last executing test programs:

1m51.48029847s ago: executing program 0 (id=1446):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x500}, 0x70)

1m51.402530635s ago: executing program 0 (id=1447):
r0 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 32)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) (rerun: 32)
getsockopt(r1, 0x1, 0x4c, 0x0, &(0x7f0000000000)) (async)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0)=0x3, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in6=@dev}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8)

1m50.532582503s ago: executing program 0 (id=1465):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0xbe, 0xa, 0xa, 0xff85, 0x0, 0x79, 0x10, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49}, 0x94)

1m50.531412371s ago: executing program 0 (id=1466):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(authenc(xxhash64-generic,ecb-serpent-avx2))\x00'}, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
shutdown(r10, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r13}, 0x8)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r7, @ANYRES16, @ANYBLOB="010000000000000000003a0000000800fdeb117128be4cfd24f22fd7881bec8c5e7f0984decb805ba9d3c236e87cfb3b3364c250178cd639eb59cb234871417c3d406594792d0573f3293616ed355e254dea39b6fe4cd571c077b3defdbecb205e9c15986caad239b93cc3744f23b9ec4773ca1798823c658b19aeec8d8624ef3857cd24abd0911a504575bb301a8f065ad5d385efbc8b767c64d3240be2ce328c143a447900cff3376d337f152291aeb95b9a048e", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

1m50.358277224s ago: executing program 0 (id=1469):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000001ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

1m50.295901705s ago: executing program 0 (id=1471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x2, 0xff}, 0xfe}, 0x18)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x5, 0x1, 0x0, 0x0, 0x2, 0x10}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x2, 0xff}, 0xfe}, 0x18) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x5, 0x1, 0x0, 0x0, 0x2, 0x10}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000)) (async)

1m34.702846956s ago: executing program 32 (id=1471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x2, 0xff}, 0xfe}, 0x18)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x5, 0x1, 0x0, 0x0, 0x2, 0x10}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x2, 0xff}, 0xfe}, 0x18) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x10, 0x5, 0x1, 0x0, 0x0, 0x2, 0x10}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000000)) (async)

1.272355628s ago: executing program 3 (id=3276):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0], 0x10b8}, 0x20000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000d2000000d200000004000000060000000000000a010000000a0000000500000f020000000300000000000000090000000400000007000000ffffff7f050000042b230000ff03000001000000000004000900000003000000810000000001000009a6080000000000001105000000070000000000000000000003000000000500000002000000520000000e00000005000093020000000c00000000000000ff03000009000000f900000001010000080000000100010005000000010000000b000000060000000e00000004000000030000000c0000000000000b04000000000000000e00"], &(0x7f0000000100)=""/16, 0xf0, 0x10, 0x0, 0x80000000}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000080)=""/11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="100000001314010000000000000000002c0963fd77c7092ceb6863078730a66320cda876f34f1e09aeca93a214d311f4c72c662756275108b19a563b5606272a89847404"], 0x10}}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="0500"], 0x2c}}, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x1}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4008850)
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x1, 0x20, 0x6b2}, 0x2f)

1.094495757s ago: executing program 3 (id=3278):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000220900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)

1.093500761s ago: executing program 3 (id=3279):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010007000000fcdbdf250200000008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084)
socket(0x11, 0x4, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_process_fork\x00', r0, 0x0, 0xe}, 0x18)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0xb, 0x40}, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r5, 0x5c2a7000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20)
r6 = socket$inet6(0xa, 0x5, 0x0)
listen(r6, 0x10000)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x565c}}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r8, 0xac9d4000)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2b, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1ff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
close(r4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50)
write(0xffffffffffffffff, 0x0, 0x0)

884.953421ms ago: executing program 2 (id=3281):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f7f5ffffff000000000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

884.430361ms ago: executing program 2 (id=3282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2061, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x64, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0xfffffffffffffe28, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x6f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000300), &(0x7f0000000340)=r7}, 0x20)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000780)={'xfrm0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r13], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r15=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb8, r12, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40004}, 0x40004)

794.846781ms ago: executing program 2 (id=3283):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={0x0}}, 0x4000000)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x36)
r3 = socket$inet6(0xa, 0x5, 0x7)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0097f11c369586dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)

721.986469ms ago: executing program 2 (id=3284):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000400000033000000ac1414bb00000000000000000000000000000000000000000000000000000000030000000000000004000000000000005700000000000000fdffffffffffffff000000000000010000000000000000007b00000000000000000080000000000000200000000000000000000000000000000000005cfd00000000000000000000000000000a000000aa0000000000000048000100686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14010000120020002bbd7000fbdbdf2511bc7f064e214e24060000000500000006000000040000000100000029f000000500000007000000", @ANYRES32=0x0, @ANYBLOB="e2000000ff0000000900000009000000c7"], 0x114}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0500a7aaca490000050007"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x5e4, 0xbd, &(0x7f0000000100)=""/189, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x2, 0x4, 0xa28}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x1, 0x9}, {0x0, 0x4, 0xd, 0x3}, {0x0, 0x2, 0x3, 0x5}, {0x0, 0x5, 0xb, 0x5}, {0x4, 0x3, 0x0, 0x1}]}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r5, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x100, @loopback, 0x3}, 0x1c)

721.658143ms ago: executing program 2 (id=3285):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000000c0)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0xffffff85}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49}, 0x94)

654.674628ms ago: executing program 2 (id=3286):
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r4}, 0x18)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r5, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x4}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

292.985065ms ago: executing program 1 (id=3288):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711877000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711877000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

292.778384ms ago: executing program 1 (id=3289):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700000000400000000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

212.969237ms ago: executing program 1 (id=3290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3f64, @remote, 0x3}}, 0x0, 0x2, 0x9, 0x9, 0x60, 0x3, 0x3}, 0x9c)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000)

210.082098ms ago: executing program 3 (id=3291):
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)}, 0x80d1)
close(0x4)

133.964709ms ago: executing program 3 (id=3292):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r4=>0x0})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20)
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc00000000050000b800000000000000e000000200000000000000000000000000000000000000000a0000000000000006e7244a5f086f2b10a33c75f96742e8", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000c001c00", @ANYRES32=r4, @ANYRES16=r7], 0xc4}}, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000e3090000"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc00000000050000b800000000000000e000000200000000000000000000000000000000000000000a0000000000000006e7244a5f086f2b10a33c75f96742e8", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000c001c00", @ANYRES32=r4, @ANYRES16=r7], 0xc4}}, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) (async)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000e3090000"], 0x14}}, 0x0) (async)

72.951063ms ago: executing program 3 (id=3293):
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @device_b, @broadcast, @from_mac, {0x9, 0x1}}, 0xee88, @random=0xf37, 0x81, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xb5}, @void, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x4, 0x10, 0x0, 0x7, 0x0, 0x0, 0x1, 0x2}, 0x6, 0x0, 0x9}}, @val={0x72, 0x6}, @void, [{0xdd, 0x13, "5eaabfad9a96c42a7aafdcbba1604b7333b507"}, {0xdd, 0x31, "d1410840e36c83fdf3d06b6d98131c7529bd3ff16263f509b6b821fd6362ac36d0a2ab5447bd58823056ff2d03fc61ee76"}, {0xdd, 0xa2, "af9e3e53fc9199f45c68159997581828f9c1138550fc484486ce934178a903417f92fe01b6844ace1fbd8cc16fa2595b53ab44ae87721f59823dc6e87a55814258f5ad1f3c3b38f1e8de59e21d2a2416bfc615cafb307ee7513980352a909d185c01885d09c5306b55331c71caa28b8e1dfac6a60d42e8428ce263a7bf5acc2fb9e27a40e185457fc4a1a55987fbac0f51b9299bee64f988748ba25dbc5aa1df941e"}, {0xdd, 0x94, "46f045ca151caa4c869cac36d152eccd2d8062ec72ad4130f1f5f5282bd752912634dadddc96e17a3630513e72d4e457ffdcfb81440a22d9a4bb0fdbbbc92b29a2700c079f7a697b0bebe5ba2a164fb9b9b317a12fc72ad71a1108b05852ff630475278fd1a3019d899650fd2df0358d9117b7f51965e91c8465c6b7d4aa11ee397006b77945daaece1b07aebcc00ad8805f6766"}, {0xdd, 0x7c, "6881ef6e06d170fe192464e94ab5fa5d8c527f69ca2ea24b13e706841daa7532c1182034c7c458785e5a91b967cf3262a9b1e100440f982d36d5e40ed9175171a68d766cbb291f2207e737fc3e5cbf40b7e314ba491ec1694e4481ab1f5ea1914655279525be83df58df46fa4ee1931c3f0b9300e3f225762d3ad0aa"}, {0xdd, 0x13, "df7c801f0383c110816344b9dd7608f9d45e16"}, {0xdd, 0x71, "9e5fbe9696789a1bbc9fbc8c5e35fbc440113ceee1c3fd510509905a0408a13a9f2305d2adfddaf8e92bf21011c79971e85b64008b341a371ab3ad31671e9344a4a63c7dc1af34d52968682c1738720c9f8e3ca9c1461e4da7cd372b25c548333ad29de159a6081ad3ef6e97eebf7e6aa4"}, {0xdd, 0x7c, "f97dc3ca126dc17914d5372b5e53a054185167e5aca371f68a102f0808819fddacdb62ed33440d8bd94019f6db4aa874a79f1788fb11aa0badf2619343104fb181a304cb65d9c113ffe9c918ffd7a6942640ba390545399639256cb0f63efea58736698a7841bfbc6b6be75c3b887f10d6c69734ce17bdaddd24ef01"}]}, 0x35b)
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@ctrl_frame=@cf_end_cf_ack={{}, {0xe}}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xffffff7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xc0, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}]}, @NL80211_ATTR_CQM={0x74, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x36}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0x3, 0x80000000, 0x3ff, 0x4, 0xe61]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x40, 0x1, 0x7, 0x80000000, 0x0, 0x81]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xba6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffff01}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x802}, 0x8800)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4008000)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x280001, 0x0)
ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000008c0))
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000900)={0x3c, @remote, 0x4e23, 0x3, 'lc\x00', 0x2, 0x200, 0x58}, 0x2c)
syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000980)={0x0, 0x3, 0x8000000000000000, 0x4000000000000})
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r3)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2800018}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x800)
r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @rose}, [@default, @bcast, @null, @null, @netrom, @default, @default, @rose]}, &(0x7f0000000b80)=0x48)
r9 = accept4$netrom(r8, 0x0, &(0x7f0000000bc0), 0x800)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000f40)={'vxcan1\x00', <r12=>0x0})
pipe(&(0x7f0000000f80)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000001140)={<r16=>r6, 0x7, 0xfff, 0x2})
r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000001180)='./file0\x00', 0x0, 0x8, r9}, 0x18)
r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1e, 0xe50, 0x2, 0xffffcd58, 0x4, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xa, 0x1d, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe1}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0xb9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @generic={0x1, 0x0, 0xa, 0x0, 0x4}, @jmp={0x5, 0x1, 0xd, 0x3, 0x1, 0x18, 0xffffffffffffffff}]}, &(0x7f0000000e40)='GPL\x00', 0x7, 0x84, &(0x7f0000000e80)=""/132, 0x41100, 0x4, '\x00', r12, @fallback=0x29, r13, 0x8, &(0x7f0000000fc0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0x5, 0x7fff, 0x76}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001300)=[r14, r0, r15, r16, r17, 0xffffffffffffffff, r18, 0xffffffffffffffff], &(0x7f0000001340)=[{0x1, 0x2, 0x0, 0x6}, {0x0, 0x1, 0x0, 0x7}, {0x5, 0x3, 0xa, 0x9}, {0x3, 0x1, 0xa, 0x1}], 0x10, 0x200}, 0x94)

72.564566ms ago: executing program 1 (id=3294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000911010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)

4.639812ms ago: executing program 1 (id=3295):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0xfff, 0x4)

0s ago: executing program 1 (id=3296):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff, 0xcdad, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001280)={'syztnl0\x00', &(0x7f00000011c0)={'sit0\x00', <r1=>0x0, 0x40, 0x1, 0x200, 0x0, {{0x20, 0x4, 0x2, 0x4, 0x80, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x7b, 0x0, 0x5, [0x5, 0x9, 0x6, 0xb]}, @lsrr={0x83, 0x13, 0x7d, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x65, 0x3, 0x8, [{@local, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@local, 0xca}, {@multicast2, 0x4}, {@loopback, 0x3}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x44, 0xe, "dfd8151b2a9189df7522f918"}]}}}}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x1d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x9, 0x2, 0xd, 0x200, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1000, &(0x7f00000001c0)=""/4096, 0x41100, 0x26, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x0, 0x5, 0x61}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001340)=[{0x0, 0x4, 0x2, 0xc}, {0x4, 0x5, 0x5, 0xa}, {0x3, 0x3, 0xb, 0x7}, {0x0, 0x3, 0x5}, {0x2, 0x3, 0xa, 0x1}], 0x10, 0xfa}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x48000) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001600)="2bdbdf9fa4e1dc143124edd96f43c15b577e8d36c84069310e7e33cf1f04efd124e25ccff6b4dbae2cf3d79f148b561ba8611aac0769184616be4b2f0f94feddab5a", 0x42)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001680)=0x1, 0x4) (async)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000016c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x1, 0x3, 0x5, 0x200, 0x7}, 0x20)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000001700)={{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}, 0x5}, {0xa, 0x4e20, 0xf8e, @private2, 0x837}, 0x0, {[0x7, 0xc, 0x4, 0x7, 0x3, 0xb, 0x7, 0x8]}}, 0x5c)
syz_80211_join_ibss(&(0x7f0000001780)='wlan1\x00', &(0x7f00000017c0)=@default_ibss_ssid, 0x6, 0x0) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x60, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
recvmsg(r2, &(0x7f0000001c40)={&(0x7f0000001980)=@nl, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/213, 0xd5}, {&(0x7f0000001b00)=""/124, 0x7c}], 0x2, &(0x7f0000001bc0)=""/96, 0x60}, 0x8121) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001cc0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x5c, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x800)
r9 = socket$phonet(0x23, 0x2, 0x1)
listen(r9, 0x2) (async)
nanosleep(&(0x7f0000001e00), &(0x7f0000001e40))
pwritev(r3, &(0x7f0000001f80)=[{&(0x7f0000001e80)="e712fd09e6a04fdb9d1b3735b62fcdb9e3166144a6d1327347d99650fd58f490f51a03b9889cc9da4d70b79e2592273d31e813212d4f5e3490b25b593d6639aa7afd525add8817c9fe1d963129ab8c9bb41c3f18ad1257ec7d395c7916d12ce73db9822c20dc55a6807df87d21515d48e7437f446f550d0d7fc0a34519eb03762f5fadad05e4135e79e539158a9e4d7d88bf9101c8cd2dfd0cb856c29f4f66f026389b08935791f9a97ebba7af74e0c72e856957c91cea3051da00cdaece55", 0xbf}, {&(0x7f0000001f40)="dd3c011648710d3bfa725a870a8c5b37d4240c0637f996d43797904ffc8a95", 0x1f}], 0x2, 0x9, 0xb2c) (async)
r10 = getpid()
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000001fc0)=r10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xb8, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40005}, 0x4008000)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000002180)={'wg2\x00'})
nanosleep(&(0x7f00000021c0)={0x77359400}, &(0x7f0000002200))

kernel console output (not intermixed with test programs):

tem fetching failed at offset 0/1
[  108.061985][  T794] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22
[  108.062565][ T8015] __nla_validate_parse: 13 callbacks suppressed
[  108.062579][ T8015] netlink: 260 bytes leftover after parsing attributes in process `syz.0.685'.
[  108.074476][ T8015] netlink: 260 bytes leftover after parsing attributes in process `syz.0.685'.
[  108.083881][ T8015] netlink: 'syz.0.685': attribute type 22 has an invalid length.
[  108.088874][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'.
[  108.176956][ T8024] tipc: Failed to remove unknown binding: 66,1,1/2886997007:213693491/213693493
[  108.200110][ T8027] IPv6: addrconf: prefix option has invalid lifetime
[  108.200191][ T8024] tipc: Failed to remove unknown binding: 66,1,1/2886997007:213693491/213693493
[  108.222283][ T8024] tipc: Failed to remove unknown binding: 66,1,1/2886997007:213693491/213693493
[  108.250750][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  108.638249][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.699'.
[  109.124216][ T8084] IPv6: Can't replace route, no match found
[  109.292714][ T8100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'.
[  109.461335][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'.
[  109.636256][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  109.716395][ T8128] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004
[  110.432716][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'.
[  110.550540][ T8147] smc: net device bond0 applied user defined pnetid SYZ2
[  110.570758][ T8145] smc: net device bond0 erased user defined pnetid SYZ2
[  110.573443][ T8149] netlink: 300 bytes leftover after parsing attributes in process `syz.2.732'.
[  111.679127][ T8162] netlink: 'syz.0.737': attribute type 13 has an invalid length.
[  111.738582][ T8162] netlink: 'syz.0.737': attribute type 13 has an invalid length.
[  111.799964][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880360d4c00: rx timeout, send abort
[  111.804877][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880360d4400: rx timeout, send abort
[  111.808587][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880360d4c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  111.814560][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880360d4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  111.865085][ T5897] IPVS: starting estimator thread 0...
[  111.977515][ T8167] IPVS: using max 40 ests per chain, 96000 per kthread
[  112.081000][ T8178] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  112.086524][ T8178] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  112.093530][ T8178] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  112.283285][ T8188] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[  112.288356][ T8188] netlink: 'syz.1.745': attribute type 2 has an invalid length.
[  112.733961][ T8214] netlink: 'syz.0.754': attribute type 11 has an invalid length.
[  112.823067][ T8221] IPv6: addrconf: prefix option has invalid lifetime
[  112.925021][ T8227] vlan2: entered promiscuous mode
[  112.931526][ T8227] vlan2: entered allmulticast mode
[  112.933206][ T8227] hsr_slave_1: entered allmulticast mode
[  113.690553][ T8232] dummy0: entered allmulticast mode
[  113.704764][ T8232] dummy0: left allmulticast mode
[  113.781591][ T8242] __nla_validate_parse: 10 callbacks suppressed
[  113.781604][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'.
[  113.783290][ T8246] IPv6: addrconf: prefix option has invalid lifetime
[  113.878746][ T8253] netlink: 'syz.1.769': attribute type 1 has an invalid length.
[  113.881760][ T8253] netlink: 232 bytes leftover after parsing attributes in process `syz.1.769'.
[  114.052178][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'.
[  114.168807][ T8277] netlink: 148 bytes leftover after parsing attributes in process `syz.0.775'.
[  114.280669][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'.
[  114.569670][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[  114.757292][ T8312] netlink: 'syz.1.786': attribute type 10 has an invalid length.
[  114.769003][ T8312] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.906575][ T8321] 8021q: VLANs not supported on syzkaller1
[  115.046604][ T8329] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  115.111789][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'.
[  115.149166][ T8339] netlink: 'syz.1.792': attribute type 3 has an invalid length.
[  115.151908][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'.
[  115.298925][ T8349] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.793'.
[  115.303229][ T8342] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.793'.
[  115.643309][ T8376] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.484099][ T8397] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[  116.497042][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.500328][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.515577][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.518678][ T8397] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.521766][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.524625][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.548062][ T8397] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  116.912593][ T8423] netlink: 'syz.2.814': attribute type 13 has an invalid length.
[  116.915399][ T8423] netlink: 'syz.2.814': attribute type 17 has an invalid length.
[  116.944730][ T8423] gretap0: left promiscuous mode
[  116.955275][ T8423] erspan0: left allmulticast mode
[  117.002589][ T8423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.122189][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.179868][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.238396][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.554762][ T8454] team_slave_0: entered promiscuous mode
[  117.557527][ T8454] team_slave_1: entered promiscuous mode
[  117.562667][ T8454] macsec1: entered promiscuous mode
[  117.565210][ T8454] team0: entered promiscuous mode
[  117.772147][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.774500][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.777550][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.806492][ T8468] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  117.843188][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.852965][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.859448][ T8468] hsr0 speed is unknown, defaulting to 1000
[  117.865672][ T8468] hsr0 speed is unknown, defaulting to 1000
[  118.506205][ T8486] batadv_slave_0: left promiscuous mode
[  118.670040][ T8486] batadv0: left allmulticast mode
[  118.672498][ T8486] macsec1: left promiscuous mode
[  118.674694][ T8486] macsec1: left allmulticast mode
[  118.693526][ T8486] veth3: left promiscuous mode
[  118.699093][ T8486] batman_adv: batadv0: Interface deactivated: gretap1
[  118.714396][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.718586][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.724819][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.729023][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.745160][ T8475] Bluetooth: hci1: Opcode 0x080f failed: -4
[  118.952746][ T8493] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  118.990888][ T8493] bond2: (slave gretap2): making interface the new active one
[  118.995875][ T8493] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  119.120865][ T8509] __nla_validate_parse: 5 callbacks suppressed
[  119.120881][ T8509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.842'.
[  119.162652][ T8512] netlink: 'syz.1.843': attribute type 9 has an invalid length.
[  119.165878][ T8512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.843'.
[  119.782530][ T8531] netlink: 'syz.0.850': attribute type 9 has an invalid length.
[  119.933987][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'.
[  119.977106][ T5848] Bluetooth: hci1: command 0x080f tx timeout
[  120.001076][ T8534] netlink: 'syz.2.851': attribute type 1 has an invalid length.
[  120.207741][ T8542] netlink: 332 bytes leftover after parsing attributes in process `syz.2.855'.
[  120.230777][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'.
[  120.321917][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.857'.
[  120.329628][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  120.335757][ T8548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.857'.
[  120.396091][ T8548] hsr0 speed is unknown, defaulting to 1000
[  121.444563][ T8606] netlink: 180 bytes leftover after parsing attributes in process `syz.0.874'.
[  121.450071][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'.
[  121.465228][ T8606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.504869][ T8606] syzkaller0: entered promiscuous mode
[  121.507688][ T8606] syzkaller0: entered allmulticast mode
[  121.510740][ T8606] tipc: Resetting bearer <eth:syzkaller0>
[  121.520379][ T8605] tipc: Resetting bearer <eth:syzkaller0>
[  122.497779][   T47] tipc: Node number set to 940647600
[  122.797346][ T8605] tipc: Disabling bearer <eth:syzkaller0>
[  123.000972][ T8641] bond2: entered promiscuous mode
[  123.002824][ T8641] bond2: entered allmulticast mode
[  123.011873][ T8641] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.060138][ T8635] hsr0 speed is unknown, defaulting to 1000
[  123.359408][ T8674] siw: device registration error -23
[  123.481405][ T8682] netlink: 'syz.0.894': attribute type 13 has an invalid length.
[  123.485761][ T8682] netlink: 'syz.0.894': attribute type 17 has an invalid length.
[  123.549964][ T8682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.592016][ T8684] hsr0 speed is unknown, defaulting to 1000
[  123.823036][ T8696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.872548][ T8696] syzkaller0: entered promiscuous mode
[  123.874979][ T8696] syzkaller0: entered allmulticast mode
[  123.879037][ T8696] tipc: Resetting bearer <eth:syzkaller0>
[  123.893405][ T8695] tipc: Resetting bearer <eth:syzkaller0>
[  125.206211][ T8695] tipc: Disabling bearer <eth:syzkaller0>
[  125.356679][ T8719] __nla_validate_parse: 9 callbacks suppressed
[  125.356702][ T8719] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.905'.
[  125.379280][ T8722] netlink: 72 bytes leftover after parsing attributes in process `syz.1.906'.
[  125.421169][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  125.562191][ T8735] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.566084][ T8735] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.610364][ T8738] veth0: entered promiscuous mode
[  125.676133][ T8742] netlink: 'syz.2.913': attribute type 14 has an invalid length.
[  125.712004][ T8742] netlink: 'syz.2.913': attribute type 14 has an invalid length.
[  125.812001][ T8754] netlink: 'syz.1.915': attribute type 9 has an invalid length.
[  126.022855][ T8771] syzkaller0: entered promiscuous mode
[  126.025200][ T8771] syzkaller0: entered allmulticast mode
[  126.070365][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'.
[  126.215286][ T8782] netlink: 72 bytes leftover after parsing attributes in process `syz.2.927'.
[  126.267773][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.929'.
[  126.295613][ T8786] macvlan3: entered promiscuous mode
[  126.299454][ T8786] macvlan3: entered allmulticast mode
[  126.303950][ T8786] bond3: (slave macvlan3): Opening slave failed
[  126.365641][ T8734] veth0: left promiscuous mode
[  126.430202][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'.
[  126.461810][ T8801] IPv6: addrconf: prefix option has invalid lifetime
[  126.640187][ T8817] netlink: 176 bytes leftover after parsing attributes in process `syz.1.937'.
[  126.672654][ T8805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.935'.
[  126.842520][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'.
[  127.089220][ T8844] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  127.535987][ T8875] netlink: 'syz.0.956': attribute type 5 has an invalid length.
[  127.541366][ T8875] netlink: 'syz.0.956': attribute type 7 has an invalid length.
[  127.562994][ T8875] : entered promiscuous mode
[  128.022637][ T8931] netlink: 'syz.1.971': attribute type 5 has an invalid length.
[  128.232143][ T8951] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  128.237136][ T8951] netlink: 'syz.1.977': attribute type 2 has an invalid length.
[  128.240025][ T8951] netlink: 'syz.1.977': attribute type 1 has an invalid length.
[  128.299289][ T8961] vxcan1: entered allmulticast mode
[  128.601259][ T8977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.604469][ T8977] syzkaller0: entered promiscuous mode
[  128.606459][ T8977] syzkaller0: entered allmulticast mode
[  128.631978][ T8976] tipc: Resetting bearer <eth:syzkaller0>
[  128.649967][ T8976] tipc: Disabling bearer <eth:syzkaller0>
[  129.075393][ T8992] netlink: 'syz.0.992': attribute type 3 has an invalid length.
[  129.363084][ T9011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.366364][ T9011] syzkaller0: entered promiscuous mode
[  129.371913][ T9011] syzkaller0: entered allmulticast mode
[  129.408040][ T9011] tipc: Resetting bearer <eth:syzkaller0>
[  129.412836][ T9010] tipc: Resetting bearer <eth:syzkaller0>
[  129.428597][ T9010] tipc: Disabling bearer <eth:syzkaller0>
[  130.451239][ T9088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.454290][ T9088] syzkaller0: entered promiscuous mode
[  130.456423][ T9088] syzkaller0: entered allmulticast mode
[  130.484379][ T9088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  130.515177][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  130.518735][ T9092] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:0
[  130.521517][ T9085] tipc: Resetting bearer <eth:syzkaller0>
[  130.536228][ T9085] tipc: Disabling bearer <eth:syzkaller0>
[  130.550581][ T9097] __nla_validate_parse: 29 callbacks suppressed
[  130.550597][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'.
[  130.555501][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1026'.
[  130.645447][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  130.734524][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  130.918955][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'.
[  130.974440][ T9118] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1033'.
[  131.314994][ T9120] IPv6: addrconf: prefix option has invalid lifetime
[  131.609714][ T9138] validate_nla: 5 callbacks suppressed
[  131.609733][ T9138] netlink: 'syz.2.1042': attribute type 10 has an invalid length.
[  131.618671][ T9138] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.658982][ T9142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1043'.
[  131.671009][ T9142] macvlan1: entered promiscuous mode
[  131.673816][ T9142] ipvlan0: entered promiscuous mode
[  131.678002][ T9142] ipvlan0: left promiscuous mode
[  131.680501][ T9142] macvlan1: left promiscuous mode
[  131.933039][ T9165] netlink: 'syz.0.1051': attribute type 1 has an invalid length.
[  131.961905][ T9165] bond3: entered promiscuous mode
[  131.964223][ T9165] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.979548][ T9165] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.981911][ T9165] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  131.985108][ T9165] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  131.992263][ T9165] bond3: (slave wireguard0): making interface the new active one
[  131.994723][ T9165] wireguard0: entered promiscuous mode
[  132.001722][ T9165] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  132.008498][ T9166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.011153][ T9166] IPv6: NLM_F_CREATE should be set when creating new route
[  132.013497][ T9166] IPv6: NLM_F_CREATE should be set when creating new route
[  132.018813][ T9166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.041197][ T9166] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[  132.050314][ T9166] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[  132.061465][ T9164] hsr0 speed is unknown, defaulting to 1000
[  132.259670][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'.
[  132.531060][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.533641][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.862388][ T9221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1068'.
[  132.866375][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[  133.776420][ T9245] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  134.392072][ T9282] syzkaller1: entered promiscuous mode
[  134.394185][ T9282] syzkaller1: entered allmulticast mode
[  134.575077][ T9301] hsr0 speed is unknown, defaulting to 1000
[  134.631698][ T9304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.665891][ T9304] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.703141][ T9301] IPv6: Can't replace route, no match found
[  134.911478][ T9323] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[  135.414112][ T9342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.423910][ T9342] syzkaller0: mtu less than device minimum
[  135.434618][ T9341] tipc: Disabling bearer <eth:syzkaller0>
[  135.574723][ T9354] lo speed is unknown, defaulting to 1000
[  135.579269][ T9355] rdma_rxe: rxe_newlink: failed to add lo
[  135.585021][ T9354] lo speed is unknown, defaulting to 1000
[  135.593718][ T9354] lo speed is unknown, defaulting to 1000
[  135.623584][ T9355] gretap0: left promiscuous mode
[  135.730349][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.733285][ T9355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.736552][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.739572][ T9355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.748128][ T9360] __nla_validate_parse: 7 callbacks suppressed
[  135.748145][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'.
[  135.765061][ T9355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.781327][ T9355] syz.1.1106 (9355) used greatest stack depth: 19008 bytes left
[  135.808874][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  135.882912][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1111'.
[  135.903329][ T9354] infiniband syz0: set active
[  135.905772][ T9354] infiniband syz0: added lo
[  135.910891][  T794] lo speed is unknown, defaulting to 1000
[  135.914078][ T9354] syz0: rxe_create_cq: returned err = -12
[  135.916135][ T9354] infiniband syz0: Couldn't create ib_mad CQ
[  135.921167][ T9354] infiniband syz0: Couldn't open port 1
[  135.948694][ T9354] RDS/IB: syz0: added
[  135.953647][ T9354] smc: adding ib device syz0 with port count 1
[  135.956262][ T9354] smc:    ib device syz0 port 1 has pnetid 
[  135.963200][  T794] lo speed is unknown, defaulting to 1000
[  135.966684][ T9354] lo speed is unknown, defaulting to 1000
[  136.035848][ T9377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.038730][ T9377] IPv6: NLM_F_CREATE should be set when creating new route
[  136.170917][ T9354] lo speed is unknown, defaulting to 1000
[  136.284692][ T9389] hsr0 speed is unknown, defaulting to 1000
[  136.309696][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'.
[  136.338182][ T9390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.362504][ T9354] lo speed is unknown, defaulting to 1000
[  136.522284][ T9389] lo speed is unknown, defaulting to 1000
[  136.537346][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.541907][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.689664][ T9400] IPv6: addrconf: prefix option has invalid lifetime
[  136.847413][ T9402] block nbd1: server does not support multiple connections per device.
[  136.859605][ T9402] block nbd1: shutting down sockets
[  137.374597][ T9426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1130'.
[  137.380454][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'.
[  137.384281][ T9426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'.
[  137.446454][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  137.567781][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  137.571913][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  137.837025][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  138.092521][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1136'.
[  138.273202][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'.
[  138.354070][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'.
[  138.367635][ T9468] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  138.582569][ T9485] netlink: 'syz.0.1147': attribute type 2 has an invalid length.
[  139.061968][ T9506] netlink: 'syz.0.1154': attribute type 20 has an invalid length.
[  139.706271][ T9538] netlink: 'syz.1.1164': attribute type 29 has an invalid length.
[  139.711821][ T9538] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.868619][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  139.887913][  T794] lo speed is unknown, defaulting to 1000
[  139.920205][ T9547] hsr0 speed is unknown, defaulting to 1000
[  139.924976][ T9547] lo speed is unknown, defaulting to 1000
[  140.284059][ T9563] netlink: 'syz.2.1173': attribute type 10 has an invalid length.
[  140.289219][ T9563] team0: entered promiscuous mode
[  140.291320][ T9563] team_slave_0: entered promiscuous mode
[  140.294494][ T9563] team_slave_1: entered promiscuous mode
[  140.303613][ T9563] 8021q: adding VLAN 0 to HW filter on device team0
[  140.460493][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  140.660494][ T9586] syzkaller0: entered promiscuous mode
[  140.662724][ T9586] syzkaller0: entered allmulticast mode
[  141.817140][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  141.923186][ T9591] __nla_validate_parse: 13 callbacks suppressed
[  141.923204][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1180'.
[  142.054752][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1182'.
[  142.059994][ T9598] netlink: 'syz.1.1182': attribute type 1 has an invalid length.
[  142.083417][ T9602] netlink: 'syz.2.1185': attribute type 29 has an invalid length.
[  142.126551][ T9600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.134694][ T9600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.149364][ T9606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'.
[  142.196192][ T9612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1186'.
[  142.210767][ T9600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.214464][ T9600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.318857][ T9612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.330934][ T9612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.347639][ T9612] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  142.371942][ T9612] bond0 (unregistering): Released all slaves
[  142.405779][ T9611] netlink: 'syz.1.1187': attribute type 3 has an invalid length.
[  142.481953][ T9600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.486162][ T9600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.589239][ T9600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.625618][ T9600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.830554][ T5899] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.833907][ T5899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.862101][ T5899] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.865069][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.954387][ T5899] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.962423][ T5899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.974302][ T5899] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.977562][ T5899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.138299][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'.
[  143.141683][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'.
[  143.172818][ T9636] openvswitch: netlink: Key type 251 is out of range max 32
[  143.285739][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'.
[  143.554202][ T9681] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  143.558908][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'.
[  143.564826][ T9681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1207'.
[  143.573228][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'.
[  143.841015][ T9712] netlink: 'syz.1.1217': attribute type 1 has an invalid length.
[  143.881298][ T9712] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.903983][ T9712] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.908344][ T9712] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  143.914797][ T9712] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  143.953211][ T9718] bond2: (slave bridge5): Enslaving as an active interface with a down link
[  144.086099][ T9728] netlink: 'syz.1.1222': attribute type 3 has an invalid length.
[  144.111903][ T9731] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  144.311113][ T9749] netlink: 'syz.0.1230': attribute type 1 has an invalid length.
[  144.518325][ T9766] sctp: [Deprecated]: syz.0.1235 (pid 9766) Use of struct sctp_assoc_value in delayed_ack socket option.
[  144.518325][ T9766] Use struct sctp_sack_info instead
[  144.778404][ T9785] hsr0 speed is unknown, defaulting to 1000
[  144.788469][ T9785] lo speed is unknown, defaulting to 1000
[  145.262594][ T9808] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  145.268350][   T96] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.427398][ T9817] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  145.581550][ T9826] pim6reg1: entered allmulticast mode
[  145.751633][ T9838] openvswitch: netlink: Missing key (keys=40, expected=80)
[  146.285206][ T9865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.292600][   T96] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  146.301449][ T9865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.310525][ T9865] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  146.331622][ T9865] bond0 (unregistering): Released all slaves
[  146.521130][ T9875] syz_tun: entered promiscuous mode
[  146.524192][ T9874] syz_tun: left promiscuous mode
[  146.767687][ T9888] netlink: 'syz.2.1278': attribute type 1 has an invalid length.
[  146.767751][ T9887] netlink: 'syz.2.1278': attribute type 1 has an invalid length.
[  146.792094][ T9888] bond0: entered promiscuous mode
[  146.794273][ T9888] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.994800][ T9900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.997825][ T9900] syzkaller0: entered promiscuous mode
[  147.002212][ T9900] syzkaller0: entered allmulticast mode
[  147.025117][ T9900] tipc: Resetting bearer <eth:syzkaller0>
[  147.028911][ T9899] tipc: Resetting bearer <eth:syzkaller0>
[  147.042017][ T9899] tipc: Disabling bearer <eth:syzkaller0>
[  147.286269][ T9904] __nla_validate_parse: 24 callbacks suppressed
[  147.286285][ T9904] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1285'.
[  147.474246][ T9925] bpq0: entered promiscuous mode
[  147.562004][ T9933] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1286'.
[  147.667567][ T9933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.673229][ T9933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.678783][ T9933] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  147.684251][ T9933] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  147.687744][ T9933] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.690036][ T9933] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.695148][ T9933] bond0 (unregistering): Released all slaves
[  148.235813][ T9948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  148.426095][ T9965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.271029][T10010] netlink: 'syz.2.1321': attribute type 1 has an invalid length.
[  149.293615][T10010] bond4: entered promiscuous mode
[  149.296117][T10010] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.301826][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'.
[  149.305435][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'.
[  149.329070][T10010] bond4: (slave bridge2): making interface the new active one
[  149.332180][T10010] bridge2: entered promiscuous mode
[  149.335052][T10010] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  149.345117][T10015] netlink: 'syz.1.1323': attribute type 1 has an invalid length.
[  149.432238][T10015] bond0: (slave geneve2): making interface the new active one
[  149.436746][T10015] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  149.442841][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  149.446402][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  149.450590][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  149.454672][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  149.647878][T10036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1330'.
[  149.652200][T10036] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1330'.
[  149.957906][T10048] IPv6: addrconf: prefix option has invalid lifetime
[  150.049649][T10057] sctp: [Deprecated]: syz.2.1337 (pid 10057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.049649][T10057] Use struct sctp_sack_info instead
[  150.050499][T10059] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1339'.
[  150.585279][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'.
[  150.594057][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1354'.
[  150.711383][T10120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1357'.
[  150.883516][T10132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.024956][T10161] IPv6: addrconf: prefix option has invalid lifetime
[  151.096949][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  151.103928][T10168] veth1_to_team: entered allmulticast mode
[  151.108405][T10168] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  151.236074][T10183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.315916][T10188] syzkaller1: entered promiscuous mode
[  151.320523][T10188] syzkaller1: entered allmulticast mode
[  151.458925][ T5848] Bluetooth: hci2: link tx timeout
[  151.461731][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.465245][ T5848] Bluetooth: hci2: link tx timeout
[  151.467117][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.470492][ T5848] Bluetooth: hci2: link tx timeout
[  151.472309][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.474903][ T5848] Bluetooth: hci2: link tx timeout
[  151.476714][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.479852][ T5848] Bluetooth: hci2: link tx timeout
[  151.481717][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.484347][ T5848] Bluetooth: hci2: link tx timeout
[  151.486339][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.489636][ T5848] Bluetooth: hci2: link tx timeout
[  151.491473][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.494325][ T5848] Bluetooth: hci2: link tx timeout
[  151.496055][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.503799][ T5848] Bluetooth: hci2: link tx timeout
[  151.505559][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.508295][ T5848] Bluetooth: hci2: link tx timeout
[  151.510764][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.513528][ T5848] Bluetooth: hci2: link tx timeout
[  151.515212][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.518415][ T5848] Bluetooth: hci2: link tx timeout
[  151.520257][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.522660][ T5848] Bluetooth: hci2: link tx timeout
[  151.524276][ T5848] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  151.526643][ T5848] Bluetooth: hci2: link tx timeout
[  151.528360][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  151.953377][T10218] delete_channel: no stack
[  152.323354][T10229] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  152.328476][T10229] __nla_validate_parse: 11 callbacks suppressed
[  152.328491][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1395'.
[  152.844182][T10253] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1405'.
[  152.987569][T10272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.991466][T10272] syzkaller0: MTU too low for tipc bearer
[  152.993377][T10272] tipc: Disabling bearer <eth:syzkaller0>
[  152.995951][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'.
[  153.076147][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'.
[  153.083706][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'.
[  153.140634][T10285] IPVS: Scheduler module ip_vs_sip not found
[  153.237853][T10297] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1422'.
[  153.483496][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1426'.
[  153.487081][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[  154.425137][T10346] hsr0 speed is unknown, defaulting to 1000
[  154.429640][T10346] lo speed is unknown, defaulting to 1000
[  154.629401][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'.
[  155.003886][T10372] netlink: 'syz.2.1445': attribute type 21 has an invalid length.
[  155.008265][T10372] netlink: 'syz.2.1445': attribute type 4 has an invalid length.
[  155.013413][T10372] netlink: 14453 bytes leftover after parsing attributes in process `syz.2.1445'.
[  155.021640][T10372] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1445'.
[  155.539943][T10408] netlink: 'syz.2.1459': attribute type 10 has an invalid length.
[  155.545127][T10408] batman_adv: batadv0: Adding interface: virt_wifi0
[  155.548289][T10408] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.557991][T10408] batman_adv: batadv0: Interface activated: virt_wifi0
[  155.567516][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[  156.158352][T10448] IPv6: addrconf: prefix option has invalid lifetime
[  156.726484][T10475] netlink: 'syz.1.1478': attribute type 1 has an invalid length.
[  156.942083][T10487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.945255][T10487] IPv6: NLM_F_CREATE should be set when creating new route
[  156.948388][T10487] IPv6: NLM_F_CREATE should be set when creating new route
[  156.956462][T10488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.671852][T10501] __nla_validate_parse: 10 callbacks suppressed
[  157.671875][T10501] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1486'.
[  157.733272][T10502] netlink: 'syz.2.1486': attribute type 1 has an invalid length.
[  157.736394][T10502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1486'.
[  158.023539][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'.
[  158.028840][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1489'.
[  158.032364][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1489'.
[  158.901800][T10557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.904737][T10557] IPv6: NLM_F_CREATE should be set when creating new route
[  158.907682][T10557] IPv6: NLM_F_CREATE should be set when creating new route
[  158.946064][T10559] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  159.107320][T10568] netlink: 'syz.1.1510': attribute type 42 has an invalid length.
[  159.228881][T10573] netlink: 'syz.1.1511': attribute type 2 has an invalid length.
[  159.232657][T10572] netlink: 'syz.1.1511': attribute type 2 has an invalid length.
[  159.368179][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'.
[  159.465271][T10591] netlink: 'syz.1.1519': attribute type 1 has an invalid length.
[  159.496389][T10591] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.515735][T10596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1521'.
[  160.304043][T10613] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1528'.
[  160.313891][T10613] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  160.391767][T10613] (unnamed net_device) (uninitialized): option use_carrier: invalid value (16)
[  160.608206][T10627] geneve3: entered promiscuous mode
[  160.694761][T10634] x9: renamed from bridge_slave_0
[  160.738892][T10638] IPVS: set_ctl: invalid protocol: 51 172.20.20.65:20002
[  160.769411][T10641] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  160.974321][T10652] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  161.037596][T10652] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  161.090528][T10657] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  161.238503][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'.
[  161.433797][T10670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1550'.
[  161.791830][T10695] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  162.288941][T10723] netlink: 'syz.2.1570': attribute type 18 has an invalid length.
[  162.292107][T10723] netlink: 'syz.2.1570': attribute type 18 has an invalid length.
[  163.982898][T10746] __nla_validate_parse: 9 callbacks suppressed
[  163.982918][T10746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  167.296483][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'.
[  168.911033][T10816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'.
[  168.915257][T10815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'.
[  168.974287][T10820] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  168.977986][T10820] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1608'.
[  168.981679][T10820] netlink: 'syz.1.1608': attribute type 1 has an invalid length.
[  169.007043][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  169.070861][T10824] netlink: 'syz.1.1610': attribute type 21 has an invalid length.
[  169.076042][T10824] netlink: 'syz.1.1610': attribute type 22 has an invalid length.
[  169.079153][T10824] netlink: 'syz.1.1610': attribute type 23 has an invalid length.
[  169.081585][T10824] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1610'.
[  169.264425][T10836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1614'.
[  170.425250][T10854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.472679][T10856] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  170.475422][T10856] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  170.559209][T10861] sctp: [Deprecated]: syz.1.1623 (pid 10861) Use of int in maxseg socket option.
[  170.559209][T10861] Use struct sctp_assoc_value instead
[  171.031846][T10892] netlink: 'syz.2.1633': attribute type 3 has an invalid length.
[  172.043310][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.048692][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.052609][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.056415][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.061191][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.098342][T10909] hsr0 speed is unknown, defaulting to 1000
[  172.102197][T10909] lo speed is unknown, defaulting to 1000
[  172.370124][T10909] chnl_net:caif_netlink_parms(): no params data found
[  172.441596][T10909] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.444858][T10909] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.450380][T10909] bridge_slave_0: entered allmulticast mode
[  172.454316][T10909] bridge_slave_0: entered promiscuous mode
[  172.460772][T10909] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.463743][T10909] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.466647][T10909] bridge_slave_1: entered allmulticast mode
[  172.470787][T10909] bridge_slave_1: entered promiscuous mode
[  172.504706][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.509784][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.530771][T10909] team0: Port device team_slave_0 added
[  172.534965][T10909] team0: Port device team_slave_1 added
[  172.558758][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.561036][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.569774][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.575366][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.577814][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  172.586007][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.620413][T10909] hsr_slave_0: entered promiscuous mode
[  172.622900][T10909] hsr_slave_1: entered promiscuous mode
[  172.625244][T10909] debugfs: 'hsr0' already exists in 'hsr'
[  172.627656][T10909] Cannot create hsr debugfs directory
[  172.755556][T10909] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  172.761202][T10909] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  172.765710][T10909] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  172.772437][T10909] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.835856][T10909] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.856475][T10909] 8021q: adding VLAN 0 to HW filter on device team0
[  172.866210][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.868892][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.880746][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.883766][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.914802][T10909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  172.920137][T10909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  173.039624][T10938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1642'.
[  173.073658][T10909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.130415][T10909] veth0_vlan: entered promiscuous mode
[  173.142554][T10909] veth1_vlan: entered promiscuous mode
[  173.177272][T10909] veth0_macvtap: entered promiscuous mode
[  173.184079][T10909] veth1_macvtap: entered promiscuous mode
[  173.205825][T10909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.217746][T10909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  173.231807][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.234855][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.241848][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.245007][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.291871][T10945] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1645'.
[  173.382144][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.387809][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.439116][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.442959][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.461335][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'.
[  173.530242][T10956] netlink: 'syz.3.1636': attribute type 6 has an invalid length.
[  173.711733][T10972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1654'.
[  173.720519][T10968] bond0: Unable to set down delay as MII monitoring is disabled
[  173.723477][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1653'.
[  173.876704][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'.
[  173.906296][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'.
[  173.913027][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'.
[  174.130032][   T55] Bluetooth: hci3: command tx timeout
[  175.212897][T11010] netlink: 'syz.1.1667': attribute type 2 has an invalid length.
[  175.299032][T11018] __nla_validate_parse: 1 callbacks suppressed
[  175.299043][T11018] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1671'.
[  175.309130][T11018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1671'.
[  175.312072][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'.
[  175.322147][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1669'.
[  175.360016][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'.
[  175.368857][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'.
[  175.442883][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'.
[  175.448232][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'.
[  175.450817][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'.
[  175.451504][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'.
[  176.207720][   T55] Bluetooth: hci3: command tx timeout
[  176.628956][T11109] Bluetooth: MGMT ver 1.23
[  176.693878][T11115] syzkaller1: entered promiscuous mode
[  176.695724][T11115] syzkaller1: entered allmulticast mode
[  177.156084][T11159] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  177.175230][T11159] netem: change failed
[  177.451430][T11109] Bluetooth: hci1: Opcode 0x080f failed: -4
[  177.642441][T11190] syz_tun: entered allmulticast mode
[  178.287138][   T55] Bluetooth: hci3: command tx timeout
[  178.613059][T11246] Bluetooth: MGMT ver 1.23
[  178.688915][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  178.762903][T11254] hsr0 speed is unknown, defaulting to 1000
[  178.766673][T11254] lo speed is unknown, defaulting to 1000
[  178.963903][T11266] syzkaller1: entered promiscuous mode
[  178.966167][T11266] syzkaller1: entered allmulticast mode
[  179.192825][T11281] ieee802154 phy0 wpan0: encryption failed: -22
[  179.207804][T11281] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  179.211069][T11281] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  179.276752][T11284] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  179.294207][T11277] nbd1: detected capacity change from 0 to 875674160
[  179.329908][   T56] block nbd1: Receive control failed (result -104)
[  179.425432][T11289] netlink: 'syz.3.1764': attribute type 1 has an invalid length.
[  179.432379][T11289] netlink: 'syz.3.1764': attribute type 1 has an invalid length.
[  179.655704][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.367250][   T55] Bluetooth: hci3: command tx timeout
[  180.800123][T11335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  180.802965][T11335] IPv6: NLM_F_CREATE should be set when creating new route
[  180.817942][T11335] __nla_validate_parse: 22 callbacks suppressed
[  180.817958][T11335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1777'.
[  181.329404][T11371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.334629][T11370] tipc: Disabling bearer <eth:syzkaller0>
[  181.601175][T11381] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1789'.
[  181.601178][T11384] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1789'.
[  181.707647][T11391] netlink: 173800 bytes leftover after parsing attributes in process `syz.2.1792'.
[  181.895630][T11398] syzkaller0: entered promiscuous mode
[  181.900665][T11398] syzkaller0: entered allmulticast mode
[  181.907284][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1794'.
[  182.000194][T11400] hsr0 speed is unknown, defaulting to 1000
[  182.014681][T11400] lo speed is unknown, defaulting to 1000
[  182.101542][T11411] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  182.105089][T11412] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  182.174032][T11411] netlink: 'syz.1.1798': attribute type 25 has an invalid length.
[  182.177505][T11411] netlink: 'syz.1.1798': attribute type 7 has an invalid length.
[  182.351109][T11424] syzkaller1: entered promiscuous mode
[  182.353362][T11424] syzkaller1: entered allmulticast mode
[  182.768083][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1803'.
[  182.782206][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1803'.
[  182.785794][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'.
[  182.867271][T11438] IPv6: addrconf: prefix option has invalid lifetime
[  183.042882][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1806'.
[  183.065021][T11444] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1805'.
[  184.579135][T11567] tipc: Started in network mode
[  184.581154][T11567] tipc: Node identity 024b335a2089, cluster identity 4711
[  184.583949][T11567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.649884][T11567] syzkaller0: entered promiscuous mode
[  184.653372][T11567] syzkaller0: entered allmulticast mode
[  184.656397][T11567] tipc: Resetting bearer <eth:syzkaller0>
[  184.713561][T11566] tipc: Resetting bearer <eth:syzkaller0>
[  185.687069][ T5897] tipc: Node number set to 583152474
[  185.810702][   T55] Bluetooth: hci1: command 0x080f tx timeout
[  186.074275][T11566] tipc: Disabling bearer <eth:syzkaller0>
[  186.196052][T11596] netlink: 'syz.3.1850': attribute type 4 has an invalid length.
[  186.331951][T11607] __nla_validate_parse: 23 callbacks suppressed
[  186.331966][T11607] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1854'.
[  186.484725][T11613] netlink: 'syz.3.1858': attribute type 10 has an invalid length.
[  186.492051][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1858'.
[  186.498373][T11613] batman_adv: batadv0: Adding interface: virt_wifi0
[  186.501078][T11613] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.512805][T11613] batman_adv: batadv0: Interface activated: virt_wifi0
[  186.648628][T11623] netlink: 'syz.2.1862': attribute type 11 has an invalid length.
[  186.651965][T11623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1862'.
[  186.766530][T11635] hsr0 speed is unknown, defaulting to 1000
[  186.774392][T11635] lo speed is unknown, defaulting to 1000
[  187.166662][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'.
[  187.171644][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1870'.
[  187.181495][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.288132][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'.
[  187.294586][T11659] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1872'.
[  187.302178][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'.
[  187.308129][T11659] netlink: 'syz.3.1872': attribute type 3 has an invalid length.
[  187.534414][T11671] bond0: left promiscuous mode
[  187.764910][T11685] gre1: entered allmulticast mode
[  187.776740][T11686] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1879'.
[  187.910855][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'.
[  187.955562][T11690] 8021q: adding VLAN 0 to HW filter on device bond4
[  188.044044][T11696] netlink: 'syz.2.1884': attribute type 1 has an invalid length.
[  188.276744][T11711] tipc: Enabled bearer <udp:syz0>, priority 10
[  188.481983][T11725] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  188.600239][T11729] openvswitch: netlink: Tunnel attr 1 has unexpected len 7 expected 4
[  189.214979][T11766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  189.336980][T11779] ipvlan2: entered promiscuous mode
[  189.340876][T11779] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  189.392896][T11782] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  189.564566][T11793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.581414][T11794] bond0: option ad_select: unable to set because the bond device is up
[  189.824154][T11809] netlink: 'syz.3.1922': attribute type 5 has an invalid length.
[  189.830980][T11810] tls_set_device_offload_rx: netdev not found
[  189.875865][   T56] block nbd2: Receive control failed (result -32)
[  189.929924][T11816] bond0: invalid ARP target 0.0.0.0 specified for addition
[  189.932860][T11816] bond0: option arp_ip_target: invalid value (0)
[  189.953174][T11820] netlink: 'syz.3.1927': attribute type 10 has an invalid length.
[  189.995487][T11820] 8021q: adding VLAN 0 to HW filter on device team0
[  190.003738][T11820] bond0: (slave team0): Enslaving as an active interface with an up link
[  190.122294][T11837] netlink: 'syz.2.1933': attribute type 153 has an invalid length.
[  190.295306][T11850] syzkaller0: entered promiscuous mode
[  190.302862][T11850] syzkaller0: entered allmulticast mode
[  190.312268][T11850] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  190.405352][T11859] syzkaller1: entered promiscuous mode
[  190.411301][T11859] syzkaller1: entered allmulticast mode
[  190.499578][T11865] 8021q: VLANs not supported on sit0
[  190.552614][T11865] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  190.560026][T11865] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  191.362964][T11902] 8021q: VLANs not supported on gre0
[  191.508632][T11911] netlink: 'syz.3.1957': attribute type 1 has an invalid length.
[  191.727840][T11921] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  191.740144][T11921] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  192.072595][T11930] syzkaller0: entered promiscuous mode
[  192.074372][T11930] syzkaller0: entered allmulticast mode
[  192.081631][T11930] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  192.279043][T11934] __nla_validate_parse: 22 callbacks suppressed
[  192.279058][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'.
[  192.395920][T11867] syz.1.1942: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  192.407538][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.1.1942 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  192.407567][T11867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.407578][T11867] Call Trace:
[  192.407585][T11867]  <TASK>
[  192.407594][T11867]  dump_stack_lvl+0x189/0x250
[  192.407627][T11867]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.407647][T11867]  ? __pfx__printk+0x10/0x10
[  192.407669][T11867]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.407689][T11867]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.407708][T11867]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  192.407729][T11867]  warn_alloc+0x214/0x310
[  192.407758][T11867]  ? __pfx_warn_alloc+0x10/0x10
[  192.407786][T11867]  ? __get_vm_area_node+0x28f/0x300
[  192.407806][T11867]  ? hash_netiface_create+0x358/0xfe0
[  192.407823][T11867]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  192.407841][T11867]  ? do_syscall_64+0xfa/0x3b0
[  192.407881][T11867]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  192.407906][T11867]  ? rcu_is_watching+0x15/0xb0
[  192.407923][T11867]  ? hash_netiface_create+0x358/0xfe0
[  192.407936][T11867]  ? hash_netiface_create+0x358/0xfe0
[  192.407948][T11867]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  192.407970][T11867]  ? hash_netiface_create+0x358/0xfe0
[  192.407983][T11867]  ? hash_netiface_create+0x2fe/0xfe0
[  192.407998][T11867]  hash_netiface_create+0x358/0xfe0
[  192.408019][T11867]  ? __nla_parse+0x40/0x60
[  192.408040][T11867]  ? __pfx_hash_netiface_create+0x10/0x10
[  192.408056][T11867]  ip_set_create+0xa97/0x1940
[  192.408072][T11867]  ? ip_set_create+0x4a2/0x1940
[  192.408096][T11867]  ? __pfx_ip_set_create+0x10/0x10
[  192.408139][T11867]  nfnetlink_rcv_msg+0xb4d/0x1130
[  192.408159][T11867]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  192.408221][T11867]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  192.408236][T11867]  ? kasan_save_free_info+0x46/0x50
[  192.408292][T11867]  netlink_rcv_skb+0x208/0x470
[  192.408323][T11867]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  192.408341][T11867]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.408369][T11867]  ? bpf_lsm_capable+0x9/0x20
[  192.408389][T11867]  ? security_capable+0x7e/0x2e0
[  192.408414][T11867]  nfnetlink_rcv+0x26a/0x2520
[  192.408433][T11867]  ? __dev_queue_xmit+0x1d79/0x3b50
[  192.408457][T11867]  ? __dev_queue_xmit+0x27b/0x3b50
[  192.408482][T11867]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  192.408498][T11867]  ? __pfx___dev_queue_xmit+0x10/0x10
[  192.408523][T11867]  ? ref_tracker_free+0x63a/0x7d0
[  192.408543][T11867]  ? __asan_memcpy+0x40/0x70
[  192.408558][T11867]  ? __pfx_ref_tracker_free+0x10/0x10
[  192.408590][T11867]  ? skb_clone+0x246/0x3a0
[  192.408607][T11867]  ? __netlink_deliver_tap+0x807/0x850
[  192.408625][T11867]  ? netlink_deliver_tap+0x2e/0x1b0
[  192.408649][T11867]  ? netlink_deliver_tap+0x2e/0x1b0
[  192.408674][T11867]  netlink_unicast+0x82f/0x9e0
[  192.408699][T11867]  ? __pfx_netlink_unicast+0x10/0x10
[  192.408717][T11867]  ? netlink_sendmsg+0x642/0xb30
[  192.408734][T11867]  ? skb_put+0x11b/0x210
[  192.408756][T11867]  netlink_sendmsg+0x805/0xb30
[  192.408783][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.408803][T11867]  ? aa_sock_msg_perm+0xf1/0x1d0
[  192.408824][T11867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.408841][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.408859][T11867]  __sock_sendmsg+0x21c/0x270
[  192.408876][T11867]  ____sys_sendmsg+0x505/0x830
[  192.408900][T11867]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.408925][T11867]  ? import_iovec+0x74/0xa0
[  192.408943][T11867]  ___sys_sendmsg+0x21f/0x2a0
[  192.408967][T11867]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.409012][T11867]  ? __fget_files+0x2a/0x420
[  192.409033][T11867]  ? __fget_files+0x3a0/0x420
[  192.409062][T11867]  __x64_sys_sendmsg+0x19b/0x260
[  192.409085][T11867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.409113][T11867]  ? rcu_is_watching+0x15/0xb0
[  192.409133][T11867]  ? do_syscall_64+0xbe/0x3b0
[  192.409156][T11867]  do_syscall_64+0xfa/0x3b0
[  192.409206][T11867]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.409224][T11867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.409240][T11867]  ? exc_page_fault+0x9f/0xf0
[  192.409258][T11867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.409273][T11867] RIP: 0033:0x7f687638ebe9
[  192.409313][T11867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.409327][T11867] RSP: 002b:00007f6877132038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.409344][T11867] RAX: ffffffffffffffda RBX: 00007f68765b6090 RCX: 00007f687638ebe9
[  192.409354][T11867] RDX: 0000000000044040 RSI: 0000200000000100 RDI: 0000000000000003
[  192.409363][T11867] RBP: 00007f6876411e19 R08: 0000000000000000 R09: 0000000000000000
[  192.409373][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.409381][T11867] R13: 00007f68765b6128 R14: 00007f68765b6090 R15: 00007ffd98b386d8
[  192.409403][T11867]  </TASK>
[  192.409411][T11867] Mem-Info:
[  192.595202][T11867] active_anon:4724 inactive_anon:0 isolated_anon:0
[  192.595202][T11867]  active_file:1330 inactive_file:38265 isolated_file:0
[  192.595202][T11867]  unevictable:1768 dirty:47 writeback:0
[  192.595202][T11867]  slab_reclaimable:10047 slab_unreclaimable:81497
[  192.595202][T11867]  mapped:23563 shmem:2415 pagetables:972
[  192.595202][T11867]  sec_pagetables:0 bounce:0
[  192.595202][T11867]  kernel_misc_reclaimable:0
[  192.595202][T11867]  free:237790 free_pcp:22759 free_cma:0
[  192.615347][T11867] Node 0 active_anon:11116kB inactive_anon:0kB active_file:3596kB inactive_file:94608kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34496kB dirty:188kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9840kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.628071][T11867] Node 1 active_anon:7708kB inactive_anon:0kB active_file:1724kB inactive_file:58452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:59696kB dirty:12kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3184kB pagetables:1884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.638766][T11867] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.650126][T11867] lowmem_reserve[]: 0 811 811 811 811
[  192.651828][T11867] Node 0 DMA32 free:172888kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11116kB inactive_anon:0kB active_file:3596kB inactive_file:94608kB unevictable:3536kB writepending:188kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:35448kB local_pcp:18544kB free_cma:0kB
[  192.662405][T11867] lowmem_reserve[]: 0 0 0 0 0
[  192.664171][T11867] Node 1 DMA32 free:439928kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:18688kB local_pcp:7112kB free_cma:0kB
[  192.675045][T11867] lowmem_reserve[]: 0 0 854 854 854
[  192.676693][T11867] Node 1 Normal free:322996kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7708kB inactive_anon:0kB active_file:1724kB inactive_file:58452kB unevictable:3536kB writepending:12kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36892kB local_pcp:21584kB free_cma:0kB
[  192.691089][T11867] lowmem_reserve[]: 0 0 0 0 0
[  192.693000][T11867] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  192.697522][T11867] Node 0 DMA32: 236*4kB (UME) 71*8kB (ME) 21*16kB (UME) 17*32kB (ME) 10*64kB (UM) 17*128kB (UM) 11*256kB (ME) 8*512kB (ME) 1*1024kB (M) 2*2048kB (M) 38*4096kB (UM) = 172888kB
[  192.702895][T11867] Node 1 DMA32: 2*4kB (M) 4*8kB (UM) 3*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 105*4096kB (UM) = 439928kB
[  192.710688][T11867] Node 1 Normal: 1*4kB (M) 856*8kB (UME) 405*16kB (UME) 433*32kB (UME) 166*64kB (UME) 60*128kB (UME) 48*256kB (UM) 22*512kB (UME) 16*1024kB (UME) 2*2048kB (U) 57*4096kB (UM) = 322996kB
[  192.718185][T11867] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.721930][T11867] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.725428][T11867] 42039 total pagecache pages
[  192.730032][T11867] 29 pages in swap cache
[  192.731786][T11867] Free swap  = 124800kB
[  192.733487][T11867] Total swap = 124996kB
[  192.735174][T11867] 786301 pages RAM
[  192.736658][T11867] 0 pages HighMem/MovableOnly
[  192.738715][T11867] 241320 pages reserved
[  192.740535][T11867] 0 pages cma reserved
[  192.944659][T11867] syz.1.1942 (11867) used greatest stack depth: 16104 bytes left
[  193.370554][T11959] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1975'.
[  193.432219][T11971] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1977'.
[  193.502325][T11971] tipc: New replicast peer: 0.0.0.0
[  193.504371][T11971] tipc: Enabled bearer <udp:syz2>, priority 10
[  193.506700][T11971] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  193.575066][T11979] netlink: 'syz.2.1978': attribute type 21 has an invalid length.
[  193.577861][T11979] netlink: 'syz.2.1978': attribute type 6 has an invalid length.
[  193.587419][T11979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1978'.
[  193.650449][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'.
[  193.662384][T11985] bridge2: entered promiscuous mode
[  193.682734][T11985] netlink: 'syz.3.1980': attribute type 99 has an invalid length.
[  193.695709][T11985] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  193.705156][T11985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  193.759510][T11995] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1980'.
[  193.965233][T12003] hsr0 speed is unknown, defaulting to 1000
[  193.971658][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.983623][T12003] lo speed is unknown, defaulting to 1000
[  194.478871][T12027] IPVS: length: 4096 != 8
[  194.581221][T12034] team0: entered promiscuous mode
[  194.583390][T12034] team_slave_0: entered promiscuous mode
[  194.586188][T12034] team_slave_1: entered promiscuous mode
[  194.611955][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1993'.
[  194.663126][T12035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1992'.
[  194.709977][T12032] bond0: (slave team0): Releasing backup interface
[  194.715643][T12032] team0 (unregistering): left promiscuous mode
[  194.718439][T12032] team_slave_0: left promiscuous mode
[  194.720899][T12032] team_slave_1: left promiscuous mode
[  194.732848][T12032] team0 (unregistering): Port device team_slave_0 removed
[  194.742860][T12032] team0 (unregistering): Port device team_slave_1 removed
[  194.777803][T12031] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1991'.
[  194.843527][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'.
[  194.988029][T12050] bond5: entered promiscuous mode
[  194.990407][T12050] 8021q: adding VLAN 0 to HW filter on device bond5
[  195.114893][T12060] netlink: 'syz.2.1999': attribute type 21 has an invalid length.
[  195.158085][T12050] bond5 (unregistering): Released all slaves
[  195.179164][T12060] netlink: 'syz.2.1999': attribute type 5 has an invalid length.
[  195.183122][T12060] netlink: 'syz.2.1999': attribute type 6 has an invalid length.
[  195.183197][T12058] netlink: 'syz.3.2000': attribute type 1 has an invalid length.
[  195.191684][T12058] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  195.808768][T12106] netlink: 'syz.3.2015': attribute type 1 has an invalid length.
[  195.808820][T12101] bond5: entered promiscuous mode
[  195.842485][T12107] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  195.845313][T12107] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  195.863052][T12106] bond2: (slave geneve2): making interface the new active one
[  195.877508][T12106] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  195.880849][   T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  195.887825][   T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  195.905180][T12106] 8021q: adding VLAN 0 to HW filter on device bond2
[  195.917025][   T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  195.920676][   T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  196.124744][T12130] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.129363][T12130] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  196.332583][T12144] hsr0 speed is unknown, defaulting to 1000
[  196.337839][T12144] lo speed is unknown, defaulting to 1000
[  196.665950][T12160] hsr0 speed is unknown, defaulting to 1000
[  196.670443][T12160] lo speed is unknown, defaulting to 1000
[  196.915033][T12170] syzkaller1: entered promiscuous mode
[  196.917866][T12170] syzkaller1: entered allmulticast mode
[  196.921222][T12169] netlink: 'syz.1.2035': attribute type 1 has an invalid length.
[  197.144594][T12176] netlink: 'syz.3.2038': attribute type 1 has an invalid length.
[  197.288558][T12185] batadv_slave_0: entered promiscuous mode
[  197.291713][T12185] batadv_slave_0: left promiscuous mode
[  197.681875][T12215] IPv6: addrconf: prefix option has invalid lifetime
[  197.709964][T12214] hsr0 speed is unknown, defaulting to 1000
[  197.717157][T12214] lo speed is unknown, defaulting to 1000
[  198.245373][T12236] __nla_validate_parse: 12 callbacks suppressed
[  198.245388][T12236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2059'.
[  198.354099][T12240] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2061'.
[  198.494392][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'.
[  198.535671][T12250] netlink: 724 bytes leftover after parsing attributes in process `syz.1.2064'.
[  198.539742][T12250] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2064'.
[  198.826734][T12260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2068'.
[  198.895075][T12272] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  199.024963][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'.
[  199.048620][T12289] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  199.063241][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'.
[  199.096446][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'.
[  199.207854][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2080'.
[  199.514305][T12320] validate_nla: 2 callbacks suppressed
[  199.514318][T12320] netlink: 'syz.2.2085': attribute type 2 has an invalid length.
[  199.531602][T12320] netlink: 'syz.2.2085': attribute type 1 has an invalid length.
[  199.564906][T12320] geneve2: entered promiscuous mode
[  199.574525][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.579266][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.595706][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.600208][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.603660][T12327] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  199.610368][T12327] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  200.166498][T12363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.171583][T12363] syzkaller0: entered promiscuous mode
[  200.173800][T12363] syzkaller0: entered allmulticast mode
[  200.192202][T12363] tipc: Resetting bearer <eth:syzkaller0>
[  200.198953][T12361] tipc: Resetting bearer <eth:syzkaller0>
[  200.212494][T12361] tipc: Disabling bearer <eth:syzkaller0>
[  200.774702][T12400] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  201.483439][T12440] IPv6: addrconf: prefix option has invalid lifetime
[  201.636618][T12453] netlink: 'syz.3.2132': attribute type 20 has an invalid length.
[  201.661536][T12453] netlink: 'syz.3.2132': attribute type 20 has an invalid length.
[  201.662162][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  201.670765][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  201.679344][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  201.686600][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.584652][T12494] netlink: 'syz.2.2144': attribute type 1 has an invalid length.
[  202.640271][T12494] 8021q: adding VLAN 0 to HW filter on device bond6
[  202.670021][T12499] sctp: [Deprecated]: syz.3.2146 (pid 12499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.670021][T12499] Use struct sctp_sack_info instead
[  202.764215][T12506] bond0: (slave bond_slave_1): Releasing backup interface
[  202.882469][T12510] IPv6: addrconf: prefix option has invalid lifetime
[  203.013630][T12514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.020813][T12514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.025087][T12514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  203.111309][T12514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.117372][T12514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.121789][T12514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  203.191535][T12514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.195704][T12514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.200686][T12514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  203.273469][T12514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  203.278184][T12525] __nla_validate_parse: 19 callbacks suppressed
[  203.278201][T12525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2156'.
[  203.278922][T12514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.289149][T12514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  203.427165][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  203.437074][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  203.440380][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  203.467857][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  203.471141][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  203.495527][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  203.522881][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  203.526470][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  203.531731][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  203.560725][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  203.568008][T12532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2158'.
[  203.568140][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  203.575109][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  203.577384][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  203.720846][T12540] netlink: 'syz.2.2162': attribute type 1 has an invalid length.
[  203.762047][T12540] 8021q: adding VLAN 0 to HW filter on device bond7
[  203.775663][T12544] IPv6: addrconf: prefix option has invalid lifetime
[  203.788783][T12540] 8021q: adding VLAN 0 to HW filter on device bond7
[  203.791803][T12540] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  203.801186][T12540] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  203.842903][T12545] bond7: (slave bridge5): Enslaving as an active interface with a down link
[  204.002374][T12549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2170'.
[  204.042771][T12548] sctp: [Deprecated]: syz.2.2163 (pid 12548) Use of struct sctp_assoc_value in delayed_ack socket option.
[  204.042771][T12548] Use struct sctp_sack_info instead
[  204.725356][T12582] IPv6: addrconf: prefix option has invalid lifetime
[  205.414375][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  205.424664][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'.
[  205.430268][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'.
[  206.018563][T12625] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2192'.
[  206.074831][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'.
[  206.179089][T12634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'.
[  206.403719][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2196'.
[  206.443382][T12642] pim6reg: entered allmulticast mode
[  207.030260][T12645] delete_channel: no stack
[  207.093602][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d91b000: rx timeout, send abort
[  207.098369][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810d91b400: rx timeout, send abort
[  207.101697][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d91b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  207.106870][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810d91b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  207.585994][T12689] IPv6: sit1: Disabled Multicast RS
[  207.589589][T12689] sit1: entered allmulticast mode
[  207.797899][T12704] netlink: 'syz.2.2223': attribute type 11 has an invalid length.
[  208.073582][T12726] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[  208.124412][T12725] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  208.129889][T12725] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  208.520557][T12754] netlink: 'syz.2.2240': attribute type 9 has an invalid length.
[  208.727546][T12762] netlink: 'syz.3.2244': attribute type 1 has an invalid length.
[  208.767887][T12762] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  208.772177][T12762] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  208.815793][T12765] gretap1: entered promiscuous mode
[  208.820869][T12765] bond3: (slave gretap1): making interface the new active one
[  208.823838][T12765] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  208.893387][T12769] openvswitch: netlink: Message has 20 unknown bytes.
[  208.896239][T12769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.101800][T12784] __nla_validate_parse: 6 callbacks suppressed
[  209.101810][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'.
[  209.172193][T12781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2251'.
[  209.220582][T12793] block nbd3: Unsupported socket: shutdown callout must be supported.
[  209.986057][   T61] block nbd1: Possible stuck request ffff888021368000: control (read@0,4096B). Runtime 30 seconds
[  210.979076][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'.
[  211.011497][T12823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2266'.
[  211.153609][T12826] macsec3: entered promiscuous mode
[  211.155305][T12826] macsec3: entered allmulticast mode
[  211.380076][T12858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2277'.
[  211.434581][T12862] syzkaller1: entered promiscuous mode
[  211.436556][T12862] syzkaller1: entered allmulticast mode
[  211.571386][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'.
[  211.638537][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2285'.
[  211.643714][T12877] netlink: 'syz.3.2286': attribute type 1 has an invalid length.
[  211.650154][T12877] netlink: 'syz.3.2286': attribute type 1 has an invalid length.
[  211.706322][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'.
[  211.719699][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2287'.
[  211.943506][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2292'.
[  212.073243][T12905] netlink: 'syz.3.2297': attribute type 1 has an invalid length.
[  212.184105][T12908] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  212.286305][T12911] macvlan5: entered promiscuous mode
[  212.290041][T12911] macvlan5: entered allmulticast mode
[  212.297995][T12911] bond8: (slave macvlan5): Opening slave failed
[  212.320130][T12910] macvlan5: entered promiscuous mode
[  212.324307][T12910] macvlan5: entered allmulticast mode
[  212.328187][T12910] bond8: (slave macvlan5): Opening slave failed
[  212.371849][T12916] netlink: 'syz.3.2300': attribute type 1 has an invalid length.
[  212.374981][T12916] NCSI netlink: No device for ifindex 813332851
[  212.643293][T12932] tun0: tun_chr_ioctl cmd 2147767520
[  212.729335][T12935] hsr0 speed is unknown, defaulting to 1000
[  212.735087][T12935] lo speed is unknown, defaulting to 1000
[  213.574816][T12951] netlink: 'syz.2.2311': attribute type 4 has an invalid length.
[  213.581226][T12951] netlink: 'syz.2.2311': attribute type 4 has an invalid length.
[  213.716455][T12962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.080947][T12998] macsec1: entered promiscuous mode
[  214.082940][T12998] macsec1: entered allmulticast mode
[  214.084630][T12998] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  214.175888][T13007] __nla_validate_parse: 11 callbacks suppressed
[  214.175899][T13007] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2330'.
[  214.502457][T13036] netlink: 'syz.1.2341': attribute type 12 has an invalid length.
[  214.506133][T13036] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2341'.
[  214.560392][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'.
[  214.566328][T13039] netlink: 'syz.1.2343': attribute type 6 has an invalid length.
[  214.623805][T13044] netlink: 'syz.3.2346': attribute type 1 has an invalid length.
[  214.652558][T13044] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.673931][T13044] 8021q: adding VLAN 0 to HW filter on device bond4
[  214.676418][T13044] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  214.682227][T13044] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  214.694251][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2347'.
[  214.700871][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2347'.
[  214.736692][T13052] bond4: (slave bridge4): Enslaving as an active interface with a down link
[  214.782863][T13053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2347'.
[  214.783074][ T5863] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  215.895955][T13087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2359'.
[  215.902544][T13084] batadv0: left promiscuous mode
[  215.905119][T13084] batadv0: entered promiscuous mode
[  215.909502][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.050073][T13096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.053558][T13096] syzkaller0: entered promiscuous mode
[  216.055889][T13096] syzkaller0: entered allmulticast mode
[  216.103061][T13096] tipc: Resetting bearer <eth:syzkaller0>
[  216.111722][T13095] tipc: Resetting bearer <eth:syzkaller0>
[  216.127181][T13095] tipc: Disabling bearer <eth:syzkaller0>
[  216.292257][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  216.300184][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'.
[  216.557948][T13113] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  218.160760][T13143] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2376'.
[  218.289600][T13150] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  218.631610][T13185] IPv6: addrconf: prefix option has invalid lifetime
[  219.353826][T13216] __nla_validate_parse: 3 callbacks suppressed
[  219.353839][T13216] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2396'.
[  219.929669][T13259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2408'.
[  220.134906][T13277] nbd: must specify a device to reconfigure
[  220.163067][T13281] netlink: 'syz.2.2417': attribute type 29 has an invalid length.
[  220.170754][T13281] netlink: 'syz.2.2417': attribute type 29 has an invalid length.
[  220.175461][T13281] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2417'.
[  220.183531][T13281] unsupported nla_type 58
[  220.427111][T13296] block nbd3: server does not support multiple connections per device.
[  220.431373][T13296] block nbd3: shutting down sockets
[  220.602544][T13313] netlink: 'syz.2.2426': attribute type 5 has an invalid length.
[  220.605762][T13313] netlink: 'syz.2.2426': attribute type 5 has an invalid length.
[  220.612701][   T33] audit: type=1800 audit(1755193981.615:2): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2427" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4101 res=0 errno=0
[  220.687684][T13321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2429'.
[  220.759831][T13325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'.
[  220.775472][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2431'.
[  220.783868][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2431'.
[  220.972675][T13340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'.
[  220.978974][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'.
[  221.025202][T13349] netlink: 'syz.1.2437': attribute type 2 has an invalid length.
[  221.026241][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2437'.
[  221.051967][T13350] bond6: entered promiscuous mode
[  221.054506][T13350] 8021q: adding VLAN 0 to HW filter on device bond6
[  221.193374][T13350] bond6 (unregistering): Released all slaves
[  222.572345][T13429] team0: left promiscuous mode
[  222.574435][T13429] team_slave_0: left promiscuous mode
[  222.591025][T13429] team_slave_1: left promiscuous mode
[  222.594129][T13429] batadv0: left promiscuous mode
[  222.606270][T13429] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  222.619399][T13429] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  222.626451][T13429] bond2: left promiscuous mode
[  222.630895][T13429] bond2: left allmulticast mode
[  222.634174][T13429] bond4: left promiscuous mode
[  222.636334][T13429] bridge2: left promiscuous mode
[  222.659884][T13429] geneve2: left promiscuous mode
[  222.690762][T13429] macsec3: left promiscuous mode
[  222.692882][T13429] macsec3: left allmulticast mode
[  222.695757][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.707692][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.711892][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.716075][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.759608][T13440] IPv6: addrconf: prefix option has invalid lifetime
[  222.861659][T13444] syzkaller1: entered promiscuous mode
[  222.864010][T13444] syzkaller1: entered allmulticast mode
[  223.160121][T13469] IPv6: addrconf: prefix option has invalid lifetime
[  223.365421][T13487] veth0: mtu less than device minimum
[  223.494453][T13496] syzkaller0: entered promiscuous mode
[  223.497441][T13496] syzkaller0: entered allmulticast mode
[  223.542630][T13498] syzkaller1: entered promiscuous mode
[  223.544828][T13498] syzkaller1: entered allmulticast mode
[  223.581758][T13502] openvswitch: netlink: Message has 295 unknown bytes.
[  223.756645][T13512] syzkaller0: entered promiscuous mode
[  223.760388][T13512] syzkaller0: entered allmulticast mode
[  223.889231][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.894112][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.914163][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.918756][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.582578][T13565] netlink: 'syz.2.2511': attribute type 1 has an invalid length.
[  224.622409][T13565] 8021q: adding VLAN 0 to HW filter on device bond9
[  224.655027][T13564] 8021q: adding VLAN 0 to HW filter on device bond9
[  224.661413][T13564] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  224.671726][T13564] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  224.706253][T13572] __nla_validate_parse: 13 callbacks suppressed
[  224.706271][T13572] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2512'.
[  224.714964][T13565] veth5: entered promiscuous mode
[  224.722776][T13572] gretap0: entered promiscuous mode
[  224.804279][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'.
[  224.856491][T13579] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  224.980130][T13588] macvlan0: entered allmulticast mode
[  224.982691][T13588] veth1_vlan: entered allmulticast mode
[  224.995592][T13588] team0: Port device macvlan0 added
[  225.082758][T13591] netlink: 'syz.3.2520': attribute type 1 has an invalid length.
[  225.083220][T13596] netlink: 'syz.1.2522': attribute type 11 has an invalid length.
[  225.089510][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'.
[  225.098042][T13591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'.
[  225.102643][T13596] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2522'.
[  225.106489][T13591] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  225.115452][T13591] gretap2: entered promiscuous mode
[  225.446707][T13612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.450479][T13612] syzkaller0: entered promiscuous mode
[  225.455466][T13612] syzkaller0: entered allmulticast mode
[  225.483928][T13612] tipc: Resetting bearer <eth:syzkaller0>
[  225.492586][T13611] tipc: Resetting bearer <eth:syzkaller0>
[  225.509321][T13611] tipc: Disabling bearer <eth:syzkaller0>
[  225.611594][T13622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2533'.
[  225.715503][T13628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2536'.
[  225.759650][T13628] netlink: zone id is out of range
[  225.761920][T13628] netlink: zone id is out of range
[  225.764115][T13628] netlink: zone id is out of range
[  225.766327][T13628] netlink: zone id is out of range
[  225.769941][T13628] netlink: zone id is out of range
[  225.802601][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.849940][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.853492][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.858692][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.862777][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.882365][T13633] bond6: (slave gretap1): making interface the new active one
[  225.886447][T13633] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  225.893093][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.901330][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.910035][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.933559][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  225.949894][T13632] netlink: 'syz.1.2538': attribute type 1 has an invalid length.
[  226.054665][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'.
[  226.062841][T13648] siw: device registration error -23
[  226.063254][T13647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2542'.
[  226.133369][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2544'.
[  226.165380][T13652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  227.137935][T13717] veth0_to_team: entered promiscuous mode
[  227.249235][T13724] syzkaller0: entered promiscuous mode
[  227.251488][T13724] syzkaller0: entered allmulticast mode
[  227.686062][T13758] vlan3: entered allmulticast mode
[  229.311066][T13835] k*]: entered promiscuous mode
[  229.759128][T13869] 8021q: adding VLAN 0 to HW filter on device team0
[  229.765899][T13869] net_ratelimit: 314 callbacks suppressed
[  229.765907][T13869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.784997][T13875] __nla_validate_parse: 17 callbacks suppressed
[  229.785019][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2624'.
[  229.818003][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.022248][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2627'.
[  230.025890][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2627'.
[  230.031501][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'.
[  230.035156][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'.
[  230.148125][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.323139][T13903] xt_policy: too many policy elements
[  230.406626][T13905] vxcan0: tx address claim with different name
[  230.521154][T13916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'.
[  230.767559][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  230.790074][T13944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.792744][T13944] syzkaller0: entered promiscuous mode
[  230.794791][T13944] syzkaller0: entered allmulticast mode
[  230.869651][T13943] tipc: Resetting bearer <eth:syzkaller0>
[  230.907552][T13943] tipc: Disabling bearer <eth:syzkaller0>
[  231.034026][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'.
[  231.039714][T13958] netlink: 4660 bytes leftover after parsing attributes in process `syz.2.2655'.
[  231.043627][T13967] validate_nla: 66 callbacks suppressed
[  231.043637][T13967] netlink: 'syz.3.2657': attribute type 10 has an invalid length.
[  231.061803][T13972] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  231.070385][T13972] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  231.073549][T13972] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  231.101618][T13975] IPv6: addrconf: prefix option has invalid lifetime
[  231.123209][T13977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2660'.
[  231.170902][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.178929][ T5863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.297174][T13996] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2662'.
[  231.374408][T14001] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  231.379755][T14001] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  231.437290][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.945956][T14015] netlink: 'syz.2.2666': attribute type 1 has an invalid length.
[  231.954860][T14015] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  232.272316][T14039] bond5: entered promiscuous mode
[  232.278396][T14039] bond5: entered allmulticast mode
[  232.280990][T14039] 8021q: adding VLAN 0 to HW filter on device bond5
[  232.297886][T14045] netlink: 'syz.1.2678': attribute type 1 has an invalid length.
[  232.300978][T14045] netlink: 'syz.1.2678': attribute type 1 has an invalid length.
[  232.358432][T14050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.432071][T14049] bridge10: port 1(veth11) entered blocking state
[  232.437395][T14049] bridge10: port 1(veth11) entered disabled state
[  232.440452][T14049] veth11: entered allmulticast mode
[  232.444271][T14049] veth11: entered promiscuous mode
[  232.472306][T14055] bridge10: port 2(veth0_to_bond) entered blocking state
[  232.475233][T14055] bridge10: port 2(veth0_to_bond) entered disabled state
[  232.481352][T14055] veth0_to_bond: entered allmulticast mode
[  232.486166][T14055] veth0_to_bond: entered promiscuous mode
[  232.551813][T14054] tipc: Can't bind to reserved service type 0
[  234.136752][T14103] IPv6: addrconf: prefix option has invalid lifetime
[  234.368333][T14126] tap0: tun_chr_ioctl cmd 1074025677
[  234.370276][T14126] tap0: linktype set to 780
[  234.509537][T14139] syzkaller0: entered promiscuous mode
[  234.511579][T14139] syzkaller0: entered allmulticast mode
[  235.167232][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  236.527128][T14176] netlink: 'syz.1.2718': attribute type 3 has an invalid length.
[  236.780685][T14202] netlink: 'syz.1.2725': attribute type 10 has an invalid length.
[  236.789887][T14202] batman_adv: batadv0: Adding interface: netdevsim0
[  236.792089][T14202] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.801839][T14202] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  236.825731][T14205] __nla_validate_parse: 11 callbacks suppressed
[  236.825743][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'.
[  236.896069][T14214] IPv6: addrconf: prefix option has invalid lifetime
[  236.949520][T14218] netem: incorrect ge model size
[  236.951582][T14218] netem: change failed
[  237.110231][T14233] IPv6: addrconf: prefix option has invalid lifetime
[  237.279568][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'.
[  237.344297][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2742'.
[  237.354052][T14246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2742'.
[  237.368554][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'.
[  237.370695][T14246] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2742'.
[  237.383470][T14246] batadv1: entered promiscuous mode
[  237.385674][T14246] batadv1: entered allmulticast mode
[  237.482053][T14256] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2745'.
[  237.485837][T14256] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  237.493286][T14246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2742'.
[  237.540435][T14260] IPv6: addrconf: prefix option has invalid lifetime
[  237.541620][T14259] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2747'.
[  237.950006][T14278] bond0: option primary_reselect: invalid value (17)
[  237.986114][T14280] IPv6: addrconf: prefix option has invalid lifetime
[  238.311225][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'.
[  238.314985][T14301] openvswitch: netlink: Unknown nsh attribute 0
[  238.318655][T14301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.988554][T14359] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  238.996511][T14360] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  239.028799][T14363] IPv6: addrconf: prefix option has invalid lifetime
[  239.169808][T14383] netlink: 'syz.2.2792': attribute type 13 has an invalid length.
[  239.252011][T14390] sctp: [Deprecated]: syz.3.2796 (pid 14390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.252011][T14390] Use struct sctp_sack_info instead
[  239.847915][T14397] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  239.862232][T14397] syzkaller0: entered promiscuous mode
[  239.864456][T14397] syzkaller0: entered allmulticast mode
[  240.066986][   T61] block nbd1: Possible stuck request ffff888021368000: control (read@0,4096B). Runtime 60 seconds
[  240.931274][ T5295] udevd[5295]: worker [10947] /devices/virtual/block/nbd1 is taking a long time
[  241.097503][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  241.104920][ T5848] Bluetooth: hci2: command 0x040f tx timeout
[  241.489215][T14426] IPv6: addrconf: prefix option has invalid lifetime
[  241.540206][T14428] gtp0: entered promiscuous mode
[  241.788245][T14450] IPv6: addrconf: prefix option has invalid lifetime
[  241.845139][T14457] __nla_validate_parse: 9 callbacks suppressed
[  241.845158][T14457] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2825'.
[  241.959003][T14471] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  241.969778][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'.
[  242.956197][T14499] IPv6: addrconf: prefix option has invalid lifetime
[  243.247120][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  243.264544][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2849'.
[  243.321642][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[  243.325275][T14530] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2851'.
[  243.330735][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[  243.351969][T14530] netlink: 'syz.1.2851': attribute type 7 has an invalid length.
[  243.354658][T14530] netlink: 'syz.1.2851': attribute type 8 has an invalid length.
[  243.359675][T14531] netlink: 'syz.1.2851': attribute type 7 has an invalid length.
[  243.362267][T14531] netlink: 'syz.1.2851': attribute type 8 has an invalid length.
[  243.366087][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'.
[  243.371626][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2852'.
[  243.380586][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[  243.385203][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2851'.
[  243.395548][T14530] netlink: 'syz.1.2851': attribute type 12 has an invalid length.
[  243.401405][T14530] netlink: 'syz.1.2851': attribute type 14 has an invalid length.
[  244.189448][T14599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.193511][T14599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.363463][T14609] bridge6: the hash_elasticity option has been deprecated and is always 16
[  245.363162][T14638] netlink: 'syz.1.2891': attribute type 13 has an invalid length.
[  245.428584][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  245.645182][T14652] IPv6: addrconf: prefix option has invalid lifetime
[  245.837622][T14670] IPv6: addrconf: prefix option has invalid lifetime
[  245.980881][T14680] openvswitch: netlink: Message has 4 unknown bytes.
[  246.022284][T14684] IPv6: addrconf: prefix option has invalid lifetime
[  246.027985][ T5904] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  246.050861][T14680] gretap2: entered promiscuous mode
[  246.083339][T14689] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  246.293064][T14712] IPv6: addrconf: prefix option has invalid lifetime
[  246.305424][T14711] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.402110][T14719] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  246.590643][T14738] IPv6: addrconf: prefix option has invalid lifetime
[  246.864869][T14767] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  247.000456][T14776] __nla_validate_parse: 10 callbacks suppressed
[  247.000469][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'.
[  247.009778][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'.
[  247.014423][T14783] IPv6: addrconf: prefix option has invalid lifetime
[  247.077672][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'.
[  247.363334][T14815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2958'.
[  247.424932][T14818] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2958'.
[  247.628495][T14837] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2963'.
[  247.696029][T14841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2967'.
[  247.780679][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2972'.
[  247.794305][T14854] bridge7: the hash_elasticity option has been deprecated and is always 16
[  247.992762][T14878] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'.
[  248.175450][T14887] syzkaller0: entered promiscuous mode
[  248.180061][T14887] syzkaller0: entered allmulticast mode
[  248.244471][T14893] hsr0 speed is unknown, defaulting to 1000
[  248.249424][T14893] lo speed is unknown, defaulting to 1000
[  250.020212][T14906] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2986'.
[  250.142443][T14913] xt_socket: unknown flags 0x50
[  250.190007][T14919] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  250.395027][T14932] bridge0: port 3(netdevsim2) entered blocking state
[  250.398895][T14932] bridge0: port 3(netdevsim2) entered disabled state
[  250.401863][T14932] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  250.407594][T14932] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  250.412813][T14932] bridge0: port 3(netdevsim2) entered blocking state
[  250.415615][T14932] bridge0: port 3(netdevsim2) entered forwarding state
[  250.510554][T14934] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.736150][T14951] net_ratelimit: 1 callbacks suppressed
[  250.736166][T14951] IPv6: addrconf: prefix option has invalid lifetime
[  250.810741][T14954] hsr0 speed is unknown, defaulting to 1000
[  250.814650][T14954] lo speed is unknown, defaulting to 1000
[  250.931210][T14961] netlink: 'syz.2.3007': attribute type 2 has an invalid length.
[  250.940710][T14961] netlink: 'syz.2.3007': attribute type 1 has an invalid length.
[  251.440697][T14976] IPv6: addrconf: prefix option has invalid lifetime
[  251.911149][T15014] netlink: 'syz.3.3023': attribute type 4 has an invalid length.
[  252.280252][T15025] syzkaller1: entered promiscuous mode
[  252.282240][T15025] syzkaller1: entered allmulticast mode
[  252.435288][T15051] __nla_validate_parse: 6 callbacks suppressed
[  252.435302][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'.
[  252.443516][T15051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.492359][T15051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.583606][T15057] IPv6: addrconf: prefix option has invalid lifetime
[  252.770503][T15070] netlink: 'syz.2.3039': attribute type 1 has an invalid length.
[  252.773378][T15070] netlink: 'syz.2.3039': attribute type 2 has an invalid length.
[  252.826553][T15077] netlink: 'syz.2.3042': attribute type 15 has an invalid length.
[  252.830823][T15072] netlink: 'syz.3.3041': attribute type 21 has an invalid length.
[  252.834713][T15072] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3041'.
[  252.839617][T15072] netlink: 'syz.3.3041': attribute type 4 has an invalid length.
[  252.842294][T15072] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3041'.
[  252.861603][   T33] audit: type=1800 audit(1755194013.855:3): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3041" name="memory.events" dev="tmpfs" ino=2269 res=0 errno=0
[  252.965310][T15091] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3047'.
[  252.979291][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3048'.
[  253.098989][T15107] geneve4: entered promiscuous mode
[  253.150465][T15114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3055'.
[  253.263552][T15127] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3060'.
[  253.298425][T15129] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3059'.
[  253.483015][T15151] IPv6: addrconf: prefix option has invalid lifetime
[  253.566209][T15159] wireguard0: entered promiscuous mode
[  253.570547][T15159] wireguard0: entered allmulticast mode
[  253.590017][T15163] bond1: (slave erspan0): Releasing active interface
[  253.592403][T15163] ip6gretap1: entered promiscuous mode
[  253.602323][T15163] team0: Port device team_slave_0 removed
[  253.606055][T15163] team0: Port device team_slave_1 removed
[  253.614057][T15163] batman_adv: batadv0: Removing interface: virt_wifi0
[  253.620422][T15163] veth1_vlan: left allmulticast mode
[  253.624607][T15163] team0: Port device macvlan0 removed
[  253.627095][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.633113][T15163] bond1: (slave ip6gretap1): Releasing active interface
[  253.635593][T15163] bond1: (slave ip6gretap1): the permanent HWaddr of slave - de:07:8a:c0:ba:d4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  253.644075][T15163] ip6gretap1: left promiscuous mode
[  253.652069][T15163] bond1: (slave veth3): Releasing active interface
[  253.655439][T15163] batman_adv: batadv0: Removing interface: gretap1
[  253.660940][T15163] bond4: (slave bridge2): Releasing backup interface
[  253.664427][T15163] bond7: (slave bridge5): Releasing active interface
[  253.669346][T15164] team0: Mode changed to "broadcast"
[  253.684802][T15163] vlan0: entered promiscuous mode
[  253.688978][T15163] tipc: Enabled bearer <eth:team0>, priority 0
[  253.797851][   T96] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.822988][ T5863] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  253.887061][T15181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3076'.
[  254.014130][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'.
[  254.287164][ T5848] Bluetooth: hci1: command 0x080f tx timeout
[  254.574452][T15168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  254.972730][T15229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.005662][T15229] tipc: Disabling bearer <eth:syzkaller0>
[  255.129508][T15234] trusted_key: syz.3.3093 sent an empty control message without MSG_MORE.
[  255.259538][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.262491][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.774258][T15283] netlink: 'syz.2.3109': attribute type 1 has an invalid length.
[  255.777917][T15283] netlink: 'syz.2.3109': attribute type 10 has an invalid length.
[  256.869699][T15321] netlink: 'syz.3.3113': attribute type 1 has an invalid length.
[  257.102739][T15329] hsr0 speed is unknown, defaulting to 1000
[  257.109218][T15329] lo speed is unknown, defaulting to 1000
[  257.162217][T15337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.167708][T15337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.171023][T15337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.233252][T15337] bridge0: port 3(netdevsim2) entered disabled state
[  257.264146][T15337] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode
[  257.271626][T15337] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode
[  257.277004][T15337] bridge0: port 3(netdevsim2) entered disabled state
[  257.286708][T15337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.293919][T15337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.299241][T15337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.382892][T15337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.387844][T15337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.392266][T15337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.514779][T15337] batman_adv: batadv0: Removing interface: netdevsim0
[  257.528437][T15337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  257.541298][T15337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.545624][T15337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  257.763194][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.766093][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  257.771579][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  257.812083][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.816559][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  257.820472][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  257.853153][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.859909][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  257.865983][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  257.882349][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.885156][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  257.889341][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  257.894187][T15361] netlink: 'syz.2.3134': attribute type 3 has an invalid length.
[  257.903533][T15361] netlink: 'syz.2.3134': attribute type 1 has an invalid length.
[  257.911408][T15361] __nla_validate_parse: 8 callbacks suppressed
[  257.911423][T15361] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3134'.
[  257.927407][T15361] NCSI netlink: No device for ifindex 0
[  257.949250][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'.
[  257.993034][T15368] IPv6: addrconf: prefix option has invalid lifetime
[  258.004828][T15370] tls_set_device_offload_rx: netdev not found
[  258.063942][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3139'.
[  258.243810][T15395] IPv6: addrconf: prefix option has invalid lifetime
[  258.345746][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3149'.
[  258.385467][T15407] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  258.480645][T15416] IPv6: addrconf: prefix option has invalid lifetime
[  258.504844][T15419] netlink: 'syz.2.3156': attribute type 1 has an invalid length.
[  258.515259][T15421] netlink: 'syz.3.3157': attribute type 1 has an invalid length.
[  258.518809][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'.
[  258.521264][T15419] 8021q: adding VLAN 0 to HW filter on device bond11
[  258.608520][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  258.641413][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'.
[  258.667366][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3161'.
[  258.747891][T15441] IPv6: addrconf: prefix option has invalid lifetime
[  259.059021][T15464] IPv6: addrconf: prefix option has invalid lifetime
[  259.129702][T15466] syzkaller0: entered promiscuous mode
[  259.131592][T15466] syzkaller0: entered allmulticast mode
[  259.190919][T15476] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.3176'.
[  259.195657][T15477] netlink: 'syz.1.3176': attribute type 83 has an invalid length.
[  259.198933][T15476] netlink: 'syz.1.3176': attribute type 83 has an invalid length.
[  259.529099][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  260.715772][T15506] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3186'.
[  260.855892][T15520] netlink: 'syz.3.3193': attribute type 3 has an invalid length.
[  260.922457][T15524] hsr0 speed is unknown, defaulting to 1000
[  260.926528][T15524] lo speed is unknown, defaulting to 1000
[  260.972894][T15527] hsr0 speed is unknown, defaulting to 1000
[  261.110608][T15527] lo speed is unknown, defaulting to 1000
[  261.839020][T15551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.842346][T15551] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.456544][T15567] IPv6: addrconf: prefix option has invalid lifetime
[  262.552593][T15577] netlink: 'syz.3.3215': attribute type 3 has an invalid length.
[  262.615013][T15583] netlink: 'syz.3.3217': attribute type 12 has an invalid length.
[  262.619854][T15581] netlink: 'syz.3.3217': attribute type 12 has an invalid length.
[  262.623223][T15581] netlink: 'syz.3.3217': attribute type 14 has an invalid length.
[  262.633608][T15583] netlink: 'syz.3.3217': attribute type 14 has an invalid length.
[  262.646821][T15585] IPv6: addrconf: prefix option has invalid lifetime
[  262.824521][T15604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  262.831010][T15605] tipc: Resetting bearer <eth:team0>
[  262.836146][T15604] netlink: 'syz.2.3227': attribute type 10 has an invalid length.
[  262.844399][T15605] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.850820][T15605] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.851152][T15608] IPv6: addrconf: prefix option has invalid lifetime
[  262.857389][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.905322][T15610] tc_dump_action: action bad kind
[  262.913314][  T794] hid-generic 0005:16BF:5505.0002: item fetching failed at offset 0/4
[  262.916221][  T794] hid-generic 0005:16BF:5505.0002: probe with driver hid-generic failed with error -22
[  262.968403][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  263.081355][T15627] __nla_validate_parse: 13 callbacks suppressed
[  263.081368][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3236'.
[  263.086682][T15627] tc_dump_action: action bad kind
[  263.178690][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3240'.
[  263.192545][T15637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'.
[  263.267586][T15642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.353586][T15648] netlink: 'syz.3.3244': attribute type 3 has an invalid length.
[  263.356609][T15648] netlink: 'syz.3.3244': attribute type 3 has an invalid length.
[  263.401348][T15650] bond0: entered promiscuous mode
[  263.403363][T15650] geneve2: entered promiscuous mode
[  263.406484][T15650] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  263.410480][T15650] hsr1: entered promiscuous mode
[  263.413637][T15650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3246'.
[  263.475636][T15652] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3247'.
[  263.525281][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'.
[  263.642120][T15663] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  263.753473][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3251'.
[  263.758845][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'.
[  264.024000][T15672] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3252'.
[  264.104391][T15681] IPv6: addrconf: prefix option has invalid lifetime
[  264.148490][T15683] syzkaller1: entered promiscuous mode
[  264.151069][T15683] syzkaller1: entered allmulticast mode
[  264.157870][T15683] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3255'.
[  264.626000][T15702] netlink: 'syz.1.3262': attribute type 9 has an invalid length.
[  264.859768][T15724] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  265.127297][T15743] IPv6: addrconf: prefix option has invalid lifetime
[  265.501023][T15769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.575770][T15777] IPv6: addrconf: prefix option has invalid lifetime
[  265.925048][T15789] netlink: 'syz.2.3286': attribute type 13 has an invalid length.
[  265.929663][T15789] tipc: Resetting bearer <eth:team0>
[  265.957539][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  266.511107][T15823] ------------[ cut here ]------------
[  266.513196][T15823] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  266.517470][T15823] WARNING: CPU: 1 PID: 15823 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.520772][T15823] Modules linked in:
[  266.523191][T15823] CPU: 1 UID: 0 PID: 15823 Comm: syz.1.3296 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  266.528425][T15823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.531623][T15823] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.534053][T15823] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 76 55 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 b6 d8 f6 90 0f 0b 90 42 80 7c 3d
[  266.542026][T15823] RSP: 0018:ffffc90002baf2f0 EFLAGS: 00010246
[  266.544253][T15823] RAX: 87bf948e7e6b2900 RBX: 0000000000000000 RCX: ffff888020809cc0
[  266.546671][T15823] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  266.549231][T15823] RBP: ffff8880369f9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[  266.551648][T15823] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff8880369fa9d0
[  266.554094][T15823] R13: ffff8880369f8d80 R14: 1ffff11006d3f2e5 R15: dffffc0000000000
[  266.556548][T15823] FS:  00007f68771536c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  266.559509][T15823] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  266.561578][T15823] CR2: 00007f6876374c40 CR3: 00000000421e0000 CR4: 00000000000006f0
[  266.564058][T15823] Call Trace:
[  266.565122][T15823]  <TASK>
[  266.566138][T15823]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  266.568122][T15823]  __ieee80211_link_release_channel+0x33b/0x4a0
[  266.570063][T15823]  ieee80211_if_change_type+0x14c/0x990
[  266.571773][T15823]  ieee80211_change_iface+0xd5/0x510
[  266.573391][T15823]  cfg80211_change_iface+0x795/0xef0
[  266.575383][T15823]  nl80211_set_interface+0x773/0xaa0
[  266.577366][T15823]  ? __pfx_nl80211_set_interface+0x10/0x10
[  266.579210][T15823]  ? nl80211_pre_doit+0x4fb/0x930
[  266.580797][T15823]  genl_family_rcv_msg_doit+0x215/0x300
[  266.582515][T15823]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  266.584414][T15823]  ? bpf_lsm_capable+0x9/0x20
[  266.585968][T15823]  ? security_capable+0x7e/0x2e0
[  266.587712][T15823]  genl_rcv_msg+0x60e/0x790
[  266.589175][T15823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.590726][T15823]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  266.592375][T15823]  ? __pfx_nl80211_set_interface+0x10/0x10
[  266.594102][T15823]  ? __pfx_nl80211_post_doit+0x10/0x10
[  266.595910][T15823]  ? __asan_memcpy+0x40/0x70
[  266.597563][T15823]  ? __pfx_ref_tracker_free+0x10/0x10
[  266.599243][T15823]  netlink_rcv_skb+0x208/0x470
[  266.600769][T15823]  ? __lock_acquire+0xab9/0xd20
[  266.602371][T15823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.603988][T15823]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.605836][T15823]  ? down_read+0x1ad/0x2e0
[  266.607663][T15823]  genl_rcv+0x28/0x40
[  266.608957][T15823]  netlink_unicast+0x82f/0x9e0
[  266.610458][T15823]  ? __pfx_netlink_unicast+0x10/0x10
[  266.612158][T15823]  ? netlink_sendmsg+0x642/0xb30
[  266.613714][T15823]  ? skb_put+0x11b/0x210
[  266.615146][T15823]  netlink_sendmsg+0x805/0xb30
[  266.616858][T15823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.618653][T15823]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.620341][T15823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.622036][T15823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.623824][T15823]  __sock_sendmsg+0x21c/0x270
[  266.625493][T15823]  __sys_sendto+0x3bd/0x520
[  266.627103][T15823]  ? __pfx___sys_sendto+0x10/0x10
[  266.628766][T15823]  ? fput_close_sync+0x119/0x200
[  266.630312][T15823]  ? __pfx_fput_close_sync+0x10/0x10
[  266.631953][T15823]  __x64_sys_sendto+0xde/0x100
[  266.633494][T15823]  do_syscall_64+0xfa/0x3b0
[  266.635011][T15823]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.636701][T15823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.638765][T15823]  ? exc_page_fault+0x9f/0xf0
[  266.640300][T15823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.642129][T15823] RIP: 0033:0x7f6876390a7c
[  266.643574][T15823] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  266.650149][T15823] RSP: 002b:00007f6877151e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  266.652823][T15823] RAX: ffffffffffffffda RBX: 00007f6877151fa0 RCX: 00007f6876390a7c
[  266.655527][T15823] RDX: 0000000000000024 RSI: 00007f6877151ff0 RDI: 0000000000000007
[  266.658222][T15823] RBP: 0000000000000000 R08: 00007f6877151e74 R09: 000000000000000c
[  266.660765][T15823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007
[  266.663272][T15823] R13: 0000000000000000 R14: 00007f6877151ff0 R15: 0000000000000000
[  266.665957][T15823]  </TASK>
[  266.667077][T15823] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  266.669422][T15823] CPU: 1 UID: 0 PID: 15823 Comm: syz.1.3296 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  266.673262][T15823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.676713][T15823] Call Trace:
[  266.677843][T15823]  <TASK>
[  266.679013][T15823]  dump_stack_lvl+0x99/0x250
[  266.680864][T15823]  ? __asan_memcpy+0x40/0x70
[  266.682479][T15823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  266.684161][T15823]  ? __pfx__printk+0x10/0x10
[  266.685707][T15823]  vpanic+0x281/0x750
[  266.686945][T15823]  ? __pfx__printk+0x10/0x10
[  266.688825][T15823]  ? __pfx_vpanic+0x10/0x10
[  266.690662][T15823]  ? is_bpf_text_address+0x292/0x2b0
[  266.692846][T15823]  panic+0xb9/0xc0
[  266.694374][T15823]  ? __pfx_panic+0x10/0x10
[  266.696228][T15823]  __warn+0x31b/0x4b0
[  266.697853][T15823]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.700160][T15823]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.702472][T15823]  report_bug+0x2be/0x4f0
[  266.704241][T15823]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.706661][T15823]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.708938][T15823]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  266.710790][T15823]  handle_bug+0x84/0x160
[  266.712131][T15823]  exc_invalid_op+0x1a/0x50
[  266.713581][T15823]  asm_exc_invalid_op+0x1a/0x20
[  266.715153][T15823] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  266.717129][T15823] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 c0 15 b0 8c e8 76 55 9c f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 b6 d8 f6 90 0f 0b 90 42 80 7c 3d
[  266.723484][T15823] RSP: 0018:ffffc90002baf2f0 EFLAGS: 00010246
[  266.725441][T15823] RAX: 87bf948e7e6b2900 RBX: 0000000000000000 RCX: ffff888020809cc0
[  266.727953][T15823] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  266.730437][T15823] RBP: ffff8880369f9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[  266.732894][T15823] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff8880369fa9d0
[  266.735358][T15823] R13: ffff8880369f8d80 R14: 1ffff11006d3f2e5 R15: dffffc0000000000
[  266.737829][T15823]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  266.739693][T15823]  __ieee80211_link_release_channel+0x33b/0x4a0
[  266.741636][T15823]  ieee80211_if_change_type+0x14c/0x990
[  266.743461][T15823]  ieee80211_change_iface+0xd5/0x510
[  266.745237][T15823]  cfg80211_change_iface+0x795/0xef0
[  266.746921][T15823]  nl80211_set_interface+0x773/0xaa0
[  266.748585][T15823]  ? __pfx_nl80211_set_interface+0x10/0x10
[  266.750440][T15823]  ? nl80211_pre_doit+0x4fb/0x930
[  266.752043][T15823]  genl_family_rcv_msg_doit+0x215/0x300
[  266.753795][T15823]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  266.756319][T15823]  ? bpf_lsm_capable+0x9/0x20
[  266.757932][T15823]  ? security_capable+0x7e/0x2e0
[  266.759898][T15823]  genl_rcv_msg+0x60e/0x790
[  266.761780][T15823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.763804][T15823]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  266.766087][T15823]  ? __pfx_nl80211_set_interface+0x10/0x10
[  266.768442][T15823]  ? __pfx_nl80211_post_doit+0x10/0x10
[  266.770592][T15823]  ? __asan_memcpy+0x40/0x70
[  266.772076][T15823]  ? __pfx_ref_tracker_free+0x10/0x10
[  266.773758][T15823]  netlink_rcv_skb+0x208/0x470
[  266.775447][T15823]  ? __lock_acquire+0xab9/0xd20
[  266.777009][T15823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  266.778590][T15823]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  266.780270][T15823]  ? down_read+0x1ad/0x2e0
[  266.781671][T15823]  genl_rcv+0x28/0x40
[  266.782921][T15823]  netlink_unicast+0x82f/0x9e0
[  266.784449][T15823]  ? __pfx_netlink_unicast+0x10/0x10
[  266.786549][T15823]  ? netlink_sendmsg+0x642/0xb30
[  266.788582][T15823]  ? skb_put+0x11b/0x210
[  266.790332][T15823]  netlink_sendmsg+0x805/0xb30
[  266.792163][T15823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.793842][T15823]  ? aa_sock_msg_perm+0xf1/0x1d0
[  266.795566][T15823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  266.797278][T15823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  266.799021][T15823]  __sock_sendmsg+0x21c/0x270
[  266.800529][T15823]  __sys_sendto+0x3bd/0x520
[  266.802003][T15823]  ? __pfx___sys_sendto+0x10/0x10
[  266.803694][T15823]  ? fput_close_sync+0x119/0x200
[  266.805724][T15823]  ? __pfx_fput_close_sync+0x10/0x10
[  266.807907][T15823]  __x64_sys_sendto+0xde/0x100
[  266.809844][T15823]  do_syscall_64+0xfa/0x3b0
[  266.811526][T15823]  ? lockdep_hardirqs_on+0x9c/0x150
[  266.813140][T15823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.815120][T15823]  ? exc_page_fault+0x9f/0xf0
[  266.816632][T15823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.818552][T15823] RIP: 0033:0x7f6876390a7c
[  266.819986][T15823] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  266.826722][T15823] RSP: 002b:00007f6877151e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  266.829845][T15823] RAX: ffffffffffffffda RBX: 00007f6877151fa0 RCX: 00007f6876390a7c
[  266.832942][T15823] RDX: 0000000000000024 RSI: 00007f6877151ff0 RDI: 0000000000000007
[  266.835611][T15823] RBP: 0000000000000000 R08: 00007f6877151e74 R09: 000000000000000c
[  266.838139][T15823] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007
[  266.841263][T15823] R13: 0000000000000000 R14: 00007f6877151ff0 R15: 0000000000000000
[  266.844429][T15823]  </TASK>
[  266.846328][T15823] Kernel Offset: disabled
[  266.848141][T15823] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:53:47  Registers:
info registers vcpu 0

CPU#0
RAX=5caf7dd56bffb700 RBX=ffffffff81968308 RCX=5caf7dd56bffb700 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002140 CR3=000000010d1d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f6876412e53
XMM06=0000000000000000 00007f6876412e4d XMM07=0000000000000000 00007f6876412e61
XMM08=0000000000000000 00007f6876412ee7 XMM09=0000000000000000 00007f6876412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002baea90
R8 =ffff888107720237 R9 =1ffff11020ee4046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af492c R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f68771536c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6876374c40 CR3=00000000421e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f68770ed100 00007f6876587460 XMM05=00007f6876587478 00007f68765874c0
XMM06=00007f68765874b8 00007f68765874b0 XMM07=00007f68765874a8 00007f68765874a0
XMM08=0000000000000000 00007f6876412ee7 XMM09=0000000000000000 00007f6876412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
