last executing test programs:

2.358181645s ago: executing program 2 (id=1481):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt(r0, 0xff, 0x2, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14)
r1 = socket$inet6(0xa, 0x800, 0x2c)
sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000240)="5cf3cb058ff287279e280d7f039abbc372dc89e64e54318cb731b7477b1e4341a325538f41a88ada62f706ac39c507e78960a1074209907eeafc5b0861a364965c5440a556dad96483f565d6628192a4d67a", 0x52}], 0x2}}], 0x1, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28)
unshare(0x40020000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000fe800000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r4, @ANYBLOB="f221108b7739d4feac0289af7d9e67d8aee69dec1b99d41c76bcabc5f1955b2ee8a1253f097d29ed77149544dda32ee582d8465a7cf74ae0777e93de465b474b09d9d5cb522a548194c7590792854bd93d76f12fb55d79d70f757b41af2e428f9c94646ad2b145ee82"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.858305827s ago: executing program 2 (id=1488):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a01010000000000000000002b0000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)

1.798586834s ago: executing program 2 (id=1489):
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@private2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000001380)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@local, @in6=@loopback, 0x4e20, 0x8001, 0x4e24, 0x84d, 0x2, 0x20, 0xc0, 0x5e, r2, r11}, {0x2, 0x6, 0x8, 0x101, 0x7fff, 0xfb, 0x7, 0xa}, {0x6, 0x4, 0xffffffffffffffff}, 0x8, 0x6e6bbe, 0x0, 0x1, 0x1, 0x1}, {{@in6=@private0, 0x4d4, 0x32}, 0xa, @in=@remote, 0x3504, 0x2, 0x3, 0x6, 0x5, 0x80bb, 0x27f9}}, 0xe8)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

1.299524061s ago: executing program 2 (id=1497):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000d72cd647ca29310e5fc8699b0928635eb2d7f2df292913", @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x36)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x12}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x3ff}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x64}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, 0x0, 0x840)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

1.295987623s ago: executing program 0 (id=1499):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000006000000000000000000000087000000b20000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xffffff85, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.229532316s ago: executing program 0 (id=1500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040a010128f3"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x800000}, {}, {}, {0x8083}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xffffffff}, {0x1000}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xa1}, {}, {0x0, 0x7, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xdffffffc, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x10000}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7}, {0x0, 0x200}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x81}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x10000001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x40000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0xffffffffffff0001, 0x0, 0x1000000000000002, 0x0, 0x8}, &(0x7f0000000480)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x300000000, 0xfffffffffffffff7, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000104010100000000000000000200000308000340000010060500011501000000080004402de0ffff"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$can_bcm(r2, 0x0, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2)
r6 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)

1.089897192s ago: executing program 0 (id=1503):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket(0x11, 0x3, 0x0) (async)
r2 = socket(0x200000000000011, 0x2, 0x1) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000b2000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64)
writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) (async)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x5882, 0x4) (async, rerun: 32)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e2ffffff00"/28], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r11}, 0x10) (async)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000001000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000040000000100"/28], 0x50) (async)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r12, 0x0, 0xa002a0}, 0x38) (async, rerun: 64)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r12, 0x0, 0x1500}, 0x38) (async, rerun: 64)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) (async)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000340), 0x1) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='page_pool_state_release\x00', r11, 0x0, 0x9}, 0x18) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010003000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) (async, rerun: 64)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c000000000000000200020000000000000000000000ffffe0000001ff0100000000000000000000000000010a0101020000000000000000800000007f00000100000000000000000000000033010000063500000a000800"], 0xec}}, 0x0)

968.905304ms ago: executing program 0 (id=1506):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x27)
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x18, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8040)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400))
unshare(0x22020400)
r3 = socket(0x2, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000007c0)=0x10)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x8, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4008, r4}, 0x18) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4008, r4}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000ff030000022dbd7000fedbdf2500000300f8ffffffffff0500ac1414aa0000000000000000000000000000010001000000000004000000088000000200ac1414382d1b2f9bddde04f43a45cc3887eaa44a48e8a6abd2"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000ff030000022dbd7000fedbdf2500000300f8ffffffffff0500ac1414aa0000000000000000000000000000010001000000000004000000088000000200ac1414382d1b2f9bddde04f43a45cc3887eaa44a48e8a6abd2"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

489.237246ms ago: executing program 1 (id=1514):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a01010000000000000000003c0000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)

439.406902ms ago: executing program 1 (id=1515):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000006000000000000000000000087000000b20000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

439.02959ms ago: executing program 1 (id=1516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r1=>0x0, 0x5, "217ba84f4b"}, &(0x7f0000000140)=0xd)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}, @TCA_CAKE_MPU={0x8, 0xe, 0xf8}]}}]}, 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={r1, 0x5, 0x30, 0x8, 0x2}, &(0x7f0000000280)=0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000fc0)=ANY=[@ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="2f0000002820000004000000951394c68e"], 0x20)
r10 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x800, 0x0, 0x0, 0xb, 0xe}, 0x1c7)
setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback}, 0x1c)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000084", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000000000008000100010000001400030067656e65766531"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880)
r11 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20)
setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000000240), 0x4)
setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10)

238.918206ms ago: executing program 1 (id=1517):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x0, 0x0, 0x46, 0x0, "21b7498bd5b72181fa9463a0bee58cc070200622d11a2306c8f07d74e0e4af2a644bbabbeffa3dd369c1e27a18e214a80cfb076557cc76203b80b80e68b5bbf836c4e88d24be2e18d6390d8fe5aadf3d"}, 0xd8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x1c)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x15)
writev(r8, &(0x7f0000000200)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000500)="7bdd6d140d760fb6871ca09a362e9627d8f842ba0af1d13e1875cee81cacf3e4d831f1ce5031436aa81caaa4b8bf7277bcf85317045059841476c242687503b4ff17c396fd5bce8875d8e920429d69a05306e709482a79d7008050c5178f67816dd8b7c1b9421cb02a7b5123374918275443fef63aa3b6212a9950d1ab8c6ef5a75d2b847271f729070ba0eb415ae70a7e5291373efb646dce1b777df6", 0x9d}], 0x2)
writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
splice(r2, 0x0, r7, 0x0, 0x40, 0xf)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r9 = accept4(r1, 0x0, 0x0, 0x80800)
sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800b677", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x14, 0x21, 0xa, 0x401}, 0x14}}, 0x0)
recvmmsg$unix(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFBRDADDR(r11, 0x891a, &(0x7f0000000300)={'veth0_to_hsr\x00', {0x2, 0x4e21, @remote}})
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

106.316682ms ago: executing program 1 (id=1518):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0xe4, 0x40000}, 0x0)

104.11472ms ago: executing program 0 (id=1519):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28)
r5 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

103.921113ms ago: executing program 1 (id=1520):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1c2725e7", 0x5}], 0x2}, 0x4000000)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$l2tp(0x0, r0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bd2b, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x40008090}, 0x2048044)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000280)={0x4})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
listen(r4, 0xfffffffc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x48}}, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840)

97.741733ms ago: executing program 2 (id=1521):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a01010000000000000000006c0000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000)

9.106534ms ago: executing program 2 (id=1522):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_htb={{}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0xc48}}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x6, 0x100}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 0 (id=1523):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000021000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="14a07d334dfe3f0821a2839d39"], 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000040)="6eb85e233289abe9ca3ee756648d9f1d72983c7f6d246de0", 0x18)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

kernel console output (not intermixed with test programs):

039539][ T7116] lo speed is unknown, defaulting to 1000
[   79.046441][ T7116] lo speed is unknown, defaulting to 1000
[   79.088017][ T7121] 8021q: adding VLAN 0 to HW filter on device team0
[   79.095391][ T7121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.236682][ T7125] netlink: 'syz.2.308': attribute type 10 has an invalid length.
[   79.240981][ T7125] bond0: (slave wlan1): Opening slave failed
[   79.248761][ T7125] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   79.259090][ T7116] infiniband syz0: set active
[   79.263171][ T5907] lo speed is unknown, defaulting to 1000
[   79.265790][ T7116] infiniband syz0: added lo
[   79.319737][ T7116] RDS/IB: syz0: added
[   79.323873][ T7116] smc: adding ib device syz0 with port count 1
[   79.326419][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'.
[   79.326976][ T7116] smc:    ib device syz0 port 1 has pnetid 
[   79.334822][ T5907] lo speed is unknown, defaulting to 1000
[   79.338183][ T7116] lo speed is unknown, defaulting to 1000
[   79.529906][ T7116] lo speed is unknown, defaulting to 1000
[   79.703179][ T7116] lo speed is unknown, defaulting to 1000
[   79.721811][ T7145] syz.0.314 (7145) used greatest stack depth: 18496 bytes left
[   79.790119][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'.
[   79.824220][ T7150] netlink: 'syz.2.316': attribute type 10 has an invalid length.
[   79.829196][ T7150] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.835157][ T7150] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   79.840154][ T7150] netlink: 'syz.2.316': attribute type 10 has an invalid length.
[   79.844939][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.316'.
[   79.847798][ T7150] batadv0: entered promiscuous mode
[   79.849779][ T7150] batadv0: entered allmulticast mode
[   79.863861][ T7150] bond0: (slave batadv0): Releasing backup interface
[   79.868507][ T7150] bridge0: port 1(batadv0) entered blocking state
[   79.871157][ T7150] bridge0: port 1(batadv0) entered disabled state
[   79.942792][ T5880] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   79.946255][ T5880] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   79.985119][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.323'.
[   79.990020][ T7166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.321'.
[   80.026062][ T5879] lo speed is unknown, defaulting to 1000
[   80.034375][ T7166] vlan0: entered promiscuous mode
[   80.045214][ T7170] lo speed is unknown, defaulting to 1000
[   80.093316][ T7175] netlink: 'syz.1.326': attribute type 13 has an invalid length.
[   80.096157][ T7175] netlink: 'syz.1.326': attribute type 17 has an invalid length.
[   80.175509][ T7175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.219819][ T7176] lo speed is unknown, defaulting to 1000
[   80.251846][ T7174] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   80.434455][ T7184] lo speed is unknown, defaulting to 1000
[   80.543288][ T7198] netlink: 'syz.1.334': attribute type 13 has an invalid length.
[   80.546258][ T7198] netlink: 'syz.1.334': attribute type 17 has an invalid length.
[   80.552424][ T7198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.730271][ T7206] netlink: 'syz.1.337': attribute type 1 has an invalid length.
[   80.887273][ T7206] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.891968][ T7213] lo speed is unknown, defaulting to 1000
[   80.948126][ T7228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.953077][ T7228] syzkaller0: entered promiscuous mode
[   80.955363][ T7228] syzkaller0: entered allmulticast mode
[   80.972569][ T7228] tipc: Resetting bearer <eth:syzkaller0>
[   80.977805][ T7226] tipc: Resetting bearer <eth:syzkaller0>
[   80.984827][ T7226] tipc: Disabling bearer <eth:syzkaller0>
[   81.104221][ T7235] vlan2: entered promiscuous mode
[   81.106379][ T7235] syz_tun: entered promiscuous mode
[   81.247106][ T5857] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.250651][ T5857] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.268929][ T5857] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.282782][ T5857] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.317751][ T7243] netlink: 'syz.0.343': attribute type 1 has an invalid length.
[   81.373285][   T47] cfg80211: failed to load regulatory.db
[   81.385739][ T7243] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.411721][ T7249] bond5: (slave wlan0): Opening slave failed
[   81.520360][ T7255] rdma_rxe: rxe_newlink: failed to add lo
[   81.846894][ T7265] macsec0: entered allmulticast mode
[   81.930624][ T7272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.934497][ T7272] syzkaller0: entered promiscuous mode
[   81.936235][ T7272] syzkaller0: entered allmulticast mode
[   81.948730][ T7272] tipc: Resetting bearer <eth:syzkaller0>
[   81.951848][ T7271] tipc: Resetting bearer <eth:syzkaller0>
[   81.959906][ T7271] tipc: Disabling bearer <eth:syzkaller0>
[   81.985926][ T7277] netlink: 'syz.2.352': attribute type 3 has an invalid length.
[   81.991455][ T7277] syz_tun: entered allmulticast mode
[   81.996152][ T7277] siw: device registration error -23
[   82.029762][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.036119][ T7277] 8021q: adding VLAN 0 to HW filter on device team0
[   82.040951][ T7277] batman_adv: batadv0: Interface activated: dummy0
[   82.054286][ T7277] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.067186][ T7276] syz_tun: left allmulticast mode
[   82.201707][ T7291] lo speed is unknown, defaulting to 1000
[   82.291136][ T7305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.294028][ T7305] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   82.296621][ T7305] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   82.433761][ T7315] lo speed is unknown, defaulting to 1000
[   82.506979][ T7325] 8021q: adding VLAN 0 to HW filter on device bond5
[   82.537390][ T7331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.540270][ T7331] syzkaller0: entered promiscuous mode
[   82.542544][ T7331] syzkaller0: entered allmulticast mode
[   82.586052][ T7331] tipc: Resetting bearer <eth:syzkaller0>
[   82.620621][ T7330] tipc: Resetting bearer <eth:syzkaller0>
[   82.642377][ T7330] tipc: Disabling bearer <eth:syzkaller0>
[   82.866587][ T7349] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   82.920028][ T7345] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.924128][ T7349] tipc: Resetting bearer <eth:syzkaller0>
[   82.926558][ T7355] tap0: tun_chr_ioctl cmd 2148553947
[   82.929628][ T7355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.936211][ T7356] syzkaller0: mtu less than device minimum
[   82.938652][ T7355] syzkaller0: mtu less than device minimum
[   83.029365][ T7354] tipc: Disabling bearer <eth:syzkaller0>
[   83.048184][ T7358] lo speed is unknown, defaulting to 1000
[   83.125748][ T7363] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.197404][ T7377] batman_adv: batadv0: Adding interface: macvlan0
[   83.199612][ T7377] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.209012][ T7377] batman_adv: batadv0: Interface activated: macvlan0
[   83.253254][ T7379] syzkaller1: entered promiscuous mode
[   83.255557][ T7379] syzkaller1: entered allmulticast mode
[   83.353673][ T5879] tipc: Node number set to 3854345636
[   83.450052][ T7386] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.456692][ T7386] bond6: (slave wlan0): Opening slave failed
[   83.469712][ T7386] vlan2: entered allmulticast mode
[   83.471378][ T7386] veth1: entered allmulticast mode
[   83.475189][ T7386] bond6: (slave vlan2): Opening slave failed
[   83.582378][ T7394] __nla_validate_parse: 81 callbacks suppressed
[   83.582387][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   83.623289][ T7394] macvlan2: entered promiscuous mode
[   83.625204][ T7394] macvlan2: entered allmulticast mode
[   83.627038][ T7394] hsr0: entered allmulticast mode
[   83.628824][ T7394] hsr_slave_0: entered allmulticast mode
[   83.632378][ T7394] hsr_slave_1: entered allmulticast mode
[   83.722066][ T7406] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   83.726373][ T5857] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   83.726753][ T7406] 8021q: adding VLAN 0 to HW filter on device bond7
[   83.741536][ T7406] veth5: entered promiscuous mode
[   83.744842][ T7406] bond7: (slave veth5): Enslaving as a backup interface with a down link
[   83.843161][ T5857] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   84.018776][ T5907] lo speed is unknown, defaulting to 1000
[   84.021238][ T5907] syz0: Port: 1 Link DOWN
[   84.050807][ T5907] lo speed is unknown, defaulting to 1000
[   84.073827][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'.
[   84.078872][ T7441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.081444][ T7441] syzkaller0: entered promiscuous mode
[   84.083401][ T7441] syzkaller0: entered allmulticast mode
[   84.093803][ T7441] tipc: Resetting bearer <eth:syzkaller0>
[   84.097847][ T7438] tipc: Resetting bearer <eth:syzkaller0>
[   84.108270][ T7438] tipc: Disabling bearer <eth:syzkaller0>
[   84.164644][ T7451] tipc: Trying to set illegal importance in message
[   84.167001][ T7451] tipc: Trying to set illegal importance in message
[   84.226231][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   84.226462][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   84.229753][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'.
[   84.236737][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'.
[   84.297420][ T7461] syz_tun: entered allmulticast mode
[   84.307148][ T7461] dvmrp1: entered allmulticast mode
[   84.320236][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'.
[   84.401922][ T7469] macsec1: entered promiscuous mode
[   84.404823][ T7469] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   84.407564][ T7469] macsec1: entered allmulticast mode
[   84.409778][ T7469] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   84.414711][ T7471] netlink: 68 bytes leftover after parsing attributes in process `syz.0.414'.
[   84.440341][ T7473] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   84.446621][ T7473] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   84.449139][ T7473] batman_adv: batadv0: Interface deactivated: macvlan0
[   84.454497][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.457761][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.460680][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.464716][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.479605][ T7479] validate_nla: 8 callbacks suppressed
[   84.479613][ T7479] netlink: 'syz.0.415': attribute type 9 has an invalid length.
[   84.487306][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[   84.494561][ T7479] macvlan2: entered promiscuous mode
[   84.496429][ T7479] hsr0: entered promiscuous mode
[   84.498155][ T7479] macvlan2: entered allmulticast mode
[   84.499893][ T7479] hsr0: entered allmulticast mode
[   84.501623][ T7479] hsr_slave_0: entered allmulticast mode
[   84.503773][ T7479] hsr_slave_1: entered allmulticast mode
[   84.561062][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.418'.
[   84.594174][ T7489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.597838][ T7489] syzkaller0: entered promiscuous mode
[   84.603152][ T7489] syzkaller0: entered allmulticast mode
[   84.626200][ T7489] tipc: Resetting bearer <eth:syzkaller0>
[   84.633754][ T7488] tipc: Resetting bearer <eth:syzkaller0>
[   84.653245][ T7488] tipc: Disabling bearer <eth:syzkaller0>
[   84.673384][ T7493] lo speed is unknown, defaulting to 1000
[   84.721378][ T7496] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[   84.755106][ T7496] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.784084][ T7499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.786689][ T7499] syzkaller0: entered promiscuous mode
[   84.790859][ T7499] syzkaller0: entered allmulticast mode
[   84.807631][ T7499] tipc: Resetting bearer <eth:syzkaller0>
[   84.810913][ T7498] tipc: Resetting bearer <eth:syzkaller0>
[   84.833928][ T7498] tipc: Disabling bearer <eth:syzkaller0>
[   84.931444][ T7503] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   84.992685][ T7508] netlink: 'syz.2.426': attribute type 10 has an invalid length.
[   85.168345][ T7520] openvswitch: netlink: Flow key attr not present in new flow.
[   85.201165][ T7519] lo speed is unknown, defaulting to 1000
[   85.205594][ T7515] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   85.229270][ T7515] 8021q: adding VLAN 0 to HW filter on device bond8
[   85.280660][ T7527] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   85.287647][ T7527] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   85.290570][ T7527] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   85.356513][ T7531] pim6reg1: entered promiscuous mode
[   85.358784][ T7531] pim6reg1: entered allmulticast mode
[   85.399858][ T7535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.403815][ T7535] syzkaller0: entered promiscuous mode
[   85.405764][ T7535] syzkaller0: entered allmulticast mode
[   85.550207][ T7535] tipc: Resetting bearer <eth:syzkaller0>
[   85.561153][ T7535] tipc: Disabling bearer <eth:syzkaller0>
[   85.594410][ T7544] netlink: 'syz.2.437': attribute type 3 has an invalid length.
[   86.076095][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.078729][ T7566] syzkaller0: entered promiscuous mode
[   86.080583][ T7566] syzkaller0: entered allmulticast mode
[   86.100899][ T7566] tipc: Resetting bearer <eth:syzkaller0>
[   86.107244][ T7565] tipc: Resetting bearer <eth:syzkaller0>
[   86.118719][ T7565] tipc: Disabling bearer <eth:syzkaller0>
[   86.129728][ T7568] tipc: Enabled bearer <eth:gre0>, priority 10
[   86.133902][ T7570] netlink: 'syz.1.446': attribute type 1 has an invalid length.
[   86.149052][ T7570] 8021q: adding VLAN 0 to HW filter on device bond6
[   86.167044][ T7568] bond6: (slave veth3): Enslaving as an active interface with a down link
[   86.216998][ T7574] netlink: 'syz.1.447': attribute type 21 has an invalid length.
[   86.229735][ T7574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.235909][ T7574] syzkaller0: entered promiscuous mode
[   86.237738][ T7574] syzkaller0: entered allmulticast mode
[   86.256072][ T7574] tipc: Resetting bearer <eth:syzkaller0>
[   86.259289][ T7573] tipc: Resetting bearer <eth:syzkaller0>
[   86.276525][ T7573] tipc: Disabling bearer <eth:syzkaller0>
[   86.552810][ T7587] netlink: 'syz.0.452': attribute type 13 has an invalid length.
[   86.555899][ T7587] netlink: 'syz.0.452': attribute type 17 has an invalid length.
[   86.591818][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.595906][ T7587] 8021q: adding VLAN 0 to HW filter on device team0
[   86.602830][ T7587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.605490][ T7588] netlink: 'syz.0.452': attribute type 2 has an invalid length.
[   86.638330][ T7587] lo speed is unknown, defaulting to 1000
[   87.242262][    T9] tipc: Node number set to 2812370571
[   87.269022][ T7592] pim6reg1: entered promiscuous mode
[   87.271131][ T7592] pim6reg1: entered allmulticast mode
[   87.374148][ T7594] lo speed is unknown, defaulting to 1000
[   87.428368][ T7592] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.431909][ T7592] team0: Port device bond7 added
[   87.456631][ T7599] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.831865][ T7621] lo speed is unknown, defaulting to 1000
[   87.876636][ T7626] 8021q: adding VLAN 0 to HW filter on device bond8
[   88.123357][ T7630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.176270][ T7630] lo speed is unknown, defaulting to 1000
[   88.389873][ T7637] lo speed is unknown, defaulting to 1000
[   88.628252][ T7645] lo speed is unknown, defaulting to 1000
[   88.694602][ T7649] IPv6: Can't replace route, no match found
[   88.802281][ T7651] lo speed is unknown, defaulting to 1000
[   88.879324][ T7656] __nla_validate_parse: 10 callbacks suppressed
[   88.879339][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   88.897048][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   89.411948][ T7672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.475'.
[   89.516082][ T7682] syzkaller1: entered promiscuous mode
[   89.518762][ T7682] syzkaller1: entered allmulticast mode
[   89.645677][ T7687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'.
[   89.717356][ T7689] validate_nla: 5 callbacks suppressed
[   89.717367][ T7689] netlink: 'syz.2.482': attribute type 3 has an invalid length.
[   89.728706][ T7689] syz_tun: left allmulticast mode
[   89.730616][ T7689] dvmrp1: left allmulticast mode
[   89.730649][ T7684] netlink: 'syz.1.480': attribute type 4 has an invalid length.
[   89.779444][ T7690] siw: device registration error -23
[   89.781820][ T7691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.794532][ T7689] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.482'.
[   89.836887][ T7700] netlink: 'syz.2.485': attribute type 21 has an invalid length.
[   89.839567][ T7700] netlink: 156 bytes leftover after parsing attributes in process `syz.2.485'.
[   89.846454][ T7700] netlink: 248 bytes leftover after parsing attributes in process `syz.2.485'.
[   89.944692][ T7702] sctp: [Deprecated]: syz.1.484 (pid 7702) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.944692][ T7702] Use struct sctp_sack_info instead
[   89.951425][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'.
[   89.966673][ T7702] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   89.970726][ T7702] CPU: 0 UID: 0 PID: 7702 Comm: syz.1.484 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   89.970737][ T7702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.970741][ T7702] Call Trace:
[   89.970745][ T7702]  <TASK>
[   89.970748][ T7702]  dump_stack_lvl+0x189/0x250
[   89.970761][ T7702]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.970771][ T7702]  ? __pfx__printk+0x10/0x10
[   89.970782][ T7702]  ? kernfs_path_from_node+0x2f/0x290
[   89.970790][ T7702]  ? kernfs_path_from_node+0x250/0x290
[   89.970797][ T7702]  ? kernfs_path_from_node+0x2f/0x290
[   89.970806][ T7702]  sysfs_warn_dup+0x8e/0xa0
[   89.970814][ T7702]  sysfs_do_create_link_sd+0xc0/0x110
[   89.970823][ T7702]  device_add_class_symlinks+0x1cf/0x240
[   89.970832][ T7702]  device_add+0x475/0xb50
[   89.970842][ T7702]  wiphy_register+0x1ba6/0x28d0
[   89.970857][ T7702]  ? __pfx_wiphy_register+0x10/0x10
[   89.970866][ T7702]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   89.970876][ T7702]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   89.970889][ T7702]  ieee80211_register_hw+0x3425/0x4080
[   89.970903][ T7702]  ? ieee80211_register_hw+0x1411/0x4080
[   89.970914][ T7702]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   89.970922][ T7702]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.970935][ T7702]  ? __hrtimer_setup+0x187/0x210
[   89.970941][ T7702]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   89.970952][ T7702]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[   89.970972][ T7702]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   89.970979][ T7702]  ? trace_kmalloc+0x1f/0xd0
[   89.970986][ T7702]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   89.970995][ T7702]  ? kstrndup+0xbf/0x160
[   89.971006][ T7702]  hwsim_new_radio_nl+0xea4/0x1b10
[   89.971015][ T7702]  ? __pfx___nla_validate_parse+0x10/0x10
[   89.971030][ T7702]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.971043][ T7702]  ? __nla_parse+0x40/0x60
[   89.971053][ T7702]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   89.971065][ T7702]  genl_family_rcv_msg_doit+0x215/0x300
[   89.971074][ T7702]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   89.971087][ T7702]  ? bpf_lsm_capable+0x9/0x20
[   89.971096][ T7702]  ? security_capable+0x7e/0x2e0
[   89.971108][ T7702]  genl_rcv_msg+0x60e/0x790
[   89.971117][ T7702]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.971124][ T7702]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   89.971137][ T7702]  netlink_rcv_skb+0x208/0x470
[   89.971145][ T7702]  ? __lock_acquire+0xab9/0xd20
[   89.971156][ T7702]  ? __pfx_genl_rcv_msg+0x10/0x10
[   89.971164][ T7702]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   89.971182][ T7702]  ? down_read+0x1ad/0x2e0
[   89.971189][ T7702]  genl_rcv+0x28/0x40
[   89.971195][ T7702]  netlink_unicast+0x82f/0x9e0
[   89.971207][ T7702]  ? __pfx_netlink_unicast+0x10/0x10
[   89.971216][ T7702]  ? netlink_sendmsg+0x642/0xb30
[   89.971223][ T7702]  ? skb_put+0x11b/0x210
[   89.971232][ T7702]  netlink_sendmsg+0x805/0xb30
[   89.971244][ T7702]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.971254][ T7702]  ? aa_sock_msg_perm+0xf1/0x1d0
[   89.971264][ T7702]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   89.971271][ T7702]  ? __pfx_netlink_sendmsg+0x10/0x10
[   89.971279][ T7702]  __sock_sendmsg+0x21c/0x270
[   89.971289][ T7702]  ____sys_sendmsg+0x505/0x830
[   89.971298][ T7702]  ? __pfx_____sys_sendmsg+0x10/0x10
[   89.971309][ T7702]  ? import_iovec+0x74/0xa0
[   89.971317][ T7702]  ___sys_sendmsg+0x21f/0x2a0
[   89.971325][ T7702]  ? __pfx____sys_sendmsg+0x10/0x10
[   89.971347][ T7702]  ? __fget_files+0x2a/0x420
[   89.971352][ T7702]  ? __fget_files+0x3a0/0x420
[   89.971362][ T7702]  __x64_sys_sendmsg+0x19b/0x260
[   89.971370][ T7702]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   89.971381][ T7702]  ? rcu_is_watching+0x15/0xb0
[   89.971390][ T7702]  ? do_syscall_64+0xbe/0x3b0
[   89.971428][ T7702]  do_syscall_64+0xfa/0x3b0
[   89.971437][ T7702]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.971447][ T7702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.971455][ T7702]  ? exc_page_fault+0x9f/0xf0
[   89.971465][ T7702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.971472][ T7702] RIP: 0033:0x7fed7cb8ebe9
[   89.971480][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.971486][ T7702] RSP: 002b:00007fed7d996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   89.971500][ T7702] RAX: ffffffffffffffda RBX: 00007fed7cdb6090 RCX: 00007fed7cb8ebe9
[   89.971506][ T7702] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000e
[   89.971510][ T7702] RBP: 00007fed7cc11e19 R08: 0000000000000000 R09: 0000000000000000
[   89.971514][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.971518][ T7702] R13: 00007fed7cdb6128 R14: 00007fed7cdb6090 R15: 00007fff30fb9328
[   89.971531][ T7702]  </TASK>
[   90.200136][ T7710] "syz.0.488" (7710) uses obsolete ecb(arc4) skcipher
[   90.285560][ T7719] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   90.288641][ T7719] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   90.294953][ T7719] hsr0: left allmulticast mode
[   90.297072][ T7719] hsr_slave_0: left allmulticast mode
[   90.299346][ T7719] hsr_slave_1: left allmulticast mode
[   90.301607][ T7719] hsr0: left promiscuous mode
[   90.317933][ T7719] macvlan2: left promiscuous mode
[   90.320190][ T7719] macvlan2: left allmulticast mode
[   90.426494][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[   90.429440][ T7737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   90.456468][ T7737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.606557][ T7739] netlink: 'syz.2.493': attribute type 4 has an invalid length.
[   90.611846][ T7740] netlink: 'syz.2.493': attribute type 4 has an invalid length.
[   90.651214][ T7743] batadv_slave_1: entered promiscuous mode
[   90.661859][ T7743] netlink: 72 bytes leftover after parsing attributes in process `syz.2.494'.
[   90.700463][ T7747] vlan3: entered promiscuous mode
[   90.704480][ T7747] bridge0: entered promiscuous mode
[   90.709820][ T7742] batadv_slave_1: left promiscuous mode
[   90.854283][ T7756] pim6reg1: entered promiscuous mode
[   90.856589][ T7756] pim6reg1: entered allmulticast mode
[   90.977956][ T7762] batman_adv: batadv0: Interface deactivated: dummy0
[   90.987046][ T7762] macsec0: left allmulticast mode
[   90.988943][ T7762] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   91.007614][ T7762] hsr0: left allmulticast mode
[   91.009221][ T7762] hsr_slave_0: left allmulticast mode
[   91.011010][ T7762] hsr_slave_1: left allmulticast mode
[   91.020486][ T7762] macvlan2: left promiscuous mode
[   91.023228][ T7762] macvlan2: left allmulticast mode
[   91.030774][ T7762] veth5: left promiscuous mode
[   91.036547][ T7762] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   91.038899][ T7762] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   91.041225][ T7762] macsec1: left promiscuous mode
[   91.043077][ T7762] macsec1: left allmulticast mode
[   91.071507][ T7765] 8021q: adding VLAN 0 to HW filter on device bond8
[   91.083019][ T7765] team0: Port device bond8 added
[   91.215296][ T7778] lo speed is unknown, defaulting to 1000
[   91.927630][ T7819] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   91.930863][ T7819] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   92.001434][ T7825] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   92.009727][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.023732][ T7825] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   92.039983][ T7825] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   92.050014][ T7825] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   92.054844][ T7825] netlink: 'syz.1.525': attribute type 10 has an invalid length.
[   92.057884][ T7825] batadv0: entered promiscuous mode
[   92.059853][ T7825] batadv0: entered allmulticast mode
[   92.083026][ T7825] bond0: (slave batadv0): Releasing backup interface
[   92.106451][ T7825] bridge0: port 1(batadv0) entered blocking state
[   92.108742][ T7825] bridge0: port 1(batadv0) entered disabled state
[   92.202796][ T5871] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   92.206709][ T5871] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   92.551862][ T7846] dummy0: entered promiscuous mode
[   92.555121][ T7846] dummy0: left promiscuous mode
[   92.654776][ T7862] netlink: 'syz.2.538': attribute type 13 has an invalid length.
[   92.658042][ T7862] netlink: 'syz.2.538': attribute type 17 has an invalid length.
[   92.683555][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.687056][ T7862] 8021q: adding VLAN 0 to HW filter on device team0
[   92.690274][ T7862] batman_adv: batadv0: Interface activated: dummy0
[   92.701064][ T7862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.731910][ T7859] lo speed is unknown, defaulting to 1000
[   92.735505][ T7864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.748397][ T7866] 8021q: adding VLAN 0 to HW filter on device bond9
[   92.760574][ T7863] tipc: Disabling bearer <eth:syzkaller0>
[   92.845543][ T7869] : entered promiscuous mode
[   92.856260][ T7862] lo speed is unknown, defaulting to 1000
[   92.860634][ T7869] ip6tnl1: entered promiscuous mode
[   92.869694][ T7869] ip6tnl1: entered allmulticast mode
[   93.206798][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.211799][ T7881] 8021q: adding VLAN 0 to HW filter on device team0
[   93.219824][ T7881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.296882][ T7886] netlink: 'syz.1.546': attribute type 11 has an invalid length.
[   93.500957][ T7910] lo speed is unknown, defaulting to 1000
[   93.532022][ T7912] 8021q: adding VLAN 0 to HW filter on device bond10
[   93.708152][ T7920] bond10: (slave wlan0): Opening slave failed
[   93.719854][ T7912] vlan2: entered allmulticast mode
[   93.722271][ T7912] veth1: entered allmulticast mode
[   93.733386][ T7912] bond10: (slave vlan2): Opening slave failed
[   93.904539][ T7904] __nla_validate_parse: 15 callbacks suppressed
[   93.904553][ T7904] netlink: 156 bytes leftover after parsing attributes in process `syz.1.552'.
[   93.968642][ T7932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.971002][ T7929] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   93.981098][ T7929] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   94.004155][ T7932] syzkaller0: entered promiscuous mode
[   94.006208][ T7932] syzkaller0: entered allmulticast mode
[   94.009720][ T7929] tipc: Resetting bearer <eth:syzkaller0>
[   94.074322][ T7932] tipc: Resetting bearer <eth:syzkaller0>
[   94.094759][ T7930] tipc: Resetting bearer <eth:syzkaller0>
[   94.107764][ T7930] tipc: Disabling bearer <eth:syzkaller0>
[   94.200076][ T7941] netlink: 224 bytes leftover after parsing attributes in process `syz.2.563'.
[   94.319181][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.565'.
[   94.415470][ T7948] 8021q: adding VLAN 0 to HW filter on device bond11
[   94.419654][ T6480] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.429000][ T6480] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.483896][ T6480] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.487413][ T6480] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.496804][ T7943] lo speed is unknown, defaulting to 1000
[   94.740661][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.571'.
[   94.845082][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'.
[   94.851081][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'.
[   94.925125][ T7976] validate_nla: 7 callbacks suppressed
[   94.925138][ T7976] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[   94.930395][ T7976] netlink: 224 bytes leftover after parsing attributes in process `syz.2.573'.
[   94.961212][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'.
[   94.965088][ T7980] netlink: 'syz.0.574': attribute type 5 has an invalid length.
[   94.968223][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.574'.
[   94.975357][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[   94.986948][ T7980] geneve4: entered promiscuous mode
[   94.989390][ T7980] geneve4: entered allmulticast mode
[   95.000503][ T7976] macsec2: entered promiscuous mode
[   95.006718][ T7976] macvlan1: entered promiscuous mode
[   95.014819][ T7976] macvlan1: left promiscuous mode
[   95.044957][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   95.048481][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   95.059268][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   95.068691][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   95.284257][ T7997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.287505][ T7997] syzkaller0: entered promiscuous mode
[   95.289826][ T7997] syzkaller0: entered allmulticast mode
[   95.322036][ T7997] tipc: Resetting bearer <eth:syzkaller0>
[   95.326628][ T7994] tipc: Resetting bearer <eth:syzkaller0>
[   95.351291][ T7994] tipc: Disabling bearer <eth:syzkaller0>
[   95.383588][ T8005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.410786][ T8002] lo speed is unknown, defaulting to 1000
[   95.443703][ T8007] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[   95.469503][ T8007] 8021q: adding VLAN 0 to HW filter on device bond9
[   95.496900][ T8013] netlink: 'syz.1.583': attribute type 10 has an invalid length.
[   95.505568][ T8013] team0: Port device dummy0 added
[   95.757025][ T8020] netlink: 'syz.2.587': attribute type 9 has an invalid length.
[   95.760913][ T8020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.766969][ T8020] syzkaller0: entered promiscuous mode
[   95.768684][ T8020] syzkaller0: entered allmulticast mode
[   95.781287][ T8019] tipc: Resetting bearer <eth:syzkaller0>
[   95.808162][ T8019] tipc: Disabling bearer <eth:syzkaller0>
[   96.097550][ T8034] netlink: 'syz.0.593': attribute type 13 has an invalid length.
[   96.100747][ T8034] netlink: 'syz.0.593': attribute type 17 has an invalid length.
[   96.115958][ T8034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.145367][ T8038] IPv6: sit2: Disabled Multicast RS
[   96.148402][ T8038] sit2: entered allmulticast mode
[   96.298921][ T8044] lo speed is unknown, defaulting to 1000
[   96.343272][ T8052] IPv6: Can't replace route, no match found
[   96.626135][ T8060] bond2: (slave ip6gretap1): Removing an active aggregator
[   96.631081][ T8060] bond2: (slave ip6gretap1): Releasing backup interface
[   96.635102][ T8060] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 82:37:03:98:4d:d3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   96.645273][ T8060] bond2: (slave veth3): Releasing backup interface
[   96.650618][ T8060] team0: Port device bond3 removed
[   96.654267][ T8060] bond4: (slave geneve3): Releasing active interface
[   96.658226][ T8060] batman_adv: batadv0: Removing interface: macvlan0
[   97.110582][ T8062] netlink: 'syz.0.602': attribute type 13 has an invalid length.
[   97.200429][ T8062] netlink: 'syz.0.602': attribute type 17 has an invalid length.
[   97.275713][ T8062] netlink: 'syz.0.602': attribute type 27 has an invalid length.
[   97.634260][ T8073] Bluetooth: MGMT ver 1.23
[   97.706516][ T8071] lo speed is unknown, defaulting to 1000
[   97.770058][ T8075] 8021q: adding VLAN 0 to HW filter on device bond12
[   97.971226][ T8080] lo speed is unknown, defaulting to 1000
[   98.074333][ T8097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.088178][ T8095] tipc: Disabling bearer <eth:syzkaller0>
[   98.478325][ T8107] lo speed is unknown, defaulting to 1000
[   98.737669][ T8117] geneve4: left promiscuous mode
[   98.740204][ T8117] geneve4: left allmulticast mode
[   98.820802][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0
[   98.850143][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0
[   98.854329][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0
[   98.875459][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0
[   99.044341][ T8132] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   99.055788][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.2.620 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   99.055804][ T8132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.055811][ T8132] Call Trace:
[   99.055816][ T8132]  <TASK>
[   99.055821][ T8132]  dump_stack_lvl+0x189/0x250
[   99.055842][ T8132]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.055857][ T8132]  ? __pfx__printk+0x10/0x10
[   99.055876][ T8132]  ? kernfs_path_from_node+0x2f/0x290
[   99.055890][ T8132]  ? kernfs_path_from_node+0x250/0x290
[   99.055901][ T8132]  ? kernfs_path_from_node+0x2f/0x290
[   99.055911][ T8132]  sysfs_warn_dup+0x8e/0xa0
[   99.055921][ T8132]  sysfs_do_create_link_sd+0xc0/0x110
[   99.055934][ T8132]  device_add_class_symlinks+0x1cf/0x240
[   99.055947][ T8132]  device_add+0x475/0xb50
[   99.055960][ T8132]  wiphy_register+0x1ba6/0x28d0
[   99.055988][ T8132]  ? __pfx_wiphy_register+0x10/0x10
[   99.056003][ T8132]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   99.056018][ T8132]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   99.056038][ T8132]  ieee80211_register_hw+0x3425/0x4080
[   99.056061][ T8132]  ? ieee80211_register_hw+0x1411/0x4080
[   99.056077][ T8132]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   99.056092][ T8132]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.056113][ T8132]  ? __hrtimer_setup+0x187/0x210
[   99.056123][ T8132]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   99.056137][ T8132]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[   99.056168][ T8132]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   99.056181][ T8132]  ? trace_kmalloc+0x1f/0xd0
[   99.056193][ T8132]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   99.056209][ T8132]  ? kstrndup+0xbf/0x160
[   99.056229][ T8132]  hwsim_new_radio_nl+0xea4/0x1b10
[   99.056245][ T8132]  ? __pfx___nla_validate_parse+0x10/0x10
[   99.056264][ T8132]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   99.056317][ T8132]  ? __nla_parse+0x40/0x60
[   99.056335][ T8132]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   99.056362][ T8132]  genl_family_rcv_msg_doit+0x215/0x300
[   99.056380][ T8132]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   99.056401][ T8132]  ? bpf_lsm_capable+0x9/0x20
[   99.056411][ T8132]  ? security_capable+0x7e/0x2e0
[   99.056432][ T8132]  genl_rcv_msg+0x60e/0x790
[   99.056449][ T8132]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.056460][ T8132]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   99.056484][ T8132]  netlink_rcv_skb+0x208/0x470
[   99.056498][ T8132]  ? __lock_acquire+0xab9/0xd20
[   99.056514][ T8132]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.056523][ T8132]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.056549][ T8132]  ? down_read+0x1ad/0x2e0
[   99.056561][ T8132]  genl_rcv+0x28/0x40
[   99.056571][ T8132]  netlink_unicast+0x82f/0x9e0
[   99.056591][ T8132]  ? __pfx_netlink_unicast+0x10/0x10
[   99.056607][ T8132]  ? netlink_sendmsg+0x642/0xb30
[   99.056620][ T8132]  ? skb_put+0x11b/0x210
[   99.056635][ T8132]  netlink_sendmsg+0x805/0xb30
[   99.056650][ T8132]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.056667][ T8132]  ? aa_sock_msg_perm+0xf1/0x1d0
[   99.056684][ T8132]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.056695][ T8132]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.056710][ T8132]  __sock_sendmsg+0x21c/0x270
[   99.056727][ T8132]  ____sys_sendmsg+0x505/0x830
[   99.056742][ T8132]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.056759][ T8132]  ? import_iovec+0x74/0xa0
[   99.056769][ T8132]  ___sys_sendmsg+0x21f/0x2a0
[   99.056782][ T8132]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.056818][ T8132]  ? __fget_files+0x2a/0x420
[   99.056827][ T8132]  ? __fget_files+0x3a0/0x420
[   99.056845][ T8132]  __x64_sys_sendmsg+0x19b/0x260
[   99.056858][ T8132]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.056877][ T8132]  ? rcu_is_watching+0x15/0xb0
[   99.056887][ T8132]  ? do_syscall_64+0xbe/0x3b0
[   99.056905][ T8132]  do_syscall_64+0xfa/0x3b0
[   99.056918][ T8132]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.056931][ T8132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.056941][ T8132]  ? exc_page_fault+0x9f/0xf0
[   99.056957][ T8132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.056967][ T8132] RIP: 0033:0x7f7200d8ebe9
[   99.056978][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.056986][ T8132] RSP: 002b:00007f71feff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.056998][ T8132] RAX: ffffffffffffffda RBX: 00007f7200fb5fa0 RCX: 00007f7200d8ebe9
[   99.057004][ T8132] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[   99.057008][ T8132] RBP: 00007f7200e11e19 R08: 0000000000000000 R09: 0000000000000000
[   99.057013][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.057019][ T8132] R13: 00007f7200fb6038 R14: 00007f7200fb5fa0 R15: 00007fff5af44938
[   99.057040][ T8132]  </TASK>
[   99.290668][ T8130] lo speed is unknown, defaulting to 1000
[   99.384644][ T8143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.392045][ T8143] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   99.422169][ T8143] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   99.427862][ T8143] tipc: Resetting bearer <eth:syzkaller0>
[   99.657536][ T5237] Bluetooth: hci2: link tx timeout
[   99.659407][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   99.746467][ T8161] __nla_validate_parse: 8 callbacks suppressed
[   99.746482][ T8161] netlink: 56 bytes leftover after parsing attributes in process `syz.0.630'.
[   99.765770][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[   99.869526][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'.
[   99.977739][ T8180] syzkaller1: entered promiscuous mode
[   99.979446][ T8180] syzkaller1: entered allmulticast mode
[   99.997355][ T8180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.094709][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.099103][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.103548][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.107114][ T8191] validate_nla: 3 callbacks suppressed
[  100.107127][ T8191] netlink: 'syz.2.639': attribute type 12 has an invalid length.
[  100.114605][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.118368][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.639'.
[  100.121945][ T8191] netlink: 'syz.2.639': attribute type 12 has an invalid length.
[  100.198390][ T8198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  100.219944][ T8196] siw: device registration error -23
[  100.223140][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'.
[  100.256512][ T8202] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  100.342828][ T8200] lo speed is unknown, defaulting to 1000
[  100.350391][ T8209] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[  100.375314][ T8211] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  100.380469][ T8209] 8021q: adding VLAN 0 to HW filter on device bond10
[  100.406663][ T8211] 8021q: adding VLAN 0 to HW filter on device bond13
[  100.430232][ T8209] veth7: entered promiscuous mode
[  100.439192][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'.
[  100.574181][ T8216] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  100.577126][ T8216] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  100.599730][ T8223] netlink: 'syz.0.649': attribute type 4 has an invalid length.
[  100.612807][ T8223] block nbd0: not configured, cannot reconfigure
[  100.740661][ T8230] sit0: entered promiscuous mode
[  100.751747][ T8230] netlink: 'syz.2.652': attribute type 1 has an invalid length.
[  100.773553][ T8232] ip6gre1: entered allmulticast mode
[  100.862371][ T8238] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  100.864823][ T8238] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  100.868230][ T8240] netlink: 'syz.2.656': attribute type 1 has an invalid length.
[  100.871866][ T8238] ip6gre1: left allmulticast mode
[  101.071482][ T8246] lo speed is unknown, defaulting to 1000
[  101.248581][ T8252] IPv6: sit2: Disabled Multicast RS
[  101.251511][ T8252] sit2: entered allmulticast mode
[  101.495067][ T8266] netlink: 'syz.2.663': attribute type 10 has an invalid length.
[  101.499073][ T8266] bond0: (slave wlan1): Opening slave failed
[  101.534582][ T8266] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  101.537006][ T8266] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  101.692841][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  101.697477][ T8189] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  101.721212][ T8277] netem: change failed
[  101.731401][ T8277] netlink: 'syz.0.667': attribute type 16 has an invalid length.
[  101.851668][ T8290] bond0: entered promiscuous mode
[  101.861906][ T8290] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  101.866059][ T8290] hsr1: entered promiscuous mode
[  101.881356][ T8290] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  101.933083][ T8299] trusted_key: syz.2.676 sent an empty control message without MSG_MORE.
[  101.993190][ T5857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.001377][ T5857] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.016255][ T5857] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.019392][ T5857] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.037724][ T8306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.045075][ T8308] syzkaller0: entered promiscuous mode
[  102.047509][ T8308] syzkaller0: entered allmulticast mode
[  102.055048][ T8306] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.067548][ T8308] tipc: Resetting bearer <eth:syzkaller0>
[  102.083190][ T8308] tipc: Disabling bearer <eth:syzkaller0>
[  102.159067][ T8320] lo speed is unknown, defaulting to 1000
[  102.199966][ T8323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  102.255342][ T8328] : renamed from bond0 (while UP)
[  102.400747][ T8324] lo speed is unknown, defaulting to 1000
[  102.518787][ T8348] hsr_slave_0: left promiscuous mode
[  102.521432][ T8348] hsr_slave_1: left promiscuous mode
[  102.544087][ T8346] sit0: left promiscuous mode
[  102.551451][ T8346] 8021q: adding VLAN 0 to HW filter on device 
[  102.555198][ T8346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.567742][ T8347] rdma_rxe: rxe_newlink: failed to add lo
[  102.568771][ T8349] rdma_rxe: rxe_newlink: failed to add lo
[  102.654042][ T8357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.656643][ T8357] syzkaller0: entered promiscuous mode
[  102.658482][ T8357] syzkaller0: entered allmulticast mode
[  102.741466][ T8365] tipc: Resetting bearer <eth:syzkaller0>
[  102.810678][ T8371] lo speed is unknown, defaulting to 1000
[  103.278184][ T8391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.291923][ T8390] tipc: Disabling bearer <eth:syzkaller0>
[  103.488326][ T8356] tipc: Resetting bearer <eth:syzkaller0>
[  103.509426][ T8356] tipc: Disabling bearer <eth:syzkaller0>
[  103.651794][ T8415] ip6gretap0: entered promiscuous mode
[  103.654277][ T8415] macsec2: entered promiscuous mode
[  103.656193][ T8415] macsec2: entered allmulticast mode
[  103.658110][ T8415] ip6gretap0: entered allmulticast mode
[  103.707096][ T8422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.721816][ T8422] syzkaller0: entered promiscuous mode
[  103.725765][ T8422] syzkaller0: entered allmulticast mode
[  103.743971][ T8422] tipc: Resetting bearer <eth:syzkaller0>
[  103.761360][ T8422] tipc: Resetting bearer <eth:syzkaller0>
[  103.772601][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  103.773417][ T8422] tipc: Disabling bearer <eth:syzkaller0>
[  103.878451][ T8440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.881075][ T8440] syzkaller0: entered promiscuous mode
[  103.884030][ T8440] syzkaller0: entered allmulticast mode
[  103.894030][ T8440] tipc: Resetting bearer <eth:syzkaller0>
[  103.907739][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  103.923588][ T8438] tipc: Disabling bearer <eth:syzkaller0>
[  104.005354][ T8449] ip6_vti0: Master is either lo or non-ether device
[  104.011150][ T5871] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  104.353815][ T8460] sctp: [Deprecated]: syz.0.728 (pid 8460) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.353815][ T8460] Use struct sctp_sack_info instead
[  104.832555][ T8467] __nla_validate_parse: 21 callbacks suppressed
[  104.832568][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'.
[  104.853701][ T8467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.856947][ T8467] syzkaller0: entered promiscuous mode
[  104.859009][ T8467] syzkaller0: entered allmulticast mode
[  104.864226][ T8467] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  104.880700][ T8467] tipc: Resetting bearer <eth:syzkaller0>
[  104.891674][ T8466] tipc: Resetting bearer <eth:syzkaller0>
[  104.904080][ T8466] tipc: Disabling bearer <eth:syzkaller0>
[  104.934877][ T8475] geneve5: entered promiscuous mode
[  104.937875][ T6480] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.941982][ T6480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.947248][ T6480] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.957018][ T6480] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.962713][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  105.094478][ T8485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.108220][ T8485] syzkaller0: entered promiscuous mode
[  105.110283][ T8485] syzkaller0: entered allmulticast mode
[  105.118058][ T8484] tipc: Resetting bearer <eth:syzkaller0>
[  105.127971][ T8484] tipc: Disabling bearer <eth:syzkaller0>
[  105.245981][ T8489] validate_nla: 3 callbacks suppressed
[  105.245996][ T8489] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[  105.300910][ T8489] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  105.309462][ T5857] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.315879][ T8489] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.342588][ T8489] veth5: entered promiscuous mode
[  105.351151][ T8489] bond9: (slave veth5): Enslaving as a backup interface with a down link
[  105.363782][ T8489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.366260][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'.
[  105.399699][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.741'.
[  105.428057][ T8506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.742'.
[  105.432938][ T5857] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.491562][ T8510] netlink: 248 bytes leftover after parsing attributes in process `syz.2.744'.
[  105.621591][ T8525] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.748'.
[  105.721685][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'.
[  105.796385][ T8544] pim6reg1: entered allmulticast mode
[  105.876832][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'.
[  105.944622][ T8557] lo speed is unknown, defaulting to 1000
[  105.986499][ T8560] netlink: 'syz.0.758': attribute type 1 has an invalid length.
[  106.011913][ T8560] 8021q: adding VLAN 0 to HW filter on device bond14
[  106.121277][ T8564] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  106.161863][ T8566] netlink: 'syz.0.760': attribute type 1 has an invalid length.
[  106.165836][ T8566] netlink: 'syz.0.760': attribute type 2 has an invalid length.
[  106.205524][ T8568] netlink: 'syz.0.761': attribute type 13 has an invalid length.
[  106.466104][ T8582] lo speed is unknown, defaulting to 1000
[  106.505818][ T8585] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  106.524582][ T8585] 8021q: adding VLAN 0 to HW filter on device bond15
[  106.692553][ T8602] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.706185][ T8604] netlink: 248 bytes leftover after parsing attributes in process `syz.2.771'.
[  106.818232][ T8614] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[  107.025125][ T8625] netlink: 'syz.2.776': attribute type 5 has an invalid length.
[  107.040498][ T8625] geneve6: entered promiscuous mode
[  107.045193][ T8625] geneve6: entered allmulticast mode
[  107.048581][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  107.051847][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  107.062816][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  107.066124][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  107.106118][ T8633] netlink: 'syz.1.778': attribute type 12 has an invalid length.
[  107.121515][ T8637] netlink: 'syz.0.780': attribute type 16 has an invalid length.
[  107.161501][ T8640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.165824][ T8640] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  107.168510][ T8640] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  107.241935][ T8650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.250354][ T8650] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  107.291513][ T8659] ip6gre2: entered allmulticast mode
[  107.405935][ T8661] lo speed is unknown, defaulting to 1000
[  107.590334][ T8666] lo speed is unknown, defaulting to 1000
[  107.749960][ T8684] batadv0: left allmulticast mode
[  107.753700][ T8684] batadv0: left promiscuous mode
[  107.756521][ T8684] bridge0: port 1(batadv0) entered disabled state
[  107.766201][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.770473][ T8684] batadv0: entered promiscuous mode
[  107.774029][ T8684] : (slave batadv0): Enslaving as an active interface with an up link
[  107.835616][ T8686] sit2: entered promiscuous mode
[  107.944728][ T8691] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.019411][ T8700] syzkaller1: entered promiscuous mode
[  108.025722][ T8700] syzkaller1: entered allmulticast mode
[  108.089763][ T8700] 8021q: VLANs not supported on wg0
[  108.122466][ T8697] team0: Mode changed to "loadbalance"
[  108.257510][   T33] audit: type=1800 audit(1755526211.168:2): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.805" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1489 res=0 errno=0
[  108.520321][ T8738] team0 (unregistering): Port device bond7 removed
[  108.525278][ T8738] team0 (unregistering): Port device bond8 removed
[  108.530957][ T8738] team0 (unregistering): Port device dummy0 removed
[  108.571997][ T8740] lo speed is unknown, defaulting to 1000
[  108.639484][ T8746] 8021q: adding VLAN 0 to HW filter on device bond16
[  108.732333][ T8749] nbd0: detected capacity change from 0 to 127
[  108.776679][ T8749] syzkaller1: entered promiscuous mode
[  108.778602][ T8749] syzkaller1: entered allmulticast mode
[  108.786755][   T57] block nbd0: Receive control failed (result -104)
[  108.904365][ T8761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.075853][ T8778] geneve5: entered promiscuous mode
[  109.081950][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.091047][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.111383][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.116403][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.127519][ T8782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.148513][ T8782] syzkaller0: entered promiscuous mode
[  109.150323][ T8782] syzkaller0: entered allmulticast mode
[  109.177110][ T8784] lo speed is unknown, defaulting to 1000
[  109.185042][ T8780] tipc: Resetting bearer <eth:syzkaller0>
[  109.354622][ T8788] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  110.065630][ T8780] tipc: Disabling bearer <eth:syzkaller0>
[  110.074239][ T8789] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  110.203833][ T8800] batman_adv: batadv0: Interface deactivated: dummy0
[  110.214700][ T8800] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  110.217103][ T8800] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  110.227283][ T8800] hsr1: left promiscuous mode
[  110.230309][ T8800] ip6gretap0: left allmulticast mode
[  110.232631][ T8800] macsec2: left promiscuous mode
[  110.234433][ T8800] macsec2: left allmulticast mode
[  110.238694][ T8800] geneve5: left promiscuous mode
[  110.243970][ T8800] geneve6: left promiscuous mode
[  110.245903][ T8800] geneve6: left allmulticast mode
[  110.249616][ T8800] sit2: left promiscuous mode
[  110.254212][ T6480] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.258011][ T6480] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.266398][ T6480] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  110.269214][ T6480] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.272046][ T6480] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.275825][ T6480] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  110.279058][ T6480] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.281922][ T6480] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.288759][ T6480] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  110.293091][ T6480] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.302944][ T6480] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.306021][ T6480] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  110.355089][ T8806] batman_adv: batadv0: Removing interface: dummy0
[  110.359844][ T8806] : (slave batadv0): Releasing backup interface
[  110.364057][ T8806] batadv0: left promiscuous mode
[  110.368669][ T8806] bond2: (slave geneve4): Releasing active interface
[  110.375877][ T8806] bond7: (slave ip6gretap1): Removing an active aggregator
[  110.380644][ T8806] bond7: (slave ip6gretap1): Releasing backup interface
[  110.384479][ T8806] bond7: (slave ip6gretap1): the permanent HWaddr of slave - d6:69:f0:d4:ca:83 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  110.393782][ T8806] bond7: (slave veth5): Releasing backup interface
[  110.448608][ T8809] __nla_validate_parse: 15 callbacks suppressed
[  110.448620][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  110.456005][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  110.459298][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  110.463393][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  110.603479][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'.
[  110.662024][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'.
[  110.674853][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'.
[  110.720247][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.835'.
[  110.738495][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  110.758165][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  111.000671][ T8848] bridge0: port 1(batadv0) entered disabled state
[  111.098050][ T8850] bridge0: entered allmulticast mode
[  111.320535][ T8862] sctp: [Deprecated]: syz.1.844 (pid 8862) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.320535][ T8862] Use struct sctp_sack_info instead
[  111.338832][ T8864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.365891][ T8867] validate_nla: 4 callbacks suppressed
[  111.365900][ T8867] netlink: 'syz.0.846': attribute type 4 has an invalid length.
[  111.400530][ T8870] vlan2: entered promiscuous mode
[  111.402883][ T8870] hsr_slave_1: entered promiscuous mode
[  111.405393][ T8870] vlan2: entered allmulticast mode
[  111.407733][ T8870] hsr_slave_1: entered allmulticast mode
[  111.503925][ T8873] netlink: 'syz.0.848': attribute type 83 has an invalid length.
[  111.672859][ T8881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.775636][ T8888] macsec1: entered promiscuous mode
[  111.777625][ T8888] macvlan1: entered promiscuous mode
[  111.858285][ T8900] lo speed is unknown, defaulting to 1000
[  111.900053][ T8901] netlink: 'syz.2.856': attribute type 2 has an invalid length.
[  111.905826][ T8902] netlink: 'syz.0.857': attribute type 1 has an invalid length.
[  111.916268][ T8901] k*]: entered promiscuous mode
[  111.944707][ T8901] ip6gretap0: left promiscuous mode
[  111.951195][ T8901] 8021q: adding VLAN 0 to HW filter on device 
[  111.957463][ T8901] 8021q: adding VLAN 0 to HW filter on device team0
[  111.965836][ T8901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.088633][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.091330][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.093827][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.096112][  T127] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.098449][  T127] block nbd0: Dead connection, failed to find a fallback
[  112.101640][  T127] block nbd0: shutting down sockets
[  112.105615][  T127] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.112701][  T127] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.115553][ T8913] netlink: 'syz.0.860': attribute type 11 has an invalid length.
[  112.115845][  T127] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.121733][  T127] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.126285][  T127] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.129182][  T127] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.131669][  T127] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.134872][  T127] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.138215][ T6014] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.141233][ T6014] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.149349][ T6014] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.152715][ T6014] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.155283][ T6014] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.158276][ T6014] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.160722][ T6014] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.165258][ T6014] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.168247][ T6014] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.171270][ T6014] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.174632][ T6014] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.177593][ T6014] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.181278][ T6014] ldm_validate_partition_table(): Disk read failed.
[  112.185719][ T6014] Dev nbd0: unable to read RDB block 0
[  112.189305][ T6014]  nbd0: unable to read partition table
[  112.197194][ T6014] ldm_validate_partition_table(): Disk read failed.
[  112.200464][ T6014] Dev nbd0: unable to read RDB block 0
[  112.203927][ T6014]  nbd0: unable to read partition table
[  112.358317][ T8916] lo speed is unknown, defaulting to 1000
[  112.371019][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  112.374058][ T8923] netlink: 'syz.0.863': attribute type 11 has an invalid length.
[  112.722190][ T8947] batadv0: entered promiscuous mode
[  112.737027][ T8947] batman_adv: batadv0: Adding interface: macvlan2
[  112.739455][ T8947] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  112.749984][ T8947] batman_adv: batadv0: Interface activated: macvlan2
[  112.755954][ T8946] batadv0: left promiscuous mode
[  113.003523][ T8966] netlink: 'syz.0.876': attribute type 1 has an invalid length.
[  113.066490][ T8966] bond17: (slave bridge1): Enslaving as a backup interface with an up link
[  113.146057][ T8983] veth0: entered promiscuous mode
[  113.167157][ T8987] veth0: left promiscuous mode
[  113.275406][ T8997] netlink: 'syz.2.880': attribute type 29 has an invalid length.
[  113.337007][ T5880] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.340157][ T5880] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.343396][ T5880] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.346153][ T5880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.406047][ T9017] pim6reg1: entered promiscuous mode
[  113.407967][ T9017] pim6reg1: entered allmulticast mode
[  113.498123][ T9030] lo speed is unknown, defaulting to 1000
[  113.840169][ T9066] batadv0: left promiscuous mode
[  113.841893][ T9066] batadv0: left allmulticast mode
[  113.860492][ T9066] vlan0: left promiscuous mode
[  113.892928][ T9066] veth5: left promiscuous mode
[  113.914360][ T6480] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.921040][ T6480] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.932785][ T6480] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.938393][ T6480] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.089228][ T9071] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.400172][ T9096] netlink: 'syz.2.909': attribute type 1 has an invalid length.
[  114.576310][ T9106] geneve7: entered promiscuous mode
[  114.655995][ T9104] bridge0 (unregistering): left allmulticast mode
[  114.697948][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.700730][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.706771][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.714459][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.821268][ T9132] netlink: 'syz.2.921': attribute type 4 has an invalid length.
[  114.830400][ T9132] netlink: 'syz.2.921': attribute type 4 has an invalid length.
[  114.876867][ T9138] tun0: tun_chr_ioctl cmd 2147767520
[  114.997461][ T9145] netlink: 'syz.0.925': attribute type 9 has an invalid length.
[  115.669673][ T9158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.676411][ T9158] syzkaller0: entered promiscuous mode
[  115.678846][ T9158] syzkaller0: entered allmulticast mode
[  115.697066][ T9158] bond0: entered promiscuous mode
[  115.700530][ T9158] batadv0: entered promiscuous mode
[  115.713960][ T9158] debugfs: 'hsr1' already exists in 'hsr'
[  115.716585][ T9158] Cannot create hsr debugfs directory
[  115.718921][ T9158] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  115.748009][ T9158] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  115.757495][ T9158] 8021q: adding VLAN 0 to HW filter on device hsr1
[  115.787634][ T9158] tipc: Resetting bearer <eth:syzkaller0>
[  115.791695][ T9158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.795520][ T9158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  115.809979][ T9157] tipc: Resetting bearer <eth:syzkaller0>
[  115.820218][ T9157] tipc: Disabling bearer <eth:syzkaller0>
[  115.826540][ T9163] __nla_validate_parse: 33 callbacks suppressed
[  115.826550][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.838700][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.842006][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.846973][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.850136][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.855401][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.859481][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.867597][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.871645][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  115.876395][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  116.055658][ T9179] macsec2: entered promiscuous mode
[  116.057646][ T9179] ip6gretap0: entered promiscuous mode
[  116.059777][ T9179] macsec2: entered allmulticast mode
[  116.061566][ T9179] ip6gretap0: entered allmulticast mode
[  116.213148][ T9192] ip6gretap0: left allmulticast mode
[  116.215057][ T9192] ip6gretap0: left promiscuous mode
[  116.735060][ T9241] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.786281][ T9247] netlink: 'syz.1.960': attribute type 10 has an invalid length.
[  116.808890][ T9249] 8021q: VLANs not supported on gre0
[  116.861498][ T9249] bond0 (unregistering): Released all slaves
[  116.996342][ T9257] netlink: 'syz.0.962': attribute type 13 has an invalid length.
[  116.999693][ T9257] netlink: 'syz.0.962': attribute type 17 has an invalid length.
[  117.010889][ T9257] gretap0: entered promiscuous mode
[  117.080482][ T9257] 8021q: adding VLAN 0 to HW filter on device team0
[  117.088145][ T9257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.107649][ T9265] lo speed is unknown, defaulting to 1000
[  117.189405][ T9277] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[  117.249456][ T9284] syzkaller0: entered promiscuous mode
[  117.251746][ T9284] syzkaller0: entered allmulticast mode
[  118.360954][ T9320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.371806][ T9320] tipc: Resetting bearer <eth:syzkaller0>
[  118.406902][ T9303] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  118.512059][ T9333] pim6reg1: entered promiscuous mode
[  118.514895][ T9333] pim6reg1: entered allmulticast mode
[  118.560853][ T9337] netlink: 'syz.0.983': attribute type 6 has an invalid length.
[  118.565527][ T9337] netlink: 'syz.0.983': attribute type 5 has an invalid length.
[  118.599745][ T9341] netlink: 'syz.0.983': attribute type 6 has an invalid length.
[  118.612379][ T9341] netlink: 'syz.0.983': attribute type 5 has an invalid length.
[  118.678026][ T9345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.681585][ T9345] syzkaller0: entered promiscuous mode
[  118.686841][ T9345] syzkaller0: entered allmulticast mode
[  118.719906][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.726683][ T9333] team0: Port device bond0 added
[  118.756459][ T9345] tipc: Resetting bearer <eth:syzkaller0>
[  118.763814][ T9344] tipc: Resetting bearer <eth:syzkaller0>
[  118.776466][ T9344] tipc: Disabling bearer <eth:syzkaller0>
[  119.026208][ T9366] netlink: 'syz.0.990': attribute type 1 has an invalid length.
[  119.088836][ T9360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  119.099220][ T9360] gretap2: entered promiscuous mode
[  119.112035][ T9377] netlink: 'syz.1.996': attribute type 4 has an invalid length.
[  119.193621][ T9381] netlink: 'syz.0.998': attribute type 1 has an invalid length.
[  119.224548][ T9381] bond18: entered promiscuous mode
[  119.227041][ T9381] 8021q: adding VLAN 0 to HW filter on device bond18
[  119.249832][ T9381] 8021q: adding VLAN 0 to HW filter on device bond18
[  119.254091][ T9381] bond18: (slave wireguard0): The slave device specified does not support setting the MAC address
[  119.258587][ T9381] bond18: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  119.293053][ T9393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.295882][ T9393] IPv6: NLM_F_CREATE should be set when creating new route
[  119.298616][ T9393] IPv6: NLM_F_CREATE should be set when creating new route
[  119.323779][ T9393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.334939][ T9381] bond18: (slave wireguard0): making interface the new active one
[  119.339292][ T9381] wireguard0: entered promiscuous mode
[  119.344876][ T9381] bond18: (slave wireguard0): Enslaving as an active interface with an up link
[  119.378836][ T9393] bond18: (slave wireguard1): The slave device specified does not support setting the MAC address
[  119.412572][ T9393] bond18: (slave wireguard1): Enslaving as a backup interface with an up link
[  119.668452][ T9424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.720179][ T9424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.731929][ T9427] syzkaller1: entered promiscuous mode
[  119.734496][ T9427] syzkaller1: entered allmulticast mode
[  119.771742][ T9424] syzkaller0: entered promiscuous mode
[  119.774396][ T9424] syzkaller0: entered allmulticast mode
[  119.781011][ T6480] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.791384][ T9424] tipc: Resetting bearer <eth:syzkaller0>
[  119.799216][ T9423] tipc: Resetting bearer <eth:syzkaller0>
[  119.809834][ T9423] tipc: Disabling bearer <eth:syzkaller0>
[  119.816005][ T6480] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.819640][ T6480] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.823625][ T6480] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.833666][ T9435] lo speed is unknown, defaulting to 1000
[  119.890929][ T9437] bridge0: entered allmulticast mode
[  120.091168][ T9449] batman_adv: batadv0: Interface deactivated: macvlan2
[  120.094347][ T9449] batman_adv: batadv0: Removing interface: macvlan2
[  120.099132][ T9449] bond17: (slave bridge1): Releasing backup interface
[  120.108333][ T9449] bond18: (slave wireguard0): Releasing backup interface
[  120.111354][ T9449] wireguard0: left promiscuous mode
[  120.115008][ T9449] bond18: (slave wireguard1): making interface the new active one
[  120.118495][ T9449] wireguard1: entered promiscuous mode
[  120.127726][ T9449] bond18: (slave wireguard1): Releasing backup interface
[  120.130873][ T9449] wireguard1: left promiscuous mode
[  120.216327][ T9455] team0: Mode changed to "broadcast"
[  120.233730][ T9449] vlan0: entered promiscuous mode
[  120.238419][ T9449] tipc: Enabled bearer <eth:team0>, priority 0
[  120.386165][ T9466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.390713][ T9470] syzkaller0: entered promiscuous mode
[  120.400318][ T9470] syzkaller0: entered allmulticast mode
[  120.444606][ T9470] tipc: Resetting bearer <eth:syzkaller0>
[  120.468683][ T9470] tipc: Disabling bearer <eth:syzkaller0>
[  120.654640][ T9485] Unsupported ieee802154 address type: 0
[  120.831319][ T9502] tipc: Resetting bearer <eth:team0>
[  120.851568][ T9502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.925658][ T9513] bond0: (slave wlan1): Opening slave failed
[  120.988602][ T9512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.026699][ T9502] lo speed is unknown, defaulting to 1000
[  121.033750][ T9512] syzkaller0: entered promiscuous mode
[  121.036132][ T9512] syzkaller0: entered allmulticast mode
[  121.095750][ T9511] tipc: Resetting bearer <eth:syzkaller0>
[  121.125206][ T9511] tipc: Disabling bearer <eth:syzkaller0>
[  121.193273][ T9522] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.239654][ T9524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.250779][ T9524] syzkaller0: entered promiscuous mode
[  121.253321][ T9524] syzkaller0: entered allmulticast mode
[  121.255450][ T9525] __nla_validate_parse: 55 callbacks suppressed
[  121.255461][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'.
[  121.264566][ T9525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1038'.
[  121.270230][ T9522] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.301696][ T9525] geneve3: entered promiscuous mode
[  121.304503][ T9525] geneve3: entered allmulticast mode
[  121.308846][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  121.315197][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  121.322498][ T9524] vlan1: entered promiscuous mode
[  121.324515][ T9524] bond0: entered promiscuous mode
[  121.327064][ T9524] vlan1: entered allmulticast mode
[  121.329333][ T9524] bond0: entered allmulticast mode
[  121.334319][ T9522] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.342510][ T9522] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  121.355428][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'.
[  121.398698][ T9522] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  121.406148][ T9529] IPVS: ip_vs_edit_dest(): server weight less than zero
[  121.418221][ T9522] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  121.434875][ T9523] tipc: Resetting bearer <eth:syzkaller0>
[  121.444295][ T9523] tipc: Disabling bearer <eth:syzkaller0>
[  121.556418][ T5880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.568339][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  121.599535][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.603219][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  121.645381][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.662485][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  121.694321][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.705162][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  121.768093][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'.
[  121.771685][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'.
[  121.851350][ T9549] lo speed is unknown, defaulting to 1000
[  121.885537][ T9554] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  121.960863][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1050'.
[  122.059920][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'.
[  122.070010][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'.
[  122.075574][ T9565] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1053'.
[  122.115807][ T9565] validate_nla: 4 callbacks suppressed
[  122.115821][ T9565] netlink: 'syz.0.1053': attribute type 6 has an invalid length.
[  122.122581][ T9565] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1053'.
[  122.174146][ T9571] netlink: 'syz.1.1054': attribute type 10 has an invalid length.
[  122.577310][ T9598] bond6: (slave veth3): Releasing active interface
[  122.594737][ T9598] bond9: (slave ip6gretap1): Removing an active aggregator
[  122.598769][ T9598] bond9: (slave ip6gretap1): Releasing backup interface
[  122.601881][ T9598] bond9: (slave ip6gretap1): the permanent HWaddr of slave - e2:90:e1:0b:d3:f5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  122.615595][ T9598] bond9: (slave veth5): Releasing backup interface
[  122.625165][ T9603] netlink: 'syz.0.1064': attribute type 10 has an invalid length.
[  122.628249][ T9603] tipc: Resetting bearer <eth:team0>
[  122.631730][ T9603] tipc: Resetting bearer <eth:team0>
[  122.634805][ T9603] 8021q: adding VLAN 0 to HW filter on device team0
[  122.637823][ T9603] bond0: (slave team0): Enslaving as an active interface with an up link
[  122.697321][ T9610] bond0: (slave team0): Releasing backup interface
[  122.700066][ T9610] tipc: Resetting bearer <eth:team0>
[  122.705085][ T9610] tipc: Resetting bearer <eth:team0>
[  122.710576][ T9610] team0: Unable to change to the same mode the team is in
[  122.744818][ T9612] sit3: entered promiscuous mode
[  122.780387][ T9616] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  122.888169][ T9629] syzkaller1: entered promiscuous mode
[  122.890615][ T9629] syzkaller1: entered allmulticast mode
[  122.900276][ T9630] netlink: 'syz.2.1075': attribute type 15 has an invalid length.
[  123.187743][ T9659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.249015][ T9663] bond0: entered allmulticast mode
[  123.253188][ T9663] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.290191][ T9668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.815652][ T9694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.819611][ T9694] syzkaller0: entered promiscuous mode
[  123.822000][ T9694] syzkaller0: entered allmulticast mode
[  123.835306][ T9694] tipc: Resetting bearer <eth:syzkaller0>
[  123.839648][ T9693] tipc: Resetting bearer <eth:syzkaller0>
[  123.852287][ T9693] tipc: Disabling bearer <eth:syzkaller0>
[  124.061284][ T9704] ip6tnl1: entered promiscuous mode
[  124.066224][ T9704] ip6tnl1: entered allmulticast mode
[  124.069838][ T9704] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  124.193368][ T9713] sctp: [Deprecated]: syz.2.1106 (pid 9713) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.193368][ T9713] Use struct sctp_sack_info instead
[  124.218136][ T9718] syzkaller1: entered promiscuous mode
[  124.221008][ T9718] syzkaller1: entered allmulticast mode
[  124.231764][ T9722] netlink: 'syz.0.1109': attribute type 5 has an invalid length.
[  124.303394][ T9722] tipc: Disabling bearer <eth:team0>
[  124.484581][ T9731] netlink: 'syz.1.1112': attribute type 10 has an invalid length.
[  124.493766][ T9731] bond0: (slave wlan1): Opening slave failed
[  124.534102][ T9734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.558153][ T9737] netlink: 'syz.0.1114': attribute type 5 has an invalid length.
[  124.574621][ T9737] geneve6: entered promiscuous mode
[  124.583384][ T9737] geneve6: entered allmulticast mode
[  124.596828][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  124.603820][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  124.607798][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  124.634247][ T9734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.637761][ T9734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.696381][ T9734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.700680][ T9734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.765298][ T9734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.769562][ T9734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  124.834198][ T9761] netlink: 'syz.1.1124': attribute type 32 has an invalid length.
[  124.840077][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  124.843673][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  124.852649][ T5871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  124.855468][ T5871] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  124.866034][ T5871] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  124.868974][ T5871] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  124.879304][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  124.883099][ T5871] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  125.087846][ T9781] netlink: 'syz.0.1130': attribute type 4 has an invalid length.
[  125.329990][ T9794] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.646744][ T9803] netlink: 'syz.2.1138': attribute type 10 has an invalid length.
[  125.654069][ T9804] 8021q: adding VLAN 0 to HW filter on device team0
[  125.658075][ T9804] team0: entered promiscuous mode
[  125.661299][ T9804] : (slave team0): Enslaving as an active interface with an up link
[  125.928578][ T9808] bond0: left allmulticast mode
[  125.935843][ T9808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.943059][   T47] lo speed is unknown, defaulting to 1000
[  125.946080][   T47] syz0: Port: 1 Link ACTIVE
[  125.948210][   T47] lo speed is unknown, defaulting to 1000
[  126.219672][ T9817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.359328][ T9828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.583477][ T9842] __nla_validate_parse: 19 callbacks suppressed
[  126.583489][ T9842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1155'.
[  126.621216][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  126.695332][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'.
[  126.779471][ T9856] 8021q: adding VLAN 0 to HW filter on device bond19
[  126.793453][ T9856] veth5: entered promiscuous mode
[  126.797257][ T9856] bond19: (slave veth5): Enslaving as a backup interface with a down link
[  126.830137][ T9859] IPv6: sit4: Disabled Multicast RS
[  126.874095][ T9863] lo speed is unknown, defaulting to 1000
[  126.880408][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'.
[  127.097018][ T9863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.284932][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  127.410787][ T9904] validate_nla: 3 callbacks suppressed
[  127.410797][ T9904] netlink: 'syz.1.1173': attribute type 10 has an invalid length.
[  127.440216][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1175'.
[  127.515387][ T9913] netlink: 'syz.1.1176': attribute type 10 has an invalid length.
[  127.518675][ T9913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1176'.
[  127.525222][ T9913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  127.578947][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1182'.
[  127.584938][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'.
[  127.588471][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'.
[  127.609849][ T9928] lo speed is unknown, defaulting to 1000
[  127.636384][ T9936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.638981][ T9936] syzkaller0: entered promiscuous mode
[  127.640898][ T9936] syzkaller0: entered allmulticast mode
[  127.661013][ T9934] tipc: Resetting bearer <eth:syzkaller0>
[  127.685457][ T9934] tipc: Disabling bearer <eth:syzkaller0>
[  127.712437][ T9943] batadv_slave_1: entered promiscuous mode
[  127.810627][ T9947] nbd: must specify at least one socket
[  127.941136][ T9940] batadv_slave_1: left promiscuous mode
[  128.060073][ T9967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.109085][ T9978] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  128.206828][ T9987] lo speed is unknown, defaulting to 1000
[  128.356633][ T9992] lo speed is unknown, defaulting to 1000
[  128.499106][T10011] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.680505][T10014] vti0: entered promiscuous mode
[  128.806928][T10032] batadv_slave_1: entered promiscuous mode
[  128.842040][T10036] vlan3: entered promiscuous mode
[  128.844775][T10036] bridge0: entered promiscuous mode
[  128.898758][T10041] bond19: (slave veth5): Releasing backup interface
[  128.907700][T10041] "syz.0.1217" (10041) uses obsolete ecb(arc4) skcipher
[  128.935982][T10031] batadv_slave_1: left promiscuous mode
[  128.973354][T10048] erspan0: entered promiscuous mode
[  129.134728][T10079] netlink: 'syz.2.1230': attribute type 13 has an invalid length.
[  129.137593][T10079] netlink: 'syz.2.1230': attribute type 17 has an invalid length.
[  129.146390][T10079] 8021q: adding VLAN 0 to HW filter on device team0
[  129.151081][T10079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.171076][T10077] lo speed is unknown, defaulting to 1000
[  129.265259][T10080] lo speed is unknown, defaulting to 1000
[  129.389971][T10079] lo speed is unknown, defaulting to 1000
[  129.431259][T10091] netlink: 'syz.1.1233': attribute type 13 has an invalid length.
[  129.439015][T10091] netlink: 'syz.1.1233': attribute type 17 has an invalid length.
[  129.540951][T10091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.950346][T10098] netlink: 'syz.0.1236': attribute type 13 has an invalid length.
[  129.954886][T10098] netlink: 'syz.0.1236': attribute type 17 has an invalid length.
[  129.963470][T10098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.981768][T10098] lo speed is unknown, defaulting to 1000
[  130.260154][T10124] sctp: [Deprecated]: syz.1.1242 (pid 10124) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.260154][T10124] Use struct sctp_sack_info instead
[  130.296611][T10124] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  130.306716][T10124] CPU: 0 UID: 0 PID: 10124 Comm: syz.1.1242 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  130.306752][T10124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.306761][T10124] Call Trace:
[  130.306768][T10124]  <TASK>
[  130.306775][T10124]  dump_stack_lvl+0x189/0x250
[  130.306803][T10124]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.306849][T10124]  ? __pfx__printk+0x10/0x10
[  130.306874][T10124]  ? kernfs_path_from_node+0x2f/0x290
[  130.306890][T10124]  ? kernfs_path_from_node+0x250/0x290
[  130.306905][T10124]  ? kernfs_path_from_node+0x2f/0x290
[  130.306923][T10124]  sysfs_warn_dup+0x8e/0xa0
[  130.306939][T10124]  sysfs_do_create_link_sd+0xc0/0x110
[  130.306957][T10124]  device_add_class_symlinks+0x1cf/0x240
[  130.306975][T10124]  device_add+0x475/0xb50
[  130.306990][T10124]  wiphy_register+0x1ba6/0x28d0
[  130.307022][T10124]  ? __pfx_wiphy_register+0x10/0x10
[  130.307037][T10124]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  130.307057][T10124]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  130.307081][T10124]  ieee80211_register_hw+0x3425/0x4080
[  130.307109][T10124]  ? ieee80211_register_hw+0x1411/0x4080
[  130.307131][T10124]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  130.307150][T10124]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.307174][T10124]  ? __hrtimer_setup+0x187/0x210
[  130.307186][T10124]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.307207][T10124]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  130.307248][T10124]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  130.307264][T10124]  ? trace_kmalloc+0x1f/0xd0
[  130.307278][T10124]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  130.307295][T10124]  ? kstrndup+0xbf/0x160
[  130.307314][T10124]  hwsim_new_radio_nl+0xea4/0x1b10
[  130.307332][T10124]  ? __pfx___nla_validate_parse+0x10/0x10
[  130.307363][T10124]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.307389][T10124]  ? __nla_parse+0x40/0x60
[  130.307409][T10124]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  130.307432][T10124]  genl_family_rcv_msg_doit+0x215/0x300
[  130.307452][T10124]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  130.307480][T10124]  ? bpf_lsm_capable+0x9/0x20
[  130.307499][T10124]  ? security_capable+0x7e/0x2e0
[  130.307522][T10124]  genl_rcv_msg+0x60e/0x790
[  130.307542][T10124]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.307555][T10124]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  130.307583][T10124]  netlink_rcv_skb+0x208/0x470
[  130.307599][T10124]  ? __lock_acquire+0xab9/0xd20
[  130.307618][T10124]  ? __pfx_genl_rcv_msg+0x10/0x10
[  130.307633][T10124]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  130.307666][T10124]  ? down_read+0x1ad/0x2e0
[  130.307680][T10124]  genl_rcv+0x28/0x40
[  130.307692][T10124]  netlink_unicast+0x82f/0x9e0
[  130.307716][T10124]  ? __pfx_netlink_unicast+0x10/0x10
[  130.307742][T10124]  ? netlink_sendmsg+0x642/0xb30
[  130.307758][T10124]  ? skb_put+0x11b/0x210
[  130.307774][T10124]  netlink_sendmsg+0x805/0xb30
[  130.307800][T10124]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.307850][T10124]  ? aa_sock_msg_perm+0xf1/0x1d0
[  130.307876][T10124]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  130.307891][T10124]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.307911][T10124]  __sock_sendmsg+0x21c/0x270
[  130.307933][T10124]  ____sys_sendmsg+0x505/0x830
[  130.307952][T10124]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.307975][T10124]  ? import_iovec+0x74/0xa0
[  130.307993][T10124]  ___sys_sendmsg+0x21f/0x2a0
[  130.308007][T10124]  ? __pfx____sys_sendmsg+0x10/0x10
[  130.308049][T10124]  ? __fget_files+0x2a/0x420
[  130.308061][T10124]  ? __fget_files+0x3a0/0x420
[  130.308080][T10124]  __x64_sys_sendmsg+0x19b/0x260
[  130.308096][T10124]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  130.308117][T10124]  ? rcu_is_watching+0x15/0xb0
[  130.308134][T10124]  ? do_syscall_64+0xbe/0x3b0
[  130.308156][T10124]  do_syscall_64+0xfa/0x3b0
[  130.308173][T10124]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.308189][T10124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.308202][T10124]  ? exc_page_fault+0x9f/0xf0
[  130.308221][T10124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.308233][T10124] RIP: 0033:0x7fed7cb8ebe9
[  130.308246][T10124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.308257][T10124] RSP: 002b:00007fed7d996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.308273][T10124] RAX: ffffffffffffffda RBX: 00007fed7cdb6090 RCX: 00007fed7cb8ebe9
[  130.308283][T10124] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  130.308291][T10124] RBP: 00007fed7cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  130.308298][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.308303][T10124] R13: 00007fed7cdb6128 R14: 00007fed7cdb6090 R15: 00007fff30fb9328
[  130.308321][T10124]  </TASK>
[  130.538710][T10130] lo speed is unknown, defaulting to 1000
[  130.700013][T10137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.703314][T10137] syzkaller0: entered promiscuous mode
[  130.705546][T10137] syzkaller0: entered allmulticast mode
[  130.728789][T10137] tipc: Resetting bearer <eth:syzkaller0>
[  130.736504][T10135] tipc: Resetting bearer <eth:syzkaller0>
[  130.755240][T10135] tipc: Disabling bearer <eth:syzkaller0>
[  130.954345][T10152] openvswitch: netlink: Flow key attr not present in new flow.
[  130.966622][T10152] IPv6: Can't replace route, no match found
[  130.971027][T10151] bond0: option tlb_dynamic_lb: unable to set because the bond device is up
[  131.117363][T10156] syzkaller0: entered promiscuous mode
[  131.119772][T10156] syzkaller0: entered allmulticast mode
[  131.274772][T10173] lo speed is unknown, defaulting to 1000
[  131.357043][T10184] vlan0: entered promiscuous mode
[  131.360548][T10184] team0: Port device vlan0 added
[  131.481760][ T7723] IPVS: starting estimator thread 0...
[  131.592235][T10195] IPVS: using max 79 ests per chain, 189600 per kthread
[  131.939592][T10206] : (slave team0): Releasing backup interface
[  131.944175][T10206] team0: left promiscuous mode
[  131.959085][T10206] team0: Port device bond0 removed
[  131.966208][T10206] team0: Port device vlan0 removed
[  132.089364][T10216] __nla_validate_parse: 27 callbacks suppressed
[  132.089378][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.094768][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.098393][T10216] netlink: 'syz.2.1272': attribute type 15 has an invalid length.
[  132.102984][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.106206][T10216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1272'.
[  132.109393][T10216] netlink: 'syz.2.1272': attribute type 15 has an invalid length.
[  132.164999][T10218] batadv1: entered allmulticast mode
[  132.167686][T10218] 8021q: adding VLAN 0 to HW filter on device batadv1
[  132.208275][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'.
[  132.220231][T10220] vlan2: entered promiscuous mode
[  132.220301][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'.
[  132.222689][T10220] vlan2: entered allmulticast mode
[  132.227110][T10220] hsr_slave_1: entered allmulticast mode
[  132.377246][ T5871] IPVS: stop unused estimator thread 0...
[  132.407122][T10245] 8021q: adding VLAN 0 to HW filter on device team0
[  132.410269][T10245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.453925][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1283'.
[  132.483116][T10248] lo speed is unknown, defaulting to 1000
[  132.524830][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'.
[  132.528470][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'.
[  132.529674][T10257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.537299][T10257] syzkaller0: entered promiscuous mode
[  132.539301][T10257] syzkaller0: entered allmulticast mode
[  132.565299][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.568062][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.611438][T10257] tipc: Resetting bearer <eth:syzkaller0>
[  132.654803][T10256] tipc: Resetting bearer <eth:syzkaller0>
[  132.665413][T10256] tipc: Disabling bearer <eth:syzkaller0>
[  132.795325][T10263] validate_nla: 2 callbacks suppressed
[  132.795339][T10263] netlink: 'syz.2.1286': attribute type 13 has an invalid length.
[  132.799867][T10263] netlink: 'syz.2.1286': attribute type 17 has an invalid length.
[  132.805736][T10263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.825858][T10263] lo speed is unknown, defaulting to 1000
[  133.220088][T10271] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.287265][T10275] netlink: 'syz.2.1289': attribute type 16 has an invalid length.
[  133.289893][T10275] netlink: 'syz.2.1289': attribute type 17 has an invalid length.
[  133.356855][ T6480] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.361513][ T6480] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.372871][ T6480] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.378094][ T6480] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.387061][ T6480] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.396927][ T6480] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.400310][ T6480] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  133.416162][ T6480] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.448492][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  133.451762][T10286] netlink: 'syz.1.1294': attribute type 30 has an invalid length.
[  133.524427][T10294] IPv6: Can't replace route, no match found
[  133.543255][T10293] lo speed is unknown, defaulting to 1000
[  133.959031][T10299] netlink: 'syz.1.1297': attribute type 1 has an invalid length.
[  133.959848][T10300] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.962877][T10299] netlink: 'syz.1.1297': attribute type 3 has an invalid length.
[  133.965643][T10300] IPv6: NLM_F_CREATE should be set when creating new route
[  133.976940][T10299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.274161][T10337] netlink: 'syz.1.1309': attribute type 10 has an invalid length.
[  134.280591][T10336] syzkaller1: entered promiscuous mode
[  134.286684][T10336] syzkaller1: entered allmulticast mode
[  134.353974][T10340] netlink: 'syz.2.1313': attribute type 13 has an invalid length.
[  134.357292][T10340] netlink: 'syz.2.1313': attribute type 17 has an invalid length.
[  134.389490][T10340] 8021q: adding VLAN 0 to HW filter on device 
[  134.395552][T10340] 8021q: adding VLAN 0 to HW filter on device team0
[  134.401999][T10340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.446825][T10340] lo speed is unknown, defaulting to 1000
[  134.469887][T10346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.472854][T10346] syzkaller0: entered promiscuous mode
[  134.474856][T10346] syzkaller0: entered allmulticast mode
[  134.494967][T10346] ip6gre0: mtu less than device minimum
[  134.498830][T10345] tipc: Resetting bearer <eth:syzkaller0>
[  134.508936][T10345] tipc: Disabling bearer <eth:syzkaller0>
[  134.617610][T10349] lo speed is unknown, defaulting to 1000
[  134.647180][T10358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.673046][T10358] tipc: Resetting bearer <eth:syzkaller0>
[  134.677691][T10357] tipc: Disabling bearer <eth:syzkaller0>
[  135.194856][T10371] bridge2: entered allmulticast mode
[  135.783807][T10387] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  135.787696][T10382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.119545][T10421] lo speed is unknown, defaulting to 1000
[  136.289544][T10437] bridge0: port 1(syz_tun) entered blocking state
[  136.292020][T10437] bridge0: port 1(syz_tun) entered disabled state
[  136.295493][T10437] syz_tun: entered allmulticast mode
[  136.298275][T10437] syz_tun: entered promiscuous mode
[  136.302548][T10437] bridge0: port 1(syz_tun) entered blocking state
[  136.305207][T10437] bridge0: port 1(syz_tun) entered forwarding state
[  136.520478][T10451] pim6reg1: entered promiscuous mode
[  136.523180][T10451] pim6reg1: entered allmulticast mode
[  136.735782][T10464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.767889][T10466] vlan3: entered promiscuous mode
[  136.769774][T10466] bridge0: entered promiscuous mode
[  136.823722][ T5880] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.827892][ T5880] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.832442][ T6480] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.835855][ T6480] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.859482][T10475] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.864633][T10475] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.055171][T10484] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  137.060324][T10484] geneve7: left promiscuous mode
[  137.063857][T10484] vlan0: left promiscuous mode
[  137.065976][T10484] vlan1: left promiscuous mode
[  137.067768][T10484] bond0: left promiscuous mode
[  137.069602][T10484] vlan1: left allmulticast mode
[  137.071387][T10484] bond0: left allmulticast mode
[  137.073925][T10484] batadv1: left allmulticast mode
[  137.075840][T10484] vlan2: left promiscuous mode
[  137.077651][T10484] vlan2: left allmulticast mode
[  137.079277][T10484] hsr_slave_1: left allmulticast mode
[  137.120337][T10490] __nla_validate_parse: 22 callbacks suppressed
[  137.120349][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'.
[  137.127932][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'.
[  137.131034][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'.
[  137.137682][T10492] tipc: Resetting bearer <eth:gre0>
[  137.171790][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1362'.
[  137.203238][T10492] macsec2: left promiscuous mode
[  137.206862][T10492] macsec2: left allmulticast mode
[  137.218120][T10492] geneve3: left promiscuous mode
[  137.219936][T10492] geneve3: left allmulticast mode
[  137.244209][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1365'.
[  137.248910][ T7723] lo speed is unknown, defaulting to 1000
[  137.251321][ T7723] sz1: Port: 1 Link DOWN
[  137.251342][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.260008][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  137.270113][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.276076][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  137.282896][   T10] lo speed is unknown, defaulting to 1000
[  137.283098][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.288821][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  137.294777][T10503] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1366'.
[  137.297682][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1366'.
[  137.300777][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.304355][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  137.364298][T10514] pim6reg1: entered promiscuous mode
[  137.366801][T10514] pim6reg1: entered allmulticast mode
[  137.399187][T10516] IPv6: sit4: Disabled Multicast RS
[  137.407935][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1370'.
[  137.464443][T10514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1368'.
[  137.468503][T10514] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  137.471208][T10514] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  137.499169][T10514] bond20 (unregistering): Released all slaves
[  137.593468][T10539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'.
[  137.722004][T10546] bridge0: port 1(syz_tun) entered disabled state
[  137.815869][T10546] macvlan1: left promiscuous mode
[  137.871507][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.877848][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  137.881163][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  137.885114][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.888463][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  137.891683][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  137.895552][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.898903][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  137.904049][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  137.907615][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.911087][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  137.914891][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  137.999055][T10562] validate_nla: 1 callbacks suppressed
[  137.999070][T10562] netlink: 'syz.1.1380': attribute type 13 has an invalid length.
[  138.006428][T10562] netlink: 'syz.1.1380': attribute type 17 has an invalid length.
[  138.027577][T10562] erspan0: left promiscuous mode
[  138.064244][T10562] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.070631][T10562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.076974][ T5313] lo speed is unknown, defaulting to 1000
[  138.079055][ T5313] sz1: Port: 1 Link ACTIVE
[  138.080867][ T5313] lo speed is unknown, defaulting to 1000
[  138.096783][T10564] lo speed is unknown, defaulting to 1000
[  138.132753][T10573] netlink: 'syz.0.1384': attribute type 28 has an invalid length.
[  138.270015][T10577] netlink: 'syz.0.1385': attribute type 4 has an invalid length.
[  138.275974][T10579] lo speed is unknown, defaulting to 1000
[  138.680477][T10586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.685094][T10586] syzkaller0: entered promiscuous mode
[  138.686895][T10586] syzkaller0: entered allmulticast mode
[  138.707146][T10586] tipc: Resetting bearer <eth:syzkaller0>
[  138.712273][T10586] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.727031][T10587] tipc: Resetting bearer <eth:syzkaller0>
[  138.736119][T10587] tipc: Disabling bearer <eth:syzkaller0>
[  138.900240][T10600] netlink: 'syz.1.1392': attribute type 23 has an invalid length.
[  139.310069][T10631] sch_fq: defrate 257 ignored.
[  139.398710][T10638] tipc: Resetting bearer <eth:gre0>
[  139.436330][   T10] lo speed is unknown, defaulting to 1000
[  139.438385][   T10] sz1: Port: 1 Link DOWN
[  139.439838][   T10] lo speed is unknown, defaulting to 1000
[  140.138376][T10641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.142020][T10641] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  140.152663][T10641] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  140.217126][T10646] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.354556][T10656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.403585][ T5237] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  140.412253][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.464379][T10664] geneve7: entered promiscuous mode
[  140.466985][T10664] geneve7: entered allmulticast mode
[  140.469605][ T5880] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.476732][ T5880] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.484652][ T5880] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.493724][ T5880] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.573326][T10676] sctp: [Deprecated]: syz.2.1410 (pid 10676) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.573326][T10676] Use struct sctp_sack_info instead
[  140.585193][T10676] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  140.589176][T10676] CPU: 0 UID: 0 PID: 10676 Comm: syz.2.1410 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.589191][T10676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.589197][T10676] Call Trace:
[  140.589202][T10676]  <TASK>
[  140.589207][T10676]  dump_stack_lvl+0x189/0x250
[  140.589222][T10676]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.589234][T10676]  ? __pfx__printk+0x10/0x10
[  140.589247][T10676]  ? kernfs_path_from_node+0x2f/0x290
[  140.589257][T10676]  ? kernfs_path_from_node+0x250/0x290
[  140.589265][T10676]  ? kernfs_path_from_node+0x2f/0x290
[  140.589276][T10676]  sysfs_warn_dup+0x8e/0xa0
[  140.589285][T10676]  sysfs_do_create_link_sd+0xc0/0x110
[  140.589294][T10676]  device_add_class_symlinks+0x1cf/0x240
[  140.589305][T10676]  device_add+0x475/0xb50
[  140.589313][T10676]  wiphy_register+0x1ba6/0x28d0
[  140.589333][T10676]  ? __pfx_wiphy_register+0x10/0x10
[  140.589344][T10676]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  140.589357][T10676]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  140.589371][T10676]  ieee80211_register_hw+0x3425/0x4080
[  140.589386][T10676]  ? ieee80211_register_hw+0x1411/0x4080
[  140.589399][T10676]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  140.589410][T10676]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.589425][T10676]  ? __hrtimer_setup+0x187/0x210
[  140.589432][T10676]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  140.589443][T10676]  mac80211_hwsim_new_radio+0x2f0e/0x5380
[  140.589464][T10676]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  140.589471][T10676]  ? trace_kmalloc+0x1f/0xd0
[  140.589478][T10676]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  140.589487][T10676]  ? kstrndup+0xbf/0x160
[  140.589498][T10676]  hwsim_new_radio_nl+0xea4/0x1b10
[  140.589508][T10676]  ? __pfx___nla_validate_parse+0x10/0x10
[  140.589524][T10676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  140.589537][T10676]  ? __nla_parse+0x40/0x60
[  140.589548][T10676]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  140.589560][T10676]  genl_family_rcv_msg_doit+0x215/0x300
[  140.589571][T10676]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  140.589583][T10676]  ? bpf_lsm_capable+0x9/0x20
[  140.589592][T10676]  ? security_capable+0x7e/0x2e0
[  140.589615][T10676]  genl_rcv_msg+0x60e/0x790
[  140.589627][T10676]  ? __pfx_genl_rcv_msg+0x10/0x10
[  140.589636][T10676]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  140.589651][T10676]  netlink_rcv_skb+0x208/0x470
[  140.589662][T10676]  ? __lock_acquire+0xab9/0xd20
[  140.589708][T10676]  ? __pfx_genl_rcv_msg+0x10/0x10
[  140.589717][T10676]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  140.589740][T10676]  ? down_read+0x1ad/0x2e0
[  140.589749][T10676]  genl_rcv+0x28/0x40
[  140.589756][T10676]  netlink_unicast+0x82f/0x9e0
[  140.589771][T10676]  ? __pfx_netlink_unicast+0x10/0x10
[  140.589782][T10676]  ? netlink_sendmsg+0x642/0xb30
[  140.589790][T10676]  ? skb_put+0x11b/0x210
[  140.589799][T10676]  netlink_sendmsg+0x805/0xb30
[  140.589812][T10676]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.589822][T10676]  ? aa_sock_msg_perm+0xf1/0x1d0
[  140.589833][T10676]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  140.589840][T10676]  ? __pfx_netlink_sendmsg+0x10/0x10
[  140.589849][T10676]  __sock_sendmsg+0x21c/0x270
[  140.589859][T10676]  ____sys_sendmsg+0x505/0x830
[  140.589869][T10676]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.589880][T10676]  ? import_iovec+0x74/0xa0
[  140.589890][T10676]  ___sys_sendmsg+0x21f/0x2a0
[  140.589898][T10676]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.589920][T10676]  ? __fget_files+0x2a/0x420
[  140.589927][T10676]  ? __fget_files+0x3a0/0x420
[  140.589937][T10676]  __x64_sys_sendmsg+0x19b/0x260
[  140.589945][T10676]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  140.589956][T10676]  ? rcu_is_watching+0x15/0xb0
[  140.589966][T10676]  ? do_syscall_64+0xbe/0x3b0
[  140.589978][T10676]  do_syscall_64+0xfa/0x3b0
[  140.589986][T10676]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.589995][T10676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.590002][T10676]  ? exc_page_fault+0x9f/0xf0
[  140.590011][T10676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.590018][T10676] RIP: 0033:0x7f7200d8ebe9
[  140.590028][T10676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.590033][T10676] RSP: 002b:00007f71fefd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  140.590042][T10676] RAX: ffffffffffffffda RBX: 00007f7200fb6090 RCX: 00007f7200d8ebe9
[  140.590047][T10676] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008
[  140.590051][T10676] RBP: 00007f7200e11e19 R08: 0000000000000000 R09: 0000000000000000
[  140.590056][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.590060][T10676] R13: 00007f7200fb6128 R14: 00007f7200fb6090 R15: 00007fff5af44938
[  140.590073][T10676]  </TASK>
[  140.785390][T10680] pim6reg1: entered promiscuous mode
[  140.787194][T10680] pim6reg1: entered allmulticast mode
[  140.834209][T10687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.837113][T10687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.840533][T10687] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.965202][T10710] netlink: 'syz.2.1420': attribute type 2 has an invalid length.
[  140.967957][T10710] netlink: 'syz.2.1420': attribute type 8 has an invalid length.
[  141.031817][T10680] bond11 (unregistering): Released all slaves
[  141.047738][T10719] netlink: 'syz.2.1421': attribute type 1 has an invalid length.
[  141.065565][T10712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  141.069509][T10712] gretap1: entered promiscuous mode
[  141.136271][T10726] netlink: 'syz.2.1423': attribute type 3 has an invalid length.
[  141.143296][T10724] syz_tun: entered allmulticast mode
[  141.149282][T10724] siw: device registration error -23
[  141.153139][T10726] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  141.160859][T10726] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  141.213338][T10726] 8021q: adding VLAN 0 to HW filter on device 
[  141.216434][T10726] 8021q: adding VLAN 0 to HW filter on device team0
[  141.221006][T10726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.229237][T10730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.238816][T10723] syz_tun: left allmulticast mode
[  141.341010][T10742] vlan4: entered promiscuous mode
[  141.343983][T10742] bond0: entered promiscuous mode
[  141.382650][T10742] netlink: 'syz.0.1430': attribute type 11 has an invalid length.
[  141.461472][T10746] netlink: 'syz.0.1431': attribute type 11 has an invalid length.
[  141.548690][T10752] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  141.556594][T10751] IPVS: stopping backup sync thread 10752 ...
[  142.176444][T10764] pim6reg1: entered promiscuous mode
[  142.178447][T10764] pim6reg1: entered allmulticast mode
[  142.263371][T10781] __nla_validate_parse: 14 callbacks suppressed
[  142.263385][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'.
[  142.282477][T10785] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1441'.
[  142.291046][T10785] 0{X: renamed from gretap0
[  142.297839][T10785] 0{X: entered allmulticast mode
[  142.300133][T10779] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1434'.
[  142.305584][T10785] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  142.346178][T10764] bond13 (unregistering): Released all slaves
[  142.366195][T10792] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  142.375624][T10792] IPv6: sit4: Disabled Multicast RS
[  142.465776][T10804] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  142.500118][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'.
[  142.554189][T10808] lo speed is unknown, defaulting to 1000
[  142.556546][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1448'.
[  142.559762][T10801] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[  142.597200][T10801] 8021q: adding VLAN 0 to HW filter on device bond20
[  142.606755][T10813] 0{X: left allmulticast mode
[  142.624939][T10813] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.627378][T10813] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  142.637668][   T10] lo speed is unknown, defaulting to 1000
[  142.640179][   T10] sz1: Port: 1 Link ACTIVE
[  142.646956][   T10] lo speed is unknown, defaulting to 1000
[  142.820928][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'.
[  142.871064][T10839] vlan3: entered promiscuous mode
[  143.046236][T10850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.052565][T10849] tipc: Disabling bearer <eth:syzkaller0>
[  143.150312][T10856] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1465'.
[  143.161079][T10860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1466'.
[  143.240147][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'.
[  143.244435][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1469'.
[  143.255176][T10870] ip6tnl1: entered promiscuous mode
[  143.256889][T10870] ip6tnl1: entered allmulticast mode
[  143.259058][T10865] lo speed is unknown, defaulting to 1000
[  143.267718][T10864] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1550) !
[  143.290427][T10872] netlink: 'syz.2.1468': attribute type 1 has an invalid length.
[  143.321329][T10872] 8021q: adding VLAN 0 to HW filter on device bond13
[  143.388429][T10877] netlink: 'syz.1.1471': attribute type 13 has an invalid length.
[  143.400476][T10877] netlink: 'syz.1.1471': attribute type 17 has an invalid length.
[  143.425768][T10877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.507680][T10893] IPVS: set_ctl: invalid protocol: 2 172.20.20.40:20000
[  143.517917][T10897] IPVS: set_ctl: invalid protocol: 2 172.20.20.40:20000
[  143.540311][T10902] syzkaller0: entered promiscuous mode
[  143.552625][T10902] syzkaller0: entered allmulticast mode
[  143.766676][T10924] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  143.770671][   T10] lo speed is unknown, defaulting to 1000
[  143.775764][   T10] syz1: Port: 1 Link DOWN
[  143.777363][   T10] lo speed is unknown, defaulting to 1000
[  143.780031][T10924] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  143.785235][   T10] lo speed is unknown, defaulting to 1000
[  143.788171][   T10] syz1: Port: 1 Link ACTIVE
[  143.789947][   T10] lo speed is unknown, defaulting to 1000
[  143.793592][T10924] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  143.796556][T10927] netlink: 'syz.1.1479': attribute type 4 has an invalid length.
[  143.811863][   T47] lo speed is unknown, defaulting to 1000
[  143.815283][   T47] syz1: Port: 1 Link DOWN
[  143.819144][   T47] lo speed is unknown, defaulting to 1000
[  143.900438][T10934] lo speed is unknown, defaulting to 1000
[  143.950156][T10943] netlink: 'syz.2.1481': attribute type 1 has an invalid length.
[  144.004313][T10943] 8021q: adding VLAN 0 to HW filter on device bond14
[  144.007986][T10947] netlink: 'syz.1.1484': attribute type 12 has an invalid length.
[  144.175140][T10982] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  144.908475][T11026] netlink: 'syz.2.1497': attribute type 1 has an invalid length.
[  145.021768][T11037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.025439][T11037] syzkaller0: entered promiscuous mode
[  145.027185][T11037] syzkaller0: entered allmulticast mode
[  145.046382][T11037] tipc: Resetting bearer <eth:syzkaller0>
[  145.049932][T11036] tipc: Resetting bearer <eth:syzkaller0>
[  145.056672][T11036] tipc: Disabling bearer <eth:syzkaller0>
[  145.129522][T11046] vlan0: entered promiscuous mode
[  145.296986][T11061] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  145.381236][T11069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.853462][T11091] dvmrp8: entered allmulticast mode
[  145.869136][T11089] dvmrp8: left allmulticast mode
[  146.147138][T11101] nbd: must specify at least one socket
[  146.181737][T11107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.191363][T11106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.204456][T11107] syzkaller0: entered promiscuous mode
[  146.206673][T11107] syzkaller0: entered allmulticast mode
[  146.215545][T11107] tipc: Resetting bearer <eth:syzkaller0>
[  146.218875][T11105] tipc: Resetting bearer <eth:syzkaller0>
[  146.229524][T11105] tipc: Disabling bearer <eth:syzkaller0>
[  146.288234][T11111] ==================================================================
[  146.291660][T11111] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  146.294988][T11111] Read of size 1 at addr ffff8880302bc7b0 by task syz.0.1523/11111
[  146.299173][T11111] 
[  146.300232][T11111] CPU: 1 UID: 0 PID: 11111 Comm: syz.0.1523 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  146.300250][T11111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.300258][T11111] Call Trace:
[  146.300265][T11111]  <TASK>
[  146.300271][T11111]  dump_stack_lvl+0x189/0x250
[  146.300292][T11111]  ? __kasan_check_byte+0x12/0x40
[  146.300310][T11111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.300330][T11111]  ? lock_release+0x4b/0x3e0
[  146.300350][T11111]  ? __virt_addr_valid+0x4a5/0x5c0
[  146.300365][T11111]  print_report+0xca/0x240
[  146.300378][T11111]  ? xfrm_state_find+0x2cf2/0x5400
[  146.300389][T11111]  kasan_report+0x118/0x150
[  146.300404][T11111]  ? xfrm_state_find+0x2cf2/0x5400
[  146.300416][T11111]  xfrm_state_find+0x2cf2/0x5400
[  146.300425][T11111]  ? __lock_acquire+0xab9/0xd20
[  146.300447][T11111]  ? xfrm_state_find+0x1da/0x5400
[  146.300458][T11111]  ? __pfx_xfrm_state_find+0x10/0x10
[  146.300474][T11111]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  146.300495][T11111]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  146.300507][T11111]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  146.300518][T11111]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  146.300533][T11111]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  146.300563][T11111]  ? xfrm_expand_policies+0x41f/0x6a0
[  146.300575][T11111]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  146.300616][T11111]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  146.300634][T11111]  ? __lock_acquire+0xab9/0xd20
[  146.300652][T11111]  xfrm_lookup_route+0x3c/0x1c0
[  146.300664][T11111]  __ip4_datagram_connect+0x9a5/0x1270
[  146.300681][T11111]  udp_connect+0x33/0x1f0
[  146.300698][T11111]  __sys_connect+0x316/0x440
[  146.300716][T11111]  ? __pfx___sys_connect+0x10/0x10
[  146.300736][T11111]  ? rcu_is_watching+0x15/0xb0
[  146.300750][T11111]  __x64_sys_connect+0x7a/0x90
[  146.300767][T11111]  do_syscall_64+0xfa/0x3b0
[  146.300784][T11111]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.300801][T11111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.300813][T11111]  ? exc_page_fault+0x9f/0xf0
[  146.300829][T11111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.300840][T11111] RIP: 0033:0x7f5ffaf8ebe9
[  146.300851][T11111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.300861][T11111] RSP: 002b:00007f5ffbdac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  146.300875][T11111] RAX: ffffffffffffffda RBX: 00007f5ffb1b5fa0 RCX: 00007f5ffaf8ebe9
[  146.300884][T11111] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  146.300891][T11111] RBP: 00007f5ffb011e19 R08: 0000000000000000 R09: 0000000000000000
[  146.300899][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.300906][T11111] R13: 00007f5ffb1b6038 R14: 00007f5ffb1b5fa0 R15: 00007ffdecd210c8
[  146.300919][T11111]  </TASK>
[  146.300924][T11111] 
[  146.414866][T11111] Allocated by task 8790:
[  146.416240][T11111]  kasan_save_track+0x3e/0x80
[  146.417752][T11111]  __kasan_slab_alloc+0x6c/0x80
[  146.419348][T11111]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  146.421123][T11111]  xfrm_state_alloc+0x24/0x2f0
[  146.422694][T11111]  __find_acq_core+0x8a7/0x1c00
[  146.424297][T11111]  xfrm_find_acq+0x78/0xa0
[  146.425793][T11111]  xfrm_alloc_userspi+0x6b3/0xc90
[  146.427480][T11111]  xfrm_user_rcv_msg+0x7a3/0xab0
[  146.429136][T11111]  netlink_rcv_skb+0x208/0x470
[  146.430735][T11111]  xfrm_netlink_rcv+0x79/0x90
[  146.432294][T11111]  netlink_unicast+0x82f/0x9e0
[  146.433903][T11111]  netlink_sendmsg+0x805/0xb30
[  146.435477][T11111]  __sock_sendmsg+0x21c/0x270
[  146.436993][T11111]  ____sys_sendmsg+0x505/0x830
[  146.438557][T11111]  ___sys_sendmsg+0x21f/0x2a0
[  146.440131][T11111]  __x64_sys_sendmsg+0x19b/0x260
[  146.441862][T11111]  do_syscall_64+0xfa/0x3b0
[  146.443567][T11111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.445730][T11111] 
[  146.446696][T11111] Freed by task 10:
[  146.448039][T11111]  kasan_save_track+0x3e/0x80
[  146.449564][T11111]  kasan_save_free_info+0x46/0x50
[  146.451455][T11111]  __kasan_slab_free+0x5b/0x80
[  146.453320][T11111]  kmem_cache_free+0x18f/0x400
[  146.455043][T11111]  xfrm_state_gc_task+0x52d/0x6b0
[  146.457035][T11111]  process_scheduled_works+0xae1/0x17b0
[  146.458862][T11111]  worker_thread+0x8a0/0xda0
[  146.460406][T11111]  kthread+0x711/0x8a0
[  146.461942][T11111]  ret_from_fork+0x3fc/0x770
[  146.463414][T11111]  ret_from_fork_asm+0x1a/0x30
[  146.464939][T11111] 
[  146.465705][T11111] The buggy address belongs to the object at ffff8880302bc480
[  146.465705][T11111]  which belongs to the cache xfrm_state of size 928
[  146.470663][T11111] The buggy address is located 816 bytes inside of
[  146.470663][T11111]  freed 928-byte region [ffff8880302bc480, ffff8880302bc820)
[  146.475730][T11111] 
[  146.476526][T11111] The buggy address belongs to the physical page:
[  146.479007][T11111] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880302bc000 pfn:0x302bc
[  146.482679][T11111] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  146.485844][T11111] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  146.488614][T11111] page_type: f5(slab)
[  146.490061][T11111] raw: 00fff00000000040 ffff888104e2a640 dead000000000122 0000000000000000
[  146.492860][T11111] raw: ffff8880302bc000 00000000800e000d 00000000f5000000 0000000000000000
[  146.495637][T11111] head: 00fff00000000040 ffff888104e2a640 dead000000000122 0000000000000000
[  146.498817][T11111] head: ffff8880302bc000 00000000800e000d 00000000f5000000 0000000000000000
[  146.501995][T11111] head: 00fff00000000002 ffffea0000c0af01 00000000ffffffff 00000000ffffffff
[  146.504877][T11111] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  146.507964][T11111] page dumped because: kasan: bad access detected
[  146.510098][T11111] page_owner tracks the page as allocated
[  146.512157][T11111] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7016, tgid 7015 (syz.1.273), ts 77757706049, free_ts 77167373332
[  146.518454][T11111]  post_alloc_hook+0x240/0x2a0
[  146.519994][T11111]  get_page_from_freelist+0x21e4/0x22c0
[  146.521759][T11111]  __alloc_frozen_pages_noprof+0x181/0x370
[  146.523670][T11111]  alloc_pages_mpol+0x232/0x4a0
[  146.525676][T11111]  allocate_slab+0x8a/0x370
[  146.527198][T11111]  ___slab_alloc+0xbeb/0x1410
[  146.528759][T11111]  kmem_cache_alloc_noprof+0x283/0x3c0
[  146.530531][T11111]  xfrm_state_alloc+0x24/0x2f0
[  146.532095][T11111]  xfrm_state_find+0x37d4/0x5400
[  146.533749][T11111]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  146.535704][T11111]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  146.537400][T11111]  xfrm_lookup_route+0x3c/0x1c0
[  146.539006][T11111]  ip6_sk_dst_lookup_flow+0x790/0x980
[  146.540734][T11111]  udpv6_sendmsg+0x183b/0x24b0
[  146.542290][T11111]  __sock_sendmsg+0xe5/0x270
[  146.543821][T11111]  ____sys_sendmsg+0x52d/0x830
[  146.545387][T11111] page last free pid 6962 tgid 6960 stack trace:
[  146.547463][T11111]  __free_frozen_pages+0xbc4/0xd30
[  146.549292][T11111]  __slab_free+0x303/0x3c0
[  146.551027][T11111]  qlist_free_all+0x97/0x140
[  146.552582][T11111]  kasan_quarantine_reduce+0x148/0x160
[  146.554504][T11111]  __kasan_slab_alloc+0x22/0x80
[  146.556321][T11111]  __kmalloc_cache_node_noprof+0x1c0/0x3d0
[  146.558140][T11111]  __get_vm_area_node+0x13f/0x300
[  146.559998][T11111]  __vmalloc_node_range_noprof+0x301/0x12f0
[  146.562470][T11111]  vzalloc_noprof+0xb2/0xf0
[  146.564391][T11111]  bpf_patch_insn_data+0x85/0x970
[  146.566488][T11111]  bpf_check+0x16ed1/0x1d2d0
[  146.568429][T11111]  bpf_prog_load+0x1318/0x1930
[  146.570369][T11111]  __sys_bpf+0x528/0x870
[  146.572144][T11111]  __x64_sys_bpf+0x7c/0x90
[  146.574014][T11111]  do_syscall_64+0xfa/0x3b0
[  146.575887][T11111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.578254][T11111] 
[  146.579290][T11111] Memory state around the buggy address:
[  146.581618][T11111]  ffff8880302bc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.584979][T11111]  ffff8880302bc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.588364][T11111] >ffff8880302bc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  146.591664][T11111]                                      ^
[  146.593955][T11111]  ffff8880302bc800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  146.597237][T11111]  ffff8880302bc880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  146.600516][T11111] ==================================================================
[  146.617960][T11111] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  146.621093][T11111] CPU: 1 UID: 0 PID: 11111 Comm: syz.0.1523 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  146.626296][T11111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.630490][T11111] Call Trace:
[  146.631879][T11111]  <TASK>
[  146.633122][T11111]  dump_stack_lvl+0x99/0x250
[  146.635123][T11111]  ? __asan_memcpy+0x40/0x70
[  146.637118][T11111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.639335][T11111]  ? __pfx__printk+0x10/0x10
[  146.641236][T11111]  vpanic+0x281/0x750
[  146.642930][T11111]  ? preempt_schedule+0xae/0xc0
[  146.644976][T11111]  ? __pfx_vpanic+0x10/0x10
[  146.646919][T11111]  ? preempt_schedule_common+0x83/0xd0
[  146.649122][T11111]  ? preempt_schedule+0xae/0xc0
[  146.651144][T11111]  ? __pfx_preempt_schedule+0x10/0x10
[  146.653418][T11111]  panic+0xb9/0xc0
[  146.654986][T11111]  ? __pfx_panic+0x10/0x10
[  146.656780][T11111]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  146.659166][T11111]  ? xfrm_state_find+0x2cf2/0x5400
[  146.661317][T11111]  check_panic_on_warn+0x89/0xb0
[  146.663385][T11111]  ? xfrm_state_find+0x2cf2/0x5400
[  146.665531][T11111]  end_report+0x78/0x160
[  146.667320][T11111]  kasan_report+0x129/0x150
[  146.669185][T11111]  ? xfrm_state_find+0x2cf2/0x5400
[  146.671090][T11111]  xfrm_state_find+0x2cf2/0x5400
[  146.672973][T11111]  ? __lock_acquire+0xab9/0xd20
[  146.674732][T11111]  ? xfrm_state_find+0x1da/0x5400
[  146.676352][T11111]  ? __pfx_xfrm_state_find+0x10/0x10
[  146.678051][T11111]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  146.680559][T11111]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  146.683041][T11111]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  146.685760][T11111]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  146.688183][T11111]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  146.690675][T11111]  ? xfrm_expand_policies+0x41f/0x6a0
[  146.692897][T11111]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  146.695071][T11111]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  146.697433][T11111]  ? __lock_acquire+0xab9/0xd20
[  146.699413][T11111]  xfrm_lookup_route+0x3c/0x1c0
[  146.701424][T11111]  __ip4_datagram_connect+0x9a5/0x1270
[  146.703672][T11111]  udp_connect+0x33/0x1f0
[  146.705449][T11111]  __sys_connect+0x316/0x440
[  146.707410][T11111]  ? __pfx___sys_connect+0x10/0x10
[  146.709493][T11111]  ? rcu_is_watching+0x15/0xb0
[  146.711435][T11111]  __x64_sys_connect+0x7a/0x90
[  146.713391][T11111]  do_syscall_64+0xfa/0x3b0
[  146.715095][T11111]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.717003][T11111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.719253][T11111]  ? exc_page_fault+0x9f/0xf0
[  146.721177][T11111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.723521][T11111] RIP: 0033:0x7f5ffaf8ebe9
[  146.725258][T11111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.733079][T11111] RSP: 002b:00007f5ffbdac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  146.736636][T11111] RAX: ffffffffffffffda RBX: 00007f5ffb1b5fa0 RCX: 00007f5ffaf8ebe9
[  146.739952][T11111] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  146.743259][T11111] RBP: 00007f5ffb011e19 R08: 0000000000000000 R09: 0000000000000000
[  146.746477][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.749788][T11111] R13: 00007f5ffb1b6038 R14: 00007f5ffb1b5fa0 R15: 00007ffdecd210c8
[  146.752991][T11111]  </TASK>
[  146.755028][T11111] Kernel Offset: disabled
[  146.756800][T11111] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:10:49  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820fec44 RBX=0000200000483000 RCX=ffff88812bf10000 RDX=0000000000000000
RSI=000000000002c60f RDI=000000000002c610 RBP=0000000000000001 RSP=ffffc90006b97280
R8 =0000000000000000 R9 =ffffffff820feb79 R10=ffffc90006b9744c R11=fffff52000d72e92
R12=00000000301ca067 R13=dffffc0000000000 R14=ffff88803277b010 R15=ffffc90006b972f8
RIP=ffffffff81bfabc1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fed7d9b76c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000483000 CR3=000000010b53c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fed7cc12e53
XMM06=0000000000000000 00007fed7cc12e4d XMM07=0000000000000000 00007fed7cc12e61
XMM08=0000000000000000 00007fed7cc12ee7 XMM09=0000000000000000 00007fed7cc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001271 RDI=0000000000001272 RBP=00000000000003f8 RSP=ffffc90003e9ee10
R8 =ffff888020938237 R9 =1ffff11004127046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9908 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5ffbdac6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000037c0 CR3=000000003a476000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5ffb187498 00007f5ffb187470 XMM03=00007f5ffb1874a8 00007f5ffb1874a0
XMM04=00007f5ffbced100 00007f5ffb187460 XMM05=00007f5ffb187478 00007f5ffb1874c0
XMM06=00007f5ffb1874b8 00007f5ffb1874b0 XMM07=00007f5ffb1874a8 00007f5ffb1874a0
XMM08=0000000000000000 00007f5ffb012ee7 XMM09=0000000000000000 00007f5ffb012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
