last executing test programs:

2m0.041509914s ago: executing program 2 (id=1563):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x5, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async)
connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0xf0}}], 0x1, 0x24004c41) (async)
sendmmsg$inet(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000100)=ANY=[], 0xf0}}], 0x1, 0x24004c41)
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)}, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) (async)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfe}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000e4}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="03a0c2000000bbbbbbbbbbbb0800450000013b1aa577cb7d02aeba38998c61380000000000019078ac1e0701ac1414aa030490781200183f2500000000680000000100007f0000017f1c03"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000bec5a0000000f000000000000000000000008000100010000"], 0x20}}, 0x4000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000bec5a0000000f000000000000000000000008000100010000"], 0x20}}, 0x4000000)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1m59.980719597s ago: executing program 2 (id=1566):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@func={0x6, 0x0, 0x0, 0xc, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44}, 0x20) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
close(0x3) (async)

1m59.899262056s ago: executing program 2 (id=1568):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000000640)={@link_local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$rxrpc(0x21, 0x2, 0xa)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="dad0dd2d6709a2d9f349f2a8ce25a15143178bc10cf0299b673a05d16156a61abd03b046af4b646bd81376e0587afe4989a8834221fe6f2bf982fc28126e9e18c8ee9f0e97d6d3141b6971a4ff5c6aaea809f1f08019fad897c5ba993c5c2822eb9f36a942d4c89d612f57f532ed6d1ad14e1509e06c40511c1b1e1833bbf6328ded26659fc54dbbf2dbc4d888116a19a46339", 0x93}, {&(0x7f0000000c80)="f5f7db3df54ac72e8be39796ebf79cb67cefd15bb83a1fe2d54d70796fb0e176fd2a96bd20329f85bc15986d2a65e889f1cd0bea55bef722f2df34a57527a7d85a19beddd9843489b8b90f3102f1fe36926a4dec48fc6adb90f6f63a5af4617343aee4cc4e064458c24f05d6880631d0de4393a40d9f51bfcb5864b53538c72fb98fc033f08ae149ac979f17bc2c2523c548095048645446967f21cc743cc6a873db01017c8354365551b5fd376f9f941bbb6d", 0xb3}], 0x2, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x3c0}}], 0x2, 0x4040005)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000c0007800800124000000008050005000a0000000900020073797a310000000010000300686173683a69702c6d6179fe"], 0x44}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d80)=ANY=[], 0x54}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff95}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x44}}, 0x8811)
listen(r2, 0x1ad72f7)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
accept4$netrom(r2, 0x0, 0x0, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48)

1m58.97846034s ago: executing program 2 (id=1581):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000008000000000500000a44000000090a00000a0000040900010073797a9afb33af0008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001000000002200000000000100"/216], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m58.851709358s ago: executing program 2 (id=1582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001240)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08000500fe0601de08000e"], 0x84}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_crypto(r6, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=@del={0x130, 0x11, 0x200, 0x70bd28, 0x25dfdbfe, {{'aegis256-generic\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x3ff}, {0x8, 0x1, 0xb}, {0x8, 0x1, 0xffffff16}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0xf}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0xffff7fff}]}, 0x130}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007000390230bd7000fbdbdf2507000000", @ANYRES32=r5, @ANYBLOB="0c00018008"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

1m58.751826661s ago: executing program 2 (id=1583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$can_j1939(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000500000000000000000b2303000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0002"], 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@remote, 0xfffffffe}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000000)={0x0, 0x2, 0x1000, &(0x7f0000000940)=""/4096})
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

1m43.760457137s ago: executing program 32 (id=1583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'gre0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$can_j1939(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000500000000000000000b2303000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0002"], 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@remote, 0xfffffffe}]}]}}}}}}}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000000)={0x0, 0x2, 0x1000, &(0x7f0000000940)=""/4096})
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

607.000108ms ago: executing program 1 (id=3422):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804)

550.8192ms ago: executing program 1 (id=3423):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, 0x0, 0x0)
getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000280))
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x8a42e25e4f0b1049)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x275a, 0x0)
read$alg(r7, &(0x7f0000000100)=""/12, 0xc)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f0000000300)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/12, @ANYRESHEX=r4, @ANYBLOB="69847c25359b1f", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r7], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x20008005)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010028bd6000010000000f000000080034000400000008007779279f4e2587273e", @ANYRES32=r5, @ANYRES8=r6], 0x2c}}, 0x80)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13, {0x1, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x891)
socket$netlink(0x10, 0x3, 0x10)
r14 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r14, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
readv(r15, &(0x7f0000002540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9)

547.347334ms ago: executing program 3 (id=3424):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
pipe(&(0x7f0000000480))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f00000198c0)=@ethtool_gfeatures={0x24}}) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f00000198c0)=@ethtool_gfeatures={0x24}})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) (async)
write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) (async)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r11, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r10, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r13, 0x12e9d000)
ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async)
ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
sendmsg$TIPC_CMD_SET_LINK_TOL(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000007410000004c0018000008d062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x20048040}, 0x0)

491.286382ms ago: executing program 3 (id=3425):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="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") (async)
sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1c58d578c2a5cbdb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4800)

490.948873ms ago: executing program 3 (id=3426):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x4, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e237f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}})
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0)
shutdown(r0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0)

430.728862ms ago: executing program 1 (id=3427):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
socket$inet(0xa, 0x801, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [<r4=>0x0, <r5=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r5, 0x9, 0xb5}, 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0xfef3, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xd9, 0xfe, 0x7, 0xfe, 0x8, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4810)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r12)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES16=r14, @ANYBLOB="010000000000000000003900000008000300cbe57c5eea6e2cf7eea6fde8d990", @ANYRES32=r15, @ANYRES16=r2], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840)
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r8, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x44}}, 0x40048a4)
r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r17=>0x0})
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x30, r18, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0xc0)

428.452201ms ago: executing program 0 (id=3428):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @remote}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="58010000100001000000000000000000ac1414aa0000000000000000000000002001000000000000000000000000000200000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1a, 0x80000001, 0xd, 0x4, 0x2000000, 0x1, 0x7}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', <r10=>0x0})
r11 = socket(0x2, 0x80802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', 0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000213", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
preadv(r14, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0x1, 0xffea}}, [@filter_kind_options=@f_flow={{0x1}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x0, 0x4, 0x60}]}}]}, 0x3c}}, 0x10)

297.22383ms ago: executing program 0 (id=3429):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x20000000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getpeername$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010002014feffdfff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e000100000008000700ac14142208000a00", @ANYRES32=r3, @ANYBLOB], 0x4c}}, 0x4000)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x88, r11, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbf}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4044}, 0x2000)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd90}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x10001, 0x2, 0x2, 0x20481, r9, 0x5, '\x00', r12, r13, 0x3, 0x3, 0x5, 0xc}, 0x50)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40)

296.548744ms ago: executing program 3 (id=3430):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r6 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0x26, &(0x7f00000002c0)=0x20000001, 0x4)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r8, &(0x7f0000000040)="0d000000010001", 0x7)
sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)
close(0x3)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd24, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40085)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4c851}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000189"], 0xfdef)

189.289239ms ago: executing program 0 (id=3431):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

186.577934ms ago: executing program 1 (id=3432):
socketpair(0x6, 0xe, 0x1, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', <r6=>0x0, 0x0, 0x8, 0x8, 0xffff7fff, 0x30, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0x10, 0xfffff3b0}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1f8, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x1dc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x8, 0x5, 0x9}, {0xe, 0x1, 0x91, 0x5}, {0x200, 0x2, 0x8, 0x5}, {0x9f, 0x6, 0x80, 0x4}, {0xa, 0x81, 0x7, 0x80000001}, {0x2, 0x0, 0x8a, 0x401}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x3}}, @float={0x7, 0x0, 0x0, 0x10, 0xc}, @fwd={0xd}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x0, 0x1}]}, {0x0, [0x61, 0x61, 0x61, 0x61, 0x2e, 0x30]}}, &(0x7f0000000980)=""/215, 0x60, 0xd7, 0x1, 0x5, 0x10000}, 0x28)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x5}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x5, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit], &(0x7f0000000800)='syzkaller\x00', 0x9, 0x97, &(0x7f0000000840)=""/151, 0x41100, 0x3, '\x00', r3, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x2, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r8], 0x0, 0x10, 0x7}, 0x94)
socketpair(0x2a, 0xa, 0x10000, &(0x7f0000000c40)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000c80)={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1, 0xfff, 0x101, 0xfffd, 0x0, 0xc, 0x200, r5})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d00)={'gre0\x00', <r11=>0x0, 0x700, 0x8, 0x6, 0x1ff, {{0x2a, 0x4, 0x2, 0x4, 0xa8, 0x67, 0x0, 0xbd, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@generic={0x94, 0x8, "3781f12402b3"}, @timestamp={0x44, 0x8, 0x79, 0x0, 0x6, [0x6]}, @noop, @generic={0x82, 0x12, "1787da1071644b4ae2a2329f8b721a35"}, @cipso={0x86, 0x43, 0x3, [{0x1, 0x8, "e1b4ccc15ef6"}, {0x6, 0x6, "faa8929d"}, {0x6, 0x9, "c290ad05a0342b"}, {0x1, 0x4, "f405"}, {0x0, 0x4, 'a.'}, {0x2, 0xb, "1559f3e26324798f4f"}, {0x1, 0x11, "dae3a9f0f44007c50b52df6a6c5d66"}, {0x0, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xaa, 0x3, 0x8, [{@loopback, 0x4925}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x100}, {@loopback, 0x3}, {@rand_addr=0x64010101, 0x3ff}]}]}}}}})
setsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000e40)={@empty, r11}, 0x14)
r12 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$kcm(r0, &(0x7f00000020c0)={&(0x7f0000000e80)=@rc={0x1f, @none, 0xfb}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000f00)="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", 0x1000}], 0x1, &(0x7f0000001f40)=[{0x30, 0x11, 0x9d38, "dc2b29523726d618fbdeff6a80058e7a4195ad0fc39696d1a51e"}, {0xe8, 0x10c, 0x5, "8fdeb7bf5f0ccf7c19b466e938c5ccf295fdf2fcfcdb1d21a006f4a1d5c3a74f449911c3ab9ea26ee52ea116e88af5f98062c80235b1d4312b76a986d71d3996564e32daf2c65b2f6972ea50bc7c3093d259c5d1dd355ce0f57b6cfb70236079000eedfb47b12272f34bc974793a3a0451180a92db6273685514f0d5be0774b80909450db42185e05f43dabd1271da939ec7f72d99a09534c1ab0bec5da1201a89aad772ab1f3741dd7dceaeb37128eb47c75a67452eb708a9854a38a99f8bf15eff07e1dc7297d030813c94e81e8fb390"}, {0x48, 0xef, 0xfffffffc, "dc281f2c4c25f175cb5cd9f7ac5c21c7c0f90aac52ee8935fd112fba651172a85ce9fc7dfbf71cc735ed3167eef6dede8e59"}], 0x160}, 0x14)
ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000002100)={0x8, 'syz1\x00'})
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002140)={0x9, 0x400, 0x200, 0x8, 0x9, 0x93d, 0x3, 0x5}, 0x20)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r12, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20044851)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r1)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000002580)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002540)={&(0x7f0000002300)={0x224, r13, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a5b1f6e213804c070548ed6d99015c63"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3c0f}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="262e0de5c25bfaaf1c5b70cc68160acb"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b62722e60d48995e1df08105aa83c5e0c416d76ff56b52f0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b5743fa9a5d908889e84f63b75f990ec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fbc00c16adb8a7d6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ee6352e684f3a6f0e2f254ee3c5d4c9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f3477cc4eb5b777551358830e25fe54e"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="09f79cf6e7e77a640f5cf16c7e9c8822"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c38c696e4cd0c112"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="27ae4039e2700c99e6274dd9a0e1eec689fff5283abb68fd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a1e9acdf0e0865a4f05355d7429b453f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dbc91fe503a19632"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cc454a188b7b9099af22c46846d015983bb36a95098cc530c29a976d43ddf070"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8f9cd891825e61c1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d73196259d4f2ae6"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="140a2a0e089c6558cbae45eea1cec2e2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2a1c080b894f28aa96acfd9ae802295a96d908da746fc6e0d46319bc682f4ac9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="144d1c13df61eada850dd204980095fbdb256697c481dfc6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ab48687bb9d260780b7afb33c4e6d1f069a7a26f4a7d4823"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x391a}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x224}, 0x1, 0x0, 0x0, 0x40010}, 0x4000)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(r14, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x6c, r15, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x6c}}, 0x20004801)
r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002780), r9)
getsockname$packet(r10, &(0x7f00000027c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002800)=0x14)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002940)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x5cb70f9f55fe603b}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xbc, r16, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4048000}, 0x80)
r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r19 = syz_genetlink_get_family_id$nl802154(&(0x7f00000029c0), r14)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r18, &(0x7f0000002c40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002a00)={0x1e0, r19, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0xd4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "828401906f3218d0d7324a362e80a50da90964a039ff8ac001308159437120f4"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd26a}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fe2d6ace0f9294437830243a0ce2d1a75cb2a744b213eb7c7b6317a810ac37bb"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a4dc6547fff37b6e685821c682cb8bf3b2fd7f289aec9a9e8b55c59268c40ec"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2ed3906f6ebfac01ba443bb91c3a7e0f205067c6eb19dc3e3e4ca03c66e8f902"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xa0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffb}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4b}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4d97c75c}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1c22854cea692da1749b30dcc25f903f9a09c3f1e5064e668ebab7010e22245b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5ecb48012896823c8f8b993fb6b13bea"}]}, @NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010)

130.753028ms ago: executing program 3 (id=3433):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x3a911340f3ecef69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x3, 0xfffffffd, 0x1}, 0x10, 0xdd6c, 0xffffffffffffffff, 0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x5, 0x0, 0x6}, {0x3, 0x1, 0x2, 0x3}, {0x1, 0x4, 0x10, 0x6}, {0x2, 0x2, 0x5, 0x9}], 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000280)=""/29) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x26ad80, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'veth1_to_hsr\x00', @remote}) (async)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x18}, 0xc) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x80, 0x7, 0x2000, 0x8000, {{0x1e, 0x4, 0x2, 0x21, 0x78, 0x64, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, {[@cipso={0x86, 0xd, 0x3, [{0x1, 0x7, "381b78ee36"}]}, @timestamp={0x44, 0x14, 0x9b, 0x0, 0xa, [0x1, 0x29, 0x6, 0x2f4c89a2]}, @timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x4, [{@multicast2, 0xd}, {@remote, 0x5}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x18, 0xfb, 0x0, 0x3, [0x7c829195, 0x0, 0x807a, 0xa, 0x6]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xb, "06760d91e08fb95541"}]}}}}}) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x2, 0x8, 0x0, 0x1002, r2, 0x8000, '\x00', r3, r4, 0x0, 0x0, 0x2, 0x7}, 0x50) (async)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000580)={[{0x2b, 'io'}, {0x2b, 'cpuacct'}]}, 0xd) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x12, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x6, 0xdb, &(0x7f0000000700)=""/219, 0x40f00, 0x29, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000800)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0x1000, 0xee53}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000880)=[r5, r2, 0xffffffffffffffff, r5, r5], &(0x7f00000008c0)=[{0x1, 0x1, 0x0, 0xb}], 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f00000005c0)='rxrpc_rx_eproto\x00', r7, 0x0, 0xfffffffffffffff8}, 0x18) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0x4, 0x18}, 0xc) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r4, 0x20, &(0x7f0000000dc0)={&(0x7f0000000c80)=""/179, 0xb3, <r10=>0x0, &(0x7f0000000d40)=""/119, 0x77}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1a, 0x2b, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x0, 0x1, 0xb, 0xa, 0xffffffffffffffff, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x6, 0x0, 0x0, 0x775a47100a16e4f3, 0x20, '\x00', r3, @tracing=0x17, r4, 0x8, &(0x7f0000000c00)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x2, 0x2, 0x119a}, 0x10, r10, 0xffffffffffffffff, 0x1, &(0x7f0000000e40)=[r2, r2, r5, r2, r5, r2], &(0x7f0000000e80)=[{0x2, 0x2, 0x8, 0x3}], 0x10, 0xc}, 0x94) (async)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001080)=@req3={0x1503b68f, 0x0, 0x2, 0x5, 0x8, 0x8, 0x3}, 0x1c)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r5, 0x1, '\x00', 0x0, r4, 0x2, 0x4, 0x4}, 0x50)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x14, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x10, 0xf5, &(0x7f0000001240)=""/245, 0x41100, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001340)=[r9, r2, r2, r2, r2, 0xffffffffffffffff, r5], &(0x7f0000001380)=[{0x5, 0x4, 0xd, 0xb}, {0x1, 0x3, 0x6, 0x2}, {0x0, 0x1, 0x3, 0x8}, {0x5, 0x4, 0x2, 0x1}, {0x0, 0x5, 0x8, 0x2}, {0x3, 0x2, 0x1, 0xb}, {0x3, 0x1, 0x4, 0x3}], 0x10, 0x10001}, 0x94)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r12)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x518}, 0xc, &(0x7f0000001640)={&(0x7f0000001540)={0xe0, r13, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x435, @loopback, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80c1}, 0x4080)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x2c, 0x12, 0xa, 0x800, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7f}]}}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001800)={'wg1\x00', {0x2, 0x4e23, @local}}) (async)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000001840)={'bridge_slave_1\x00'})
bind$llc(r4, &(0x7f0000001880)={0x1a, 0x30f, 0xe, 0x4, 0x64, 0x8, @multicast}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x2, 0x4e22, @loopback}, 0x10)

126.521376ms ago: executing program 1 (id=3434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = gettid()
sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@RTM_NEWNSID={0x2c, 0x58, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8, 0x2, r5}]}, 0x2c}}, 0x0)

126.107015ms ago: executing program 3 (id=3435):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
socket$inet(0xa, 0x801, 0x84)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
getsockname$inet(r2, 0x0, &(0x7f0000000140))
r4 = socket$inet(0xa, 0x2, 0x84)
listen(r4, 0x8)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
pread64(r5, &(0x7f00000001c0)=""/129, 0x81, 0x6)
listen(r5, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = accept4$inet6(r5, 0x0, &(0x7f0000000100), 0x800)
listen(r6, 0x100)
r7 = socket$netlink(0x10, 0x3, 0x4)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7)

48.832019ms ago: executing program 1 (id=3436):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000140), 0x4)
syz_emit_ethernet(0x11e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xe8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x18, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c"}]}}}}}}, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
r1 = socket(0x200000000000011, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x8, 0x28f9796d}})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x6, 0x0, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket(0x1d, 0x2, 0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x9}, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r7, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

46.832921ms ago: executing program 0 (id=3437):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r0 = socket(0x10, 0x803, 0x2) (rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async)
unshare(0x2c020400) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (rerun: 32)
close(r1)
r2 = socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) (async)
getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106010000000299f1c093800b000100627269646765009a1e000280"], 0x34}}, 0x20044002)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x9c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x88, 0x1, [@m_skbmod={0x84, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x32, 0x6, "8092ca27f9e9f73d0c0c39eb57f7a0d5ea169db3295b584de724819da715aa4a5cd99185c06ec92ddb55b605001e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket(0x10, 0x803, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYRES16=r8, @ANYBLOB="495300c2ec42000f663f87237703fcefc5dbf0e1aa4bfc8bfc71c8682778c6e9d26fd9d48eeb5b5165682eabe163745894f954b9194b5e1101694ead5cca0b2d17642605a8ae7fdb812584d7ab08575140d18079b5951e049eac86ee7eb8c17cb9cd40daad802829aadc84a81b3c4d0b67f9b47376b4b0c30630", @ANYBLOB="0c000500db"], 0x30}}, 0x0) (async, rerun: 32)
r9 = socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r10, @ANYBLOB="1400020000000000000040000000ffff0000f800"], 0x2c}}, 0x0)
r11 = socket(0x10, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async, rerun: 64)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[], 0x34}}, 0x0) (rerun: 64)

753.118µs ago: executing program 0 (id=3438):
socket(0x10, 0x803, 0x0)
socket(0x1, 0x803, 0x0)
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r1})
r3 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r2, 0x8916, &(0x7f0000000000))
ioctl(r3, 0x8936, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

0s ago: executing program 0 (id=3439):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x7, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="000000003f000000180000000d00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800"/36, 0x24)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r6}]}}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001900000425bd7000fbcbdf250a801400ff0100040036000008001e000000000000000000000000aa00"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040884)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9f223785b5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

 `syz.1.1745'.
[  173.879305][T12305] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1748'.
[  173.885563][T12305] tipc: Resetting bearer <eth:syzkaller0>
[  173.925453][T12309] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.930707][T12309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  174.036195][T12316] caif0: entered promiscuous mode
[  174.038517][T12316] caif0: entered allmulticast mode
[  174.275473][T12327] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  174.346208][ T6230] nci: nci_rx_work: unknown MT 0x1
[  175.100535][T12336] netlink: 'syz.1.1757': attribute type 6 has an invalid length.
[  175.117015][T12336] netlink: 'syz.1.1757': attribute type 12 has an invalid length.
[  175.251022][T12346] netlink: 'syz.1.1760': attribute type 1 has an invalid length.
[  175.270696][T12343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.282791][T12343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.285828][T12343] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  175.471554][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.482712][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.486438][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.492384][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.495310][T12361] tap0: tun_chr_ioctl cmd 1074025681
[  175.495351][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.535786][T12359] lo speed is unknown, defaulting to 1000
[  175.660723][T12359] chnl_net:caif_netlink_parms(): no params data found
[  175.730972][T12359] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.734375][T12359] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.737465][T12359] bridge_slave_0: entered allmulticast mode
[  175.740566][T12359] bridge_slave_0: entered promiscuous mode
[  175.745485][T12359] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.748138][T12359] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.750745][T12359] bridge_slave_1: entered allmulticast mode
[  175.755233][T12359] bridge_slave_1: entered promiscuous mode
[  175.793102][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.798124][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.818747][T12359] team0: Port device team_slave_0 added
[  175.823126][T12359] team0: Port device team_slave_1 added
[  175.844761][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  175.847126][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.856786][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.862249][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.864739][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.875792][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.904793][T12359] hsr_slave_0: entered promiscuous mode
[  175.907476][T12359] hsr_slave_1: entered promiscuous mode
[  176.019914][T12359] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  176.026269][T12359] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  176.033042][T12359] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  176.040737][T12359] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  176.069400][T12359] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.072649][T12359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.075383][T12359] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.078225][T12359] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.129192][T12359] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.146211][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.150567][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.167600][T12359] 8021q: adding VLAN 0 to HW filter on device team0
[  176.178114][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.181248][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.191671][  T438] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.194432][  T438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.270471][T12380] __nla_validate_parse: 2 callbacks suppressed
[  176.270481][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'.
[  176.319646][T12383] netlink: 'syz.1.1767': attribute type 10 has an invalid length.
[  176.370128][T12386] ip6tnl3: entered promiscuous mode
[  176.419293][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.456273][T12359] veth0_vlan: entered promiscuous mode
[  176.461506][T12359] veth1_vlan: entered promiscuous mode
[  176.547907][T12395] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1771'.
[  176.555707][T12395] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1771'.
[  176.560295][T12359] veth0_macvtap: entered promiscuous mode
[  176.591814][T12359] veth1_macvtap: entered promiscuous mode
[  176.619768][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.626290][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.645725][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.648980][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.666324][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.669820][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.707983][T12410] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.746170][T12410] tipc: Disabling bearer <eth:syzkaller0>
[  176.791067][  T438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.800285][  T438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.874669][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.877390][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.969099][T12439] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1779'.
[  176.972901][T12439] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1779'.
[  176.976314][T12439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1779'.
[  176.987090][T12435] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1761'.
[  176.995661][T12439] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1779'.
[  177.000042][T12434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.005477][T12439] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1779'.
[  177.009694][T12439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1779'.
[  177.028565][T12439] tipc: Failed to remove unknown binding: 66,1,1/4:3660524385/3660524387
[  177.036805][T12439] tipc: Failed to remove unknown binding: 66,1,1/4:3660524385/3660524387
[  177.040525][T12439] tipc: Failed to remove unknown binding: 66,1,1/4:3660524385/3660524387
[  177.074083][T12442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.077084][T12442] syzkaller0: entered promiscuous mode
[  177.079129][T12442] syzkaller0: entered allmulticast mode
[  177.095113][T12442] tipc: Resetting bearer <eth:syzkaller0>
[  177.104137][T12441] tipc: Resetting bearer <eth:syzkaller0>
[  177.121720][T12441] tipc: Disabling bearer <eth:syzkaller0>
[  177.200339][T12451] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.275288][T12457] netlink: 'syz.1.1785': attribute type 4 has an invalid length.
[  177.278910][T12457] netlink: 'syz.1.1785': attribute type 2 has an invalid length.
[  177.339001][T12462] syzkaller1: entered promiscuous mode
[  177.341396][T12462] syzkaller1: entered allmulticast mode
[  177.532663][ T5849] Bluetooth: hci3: command tx timeout
[  177.568582][T12475] ieee802154 phy1 wpan1: encryption failed: -22
[  177.646354][T12478] siw: device registration error -23
[  177.661690][T12478] veth0_to_bridge: entered promiscuous mode
[  177.663873][T12478] veth0_to_bridge: entered allmulticast mode
[  179.612340][ T5854] Bluetooth: hci3: command tx timeout
[  180.500209][T12480] IPVS: Error connecting to the multicast addr
[  180.547740][T12486] netlink: 'syz.0.1793': attribute type 1 has an invalid length.
[  180.626615][T12486] 8021q: adding VLAN 0 to HW filter on device bond14
[  180.630862][T12486] bond13: (slave bond14): making interface the new active one
[  180.635006][T12486] bond13: (slave bond14): Enslaving as an active interface with an up link
[  180.673225][ T6230] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.676180][ T6230] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.678978][ T6230] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.682764][T12486] netlink: 'syz.0.1793': attribute type 1 has an invalid length.
[  180.698705][T12496] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  180.700481][ T6230] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.733737][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  180.798727][T12502] netlink: 'syz.1.1798': attribute type 1 has an invalid length.
[  180.802014][T12502] netlink: 'syz.1.1798': attribute type 4 has an invalid length.
[  180.859775][T12511] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  180.866856][T12511] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  181.148446][T12530] netlink: 'syz.1.1805': attribute type 4 has an invalid length.
[  181.325401][T12544] lo speed is unknown, defaulting to 1000
[  181.409734][T12558] __nla_validate_parse: 44 callbacks suppressed
[  181.409744][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'.
[  181.622225][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1818'.
[  181.627045][T12570] siw: device registration error -23
[  181.633297][T12570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1817'.
[  181.639135][T12570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'.
[  181.657275][T12570] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.693613][ T5849] Bluetooth: hci3: command tx timeout
[  181.756948][T12575] netlink: 'syz.0.1819': attribute type 303 has an invalid length.
[  181.790971][T12589] netlink: 'syz.0.1819': attribute type 303 has an invalid length.
[  181.796351][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'.
[  181.800769][T12575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  181.804294][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'.
[  181.807246][T12575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  181.860298][T12596] siw: device registration error -23
[  181.868485][T12596] siw: device registration error -23
[  181.874541][T12600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1823'.
[  181.878005][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'.
[  182.621423][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'.
[  182.876531][T12637] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1835'.
[  183.249291][T12663] batadv1: entered promiscuous mode
[  183.251445][T12663] batadv1: entered allmulticast mode
[  183.481523][T12676] netlink: 'syz.3.1848': attribute type 11 has an invalid length.
[  183.486494][T12680] netlink: 'syz.3.1848': attribute type 11 has an invalid length.
[  183.772511][ T5854] Bluetooth: hci3: command tx timeout
[  183.811249][T12704] netlink: 'syz.3.1854': attribute type 50 has an invalid length.
[  183.816968][T12705] netlink: 'syz.3.1854': attribute type 50 has an invalid length.
[  183.859237][T12707] siw: device registration error -23
[  183.871729][T12707] tipc: Started in network mode
[  183.876905][T12707] tipc: Node identity 26a691a8f50b, cluster identity 4711
[  183.880169][T12707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.900940][T12706] tipc: Disabling bearer <eth:syzkaller0>
[  184.221659][T12733] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.225519][T12733] bridge0: port 3(bond2) entered blocking state
[  184.228380][T12733] bridge0: port 3(bond2) entered disabled state
[  184.231161][T12733] bond2: entered allmulticast mode
[  184.235239][T12733] bond2: entered promiscuous mode
[  184.238051][T12733] bridge0: port 3(bond2) entered blocking state
[  184.241675][T12733] bridge0: port 3(bond2) entered forwarding state
[  184.245736][T12731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.254525][T12731] tipc: Disabling bearer <eth:syzkaller0>
[  184.734900][ T1097] bridge0: port 3(bond2) entered disabled state
[  184.832928][T12762] rdma_rxe: rxe_newlink: failed to add bond_slave_0
[  184.899440][T12768] pim6reg: left allmulticast mode
[  185.071734][T12782] tc_dump_action: action bad kind
[  185.427239][T12810] veth0_to_bridge: entered promiscuous mode
[  185.430459][T12810] veth0_to_bridge: left promiscuous mode
[  185.451229][T12810] netlink: 'syz.0.1882': attribute type 19 has an invalid length.
[  185.469255][T12810] netlink: 'syz.0.1882': attribute type 19 has an invalid length.
[  185.499091][ T6230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.507122][ T6230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.514961][ T6230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.518416][ T6230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.627089][T12819] lo speed is unknown, defaulting to 1000
[  185.800150][T12838] openvswitch: netlink: Flow key attr not present in new flow.
[  185.852389][ T5854] Bluetooth: hci3: command 0x0405 tx timeout
[  185.880005][T12848] netlink: 'syz.3.1894': attribute type 11 has an invalid length.
[  185.888410][T12843] syzkaller0: entered promiscuous mode
[  185.890220][T12843] syzkaller0: entered allmulticast mode
[  185.896951][T12850] batadv_slave_0: entered promiscuous mode
[  185.947175][T12850] batadv_slave_0: left promiscuous mode
[  187.183896][T12868] __nla_validate_parse: 21 callbacks suppressed
[  187.183908][T12868] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.1899'.
[  187.217868][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'.
[  187.227607][T12867] geneve2: entered promiscuous mode
[  187.229295][T12867] geneve2: entered allmulticast mode
[  187.281379][T12876] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1903'.
[  187.347131][T12883] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.349886][T12882] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.356786][T12883] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.377786][T12882] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.380793][T12883] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.384372][T12882] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.387193][T12882] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.389952][T12882] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.393287][T12883] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.396030][T12883] netlink: 'syz.0.1906': attribute type 10 has an invalid length.
[  187.435544][T12890] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1907'.
[  187.449479][T12882] bond1: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  187.517771][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'.
[  187.581329][T12893] lo speed is unknown, defaulting to 1000
[  187.813248][ T5913] lo speed is unknown, defaulting to 1000
[  187.815714][ T5913] syz2: Port: 1 Link DOWN
[  187.818372][T12914] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.831612][   T24] lo speed is unknown, defaulting to 1000
[  187.833953][   T24] syz2: Port: 1 Link ACTIVE
[  187.885410][T12914] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  187.978748][T12935] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.987907][T12914] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.055545][T12914] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  188.134735][ T6230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  188.154688][ T6230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  188.159209][T12950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.159388][ T6230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  188.175199][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  188.310496][T12965] tipc: New replicast peer: 255.255.255.255
[  188.313426][T12965] tipc: Enabled bearer <udp:s>, priority 10
[  188.420616][T12978] syzkaller0: entered promiscuous mode
[  188.424517][T12978] syzkaller0: entered allmulticast mode
[  188.708108][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1937'.
[  188.843472][T13001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1938'.
[  189.434654][  T795] tipc: Node number set to 3551367592
[  189.738539][T13003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.797089][T13003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.831712][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1939'.
[  189.843152][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1940'.
[  189.849531][T13007] lo speed is unknown, defaulting to 1000
[  189.858071][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'.
[  189.889967][T13003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.939932][T13003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.066713][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.090823][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.120250][ T5884] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.124265][ T5884] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.641024][T13087] openvswitch: netlink: Actions may not be safe on all matching packets
[  191.551209][T13119] syz_tun: entered allmulticast mode
[  191.576839][T13119] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  191.631479][T13119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.651091][T13118] syz_tun: left allmulticast mode
[  191.665552][T13122] lo speed is unknown, defaulting to 1000
[  192.214947][T13151] __nla_validate_parse: 10 callbacks suppressed
[  192.214959][T13151] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1976'.
[  192.268724][T13161] openvswitch: netlink: Missing valid actions attribute.
[  192.271177][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.302944][T13161] syzkaller0: entered promiscuous mode
[  192.305836][T13161] syzkaller0: entered allmulticast mode
[  192.371587][T13165] macvlan5: entered allmulticast mode
[  192.382275][T13165] veth1_vlan: entered allmulticast mode
[  192.390408][T13165] veth1_vlan: left allmulticast mode
[  192.429805][T13172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1981'.
[  192.434347][T13175] validate_nla: 40 callbacks suppressed
[  192.434357][T13175] netlink: 'syz.3.1982': attribute type 2 has an invalid length.
[  192.599017][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'.
[  192.601993][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'.
[  192.650348][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'.
[  192.654819][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1984'.
[  192.661006][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'.
[  192.689537][T13204] netlink: 'syz.0.1987': attribute type 3 has an invalid length.
[  192.711579][T13195] syzkaller0: entered promiscuous mode
[  192.713954][T13195] syzkaller0: entered allmulticast mode
[  192.730851][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'.
[  192.773942][T13204] siw: device registration error -23
[  192.818731][T13204] bridge_slave_0: left promiscuous mode
[  192.837641][T13204] veth7: left promiscuous mode
[  192.839467][T13204] bridge10: left promiscuous mode
[  192.841438][T13204] bridge10: left allmulticast mode
[  192.857364][T13215] netlink: 'syz.1.1989': attribute type 12 has an invalid length.
[  192.872571][T13204] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  192.875246][T13204] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  192.878046][T13204] macsec3: left promiscuous mode
[  192.880227][T13204] macsec3: left allmulticast mode
[  192.886577][T13204] ip6tnl3: left promiscuous mode
[  192.910638][ T5873] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.915394][ T5873] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.919077][ T5873] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.927826][ T5873] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.958234][T13215] netlink: 'syz.1.1989': attribute type 12 has an invalid length.
[  193.027398][T13225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.041739][T13225] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1991'.
[  193.073060][T13227] netlink: 'syz.0.1992': attribute type 6 has an invalid length.
[  193.144377][T13233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1993'.
[  193.149490][T13231] lo speed is unknown, defaulting to 1000
[  194.017280][ T1365] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  194.022996][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.184847][T13260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.188814][T13260] syzkaller0: entered promiscuous mode
[  194.190662][T13260] syzkaller0: entered allmulticast mode
[  194.221886][T13259] tipc: Resetting bearer <eth:syzkaller0>
[  194.239994][T13259] tipc: Disabling bearer <eth:syzkaller0>
[  194.376051][T13277] syzkaller1: entered promiscuous mode
[  194.377995][T13277] syzkaller1: entered allmulticast mode
[  194.393095][T13281] netlink: 'syz.1.2004': attribute type 1 has an invalid length.
[  194.467724][T13281] veth13: entered promiscuous mode
[  194.582492][T13298] netlink: 'syz.3.2009': attribute type 29 has an invalid length.
[  194.585617][T13298] netlink: 'syz.3.2009': attribute type 29 has an invalid length.
[  194.596418][T13300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.626972][T13300] syzkaller0: entered promiscuous mode
[  194.636684][T13300] syzkaller0: entered allmulticast mode
[  194.646549][T13299] tipc: Resetting bearer <eth:syzkaller0>
[  195.778837][T13299] tipc: Disabling bearer <eth:syzkaller0>
[  195.785504][T13312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.790376][T13316] syzkaller0: entered promiscuous mode
[  195.802664][T13316] syzkaller0: entered allmulticast mode
[  195.810850][T13327] tipc: Resetting bearer <eth:syzkaller0>
[  195.841648][T13331] netlink: 'syz.1.2016': attribute type 10 has an invalid length.
[  195.850324][T13327] tipc: Resetting bearer <eth:syzkaller0>
[  195.866205][T13327] tipc: Disabling bearer <eth:syzkaller0>
[  195.879045][T13331] syzkaller0: left promiscuous mode
[  195.880884][T13331] syzkaller0: left allmulticast mode
[  195.893407][T13331] tipc: Resetting bearer <eth:syzkaller0>
[  195.951794][T13348] netem: incorrect gi model size
[  195.956787][T13348] netem: change failed
[  195.961263][T13348] netlink: 'syz.3.2021': attribute type 6 has an invalid length.
[  196.059772][T13362] syzkaller1: tun_chr_ioctl cmd 1074025673
[  196.061943][T13361] syzkaller1: tun_chr_ioctl cmd 1074025677
[  196.065646][T13361] syzkaller1: linktype set to 804
[  196.078938][T13361] sch_tbf: burst 88 is lower than device veth11 mtu (1514) !
[  196.100178][T13364] openvswitch: netlink: Actions may not be safe on all matching packets
[  196.841415][T13418] veth1: entered promiscuous mode
[  197.159914][T13446] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  197.220980][T13454] batadv_slave_0: entered promiscuous mode
[  197.240609][T13452] batadv_slave_0: left promiscuous mode
[  197.314141][T13466] __nla_validate_parse: 25 callbacks suppressed
[  197.314152][T13466] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2059'.
[  197.319259][T13466] !: entered promiscuous mode
[  197.328549][T13466] bond0: (slave 0!): Releasing backup interface
[  197.335956][T13466] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  197.429513][T13482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.438358][T13482] syzkaller0: entered promiscuous mode
[  197.440805][T13482] syzkaller0: entered allmulticast mode
[  197.443562][T13482] tipc: Resetting bearer <eth:syzkaller0>
[  197.507075][T13484] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  197.512073][T13484] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  197.516309][T13484] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  197.554088][T13490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2067'.
[  197.601548][T13493] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  197.607839][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'.
[  198.228568][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'.
[  198.587896][T13523] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2077'.
[  198.592982][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.596327][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.635557][T13526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'.
[  198.639251][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'.
[  198.670232][T13519] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2076'.
[  199.084767][T13555] validate_nla: 3 callbacks suppressed
[  199.084781][T13555] netlink: 'syz.3.2086': attribute type 1 has an invalid length.
[  199.103197][T13555] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2086'.
[  199.276782][T13563] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  199.428496][T13569] lo speed is unknown, defaulting to 1000
[  199.473864][T13577] syzkaller0: entered promiscuous mode
[  199.476247][T13577] syzkaller0: entered allmulticast mode
[  199.567385][T13579] lo speed is unknown, defaulting to 1000
[  199.619575][T13584] netlink: 'syz.3.2093': attribute type 1 has an invalid length.
[  199.690898][T13587] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  199.698331][T13587] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  199.778748][T13587] netlink: 'syz.3.2094': attribute type 83 has an invalid length.
[  199.841759][T13594] netlink: 'syz.3.2095': attribute type 12 has an invalid length.
[  200.005703][T13596] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2095'.
[  200.061586][T13606] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.101199][T13611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.103798][T13611] IPv6: NLM_F_CREATE should be set when creating new route
[  200.118278][T13610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  200.133038][T13612] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  200.135962][T13610] netlink: 'syz.1.2100': attribute type 10 has an invalid length.
[  200.201964][T13622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.408435][T13691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.411882][T13691] syzkaller0: entered promiscuous mode
[  201.415694][T13691] syzkaller0: entered allmulticast mode
[  201.431139][T13691] tipc: Resetting bearer <eth:syzkaller0>
[  201.436570][T13690] tipc: Resetting bearer <eth:syzkaller0>
[  201.447610][T13690] tipc: Disabling bearer <eth:syzkaller0>
[  201.736155][T13716] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.885310][T13721] netlink: 'syz.3.2129': attribute type 1 has an invalid length.
[  201.918796][T13721] 8021q: adding VLAN 0 to HW filter on device bond5
[  201.955087][T13721] bond5: (slave ip6gretap1): making interface the new active one
[  201.965791][T13721] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  202.016835][T13733] dvmrp8: entered allmulticast mode
[  202.088026][T13736] lo speed is unknown, defaulting to 1000
[  202.126430][T13741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.131864][T13741] netlink: 'syz.0.2133': attribute type 23 has an invalid length.
[  202.133135][T13738] caif0: left promiscuous mode
[  202.140159][T13738] veth0_to_bridge: left promiscuous mode
[  202.148938][T13738] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  202.153781][T13738] syzkaller0: left promiscuous mode
[  202.155949][T13738] tipc: Resetting bearer <eth:syzkaller0>
[  202.158261][T13738] tipc: Resetting bearer <eth:syzkaller0>
[  202.163981][T13738] vlan0: left promiscuous mode
[  202.165627][T13738] bond0: left promiscuous mode
[  202.167981][T13738] geneve3: left promiscuous mode
[  202.170156][T13739] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  202.172610][T13738] veth13: left promiscuous mode
[  202.273954][T13749] lo speed is unknown, defaulting to 1000
[  202.828385][T13732] dvmrp8: left allmulticast mode
[  203.185917][T13776] __nla_validate_parse: 14 callbacks suppressed
[  203.185932][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'.
[  203.261672][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'.
[  203.288073][T13783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'.
[  203.387059][T13796] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2149'.
[  203.395607][T13794] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2148'.
[  203.414596][T13793] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2149'.
[  203.424657][T13802] syz_tun: entered allmulticast mode
[  203.436459][T13802] dvmrp8: entered allmulticast mode
[  203.451249][T13802] lo speed is unknown, defaulting to 1000
[  203.482613][T13804] netlink: 'syz.1.2152': attribute type 7 has an invalid length.
[  203.486010][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'.
[  203.500133][T13807] netlink: 'syz.3.2151': attribute type 23 has an invalid length.
[  203.519114][T13804] 8021q: adding VLAN 0 to HW filter on device bond12
[  203.610694][T13804] bond12 (unregistering): Released all slaves
[  203.650474][T13801] syz_tun: left allmulticast mode
[  203.652787][T13801] dvmrp8: left allmulticast mode
[  203.889233][T13832] lo speed is unknown, defaulting to 1000
[  203.947878][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'.
[  203.967307][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2159'.
[  203.998949][T13841] syzkaller0: entered promiscuous mode
[  204.012956][T13841] syzkaller0: entered allmulticast mode
[  204.204959][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  204.208110][T13857] netlink: 'syz.1.2162': attribute type 5 has an invalid length.
[  204.358870][T13857] geneve4: entered promiscuous mode
[  204.365741][T13857] geneve4: entered allmulticast mode
[  204.370231][ T5863] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  204.375031][ T5863] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  204.379750][ T5863] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  204.384019][ T5863] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  204.708301][T13885] netlink: 'syz.0.2170': attribute type 11 has an invalid length.
[  204.767855][T13891] can: request_module (can-proto-0) failed.
[  204.771151][T13891] openvswitch: netlink: IP tunnel dst address not specified
[  204.831845][T13898] netlink: 'syz.3.2173': attribute type 10 has an invalid length.
[  204.840588][T13898] batman_adv: batadv0: Adding interface: virt_wifi0
[  204.843454][T13898] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.863256][T13898] batman_adv: batadv0: Interface activated: virt_wifi0
[  204.990221][T13921] netlink: 'syz.0.2180': attribute type 10 has an invalid length.
[  205.110934][T13938] !: left promiscuous mode
[  205.141303][T13942] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.145969][T13942] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  205.207061][T13942] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.210397][T13942] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  205.262008][T13952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.265526][T13951] syzkaller0: entered promiscuous mode
[  205.268098][T13951] syzkaller0: entered allmulticast mode
[  205.280905][T13942] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.285838][T13942] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  205.305553][T13951] tipc: Resetting bearer <eth:syzkaller0>
[  205.309555][T13949] tipc: Resetting bearer <eth:syzkaller0>
[  205.318270][T13949] tipc: Disabling bearer <eth:syzkaller0>
[  205.335825][T13942] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.339282][T13942] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  205.454209][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  205.457341][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  205.469096][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  205.471884][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  205.481906][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  205.484922][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  205.495139][ T5863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  205.498702][ T5863] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  205.711899][T13977] netlink: 'syz.0.2196': attribute type 11 has an invalid length.
[  205.771692][T13978] syzkaller0: entered promiscuous mode
[  205.786824][T13978] tipc: Resetting bearer <eth:syzkaller0>
[  205.811176][T13980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.141057][T14000] netlink: 'syz.3.2206': attribute type 5 has an invalid length.
[  206.728533][T14026] netlink: 'syz.1.2212': attribute type 3 has an invalid length.
[  208.567787][T14059] Set syz1 is full, maxelem 65536 reached
[  208.601383][T14092] __nla_validate_parse: 68 callbacks suppressed
[  208.601394][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'.
[  208.710387][T14101] netlink: 'syz.0.2231': attribute type 4 has an invalid length.
[  208.714517][T14101] netlink: 'syz.0.2231': attribute type 10 has an invalid length.
[  209.548377][T14128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.642155][T14130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.645434][T14130] IPv6: NLM_F_CREATE should be set when creating new route
[  209.648653][T14130] IPv6: NLM_F_CREATE should be set when creating new route
[  209.655106][T14130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  209.673697][T14130] netlink: 'syz.1.2238': attribute type 2 has an invalid length.
[  209.677220][T14130] netlink: 'syz.1.2238': attribute type 2 has an invalid length.
[  210.061405][T14154] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.066788][T14154] openvswitch: netlink: Message has 1 unknown bytes.
[  210.069982][T14154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.117606][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'.
[  210.199745][T13791] IPVS: starting estimator thread 0...
[  210.236295][T14176] netlink: 'syz.0.2251': attribute type 1 has an invalid length.
[  210.239625][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'.
[  210.249240][ T6230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.260830][ T6230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.265575][ T6230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.269682][ T6230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  210.282471][T14174] IPVS: using max 81 ests per chain, 194400 per kthread
[  210.474950][T14205] netlink: 'syz.1.2259': attribute type 29 has an invalid length.
[  210.481082][T14205] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  210.597108][T14222] netlink: 'syz.3.2264': attribute type 1 has an invalid length.
[  210.600074][T14222] netlink: 16074 bytes leftover after parsing attributes in process `syz.3.2264'.
[  210.680985][T14230] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  210.744100][T14239] vxcan1: entered allmulticast mode
[  210.747187][T14239] vxcan1: left allmulticast mode
[  210.791075][T14228] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2266'.
[  210.843034][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'.
[  210.851334][T14249] syzkaller1: entered promiscuous mode
[  210.853825][T14249] syzkaller1: entered allmulticast mode
[  210.887621][T14251] lo speed is unknown, defaulting to 1000
[  211.106007][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2273'.
[  211.110196][T14251] netlink: 'syz.1.2273': attribute type 13 has an invalid length.
[  211.113658][T14251] netlink: 'syz.1.2273': attribute type 17 has an invalid length.
[  211.120790][T14251] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  211.628856][T14274] netlink: 'syz.3.2278': attribute type 11 has an invalid length.
[  212.115181][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2284'.
[  212.142037][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  212.157611][T14292] netlink: 'syz.1.2285': attribute type 2 has an invalid length.
[  212.166795][T14292] k*]: entered promiscuous mode
[  212.171312][T14292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'.
[  212.301236][T14313] netlink: 'syz.0.2288': attribute type 1 has an invalid length.
[  212.311862][T14313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.316037][T14313] syzkaller0: entered promiscuous mode
[  212.317951][T14313] syzkaller0: entered allmulticast mode
[  212.335490][T14313] tipc: Resetting bearer <eth:syzkaller0>
[  212.337649][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.340435][T14313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.344373][T14311] lo speed is unknown, defaulting to 1000
[  212.346678][T14310] tipc: Resetting bearer <eth:syzkaller0>
[  212.355920][T14310] tipc: Disabling bearer <eth:syzkaller0>
[  212.667719][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.676690][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.729658][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.737010][ T5854] Bluetooth: hci3: command 0x0405 tx timeout
[  213.266608][T14385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.273279][T14385] syzkaller0: entered promiscuous mode
[  213.275179][T14385] syzkaller0: entered allmulticast mode
[  213.306090][T14385] tipc: Resetting bearer <eth:syzkaller0>
[  213.313098][T14384] tipc: Resetting bearer <eth:syzkaller0>
[  213.325096][T14384] tipc: Disabling bearer <eth:syzkaller0>
[  213.375699][T14392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.383224][ T5897] lo speed is unknown, defaulting to 1000
[  213.385275][ T5897] syz2: Port: 1 Link DOWN
[  213.488082][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.492066][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.504591][T14401] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  213.508680][T14401] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  213.699712][T14421] Bluetooth: MGMT ver 1.23
[  213.705611][T14421] __nla_validate_parse: 8 callbacks suppressed
[  213.705620][T14421] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2319'.
[  213.711132][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'.
[  213.726663][T14424] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2320'.
[  213.935667][T14441] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2325'.
[  213.999239][T14446] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.379253][T14456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.383439][T14456] syzkaller0: entered promiscuous mode
[  214.385443][T14456] syzkaller0: entered allmulticast mode
[  214.405121][T14455] tipc: Resetting bearer <eth:syzkaller0>
[  214.418419][T14455] tipc: Disabling bearer <eth:syzkaller0>
[  214.497508][T14458] openvswitch: netlink: Duplicate or invalid key (type 0).
[  214.500098][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.537485][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2331'.
[  214.569612][ T5873] tipc: Subscription rejected, illegal request
[  214.635393][T14473] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  214.641468][T14473] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2335'.
[  214.818460][T14487] IPVS: Error connecting to the multicast addr
[  214.896212][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2340'.
[  214.916206][T14491] validate_nla: 3 callbacks suppressed
[  214.916221][T14491] netlink: 'syz.1.2340': attribute type 5 has an invalid length.
[  214.925263][T14491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2340'.
[  215.030241][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'.
[  215.051817][T14512] lo speed is unknown, defaulting to 1000
[  215.129461][T14520] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.166796][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2348'.
[  215.292910][T14536] netlink: 'syz.1.2350': attribute type 7 has an invalid length.
[  215.366864][T14541] vlan3: entered promiscuous mode
[  215.369723][T14541] bridge0: port 1(vlan3) entered blocking state
[  215.373797][T14541] bridge0: port 1(vlan3) entered disabled state
[  215.376867][T14541] vlan3: entered allmulticast mode
[  215.379132][T14541] bridge0: entered allmulticast mode
[  215.385869][T14541] vlan3: left allmulticast mode
[  215.387799][T14541] bridge0: left allmulticast mode
[  216.190250][T14593] syzkaller0: entered allmulticast mode
[  216.199788][T14593] syzkaller0 (unregistering): left allmulticast mode
[  216.355830][T14603] netlink: 'syz.3.2367': attribute type 1 has an invalid length.
[  216.358410][T14603] netlink: 'syz.3.2367': attribute type 1 has an invalid length.
[  216.365569][T14603] netlink: 'syz.3.2367': attribute type 1 has an invalid length.
[  216.399154][T14603] 8021q: adding VLAN 0 to HW filter on device bond6
[  216.408725][T14604] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  216.420301][T14604] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  216.468665][T14613] netlink: 'syz.3.2369': attribute type 1 has an invalid length.
[  216.486409][T14613] bond7: entered promiscuous mode
[  216.488823][T14613] 8021q: adding VLAN 0 to HW filter on device bond7
[  216.524330][T14613] 8021q: adding VLAN 0 to HW filter on device bond7
[  216.528392][T14613] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  216.533144][T14613] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  216.540240][T14613] bond7: (slave wireguard0): making interface the new active one
[  216.543210][T14613] wireguard0: entered promiscuous mode
[  216.545812][T14613] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  216.567063][T14613] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  216.579338][T14613] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  216.651551][T14629] netlink: 'syz.1.2373': attribute type 4 has an invalid length.
[  216.666956][T14629] netlink: 'syz.1.2373': attribute type 4 has an invalid length.
[  216.673355][  T795] lo speed is unknown, defaulting to 1000
[  216.675873][  T795] syz2: Port: 1 Link ACTIVE
[  216.698302][T14631] batadv_slave_1: entered promiscuous mode
[  216.750368][T14635] netlink: 'syz.1.2376': attribute type 9 has an invalid length.
[  216.789427][T14639] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  216.792610][T14639] team0: Device macvtap0 is already an upper device of the team interface
[  216.837290][T14633] batadv_slave_1: left promiscuous mode
[  216.860677][T14638] delete_channel: no stack
[  216.946746][T14646] netlink: 'syz.3.2379': attribute type 1 has an invalid length.
[  217.055834][T14658] pim6reg: entered allmulticast mode
[  217.063401][T14662] pim6reg: left allmulticast mode
[  218.137302][T14695] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  218.147753][T14697] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  218.350720][T14721] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  218.359265][T14721] Bluetooth: MGMT ver 1.23
[  218.525584][T14734] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  218.655778][T14749] erspan0: entered promiscuous mode
[  218.658770][T14749] erspan0: left promiscuous mode
[  218.735132][T14756] __nla_validate_parse: 17 callbacks suppressed
[  218.735147][T14756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2408'.
[  218.759821][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'.
[  219.024863][T14758] bond9: (slave geneve3): making interface the new active one
[  219.027876][T14758] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  219.044866][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  219.048020][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  219.092283][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  219.098883][T14777] net_ratelimit: 1 callbacks suppressed
[  219.098898][T14777] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  219.134169][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  219.261340][T14791] sctp: [Deprecated]: syz.1.2415 (pid 14791) Use of int in maxseg socket option.
[  219.261340][T14791] Use struct sctp_assoc_value instead
[  219.415189][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'.
[  219.603429][T14823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2423'.
[  219.956224][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'.
[  219.961426][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'.
[  220.160563][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'.
[  220.410953][T14849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2428'.
[  220.414279][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  220.414365][ T5849] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  220.419888][T14853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  220.559432][T14876] validate_nla: 4 callbacks suppressed
[  220.559465][T14876] netlink: 'syz.3.2435': attribute type 13 has an invalid length.
[  220.568777][T14876] netlink: 'syz.3.2435': attribute type 17 has an invalid length.
[  220.703906][T14888] lo speed is unknown, defaulting to 1000
[  220.814816][T14891] lo speed is unknown, defaulting to 1000
[  220.817700][T14876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.995339][T14914] lo speed is unknown, defaulting to 1000
[  221.105621][T14921] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2448'.
[  221.140682][T14923] netlink: 'syz.0.2449': attribute type 6 has an invalid length.
[  221.393215][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'.
[  221.525712][T14943] lo speed is unknown, defaulting to 1000
[  221.837102][T14956] netlink: 'syz.3.2461': attribute type 1 has an invalid length.
[  221.841987][T14956] netlink: 'syz.3.2461': attribute type 2 has an invalid length.
[  221.859146][T14956] netlink: 'syz.3.2461': attribute type 1 has an invalid length.
[  221.866196][T14956] netlink: 'syz.3.2461': attribute type 2 has an invalid length.
[  221.874168][T14962] netlink: 'syz.0.2464': attribute type 7 has an invalid length.
[  221.877467][T14962] netlink: 'syz.0.2464': attribute type 8 has an invalid length.
[  222.010895][T14980] netlink: 'syz.3.2469': attribute type 1 has an invalid length.
[  222.165003][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  222.169780][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  222.182834][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  222.199871][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  222.314801][T14994] 8021q: adding VLAN 0 to HW filter on device bond13
[  222.320457][T14994] bond12: (slave bond13): making interface the new active one
[  222.324968][T14994] bond12: (slave bond13): Enslaving as an active interface with an up link
[  222.329949][T14998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.340668][T14994] bond12: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  222.346103][T14994] bond12: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  222.355822][T14998] syzkaller0: entered promiscuous mode
[  222.358384][T14998] syzkaller0: entered allmulticast mode
[  222.376631][T14998] syzkaller0: mtu less than device minimum
[  222.380349][T14997] tipc: Resetting bearer <eth:syzkaller0>
[  222.401027][T14997] tipc: Disabling bearer <eth:syzkaller0>
[  222.445721][T15001] bridge0: port 1(0!) entered blocking state
[  222.448151][T15001] bridge0: port 1(0!) entered disabled state
[  222.450589][T15001] !: entered allmulticast mode
[  222.453754][T15001] !: left allmulticast mode
[  222.455869][T15001] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  222.587161][T15009] tipc: Resetting bearer <eth:syzkaller0>
[  222.615409][ T5913] lo speed is unknown, defaulting to 1000
[  222.618294][ T5913] syz2: Port: 1 Link DOWN
[  222.627863][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.631569][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  222.635371][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  222.638925][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.645539][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  222.648894][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  222.655655][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.659060][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  222.666296][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  222.670162][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  222.673989][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  222.677489][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  222.789510][T15015] 8021q: adding VLAN 0 to HW filter on device team0
[  222.794791][T15015] bond0: (slave team0): Enslaving as an active interface with an up link
[  223.167684][T15034] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  223.174776][T15034] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  223.699121][T15082] 8021q: adding VLAN 0 to HW filter on device bond14
[  223.716593][T15082] 8021q: adding VLAN 0 to HW filter on device bond14
[  223.721902][T15082] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  223.729175][T15082] bond14: (slave vcan0): Error -95 calling set_mac_address
[  223.883691][T15102] veth0_to_bridge: entered promiscuous mode
[  223.890732][T15102] veth0_to_bridge: left promiscuous mode
[  223.944085][T15108] __nla_validate_parse: 26 callbacks suppressed
[  223.944100][T15108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2515'.
[  223.950314][T15108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2515'.
[  223.958101][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2515'.
[  224.083797][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'.
[  224.124374][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'.
[  224.157715][T15118] : renamed from bond_slave_0
[  224.223144][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2517'.
[  224.274593][T15134] 8021q: adding VLAN 0 to HW filter on device bond15
[  224.290107][T15134] macvlan2: entered promiscuous mode
[  224.292675][T15134] macvlan2: entered allmulticast mode
[  224.299907][T15134] bond15: entered promiscuous mode
[  224.308804][T15134] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  224.327795][T15134] bond15: left promiscuous mode
[  224.463204][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'.
[  224.495786][T15141] 8021q: adding VLAN 0 to HW filter on device bond10
[  224.633303][T15163] 8021q: adding VLAN 0 to HW filter on device bond11
[  224.700822][T15176] blkio.reset_stats is deprecated
[  224.759237][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  224.767514][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  224.895629][ T6230] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.898991][ T6230] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.906370][ T6230] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.909801][ T6230] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.971119][T15188] bond16: entered promiscuous mode
[  224.974357][T15188] bond16: entered allmulticast mode
[  224.976576][T15188] 8021q: adding VLAN 0 to HW filter on device bond16
[  225.065881][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2535'.
[  225.195821][T15205] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  225.411453][T15217] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  225.415220][T15217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.532620][ T5854] Bluetooth: hci3: command 0x0405 tx timeout
[  225.627974][T15233] tipc: Resetting bearer <eth:syzkaller0>
[  225.730555][T15246] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  225.907871][T15252] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  225.946559][T15260] pim6reg1: entered promiscuous mode
[  225.948881][T15260] pim6reg1: entered allmulticast mode
[  226.125618][T15263] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  226.427524][T15283] sctp: [Deprecated]: syz.1.2562 (pid 15283) Use of int in max_burst socket option deprecated.
[  226.427524][T15283] Use struct sctp_assoc_value instead
[  226.570092][T15292] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.620778][T15292] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.698319][T15292] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.756265][T15292] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.840861][ T5884] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.859223][ T5863] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.880405][ T5884] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.904311][ T5863] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.983422][T15295] dvmrp8: entered allmulticast mode
[  227.006345][T15295] lo speed is unknown, defaulting to 1000
[  227.046283][T15296] validate_nla: 10 callbacks suppressed
[  227.046297][T15296] netlink: 'syz.0.2566': attribute type 23 has an invalid length.
[  227.106933][T15294] dvmrp8: left allmulticast mode
[  227.146515][T15300] 8021q: adding VLAN 0 to HW filter on device bond12
[  227.200651][T15304] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  227.205011][T15304] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  227.255804][T15305] netlink: 'syz.3.2568': attribute type 10 has an invalid length.
[  227.258854][T15305] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  227.693073][  T976] page_pool_release_retry() stalled pool shutdown: id 74, 1 inflight 60 sec
[  228.058012][T15324] netlink: 'syz.3.2574': attribute type 1 has an invalid length.
[  228.116152][T15324] bond13: (slave gretap3): making interface the new active one
[  228.121438][T15324] bond13: (slave gretap3): Enslaving as an active interface with an up link
[  228.188123][T15335] dvmrp8: entered allmulticast mode
[  228.191945][T15335] dvmrp8: left allmulticast mode
[  228.214766][T15332] can: request_module (can-proto-0) failed.
[  228.276103][T15335] lo speed is unknown, defaulting to 1000
[  228.317502][T15336] netlink: 'syz.0.2576': attribute type 23 has an invalid length.
[  228.387105][T15344] lo speed is unknown, defaulting to 1000
[  228.773601][T15366] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.781499][T15366] veth0_to_bridge: entered promiscuous mode
[  228.837268][T15379] netlink: 'syz.3.2591': attribute type 11 has an invalid length.
[  228.910616][T15382] netlink: 'syz.1.2592': attribute type 20 has an invalid length.
[  228.922883][T15382] netlink: 'syz.1.2592': attribute type 20 has an invalid length.
[  228.995993][T15398] sctp: [Deprecated]: syz.3.2597 (pid 15398) Use of int in max_burst socket option.
[  228.995993][T15398] Use struct sctp_assoc_value instead
[  229.028919][T15396] netlink: 'syz.1.2596': attribute type 3 has an invalid length.
[  229.031757][T15396] __nla_validate_parse: 27 callbacks suppressed
[  229.031765][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'.
[  229.038121][T15396] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  229.041395][T15396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.118713][T15417] syzkaller0: entered promiscuous mode
[  229.120886][T15417] syzkaller0: entered allmulticast mode
[  229.595887][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'.
[  229.599255][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'.
[  229.782333][T15452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2610'.
[  229.783464][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2610'.
[  229.919072][T15457] netlink: 'syz.1.2612': attribute type 19 has an invalid length.
[  229.964016][T15462] bond10: (slave veth9): Releasing active interface
[  229.968673][T15462] bond13: (slave bond14): Releasing backup interface
[  229.972914][T15462] bond1: (slave ip6gretap4): Releasing backup interface
[  229.998266][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2613'.
[  230.001413][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2613'.
[  230.184853][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2618'.
[  230.214555][T15480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.217282][T15480] syzkaller0: entered promiscuous mode
[  230.219183][T15480] syzkaller0: entered allmulticast mode
[  230.225551][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'.
[  230.251229][T15480] tipc: Resetting bearer <eth:syzkaller0>
[  230.263972][T15479] tipc: Resetting bearer <eth:syzkaller0>
[  230.284698][T15479] tipc: Disabling bearer <eth:syzkaller0>
[  230.295444][T15486] netlink: 'syz.3.2623': attribute type 29 has an invalid length.
[  230.298032][T15488] netlink: 'syz.3.2623': attribute type 29 has an invalid length.
[  230.301108][T15488] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2623'.
[  230.346087][T15492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  230.553367][T15510] lo speed is unknown, defaulting to 1000
[  230.772077][T15536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.784026][T15536] syzkaller0: entered promiscuous mode
[  230.786027][T15536] syzkaller0: entered allmulticast mode
[  230.985612][T15552] caif0: left allmulticast mode
[  230.990230][T15552] veth0_to_bridge: left promiscuous mode
[  230.993379][T15552] veth0_to_bridge: left allmulticast mode
[  231.000469][T15552] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  231.174135][T15581] dvmrp0: entered allmulticast mode
[  231.336776][T15591] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  231.604661][T15533] tipc: Resetting bearer <eth:syzkaller0>
[  231.624265][T15533] tipc: Disabling bearer <eth:syzkaller0>
[  231.890260][T15623] ipvlan2: entered promiscuous mode
[  231.894574][T15623] bridge0: port 4(ipvlan2) entered blocking state
[  231.897457][T15623] bridge0: port 4(ipvlan2) entered disabled state
[  231.900293][T15623] ipvlan2: entered allmulticast mode
[  231.904561][T15623] erspan0: entered allmulticast mode
[  231.907984][T15623] ipvlan2: left allmulticast mode
[  231.909954][T15623] erspan0: left allmulticast mode
[  231.927105][T15621] lo speed is unknown, defaulting to 1000
[  232.781559][T15672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.803754][T15672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.835366][T15673] validate_nla: 4 callbacks suppressed
[  232.835376][T15673] netlink: 'syz.3.2673': attribute type 12 has an invalid length.
[  232.930551][T15677] mac80211_hwsim hwsim24 wlan1: left allmulticast mode
[  233.225601][T15692] netlink: 'syz.3.2679': attribute type 1 has an invalid length.
[  233.241555][T15692] 8021q: adding VLAN 0 to HW filter on device bond14
[  233.308680][T15696] syzkaller0: entered promiscuous mode
[  233.310937][T15696] syzkaller0: entered allmulticast mode
[  233.421272][T15699] netlink: 'syz.3.2681': attribute type 1 has an invalid length.
[  233.440220][T15699] 8021q: adding VLAN 0 to HW filter on device bond15
[  233.449894][T15699] bond_slave_0: entered promiscuous mode
[  233.451949][T15699] bond_slave_1: entered promiscuous mode
[  233.454656][T15699] team_slave_0: entered promiscuous mode
[  233.456783][T15699] team_slave_1: entered promiscuous mode
[  233.459241][T15699] macsec1: entered promiscuous mode
[  233.461052][T15699] bond0: entered promiscuous mode
[  233.463177][T15699] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode
[  233.465617][T15699] team0: entered promiscuous mode
[  233.469230][T15699] bond0: left promiscuous mode
[  233.471145][T15699] mac80211_hwsim hwsim24 wlan1: left promiscuous mode
[  233.473590][T15699] team0: left promiscuous mode
[  233.475752][T15699] bond_slave_0: left promiscuous mode
[  233.477581][T15699] bond_slave_1: left promiscuous mode
[  233.479472][T15699] team_slave_0: left promiscuous mode
[  233.481220][T15699] team_slave_1: left promiscuous mode
[  233.513176][T15702] netlink: 'syz.0.2682': attribute type 1 has an invalid length.
[  233.807771][T15726] syzkaller1: entered promiscuous mode
[  233.810190][T15726] syzkaller1: entered allmulticast mode
[  233.949356][T15734] netlink: 'syz.0.2692': attribute type 4 has an invalid length.
[  233.956508][T15736] netlink: 'syz.0.2692': attribute type 4 has an invalid length.
[  233.959695][T15734] netlink: 'syz.0.2692': attribute type 4 has an invalid length.
[  234.048046][T15743] __nla_validate_parse: 32 callbacks suppressed
[  234.048061][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'.
[  234.056699][T15742] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2694'.
[  234.067610][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2695'.
[  234.075981][T15745] netlink: 'syz.1.2694': attribute type 10 has an invalid length.
[  234.153089][T15753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2697'.
[  234.157501][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'.
[  234.171912][T15758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2698'.
[  234.201286][T15758] netlink: 'syz.3.2698': attribute type 10 has an invalid length.
[  234.248282][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'.
[  234.297529][T15766] bridge16: port 1(veth1) entered blocking state
[  234.300097][T15766] bridge16: port 1(veth1) entered disabled state
[  234.303136][T15766] veth1: entered allmulticast mode
[  234.305868][T15766] veth1: entered promiscuous mode
[  234.313104][T15771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.320693][T15766] bridge16: port 2(veth0_to_bond) entered blocking state
[  234.326736][T15766] bridge16: port 2(veth0_to_bond) entered disabled state
[  234.329229][T15766] veth0_to_bond: entered allmulticast mode
[  234.332552][T15766] veth0_to_bond: entered promiscuous mode
[  234.346680][T15766] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2700'.
[  234.357167][T15773] sctp: [Deprecated]: syz.1.2703 (pid 15773) Use of int in max_burst socket option deprecated.
[  234.357167][T15773] Use struct sctp_assoc_value instead
[  234.377251][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'.
[  234.451983][T15777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.519624][T15789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2708'.
[  234.619409][T15798] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  234.629803][T15798] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  234.633834][T15800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.636972][T15800] syzkaller0: entered promiscuous mode
[  234.638962][T15800] syzkaller0: entered allmulticast mode
[  234.654880][T15800] tipc: Resetting bearer <eth:syzkaller0>
[  234.659204][T15799] tipc: Resetting bearer <eth:syzkaller0>
[  234.672850][T15799] tipc: Disabling bearer <eth:syzkaller0>
[  234.676199][T15803] netlink: 'syz.1.2710': attribute type 10 has an invalid length.
[  234.681962][T15803] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  235.538212][T15847] openvswitch: netlink: Flow key attr not present in new flow.
[  235.675491][T15861] lo speed is unknown, defaulting to 1000
[  235.878010][T15825] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  236.332000][T15913] 8021q: adding VLAN 0 to HW filter on device bond17
[  236.351790][T15913] bond17: (slave geneve5): making interface the new active one
[  236.356560][T15913] bond17: (slave geneve5): Enslaving as an active interface with an up link
[  236.360130][ T5863] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.364563][ T5863] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.368459][ T5863] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.371300][ T5863] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.402353][T15918] syzkaller0: left promiscuous mode
[  236.404418][T15918] syzkaller0: left allmulticast mode
[  236.406434][T15918] tipc: Resetting bearer <eth:syzkaller0>
[  236.456975][T15925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.459769][T15925] syzkaller0: entered promiscuous mode
[  236.461766][T15925] syzkaller0: entered allmulticast mode
[  236.475917][T15925] tipc: Resetting bearer <eth:syzkaller0>
[  236.479468][T15924] tipc: Resetting bearer <eth:syzkaller0>
[  236.489956][T15924] tipc: Disabling bearer <eth:syzkaller0>
[  236.647477][T15931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.650407][T15932] syzkaller0: entered promiscuous mode
[  236.652835][T15932] syzkaller0: entered allmulticast mode
[  236.668511][T15932] tipc: Resetting bearer <eth:syzkaller0>
[  236.680256][T15932] tipc: Resetting bearer <eth:syzkaller0>
[  236.697372][T15932] tipc: Disabling bearer <eth:syzkaller0>
[  237.011359][T15942] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  237.167376][T15949] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.219127][T15949] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.266301][T15949] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.317420][T15949] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.386975][ T6230] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.399745][ T6230] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.413735][ T6230] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.425311][ T5873] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.879848][T15974] netlink: 'syz.3.2762': attribute type 11 has an invalid length.
[  238.173875][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  238.580064][T15982] syzkaller1: entered promiscuous mode
[  238.584524][T15982] syzkaller1: entered allmulticast mode
[  238.751574][T15990] syzkaller1: entered promiscuous mode
[  238.754020][T15990] syzkaller1: entered allmulticast mode
[  238.881857][T15992] validate_nla: 6 callbacks suppressed
[  238.881868][T15992] netlink: 'syz.0.2767': attribute type 3 has an invalid length.
[  239.068781][T15994] __nla_validate_parse: 50 callbacks suppressed
[  239.068791][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.089041][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.098766][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.107760][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.111839][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.123885][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.127409][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.130426][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.134810][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.138071][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  239.143660][T15994] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  239.213635][ T5884] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.218126][ T5884] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.220992][ T5884] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.224306][ T5884] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.318866][ T5863] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  239.449956][T16012] netlink: 'syz.0.2771': attribute type 8 has an invalid length.
[  239.656760][T16034] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  239.660703][T16026] netlink: 'syz.0.2776': attribute type 13 has an invalid length.
[  240.033691][T16053] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  240.980709][T16062] syzkaller1: entered promiscuous mode
[  240.988082][T16062] syzkaller1: entered allmulticast mode
[  240.999682][T16067] netlink: 'syz.1.2788': attribute type 4 has an invalid length.
[  241.231856][T16080] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  241.243597][T16080] bond0: (slave team0): Releasing backup interface
[  241.255408][T16080] bridge_slave_0: left allmulticast mode
[  241.257413][T16080] bridge_slave_0: left promiscuous mode
[  241.259384][T16080] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.264407][T16080] bridge_slave_1: left allmulticast mode
[  241.266655][T16080] bridge_slave_1: left promiscuous mode
[  241.268995][T16080] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.280570][T16080] bond0: (slave bond_slave_0): Releasing backup interface
[  241.293265][T16080] bond0: (slave bond_slave_1): Releasing backup interface
[  241.304457][T16080] team0: Port device team_slave_0 removed
[  241.310630][T16080] team0: Port device team_slave_1 removed
[  241.316964][T16080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.320102][T16080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.326907][T16080] batman_adv: batadv0: Removing interface: virt_wifi0
[  241.337924][T16080] bond6: (slave wlan0): Releasing active interface
[  241.341550][T16090] openvswitch: netlink: Message has 20 unknown bytes.
[  241.345978][T16090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.350260][T16080] bond0: (slave wlan1): Releasing backup interface
[  241.368178][T16080] bond2: left allmulticast mode
[  241.370344][T16080] bond2: left promiscuous mode
[  241.374618][T16080] bridge0: port 3(bond2) entered disabled state
[  241.385215][T16080] bond5: (slave ip6gretap1): Releasing active interface
[  241.392505][T16080] bond7: (slave wireguard0): Releasing backup interface
[  241.395476][T16080] wireguard0: left promiscuous mode
[  241.398538][T16080] bond7: (slave wireguard1): making interface the new active one
[  241.401546][T16080] wireguard1: entered promiscuous mode
[  241.406987][T16096] netlink: 'syz.3.2792': attribute type 10 has an invalid length.
[  241.413444][T16080] bond7: (slave wireguard1): Releasing backup interface
[  241.416213][T16080] wireguard1: left promiscuous mode
[  241.420574][T16080] bond9: (slave geneve3): Releasing active interface
[  241.427773][T16080] bond13: (slave gretap3): Releasing active interface
[  241.455295][T16096] mac80211_hwsim hwsim24 wlan1: left allmulticast mode
[  241.463991][T16080] netlink: 'syz.3.2792': attribute type 11 has an invalid length.
[  241.467138][T16080] netlink: 'syz.3.2792': attribute type 4 has an invalid length.
[  241.467755][T16096] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.474431][T16096] bond0: (slave wlan1): Opening slave failed
[  241.478740][ T6230] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.482018][ T6230] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.487609][  T795] syz0: Port: 1 Link DOWN
[  241.488343][T16080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.489618][ T6230] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.498595][ T6230] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  241.508027][T16080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.849443][T16114] netlink: 'syz.1.2801': attribute type 7 has an invalid length.
[  241.942369][T16122] netlink: 'syz.0.2803': attribute type 8 has an invalid length.
[  241.979372][T16125] team0: Device C is loopback device. Loopback devices can't be added as a team port
[  241.985747][T16125] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  242.349878][T16156] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  242.406387][T16156] lo speed is unknown, defaulting to 1000
[  242.466011][T16156] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.611046][T16164] lo speed is unknown, defaulting to 1000
[  242.777893][T16176] netlink: 'syz.1.2816': attribute type 4 has an invalid length.
[  242.777909][T16177] netlink: 'syz.1.2816': attribute type 4 has an invalid length.
[  242.789166][ T5897] lo speed is unknown, defaulting to 1000
[  242.791103][ T5897] syz2: Port: 1 Link ACTIVE
[  242.795848][T16179] batadv0: entered allmulticast mode
[  242.798481][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.831350][T16181] bond0: (slave gretap0): Error: Device type is different from other slaves
[  242.920801][T16197] delete_channel: no stack
[  242.982806][T16204] vlan1: entered promiscuous mode
[  242.988256][T16204] vlan1: entered allmulticast mode
[  242.990290][T16204] veth0_vlan: entered allmulticast mode
[  243.096929][T16218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.100149][T16218] syzkaller0: entered promiscuous mode
[  243.103386][T16218] syzkaller0: entered allmulticast mode
[  243.106057][T16220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  243.144901][T16217] tipc: Resetting bearer <eth:syzkaller0>
[  243.161002][T16217] tipc: Disabling bearer <eth:syzkaller0>
[  243.817175][T16272] ip6gretap5: entered allmulticast mode
[  243.946140][T16283] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  243.949074][T16283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.958978][T16283] netlink: 'syz.3.2852': attribute type 11 has an invalid length.
[  244.149798][T16303] __nla_validate_parse: 161 callbacks suppressed
[  244.149808][T16303] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2858'.
[  244.156536][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'.
[  244.165116][T16303] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.168433][T16303] veth0_to_bridge: entered promiscuous mode
[  244.170522][T16303] veth0_to_bridge: entered allmulticast mode
[  244.213658][T16307] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  244.527506][T16331] lo speed is unknown, defaulting to 1000
[  244.623575][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2867'.
[  244.666505][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'.
[  244.866983][T16337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2868'.
[  244.964968][T16341] syzkaller1: entered promiscuous mode
[  244.967015][T16341] syzkaller1: entered allmulticast mode
[  245.119049][T16348] validate_nla: 2 callbacks suppressed
[  245.119066][T16348] netlink: 'syz.3.2871': attribute type 2 has an invalid length.
[  245.147248][T16348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2871'.
[  245.200703][T16356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2874'.
[  245.208037][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  245.213736][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  245.217830][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  245.368969][T16374] bond0: entered promiscuous mode
[  245.371341][T16374] bond0: left promiscuous mode
[  245.418095][T16374] bond0: entered promiscuous mode
[  245.421483][T16374] bond0: left promiscuous mode
[  245.828492][T16407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.018905][T16420] veth0_to_bond: left allmulticast mode
[  246.021368][T16420] veth0_to_bond: left promiscuous mode
[  246.025148][T16420] bridge16: port 2(veth0_to_bond) entered disabled state
[  246.036653][T16420] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  246.440395][T16470] lo speed is unknown, defaulting to 1000
[  246.498507][T16469] lo speed is unknown, defaulting to 1000
[  246.695675][T16478] lo speed is unknown, defaulting to 1000
[  246.800516][T16489] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  247.013940][T16499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  247.017108][T16499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  247.057513][T16504] netlink: 'syz.0.2912': attribute type 4 has an invalid length.
[  247.119393][T16507] netlink: 'syz.0.2912': attribute type 4 has an invalid length.
[  247.888817][T16519] netlink: 'syz.1.2914': attribute type 1 has an invalid length.
[  247.909194][T16519] 8021q: adding VLAN 0 to HW filter on device bond18
[  248.016758][T16528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.023810][T16528] veth0_to_bridge: entered promiscuous mode
[  248.025736][T16528] veth0_to_bridge: entered allmulticast mode
[  248.044384][T16527] tipc: Disabling bearer <eth:syzkaller0>
[  248.230540][T16540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.243629][T16540] syzkaller0: entered promiscuous mode
[  248.245763][T16540] syzkaller0: entered allmulticast mode
[  248.251972][T16540] tipc: Resetting bearer <eth:syzkaller0>
[  248.266727][T16543] dvmrp8: entered allmulticast mode
[  248.269136][T16538] tipc: Resetting bearer <eth:syzkaller0>
[  248.280704][T16538] tipc: Disabling bearer <eth:syzkaller0>
[  248.303516][T16543] lo speed is unknown, defaulting to 1000
[  248.333867][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  248.358992][T16544] netlink: 'syz.0.2926': attribute type 23 has an invalid length.
[  248.419097][T16541] dvmrp8: left allmulticast mode
[  248.501323][T16552] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  248.508742][T16552] bond11: (slave macvlan5): Enslaving as a backup interface with a down link
[  248.558763][T16552] bond11: (slave macvlan5): Releasing backup interface
[  248.604413][T16555] syzkaller0: entered promiscuous mode
[  248.606244][T16555] syzkaller0: entered allmulticast mode
[  248.626437][T16554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.650802][T16555] syzkaller0: left allmulticast mode
[  248.755575][T16556] tipc: Resetting bearer <eth:syzkaller0>
[  248.766996][T16556] tipc: Disabling bearer <eth:syzkaller0>
[  248.884860][T16578] dvmrp8: entered allmulticast mode
[  248.921011][T16582] lo speed is unknown, defaulting to 1000
[  248.958862][T16581] lo speed is unknown, defaulting to 1000
[  249.130629][T16578] dvmrp8: left allmulticast mode
[  249.172523][T16590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.175681][T16590] IPv6: NLM_F_CREATE should be set when creating new route
[  249.178725][T16590] IPv6: NLM_F_CREATE should be set when creating new route
[  249.194425][T16590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.235164][T16594] netlink: 'syz.3.2940': attribute type 1 has an invalid length.
[  249.250458][T16594] 8021q: adding VLAN 0 to HW filter on device bond16
[  249.293906][T16597] netlink: 'syz.1.2941': attribute type 4 has an invalid length.
[  249.335410][T16600] siw: device registration error -23
[  249.339454][T16600] __nla_validate_parse: 43 callbacks suppressed
[  249.339462][T16600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2942'.
[  249.348368][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'.
[  249.358267][T16603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2943'.
[  249.379972][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'.
[  249.434228][T16606] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2944'.
[  249.439255][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'.
[  249.546647][T16613] lo speed is unknown, defaulting to 1000
[  249.601394][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'.
[  249.612529][T16622] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2949'.
[  249.620697][T16622] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2949'.
[  249.705896][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'.
[  249.829123][T16637] lo speed is unknown, defaulting to 1000
[  250.145647][T16656] x_tables: ip_tables: udp match: only valid for protocol 17
[  250.195542][T16662] netlink: 'syz.1.2962': attribute type 5 has an invalid length.
[  250.439185][T16683] netlink: 'syz.0.2966': attribute type 2 has an invalid length.
[  250.447593][T16683] netlink: 'syz.0.2966': attribute type 8 has an invalid length.
[  250.499638][T16687] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  250.502052][T16687] macvlan6: entered allmulticast mode
[  250.505587][T16687] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  250.574832][T16692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.595263][T16692] syzkaller0: entered promiscuous mode
[  250.599172][T16692] syzkaller0: entered allmulticast mode
[  250.627712][T16691] tipc: Resetting bearer <eth:syzkaller0>
[  250.643789][T16691] tipc: Disabling bearer <eth:syzkaller0>
[  250.654464][T16700] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.657791][T16700] syzkaller0: entered promiscuous mode
[  250.659700][T16700] syzkaller0: entered allmulticast mode
[  250.661871][T16700] tipc: Resetting bearer <eth:syzkaller0>
[  251.624033][T16745] syzkaller1: entered promiscuous mode
[  251.626360][T16745] syzkaller1: entered allmulticast mode
[  251.661500][T16746] netlink: 'syz.3.2980': attribute type 2 has an invalid length.
[  251.906445][T16765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.027903][T16773] lo speed is unknown, defaulting to 1000
[  252.043646][T16769] netlink: 'syz.1.2987': attribute type 1 has an invalid length.
[  252.199639][T16791] lo speed is unknown, defaulting to 1000
[  252.234296][T16793] bridge10: entered promiscuous mode
[  252.236030][T16793] bridge10: entered allmulticast mode
[  252.253173][T16795] bridge11: entered promiscuous mode
[  252.255026][T16795] bridge11: entered allmulticast mode
[  252.303571][T16799] lo speed is unknown, defaulting to 1000
[  252.496572][T16815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.728716][T16830] IPv6: sit4: Disabled Multicast RS
[  252.785522][T16836] pim6reg1: entered promiscuous mode
[  252.787739][T16836] pim6reg1: entered allmulticast mode
[  252.923844][T16842] netlink: 'syz.0.3007': attribute type 1 has an invalid length.
[  252.938264][T16844] dvmrp8: entered allmulticast mode
[  253.013940][T16849] lo speed is unknown, defaulting to 1000
[  253.101233][T16856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.160612][T16856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.219501][T16856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.226354][T16861] netlink: 'syz.0.3014': attribute type 15 has an invalid length.
[  253.615831][T16880] netlink: 'syz.0.3020': attribute type 21 has an invalid length.
[  253.619929][T16880] gretap0: Device is already in use.
[  253.671798][T16882] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  253.746678][T16887] netlink: 'syz.3.3023': attribute type 1 has an invalid length.
[  253.761857][T16887] 8021q: adding VLAN 0 to HW filter on device bond17
[  253.765853][T16843] dvmrp8: left allmulticast mode
[  253.789176][T16887] 8021q: adding VLAN 0 to HW filter on device bond17
[  253.791565][T16887] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  253.796430][T16887] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  253.877196][T16891] bond17: (slave bridge8): Enslaving as an active interface with a down link
[  254.039433][T16902] lo speed is unknown, defaulting to 1000
[  254.100443][T16898] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  254.373113][T16936] netlink: 'syz.1.3036': attribute type 9 has an invalid length.
[  254.397829][T16936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.196126][T16992] __nla_validate_parse: 24 callbacks suppressed
[  255.196147][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'.
[  255.271577][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3042'.
[  255.391334][T17003] digital: digital_start_poll: Unknown protocol
[  255.402612][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'.
[  255.454349][ T1365] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  255.981244][T17012] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3048'.
[  255.993027][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'.
[  256.009388][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3047'.
[  256.021174][T17009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3047'.
[  256.037117][T17018] validate_nla: 1 callbacks suppressed
[  256.037127][T17018] netlink: 'syz.1.3049': attribute type 2 has an invalid length.
[  256.104607][T17023] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  256.176507][T17028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.181503][T17028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.246208][T17034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.279094][T17028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.285686][T17028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.378731][T17028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.384925][T17028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.396668][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'.
[  256.467117][T17028] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  256.494864][T17028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.508979][T17028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.577594][T17045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.581223][T17045] syzkaller0: entered promiscuous mode
[  256.585923][T17045] syzkaller0: entered allmulticast mode
[  256.615549][T17045] tipc: Resetting bearer <eth:syzkaller0>
[  256.617645][ T5863] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  256.621181][ T5863] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.635769][T17044] tipc: Resetting bearer <eth:syzkaller0>
[  256.648225][T17044] tipc: Disabling bearer <eth:syzkaller0>
[  256.651908][ T5863] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  256.655307][ T5863] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.668580][ T5863] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  256.671453][ T5863] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.684666][ T5863] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  256.687240][ T5863] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.725361][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.814992][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3064'.
[  256.828949][T17068] netlink: 'syz.1.3067': attribute type 1 has an invalid length.
[  256.858971][T17068] 8021q: adding VLAN 0 to HW filter on device bond19
[  256.867588][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  256.995701][T17087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.038528][T17089] dvmrp8: entered allmulticast mode
[  257.051609][T17089] lo speed is unknown, defaulting to 1000
[  257.266216][T17096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.269780][T17096] syzkaller0: entered promiscuous mode
[  257.273209][T17096] syzkaller0: entered allmulticast mode
[  257.288936][T17096] tipc: Resetting bearer <eth:syzkaller0>
[  257.293996][T17095] tipc: Resetting bearer <eth:syzkaller0>
[  257.305906][T17095] tipc: Disabling bearer <eth:syzkaller0>
[  258.018661][T17107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.023090][T17107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.031156][T17109] sctp: [Deprecated]: syz.0.3079 (pid 17109) Use of int in max_burst socket option.
[  258.031156][T17109] Use struct sctp_assoc_value instead
[  258.110388][T17113] sctp: [Deprecated]: syz.1.3081 (pid 17113) Use of int in max_burst socket option deprecated.
[  258.110388][T17113] Use struct sctp_assoc_value instead
[  258.215591][T17117] veth0_to_bridge: left promiscuous mode
[  258.219002][T17117] vlan1: left promiscuous mode
[  258.220924][T17117] syzkaller0: left promiscuous mode
[  258.224014][T17117] tipc: Resetting bearer <eth:syzkaller0>
[  258.226342][T17117] tipc: Resetting bearer <eth:syzkaller0>
[  258.228984][T17117] geneve4: left promiscuous mode
[  258.232862][T17117] bond16: left promiscuous mode
[  258.236709][T17117] bridge10: left promiscuous mode
[  258.238771][T17117] bridge11: left promiscuous mode
[  258.244060][T17117] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  258.299105][T17122] netlink: 'syz.1.3083': attribute type 4 has an invalid length.
[  258.305946][   T24] lo speed is unknown, defaulting to 1000
[  258.308465][T17122] netlink: 'syz.1.3083': attribute type 4 has an invalid length.
[  258.312247][   T24] syz2: Port: 1 Link DOWN
[  258.316076][   T24] lo speed is unknown, defaulting to 1000
[  258.318614][   T24] syz2: Port: 1 Link ACTIVE
[  258.318807][T17122] netlink: 'syz.1.3083': attribute type 23 has an invalid length.
[  258.462533][T17128] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.466751][T17128] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.789998][T17130] netlink: 'syz.0.3086': attribute type 1 has an invalid length.
[  258.790116][T17131] netlink: 'syz.0.3086': attribute type 1 has an invalid length.
[  258.796837][T17131] netlink: 'syz.0.3086': attribute type 2 has an invalid length.
[  258.799677][T17130] netlink: 'syz.0.3086': attribute type 2 has an invalid length.
[  258.837522][T17134] netlink: 'syz.0.3087': attribute type 1 has an invalid length.
[  258.845449][T17135] bond1: (slave vcan0): The slave device specified does not support setting the MAC address
[  258.850831][T17135] bond1: (slave vcan0): Error -95 calling set_mac_address
[  258.901437][T17134] dvmrp0: entered allmulticast mode
[  258.991626][T17144] sctp: [Deprecated]: syz.0.3088 (pid 17144) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.991626][T17144] Use struct sctp_sack_info instead
[  259.331915][T17160] 8021q: adding VLAN 0 to HW filter on device bond20
[  259.341494][T17160] macvlan2: entered promiscuous mode
[  259.344444][T17160] macvlan2: entered allmulticast mode
[  259.346867][T17160] bond20: entered promiscuous mode
[  259.349698][T17160] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  259.353430][T17160] bond20: left promiscuous mode
[  259.985044][T17207] IPv6: NLM_F_CREATE should be specified when creating new route
[  260.317900][T17231] __nla_validate_parse: 10 callbacks suppressed
[  260.317916][T17231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3105'.
[  260.354235][T17238] openvswitch: netlink: IPv6 tunnel dst address is zero
[  260.549742][T17259] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3113'.
[  260.554219][T17259] NCSI netlink: No device for ifindex 0
[  260.558436][T17260] tipc: New replicast peer: 255.255.255.255
[  260.561095][T17260] tipc: Enabled bearer <udp:syz2>, priority 10
[  260.578402][T17259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3113'.
[  260.581578][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3113'.
[  260.585364][T17259] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3113'.
[  260.588462][T17259] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3113'.
[  260.765574][T17262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3115'.
[  260.846123][T17268] macvlan1: entered allmulticast mode
[  260.848591][T17268] veth1_vlan: entered allmulticast mode
[  260.858766][T17268] macvlan1: entered promiscuous mode
[  260.860856][T17268] team0: Port device macvlan1 added
[  260.871663][T17268] veth1_vlan: left allmulticast mode
[  260.879729][T17268] tipc: Resetting bearer <eth:syzkaller0>
[  260.906987][  T976] lo speed is unknown, defaulting to 1000
[  260.908988][  T976] syz2: Port: 1 Link DOWN
[  260.910454][ T6230] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.915940][ T6230] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.922734][ T6230] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.925859][ T6230] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.928794][ T6230] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.931539][ T6230] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.937761][ T6230] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.940469][ T6230] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  260.952367][T17275] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3118'.
[  260.972816][T17268] geneve6: entered promiscuous mode
[  260.975039][T17268] geneve6: entered allmulticast mode
[  260.981494][ T6230] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  260.987544][ T6230] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  260.992580][ T6230] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  260.996041][ T6230] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  261.006985][T17279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3120'.
[  261.021464][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'.
[  261.058148][T17287] syzkaller1: entered promiscuous mode
[  261.060379][T17287] syzkaller1: entered allmulticast mode
[  261.137865][T17291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.140983][T17291] syzkaller0: entered promiscuous mode
[  261.147823][T17291] syzkaller0: entered allmulticast mode
[  261.178654][T17291] tipc: Resetting bearer <eth:syzkaller0>
[  261.183182][T17290] tipc: Resetting bearer <eth:syzkaller0>
[  261.188243][T17293] validate_nla: 39 callbacks suppressed
[  261.188256][T17293] netlink: 'syz.1.3126': attribute type 1 has an invalid length.
[  261.201357][T17290] tipc: Disabling bearer <eth:syzkaller0>
[  261.216860][T17293] bond21: entered promiscuous mode
[  261.218960][T17293] 8021q: adding VLAN 0 to HW filter on device bond21
[  261.231970][T17293] 8021q: adding VLAN 0 to HW filter on device bond21
[  261.235166][T17293] bond21: (slave wireguard1): The slave device specified does not support setting the MAC address
[  261.239110][T17293] bond21: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  261.246544][T17293] bond21: (slave wireguard1): making interface the new active one
[  261.249650][T17293] wireguard1: entered promiscuous mode
[  261.252960][T17293] bond21: (slave wireguard1): Enslaving as an active interface with an up link
[  261.275976][T17297] openvswitch: netlink: Message has 20 unknown bytes.
[  261.278454][T17297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.289031][T17300] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  261.362375][T17304] netlink: 'syz.1.3129': attribute type 7 has an invalid length.
[  261.521258][T17325] RDS: rds_bind could not find a transport for fe80::2f, load rds_tcp or rds_rdma?
[  261.532452][T17325] netlink: 'syz.1.3134': attribute type 29 has an invalid length.
[  261.536261][T17325] netlink: 'syz.1.3134': attribute type 29 has an invalid length.
[  262.581913][T17362] bond0: option arp_validate: invalid value (18446744073491447809)
[  262.919162][T17391] netlink: 'syz.0.3155': attribute type 1 has an invalid length.
[  262.958171][T17391] 8021q: adding VLAN 0 to HW filter on device bond18
[  263.016604][T17404] delete_channel: no stack
[  263.027114][T17396] netlink: 'syz.1.3156': attribute type 8 has an invalid length.
[  263.180425][T17410] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20005
[  263.185822][T17408] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20005
[  263.768048][T17448] netlink: 'syz.3.3172': attribute type 21 has an invalid length.
[  263.771188][T17448] netlink: 'syz.3.3172': attribute type 5 has an invalid length.
[  263.775691][T17448] netlink: 'syz.3.3172': attribute type 6 has an invalid length.
[  263.837946][T17450] lo speed is unknown, defaulting to 1000
[  264.227268][T17482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.230816][T17483] syzkaller0: entered promiscuous mode
[  264.235456][T17483] tipc: Resetting bearer <eth:syzkaller0>
[  264.291245][T17487] netlink: 'syz.3.3182': attribute type 3 has an invalid length.
[  264.305617][T17487] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.309791][T17487] 8021q: adding VLAN 0 to HW filter on device team0
[  264.315462][T17487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.499900][ T5854] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  264.524577][T17504] lo speed is unknown, defaulting to 1000
[  264.539523][T17507] macsec1: entered promiscuous mode
[  264.541399][T17507] macsec1: entered allmulticast mode
[  265.551474][T17547] __nla_validate_parse: 52 callbacks suppressed
[  265.551489][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3198'.
[  265.565512][T17548] pimreg3: entered allmulticast mode
[  265.647722][T17550] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3199'.
[  265.650832][T17550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3199'.
[  265.770792][T17556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.775095][T17556] syzkaller0: entered promiscuous mode
[  265.777098][T17556] syzkaller0: entered allmulticast mode
[  265.788920][T17555] tipc: Resetting bearer <eth:syzkaller0>
[  265.799527][T17555] tipc: Disabling bearer <eth:syzkaller0>
[  265.913766][T17560] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3203'.
[  265.970350][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'.
[  265.986852][T17544] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  266.135219][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3207'.
[  266.286697][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'.
[  266.296234][T17585] validate_nla: 3 callbacks suppressed
[  266.296244][T17585] netlink: 'syz.1.3211': attribute type 1 has an invalid length.
[  266.370627][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'.
[  266.402681][T17595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3214'.
[  266.458109][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'.
[  266.464163][T17596] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  266.467071][T17596] CPU: 0 UID: 0 PID: 17596 Comm: syz.1.3214 Not tainted syzkaller #0 PREEMPT(full) 
[  266.467083][T17596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.467088][T17596] Call Trace:
[  266.467091][T17596]  <TASK>
[  266.467095][T17596]  dump_stack_lvl+0x189/0x250
[  266.467109][T17596]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.467118][T17596]  ? __pfx__printk+0x10/0x10
[  266.467130][T17596]  ? kernfs_path_from_node+0x2f/0x290
[  266.467139][T17596]  ? kernfs_path_from_node+0x250/0x290
[  266.467145][T17596]  ? kernfs_path_from_node+0x2f/0x290
[  266.467154][T17596]  sysfs_warn_dup+0x8e/0xa0
[  266.467163][T17596]  sysfs_do_create_link_sd+0xc0/0x110
[  266.467172][T17596]  device_add_class_symlinks+0x1cf/0x240
[  266.467181][T17596]  device_add+0x475/0xb50
[  266.467190][T17596]  wiphy_register+0x1ba6/0x28d0
[  266.467205][T17596]  ? __pfx_wiphy_register+0x10/0x10
[  266.467212][T17596]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  266.467225][T17596]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  266.467238][T17596]  ieee80211_register_hw+0x3425/0x4080
[  266.467254][T17596]  ? ieee80211_register_hw+0x1431/0x4080
[  266.467265][T17596]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  266.467276][T17596]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  266.467290][T17596]  ? __hrtimer_setup+0x187/0x210
[  266.467297][T17596]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  266.467309][T17596]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  266.467330][T17596]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  266.467338][T17596]  ? trace_kmalloc+0x1f/0xd0
[  266.467345][T17596]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  266.467354][T17596]  ? kstrndup+0xbf/0x160
[  266.467365][T17596]  hwsim_new_radio_nl+0xea4/0x1b10
[  266.467375][T17596]  ? __pfx___nla_validate_parse+0x10/0x10
[  266.467392][T17596]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.467407][T17596]  ? __nla_parse+0x40/0x60
[  266.467419][T17596]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  266.467432][T17596]  genl_family_rcv_msg_doit+0x215/0x300
[  266.467443][T17596]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  266.467457][T17596]  ? bpf_lsm_capable+0x9/0x20
[  266.467466][T17596]  ? security_capable+0x7e/0x2e0
[  266.467478][T17596]  genl_rcv_msg+0x60e/0x790
[  266.467489][T17596]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.467497][T17596]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  266.467512][T17596]  netlink_rcv_skb+0x208/0x470
[  266.467518][T17596]  ? __lock_acquire+0xab9/0xd20
[  266.467529][T17596]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.467538][T17596]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.467552][T17596]  ? down_read+0x1ad/0x2e0
[  266.467561][T17596]  genl_rcv+0x28/0x40
[  266.467568][T17596]  netlink_unicast+0x82f/0x9e0
[  266.467581][T17596]  ? __pfx_netlink_unicast+0x10/0x10
[  266.467591][T17596]  ? netlink_sendmsg+0x642/0xb30
[  266.467597][T17596]  ? skb_put+0x11b/0x210
[  266.467605][T17596]  netlink_sendmsg+0x805/0xb30
[  266.467616][T17596]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.467624][T17596]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.467631][T17596]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.467638][T17596]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.467644][T17596]  __sock_sendmsg+0x21c/0x270
[  266.467655][T17596]  ____sys_sendmsg+0x505/0x830
[  266.467665][T17596]  ? __pfx_____sys_sendmsg+0x10/0x10
[  266.467676][T17596]  ? import_iovec+0x74/0xa0
[  266.467686][T17596]  ___sys_sendmsg+0x21f/0x2a0
[  266.467694][T17596]  ? __pfx____sys_sendmsg+0x10/0x10
[  266.467717][T17596]  ? __fget_files+0x2a/0x420
[  266.467723][T17596]  ? __fget_files+0x3a0/0x420
[  266.467733][T17596]  __x64_sys_sendmsg+0x19b/0x260
[  266.467742][T17596]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  266.467754][T17596]  ? rcu_is_watching+0x15/0xb0
[  266.467763][T17596]  ? do_syscall_64+0xbe/0x3b0
[  266.467772][T17596]  do_syscall_64+0xfa/0x3b0
[  266.467778][T17596]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.467784][T17596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.467791][T17596]  ? exc_page_fault+0x9f/0xf0
[  266.467798][T17596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.467804][T17596] RIP: 0033:0x7fa98298ebe9
[  266.467811][T17596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  266.467817][T17596] RSP: 002b:00007fa983836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  266.467826][T17596] RAX: ffffffffffffffda RBX: 00007fa982bc6090 RCX: 00007fa98298ebe9
[  266.467831][T17596] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  266.467835][T17596] RBP: 00007fa982a11e19 R08: 0000000000000000 R09: 0000000000000000
[  266.467839][T17596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.467843][T17596] R13: 00007fa982bc6128 R14: 00007fa982bc6090 R15: 00007ffff86eaaf8
[  266.467855][T17596]  </TASK>
[  267.318398][T17644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.679011][T17669] openvswitch: netlink: IP tunnel dst address not specified
[  267.707872][T17671] netlink: zone id is out of range
[  267.710234][T17671] netlink: zone id is out of range
[  267.713559][T17671] netlink: zone id is out of range
[  267.716428][T17671] netlink: zone id is out of range
[  267.718656][T17671] netlink: zone id is out of range
[  267.720893][T17671] netlink: zone id is out of range
[  267.723240][T17671] netlink: zone id is out of range
[  267.725449][T17671] netlink: zone id is out of range
[  267.727643][T17671] netlink: zone id is out of range
[  267.810900][T17681] ipvlan3: entered promiscuous mode
[  268.165618][T17696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  268.205626][T17700] veth0_to_bond: entered allmulticast mode
[  268.219757][T17700] netlink: 'syz.3.3247': attribute type 1 has an invalid length.
[  268.237792][T17700] IPVS: Scheduler module ip_vs_sip not found
[  268.467026][T17721] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  268.470335][T17721] CPU: 1 UID: 0 PID: 17721 Comm: syz.1.3253 Not tainted syzkaller #0 PREEMPT(full) 
[  268.470350][T17721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.470357][T17721] Call Trace:
[  268.470363][T17721]  <TASK>
[  268.470368][T17721]  dump_stack_lvl+0x189/0x250
[  268.470388][T17721]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.470399][T17721]  ? __pfx__printk+0x10/0x10
[  268.470417][T17721]  ? kernfs_path_from_node+0x2f/0x290
[  268.470428][T17721]  ? kernfs_path_from_node+0x250/0x290
[  268.470438][T17721]  ? kernfs_path_from_node+0x2f/0x290
[  268.470453][T17721]  sysfs_warn_dup+0x8e/0xa0
[  268.470466][T17721]  sysfs_do_create_link_sd+0xc0/0x110
[  268.470481][T17721]  device_add_class_symlinks+0x1cf/0x240
[  268.470496][T17721]  device_add+0x475/0xb50
[  268.470511][T17721]  wiphy_register+0x1ba6/0x28d0
[  268.470537][T17721]  ? __pfx_wiphy_register+0x10/0x10
[  268.470548][T17721]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  268.470569][T17721]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  268.470588][T17721]  ieee80211_register_hw+0x3425/0x4080
[  268.470615][T17721]  ? ieee80211_register_hw+0x1431/0x4080
[  268.470637][T17721]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  268.470655][T17721]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.470678][T17721]  ? __hrtimer_setup+0x187/0x210
[  268.470689][T17721]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  268.470708][T17721]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  268.470747][T17721]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  268.470762][T17721]  ? trace_kmalloc+0x1f/0xd0
[  268.470774][T17721]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  268.470790][T17721]  ? kstrndup+0xbf/0x160
[  268.470810][T17721]  hwsim_new_radio_nl+0xea4/0x1b10
[  268.470827][T17721]  ? __pfx___nla_validate_parse+0x10/0x10
[  268.470856][T17721]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.470882][T17721]  ? __nla_parse+0x40/0x60
[  268.470901][T17721]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  268.470922][T17721]  genl_family_rcv_msg_doit+0x215/0x300
[  268.470976][T17721]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  268.471001][T17721]  ? bpf_lsm_capable+0x9/0x20
[  268.471015][T17721]  ? security_capable+0x7e/0x2e0
[  268.471034][T17721]  genl_rcv_msg+0x60e/0x790
[  268.471053][T17721]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.471067][T17721]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  268.471093][T17721]  netlink_rcv_skb+0x208/0x470
[  268.471103][T17721]  ? __lock_acquire+0xab9/0xd20
[  268.471119][T17721]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.471135][T17721]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.471162][T17721]  ? down_read+0x1ad/0x2e0
[  268.471177][T17721]  genl_rcv+0x28/0x40
[  268.471189][T17721]  netlink_unicast+0x82f/0x9e0
[  268.471212][T17721]  ? __pfx_netlink_unicast+0x10/0x10
[  268.471230][T17721]  ? netlink_sendmsg+0x642/0xb30
[  268.471239][T17721]  ? skb_put+0x11b/0x210
[  268.471255][T17721]  netlink_sendmsg+0x805/0xb30
[  268.471275][T17721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.471289][T17721]  ? aa_sock_msg_perm+0xf1/0x1d0
[  268.471303][T17721]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.471315][T17721]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.471327][T17721]  __sock_sendmsg+0x21c/0x270
[  268.471346][T17721]  ____sys_sendmsg+0x505/0x830
[  268.471365][T17721]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.471385][T17721]  ? import_iovec+0x74/0xa0
[  268.471402][T17721]  ___sys_sendmsg+0x21f/0x2a0
[  268.471418][T17721]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.471461][T17721]  ? __fget_files+0x2a/0x420
[  268.471470][T17721]  ? __fget_files+0x3a0/0x420
[  268.471489][T17721]  __x64_sys_sendmsg+0x19b/0x260
[  268.471505][T17721]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  268.471534][T17721]  ? do_syscall_64+0xbe/0x3b0
[  268.471550][T17721]  do_syscall_64+0xfa/0x3b0
[  268.471561][T17721]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.471572][T17721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.471584][T17721]  ? exc_page_fault+0x9f/0xf0
[  268.471597][T17721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.471608][T17721] RIP: 0033:0x7fa98298ebe9
[  268.471620][T17721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.471630][T17721] RSP: 002b:00007fa983857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  268.471643][T17721] RAX: ffffffffffffffda RBX: 00007fa982bc5fa0 RCX: 00007fa98298ebe9
[  268.471651][T17721] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  268.471658][T17721] RBP: 00007fa982a11e19 R08: 0000000000000000 R09: 0000000000000000
[  268.471665][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.471671][T17721] R13: 00007fa982bc6038 R14: 00007fa982bc5fa0 R15: 00007ffff86eaaf8
[  268.471693][T17721]  </TASK>
[  268.518273][T17722] netlink: 'syz.1.3253': attribute type 2 has an invalid length.
[  268.982817][T17748] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.251210][T17797] netlink: 'syz.1.3271': attribute type 5 has an invalid length.
[  270.257475][T17798] netlink: 'syz.1.3271': attribute type 5 has an invalid length.
[  270.728385][T17813] bond17: (slave bridge8): Releasing active interface
[  271.336054][T17830] netlink: 'syz.1.3280': attribute type 1 has an invalid length.
[  271.338797][T17830] __nla_validate_parse: 22 callbacks suppressed
[  271.338805][T17830] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3280'.
[  271.520086][T17846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3286'.
[  271.530244][T17846] syzkaller1: entered promiscuous mode
[  271.534520][T17846] syzkaller1: entered allmulticast mode
[  271.544467][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3288'.
[  271.547722][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3288'.
[  271.635949][T17856] netlink: 'syz.1.3289': attribute type 1 has an invalid length.
[  271.638543][T17856] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3289'.
[  271.641501][T17856] NCSI netlink: No device for ifindex 0
[  271.788465][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'.
[  271.796878][T17876] bridge11: entered promiscuous mode
[  271.807868][T17876] bridge11: entered allmulticast mode
[  271.811338][T17876] team0: Port device bridge11 added
[  271.881005][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3296'.
[  271.927578][T17891] netlink: 'syz.0.3299': attribute type 1 has an invalid length.
[  271.930836][T17891] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3299'.
[  272.077395][T17907] dvmrp1: entered allmulticast mode
[  272.097087][T17911] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3305'.
[  272.257301][T17932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3311'.
[  272.476148][T17947] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  272.481741][T17949] netlink: 'syz.0.3317': attribute type 1 has an invalid length.
[  272.541063][T17949] 8021q: adding VLAN 0 to HW filter on device bond20
[  272.551042][T17949] bond19: (slave bond20): making interface the new active one
[  272.556174][T17949] bond19: (slave bond20): Enslaving as an active interface with an up link
[  272.573660][T17949] bond19: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  272.578769][T17949] bond19: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  272.640721][T17964] netlink: 'syz.1.3321': attribute type 2 has an invalid length.
[  272.979486][T18002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.985557][T18002] syzkaller0: entered promiscuous mode
[  272.987484][T18002] syzkaller0: entered allmulticast mode
[  272.991598][T18002] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  273.009749][T18002] tipc: Resetting bearer <eth:syzkaller0>
[  273.015109][T18001] tipc: Resetting bearer <eth:syzkaller0>
[  273.028748][T18001] tipc: Disabling bearer <eth:syzkaller0>
[  273.245704][T18017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.248971][T18017] syzkaller0: entered promiscuous mode
[  273.250969][T18017] syzkaller0: entered allmulticast mode
[  273.257627][T18017] netlink: 'syz.0.3332': attribute type 1 has an invalid length.
[  273.266092][T18016] tipc: Resetting bearer <eth:syzkaller0>
[  273.280363][T18016] tipc: Disabling bearer <eth:syzkaller0>
[  273.865081][T18034] netlink: 'syz.1.3337': attribute type 1 has an invalid length.
[  273.879414][T18034] lo speed is unknown, defaulting to 1000
[  274.000598][T18045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.040337][T18047] tipc: Disabling bearer <eth:syzkaller0>
[  274.751531][T18122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  274.769416][T18122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  274.798818][T18129] netlink: 'syz.1.3364': attribute type 10 has an invalid length.
[  274.849287][T18134] netlink: 'syz.1.3365': attribute type 9 has an invalid length.
[  275.148592][T18169] dvmrp0: left allmulticast mode
[  275.150805][T18169] dvmrp8: left allmulticast mode
[  275.643794][T18220] veth0_to_bridge: left promiscuous mode
[  275.646222][T18220] veth0_to_bridge: left allmulticast mode
[  275.663726][T18220] ip6gretap5: left allmulticast mode
[  275.811781][T18211] team0 (unregistering): left promiscuous mode
[  275.818281][T18211] macvlan1: left promiscuous mode
[  275.866431][T18211] team0 (unregistering): Port device macvlan1 removed
[  275.907932][T18237] netlink: 'syz.3.3380': attribute type 1 has an invalid length.
[  275.927362][T18237] 8021q: adding VLAN 0 to HW filter on device bond19
[  276.184268][T18260] bond21 (unregistering): Released all slaves
[  276.199560][T18268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.205636][T18268] syzkaller0: entered promiscuous mode
[  276.208348][T18268] syzkaller0: entered allmulticast mode
[  276.230760][T18268] tipc: Resetting bearer <eth:syzkaller0>
[  276.243458][T18267] tipc: Resetting bearer <eth:syzkaller0>
[  276.256828][T18267] tipc: Disabling bearer <eth:syzkaller0>
[  276.371964][T18277] __nla_validate_parse: 28 callbacks suppressed
[  276.371978][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3391'.
[  276.420567][T18279] lo speed is unknown, defaulting to 1000
[  276.519446][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'.
[  276.523715][T18288] net_ratelimit: 10 callbacks suppressed
[  276.523728][T18288] openvswitch: netlink: nsh attribute has 16387 unknown bytes.
[  276.555594][T18288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.591788][T18287] lo speed is unknown, defaulting to 1000
[  276.949775][T18306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3399'.
[  276.994736][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3400'.
[  276.997937][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3400'.
[  277.049091][T18311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3401'.
[  277.058629][T18311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3401'.
[  277.099525][T18311] 8021q: adding VLAN 0 to HW filter on device bond21
[  277.207461][T18323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  277.230769][T18325] validate_nla: 1 callbacks suppressed
[  277.230779][T18325] netlink: 'syz.1.3406': attribute type 15 has an invalid length.
[  277.448308][T18352] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.3412'.
[  277.453309][T18352] netlink: 'syz.3.3412': attribute type 2 has an invalid length.
[  277.456405][T18352] netlink: 'syz.3.3412': attribute type 1 has an invalid length.
[  277.573785][T18362] netlink: 'syz.1.3414': attribute type 10 has an invalid length.
[  277.577014][T18362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3414'.
[  277.580235][T18362] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  277.830794][T18367] delete_channel: no stack
[  278.048472][T18378] netlink: 'syz.0.3420': attribute type 1 has an invalid length.
[  278.588914][T18409] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3428'.
[  278.702033][T18421] netlink: 'syz.0.3429': attribute type 1 has an invalid length.
[  278.841894][T18433] vlan4: entered allmulticast mode
[  278.849488][T18433] bond21: entered allmulticast mode
[  278.894778][T18446] tipc: Resetting bearer <eth:syzkaller0>
[  278.909168][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  278.911934][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  278.925039][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  278.928115][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
Connection to localhost closed by remote host.
[  279.123982][T18467] bond12: (slave bond13): Releasing backup interface
[  279.157283][T18467] bond17: (slave geneve5): Releasing active interface
[  279.166486][T18467] bond21: (slave wireguard1): Releasing backup interface
[  279.168754][T18467] wireguard1: left promiscuous mode
[  279.364269][T15497] ==================================================================
[  279.366992][T15497] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  279.370081][T15497] Read of size 8 at addr ffff88801c3880a0 by task khidpd_04580058/15497
[  279.373754][T15497] 
[  279.374597][T15497] CPU: 1 UID: 0 PID: 15497 Comm: khidpd_04580058 Not tainted syzkaller #0 PREEMPT(full) 
[  279.374608][T15497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.374612][T15497] Call Trace:
[  279.374617][T15497]  <TASK>
[  279.374620][T15497]  dump_stack_lvl+0x189/0x250
[  279.374631][T15497]  ? __kasan_check_byte+0x12/0x40
[  279.374641][T15497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.374649][T15497]  ? lock_release+0x4b/0x3e0
[  279.374660][T15497]  ? __virt_addr_valid+0x4a5/0x5c0
[  279.374669][T15497]  print_report+0xca/0x240
[  279.374675][T15497]  ? __mutex_lock+0x801/0x1350
[  279.374683][T15497]  kasan_report+0x118/0x150
[  279.374692][T15497]  ? __mutex_lock+0x801/0x1350
[  279.374699][T15497]  __mutex_lock+0x801/0x1350
[  279.374707][T15497]  ? __mutex_lock+0x5bb/0x1350
[  279.374714][T15497]  ? l2cap_unregister_user+0x6a/0x1b0
[  279.374724][T15497]  ? __pfx___mutex_lock+0x10/0x10
[  279.374731][T15497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.374743][T15497]  l2cap_unregister_user+0x6a/0x1b0
[  279.374753][T15497]  hidp_session_thread+0x3c9/0x410
[  279.374764][T15497]  ? __pfx_hidp_session_thread+0x10/0x10
[  279.374772][T15497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.374782][T15497]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  279.374792][T15497]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  279.374801][T15497]  ? __kthread_parkme+0x7b/0x200
[  279.374832][T15497]  ? __kthread_parkme+0x1a1/0x200
[  279.374844][T15497]  kthread+0x711/0x8a0
[  279.374863][T15497]  ? __pfx_hidp_session_thread+0x10/0x10
[  279.374876][T15497]  ? __pfx_kthread+0x10/0x10
[  279.374884][T15497]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.374893][T15497]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.374899][T15497]  ? __pfx_kthread+0x10/0x10
[  279.374906][T15497]  ret_from_fork+0x3fc/0x770
[  279.374914][T15497]  ? __pfx_ret_from_fork+0x10/0x10
[  279.374921][T15497]  ? __switch_to_asm+0x39/0x70
[  279.374929][T15497]  ? __switch_to_asm+0x33/0x70
[  279.374936][T15497]  ? __pfx_kthread+0x10/0x10
[  279.374944][T15497]  ret_from_fork_asm+0x1a/0x30
[  279.374955][T15497]  </TASK>
[  279.374958][T15497] 
[  279.444637][T15497] Allocated by task 12359:
[  279.446457][T15497]  kasan_save_track+0x3e/0x80
[  279.448537][T15497]  __kasan_kmalloc+0x93/0xb0
[  279.450465][T15497]  __kmalloc_noprof+0x27a/0x4f0
[  279.452502][T15497]  hci_alloc_dev_priv+0x28/0x2060
[  279.454397][T15497]  vhci_create_device+0x120/0x6e0
[  279.456088][T15497]  vhci_write+0x3ce/0x4a0
[  279.457525][T15497]  vfs_write+0x5c9/0xb30
[  279.458972][T15497]  ksys_write+0x145/0x250
[  279.460601][T15497]  do_syscall_64+0xfa/0x3b0
[  279.462471][T15497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.464857][T15497] 
[  279.465825][T15497] Freed by task 18458:
[  279.467578][T15497]  kasan_save_track+0x3e/0x80
[  279.469551][T15497]  kasan_save_free_info+0x46/0x50
[  279.471641][T15497]  __kasan_slab_free+0x5b/0x80
[  279.473646][T15497]  kfree+0x18e/0x440
[  279.475231][T15497]  bt_host_release+0x82/0x90
[  279.476788][T15497]  device_release+0x9c/0x1c0
[  279.478366][T15497]  kobject_put+0x22b/0x480
[  279.479896][T15497]  vhci_release+0x88/0xd0
[  279.481359][T15497]  __fput+0x44c/0xa70
[  279.482704][T15497]  task_work_run+0x1d4/0x260
[  279.484281][T15497]  do_exit+0x6b5/0x2300
[  279.485699][T15497]  do_group_exit+0x21c/0x2d0
[  279.487271][T15497]  get_signal+0x1286/0x1340
[  279.488864][T15497]  arch_do_signal_or_restart+0x9a/0x750
[  279.490770][T15497]  exit_to_user_mode_loop+0x75/0x110
[  279.492656][T15497]  do_syscall_64+0x2bd/0x3b0
[  279.494325][T15497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.496368][T15497] 
[  279.497293][T15497] Last potentially related work creation:
[  279.499186][T15497]  kasan_save_stack+0x3e/0x60
[  279.500862][T15497]  kasan_record_aux_stack+0xbd/0xd0
[  279.502576][T15497]  insert_work+0x3d/0x330
[  279.504236][T15497]  __queue_work+0xcd2/0xfb0
[  279.506248][T15497]  queue_work_on+0x181/0x270
[  279.508184][T15497]  hci_cmd_sync_submit+0x285/0x2b0
[  279.510383][T15497]  process_scheduled_works+0xae1/0x17b0
[  279.512511][T15497]  worker_thread+0x8a0/0xda0
[  279.514206][T15497]  kthread+0x711/0x8a0
[  279.515577][T15497]  ret_from_fork+0x3fc/0x770
[  279.517180][T15497]  ret_from_fork_asm+0x1a/0x30
[  279.518858][T15497] 
[  279.519683][T15497] Second to last potentially related work creation:
[  279.521922][T15497]  kasan_save_stack+0x3e/0x60
[  279.523871][T15497]  kasan_record_aux_stack+0xbd/0xd0
[  279.525954][T15497]  insert_work+0x3d/0x330
[  279.527918][T15497]  __queue_work+0xcd2/0xfb0
[  279.529993][T15497]  queue_work_on+0x181/0x270
[  279.532012][T15497]  hci_cmd_sync_submit+0x285/0x2b0
[  279.534293][T15497]  process_scheduled_works+0xae1/0x17b0
[  279.536731][T15497]  worker_thread+0x8a0/0xda0
[  279.538780][T15497]  kthread+0x711/0x8a0
[  279.540605][T15497]  ret_from_fork+0x3fc/0x770
[  279.542647][T15497]  ret_from_fork_asm+0x1a/0x30
[  279.544761][T15497] 
[  279.545858][T15497] The buggy address belongs to the object at ffff88801c388000
[  279.545858][T15497]  which belongs to the cache kmalloc-8k of size 8192
[  279.551896][T15497] The buggy address is located 160 bytes inside of
[  279.551896][T15497]  freed 8192-byte region [ffff88801c388000, ffff88801c38a000)
[  279.557736][T15497] 
[  279.558748][T15497] The buggy address belongs to the physical page:
[  279.561530][T15497] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c388
[  279.565335][T15497] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  279.568943][T15497] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  279.572298][T15497] page_type: f5(slab)
[  279.574029][T15497] raw: 00fff00000000040 ffff88801a442280 ffffea0000d24600 0000000000000003
[  279.577645][T15497] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  279.581177][T15497] head: 00fff00000000040 ffff88801a442280 ffffea0000d24600 0000000000000003
[  279.584748][T15497] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  279.588278][T15497] head: 00fff00000000003 ffffea000070e201 00000000ffffffff 00000000ffffffff
[  279.591867][T15497] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  279.595168][T15497] page dumped because: kasan: bad access detected
[  279.597830][T15497] page_owner tracks the page as allocated
[  279.600045][T15497] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12200, tgid 12199 (syz.1.1722), ts 171671614671, free_ts 171633507317
[  279.606879][T15497]  post_alloc_hook+0x240/0x2a0
[  279.608452][T15497]  get_page_from_freelist+0x21e4/0x22c0
[  279.610418][T15497]  __alloc_frozen_pages_noprof+0x181/0x370
[  279.612535][T15497]  alloc_pages_mpol+0x232/0x4a0
[  279.614134][T15497]  allocate_slab+0x8a/0x370
[  279.615615][T15497]  ___slab_alloc+0xbeb/0x1410
[  279.617116][T15497]  __kmalloc_cache_noprof+0x296/0x3d0
[  279.618935][T15497]  mr_table_alloc+0x65/0x250
[  279.620705][T15497]  ipmr_net_init+0x21a/0x390
[  279.622396][T15497]  ops_init+0x35c/0x5c0
[  279.623778][T15497]  setup_net+0x10c/0x320
[  279.625203][T15497]  copy_net_ns+0x31b/0x4d0
[  279.626644][T15497]  create_new_namespaces+0x3f3/0x720
[  279.628301][T15497]  unshare_nsproxy_namespaces+0x11c/0x170
[  279.630226][T15497]  ksys_unshare+0x4c8/0x8c0
[  279.631684][T15497]  __x64_sys_unshare+0x38/0x50
[  279.633288][T15497] page last free pid 12199 tgid 12199 stack trace:
[  279.635422][T15497]  __free_frozen_pages+0xbc4/0xd30
[  279.637180][T15497]  __put_partials+0x156/0x1a0
[  279.639033][T15497]  put_cpu_partial+0x17c/0x250
[  279.640857][T15497]  __slab_free+0x2d5/0x3c0
[  279.642364][T15497]  qlist_free_all+0x97/0x140
[  279.643908][T15497]  kasan_quarantine_reduce+0x148/0x160
[  279.645703][T15497]  __kasan_slab_alloc+0x22/0x80
[  279.647766][T15497]  __kmalloc_noprof+0x224/0x4f0
[  279.649648][T15497]  tomoyo_encode+0x28b/0x550
[  279.651572][T15497]  tomoyo_path_perm+0x2b3/0x4b0
[  279.653245][T15497]  tomoyo_path_symlink+0xa3/0xe0
[  279.654922][T15497]  security_path_symlink+0x177/0x380
[  279.656692][T15497]  do_symlinkat+0x107/0x3f0
[  279.658245][T15497]  __x64_sys_symlinkat+0x95/0xb0
[  279.660213][T15497]  do_syscall_64+0xfa/0x3b0
[  279.662195][T15497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.664725][T15497] 
[  279.665784][T15497] Memory state around the buggy address:
[  279.667926][T15497]  ffff88801c387f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  279.670678][T15497]  ffff88801c388000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.673488][T15497] >ffff88801c388080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.676925][T15497]                                ^
[  279.679128][T15497]  ffff88801c388100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.682489][T15497]  ffff88801c388180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  279.685735][T15497] ==================================================================
[  279.690200][T15497] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  279.693289][T15497] CPU: 1 UID: 0 PID: 15497 Comm: khidpd_04580058 Not tainted syzkaller #0 PREEMPT(full) 
[  279.696961][T15497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.701180][T15497] Call Trace:
[  279.702606][T15497]  <TASK>
[  279.703865][T15497]  dump_stack_lvl+0x99/0x250
[  279.705858][T15497]  ? __asan_memcpy+0x40/0x70
[  279.707863][T15497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.710036][T15497]  ? __pfx__printk+0x10/0x10
[  279.711969][T15497]  vpanic+0x281/0x750
[  279.713696][T15497]  ? __pfx_vpanic+0x10/0x10
[  279.715583][T15497]  ? irqentry_exit+0x74/0x90
[  279.717661][T15497]  panic+0xb9/0xc0
[  279.719268][T15497]  ? __pfx_panic+0x10/0x10
[  279.721139][T15497]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  279.723623][T15497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.725950][T15497]  ? __mutex_lock+0x801/0x1350
[  279.727486][T15497]  check_panic_on_warn+0x89/0xb0
[  279.729598][T15497]  ? __mutex_lock+0x801/0x1350
[  279.731558][T15497]  end_report+0x78/0x160
[  279.733449][T15497]  kasan_report+0x129/0x150
[  279.735407][T15497]  ? __mutex_lock+0x801/0x1350
[  279.737432][T15497]  __mutex_lock+0x801/0x1350
[  279.739400][T15497]  ? __mutex_lock+0x5bb/0x1350
[  279.741135][T15497]  ? l2cap_unregister_user+0x6a/0x1b0
[  279.742904][T15497]  ? __pfx___mutex_lock+0x10/0x10
[  279.744727][T15497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.747034][T15497]  l2cap_unregister_user+0x6a/0x1b0
[  279.748876][T15497]  hidp_session_thread+0x3c9/0x410
[  279.750567][T15497]  ? __pfx_hidp_session_thread+0x10/0x10
[  279.752487][T15497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  279.754555][T15497]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  279.756646][T15497]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  279.759089][T15497]  ? __kthread_parkme+0x7b/0x200
[  279.760958][T15497]  ? __kthread_parkme+0x1a1/0x200
[  279.763031][T15497]  kthread+0x711/0x8a0
[  279.764719][T15497]  ? __pfx_hidp_session_thread+0x10/0x10
[  279.766949][T15497]  ? __pfx_kthread+0x10/0x10
[  279.768578][T15497]  ? _raw_spin_unlock_irq+0x23/0x50
[  279.770318][T15497]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.772084][T15497]  ? __pfx_kthread+0x10/0x10
[  279.773833][T15497]  ret_from_fork+0x3fc/0x770
[  279.775389][T15497]  ? __pfx_ret_from_fork+0x10/0x10
[  279.777060][T15497]  ? __switch_to_asm+0x39/0x70
[  279.778604][T15497]  ? __switch_to_asm+0x33/0x70
[  279.780281][T15497]  ? __pfx_kthread+0x10/0x10
[  279.782013][T15497]  ret_from_fork_asm+0x1a/0x30
[  279.783781][T15497]  </TASK>
[  279.785622][T15497] Kernel Offset: disabled
[  279.787043][T15497] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:06:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=0000000080000000 RDX=ffffc900091e7601
RSI=ffffffff8d9cd160 RDI=ffffffff8be33800 RBP=dffffc0000000000 RSP=ffffc900091e7498
R8 =ffffc900091e7ad0 R9 =0000000000000000 R10=ffffc900091e7658 R11=fffff5200123cecd
R12=ffffc900091e7ae0 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffff88803751b980
RIP=ffffffff8b7a61ac RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa9838576c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32c0ae CR3=000000010ffba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=0000000000000179 0000000000344d49
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=00000000000001d1 0000000000347475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900081a7370
R8 =ffff888107800237 R9 =1ffff11020f00046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b01902 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa983856dc0 CR3=000000001f07a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1db1a12e53
XMM06=0000000000000000 00007f1db1a12e4d XMM07=0000000000000000 00007f1db1a12e61
XMM08=0000000000000000 00007f1db1a12ee7 XMM09=0000000000000000 00007f1db1a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
