown, defaulting to 1000
[  293.042774][T17069] lo speed is unknown, defaulting to 1000
[  293.053476][T17070] lo speed is unknown, defaulting to 1000
[  293.156753][T17070] lo speed is unknown, defaulting to 1000
[  293.175792][T17069] lo speed is unknown, defaulting to 1000
[  293.307673][T17076] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.323268][T17076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'.
[  293.326694][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2630'.
[  293.331209][T17069] lo speed is unknown, defaulting to 1000
[  293.577167][T17087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2633'.
[  293.580551][T17086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2633'.
[  293.663415][T17087] dvmrp1: entered allmulticast mode
[  293.690681][T17089] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  293.749387][T17091] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2635'.
[  293.806455][T17094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'.
[  293.933873][T17098] netlink: 'syz.2.2636': attribute type 1 has an invalid length.
[  294.050539][T17098] team0 (unregistering): Port device geneve0 removed
[  294.060620][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  294.068122][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  294.105428][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  294.109305][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  294.139104][T17100] netlink: 'syz.2.2637': attribute type 2 has an invalid length.
[  294.389497][T17111] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  294.495465][T17117] sock: sock_timestamping_bind_phc: sock not bind to device
[  294.568819][T17124] mac80211_hwsim hwsim117 wlan0: entered promiscuous mode
[  294.572077][T17124] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  294.601134][T17126] lo speed is unknown, defaulting to 1000
[  294.715247][T17126] lo speed is unknown, defaulting to 1000
[  294.757291][T17136] lo speed is unknown, defaulting to 1000
[  294.891023][T17126] lo speed is unknown, defaulting to 1000
[  294.925217][T17136] lo speed is unknown, defaulting to 1000
[  295.035809][T17149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.039437][T17149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.067995][T17149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.083091][T17149] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.113498][T17136] lo speed is unknown, defaulting to 1000
[  295.419163][T17174] netlink: 'syz.1.2655': attribute type 10 has an invalid length.
[  295.470919][T17181] sit5: entered promiscuous mode
[  295.633946][T17192] netlink: 'syz.2.2658': attribute type 10 has an invalid length.
[  295.636765][T17192] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  295.958674][T17212] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  295.961434][T17212] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  295.968622][T17212] geneve8: left promiscuous mode
[  295.970277][T17212] geneve8: left allmulticast mode
[  295.977080][T17212] bond0: left promiscuous mode
[  295.979496][T17212] macvlan0: left promiscuous mode
[  295.982390][T17212] ip6gretap5: left promiscuous mode
[  295.994171][T17212] mac80211_hwsim hwsim117 wlan0: left promiscuous mode
[  295.999993][   T10] lo speed is unknown, defaulting to 1000
[  296.000040][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  296.002437][   T10] syz0: Port: 1 Link DOWN
[  296.007536][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  296.016005][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  296.021699][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  296.030724][   T10] lo speed is unknown, defaulting to 1000
[  296.075864][T17227] bridge0: entered allmulticast mode
[  296.149349][T17232] bridge0: left allmulticast mode
[  296.364699][T17246] lo speed is unknown, defaulting to 1000
[  296.454986][T17246] lo speed is unknown, defaulting to 1000
[  296.544811][T17246] lo speed is unknown, defaulting to 1000
[  296.602452][T17253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.607854][T17253] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.725364][T17256] lo speed is unknown, defaulting to 1000
[  296.740390][T17258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  296.851121][T17256] lo speed is unknown, defaulting to 1000
[  296.858524][T17265] netlink: 'syz.0.2671': attribute type 10 has an invalid length.
[  296.867224][T17265] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  296.949495][T17256] lo speed is unknown, defaulting to 1000
[  297.037610][T17274] syzkaller1: entered promiscuous mode
[  297.039462][T17274] syzkaller1: entered allmulticast mode
[  297.126517][T17271] lo speed is unknown, defaulting to 1000
[  297.482938][T17271] lo speed is unknown, defaulting to 1000
[  297.560004][T17296] netlink: 'syz.0.2679': attribute type 15 has an invalid length.
[  297.567782][T17296] netlink: 'syz.0.2679': attribute type 15 has an invalid length.
[  297.615744][T17271] lo speed is unknown, defaulting to 1000
[  297.665855][T17308] netlink: 'syz.0.2683': attribute type 11 has an invalid length.
[  297.669160][T17308] netlink: 'syz.0.2683': attribute type 4 has an invalid length.
[  297.760563][T17313] netlink: 'syz.2.2685': attribute type 1 has an invalid length.
[  297.766600][T17313] __nla_validate_parse: 24 callbacks suppressed
[  297.766610][T17313] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2685'.
[  297.825254][T17316] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2686'.
[  297.908535][T17324] lo speed is unknown, defaulting to 1000
[  297.987774][T17332] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2689'.
[  297.998843][T17324] lo speed is unknown, defaulting to 1000
[  298.001399][T17332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2689'.
[  298.001511][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2689'.
[  298.056038][T17335] 8021q: VLANs not supported on nlmon0
[  298.100371][T17324] lo speed is unknown, defaulting to 1000
[  298.301852][T17343] 8021q: adding VLAN 0 to HW filter on device bond13
[  298.331561][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'.
[  298.341682][T17349] mac80211_hwsim hwsim105 wlan0: left promiscuous mode
[  298.345250][  T705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.348000][  T705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.387182][T17351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2694'.
[  298.512539][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2695'.
[  298.595698][T17357] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2696'.
[  298.743666][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.746987][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.814060][T17379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2702'.
[  298.918139][T17383] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.921495][T17383] mac80211_hwsim hwsim43 syzkaller0: entered promiscuous mode
[  298.925485][T17383] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode
[  298.975649][T17391] validate_nla: 6 callbacks suppressed
[  298.975662][T17391] netlink: 'syz.0.2706': attribute type 4 has an invalid length.
[  298.986591][T17391] nbd: couldn't find a device at index 0
[  299.081944][T17398] lo speed is unknown, defaulting to 1000
[  299.175922][T17398] lo speed is unknown, defaulting to 1000
[  299.288103][T17405] netlink: 'syz.1.2710': attribute type 1 has an invalid length.
[  299.327950][T17398] lo speed is unknown, defaulting to 1000
[  299.369563][T17409] 1{X: entered promiscuous mode
[  299.393072][T17409] 0{X: renamed from 31{X
[  299.396884][T17409] 0{X: left promiscuous mode
[  299.398566][T17409] 0{X: entered allmulticast mode
[  299.401556][T17409] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  299.526871][T17417] lo speed is unknown, defaulting to 1000
[  299.645537][T17417] lo speed is unknown, defaulting to 1000
[  299.677340][T17430] vlan0: entered allmulticast mode
[  299.843341][T17417] lo speed is unknown, defaulting to 1000
[  300.095394][T17449] tipc: Resetting bearer <eth:syzkaller0>
[  300.098826][T17449] mac80211_hwsim hwsim43 syzkaller0: left promiscuous mode
[  300.101367][T17449] mac80211_hwsim hwsim43 syzkaller0: left allmulticast mode
[  300.447380][T17466] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.485637][T17468] nbd: couldn't find device at index 536870912
[  301.000589][T17479] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  301.012324][T17479] netlink: 'syz.0.2729': attribute type 1 has an invalid length.
[  301.291533][T17498] netlink: 'syz.2.2734': attribute type 15 has an invalid length.
[  301.300873][T17498] netlink: 'syz.2.2734': attribute type 15 has an invalid length.
[  301.387710][T17503] netlink: 'syz.2.2736': attribute type 1 has an invalid length.
[  301.484566][T17516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  301.492086][T17513] netlink: 'syz.2.2738': attribute type 4 has an invalid length.
[  301.503420][ T5904] lo speed is unknown, defaulting to 1000
[  301.503544][T17513] netlink: 'syz.2.2738': attribute type 4 has an invalid length.
[  301.505344][ T5904] syz2: Port: 1 Link DOWN
[  301.519786][   T10] lo speed is unknown, defaulting to 1000
[  301.523451][   T10] syz2: Port: 1 Link ACTIVE
[  301.598763][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.602513][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.636407][T17524] tipc: Resetting bearer <eth:syzkaller0>
[  301.694456][    C1] ------------[ cut here ]------------
[  301.696830][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  301.700211][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  301.703507][    C1] Modules linked in:
[  301.705021][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  301.709724][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.713121][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  301.715134][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 74 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 22 84 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  301.721504][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  301.723644][    C1] RAX: 6c6a30c366749800 RBX: 000000000000000c RCX: ffff8881000f8000
[  301.726380][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  301.729393][    C1] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  301.732009][    C1] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff888110e510a8
[  301.734769][    C1] R13: 0000000000000000 R14: ffff888031d80e40 R15: ffff888031d830f8
[  301.737461][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  301.740413][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  301.742695][    C1] CR2: 00007f68ce4e7d60 CR3: 000000010e612000 CR4: 00000000000006f0
[  301.745331][    C1] Call Trace:
[  301.746633][    C1]  <IRQ>
[  301.747919][    C1]  rate_control_send_low+0x194/0x7a0
[  301.749751][    C1]  rate_control_get_rate+0x20b/0x5d0
[  301.751565][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  301.753588][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  301.755683][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  301.757529][    C1]  ? __ieee80211_beacon_get+0xce1/0x1880
[  301.759392][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  301.761180][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  301.763084][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  301.764874][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  301.767169][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  301.769149][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  301.771489][    C1]  __iterate_interfaces+0x2ab/0x590
[  301.773330][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  301.775339][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  301.777937][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  301.780478][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  301.783313][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  301.785154][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  301.787604][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  301.789484][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  301.791831][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  301.793918][    C1]  handle_softirqs+0x286/0x870
[  301.795852][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  301.797451][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  301.799179][    C1]  ? kvm_guest_apic_eoi_write+0x97/0xc0
[  301.801033][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  301.802868][    C1]  __irq_exit_rcu+0xca/0x1f0
[  301.804416][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  301.806199][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  301.808247][    C1]  ? __common_interrupt+0x161/0x1f0
[  301.809958][    C1]  irq_exit_rcu+0x9/0x30
[  301.811413][    C1]  common_interrupt+0xbb/0xe0
[  301.813009][    C1]  </IRQ>
[  301.813962][    C1]  <TASK>
[  301.814981][    C1]  asm_common_interrupt+0x26/0x40
[  301.816705][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  301.818602][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  301.825083][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  301.827570][    C1] RAX: 6c6a30c366749800 RBX: ffffffff81968308 RCX: 6c6a30c366749800
[  301.830302][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7837 RDI: ffffffff8be33400
[  301.832918][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  301.835509][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38530
[  301.837968][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  301.840547][    C1]  ? do_idle+0x1e8/0x510
[  301.841926][    C1]  default_idle+0x13/0x20
[  301.843384][    C1]  default_idle_call+0x74/0xb0
[  301.844920][    C1]  do_idle+0x1e8/0x510
[  301.846340][    C1]  ? __pfx_do_idle+0x10/0x10
[  301.848244][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  301.849958][    C1]  cpu_startup_entry+0x44/0x60
[  301.851545][    C1]  start_secondary+0x101/0x110
[  301.853180][    C1]  common_startup_64+0x13e/0x147
[  301.854844][    C1]  </TASK>
[  301.855899][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  301.858442][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  301.862387][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.865672][    C1] Call Trace:
[  301.867058][    C1]  <IRQ>
[  301.868238][    C1]  dump_stack_lvl+0x99/0x250
[  301.869770][    C1]  ? __asan_memcpy+0x40/0x70
[  301.871314][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  301.873041][    C1]  ? __pfx__printk+0x10/0x10
[  301.874598][    C1]  vpanic+0x281/0x750
[  301.875946][    C1]  ? __pfx__printk+0x10/0x10
[  301.877503][    C1]  ? __pfx_vpanic+0x10/0x10
[  301.878941][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  301.880702][    C1]  panic+0xb9/0xc0
[  301.882128][    C1]  ? __pfx_panic+0x10/0x10
[  301.883826][    C1]  __warn+0x31b/0x4b0
[  301.885422][    C1]  ? __rate_control_send_low+0x5df/0x820
[  301.887757][    C1]  ? __rate_control_send_low+0x5df/0x820
[  301.889604][    C1]  report_bug+0x2be/0x4f0
[  301.891049][    C1]  ? __rate_control_send_low+0x5df/0x820
[  301.892966][    C1]  ? __rate_control_send_low+0x5df/0x820
[  301.894866][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  301.896762][    C1]  handle_bug+0x84/0x160
[  301.898198][    C1]  exc_invalid_op+0x1a/0x50
[  301.899721][    C1]  asm_exc_invalid_op+0x1a/0x20
[  301.901332][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  301.903385][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 e0 74 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 22 84 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  301.910132][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  301.912143][    C1] RAX: 6c6a30c366749800 RBX: 000000000000000c RCX: ffff8881000f8000
[  301.914770][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  301.917606][    C1] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  301.920175][    C1] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff888110e510a8
[  301.922824][    C1] R13: 0000000000000000 R14: ffff888031d80e40 R15: ffff888031d830f8
[  301.925454][    C1]  ? __rate_control_send_low+0x5de/0x820
[  301.927753][    C1]  rate_control_send_low+0x194/0x7a0
[  301.929530][    C1]  rate_control_get_rate+0x20b/0x5d0
[  301.931179][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  301.933093][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  301.935404][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  301.937619][    C1]  ? __ieee80211_beacon_get+0xce1/0x1880
[  301.939836][    C1]  __ieee80211_beacon_get+0xd3d/0x1880
[  301.942033][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  301.943942][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  301.945830][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  301.948132][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  301.950387][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  301.953281][    C1]  __iterate_interfaces+0x2ab/0x590
[  301.955387][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  301.957806][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  301.960568][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  301.963007][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  301.965755][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  301.967799][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  301.970121][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  301.972094][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  301.973977][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  301.975721][    C1]  handle_softirqs+0x286/0x870
[  301.977546][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  301.979157][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  301.980925][    C1]  ? kvm_guest_apic_eoi_write+0x97/0xc0
[  301.982813][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  301.984562][    C1]  __irq_exit_rcu+0xca/0x1f0
[  301.986110][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  301.987849][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  301.989584][    C1]  ? __common_interrupt+0x161/0x1f0
[  301.991327][    C1]  irq_exit_rcu+0x9/0x30
[  301.992965][    C1]  common_interrupt+0xbb/0xe0
[  301.994616][    C1]  </IRQ>
[  301.995667][    C1]  <TASK>
[  301.996662][    C1]  asm_common_interrupt+0x26/0x40
[  301.998343][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  302.000547][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 c7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  302.007065][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  302.009351][    C1] RAX: 6c6a30c366749800 RBX: ffffffff81968308 RCX: 6c6a30c366749800
[  302.011994][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7837 RDI: ffffffff8be33400
[  302.014584][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  302.017150][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38530
[  302.019732][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001f000
[  302.022319][    C1]  ? do_idle+0x1e8/0x510
[  302.023672][    C1]  default_idle+0x13/0x20
[  302.025058][    C1]  default_idle_call+0x74/0xb0
[  302.026895][    C1]  do_idle+0x1e8/0x510
[  302.028549][    C1]  ? __pfx_do_idle+0x10/0x10
[  302.030073][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  302.031816][    C1]  cpu_startup_entry+0x44/0x60
[  302.033374][    C1]  start_secondary+0x101/0x110
[  302.034910][    C1]  common_startup_64+0x13e/0x147
[  302.036609][    C1]  </TASK>
[  302.038341][    C1] Kernel Offset: disabled
[  302.039765][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:04:32  Registers:
info registers vcpu 0

CPU#0
RAX=00007ff4ab806511 RBX=00007ff4ab80f470 RCX=0000000000000000 RDX=000000000000000f
RSI=00007ff4ab806540 RDI=00007ff4aba870e0 RBP=00007ffe72bd5ec0 RSP=00007ffe72bd5dc0
R8 =00007ffe72bd5d38 R9 =00007ff4aba95ab0 R10=00007ff4ab7fc7f0 R11=0000000000000006
R12=00007ff4aba5c500 R13=00007ff4aba94a60 R14=00007ff4ab989e10 R15=00007ff4ab75a318
RIP=00007ff4aba72ddc RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff4ab75b380 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff4ab7fe6bf CR3=0000000040695000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff00000000 0000000000000000 XMM01=00000000ffffffff ffffffffffffffff
XMM02=0000000045544156 4952505f4342494c XMM03=0000000045544156 4952505f4342494c
XMM04=0007000700020007 0007000700000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff8881067f0237 R9 =1ffff11020cfe046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af990d R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68ce4e7d60 CR3=000000010e612000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f68cd812e53
XMM06=0000000000000000 00007f68cd812e4d XMM07=0000000000000000 00007f68cd812e61
XMM08=0000000000000000 00007f68cd812ee7 XMM09=0000000000000000 00007f68cd812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
